skysight-inc/HackerNews huggingface dataset:
Given that the airline industry actually runs its own payment card network (UATP, which has been around since 1936 apparently) it does not surprise me at all that airlines do much of their payment card stuff in house.
3 things I don't understand about your product (but I like the idea in general of helping people get over the initial cliff of enabling CSP):

1. How does including a bit of JavaScript apply a CSP and block things if the CSP is not sent via HTTP headers? Are you installing a service worker and proxying every request through that so that you can apply the blocking or something? (I have not looked into this area for a while)

2. How is adding another 3rd party resource not expanding the attack surface rather than reducing it?

3. How do you know what is good/bad and should be allowed/denied?

On #3 I run a few hundred forums that have user generated content and whitelist a small number of 3rd party embeds such as YouTube, Google Maps, Strava, etc. I want those to keep working but don't wish anything not in my whitelist to work. But if I expanded the list in future to allowed embedding Twitch... how would your system know that this is a "good" action and to allow it?
Given that jailbreaks exist and can be exploited by malicious actors, deploying them as the user and applying the jailbreak community supplied fix may be the best approach:

> For those with jailbroken iPhones, a community member has released the tweak BrickFix: https://www.reddit.com/r/jailbreak/comments/c9616j/release_b...

(source: https://news.ycombinator.com/item?id=20379779)
Just a quick clarification, in the case of an airline website, the PNR will not be created through the GDS (too expensive), it will be created directly in the PSS (usually managed by the same company)
In any case, I still believe that Cal Newport's Deep Work is a good reading for someone who wants practical advice on Ericsson, Krampe, and Tesch-Römer’s 1993 paper. I wrote a review in detail of Deep Work that you can see here: https://alvaroduran.me/deep-work
For reference:

https://downloads.haskell.org/~ghc/latest/docs/html/users_gu...
> I assume it will get deplatformed

Piracy was significantly reduced by Spotify and Netflix because it was more cost and effort-effective to just pay a monthly subscription to get most if not all content you need.

And then copyright holders decided it wasn't good enough and crippled Netflix without providing any alternatives (as always). Watch them blame pirates again in the nearest future.
Aero industry moves at a very slow pace. The state of the art F-22 Raptor uses intel 386 cpu and the F-35 lightning upgraded to more "modern" PowerPC CPUs, similar to the ones on legacy Macs.

Planes don't need insane multitasking processing power like our smartphones or PCs. They mostly do signal processing and sensor fusion in a tight loop which is quite trivial even for legacy CPUs as it's basic flight math equations which results in highly optimized code.

In terms of aero chips, basic is always better as you want a silicon that's tried and tested for decades to have a deep understanding of it's quirks and bugs so you know the code execution is reliable.
"Adaptive" is not a Boolean. Contradictory, even mutually hostile, traits can develop because the ecosystem switches between different modes for various physical reasons [1] and different survival skills are optimal in each.

By the time you get to humans you have an incoherent patchwork of mutually exclusive behaviour modes and cognitive approaches - not just between individuals, but within individuals.

[1] Seasonal changes, population cycles, and so on.
This is entirely false. Stop spreading disinformation.

Myth: the 737 MAX 8 is not inherently stable, has relaxed stability, etc. Fact: it's very much inherently stable.

Myth: the 737 MAX 8 is easier to stall than other planes. Fact: no it isn't.

The pitch-up characteristic of the MAX 8 is less strong than of e.g. the 757 and that plane flies just fine.

The actual problem with the MAX 8 is that Boeing added MCAS to allow it to share a type rating with the rest of the 737 family (allowing existing 737 pilots to fly the MAX 8 without additional training), and they fucked up MCAS. There's a number of solutions on the table, including removing rather than fixing MCAS and giving up the 737 type rating.

I am continuously astounded that even on HN people are focusing on news cycle bullshit about inherent instability instead of the actual issues with Boeing/FAA that caused this situation.

