skysight-inc/HackerNews huggingface dataset:
I flat out do not buy the argument that by virtue of existing a secret becomes less secure. It's just not practically true. The assumptions needed for this to make sense are that people are actively attacking a given secret, that the new secret will be generated from arbitrary entropy (not depend in any way on the previous secret) and be a secret an attacker has already tried (otherwise the rotation was pointless). Furthermore, all keys already exist. When you "generate" one you simply pick from a large domain. The probability that two people (attacker and defender) pick the same key from the same domain does not change because someone already picked a key from the domain.

It's certainly true that as technology improves and the mechanisms we build to secure things evolve new keys need to be used in order to stay up-to-date. But this amounts to secret rotation that aligns with evolving systems not arbitrary 90-day expiration policies. Much different argument.

Keys should not be rotated.. security strategies should.
> The actual output of society is produced by a relatively small minority of skilled individuals that are not easily replicable

This speaks personally to me as why tech workers (and multi-generation urbanites) are seen as widely disconnected: being persuaded a small number of people "create value" while forgetting about the people building your stuff, growing your food, extracting your oil (and killing the planet in the process), moving your stuff around, nursing people, building your house, installing your AC, shipping your amazon packages, and all the other ultra-necessary jobs (that are usually underpaid) that I don't even realise exist.

Without the drivers, Uber does not exist. Without Foxconn and its army of underpaid labor, Apple does not exist. It's not a small number of people creating value, it's a small number of people capturing all that value thanks to shitty wages and work conditions for everyone else.

We can all pretend "automation" will replace people, but it's obvious the complexities of those tasks will always mostly done by humans.
They did have a major outage for a few minutes on 2013: https://www.theregister.co.uk/2013/08/17/google_outage/
I guess other options could be not allowing the users to set their own password but instead generating a password for them.

Or just require 2FA for everything, but that’s hard to do with a lot of software.
Find joy in what you have, but also in the experience of striving for more with the understanding that failure is always an option. Compare yourself only to who you were yesterday, no one else.
hetzner.de, online.net, ovh.com, netcup.de for the EU-market.
A demo of “too big to fail [via antitrust]”?
The famous UFO researcher Micah Hanks posits its possibly the emergence of a singularity super intelligent AI from this planet. Any seemingly advanced technology would seem like magic, and it explains the elusiveness.
You could probably just send Alan Cox a free board and see what he does with it :-) I imagine it's not a hard port.

I'm no Z80 coder, and not a Fuzix user. Just watching from a distance.
New gaming rigs start way cheaper, especially AMD ones, but you raise an interesting point.

On nVidia's streaming service you get some GPU and some CPU but not enough for eg, Total War: Warhammer 2, so they disallow streaming it. It is likely such resource-intensive games will not show up on these services.

eGPUs are also a thing and probably plug right into your MBP, making it more like $400 for many years vs $400 for 20 - 30 months of Stadia.
Man, this entry disappeared from the frontpage quickly! Anyone knows why?
Aye, thanks. The hamburger issue is on the todo list.

Re: keyboard navigation - yep, I think it'd be a good thing to have. How do you see it work though? Right now, once a note is being edited, you can go up and down the list with Shift-Tab and Tab, but I'm not sure how to handle going left and right... something like Alt-Left, Alt-Right? But that's probably not portable between the browsers.
they attacked another jogger, hitting him in the back of the head with a pipe and stick

They pummeled two men into unconsciousness, hitting them with a metal pipe, stones, and punches, and kicking them in the head.

The first policeman who saw her said: "She was beaten as badly as anybody I've ever seen beaten. She looked like she was tortured."

