skysight-inc/HackerNews huggingface dataset:
> I'm watching youtube, pornhub and twitch and I don't think that it requires any DRM.

Depends on the content, If you are watching paid for content on YT it is most likely DRM'ed. [0] An "stats for nerds" example from such a piece of content (Notice the protected line, this line isn't present on DRM free YT Content.). But the vast majority of content on YT is DRM free.

Twitch has some DRM'ed content, things like when they streamed Thursday Night Football. But that was played via the Amazon Video player not twitches normal video player. I remember because the player threw a fit if you didn't have HDCP configured correctly, which most streamers don't. Not that they were trying to re-stream the game, but have it playing on another one of their monitors to see how it was doing. Personally I liked the idea of having a chat alongside the game :-)

Dunno about PornHub.

[0] - https://cejack.tk/2019-05-30_19-57-03-280.png
I believe it's a reference to a general effect of regulation, which is by making the business being regulated more expensive due to following regulations, it prevents smaller businesses from popping up to potentially displace the larger business.

For a generally positive example of this, see a good chunk of the history of Silicon Valley with smaller tech companies displacing larger companies like IBM, because there was no regulation stopping it. For an example generally less loved around here, consider Uber making a good pass at eating the entire Taxi industry by virtue of dodging regulations.
It hurts the US companies until they go back to using higher-quality US steel, which they should have been doing in the first place.

Chinese steel is of such low quality that, after wastage is accounted for, you essentially end up paying just as much as you would have for US steel. The companies that save on Chinese steel are just passing on the externalities to their customers.
Any pre-seed or post-seed NYC founders looking for support?
We've been there. It led to impartial professionals who, in person, report what they witnessed, and who made a career out of being truthful and exact.

The Bard is back again!
I was trying to make the case that you can give perks for natural reporting to IT (passive and active) + ensure that a user that has acted on a phishing email that reports it in a timely manor is treated as a non-fail (at least at some level).

Both of these things together leave a system in place where:

users are highly penalized for failing a phish test (or real life phishing attempts)

User's that fail the test (or real phishing attempt), but follow it with a timely notice have less pain.

Users that notify on apparent phishing attempts get small rewards.

That does not seem like a joke to me.
> Using fission as your go-to example of "See? It's OK, we can handle world-ending technologies" is just appallingly wrong, it actually demonstrates precisely the opposite. We can't be trusted

The fact that we are alive seems to demonstrate precisely the opposite. You also conveniently forgot how many countries engaged in bilateral disarming programs (well, maybe Ukraine shouldn't have...) and how it generally makes sense because these nuclear weapons are expansive to maintain.

Still, you consider global atomic war a recurring risk every year, because you do not trust fellow human beings taking the right decision: "we can't be trusted".

This is why I believe this opposition comes from wrapped world views, a lack of trust in the future and future generations.

It seems like a sad way to live. Meanwhile, the world is improving, little by little.
This. Having an ~30 page TOC and no hyperlinks to the chapters/section irritates me to no end.
Someone distributing a different product to get around you current products vulnerabilities is outside this threat model.
There are also other build alternatives. Cmake comes to mind.. There's a new(ish) one that the gnome project is using now (also written in python): m..something.

Anyway, rest easy. You aren't the first. You won't be the last. (my favorite: someone released a /bin/ls clone in go recently)
Even without the exact figures it should be obvious that the inefficiency in Bitcoin is astounding. Consider e.g. that the Bitcoin network performs about 400K transactions per day while the Visa network performs about 150MM transactions per day. That works out to 375x. Coincidentally Switzerland consumes about 1/375 of the world's electricity. If the Visa network used the same amount of electricity per transaction as Bitcoin it would require all of the electricity used by the entire world.
> Are there not news verification products

How would a "news verification" service work? It would just be journalists verifying the work of other journalists. There are fact checking platforms, but, again, it's journalists all the way down, at least until you hit primary sources like scientific papers, at which point you have a slightly different verification problem.

At a certain point, you have to accept that your information about current events is going to come from journalists, which is why it's necessary to cross-check it and understand how you might be mislead.
>So I've rehashed this argument a lot recently: Google has to snoop on your emails. Every email provider does. Spam classification, automatic labelling/filtering, things like the "we think this is phishing" banners, etc. all require some form of analysis. You could (and seem to be) calling some of that "snooping", but some of it is acceptable. So the question is where is the line drawn?

Its not about a line. Advertising functionality is simply not a core function of an email service. It is something that is tolerated in exchange for a free service. That is not the same as ceding control and letting a vendor do anything they wish simply because a vendor claims its useful.

>It's used to alert you on upcoming packages you may receive or bills you need to pay (if you have an android phone/google assistant). I think that's useful.

