skysight-inc/HackerNews huggingface dataset:
I use GNUCash, and despite it's substantial shortcomings, the regular flow of competition never quite hits the mark. Here's a small sample of what features I'm looking for:

1. Transaction import. OFX at a minimum, but preferably an online pull that can be automated. Many banks do support online pulls -- for example GNUcash calls out to aqbanking, with an incredibly obtuse UI, and is an area for improvement.

2. multiple accounts and currencies. I need to be able to track investments and assets. That means multiple accounts, denominated in different and possibly custom units. GNUCash allows multiple accounts and multiple currencies, but you cannot put different currencies in your own account. The work around is subaccounts per stock ticker etc., but it seems like improvements could be made here.

3. Synchronization. In my view, 'offline' is synonymous with 'disposable.' I have many years of history, and it would be unfortunate to lose it in a drive failure. I have this backed by a personal SQL server, but many people use dropbox style sync. Multiuser would be an area of improvement here.

The one thing I'm not looking for is budgeting. A ledger is basically a budget with dates per item, so why not just go directly to the ledger form? Salary, mortgage payments, rent, insurance, and streaming subscriptions are all predictable expenses, just slap em into the ledger ahead of time. Even the variable stuff like dining is a bit more predictable with a credit card.

The above should not be a knock to the many other systems, so please don't bother to try selling me on ledger-cli =)
I think left turns are the most dangerous for pedestrians, since the driver is focused entirely on timing oncoming traffic and performs the turn with a sense of urgency.

All major pedestrian intersections should be "all walks," where a period of time is established where no cars may enter the intersection.
You do know that an index fund has no choice to invest in the companies that make up the index?

Anyway the point I was making is that the bagholders are the little people.
WeWork discloses latest quarter earnings $728MM – $3B run rate
> So, if leapseconds are actually painful for you, then maybe we need to contemplate making this kind of adjustment on a finer timescale, like milliseconds.

That is what a lot of organizations do, "smearing" the leap second since they know their systems can't handle the discontinuity. I think this shows that software has failed in general at handling leap seconds correctly. As another said, I think leap seconds are unnecessary complexity with the frequency at which they happen.
Another nice thing about learning Vi first: no plugins. There are so many plugins that make Vim _worse_. In my experience most novice vimmers end up with a huge vimrc, which overtime is pared down to something pretty small as they learn how vim actually works.
Almost right, except one thing: I think Theo de Raadt wrongly did not acknowledge the valid point of his opponent: in practice, separating applications into virtual machines does have some security benefits, when compared to running them on single OS.

I think security guarranties are better if you follow practices of a little selfcentered project such as OpenBSD (run only trusted code) than if you follow practices of QubesOS (running whatever untrusted code you desire in Xen domains and relying on VM separation).
Microsoft Sptag
> In an attempt to de-Google my life, I recently disabled Play Services. Now, my Pixel 2 XL complains every time it can't "phone home."

Wouldn't it be easier to get a new phone that isn't created by the (ad) company you're trying to avoid?
> Every law, and every sealed procedure, should have a (relatively) short sunset clause built in.

Including the law that implements that policy? Including the Bill of Rights? A law prohibiting murder?
This is great news. The lack of the government seeming to care about national IT security has been bothering me for years now.
Does this include russian vote hacking?
Germany also has much higher standards for the engineering of the actual roads themselves.

Like, they are designed to function 24x7x365 for years and decades on end, because they have a much deeper and thicker roadbed, and much better irrigation and runoff control.

Part of this is because the road maintenance costs are built into the initial build cost, and any further maintenance in the future has to be done for free, at the cost of the road builder. And to the standards required by law. Since no road builder wants to ever have to pay for any future repairs, they seriously engineer the heck out of the roads to begin with.

Here in the US, repairs to roads are a profit center. So, of course road builders are going to make them as cheap and cheesy as possible, so that they can cash in on all that great guaranteed future income from all the repairs they're going to have to make in the next few weeks, months, and years.
Yes. It's called: Post to alt.binaries.* on Usenet.

It's effectively the same thing under the hood. Binaries are split and converted to text using yEnc (or base64, et al.) and uploaded as "articles". An XML file containing all of the message-IDs (an "NZB") is uploaded as well so that the file can be found, downloaded, and reassembled in the right order.

This form of binary distribution has been around since the '80s if you change some of the technical details; e.g. using UUencode rather than yEnc.

Spend $5 for a 3-day unlimited Usenet account with e.g. UsenetServer.com and upload it.

If you want it to stay up, then make another account in 3925 days (the retention period), download it, and then reupload it for another 10+ years of storage.
WhatsApp Will Never Be Secure
In all honesty, Laravel has been a blast to create projects with. Prior to that framework, I had very little experience with PHP or any back-end development. It's simple to setup, has sane/safe defaults, and it scales well with the complexity of projects. Can't recommend it enough!
Last I heard it was a story someone wrote and not real.