Evidence so far suggests that MCAS was originally a non-critical system that was found to be too weak during flight testing, and given significantly more pitch authority. For whatever reasons, this didn't trigger the reclassification of MCAS as a critical system and it all went downhill from there.

Here's a pair of sources slightly more credible than the bullshit news cycle:

https://www.youtube.com/channel/UCphqjYZxxzjNbONVmY-0J7Q

https://www.youtube.com/channel/UCwpHKudUkP5tNgmMdexB3ow
One more frustration to add to your list: only having x seasons of a show available instead of all y.
What’s that old quote...

“It Is Difficult to Get a Man to Understand Something When His Salary Depends Upon His Not Understanding It.”
And Steam uses RTMP for upload like anyone she would do. Just like OBS and other tools.

Sadly browsers do not come RTMP enabled.
Slate has become a disgraceful magazine. I'm always disappointed to see it on HN.

As per the current comments, this article is purely to feed outrage culture.

Everyone knows a funny prank is also funny to the person it happens to and the people around it and as such is good natured. It almost a dam tautology.

We don't need your self righteous, holier-than-thou, telling us what we already know.
You're mistaking the argument being made, which is really about recognizing ones own moral inconsistencies instead of claiming moral high ground over others where there is none to be had.

A tech worker who claims to value a cashier's job over their own convenience is basically gorging on two large deluxe pizzas while criticizing others for eating an olive.

Just look around you. Pick just about anything. A wall. A refrigerator. Your shoes. A spice jar. They all have stories to tell about automation and job loss.
The fine is not there to repair the damage made to individual customers. The fine is there to punish the Corp for its bad practices, and to scare other Corps into having good data protection practices. It's a punishment and a deterrent.

If you want personal compensation, free to sue BA.
I thought the extra sensor was an optional upgrade?...
The engines are too BIG for the airframe! Why people don't get it?
That 'feature' of Amazon's service really annoys me as well - presumably it's to make it look like they have far more content available than they actually have?
Native Components in React Native
> by wrapping existing tools

So you propose emacs should write it's own version of everything, instead of using existing functionality?

> rather clumsily

That's a highly subjective view, if not weasel words.

> with a lot of Elisp.

How does the amount of lisp even matter so long as it gets the job done well?

Anyway, dired's great (in your view where does it fall short - honest question) and while I've never used magit I've heard not a single bad word against it.
You can get a Yotaphone 3 for $300 shipped from aliexpress, which is an Android phone with an OLED screen on one side, and an eInk screen on the other. The eInk screen is intended to be used with apps with custom support using a yota-specific SDK, but there are some hacks you can do to mirror everything over to the eInk screen, which works reasonably well.
I’m impressed by the author’s crawling of 112 million webpages, but I can’t help but wonder if it’s really necessary. Surely the same distribution could be found with a smaller sample?
Just because one group was incompetent doesn't mean another will be.

It has been possible for years to get a total encode+decode latency of less than one frame with x264.

Meanwhile many people are gaming on TVs that impose 3-8 frames of processing lag.

And you can beat most current tech by more than half a frame just by supporting HDMI 2.1 or variable refresh rate. (Instead of taking 1/60 of a second to send a frame, you send it as fast as the cable can support, which is 5-12x faster)
"The state is made up by the people it represents so by this, society benefits as whole."

almost all of the people that make up the "state" represent only themselves. and i'd wager most of the people that are elected to represent people are the same.
Out of curiosity, are you using an Android One phone now or something a little less bloated, but still bloated?
No its not, look at piratebay. By far the most downloaded versions are 1.5-3GB 1080p rips, or much smaller 720p ones. And on some 55" screen, they are just fine
Scientific integrity in forensic sciences isn't exactly a strong point for the FBI: https://slate.com/news-and-politics/2015/04/fbis-flawed-fore...
I think the main takeaway for me from watching the YC Startup School videos was that doing a unicorn-scale startup vs a small business initially takes about the same effort for the founders.
So, why would you choose the latter then?
If it didn't ignore them, how would it use them and what would it be able to do better? Genuine question.
No, leaf blowers are way too wide spectrum for this to work. Most of the noise in them is air moving throw narrow ducts at high velocity.
Shaky Ground Show: Motherly App
http://bit.ly/MotherlyApp

