skysight-inc/HackerNews huggingface dataset:
Ask HN: What's the best way to share application secrets in 2019?
Some context: we have about 30 devs in our org, and each team has between 3 - 5 devs.

Each system has a handful of keys associated with it: API keys, FTP logins, etc. These are encrypted with another key (let's call this the APP_ENCRYPTION_KEY) which is stored in the Environment Variables for the current system. Each application has a unique APP_ENCRYPTION_KEY.

So now I've got at least a dozen (and growing) different keys to manage. Thing is, not all developers need access to all APP_ENCRYPTION_KEY's.

My plan was to create separate BitBucket repositories (internal to our organization) and divvy up access to those repositories based on a role. So if you are in DevTeam A, you get access to KeyRepoA, DevTeam B gets access to KeyRepoB, so on and so forth. New keys are added to a powershell script, then you simply run that script against your dev box / the servers to add the environment variables.

However, I'm not sure if BitBucket is a trusted source. It feels like we are just moving the problem from the appsettings.json file to another source.

Is there a better approach for small teams / orgs?
Intel to Acquire Barefoot Networks
> Not to mention 1-second GOPs are ludicrous for a broadcast/ondemand publisher like the BBC.

Twitch (and others) is looking into optimizing for live steaming. A good comment with links from last year:

* https://news.ycombinator.com/item?id=16797590
Wow, it took me a while to realize that this article is about fertilizer factories and not about fertilizer (actual) plants.

The brain is funny sometimes and so is this title.
I did my 4th grade assignment on the human heart in a hypercard stack instead of the giant piece of cardboard with pictures and text..

Had it animate, and had sounds that I recorded.. everything.

This was 1991-1992...

I got a fail.. the Teacher wanted me to "print it out and put it on cardboard".

I eventually got a good mark.. but that's another story
Transformed by Fourier
I agree that if everyone burning trash were the cause you'd see a bigger difference but it's worth nothing that NYC is not exactly the pinnacle of air quality.
Japan exploits a similar loophole for slaughtering whales.

They are a signatory to the moratorium on whale hunting, but exploits a loophole which allows whales to be killed in the name of ‘scientific research’.
> If the police felt free to use it in an assault case, why not shoplifting, trespassing or littering?

For the same reason dna tests are not already used for shoplifting, trespassing or littering?
Funny about those downvotes.

AMD can deliver 8C/16T in 65 W but their GPUs need 50%+ more power than nvidia's for the same performance (up to 100% more at the 1080 lower end). You're saying I'm not right and they don't have a problem?
https://outline.com/PG6H78 for those of you (like me) who just get a blank page.
Even on Windows it's best to keep your text in UTF-8 and convert it to and from UTF-16 when interacting with win32 APIs. Java, dotNet and JavaScript are the worst of all worlds because you're both stuck with wide characters (in their native string types) and have the intricacies of UTF-16 to consider. I guess the advice might have been better phrased as "Unless you're forced to, or have very special needs, stay away from UTF-16".
99% of people sign them. Almost everyone will barely read it. The rest assume that it won't affect them.
With Most States Under One Party’s Control, America Grows More Divided
Let's not forget the associated scams like 'title search/insurance', 'appraisal', and 'home inspection'.
Ask HN: Is WhatsApp Web Down?
WhatsApp Web got disconnected on all my browsers and QR authentication fails. Is there some unreported technical problem going on?
Learning Individual Styles of Conversational Gesture
How a small minority can change the world
And that reason is...?
I like your analogy, I'd add that DNA search/collection is akin to scanning cell phone records to see who was in the area at the time of the crime. Which typically requires a warrant.
When I attended the Drupal Europe 2018 conference I had the opportunity to talk to Barb Palser of the AMP global relations team. I asked her in an intentionally innocent way: "I thought AMP is supposed to replace RSS, but from the presentation it seems like it's trying to be a better HTML?" to which she replied yes. I acted all optimistic, so she wouldn't be defensive, but this conversation sent chills down my spine and I remember it to this day.
How much would be released if it were just put into landfills?
Plain Text Accounting in Messaging Apps
Python predicted to overtake C and Java in next 4 years
Haha, even they:

