skysight-inc/HackerNews huggingface dataset:
I’m of two minds. I rarely go there as there are “too many tourists”. Even when I worked within walking distance, I wouldn’t eat lunch there for the same reason. OTOH, were it not for those icky tourists, would Pike Place stay open? I know of similar venues across the country that were on the verge of being torn down until they were turned into tourist-attracting spectacles.
Research Engineering FAQs
135: Deep Cuts podcast, on-call, Cloudflare fustercluck, multicloud mess, more
Money is strange, right? It literally doesn't exist yet it can run out and cause entire nations to go into chaos. Since it is literally a sociological experiment, are we going to get to the point where we fine tune the allotment such that we disable down-turns? It's almost as if we simply just get angsty all at once, see a global therapist and the economy recovers.
Despite the clickbait title of the article, this isn’t complete information. Plenty of locales will be happy to take your money and register your company - named, numbered, owned by Larry, Moe, and Curly no problem.

However banks still have their “know your customer” requirements, and generally need to understand and verify the ultimate owner of an entity. That is where the checks are. Just registering a company doesn’t give you access to a bank account. Where companies like HSBC get in trouble is they do the verification incorrectly, wink, and don’t discover the error until someone points it out to them.

Money coming in and out of traditional tax havens gets a lot of scrutiny. As someone mentioned earlier most current money laundering schemes involve real estate or buying profitable businesses. I’ve read the mexican drug cartels will buy winning lottery tickets from people (at full value!) because it allows them to justify their income.
Why would I choose a small business over a unicorn-scale startup? Can you explain why this question is relevant?
APIs Level Playing Field in B2B
If you are looking for example logs, the loghub project by logpai is a pretty awesome place to take a look.

https://github.com/logpai/loghub
For any of you who want to develop a deeper understanding of what is mentioned in the blog post, I can recommend the book Serious Cryptography by Jean-Philippe Aumasson. It's one of the best and most accessible crypto books that have recently been written.

https://nostarch.com/seriouscrypto
I just love how we went from "underscore" to "lodash" to "lobash". People in the future are gonna think we were nuts. Either way, cool project!
https://mises.org/power-market/was-mises-neoliberal
irc has kicking / banning and kickbanning.. not necessarily booting (unless you used it as lingo) and certainly not HTML parsing.
My takeaway from this article is that the problems are indeed implementation-specific, but that whilst the cryptographically-secure values represent a small subset of the possible values, it's still too large a selection to provide a generalised list of what values are suitable for purposes. They do admit that RSA can be implemented securely in theory, but that the range of possible implementations is so vast that it's incredibly difficult to know if the parameters chosen are vulnerable without a maths degree and some very deep analysis.

On the other hand, those of us who write code that uses crypto are generally beaten about the head with 'NEVER ROLL YOUR OWN CRYPTO' and use library implementations right from the start. These are libraries that I assume are indeed written by people with maths degrees and have done careful analysis of the outputs. I know for a fact that I wouldn't trust any encryption I could write myself in an hour.

The biggest obstacle I find with ECC is that it's relatively easy to judge security by RSA (assuming correct implementation) but it's surprisingly difficult to compare the two; if I want RSA-2048, what key size am I supposed to use. ECC was also heavily promoted as offering 'RSA-equivalent security' while using less CPU, which made it particularly suitable for mobile/embedded systems, without necessarily implying it was an improvement over RSA.
LIGO/Virgo gravitational wave collaboration fails to deliver on own predictions
Good for Philosophy mind experiment but is it real ? No GitHub meant no truth.
Also, half the shutters always seem to be stuck shut on public outlets.
They enthusiastically tried democracy for a while, but quickly learned that it doesn't really work when the country consists of many factions that have no shared values. After multiple weak coalition governments that could get absolutely nothing done, in the last elections many of the previously governing parties were voted out in an election that had a turnout of 18%.