Finally, the app that does everything your mommy won't do for you anymore. Shaky Ground is a comedy web series lampooning modern-day San Francisco.
Devaluation is not a mere government tool, it's an automatic, market based mechanism of leveling the playing field between two countries.
Go ahead and automate away every job you see, but don't say I didn't warn you when anti-tech pogroms take your head. The public perception of this industry has been taking a nose dive for a few years now and stuff like this, attitudes like yours, only reinforces it.
I'm guessing most people don't particularly care about z ordering. All they want is something that says "this should be on top of everything else". Or more rarely "this should be underneath everything else".

Aside from the extremes they are happy with the natural order, I think.
Manage different Python versions on macOS with pyenv
Getting Things Done is probably a useful tool for you. One of the principles is that things on your list must be such small action items that you can do them without thinking

The principle is that you should do your thinking separately from your doing, so you think about what you want to do, write it all out in detail, and when it comes time to do your code refactor you're not looking at "refactor the code" but stuff like "move this function over to this file". A list of mechanical tasks instead of a set of puzzles for the mind
Snoring is too wideband either, and is impulse noise where this is even less effective.
The redesign and compliance costs are enormous. That said, these costs are something Boeing could afford many times over.

Manpower could also be a bottleneck. Design talent is not what it used to be in the first world after much of production moved overseas.
So, if the main complaint is hyperbole over the ability to build cubicles that block office noise, I would draw your attention to this passage from the press release

> Ghaffarivardavagh and Zhang also point to the unsightliness of the sound barriers used today to reduce noise pollution from traffic and see room for an aesthetic upgrade. "Our structure is super lightweight, open, and beautiful. Each piece could be used as a tile or brick to scale up and build a sound-canceling, permeable wall," they say.

...

> "When we want to create a wall, we will go to a hexagonal shape" that can fit together like an open-air honeycomb structure.

> Such walls could help contain many types of noises. Even those from the intense vibrations of an MRI machine, Zhang says.

Nothing there suggests that the journalists were indulging in hyperbole, although they were clearly being light hearted. However, the comment to which I originally replied seemed to be indulging in hypobole.
Am I the only one frustrated with how difficult YouTube makes it to find Part 2? Am I missing something obvious?
With some friends we are still using rtmp for our own little game stream server. It's the only way we managed to have very low latency (1-2s).

But this is also a little annoying to be forced to use flash to open the stream. I wonder if we could find something better now.

Speaking of nginx-rtmp, look like dev is stalled now. Anyone know if there is an alternative or someone who took over ?
Why vacuum if you want to absorb maximum energy? You want liquid or gel instead.

By the way we have these, they're called bass traps.
I remember that at some point there was wine port to Windows, so you could run windows while running windows...
> much like a car in a relatively minor accident can still be considered "totaled" if the repair cost exceeds its value

I've never heard of a minor incident referred to as being "totalled", but rather a "write-off", since it's the insurance companies that are ultimately making that decision, not the repair service. Is that a regional thing?
I live in Canada, where regional laws force the majority of even casual users into piracy. One could not even subscribe to enough number of services to get the amount of content Netflix has in the USA alone. This may be an exaggeration, but honestly, it's been this way for years. I've honestly put a lot of effort into seeking out legal sources for material here in Toronto, and had little luck in certain cases I easily find through a proxy.

It's literally self-deprecating behaviour.
It runs linux so you could in theory run mutt or something like that to get emails in when your on WiFi.

I've found with most of the homebrew-y stuff you need to create a launcher that draws the application to the screen of the reMarkable, by default its running a program called xochitl which handles the user interface, file system, etc.