It's completely believable though and not even that radical.
Thanks! I haven't yet, mainly because I want to clean some things up first -- for instance, it's currently writing to a JSON file, with a job that archive a copy of it every few hours in case it gets corrupted.

Which is probably totally fine for most use cases, but I plan to port it to SQLite and open source it soonish.
When it becomes viable to market IPv6-only home connections.
Czapski was an extraordinary individual. I’ve just finished his biography (by Eric Karpeles) and I can recommend it, esp. to people interested in art and painting. It can also be great for people trapped in materialistic, reductionist mindset that is pretty common here - if you feel like your life is shallow and does not make sense, maybe read some Czapski, or his biography.
Yeah, this is not a slippery slope at all, no sir. And the real extremists will just use Tor.
Author of My Budget here. Can you send me a message on the Slack channel (https://join.slack.com/t/my-budget/shared_invite/enQtNjA0NDg...) "zachary" and we can talk about more details.
A big frustration of mine are people who used the bike lane in the wrong direction.

If you're turning right onto a road from a private residence, then you're probably only looking in the direction traffic is coming from. Someone biking the wrong way could easily be hit.
In D the GC heap is shared across registered threads, so it supports values allocated in one thread and passed to another. This particular passage from one thread to the other is guarded by a "shared" type constructor, so as to have a type system guarantee.
Sounds good. In reality this likely means Trump will abuse this power for some absurd changes and surveillance.
Who's gonna build real 5G in the US?
It began in 2001 and the effects become very obvious when you watch country GDP's. Watch the of countries, but especially China, in this animation of country GDP: https://gfycat.com/energeticrigidalbertosaurus
Elderflower fields in Sussex (England). There’s not a whole lot of info at the below link, but it’s one of the great many things going on - which is basically kids stomping around in the woods having a lovely time.

https://www.elderflowerfields.co.uk/2019/woodland-tribe/

Edit: better link of the people that organise it https://www.woodlandtribe.org/
Depends on the design. See https://bicycledutch.wordpress.com/2015/10/13/explaining-the...
Isn't this how most of us operate? I almost always take the same route to work, regardless of traffic.
Yes, this looks like there is a much larger vulnerability disclosure about to happen and Google is giving people a chance to update to non-vulnerable versions of their operating systems.
"The president signed an executive order effectively barring US companies from using foreign telecoms believed to pose a security risk to the country."

"Mr Trump does not name any company specifically in the order."

I'm guessing they are called emergencies as they await for the threat to emerge. Which kinda seems at odds with my definition of emergencies - which would be a defined clear-cut issue that needs addressing.

All this effectively does is hurt and curtail legit business with fair and good foreign telecom providers who have now been bundeled via red-tape into the same collection as those unnamed less fair and good foreign telecom providers.

Expect a fall-out of how this will hurt and impact legit businesses over the coming days and weeks. Let alone touch upon the possible impact upon Americans using their provider SIM and roaming abroad.
Can the Hardware Supply Chain Remain Secure?
Time for a new job mate
New claim of “decoding” Voynich manuscript draws skepticism from scholars
Oh wow, so that's where that Jacobin cover came from. I thought it was way over the top when I saw it, but now it seems fun and tasteful since it's a reference.

https://twitter.com/jacobinmag/status/1097858342867951616?la...
Are you sure it's about national IT security, and not just about sticking it to China because we're in a trade war with them?
Of course not. They are going to promote it. They are going to give the pro-war "authoritative sources" preferential treatment.

It's funny how so many of the pro-censorship comments here reference ISIS. These same people would defend the pro-war news companies which has spread false propaganda leading to illegal wars that killed millions of innocents in the past few decades.

If these companies are going to censor "extremism", then they should start with the "authoritative sources".
> The president signed an executive order effectively barring US companies from using foreign telecoms believed to pose a security risk to the country.

So let's just back up a little: A Chinese equipment manufacturer left a telnet daemon running on a single version of a single device and a national emergency is declared, Cisco leaves SSH credentials (public and private keys leaked) hard coded into multiple generations of routers over several years and not a peep..?

When is the US going to tell us what these Chinese manufacturers are up to? Heck when are they going to tell the UK's own security services? Just telling us why we should be concerned seems far more productive and effective than their current strategy that is marred by accusations of protectionism.

I'm not even saying the US are wrong. I am saying the lack of specific technical information undercuts their whole position.
So now you can bootstrap your bootstrap? I love it. I often feel like the most annoying part of any project is actually starting it.
Nice landing page! I actually like your placeholder images :)
That doesn't mean the other 80% are useless. They generally work on less important things that are still bringing in more revenue than they cost in salaries.
Then the other side is giving you a "small project" that takes the better part of a day to implement. I just pass on those as well, and i'll do the short challenges but I don't really take the company seriously after that.