This lead to the start of the second Libyan civil war. The newly elected House of Representatives, (from now on, "Tobruk government") wanted to take power, but the parties that lost the elections refused to yield it, passing a measure that granted them temporary special authority, and formed the "National Salvation Government". The various Islamist groups in the country declared that neither government represented them, and took the black flag as many different factions, most important of them being "The Libyan provinces of ISIL" and "The Shura council of Benghazi revolutionaries".

The war from then on had many twists and turns, with the UK, US, France, Russia, Turkey, Egypt, Chad, Sudan, Saudi Arabia, United Arab Emirates, Algeria, Jordan, Belarus, Italy, Germany, EU, Qatar and Iran supporting a faction or another at any time. The only really consistent part of this was that the western powers were stumbling over each other to bomb ISIL and other Islamists.

The end result was that a shrewd Libyan-American warlord named Khalifa Haftar (his tagline being that he fought with and against every major faction at some point or another) essentially took over the Libyan National Army (LNA) and the Tobruk Government (they still exist and maintain all the trappings and procedures of democracy, but do so in a building where the security is provided by Haftar, and would never go against his will), and conquered most of the country, including most of the economically significant oil and water resources.

Haftars winning strategy was largely realizing that the western powers would support anyone fighting Islamists, so instead of directly challenging his main opponents, he cleared out all the Islamists he found and took their territory. He might have "encouraged" areas that would not otherwise have flown the blag flag to do so, before crushing them.

He had a lot of western support on the way, but his policy of not taking Islamists prisoner and just having them summarily executed seems to have cooled those ties. Since 2016, he's been courting for Russian support, and seems to have gained it.

If you asked this question in early April, I'd have said that it seems like Haftar will be the next Gaddafi, as his forces were finally moving on the capital and the remaining territory not held by him, but this offensive seems to have failed because of strong Turkish support. LNA withdrew for a time, and Haftar ordered LNA to target any Turkish ships, companies and arrest Turkish nationals found in the country. It seems like he's building up for attempt two.

Also, Haftar is 75 years old, and no-one has any clue what would happen to his forces if he died.
Abine Inc. | Privacy | Remote | Boston, MA
Abine Inc. provides online privacy software and services to consumers. We have hundreds of thousands of active daily users, and are looking to grow our team. If you care about privacy and security for the masses then come talk to us.

We are specifically looking for part and full time roles:

* DevOps & Sysadmin Engineers (especially with AWS experience). Ideally you'd have years of experience with Linux systems, done a great job implementing devlops workflows, but also care about the care and feeding and protection of all the infrastructure you touch.

Devops: https://abine.breezy.hr/p/9fcce0a83b58-devops-engineer-sysad...

We are also looking for capable linux admins with less devops experience (but are capable) but who are skilled as systems and network security -- especially in cloud environments.

* Full stack engineer (from angular to RoR to bash to java and back again) to work with us on improving our privacy products across multiple platforms and languages. To us "full-stack" means you can work on a system from end-to-end, and can apply CS knowledge and experience across specific languages and platforms appropriately. Flexibility and quick learning is a must. Most of our code is client software so it helps if you've had to deal with client specific issues (e.g. dealing with long-tail distribution of client versions etc.)

Full-Stack: https://abine.breezy.hr/p/d5c9249c8227-contract-full-stack-e...

We are still a small team, so your work will have an immediate and real impact. You also won't be stuck with a routine - we touch many types of systems and problems, so raw capability is more important than direct experience. What can you do over what have you done is what matters most.

Apply at jobs@abine.com
To turn your point on its head, I'd say the trick is to come up with a stronger political signal than just voting.

Fridays for Future and Extinction Rebellion are examples of such things - I think there's scope for much more across various politicals affiliations and leanings.
Tom Scott did a wonderful video breaking down the design of the British plug.

https://www.youtube.com/watch?v=UEfP1OKKz_Q
It started out as a necessity, and it isn't new. Its because of netsplits, DoS, and channel takeovers that bots existed on EFnet and IRCnet. Chanserv/Nickserv/X/W (and UnderNet/DALnet) came later on.