So to sum up, doable but not done...yet!
Part 2 isn't out yet
I know military jets to have unstable flight characteristics to get advantages in maneuverability that need an operating flight computer.

But I have problems accepting this fact for civilian planes, especially if the manufacturer just wanted to save development costs. Because you could simply design a more stable plane. Not trivial, but also not impossible.
Why am I returning my reMarkable tablet? (2018)
Ouch !!!!

https://www.betacalendars.com/
You're correct that it's not using CSP headers (which is difficult in practice to use), which is why I call it a virtual content security policy. Yes, it's another resource that expands your attack surface but when you have sites running tens of scripts already, I think one more is a small attack surface delta, and there's ways to minimize that risk too.

For knowing what to allow/deny yes there's blacklists but also various more intelligent things as well. That's one of the problems with CSP headers is that they're too black and white today. With Enchanted Security, for example, you can configure it to say things like "allow Google Analytics but only for my tracking id UA-123456789-1" (this is because hackers have used Google Analytics as a data exfiltration mechanism where they sent data back to their hacker-controlled GA account)
Matt Levine is my favourite writer at the moment. I love his simple, whimsical style.
That's a great comment!
My understanding is, the purpose of these companies with fictional founders is for founding/owning other companies registered elsewhere. The article does mention that the chain of ownership crosses many borders and can become practically impenetrable or very expensive and time consuming to investigate.

So let's say, somewhere in the chain of onwership there are some real unsuspecting people, possibly accounting agencies, managing real banking accounts. By the time you find them the money will be gone, the agencies will disappear, the occupants of the registered postal addresses will be different. You are going to need a lot of official inquiries in multiple countries to trace everything back to the source. It might prove to be almost impossible to do.

Or by the time you finish your investigation Putin himself will be gone.
> I don't see it saying there it's free for everyone to use.

Note the word 'and'. That link wasn't to explain that it's free.

Also "is not an IETF standard" is a pretty low bar for suspicion!
I worked in a supermarket for several years and this happened all the time. I could never figure it out, but basically some people would change their mind and dump things right where they were standing.
Normally this isn’t a big big deal - we would just put it back in the correct spot but sometimes we’d get fruit and veges dumped in the freezer which would ruin them. That was particularly weird.
This sounds interesting. I've added Comntr to my extensive blog post about static site comments [1].

[1] https://darekkay.com/blog/static-site-comments/
The Linux 5.2 kernel has been released
I don't know if it is a regional thing, but “totalled” is what I've always heard, and refers specifically to (and the term derives from) the insurance company declaring the vehicle a “total loss” and applying replacement rather than repair compensation.
Thanks. It took way too long for me to figure that out :-).
Yes, but not in the useful sense of making the submarine harder to detect with passive sonar, as most of the vibration is transferred directly into water via the transmission. The other modes are better dampened with the usual absorption.
Requiring physical access to the keyboard by the attacker first, makes this less impactful.

With physical access the they keyboard/computer, they could plant any other number of devices/bugs or extract information.
I'm no fan of Johnson, but he did absolutely nothing wrong in that case, and his personal connection to the US was very weak. He renounced his citizenship shortly after that episode as are record numbers of very ordinary (income wise) Americans abroad since FACTA was introduced.

The IRS makes overseas compliance for ordinary and accidental (just happening to be born on US soil, but otherwise no connection) American citizens very difficult and opaque, and the penalties are extraordinarily disproportionate when most of the time they usually owe absolutely nothing to US tax authorities other than paperwork.

It also makes access to financial products for American citizens and ex-citizens abroad difficult because local banks don't want to risk dealing with the millions on non-compliant citizens because they also face very high penalties for providing services to non-compliant citizens.