It’s a very “good thing” that they were in jail long into adulthood.
What I do:

1. Check the password against the haveibeenpwned.com database.

2. Check the password with the zxcvbn password strength library.

If it passes both they can use it. It's not perfect, but it's a lot better than nothing.
Forcing hour cuts would seem to me to have more unintended consequences than sat UBI policies.
Even AWS had issues apparently. Very strange
us-central1 is up

us-east4 is down
And if you wanted to repeat that 10 times you would...?
Nest thermostats can function without Internet. You can walk up to it and adjust the temperature just like any old thermostat.
> Hacker News showing its true colors here

HN is a statistical cloud of millions of people. Since you're commenting here, you're as much a part of it as anyone.

A run of comments sharing a common quality doesn't show anything about "true colors"—pure randomness exhibits the same patterns. What happens, though, is that after seeing a few (say, 3) comments taking an offensive or opposing position, people feel surrounded by hostile voices, and that feeling 'sticks' to the community in the form of the perception "HN is X". HN isn't X. It just feels that way after a few noticeable signals in a row.
Assuming you use 0 as your magic ball number. Move the magic ball number up just a tiny bit to 0.07 and you would have had a false positive in september 1998. You could also move it down to -0.32 and you would still a 100% success rate, albeit with a sample size of 3...
That's exciting news, though it will take a couple of years until it trickles down to financial institutions. My bank forces me to change passwords every 3 months, and of course they also disable pasting for added security.

We also have a local utility that sends you a 5 letter password upon account creation through email, and that's your password. If you try to change it, they'll send you another 5 letter one.
The evidence at hand that China runs an incredibly protectionist economy with long standing policies like requiring tech transfer and requiring chinese control to work there? The evidence at hand that China is interested in taking power on the international stage like the belts belt and road initiative? The evidence at hand that they don't have moral qualms like the concentration camps they run?

This isn't gaslighting. To even approach gaslighting it would require me blaming China's tendencies to do the same sort of economic move for the US doing this. This is a realistic view of the world and a likely positive outcome for Americans and other westerners.
It's a networking outage. Google is a well known user of SDN. Networks, by virtue of connecting things, necessarily affect more than one region.
Seems to be the private network. The public network looks fine to us from all over the world?
This is definitely a dilemma.

If you're using Google Accounts then they have a feature for this[1]. It detects when they enter their Google password into any other site then reports it and makes them change their password.
I'd love a similar feature that somehow worked with Active Directory.

[1] Password Alert: https://support.google.com/a/answer/6197480
It says "could not reach imap.gmail.com" for me.
Nobody proposed Commons Clause to OSI. And I’m not the only one who stood up for SSPL as open source.
Just because you run your own ram and compute doesn’t mean you run your object store, too. Running drives is a commodity now, and crypto is cheap since aes-ni.

No idea if this is what instagram does or not, just in general. Drives are hot and need lots of power and it’s expensive to out-S3 S3.
A couple more hours and everyone will get 25% off for June.
How are you implementing these checks?

I'm using Active Directory and options for extra password checks are somewhat limited.
Finally. Let's start building again things designed for humans ?
How Monsanto manipulates journalists and academics
That’s not what I mean, really. Chrome book already has a non-negligible market share. Practically everything is a “web app” already. Sure, there are going to be use cases for lower level native software, but in reference to Electron I think it’s obvious that we are better off getting things to run better in the first place. Obviously Browsers weren’t originally designed to work this way, but it’s just how things have turned out. And developers are very familiar with html/css/JavaScript.

But of course getting the major browsers to play along has always been slow Microsoft as mentioned already.

But I understand why it makes sense to skip Electron in its current state
There's already a vast oversupply of high skilled non engineer white collar labor. Adding more would just exacerbate the situation
There go the nine nines for this year? Is it more like four nines or so now?
> But to me there is a structural problem with the relationship between money and government (in their current low-tech forms) in society.

Can you expand on this? Your comment intrigued me.
To quote Wikipedia it is:

> attempting to assemble a comprehensive ontology and knowledge base that spans the basic concepts and "rules of thumb" about how the world works (think common sense knowledge but focusing more on things that rarely get written down or said, in contrast with facts one might find somewhere on the internet or retrieve via a search engine or Wikipedia), with the goal of enabling AI applications to perform human-like reasoning and be less "brittle" when confronted with novel situations that were not preconceived.

