skysight-inc/HackerNews huggingface dataset:
Hate to break it to you, but several of those already exist

https://icannwiki.org/.apple

https://icannwiki.org/.google

...

The whole point of those "anyone can buy anything tld" felt like a scheme to force companies to buy "their" name.
Firefox's nannying isn't much less irritating (forced plugin signing, etc.)
http://e3.marco.ch/publish/autoschweiz/941_880/MOFISPW2019mi...
Thats literally the point of using a strangler pattern.

Concrete plans lead to making hard to change decisions before you need to.
That's about my experience too, having done only two classes so far. One of the largest downsides (in my experience) is never meeting/hearing from the instructors of the courses- the TAs are almost solely responsible for running the classes. I went to a large state school for undergrad, so lack of instructor facetime has not really been an issue for me. I've also found many of the udacity lectures to be so-so, but the GA tech projects really help to drill information into your brain and can be quite time-consuming.
Croatia is .hr
I suspect but not sure that a jet crashing into water would damage many of the components vs a submarine (already in water) sinking.
Live-Streaming Your Broke Self for Rent Money
Could you share those iptables rules please?
The Tesla Model 3 is very capable of long road trips, especially in the summer, with a range of 500km or more. The only exception would be if you’re driving in very remote areas with no charging infrastructure, but that almost doesn’t exist any more in Western Europe.

The Tesla Supercharger network, combined with its ability to charge on CCS charging networks like Ionity, make it uniquely suited to long distance travel.

And it will only get better over time as more, and faster, charging stations are deployed. (The Model 3 is capable of up to 250kW charging - twice the speed of what most of the current Superchargers can do).
Another tired attempt at racist/sexist humor.
If you can't trust your ISP, leaking all of your DNS traffic to another party still doesn't let you trust your ISP, but now you have to trust that other party too, hence net negative. To avoid trusting your ISP you need at least a VPN.
Mostly, yes.

https://icannwiki.org/.google
https://icannwiki.org/.microsoft
https://icannwiki.org/.apple
https://icannwiki.org/.fox
https://icannwiki.org/.walmart
https://icannwiki.org/.honda

All of these are examples of Brand TLDs (https://icannwiki.org/Brand_TLD), which can be registered as part of ICANNs New TLD program which started in 2012.

As many 'new' TLDs (such as the ones introduced in the 2000s such as .travel, .museum and .mobi), many of them are not used a lot, and many people are not familiar with them.
‘The Community Is the Heart and Soul of VeChain’ Jason Rockwood Country Manager
It used to warn you. IE6, I believe, used to say "you're about to leave a secure site", or something along those lines. But the world was different then, and HTTPS wasn't as common as it is today. I strongly suspect that that sort of warning will soon be coming back.
Probably because of HN effect again. Yes it is down.
The message of the F35 is that the US is committed to Military keynesianism.
What if this was allowed: (Please excuse non-angle brackets.)

[A HREF="http://example.com/SomeProgram.exe" ExpectedSha256="..."]Download[/A]

If clicked, the download is checked and is quietly discarded if the hash is wrong.
Dronebase Goes Thermal
http://ai./ is the canonical way to refer to this, and avoid the link directing to ai.example.com if such a host exists in the local network.
I know the author has very graciously provided the source code. I would just like to read through the book to know what kind of reasoning exists behind each of the parts in the author's own words.
This is against the new gTLD rules¹, not DNS rules. ccTLD operators are allowed to do this, gTLD operators are not.

If you want to know more, these are usually called apex records or dotless domains.

¹https://www.icann.org/news/announcement-2013-08-30-en
The European broadcast presentation is not great.

The speakers are referencing images and diagrams that are not visible on screen.

The accomplishment speaks for itself. The delivery can be improved.
Yes it should - if I'm on https://trustedsite.com and they link to http://notsotrustedsite.com/someexe.exe you are vulnerable.
We don't claim much in the region, only Guam and the Marshall Islands as I recall.

Conducting Naval operations in international waters with and at the request of our many allies in the region is something we've done since WWII.
> How is it definitely "not true" if your position is to just wait and see until April ?