Essentially no other country taxes on the basis of citizenship instead of residency, and they are making a pig's ear of it.
I made something like this in the past for viewing QGIS projects in the console. Mainly just as a bit of fun on the train: https://github.com/NathanW2/ascii_qgis

https://www.youtube.com/watch?v=5Aw83c6q7dE

Never really had a good use case for it but was good fun.
Even cheaper labour than China. For now.
It's not as if most people are rich in Equatorial Guinea. It's an appalling outlier in terms of inequality, even on such an unequal continent as Africa.

"Only about half of the country’s population has access to clean drinking water, overcrowded living condition is—surprisingly given the country’s low population density—rampant and very few children enjoy the advantages of urban life such as education, medical services and recreational facilities." https://borgenproject.org/equatorial-guinea-poverty/

I tried to find data about GINI for the country but the World Bank and the UN don't have anything. http://hdr.undp.org/en/content/income-gini-coefficient
I'm quite amazed at WSL. Everything (almost) works. Emacs keeps losing the blinking cursor which is annoying. Other than that everything I've tried worked.

I started developing on it and was making great progress. I had several days worth of work in many different forms.

Then Microsoft decided to reboot my device and I lost it all.

WSL is now "just a toy". Real tools do exactly what you tell them to do WHEN you tell them to do it. Rebooting my machine without asking makes EVERY Microsoft product a toy.

Don't use WSL for anything valuable.
Do the regulators take into account whether the firm is actually at fault?

Without considering what happened in this specific scenario, surely there are cases where companies take the utmost care, follow standard security principles and still get hacked; or the issue was not with the company operating the website but rather with, say, a hardware manufacturer?
How do these pirates make money?
It seems like so much work is/has gone into their operations that it can't just be for karma points.

Edit: I'm referring to the content ripping groups. Apart from the technical and legal challenges depicted in the article, they need to seed their files which (must be) very costly. Also, content is released consistently and extremely quickly.

The common answer is that the motivation is non-monetary: Fun, community service, group pride etc. But I find that hard to believe entirely. The product is just too polished, subjectively resembeing in quality a revenue generating operation rather than a(n illegal) side hobby.
Yep. Military jets also crash a lot.
Threshold of Originality
> blaming bad drivers for accidents instead of fixing the system.

I had to read that several times before I realized you weren't talking about computer device drivers and computer systems.
BA faces record £183m fine over data breach
I guess this is one of the main keys:

A corollary to the preceding point is that complex systems run as broken systems. The system continues to function because it contains so many redundancies and because people can make it function, despite the presence of many flaws.
Sweat of the Brow
What's wrong with "fanning the flames of anti-journalist sentiment" exactly? If journalists aren't meeting the basic requirements society has of them, shouldn't there correctly be such sentiment? How else would journalism be motivated to self-reform?
Is state-level GDP per capita the correct model to use? Why not compare, for example, city-level GDP per capita? After all capital and workforce are free to move between cities not just countries.

(Plus the whole fun where American member states are not entirely sovereign, while EU member states are countries in their own right, and in the case of e.g. Germany are themselves federal nations with multiple constituent states)
What's wrong with reading pre-prepared questions from a written list? (nothing)
Dad of a 4 and 2 year old here. There is one effective way I have found: schedule it. Literally slot 2 hours on Thursday night to learn something you want.

There are a couple of reasons this helps. If you treat it as a serious and valuable use of your time you will be more efficient in how you approach it. Scheduling also lets you anticipate it and mentally prepare for being receptive to learning.

It is important to protect that time and get buy-in from your partner so you can fully shift gears out of parent-mode. The flip side of this is no staying up extra late to noodle around then be burnt out the next day. Accept that you are going to learn things slowly and it will stretch out much longer than you might like.
I've been doing the same for the past few years. I started with GTD in Org mode, than switched to Trello and Scrum, but I felt that it wasn't enough and I started mixing the both in Trello.

What are some things that you've learned combining the two?
It would be nice to combine UML with an encrypted root filesystem so a nosy admin on a VPS will have a harder time seeing what you are doing on your VPS.
Still I wonder what the performance will be like. Is the entire UML process running single threaded on a single CPU core?