As explained by Douglas Lenat in a talk in the 1980s, he said his AI efforts had reached a point where there was a mattress on the road blocking him, and he decided to do something about it. As the article (https://en.wikipedia.org/wiki/Cyc) alludes to in passing, it started out as an effort to capture the information needed to understand all the entries in a 2 volume encyclopedia", "Cyc" itself is from encyclopedia.

Image recognition? Well, I suppose once you identify an object, Cyc might be useful to reason about it, but....
Most ISPs exist in multiple states. Divvying up local markets does not really prevent interstate competition or impact interstate commerce, or at least that hasn't been tested in court.
Sure, though, as parting words of advice:
flagging posts simply because you do not agree with them does not serve to assist with the Orwellian reputation of this site.
I'm sure they are, but I think predictability is slightly less bad than being distributed across every single service they've ever used. There's only so much I can do about people not giving a crap.
As long as it’s not subscription and not over $50, and it’s a quality app, I tend to pay for it. I prefer quality and performance over quantity and free
Oh sorry I'm not using AD, it's just a web service.
Cool story. AFAIK antibodies aren’t cells though, and you can’t “DNA sequence” them.
Hetzner is an example. Been using them for years and it's been a solid experience so far. OVH should be able to match them, and there's others, I'm sure.
I said Los Angeles, not Houston.

It was defended at the 1992 RNC as I said -
https://www.americanrhetoric.com/speeches/patrickbuchanan199...

In fact the Republicans have this speaker saying an almost word for word echo of what the Chinese minister said.
Shit like this significantly contributes to the legitimacy of calling the NYT "fake news".

When you tell a story from one side, and one side only...

(I don't mean that it's a good thing to call news orgs "fake news". I mean that if someone is already calling you "fake news", you should really take care to have impeccable reporting to avoid giving those accusations weight)
> That's equivalent to opening a window without the AC doing anything.

Even when the air temperature at your fresh air intake is cooler than the air at your condensor coil? Wouldn't we assume no system would draw its fresh air from near the condensor coil?

You still have a heat pump in the system, and there's a temperature difference between the air inlet and the pump outlet.
To be fair, the most generous reading of "your own software" is "software I own legally" not "software I wrote myself". In this regard Apple's control over the iOS ecosystem is extreme.
The real problem? People introduce password expiration to improve security, but the means of producing a new unexpired password after being locked out is less secure than the password itself creating a net loss in security.
There are too many variables to say when exactly. It depends on how much equity you get as an employee.

https://www.realfinanceguy.com/home/2018/7/21/joining-a-star...
Not to worry, 30 years is still on the young side of a cover up.

At or around the 50 year mark, you'll start to see things loosen up (if 50 year-olds did the deeds, 50 years later they'd be 100), as most of the adults clenching their death grip on the yoke of popular discussion will start dying off. Once no one with skin in the game remains alive to defend the bad decisions, less effort will be invested in denial.

Kind of like the way bad science works. It takes a while for a graduating class to grow into their credentials and take a giant shit on the more hated principles that their predeccesors tortured them with.

That is, of course, unless blood relatives of the ones with blood on their hands are still floating around throughout the power structurers.

In authoritarian regimes, personnel churn is slower, and dynastic succession can prolong even craptacular totalitarianism like Juche.

With a singular leader, deposing the face of authority can unravel a movement like Baathism, with Saddam Hussein, but you have to take out the Udays and the Qusays too.

China is bigger though, and power is more distributed and has been handed off to descendents, so it's more durable than any simple dictatorship. A process of changing the guard will have to play out across several terms until the retired personnel actually die, and grandma and grandpa's "legacies" are looked back on with bored indifference.
Ironically, the SLA page returns a 502 error.
Just in case one of the downvoters stumbles upon this again, I'd appreciate your reasoning. What part of what I said is untrue (assuming this is the reason you downvoted)?
Radar Contact (on multiple days) + FLIR Contact + Human Eyeball confirmation by two types aircraft in which these things buzzed them != a technical anomaly.