Well, how does storing the item purchased and the dollar amount and other purchase details help with tracking anything? AFAIK Amazon for e.g. has stopped putting in tracking information in their emails. There could be a useful function as far as bills are concerned, but its weird to take an email about a bill and then generate another wasteful notification about the same bill. Or to take a package has shipped email and generate another notification. But that is a separate discussion.

Also, if Android and google assistant users have chosen to enable such features with informed consent, I don't see why every single gmail user has to have this this enabled. I mean that in a rhetorical way, I do see why an advertising company would do such a thing. Anyway, I'm simply registering a protest and I encourage other users to do the same. Several invasive Google policies were reversed due to privacy push-backs, and so all hope is not lost.

>The argument is that labels are useful to some people. Google could misuse the data derived from labels. Similarly, purchase history info is useful to some people. Purchase history data could be misused by Google. If you trust Google to not misused labels, then why don't you trust them to not misuse purchase history? If you do trust them in both cases, this doesn't matter, and if you don't trust them at all, why are you using an email client that you think is completely lying about how they're using your data?

That to me, is needlessly polarizing a nuanced issue. "Either you trust us completely or you don't" is not really an argument worth having is it?
Please don't post unsubstantive or snarky comments here. Also: "Eschew flamebait. Don't introduce flamewar topics unless you have something genuinely new to say. Avoid unrelated controversies and generic tangents."

https://news.ycombinator.com/newsguidelines.html
Ah! That makes sense. I had forgotten about binary diffs. I guess I can put my tinfoil hat back on the shelf...
> Servo was supposed to be the new, embeddable engine, but that's mostly cancelled now

You mean the plan to embed Servo, or Servo itself?
I don't think Lynyrd Skynyrd from Jacksonville FL is a person.
TLDR for containers? What do we use them for? I thought Chrome puts each tab in a separate container anyway.
Interesting - I've had the German version from my university days (every ME student had one) and it's spelled "Bronstein". The English spelling makes me a little dizzy.
Can you explain how storing the dollar amount, and item purchased helps with tracking anything?
What have they done to GitHub that's been an act of Embrace, Extend, Extinguish? Pretty sure I'd hear it here on HN first if it was a thing. Honestly I need some evidence.
> And let's be honest, everyone is there. If you want to be in touch with someone you need to be on Facebook's platform.

Did everyone just got rid of email and phone numbers?
Do you earnestly think that using a mobile app to pair drivers with riders (and especially multiple riders with similar destinations through pool) doesn't offer any efficiency advantage over driving around burning gas and waiting to be hailed?

On top of that, it's not just lower prices it's also better service. I'm sure there's some people that have their Uber horror stories, but I've had several cab drivers that said some really creepy stuff (stuff that a >6' man like me just kinda cringes at, but I can definitely see it being very uncomfortable for women). It's night and day, Uber/Lyft drives have always had clean cars, didn't pull any route shenanigans, and often had amenities like water and wifi. My only bad experience was when a driver messed up the destination and ended up getting on the Bay Bridge. He apologized profusely, ended the trip immediately on the app (so I barely got charged anything), and drove me to my destination.

While I think it's true that these companies are offering rides at unsustainable rates at the moment, I don't see customers ditching Uber and Lyft for cabs even if prices rise by 20-30%.
I just want to say that I think "AdNauseum" is a brilliant name for this software.
Do you know if there is a Mozilla bug for this?
You always only have your current session history in each bash (unless you reload the history manually) so there is no interleaving.
I guess I just need to choose better "keywords"
Seems I stand corrected. That's very good news (news to me, at least); thank you!

I hope they never backslide.
> You don't express derivation in the positive direction because delivering a product or service as described without issue is the highest aspiration.

It's very disturbing to me that the highest aspiration is to just "meet expectations". That seems like motivating everything toward mediocrity.

My highest aspiration is to exceed expectations.
Can the average end-user fork an OS?
> so they did exactly what you suggested in your first post: they re-engaged the electric trim and attempted, unsuccessfully, to re-trim the airplane before it crashed.

The critical question here would be would be did they use the electric trim switches, and did they cut off the trim after re-trimming the stabilizer?

> None of this says anything directly about getting the airplane back in trim before toggling the cutout switches,

The FAD did say that directly, and you quoted that part.

> if that is what is necessary to regain control if this happens close to the surface.

It obviously was necessary. It's why they re-engaged the trim system.

Pilots are not robots blindly following procedures - if they were, we wouldn't have pilots on the airplanes, it would be run be a computer. Pilots are expected to have understanding of what the switches do and how to use them.

The wording of the FAD could be improved, but it is not that hard to understand. The electric trim switches override any other inputs to the stab trim, and the cutoff switches prevent powered movement of the stabilizer. Those two facts are all one needs to know to regain control.
Thanks for checking out Hedgehog!

