skysight-inc/HackerNews huggingface dataset:
Knowing better than the owners is a matter of tradeoff.

There are whole isps and even countries (including the UK shortly) which mess with DNS requests. Helping the millions of users who are in that situation, and don't even know what D Sits, seems like a net good. As you say, experts can choose to disable it.
Then just use it with symbolic links?
Formula E SUV
As a long time Node.js developer I took a look at the project but it's still a really half-baked implementation of the security flags. You almost always end up flipping all security switches off because your application needs every feature (network, filesystem, etc).

No package signing, no flags per module, no syscall whitelisting, etc.
Isn't there mainly one person responsible for writing Rust's Cargo? I vaguely remember them giving a talk.
I'm trying to replicate this on my Macbook and it's causing a lot of lag, and taking a long time. Anyone else have this issue, or might be able to help me debug this? I'm assuming I just don't have enough RAM (I only have 8GB here)?
USC pays UCSD $50M and apologizes for raiding its Alzheimer’s program
Open Source Collaborative Editors
Unfortunately the bold decision to take on Wayland (due to Gnome) in the upstream debian buster isn't going to propagate to low end hardware like Raspberry Pi incl. Pi4.

Though the Buster based raspbian will be available, they will continue using the LXDE version as Gnome is too heavy for the Pi.

I had tried Wayland for Pi3 earlier in my effort to get a smoother desktop experience on the Raspberry Pi[1], it was the smoothest desktop environment among other options but unusable due to XWayland apps crashing due to framebuffer issues.

I've settled for HW accelerated, Xfce4, Arch Linux (btrfs/zswap) on RPi3.

[1]: https://abishekmuthian.com/getting-smoother-desktop-experien...
You could always use a packet sniffer like Wireshark and see if you get any DNS request on port 53 after accessing a website.
In the country in which I live, what I fear the most is Brussels meddling in the democractic process. Although an immigrant, I have become very attached to the institutions and culture of my host country. Every move closer to the EU, of which we are not a member, menaces those institutions. Yet Brussels has no problem financing NGOs, articles, 'economic research' etc. that want just that. Some are known, yet for others, the source is quite opaque.
I recently learned that you can do

git fetch origin pull/⟨PR id⟩/head:pr-⟨PR id⟩ && git checkout pr-⟨PR id⟩

(but hub is nicer of course)
When you read "blockchain" always think "decentralized: cool; wasteful: not cool". I think it was designed like this on purpose, but besides creating a value store it's not a reasonable choice. Also it's a list structure, which inherently does not represent reality. E.g. if you and I both agree about the blockchain until September 13 2018, but afterwards have different opinions about how it should go on, there is not way to present that misunderstanding in the technology. (It's possible if you put an abstraction layer on top, but that's another topic. You can put almost all protocols/algos on top of each other.)

So it's wasteful and can't represent reality well. So it's quite limited to how far we can use it as a whole species.

It's less the Amazon of algorithms and more the Myspace. In 15 years it will still have some impact in the abstract sense of how it influenced technology, but blockchain itself is unlikely to still be there.
While it's nicknamed the King of Fruits, I can't say I have ever liked that much the taste of Durians (While I eat and enjoy pretty much all exotic fruits). I wonder if one needs to have tasted Durian during childhood or something in order to have the tongue for it?
The game industry is not zero sum, but a game series is.

If a company made a new IP based around nerf guns and cell shaded graphics then nobody would complain. However if the next call of duty changed all weapons to nerf guns and used cell shaded graphics people would go ape-shit on it because it killed their beloved series. If the switch to nerf guns came as a result from gun-ban activists then people would send death threats to said gun-ban activists for killing their beloved series. This behavior is stupid and insane, yes, but it isn't as random or unreasonable as many think it is.
I think the parent means they wish V8 were in Rust instead of C++
Ask HN: Windows Laptops with Good Keyboards?
I'm looking for an ultrabook with a good keyboard, but I can't find one. Apparently every company has copied Apple and reduced the key travel on their keyboards in favour of thinner devices (which I hate).