> I wonder if the ability to have IRCs running all the time actually harmed IRC since at the past (90s mainly and perhaps very early 2000s) if someone was in a channel, they'd be up for chatting too whereas now channels are full of "zombies".

Untrue; bots existed in past. Take a look at Eggdrop's age, for example. Whether it is much more common nowadays I don't know, but BNCs are nothing new either. If anything, it is because running a computer 24/7 is much more cheaper nowadays (although back then you could get a shell for e.g. 5-10 USD / month).
In some countries there’s multiple version of each season as well (e.g. original & dubbed) making it even messier.
Links to original sources are always helpful.
Building Stack Overflow Job Search – Parsing Queries
> What more functionality are people clamoring for?

All those features in a market where lots of people you'd be chatting with are on Android, I'd suspect.
Is it real growth or just inflation showing up primarily in asset prices?

At the street level it looks as if some recovery has occurred, but you certainly can't compare it to the "roaring 90s." The average person has not felt much of this.
Of course; I am a decent person. Let me just quote Linus Torvalds here:

> Tabs are 8 characters, and thus indentations are also 8 characters. There are heretic movements that try to make indentations 4 (or even 2!) characters deep, and that is akin to trying to define the value of PI to be 3.
Maybe it's not your Googlefu. Maybe it's because the article isn't a video on YouTube, or some sort of social media post, nor is the page heavily weighted with ad. It is a web page full of useful/on-topic information, and the current algo at Google seems to make those types of pages lower ranked. At least that's how it feels
> start giving your kids amazing skills that you think will give them a fulfilling and good life from day one. Well yea, of course.

Definitely going to apply this to my kids, and I wish my parents did this with me on a broader space. They sent me to english classes every saturday for a lot of years (from 7 to 15 or so), and even though I hated it at the time, I'm grateful that they did because it's definitely a plus in my life nowadays. (I'm from South America, most people don't speak english or have a below mid proficiency level).
I very much doubt Wall Street will absorb them. The number of needed Finance jobs collapsed with automation. The only people getting analyst jobs are those with connections or an Ivy League background (and a top one with certs at that).

The call center jobs are just being cut and/or the salary has been dropping rapidly since 2008.
How Facial Recognition Works Part 1: Face Detection
That’s what secure coding guidelines say to do. It’s called “input validation”. For example here’s Apple’s: https://developer.apple.com/library/archive/documentation/Se...

Especially important on methods called on launch, if a crash would cause a problem.

(Swift or other strongly typed language would help here.)
I think you will get much more traction with a blog post about a success case. What is your better example of a successful analysis and fix of a project? Try to write it very carefully, so the people in the project are happy that you wrote about them. Make the post after they fixed the bugs.(Perhaps give them an opportunity to review the post.)
It doesn’t run out. It just gets stuck.
I suspect your comment is at least partly a joke, however the actual maximum fine possible is 4% or €20 million, whichever is higher.
Procedural Generation of Initial States of Sokoban
I really would like to use libsodium, but I use Java. Looking at https://libsodium.gitbook.io/doc/bindings_for_other_language... it seems that there are 5 different ports. The question which one is save to use?

One implementation docs says:

"I'm experiencing some issues on Windows. Do you have any idea?

I'm sorry but I'm completely clueless about Windows environment, but if you have any suggestions or PR changes. They will be more than welcome."

Can I trust them? How do I know there are no some Windows-specific issues in this implementation?

Another library listed on this page does not have a single release? Could it be trusted?

Next has been abandoned and moved into Apache Foundation incubator. Good but will it be maintained? Maybe use this, or maybe Lazysodium, which has a nice Github page?

If I am to verify if any of those ports is a proper one probably I would have to really become a crypto expert.