"All the Tesla 3 preorders arrived [1][2] in Switzerland in one month" is of course complete nonsense. Because not only did plenty arrive in February already, but the preorders were much higher than what came in March.
Challenges encountered when building systems, and the resulting lessons learned, rarely become obsolete. The specific product that resulted from the efforts may fade, but the knowledge abstracted from the efforts does not.
Interesting that so many people see this but for me it's absolutely static.
Black Hole Picture Released from Event Horizon Telescope
It's not sold in Europe. You can buy Prius plugin hybrid, new Corolla hybrid, BMW 330e etc.
Yes, like http://ai https://news.ycombinator.com/item?id=19624728
> Im guessing its at least a double of a promised $35K USA price?

60k CHF give or take, so close to double.
“On the observation floor they have these plaques that display lists of recognized tradesmen who built the damn thing. ”

I don’t think this would happen anymore. Workers don’t get much respect these days. They are kept anonymous. The first Macs had the names of the developers somewhere. No way this would fly these days.
Years pass, we have sci-fi level technology, and the main method of distributing programs to users on Windows is still downloading .exes from random sites and being on the lookout for the browser toolbar trying to sneak by when installing. I don't know what's worse, this, or Google trying to wrestle yet another group of website owners into obedience.
Andrew Ferguson: The Joys of Reading a Print Newspaper
Ask HN: What are the best operational/tactical resources for scaling startups?
Much has been written about management techniques (OKRs etc) or business strategy (lean startup, SaaStr, etc) but there is a whole body of knowledge which exists around the actual tools and processes that need to be in place, which seems under-documented. Examples: how to do incident response, how to manage and disseminate internal knowledge, how to conduct programming interviews at scale, tops for collaborating globally/remotely, etc.
The Geopolitics of Rare Earth Elements
Stocks Get Hit When BBB-Rated Co's Try to Dodge “Junk” Downgrade
When local newspapers shrink, fewer people bother to run for mayor
.ai is allowed to do this because .ai is a ccTLD administered by the government of Anguilla.

.amazon is a gTLD covered by different rules, they are technically able to do this but it is explicitly forbidden (contractually).
U.S. Readies $11B in Tariffs on E.U
Yes, I rarely experience hypnagogia just before I fall asleep, and it seems like I can force it to happen if I focus on my eyelids. Though, paradoxically, as soon as I realize it's happening, it's gone.
Swap out the US for Britain, and it may be more clear. The US is a naval empire, like Britain was. Driving ships around the planet to maintain free flow of trade and military hardware is more or less the number one job when you're a global naval superpower.
So, the thing is, they are working to ensure that is true. If you download it from a non-secure source, it can be changed on route. What you intend to download and what you actually download are different.
Is it possible to disallow all non secure/https requests in Chrome?
It's done all the time for high-quality metal frames or vintage design frames. Two vendors:

https://replacementlensexpress.com

https://eyeglasslensdirect.com
Another reason for considering it a pointless measure is that it is from the peak of tulip mania. What was it valued at after the bust?
> my browser should warn me

I remember those dialogs in Netscape 4. They were incredibly annoying.
Thanks. That's interesting. I suspect that this works differently for different people though, just like the comments have shown how differently the visual imaginery works for people. Because I have heard people explain that they really hear that inner voice, a distinct one that could as well be (and sometimes is) of a person they know.
802.11r solves this. I’ve got it configured at my place and roaming is seamless and takes less than 100ms.
If at some point you want to feel what it's like to be that crazy, there's a chance you'll find that it's actually not that crazy at all!

When I created the current iteration of my website[1], I started out just adding some custom export formatting advice to the default ox functions. I couldn't resist add some additional functionality, though, and it takes refreshingly little work: There's one function that iterates through the Org source files and uses the built-in Org functions to query the files for tags, title, date, and so on. The result is memoised in a list, and then various other functions iterate through that list to generate index page, tag listing, and so on.

[1]: https://two-wrongs.com/
You might like subresource integrity.
I replied sub-thread, but adding here to give some more visibility to some of the issues DoH is causing and will cause:

I work at a k12 school and I am involved on many k12 IT communities.