As a programmer, I _need_ a good keyboard, but the only ones I can find are on gaming notebooks, which are too heavy for me to carry around in college. Any recommendations?
This reads like it was written by their PR firm, light on details and high on marketing fluff and hype. Most of the author’s lastest articles look like fed submarines to me.
This is not unique to Python-pip. A bunch of popular packages are maintained by very few people. But the good thing is that it does not really matter than much with FOSS projects: as long as the source remains available, anyone can pick it up at some point and improve on it - or you can even contract people to work on it when needed to.
Definitive Interview Prep Roadmap
Well, thank you pip people! <3
fyi the sound gets much better at the 3 minute mark
I wonder, why use Wayland at all? What are the benefits?

Because drawbacks are huge (large number of apps would need to be customized and tiling managers would probably need to rewritten completely)

I don't use it and I don't have any issues with my current Linux desktop (using xmonad).
> a few days on the street will seem a tiny price to pay

From the article:
"He could face up to 10 years in prison, or even abduction and secret detention in China, as has happened to others in Hong Kong."
It does matter. Witness the recent hacks because maintainers are overwhelmed.
It's not even 1.0 yet.
Will someday debian authors and die hard fans understand that old libc and old Firefox or Gimp are different and one really can mean stable and another can be just outdated?

Is it possible that desktop should be developed in other manner than server?
How to Create Secure Internal APIs on AWS Without VPCs
word2vec simply is a neural network with a hidden layer of n perceptrons. The number they use in the paper is 300 I believe. Thus, this is the dimensionality of each word.

To train the model, we generate feature-label pairs by taking a word and randomly choosing a word next to it. We feed this into our model. After training, we are left with a 300 long vector for each word (input words x hidden layer since it’s fully connected).
Tracking prevention, now available in Microsoft Edge preview builds
Ford Beats Tesla, Again
You can post your opinion here: https://github.com/ansuz/RIIR/issues/
This is why I switched to Arch. Debian is just too conservative.
I think most Debian desktop users pull things like their browser from Sid.
How open are they to receiving help? Gatekeeping is often a big problem in open source software.
It's all fun and games until your heart bleeds
Clear path ahead for Highway 17 animal corridor in California
It is being actively developed. Has a large pool of active contributors.
Yes there is: https://www.cloudflare.com/ssl/encrypted-sni/
Mood Machine – Spotify’s Emotional Surveillance
https://www.youtube.com/watch?v=_uD2pijcSi4
I still think the simplest way to get rid of spam calls is to charge a small fee for each call, perhaps 5 or 10 cents but instead of the money going to the telco have it passed through to the person being called. For people who are friends, family or who call each other back and forth it will basically cancel out over time. But it would put the spam callers out of business.
I sampled durian for the first time while on a trip to Singapore a couple of months ago and absolutely loved it. I will admit that it has a very particular pungent flavor so I can see why it puts off so many people. Probably not so different as some cheeses.
I think it might be. We had some at my workplace as a celebration and most of us disliked it, however one (of Chinese decent I believe) told us he had it in his childhood and loved it.
> China’s massive unmet demand for durian is the prime reason the Hong Kong consulting firm Plantations International predicts that the global market for raw durian will reach $25 billion by 2030 — up from $15 billion in 2016.

It's amazing how much wealth China is generating in all of the smaller surrounding Asian countries.
Question: do you expect escalation to a member of the engineering team as part of standard support for any piece of large enterprise software? Like Microsoft, Oracle etc?
I work for Microsoft but not on any O365, Outlook.com, or advertising team.

Outlook.com (free public service) does not scan emails for ads - I filed a support ticket for asking about this year's ago.