Isn't it safer to learn and understand how to use, say, AES algorithm as it is provided as a part of Java? There is a few important config choices, but still it looks easier than analyzing someone's libsodium port?
See discussion here https://news.ycombinator.com/item?id=20377427
The British system (BS1363) is by many measures the best plug/socket system, from automatically shuttering the live wires, to insulated live/neutral to prevent metal objects from shorting on sockets, fuses in the plugs to protect weaker cables, longer wires for Earth than Live if the flex is pulled out. Even 1363 has flaws though -- see the loophole at http://bs1363.fatallyflawed.org.uk/, and of course the counterfits.

Every time I use a U.S. plug/socket is scares the bejesus out of me, having grown up with 1363.

However it has significant practical drawbacks. Many devices are class 2 and thus down need earthing. A flat two-pronged europlug allows a far higher desnsity socket, and much smaller footprint cables.
PyDev of the Week: David Kopec
Yeah, this is true in a lot of cases. But it seems to go against the spirit of open source and turn it into a shared source model... maybe that's fine, but it ends up with people using open source as a marketing vehicle to attract developers rather than being truly "free and open source" where governance and viability isn’t tied to a single company’s fate.
Quite right.

But the adoption of video formats is hampered by the lack of a fast en/decoder.

The people pushing for the adoption of one or anther codec really ought sink their time and money into making ffmpeg work really well.

They gain nothing from saying "it could be really fast" when all people looking for a format to use for something have is a slow reference implementation.
Could you elaborate on why you hold a distasteful attitude towards this person?

Just curious.
Interestingly enough I started using Erlang around the same time and while I've continued to use it for the project I started then on and off, I've not had a lot of reason to use it on other projects. I don't ever think it'll be as wide spread or as popular for many of the reasons listed. I do think it will continue to be a tool used to create great projects with very few hands. In the right hands and for the right projects it is an incredibly productive tool.
ECIES is part of a family of things that are all more or less just ElGamal with a symmetric primitive attached. libsodium implements one version of that with Curve25519 + secretbox (which in turn is XSalsa20.) It's really mostly just superior in the sense that it's a) fully specified, including test vectors b) all the knobs twiddled for safety, c) incidentally, very performant.
Obligatory mention for the US: Delaware, the scumbag state - allowing tax avoidance.
Team Temblor – Temblor.net
Stevens Capital Management LP| C++ Developers| Philadelphia, USA| Full-Time| ONSITE| VISA

Stevens Capital Management LP (“SCM”) is a registered investment adviser that manages a multi-billion dollar hedge fund that has been in business for 30+ years.

SCM specializes in the rigorous development and disciplined implementation of empirically based quantitative trading strategies. Our highly productive team works in a fast-paced collegial environment, utilizing extensive data sets, technology and the scientific method to devise and employ trading strategies throughout the world’s most liquid financial markets.

We are looking for exceptional C++ Developers.

Primary Responsibilities:
- Develop new software and enhance existing systems in C++ on a linux platform.
- Create tools to process, store and analyze quote, order and financial data.
- Work closely with our quantitative research analysts, engineers and other groups to provide software solutions.

For more details and to apply, please visit:
https://grnh.se/a25961831
Someone should do an anthropological study.

"Final Fantasy? The Enduring Influence of JRPGs on Web Development Practices."
This graph ('Global carbon dioxide emissions by country' - https://en.wikipedia.org/wiki/Greenhouse_gas_emissions_by_th...) shows where 'direct political action to change our actions at a global scale' might be encouraged if you want a significant change. I wouldn't hold your breath.
Before the 2008 GFC, Bernanke said something like recessions are in the past. Or that they had "solved" economics.
There are 3 huge dams like that on the Dnieper river in Ukraine, with similar ecological and population displacement impacts. Gotta tame that nature, comrade.
It is not possible to disable downturns. It sounds different if framed as the longest economic bender in history. The hangover is likely to be brutal.

Alternatively one might argue that what is happening is a kind of bifurcation. The wealthy and well measured get an ongoing expansion while the poor, shiftless, and unrecorded fall through the cracks at alarming rates. We didn't have homeless families in significant numbers when I grew up and now they are pervasive. That is pretty poor real performance for a best ever economy.
Beware this analysis. Intent can matter in copyright law in many important ways, even if not on the core question of whether there was infringement.[1] And the fact that a bad actor with a big legal budget can still make hell does not make something worthless. By that standard, all contracts are worthless. It’s also worth remembering that not everyone is a bad actor. You can help secure good will and trust by making sure that the other guy has a full understanding and proper notice of your arrangement.