Some schools already removed Firefox from the students computers because it was being used as a "VPN" by some elementary students to access porn - at school. Guess what this VPN was? Just DNS over HTTPS.

There is a fine line between protecting yourself from your ISP and local network operators that NEED to apply some security policies to their traffic. Even Google offers "Safe Search" for schools and libraries that removes porn content.

Unfortunately, on our school network, we also allow BYOD (students with their own laptops and ipads), so we will have to have some strict rules to block DoH, the same way we block proxies and vpns.

The only other option is going to full HTTPS MITM, forcing a root SSL cert to all computers that use our network, which is the last thing that anyone wants to do.

Summary: This may lead to more HTTPS MITM or schools forbidding BYOD AND removing Firefox from their computers.
This is what convinced me: https://www.youtube.com/watch?v=B0QRpid5_QU
Mysterious safety-tampering malware infects second critical infrastructure site
This exact mechanism is already used for linking scripts/stylesheets from third party websites.
Earned Income Tax Credit: Senate Democrats Propose Big Expansion
How to Create Your Own SSL Certificate Authority for Local HTTPS Development
In this case, the parliament and council are equally important as they both have to adopt identical versions of the proposal as per the ordinary legislative procedure.
Is it really 35k in USA? Prices in Europe include taxes.
Until you fall victim to clickjacking.
That’s a pretty interesting attack.

The short version is that you have a client and server as the same endpoint, and TLS 1.3 allows you to use the same PreSharedKey as a client and as a server. If you can be tricked by a man in the middle to be a client and a server at the same time - you would be talking to yourself using the same PSK on both ends.

This means the attacker ‘could’ cause trouble if the messages you meant to send to someone else are valid messages you could also act on like “please delete this file”.

I didn’t see where the PSK was lost anywhere. Only the situation that the message you send could be performed by you as if you had received it.

Interesting, but seemed limited in scope. I’m also not seeing where the attacker ever understands the message they echo. They would just have to hope it caused problems.
Quiet discarding might not always be possible in a reasonable timeframe. You still have to get all the bytes to sha256 the payload, and so what? Do you expect the user to waste bandwidth and wait the check out? Often bandwidth and time both have costs attached.
General Relativity is based on familiar observations, not mythical beings. It's not nearly that complex. Crystal healing and astral travel likewise don't even have a mathematical basis that is compatible with observations about reality, so there's no comparison to draw.
A pro cyclist who used a bicycle to rob banks
Main discussion here:
https://news.ycombinator.com/item?id=19624226
Is there an Optimal Constituency Algorithm that one can apply to their government to ensure less populous constituencies still get represented?
Yeah, people who think online ==== easy will not have a good time. I love OMSCS, I'm about to start HCI this summer. It's great because I have a mortgage and a career - the amount of debt to go full time would be staggering, and the cost of attending private classes would ruin my long term financial goals. Also, I just really like it.
Disjoint-set union in C++ and Swift
Likewise, we have zero evidence that there exists such a thing as atoms... if you only use direct evidence of the unaided sense, rather than indirect evidence.

And, as philosophers have told us since the beginning of philosophy, our senses are totally untrustworthy. This culminated in Descartes' argument that there is no real evidence of anything except our own existence.

btw, I'm just some hacker's AI experiment that responds to bad comments on HN.
As a PSA, CRC checks are insufficient to prevent tampering. CRC checks are designed to detect accidental corruption, not deliberate. Cryptographic hashes, provided over a secure connection (not http), are the basic minimum.

Do note that even then, there have been demonstrated exploits of package managers downloading over http, where the parsers were demonstrated to be compromised.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3462

(nice summary of the above CVE https://www.securityweek.com/code-execution-vulnerability-im...)
I can't find the name of it, but I read a book a while back that discussed just this - the author had been an extremely successful intellectual, but quit to run a motorcycle repair shop. He found that the "big" work was absolutely unrewarding due to no real tangible feedback - he never knew if he was doing well, and had no payoff, but repairing a motorcycle is something that is extremely tangible and rewarding in that you can see the results of your effort.