There is not - this is the biggest deficiency of Hedgehog today. Without centralized custody of keys, it's not possible to have someone prove their ownership of a given key to a centralized party in order to unlock it. The key is encrypted, so the application provider nor anyone else can decrypt it without the user's username/password combination. This tradeoff is both a good thing and a bad thing in our view.

That said, there is a mechanism for changing your password if you are already signed in.

We are considering some mechanisms for fallbacks, eg using a threshold cryptosystem with multiple private keys and a 1 or 2 of n requirement, such that if a user forgets the way to generate one of the n keys they may still remember a way to generate the other(s). If you're curious, more on these schemes here: https://en.wikipedia.org/wiki/Threshold_cryptosystem

We feel these tradeoffs make sense to enable more mainstream adoption of cryptocurrencies, but they are tradeoffs; for certain types of applications the cost of losing control of an account is too high for this approach to make sense.
> I am in a caloric deficit and do long exercises but I'm not sure if it actually works

Being in caloric deficit while exercising must work by definition. All advice that I've seen for exercising though is that, modulo specific advice from your doctor[0], you should do high intensity heavy lifting exercise (like squats) for shorter periods for maximum effect. It's both more gratifying (and therefore sustainable) and more efficient.

[0] - a person who suffers from lumbar disc degeneration, for instance, could carry only half or less of the weight but do their squats one leg at a time with a balance assist for the same overall muscle building with significantly less back strain.
If you can't stomach Fox (quite fair), give Ramesh Ponnuru or Ross Douthat a shot. I don't always agree with them, but I can always at least respect their point of view.
I like how you redefine PRIVATE from "something I can see" to "something I can see and Google machines can add to and edit at whim, and Google employees hired by strangers for profit, an unknown number in unknown places, with no individual accountability, can potentially access" and then use your new definition of PRIVATE-which-isn't to bludgeon other people as luddites.

This whole thing is the culmination of years of singularity "the computer will expand the mind" rhetoric.

This isn't your mind being expanded, this isn't you thinking new thoughts.

This is what everyone has been trying to build for years. We are here. And all of a sudden it's creepy?

Kurzweil VoicePad and Dragon Naturally Speaking tried to build Voice Recognition on-device for years and it was a bright and techno future. Then Google Now, Siri, Cortana and Alexa got people to send speech samples over the internet to a foreign, perpetual-record, datacenter. The voice recognition part is better, but now it's creepy.

Email has been turned into a useful automatically actionable system. My family forwards their itineraries and I don't have do anything else, it's automatically calendared. That's probably the only reason I pick them up from the airport frankly.

Why doesn't Google forward their itinerary to Uber and have someone else pick them up at the airport, so you don't have to be involved in your life at all?
I've done it. I have a large project that involves generating .cc and .h files from other files. I wrote a custom script in Javascript (for node.js) that drives the build process, and it handles all the dependencies and parallel builds.

One tricky part was getting the header dependencies right. I run the compiler with -MD and it outputs a .d file listing dependencies, which my script parses.

I wish there were a simple library to build this kind of stuff on top of. Often you need a real programming language (which Make is not) and parallel dependency tracking (which is tricky to get 100% correct when you write it from scratch each time.)
Can you share some screenshots? IMO, text looks somewhat better in Firefox than in other browsers.
Tracking the movements of all citizens is not a compromise that ought to be made to keep society safe. This power can and will be abused to target minority groups (closeted LGBT, minority ethnic groups..). Also in America law enforcement has too many times to count abused their power, and fabricated results from "evidence".

As any lawyer would say: Don't speak to the police, even if you're innocent. Same with this. If I personally want to share my own private tracking data that my lawyer says I can share.. sure. But I do not want this entire data free for law enforcement to see.
Schools are a central part of a childs life; far moreso then a workplace plays in an adults life.
Flipboard Resets Passwords for 145M Users Following Data Breach
>That is definitely not the problem. Email you send is owned by its recipient. Generally, the recipient can do what they want with it, including delegating to Google and allowing Google to scan it for purchase information.

I don't agree that everyone thinks this is the case.
I think they'll be fine. At my last company we had a large MapR cluster and it was hands down more reliable and user-friendly than anything else. Maybe Cloudera will pick them up.
Because there are rules of logic, reasoning, and evidence that are independent of your biases. You have to learn them and become skilled at applying them to sources of information (something that everyone should be learning in school).
Browsh + uBlock Origin + Mosh + Tmux = low bandwidth remote browsing
That's what I love about Clojure culture. It started as an acknowledgment of weaknesses of dominant solutions (isn't ORM an anti-pattern?) and lead to this beautiful story of open source: Yesql -> HugSQL -> PugSQL

It's interesting to watch as it clashes here with one-way-of-doing-things Python culture.
I'm just going to copy pattpass' response to a similar comment here, because the decision to use Chromium makes more sense with this context:

What benefit does Microsoft have by using Mozilla instead? Earnest question.