https://news.ycombinator.com/item?id=16171735
It also prevents future parks from existing.
The presence of an icon would not break any script.
Oh yea, I wouldn't want to do that. I use a hackintosh but with an intel CPU and it just works flawlessly except for the whole NVidia GPU holding me back.
Watch, Try, Learn: Meta-Learning from Demonstrations and Reward
Why do you think a larger group will find AMP annoying? I know I'm in the minority, but I generally like AMP in my search results.
If, outside of our control, your password and mine matched except for one character and that near match was public knowledge, would you object to me publishing my password here in cleartext?

There's a big difference between publishing your own thoughts - which may have nothing to do with what your family thinks - and publishing your DNA, which is inextricably tied to that of your family. It's my data, which I have a "natural" right to share as I see fit, but it's also very similar to yours, which you have a right to keep private. These rights are incompatible, one has to give.
Great story. Now they should go make another million or two selling the movie rights!
How to Measure Latency Between Google Apps Script and Cloud Platform Region
It is. But I have this radical idea that with a declarative toolbox like what NixOS offers, most distros are trivial.

Lots of simple distros are doable with a page or two of declarative Nix configuration. They are just some opinionated choices concerning a variety of components, a desktop environment and some default applications (or the lack of thereof). Gentoo is also a meta-distro in some ways.

Of course, if you want some fundamental changes, you might not be able to stretch NixOS that far. Or if you prefer an imperative approach to things.

IMHO, most distro designs (imperative/declarative, binary/source-based) have been explored already. Forking yet a new distro is not advisable, unless you have some novel ideas or just want the educational experience.
That's true, but the article also mentions some possible causes:

"The formaldehyde column is composed of different sorts of volatile organic compounds, and the source can be from vegetation - so, from natural origin - but also from fires and pollution," she told BBC News.

"It depends on the region but 50-80% of the signal is from some biogenic origin. But above that you have pollution and fire. And the fire can be from coal burning or wildfires, but in India, yes, you have a lot of agricultural fires."

India also uses considerable quantities of wood in the home for cooking and heating.
Lemonade Insurance Is Now in Germany
Worth mentioning that the value of HIBP is largely based on trust in Troy Hunt. I think he’s an incredible guy who does incredible work; but he’s also an Australian citizen. Due to our new surveillance laws, he could be forced to backdoor HIBP, or more likely, Pwned Passwords.

This is possibly a step by Troy to mitigate that risk, and given his position I’m surprised he didn’t mention that at all in this post.
"Redirect AMP to HTML"
https://addons.mozilla.org/firefox/addon/amp2html/
Cost, which is falling. (See https://en.wikipedia.org/wiki/Carlson_curve )
Not exactly related, but I've been confused since the announcement in May; when is WSL2 actually available for me to get?
> But they allow teams to operate asynchronously.

Someone still has to know how everything fits together at a higher level though, no?
Portal is moreso an alternative to iframes than an alternative to links. But it's true that it could very well make it more likely for a portal to another site to be included in a page rather than using a link.
N.B., the service limits are quite low for many types of SaaS applications and customer support has no ETA on increasing them: https://docs.aws.amazon.com/general/latest/gr/aws_service_li...
Lemonade launches in Germany with the shortest insurance policy in the world
The Masters of NoSQL Group: Redis vs. MongoDB
Depends on who you mean by "we", people working directly on implementing/supporting AMP? Anti-google crowd? Sure, you're probably right.

But as someone who's just an end user, and not working on frontend development who likes AMP, I don't bother commenting when the opinion is extremely skewed to one side.

I love AMP. The website loads faster, feels a lot snappier, and is overall positive experience for me. That's what I care about. I don't care how it got to that point, I want usable and fast loading website - and AMP gives me that.

Can this be speed and mobile friendliness be implemented without AMP? Yes. Is it implemented without AMP? Very rarely.