Watch the recreation and the eyewitness testimony videos from multiple vantage points.

https://youtu.be/PRgoisHRmUE (recreation of ONE of the west coast incident, starts at around 9:00 in)

https://www.thedrive.com/the-war-zone/27666/what-the-hell-is.... (note the embedded videos of testimonies)

https://www.thedrive.com/the-war-zone/28231/multiple-f-a-18-.... (new tech, east coast incident years later)
I think we have to dig deeper. Why exactly is it that people have to rely on pension funds or put their assets into mutual funds to retire safely?
I agree. In that there are still U.S. fortunes that originate from slave ownership that have not been reciprocated
Your link’s definition limits it to issues of war, persecution or natural disasters.

A crop failure might be a natural disaster, but lots of other causes of starvation that are not.

Main point is, if you’re seeking refuge, try to put a clear-cut reason down rather than something debatable, but sensible, like absolute poverty.
Show HN: I made a new content discovery platform
I would prefer it if I did not have to rely on semblance in this case. If not surveillance, then what is the purpose of such extensive telemetry?
If a scientist think that hormones will interfere with their ability to draw conclusions... why should they extrapolate any conclusions?

They should inject half their male test subjects with increased testosterone so it match the variation of females test subjects and see if it interfere with the data.
Why do they fear the American government?
The question and answer are likely planned.

CCP wanted that answer out. It will reach its intended audience: upcoming generation of party leadership; young and affluent non-CCP Chinese; nationalist Chinese; law and order Chinese.

I think that substantial and important subset will be satisfied with the answer. The rest are busy chasing virtual butterflies glued to their "smart assistant" (a feature, not a bug) just like their counterparts over here.

And the fact of its being discussed rather diminishes that propaganda card.

> It's a pretty simple equation. Why would any state have to spend so much explicit effort on making no one mention it, if there was nothing really wrong with it?

> elephant in the room

You mean like two modern skyscraper crumbling into dust in a handful of seconds which one must not mention in respectable society unless repeating the "party line"?

Like those two elephants?

Should we discuss the official fact finding efforts for additional black humor, and then revisit the "universal obedience" phenomena?

> The near universal obedience seen among the population would seem very foreign to most people in the west. Which is in itself an interesting cultural question.

Laughable and racist. (See "conspiracy theory" for disambiguation.)
Ah, wonder if this is affecting Google's SSO. It was super slow when I was trying it just now.
Bank programmers live at least 5 years in the past.
> they care about other nations spying on their citizens

No they don't give a shit about that. The US cares about other nations spying on their businesses and commercial interests and losing dominance of leading network technology to a foreign country which would then be the leader of said technology and the US would fall further and further behind and completely lose dominance like Europe lost dominance to the US due to WWII.

The networking business would never recover from that. Huawei has shown China can lead in something, the US wants to kill that idea and wants China to assume the position of Japan which leads in none of the tech despite having a sizable way to do that in the 80s.

The best way to deal with it is to mirror what Google did with Android by forking it and setting up a group of 20,000 engineers to work on that fork and making that community driven and open source available to any company that wants to develop on the platform... so due to the privacy concerns that competing technology destroys Google's dominance on mobile... maybe even makes a dent against Apple's privacy play. While they do that they should also drop the Great Chinese Firewall. Fork Chrome. And adopt Capitalist democracy.
The inNative WebAssembly Runtime ran into this problem as well, and includes wasm_malloc.c, which can be linked against your application to provide a simple malloc() implementation without having to write one yourself or depend on WASI.

https://github.com/innative-sdk/innative/wiki/Compile-C---wi...