I found the most effective is whiteboard sessions that actually somewhat resemble reality as if I was the Product Owner and/or Architect with a problem. Then go through the design process, what database system would you use, would it have a a web service or be microservices or whatever, dig into the database design etc. May ask more specific technical questions along the way that are relevant to the design.

but the main thing is there is almost no actual coding done in the interview process at all.
That's what I thought too, but it seems like FIDO CTAP over BLE is its own thing and does not use Bluetooth HID:
https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-cl...

The fact that paired devices are able to arbitrarily change their profile long after pairing seems to be the real issue here, and probably what was patched in yesterday's iOS/macOS releases.

There is nothing on this in the security notes to these updates, but my guess is that the CVEs will be disclosed in a bit.
i have a clearance for my job also, worked in a SCIFF all day ...
The policy of one internet infrastructure firm doesn't validate the original claim of ISIS' online activity being 'ignored for well over a decade.'
Author of My Budget.

I'm currently working to get OFX supported, which is the "automatic API" that can scrape your transactions. Quicken uses this, falling back on screen scraping in case OFX isn't supported.

There are a number of features that I'd still like to add (documented here: https://github.com/reZach/my-budget/wiki/FAQ#future-features). Are there specific things you'd like to see that I can put on my roadmap?
Hey thanks for mentioning my book. Like nickjj after building 2 SaaS in Go, I noticed that there were lots of pieces that could be extracted into a library.

I'm currently building another with that library.
I'm reading Minter's Junkyard Planet right now, whic is primarily about the global recycling trade. It's quite interesting, though a little too first-person/anecdotal. nonetheless it's thorough enough to give a good idea of what is happening in various parts of the trade network. Well recommended, if you're curious to what happens when you recycle a can or junk a car.
is he banning every electronic that is made in china? pretty sure even if huawei is banned, chinese made equipment is still used in 5G.
The title (written by the BBC) seems to be ambiguous. This is not about hardening US computer systems, this is about banning US companies from using Huawei 5G technology. The United States has been lobbying other countries to not use Chinese 5G technology for a while now, while it doesn't seem like there are currently any viable alternatives. This makes it a nation-wide ban.
> You never push incomplete work while intending to continue it the next day... maybe on another machine?

Nope. I wouldn't want to switch machines halfway through a change that left the code broken. I'd either get to a point where it was working, or just not push. (Being able to break changes down into small pieces while keeping the codebase working at all times helps, but that's a good skill to develop anyway - it makes automated bisection in the future much more effective).

> You never run across build failures on other machines when everything builds fine locally? You never see bugs that don't repro locally? You never trigger or re-trigger tests to narrow down bugs you can't repro locally but know to exist? Every single commit you push can be assumed to build on everyone's machines, pass all tests, and provide a proper foundation to branch from? And these are all true for everyone you work with too?

Occasionally you'll hit a transient or machine-dependent bug, sure. (That can happen in master too, though it's less of a risk). But again, it's not a big deal when that happens. If you discover a bug in someone's branch then that is a situation that's worth interrupting them to talk about. You coordinate, they fix it and you pull their branch again - or you fix it and they pull your branch. Most likely you need to communicate and collaborate on the fix in any case, since you know what the bug is while they know what their changes were.

There's a cost and a risk associated with working with code that hasn't yet passed all of the master gates. But there's also a cost and a risk to working on a particular code area without seeing your coworker's changes in that area, even if they haven't gone into master yet. Most of the time the tradeoff works in favour of pulling their branch, IME.
"This study is worthless, but here's my unsubstantiated opinion instead" is a weird argument.
English and Swedish are both Germanic languages, which means they share a lot of basic vocabulary. And a few centuries after the split between North and West Germanic, a bunch of vikings invaded England and stayed there for a long time, leaving another large number of words there. A few more centuries later, English was diluted somewhat by French, but that was mostly fancy words.
I dunno.

If I hit a hard barrier, I'd prefer that the car break and disintegrate and dissipate all that energy, as opposed to transferring all that energy into me as the occupant.
The US would be a laggard here regardless, given its enshrinement of free speech
If you don't want the borrow checker, why are you even using Rust? The borrow checker is the foundation of the zero-cost safety guarantees that make Rust such an incredible language to work with.
A few thousand per month would be a problem, sure. But how about a few thousand per decade? There are four million babies born in the US every year (130 million worldwide).
This happens more than you would like to know. Especially during summer vacations. You need some sort of tracking system to know what to pay and what not to.
Live streaming murder is horrifying.
An example from the '00s: We sent our kid to a German school in Menlo Park. He immediately loved it on the first visit because the under-5s' playground was full of old wood with splinters and dangerous tools (hammers, saws etc) and the little kids could cause all sorts of ruckus, like building dams and flooding them.