Electron, the software framework VSCode uses, runs on Chromium. Github maintained and developed the framework and they are currently owned by Microsoft. If Microsoft contributes to Chromium and improves performance they benefit in a lot of places: their new browser is improved(Edge Chromium), their own framework(Electron), and their own product (VSCode).
Okay I misunderstood what you meant by native malware.

But if your threat model is that extensions can be added without the user's consent, then that is the vulnerability you should fix. And it still wouldn't justify blocking a user who is aware of the risk and chooses to disable that layer of default protection.
> If this becomes a reality

If?

They’re acting in keeping with their business model. There’s no “if,” just “when.”

I’ve already started reaching out to all the people that I’m family-and-friends tech support for and begun pitching a transition to FF.
Such a list would need to be created and maintained. I'm not sure that would be a great use of limited resources.

The practice we've been following so far is switching URLs to a more accessible article on the same story. And users often post workarounds in the threads. For example, this may work for you: https://web.archive.org/web/20190530100102/https://www.wowkt....
NorthFace Apologizes for Adding Its Own Photos to Wikipedia to Promote Its Brand
One of the dumbest things I’ve ever published
Intelligence services threaten our security
This is why I said the ideal would be a non ambiguous mapping: so that the text and visual code is equal and you can convert between them as you please. Unfortunately, this dream is unlikely.

I can't imagine this being possible with two humans looking at the same visual display/image and aligning on its "true meaning" let a lone an automated system doing it. Reduce the problem down to a fixed set of visuals with mapped meanings to AST and you can get there but then you are a vastly limited "language" of functions and that explodes into a horrible and complex visual tree to get any non trivial complexity described.
> disregarding whether not purchasing medallions, is "clever" or "regulation avoidance"

A taxi medallion is required to accept rides from people that hail you from the street. That's it. Companies that schedule rides via phone do not require medallions, and never have. These have existed for decades, I remember my family using them to get to the airport when I was a kid in the 90s. Uber and Lyft just found a way to schedule rides via phone much, much quicker.

> Do rideshare companies have lower operational costs? Taxi's have presumably been profitable seeing as they dont have funding backing and have been around for years. while the two biggest rideshare companies dont make a profit

Taxi companies have been profitable, yes, but a large portion of their profitability comes from the artificially constrained supply of taxis. The medallion system constrains supply, thus inflating the cost of the service. Taxi companies' profitability was due to government interference, which let taxis grow complacent and offer non-competitive services. And now that they have competition from ride sharing, taxis are struggling. Taxis apparently aren't profitable when they actually have to compete.
Block Fingerprinting with Firefox
Ask HN: VPS Security Best Practices?
Hi folks,

I'm quite interested in security, ideally with VPS systems.

Personally I follow (more or less) Andrew Eaton's[1] suggestions and I do my best to use tools I find interesting[2] and useful[3] that should be used in any server, virtual or "Bare Metal".

What are the best practices you can suggest so I can become better around this topic?

I'm eager to learn more.

[1] https://www.udemy.com/the-perfect-nginx-server-ubuntu-edition/
[2] https://github.com/jgmdev/ddos-deflate
[3] https://github.com/jgmdev/stopspam
Bias and false beliefs aren't the same thing.
Show HN: New VPN service, fast, secure, immutable WireGuard and IPSec
> lenses are modular and exchangeable in a very usable way.

I see you've never encountered a blacklisted lens vendor, or a lens that for whatever reason refuses to ID properly to the body and just throws up F-- and FEEE Errors all day long.
> It doesn't talk about turning STAB TRIM back on, though, nor does it talk about turning STAB TRIM on with etrim inputs already applied — that's what I was calling your homegrown protocol.

The EA pilots already had gone off the checklist when they turned the stab trim back on.
I've long since stopped actively following current events. My only source of news is what percolates through from other outlets (HN, things important/culturally relevant enough to get mentioned in Youtube videos, etc).

I would flip the question. Why would I want to keep track of current affairs? The vast majority of the things happening in the world have no impact on my life whatsoever. Even really big things like the Mueller report really don't have any impact on my day-to-day life (NB: I am a US citizen).

I do research on individual ballot propositions when it comes time to vote. I virtually always vote for third party candidates or no-one at all, but if a political party I actually support ever gains enough prominence to have a chance of winning I'll do my due diligence on their individual candidates too. Aside from that, who cares?
The Simplest Way to Create a Great Drawing
For now yeah, I believe the plan long term is to move the desktop version to it as well
I agree, I use time machine on both work and home machines , and I also keep an additional offline drive for my home machine that I sync regularly and then move to a different area of my home and leave unplugged (providing security against a ransomware or other malicious attack).

But most people just don’t and a response of “restore from your backup” is unhelpful to them :(