Of course there's the argument with google trying to get a tighter grip on web and while that is not a good thing the truth is that I, and huge majority of average consumers, just don't care if it means better results for me.
The article mentions that the bill was first introduced in 2015. I wonder how many aquariums had started removing their whales and dolphins during that time.

Some quick searching shows that some aquariums have been doing this, including Marineland itself:

https://globalnews.ca/news/5238289/marineland-vancouver-aqua...

In this sense, passing the bill now might be less of an incentive to change and more prevention of a change back.
AWS SSM is a trojan horse: fix it now
When you have the power to write the rules, you can break the rules. Google is too powerful.
The Incredible Story of Gorgon Stare
Will this jet fuel be able to melt steel beams?
See also the Blackfish documentary (which seem to have left Netflix sadly). Almost all captive male orcas have a floppy dorsal fin, that is a definite sign of ill health and seldom happens in the wild.
Sourcing high value MLCC capacitors is a real problem. I often design something into my board, only to find out it has gone out of stock. It’s like playing whack-a-mole.
I don't see the difference between incident and sentiment and why 9/11 isn't an incident.
Now claim universal jurisdiction to reach anyone who illegally keeps whales, including US parks. Issue a few Interpol Red notices, make a few extradition requests.
Perhaps this will serve the same purpose fire does in a large, old-growth forest.
And if you Google "India flood zone map", the floodplains nearly perfectly align with the worst areas of air pollution, pointing strongly to an agriculture-linked cause.
Which is why taxis have all but replaced private car ownership in big cities.
Recently used e-scooters while visiting Detroit. They were hit or miss and hard to find a handful that actually worked (charged, maint., etc) near each other. However, when they did work, it was a pleasant experience.

While it was interesting, I can't say that I'd prefer it over walking or public transportation. Also, South Park definitely nailed it.
I do not know. It seems and interesting and difficult question!
This is the kind of thing i expect from China, not the USA. I guess in some ways our cultures are not so different after all
Technical Due Diligence Calculator by Point Nine Capital
They still will, just for L1 only; TAGE is for the lower levels.
There are other approaches which avoid the repetition of column names in SPAN chunks as suggested in the article.

The most elegant and least bandwidth consuming one is described in https://css-tricks.com/responsive-data-tables/ and uses modern CSS selectors:

td:nth-of-type(1):before { content: "Type of Food"; }
td:nth-of-type(2):before { content: "Calories"; }
td:nth-of-type(3):before { content: "Tasty Factor"; }
...
Well it looks and feels quite damn different on the groud as well. Went to Delhi briefly for a few hours on February and I cannot believe people live there. The air quality would warrant immediate evacuation of the area in any other city in Europe and maybe in America as well. In the two hours I waited for a taxi to get me out of there I already started to feel like I'm breathing smoke from a bonfire. Black snot came out my nose for a few days after as well.

I would not live in such air quality for any amount of wealth, it is way way beyond liveable there.
This was first explained by the capability security community. Plan 9's private nameapaces is an approach to capability secure file systems, with the default being the empty namespace. I'm surprised the article didn't mention Plan 9 actually since it discusses capabilities.
GCP was "fully fixed before it was known" according to the engineers I know there. I find it /highly/ unlikely that they don't have patched microcode.

I mean, the cloud business is the place with the most to lose from these kinds of issues, I am incredibly suspicious of the claim that cloud providers aren't patching their microcode.

Whether it's intels or their own modified variant of microcode I would fully expect them to be patched in some way.
Ric O'Barry, former trainer of the dolphins used for the 'Flipper' TV show (now animal rights activist) tells a story in the documentary 'The Cove' how one of the dolphins swam up to him one day, looked him in the eye, took a last breath and then sank to the bottom of the tank and died [1]. Given that dolphins have to make a conscious choice for every breath they take gives some indication for a conscious decision for suicide.

[1] https://web.archive.org/web/20110926051048/https://blog.sfga...
What makes you think there is such a right, and what does the expression "their own data" mean, exactly?