But the reality of a foreign-language school is that you need more than just "nationals" (people who speak German at home or have one German-speaking spouse in a couple) to make the finances work. And quite a few American parents were and are interested because of the quality of education. But once their kids were enrolled, many of them wanted more safety, more discipline, a less casual attitude to kids getting naked, and academic work assigned to preschoolers which is not part of the German pedagogy.

All of which made me wonder "why did you choose this school? And if you chose it for its results, why challenge the process that gets those results?" But indeed, by the early 201Xs, the playground had been neutralized into the same old anodyne sterility of the public parks.

(Amazingly, Silicon Valley has two German schools within a few miles of each other; one is subsidized by the government, the other is not so you get to pick your ideology. But it does split the customer base).
I can't find it, but a few years ago one of the leading members of RoSPA (The Royal Society for the Prevention of Accidents, <https://www.rospa.com>) came onto BBC radio 4 and argued their job wasn't to prevent all accidents, that some were unavoidable and society shouldn't try for perfect safety.

It was a pleasure to hear.
> I'm sure there are some security/privacy implications that would need to be worked through, but they don't seem insurmountable? It can't be worse than letting websites show fake URLs...

Prefetching cross-domain means that now anyone who loads google.com has the potential to also ping mywebsite.com/trackingendpoint, which is a resource that you have to cache. So I get some information, likely less than if you actually execute the page, but still enough to be worrisome.

> It can't be worse than letting websites show fake URLs...

I really don't get this complaint. I can absolutely understand the unease people have about "fake urls" but a lot of urls already lie. How many are really cloudflare or aws? It's completely possible I'm missing something, but as far as I can tell, signed http exchanges are more secure than a CDN, since they're signed.

I guess that potentially since I, a nefarious person, can re-host your signed content, there might be data leakage possible there, but given that AMP is mostly static, I think that's mostly mitigated. Could be wrong here, I'm not a security (or AMP) expert, but I don't get the fear.
Author of My Budget.

I'd like to incorporate reports, that is something that is in my roadmap. Are there other features of beancount or ledger cli that you'd like to see in My Budget?
Moderating discussion forums is not censorship.
And how, exactly, did the software engineers at Boeing stray from this hypothetical process, one which is not used in any specialty?

The job of the software engineer is to correctly implement the given spec. As far as anyone knows, that was done.

There is no one, in any industry, that wants their software engineers to say "I'm not moving forward until I've seen the validated medical testing and lab results that this design is based on. I will also need you to run a several year safety trial, provide multiple attestations that the design is correct by end users, regulators, and independent auditors, before proceeding."

What you are suggesting is ridiculously impractical. The specialties rely on one another, and if the controls and human factors people have signed off on the design spec that's what the software engineers should faithfully implement. During implementation, if it becomes apparent that there are states the system can get in to that are not called out in the spec that obviously requires re-engagement. But that's not what you are suggesting as far as I can tell.
But the granularity isn't arbitrary!

If you're billing hourly, and the client chooses not to use your time, you don't work any hours and you don't get paid. If you then billed them for 100 hours without working, you've committed fraud.

If you're billing monthly, you've set aside the month for the client. If they choose not to use your time, you still get paid, because in your agreement you specified "use my time it or lose it".
I'd like to know this too. Presumably both Ericsson and Nokia are also foreign telecoms companies, so who does that leave?
I'm throwing out my PC now.
Historically, a combined effort by corporate and government interests to take away your rights was called fascism. But I guess if it is the far left doing it, it's okay.
The article takes the example of airport pickup. Traditional rental companies pay for a premium space, staff. With Turo, most people agree on a precise time and location pickup. For example, I'll be outside gate XX at 4:15pm, meet me there with the black Toyota Camry. This means the person renting out can drive and arrive there at 4:15pm, and just hand out keys. That person didn't pay a fee to be outside the gate, like many other people who welcome friends and family.

So traditional rental companies are pissed off because they have to pay for the space.
I use GNUcash for business too, but use git as storage/sync instead.

Also a simple fast tool with some handy little reports and graphs is http://homebank.free.fr/en/ We still use this for our personal finances.
Consistent enforcement is an essential element of the rule of law. It's hard to balance against privacy concerns; it's definitely not obvious which is worse: A police force that can fine almost anybody on the road at any time because almost everyone is breaking the law, or a police force that always knows where your car is.

Emotionally, I don't feel as strongly that I have a right to not be tracked when I got out in public as I do that I have a right to equal enforcement. The former seems like a detail of how law enforcement is carried out, the latter seems like a key difference between law and tyranny.
Author of My Budget.

I'm taking inspiration from YNAB, as it has a rich feature set. Also open source so that's a plus! Thanks!
Show HN: Xlstream – memory-efficient XLSX streaming