Additionally, if you pay for O365 (Home or Personal, maybe just Home?) and use the same Microsoft account for email (via Outlook.com) then no ads are displayed at all.
> As long as they keep privacy a priority,

This whole DNS over HTTP disaster makes it pretty clear to me as an end user that it's not though. I wouldn't trust a free VPN further than I can throw it, no matter who offered.
iOS13 is still in public beta, right? I'm looking forward to the GA of that release, which I guess is slated for Fall.
What I am missing in almost any project is a second README (the first should be an introduction to the project) where arcitecture and design decisions are discussed.
By “know where to look”, one usually just has to go to any Pizza Hut (必胜客), which are very common in larger cities. I’ve tried the durian pizza before, and it’s actually quite good, even though I’m not a big fan of durian itself. Something about cheese and durian together works for my palate.

(Pizza Hut in China, it must be said, barely resembles it’s American counterpart; in China, it’s a moderately upscale Italian family restaurant which happens to specialize in pizza and pasta.)
It is very interesting although I didn't really understand the 'security' part. The motivation seems to be twofold - some bad things have happened because of compromised npm packages and v8 happens to have a robust sandbox. This sounds like a solution looking for a vaguely defined problem. The illustrative example he gives is 'malicious linter'. Is malicious linter that important a threat?
In México the word "Madrota" does carry that "madame of a brothel" connotation
Maybe it’s google maps taking moral stances. There will be a lot of people who’d like google maps to delist or rename things to suit an agenda, well intentioned or otherwise so it’s probably best if google stay out of it.
The thing about long-distance rail is that it offers a lot of value for secondary rural stops.

There's no way that flights to, say, Winslow, Arizona will ever be economical. You might have someone offer them, but at the cost of enormous subsidy. You can't expect flights running LAX-ORD to stop there, even if there was the infrastructure to handle it.

But the railway runs right through the town. You're already running trains. All you need to do is add a 10 minute gap to the schedule for boarding and you've connected that town back to the world.

Yes, buses can do it too, but Greyhound doesn't serve a government mandate and will drop money-losing routes (I think there's been a huge fuss over this in Canada recently)

Given the political power of rural legislators, Amtrak is an easy sell.
Pi-Hole doesn't require Cloudflare DNS. You can use your ISPs DNS service as they know who you're connecting to anyways.

Or you take 15 minutes and set up unbound.
Responding to myself since I first wanted to note the irony of the submitted article. Now I'll talk about this.

First, the US has many times interferred in Russian elections. I will not mention the interference in those of Russia's neighbours, Russia's allies, or others. So understand me when I find it absolutely impossible to be shocked by the allegations of Russian interference in the US since at least 2016. Brussels is an ally of the US, submitted to the NATO and therefore the US by treaty, and has done similar.

Second, no concrete evidence has been produced that this Russian interference in the US elections went beyond some tens of thousands of dollars of adverts in social media. The fingerprints of Russian troll farms are speculation. To believe some of the commentors here, if someone writes in an online forum that the EU is bad or we need to improve relations with Russia, then it's a Russian troll farm. Well I'm not from a Russian troll farm and I'll say (a) that the economic and political model of the EU has brought suffering and servitude to many of its members and (b) that it is imperative that western countries improve their relations with Russia rather than blindly following the irrational and bellicose positions of the US and NATO.
This.

I have probably written a hundred data migration scripts (call bunch of services/databases, parse/move data around, etc) and Node is an awesome fit.

Speed isn't even a concern because my script isn't going to be the bottleneck.
Very nice project. I'm delighted to see new ideas for organizing files and personal data.

I feel that most people gave up on organizing data and just went with concept of searching. This is a shame because searching wastes everyone's time to filter false positives, while small effort of tagging new content goes long way to enable discoverability. Web sites that allow you to filter content based on desired and undesired tags give you optimal way to recover information.

A very interesting feature in Tagsistant is tag relations. It enables tree hierarchies for tags ("anything starwars-related is also scifi-related"). Kind of ironic how they wanted to get away from tree structure of files, and then they implemented tree structure for tags. Perhaps a tagging system for organizing your tags would be better? :)

This meta-structure of data is fascinating. Is there a good resource that systematizes the area, with best practices and implementation tips?
Only really OpenSSH from your list applies though.

LibreSSL isn’t really in widespread usage outside of OpenBSD and has still been vulnerable to some of recent the OpenSSL exploits.