A person's genomic sequence isn't something that that person created (it existed before the person did!) so there's no obvious analogy with a poem the person wrote or a set of temperature measurements the person made or anything like that.

Arguably you should not be allowed to publish your genomic sequence if you have any identifiable living close relatives because you would be publishing other people's confidential medical data.
Open SQL database files without SQL server
The issue does not have anything to do with normalization per se, but stems from the fact that there are Unicode characters that are semantically different, but nevertheless look exactly same in most fonts. For example 'a' (U+0061 LATIN SMALL LETTER A) vs. 'а' (U+0430 CYRILLIC SMALL LETTER A)
This feels like a MIC protectionist push for mining more than anything. With the massive navy claiming world wide shipping as the defacto world reserve currency is unreliable? Get real.

The number of viable cut off scenarios is vanishingly small - especially if it excludes catasophies that moot the point utterly.
Ask HN: How do you publicize and grow your open source projects?
You can't make them perform for entertainment regardless of the loophole used to keep them.
Rustly: A Clojure to Rust Transpiler
One thing missing from this rethinking, as far as I can tell, is names.

You can't move pointers between different processes in general, because each process has its own "memory address namespace". But an absolute path generated by one program does make sense to another program.
How to Choose the Best Project Management Tool If You Are a Millennial?
AMP should be the first stop on the federal government's antitrust investigation. The sheer unfairness of being granted search priority if you hand over your content to Google is the pinnacle of leveraging monopoly power to gain power in another industry.
I've heard it argued that the police and other authorities have the right to know who you are.

Is this really the case? Does a representative of a government have the right to your identity?

If so... is there an extent to which they can know who are you are? The difference here between a vague answer, a trust based assertion, or even a deep proof.
On all of these the GPU is directly connected to the CPU and there is no chipset in the way.

The benefits of X570 over B450 therefore have nothing to do with GPU performance but instead would be either overclocking capability or, more significantly, I/O to everything else.

B450 only provides 6x PCI-E 2.0 lanes and 2 USB 3.0 gen 2. That's not a lot of expansion capability, especially with nvme drives. Want 10gbe? Or a second nvme drive? Good luck.

X570 gets to leverage double the bandwidth to the CPU in addition to being more capable internally. So you'll see more boards with more M.2 nvme slots as a result, for example. And thunderbolt 3 support. Check out some of the x570 boards shown off - the amount of connectivity they have is awesome. That's why you'd get x570 over b450.
Not to criticize you but I remember reading similar lines in books that dealt with slavery: “they look so happy”, “they are being kept so well”. It’s probably best to always assume that the natural habitat is the best for animals.
Does anyone know who the manufacturer of the “Wheels” scooter/bike is? That design appeals to me much more than the standing scooters.
The SharpBrains Guide to Brain Fitness: How to Optimize Brain Health
That moment when you tap the omnibox planning to copy the URL and realise you are not on the actual site you meant to visit.
What expecting to see something about uid, gid, home, etc.
Google is serving a broken page for Firefox on Android (intentionally serving something along oldschool wap pages). I used an addon to fix that, but then the page suddenly was full of ads, videos, smart boxes and amp links.
Thanks for the link! I'm not directly involved in the project (yet), but the team has been so nice to me over the last six months I've been using nannou daily that when they wanted to feature my dailies on the site, of course I said yes!
That's really not ideal. That is putting hardcoded data in CSS.
For the sake of throwing credit out there, my understanding is that the new edition[1] is very heavily revised, and most the revision was done by the co-author, Steven van Deursen.

I think I remember seeing Seemann write on his blog that the new version is a much better reflection of his current thoughts on how to do DI, and object-oriented design in general, than the first edition was. In particular, the 2nd edition is much less focused on heavyweight tools, and takes an overall cleaner approach to things. Nowhere near as much Castle (the .NET equivalent of Spring) type stuff.