Of course, it'll be a lot easier to simply depend on WASI instead and re-implement standard libraries on top of it.
Neither were blocked.
A more glass-half-full view of it is that it's a magnificent success for Clojure.

Yes, it got redone in Java, but the fact is that Clojure took it from nothing to one of the world's premier frameworks for distributed computing - something that might have been impossible with the same resources if Java was its starting language. And because of the commonality of the underlying JVM, choosing Clojure allowed the functional approach with far less risk because the transition later was (I am assuming) much less risky and smoother.

Looking at it in that light, this would be a huge boon to people considering starting new projects in Clojure (or possibly other JVM languages): it proves if they succeed and get so popular that moving to Java is the right thing, it can be done.
Thanks for mentioning Regolith and I'm pumped to hear that you find it useful!
There was a terribly day 2-3 months back in us-west-2 where CloudWatch went down for a couple of hours and took out AutoScaling with it, causing a bunch of services like DynamoDB and EC2 to improperly scale in tables and clusters, and then 12 hours later Lambda went down for a couple of hours, degrading or disabling a bunch of other AWS services.
Writing passwords on paper is recommended by security professionals, in the common case where your physical security is far more trustworthy than your digit security, because it supports the use of long, strong password. A 2FA device is very similar to a Post-It note.
Seeing Tesla hit 50B but GM be around 60B makes me wonder if auto is under valued.

Transportation is boring but necessary. These companies also have plenty of experience and infrastructure.

Sales are marketing based.
Please do! Also I'd like to know the state of DOM access availability in each.
Not sure about the legality of this, but trying to log in to a a couple of services would be an easy test.
Or maybe the increase in employment created surplus demand for goods and services which would raise the market-clearing price.
interesting article but too long, I am looking forward to the movie by Wes Anderson.
Writing down is much better than using a guessable password. Your physical location is more secure than a password in a rainbow table
Fantasy Cookbooks and the Mental Survival of Women During the Holocaust
I don't see what part of that means the network operator shouldn't do their best to try to keep it safe.
"Vast oversupply"? Wage levels/compensating differentials say otherwise. Plenty of highly-skilled (even STEM) workers are non-engineers, and they get high wages.
Complete vertical integration is literally what the CCP's goal has been since 2015 (Google "made in China 2025"), long before any bans.
I'm just assuming they are because it's been previously reported that Apple uses GCP (and also AWS).

https://techcrunch.com/2018/02/27/apple-now-relies-on-google...
There's a difference between facts and information.
Would you not please break the guidelines with rants like this on HN? No matter how wrong the comment you're replying to is, it only makes this place worse. briandear shouldn't have broken the guidelines with "just nonsense", but breaking them 10x more is definitely not helping.

Also, you've posted several unsubstantive comments recently. We're hoping to do better than that on this site, so if you'd read https://news.ycombinator.com/newsguidelines.html and take their spirit to heart, we'd appreciate it. You might also find these links helpful for that:

https://news.ycombinator.com/newswelcome.html

https://news.ycombinator.com/hackernews.html

http://www.paulgraham.com/trolls.html

http://www.paulgraham.com/hackernews.html
I honestly have no idea. I'm not super familiar with what a browser will catch before passing to the web-page (like Alt-left and Alt-right tell FF to go to the next / previous web-page).
Bootstrapping via conference/meetup talks seems like a good idea, thanks.
EUW doesn't seem to be affected.
Well then it looks like you can use outline to read things that are being censored.
Sounds like a good design — but in the early days of google cloud — 2008 — you’d get the google homepage on a bad request
It's not mentioned here so I'll add it: gnome-flashback is the thing that you can use to integrate your window manager of choice w/ the gnome shell. I expect there to be integrations for other window managers, but if you're using i3, then this is your bridge: https://github.com/deuill/i3-gnome-flashback
Bit.ly Is Down
And for those of us in GST/HST/VAT land, hosting in USA saves us some tax expenditures.
"I'm gonna soak up the sun ..."
How can we do better?