OpenNTPD is more widely used but lots of people still go for other alternatives and frankly I’m not convinced OpenNTPD offers anything significant over the competition anyway.

pf is barely used outside of OpenBSD and frankly why should it be when Linux has iptables (which does the job well) and FreeBSD has ipfw (which also does the job well). pf is also a decent firewall but it’s also a crowded market with lots of really decent alternatives written by their respective platform hosts.

I do actually quite like OpenBSD though. But outside of OpenSSH, OpenBSD is slowly becoming less relevant to the wider industry as other platforms catch up on security and even over take in terms of enterprise features.
The source code[1] of what I was working on.

It's a simple benchmark, to see what the quicker way to access data byte-wise from a uint32_t in C is, between bit-shifting and masking or indirect access via pointer declaration/de-referencing, and also between a single-line declaration or a multi-lined declaration as per original topic question.

The results behave as expected when turning on and off optimizations, but their relative comparison is highly dependent on it. It means that bit-shifting is faster, but only with optimizations. A multi-lined declaration may be as fast as a single-lined declaration, but also only with optimizations.

[1] : https://morgen.ist/misc/Simple-Byte-Access-Benchmark.c
Too bad ads has again won as the monetization method. I guess people don't see podcasts as valuable enough as consumers to pay for episodes.
Not sure if I missed it but how do you bring this kind of equipment underground in the first place? Do they have to dig a huge hole using traditional methods first?
I use hub, but almost exclusively to clone a repo, or more frequently, create a pull request (being able to specify a base branch to)
Minutes Tutorial for the Set Command in Bash Script
I live in Malaysia. We are right in the middle of durian season (May to August).

Musang King costs Ringgit Malaysia(RM)48 per kg. That is around USD12/kg or (USD5.45/pound). So a single Musang King durian will cost around RM60 per fruit (USD14.50/fruit). I usually buy slightly lesser quality durian at RM38/kg. The seller will help to choose a fruit that is ripe and creamy but not overripe. You can take home the partially opened fruit or just transfer it to a styrofoam container that you put in the fridge when you get home.

Musang King has smaller seeds and is creamier than what I usually buy. But the less expensive fruit is good enough for me since I buy durian pretty often. If you had a durian orchard why would you grow fruit that does not taste good? If I were a durian farmer I certainly would not. The difference in quality between Musang King and the others is not that noticeable.

My friends from India who visit me just hate the smell because it (sorry to be so graphic!) smells like fruity poo and refuse to taste it or taste it with a cringing expression. I'm sure that other people have the same reaction. But if you do visit Malaysia (or another durian country such as Singapore or Thailand -- both remarkable countries for food as well), you should partake. It is the closest you will come to eating palkova from a tree.
> This whole DNS over HTTP disaster makes it pretty clear to me as an end user that it's not though.

True. We've got DoT, which is a very viable alternative. Supported at OS level by Android. And there's DnsCrypt with clients on all major platforms.

> I wouldn't trust a free VPN further than I can throw it, no matter who offered.

Valid point.

Though, the present situation is that one pays the ISPs and yet they traffic shape, surveil, censor their users. I fear, after a point, VPNs might be the only way to access censor-free Internet across the globe.
They could implement something like Fedora modules: you have a stable base system, and then you have separate module streams for some software packages, which are updated separately, with multiple versions supported concurrently. For example, you can install the latest Fedora, and then pull the postgresql-9.6 module (or 10, or 11, or all three in parallel), despite 11 being the "official" version.

https://docs.fedoraproject.org/en-US/modularity/using-module...
Five doesn't sound so bad. There are lots of FOSS projects with fewer or just one people maintaining them.

Besides that though, I wondered how much maintenance pip even needs. Shouldn't it be kinda stable?

But looking at https://github.com/pypa/pip/graphs/commit-activity it doesn't seem so.
Those small groups with a bit of power like NIMBY activists are the worst. You see it on Facebook groups for buildings too, they range from over-protective types who are scared of the city/outside to fully invented hypothetical problems any time something is "different" happens.