I don’t know much about CLAs and I’m no expert in copyright law, but I’m just saying that this piece doesn’t pass the smell test. It might still be the case that CLAs aren’t worth your trouble—I really don’t know—but I’d want better reasons that the ones in this piece.

[1] https://www.trademarkandcopyrightlawblog.com/2013/12/innocen...
>White empires

I assume you mean European? Why do you refer to the empire by skin colour, but the territory by name?
Very poor. The collector surface is just free.
After what seems a very long wait Tutanota now provides a free encrypted calendar along their secure email, a most requested feature. It's still beta for now but usable and I for one welcome it. I like the simplicity of the Tutanota interface but a calendar was definitely something I was sometimes missing.
Drinks on Friday afternoons is pretty benign imo but I don’t have substance abuse issues.
Both contribute to higher prices. Corporate profits are up a ton too, over the past 5 years.
Not quite sure how BA is getting away saying there was no fraud because of this. Many complaints on my twitter of people that used cards only with BA and ended up getting cards used.
In the UK, isolated transformers are how we allow shaver sockets in bathrooms. You touch one of the wires and (via wet feet a pipes) you create the path to ground, which is bad. But because the wire is only live when there's a complete circuit, it's safe. You'd have to grasp both sides of the circuit with different hands to cause major problems
Yeah, these got popular with GitHub on bigger projects. It’s like lawyers for these organizations aren’t sufficiently well versed enough in the laws around open source to realize they’re already protected, so they apply contracts law, which is what they learned in law school.

What’s kind of ironic is that I wonder if these are even valid contracts.

Contracts are required to have 5 characteristics: an offer, acceptance, consideration, competency, and legal intent.

Open source agreements that require disclosing source code changes may lack the ability to give consideration as you are, in a sense, required to contribute changes back.

Consideration means you get something in return for signing a contract. The thing you get for signing ULAs and the like are the ability to use a product.

What are you getting in return for signing these agreements? The ability to contribute? Already that seems like a pretty weak consideration, but when you add in that you are required by some licenses to disclose changes and I think these contracts are completely void of any legal basis.
Suddenly I’m more confused. How can you agree on a secret key, remotely, without some foundational source of trust? I don’t trust the default CA packages anymore, given the prevalence of untrustworthy vendors like Comodo.
"Windows is a Linux distribution"? From my perception, it will merely play the role of an hypervisor, probably tightly coupled with Xorg and FS mount points, probably not. But Linux users need to choose a distribution, like Ubuntu, to run on Windows.
Has anyone tried calling the phone number used for a z-index in this chart? Seems like a very specific number to be used that many times. It would be amazing if the css was #ForAGoodTimeCall { z-index: 2147483647 }
Disclaimer: I co-authored the Latacora one. I think "key size" is something maybe protocol designers need to be worried about, but it's still about two hops above how kobs-set-for-safety I like recommendations I make to be for the median programmer.
Show HN: EQBot – Ten year anniversary of an original earthquake tweet bot
Yeah but, in a GUI, pressing Tab is supposed to change focus, not to insert a Tab character.
This is where a bunch of people insist that the whole company isn’t like that, it depends on your team, as if that excuses this type of thing.
> I was in a supermarket sometime last year and saw a woman put a package of meat in the toilet paper aisle and walk away. She saw me staring at her and began shouting at me.

I mean it's kind of symbolic: meat is basically absolute, complete and utter shit, anyway.
Persuasion is the most powerful force in the world. You can literally create money out of nothing, if you can persuade the masses of an optimistic future.
By that same logic, you might also argue it's not possible to stifle success. The very formation of the central bank was (besides self enrichment) made to stabilize the economy. So in that sense you're quite wrong.