Edit: Found it.

https://www.amazon.ca/Shop-Class-Soulcraft-Inquiry-Value/dp/...

I see someone already mentioned his name (Matthew Crawford) below.
i am very surprised to see that their insurance rates are NOT around $5000/year. Very reasonable $2000ish/ year.
Singapore Tests Self-Driving Cars with Fake Monsoons
Will it be possible to use this data to study black hole radiation or pair production?
I'll be damned. I did not expect browser support for that to be as good as it is: https://caniuse.com/#search=column
I'm confused, at my local optician I just point out a frame I want and he either pulls my measurements from his system or re-measures me and tells me my glasses will be ready in a few days. Hell, one time I had a frame that constantly bent and they ended up just letting me pick a new frame with almost identical glass slots and he just polished off a tiny bit until the glasses fit the new slots. How does the manufacturer fit into any of that?
I recently switched from chrome being my daily browser to firefox...and the only thing that firefox is not great at is "save to pdf" (I would add some other minor printing aspects, but honestly i don't print much of anything anymore from a browser - so no impact for me). Besides "save to pdf"/printing, i have no use/need for going back to chrome. I encourage you to try out firefox and see if you have an equally positive experience.
> $ man 5 exe
man: No entry for exe in section 5 of the manual.

Looks like I'm safe.

Though seriously, I don't see how this is going to stop people from getting infected. For a short time I did computer "repair" which was 99% removing malware/reinstalling Windows or fixing some silly configuration error the user made. One dude had downloaded 'jessia_alba_nude.exe' or something like that and infected his machine. I can totally see him following directions like "download jessica_alba_nude.jpg, rename to .exe, and double click to view" People are woefully ignorant and just want the carrot on the stick.
No, it's not. I haven't seen a single .amazon domain in use yet, and they only got the greenlight to move ahead in October.

http://www.circleid.com/posts/20181025_icann_gives_the_green...
The fact that Monarch configs can be written in Python instead of Borgmon is a huge win for our team; being able to write and debug our own alerting rather than have to bug SREs every time has been worth the switch alone.
1. Yes, but it's also up for debate, since it's also known that the information content of a black hole is proportional to its surface area, so 2D.

2. The event horizon is spherical. Mathematically we treat it as a point. Nobody knows.

3. It's a gravity well, so everything falls towards it like it does towards the earth. Since it's the center of a galaxy, and galaxies form a 2D spin plane, most matter will be circling it, like our solar system circling the sun, so most matter will come from that planar distribution.

We will never see anything fall into a black hole, as in our space-time, this would happen at infinite time. As things get closer, they red shift from our frame of reference due to time dilation, until the light frequencies are so low that we can no longer detect them
Actually .etc would be neat.
What makes you think that? These first few iterations are expensive (in the thousands of dollars) and require assembly but those are not difficult problems to address over time.

Are you saying people wouldn't want to have an automated home garden in their back yard if they could afford it?
> I would only add to that, that not only can your "job make you dislike what you do", but also the environment you do your job in.

Yeah, I meant "your job" in the generic way, including everything there is about it. Where you work, who you work with, what you do, for whom etc.

Every aspect of professional life includes things that we'd rather not deal with. Programming? You're gonna have to write boring boilerplate code sometimes. Poor tooling? You're going to have to convince management to give you the budget you need to fix it, and that's going to involve a lot of politics. Meetings? Some of them are going to be a waste of time but you'll have to attend them. Volunteering projects? Some are genuine, some are there only because someone has some KPIs to meet.

These are things that you're going to have to deal with anywhere you go.