[1]: https://www.manning.com/books/dependency-injection-principle...
We definitely need a 2020 version for electric bike design! I see the Jetson Bolt everywhere. And can't help thinking some brave nomadic explorer could travel the world on something similar.
That's because Austin (and Denver and Seattle for that matter) are basically SF Lite. Pick any city that isn't having it's housing market turned upside down by California monopoly money (well, tech monopoly money) and you statement does not apply.
I've defended it in the past when it used to be faster (combined with pre-loading) than most websites, on mobile. Nowadays, it should be quite easy to optimize a website enough to be faster than the AMP version, but it seems not many websites are even trying…
Hearing about Slackware brings back some memories. I was a heavy Slackware user during the '90s; the promise of a lightweight OS with none of the fuss seems to have been ultimately achieved by Arch though.

I'm curious what distributions early Linux adopters are using now?
But how big is the inter-person variation? "Out of some 200 hours for the entire study, for only 18 minutes were they actually all sleeping synchronously" is a pretty useless quote -- how much of that was due to a handful of extreme outliers? People's sleep times were obviously not evenly distributed over the other 1422 minutes per day. And obviously environment is going to play an outsize role in causing outliers, since people who work the graveyard shift aren't going to spontaneously revert to a normal sleep schedule when they enter a sleep lab.
Thanks for the additional option - I've updated the article to include that possibility as well
I actually already agreed with most of what you said! It's just that you mentioned the audience problem, and I nodded my head, but then you seemed to have a further point relating to Bezos and others like him, and I couldn't figure out what you meant beyond that audience/disoverability problem. I understand your point now.
It would be nice if it had CTRL+S shortcut
At this same event they also announced their 1st gen RDNA GPUs, called Navi. Also releasing to retail on July 7th. They supposedly go quite some way to reducing the gulf in GPU power usage/performance.
Ironically, most legacy C environments are commercial in nature. Open source tools seem to have a lot better track record in this regard.
Yeah, having ridden Birds around Paris at 25 km/h without ever considering this (I think they had lever brakes with cables too), this is terrifying. People are crazy.
Indeed! Thanks to tireless lobbying, there is now a bipartisan-sponsored bill before the House: https://teddeutch.house.gov/news/documentsingle.aspx?Documen...

This is the one mechanism that actually has the potential to turn the entire economy around without directly making politicians look bad, so it has a nonzero chance of passing.

The best thing you can do for the climate today is to call your representatives about this bill, or better, send handwritten letters or letters to the editor.
You could move the data into a data attribute, and then use "content: attr(data-td)" for example.
I loved the incremental compile/watch tests stuff myself. It's been a while, but I do miss having all my tests run every time I save a file.

But I do accept that sbt is not everybody's cup of tea.
What "power in another industry" is being gained?
It's not like they were working hard to make the world a better place, but investing in the hopes that they would be richer without too much work. It's hard to feel sorry for them. They are on the same level as Neumann but he happened to be cannier.
Gradle is so much better than maven it's not even funny. Every time I check out a project in maven these days, I flinch.
Isn't AMP blatant copyright infringement? If so, how does a website owner demand the infringement to be taken down?
No, you've pointed out your bias. I didn't imply you approved of Trump. You stated that Politico's articles were biased towards liberals. I posted an article - from another news source because I couldn't find one on Politico's home page at that time that I felt would meet this criteria - I assumed you would consider biased towards liberals. That doesn't mean I think you agree or disagree with any particular politician.

I posted that to see whether or not you found it biased - do you or do you not?

Your point does not stand. It's ludicrous both siderism to conclude that Politico is on the same level as Breitbart. It's dangerous.
Someone detached my brake cables on my bike locked right next to a hill that lead to the busiest road in the area. I noticed before I even got on the bike, but come on people.
From the study that Marino & Frohoff (2011) cites for orca whale lifespan in the wild:

> Using data from between 1973-4 and 1987, females have a mean life expectancy of 50.2 yr

How is this possible? I don't understand how a 14 year observation window allows someone to observe an average life expectancy of 50 years.
I think bitL is saying that reddit embeds some sort of tracking script in “soon-to-be-banned subreddits” that they don’t embed in normal subteddits, and that you can tell this from notifications within Tor