I've always wondered what these people get out of it.
Yes, but after HeartBleed you had resources quickly shifted to support maintainers so it's not really a good example.
Why guess when you can find the truth in 20 seconds of digging?

https://github.com/rust-lang/cargo/graphs/contributors
High throughput. Pooling is the default behaviour for many Redis clients too, isn't it? eg: https://github.com/gomodule/redigo
Yayy! Thank you for the reference, tag my shit up seems more straightforward to me after reading tmsu and Tagsistant. and both use sqlite!
Python as it's default on Linux.
The only approach I found to understand any non trivial open source project is to have a specific goal of what you want to do.

Once you have a goal it feels so much easier to understand anything because you narrow down the scope and you have some key words you can grep the code.

Example. let's say you found a Redis driver for your language. Now Redis6 include some new commands which you want to add it immediately instead of waiting for your driver. Now you will know how to search for similar command(grep the heck out of it) and try adding break points or just printf to see where the code path it.

I enjoy reading open source code and publish a newsletter[0] with a section call "Code to read" that have some repo you can try to read and see how they do thins

---

[0] https://betterdev.link
People don’t want their food to come out fast. They want to sit, drink a beer, talm, etc. Unless it’s fast food, people go to restuarants to have a 1-3 hour experience, not to get calories as quickly ad possible.
The most likely audience are probably machine learning researchers, because they'd know about the ImageNet ILSVRC classes: http://image-net.org/challenges/LSVRC/2014/browse-synsets

If you see what appears to be transliterated Japanese and it's not "kimono", you're probably dealing with some kind of animal, like an Agama https://en.wikipedia.org/wiki/Agama_(lizard) or a Basenji https://en.wikipedia.org/wiki/Basenji , neither of which are Japanese.
There are certainly people who prefer living in a high GDP country in which they can be 'disappeared' one night along with their family, but I didn't expect to see them on HN.
Actually, Debian stable uses Firefox ESR, which is updated roughly once a year. I've used Debian exclusively on the Desktop since around Etch/Lenny, and never see the need to update my browser often.
MIT Introduction to Computer Science
Ah yes, Arch certainly is much better. I've had enough to do with Arch when they totally borked my workflow three times in a row in a couple of months. One of the issues was rebuilding all of the Qt5 libraries without testing any of their dependents. All Qt5 applications simply stopped working.

I don't blame them though, one of the maintainers was supporting like, 3000 packages? I don't recall the exact number, but it was an impossible amount of work for a single individual. This strongly implies there was zero QA for these packages (an he really was doing it himself, it was not a front for an organization.)
PowerShell Core / 6 is cross platform...
> we are just getting fooled

The same question can be asked. What are objective properties of "being fooled"?

Can you see something? Yes, you can. Can you reflect on your ability to see? Yes. Can you think? Can you reflect on what you are thinking now? Can you reflect on your ability to think? Yes. Yes. Yes. What you are being fooled about?
There's a fine line between "there are so few maintainers that nobody could spare the attention for this" and "there are so many maintainers that this slipped through the cracks".

Really, it's less of a line than a region of negative width. Number of maintainers is not a good indicator for the security position of the project.
One interesting side effect of declining phone use is that political polls rely on calling people. The Democratic Party is currently using landline polling as a debate entrance criterion. With declining usage among certain groups the phone polls will have bias.
Calling that an SUV is a stretch but damn does that look fun to drive!
If you go to the front page https://www.debian.org/
the download link is in right part of the giant banner.
Where can I collect my PhD?
Sway (Wayland equivalent of i3) works with the open source nouveau drivers, which seem to work quite well for some folks.
I was worried that by "downscale" you meant to let people die, so I had to clarify.

As far as the claim that capitalism doesn't require infinite growth: that doesn't seem mathematically possible, ans it's certainly an unorthodox claim. I'd say that puts the burden on you to provide evidence (or, at the very least, explain).
I think you have the direction of that mixed up. The definition of conservative in this article is the political definition of conservatism.
Show HN: Animate the web! With this browser extension for Firefox or Chrome