Things that you don't have to deal with anywhere you go, however, include stuff like abusive behaviour, regular and unpaid overtime with an expectation that "everyone loves what they do and works 60-hour weeks here", or poor working conditions that take a toll on your health. That's stuff that no one should "deal" with (except, you know, by leaving).
1600 marines could occupy the heck out of a non-trivial amount of land. The thing to keep in mind is that it's not like the USS Wasp would show up on a beach of some million person, do an amphibious assault in it's own, and then get an Insta message from the other armed forces saying "we're gonna be late, still playing Fortnite because no parents lol". Military campaigns are ridiculously large, complex, and coordinated. It's not a one ship operation (unless you watch The Last Ship).
Can I ask what data source you use? I have yet to find one which covers my part of the globe, provides data for free, and gives some measure of confidence of the values reported.
> I imagine that the challenge with during EHT-style VLBI in space is downlink bandwidth... there's just no way to get the petabytes of data they talk about down from a satellite.

Why do you say that? The latest High Throughput commercial satellites do 500Gpbs downlink throughput, so shouldn't the transfer time for a petabyte of data be reasonable?

Of course those satellites are configured to transmit data all over the earth, so the technology would have to be used differently for this application.
That's not how eyeglasses work. Lenses are supplied to opticians as a round blank, which are then cut to fit the frame. Any optician should be able to re-glaze any frame, regardless of age or manufacturer; their equipment measures the frame, then cuts the lens to fit. It's really quite impressive to watch:

https://www.youtube.com/watch?v=uCjGNUPO0WU
Height adjustable knock down couch / standing desk
Sure. If you've studied stochastic processes like Brownian motion, check out the derivation starting with the last paragraph on p.4 of this note:
https://drive.google.com/file/d/1tQj4ZGja6jKADJGiFj-dcQAirWo...

If that's foreign to you, you might be interested in this write-up I did about election-forecasting in which I considered the same example, just in discrete time rather than continuous time:
http://nautil.us/issue/70/variables/how-to-improve-political...

The basic idea is that if you increase the volatility of a random-walk process, say by making the step-sizes larger, that won't actually make the probability of finishing above where you started any less (or more) volatile. The higher volatility means that from any given starting point your final resting place is more dispersed, but you're also more likely to range farther from home as you go. The two effects exactly cancel. Taleb's critique misses the second part of that.
And where did the ISO3166 country codes come from?
Seems to be a few lively projects in here. https://apache.org/index.html#projects-list

Kafka, Hadoop, Flink, Ant, Maven, Impala, Parquet, Avro, Spark...
whoever took this picture should be fired, it's way out of focus!
Show HN: An easier way to deploy web apps in node, ruby, python, and go
Seems like long press (at least Firefox and Chromium) does what you want: show a menu of all possible back locations.
And if you are due a refund they are holding yours, but good luck getting any interest on that!
The limit in some sense is the size of the Earth. This picture is from an interferometer observing at very high radio frequencies (wavelength of 1.3 mm) using telescope around the Earth. To improve resolution you would either have to go to even higher frequencies (we have a very hard time doing interferometry there) or find baselines larger than what fits on Earth. And you don't just need a long baseline, but need to keep the baseline constant to within a fraction of the wavelength. So if you want to use satellites to get longer baselines you would have to know their orbit to within a tenth of a millimeter.

As an aside: that image is basically black and white. The intensity is just mapped to black -> orange -> white instead of black -> gray -> white.
another smug liberal techie that gets TRIGGERED by pointing at facts
ISO 3166 is regularly updated to reflect changes in country names and subdivisions. These changes are done by the ISO 3166 Maintenance Agency (ISO3166/MA).

The maintenance agency includes representatives from the following 14 organizations:

Association française de normalisation AFNOR (France)
American National Standards Institute ANSI (United States)
British Standards Institution BSI (United Kingdom)
Deutsches Institut für Normung DIN (Germany)
Japanese Industrial Standards Committee (JISC)
Spanish Association for Standardization (UNE)
Standards Australia (SA)
Standards Council of Canada (SCC)
Swedish Standards Institute (SIS)
International Atomic Energy Agency (IAEA)
International Civil Aviation Organization (ICAO)
International Telecommunication Union (ITU)
Internet Corporation for Assigned Names and Numbers (ICANN)
Universal Postal Union (UPU)
United Nations Economic Commission for Europe (UNECE)

https://www.iso.org/iso-3166-country-codes.html

Edit: tialaramex wrote a better explanation here https://news.ycombinator.com/item?id=19625425