skysight-inc/HackerNews huggingface dataset:
If the Mayor of London doesn't have significant influence over how budgets are spent on the police and other public sectors and infrastructure in London then we might as well scrape that position altogether. Currently I feel like the Mayor is spending all his time and budget on personal PR and conducting dumb Twitter fights with foreign leaders.

I get it, we all hate Trump, but our Mayor should not have to worry about foreign presidents, no matter how dumb these presidents are. The UK has a foreign secretary for that work. The Mayor should entirely focus his efforts and OUR TAX MONEY on the issues which our city has. I hate it that our hard earned tax money is being used for the Mayor to fund his personal PR campaigns to further progress his political career. How is that useful to anyone?

And yes, I agree, the government is 100% responsible for cuts to the public sector and that's why all the establishment parties (Tories and Labour) are both in the shits, because they both have failed this country. There's no party I could currently vote for. Tories have literally wasted everyone's time and money for the last couple years with their own Game of Thrones game in their ranks, Labour is just an incognito racist party with Corbyn being dumb and ideological which is a dangerous combination (like Hitler was), Lib Dem and Greens are like a water melon, green on the outside, but red inside, and UKIP is just a disgrace full stop.

They are all responsible for the UK's problems, but when I have to point my finger at someone for the problems in London, then the first instance is the Mayor of London.
I think there’s a strong case to be made for companies that do one thing and do it extremely well. A feature can be cut. It can be abandoned. It can be the thing no one wants to work with because it gets the reputation of being the department where careers go to die.

Whereas a feature as product means it’s more likely to stick around. They have nothing to do but build and maintain this feature. They have the luxury of working out the edgiest of edge cases.

But I guess the pointless file manager shows the downside of features as product. One the product is complete and largely bug free, marketing and engineers get itchy in their unique ways.
Then strictly speaking it isn’t serverless.
So the odd thing is that extra 1% who are not gitlab users, but still say it's their most-used tool for CI and build... without using it.
We're in a different era, but the issue is still the same. Lots of competitors have popped up in file syncing, but they all want to link in with additional services and other crap that people don't want.

There's still a lot of value to be had in providing a folder that syncs quickly and effortlessly.
This looks cool!

But could you (if you are the author?) please restrict the Google Drive permissions from “See, edit, create and delete all of your Google Drive files” to only affect a sub directory of my drive please? That’s best practice for isolation.

Thanks!
I entirely missed that button and came all the way back to HN comments to find screenshots..
You know what's better than installing slack? Not installing it and using it in the browser.

If there's a website option for any tool, I recommend using that over native. It's usually more performant and is less of a security risk. And it's always up to date.
The post says "If the attackers inject server code, 2FA or U2F or any Web-based security practice does little." Understandably if the attacker was actively scraping passwords with 2FAs and was using the credentials immediately, that would be an issue.

However, for the issue mentioned in the post, wouldn't 2FA have saved him? Supposedly, the compromised credential is from 2015.
This doesn't even make sense... both S3 and Azure Blob have been reverse engineered by countless companies - no lawsuits in sight.
Huh, I haven't thought of using them as an input format, a form that matches the typical structure of a discussion. Thanks!

> I think they expect you to draft the argument map, then go back over it and iteratively reduce it by manually normalizing duplicate sub-arguments into one canonical sub-argument in one place + references to it in other places.

That can work with this application/language. It doesn't work with Kialo, unfortunately, where you had different people contributing different nodes of the tree and AFAIR maybe, sometimes, someone then going over the tree and cleaning it up.

> Then, once you have captured that structure, (...) massage (refactor!) the discussion (...) into one that lets you more efficiently get at the truth.

One thing I tried to say is that I believe an argument tree isn't a right end format here, both because it's about arguments (vs. facts and their relationships), and because it's a tree. I think the end format must be a directed graph, very likely containing cycles (mutually supporting arguments).

Why I don't like arguments in the final format? Because they're kind of like an applied function. They hide the parameters. You can decompose an individual argument into pieces of facts and their relationships; an argument takes those, and assigns hidden weights to them - you care about some facts and relationships more than others, and this is usually implicit in the argument (and a source of confusion when doing this multiplayer, a-la Kialo).

I think it'll be more productive to decompose the arguments and deduplicate the resulting graph, and then work at the facts-and-relationships level. The benefits are that all components are now much easier to objectively verify, and whatever conclusion you then read out of this graph could be validated easier.

Note I just think that it'll work better, I haven't really tried it. I have on my TODO list somewhere to take a particular nontrivial topic, like e.g. "animal suffering"[0], and try to decompose it this way to see whether this format will actually work in practice.

--

[0] - It's a topic on which I have no formed opinion at this point, only bunch of inconsistent feelings and heuristics, so I shouldn't have too many preconceptions and biases here. It also seems hard enough to teach me something about myself.
bloomberg.com/opinion/articles/2019-06-26/everything-everywhere-is-securities-fraud
Hi, founder of https://tardis.dev here. I've created it to scratch my own itch as couldn't find anything on the web that would give me historical high resolution data for crypto markets (futures, swaps, options included) with affordable pricing for individuals hence created my own - hope some of you will find it as useful as I do.
There is a RunKit playground on the homepage so you can play around with the API and client libs that are available on GitHub (https://github.com/tardis-dev). You can access historical market data for first day of each month without API key.

It's raw non aggregated historical data API including trade, quote, liquidations and full order book snapshots & delta updates, useful for algo backtesting, designing quantitative models, market microstructure, order book dynamics research etc. Currently supported are BitMEX, Binance, Deribit, Bitfinex, Bitstamp, Coinbase Pro, Kraken, Crypto Facilities and OKEx.

I'd really appreciate any feedback you have.
to avoid tracking, get your porn from trackers
So why was the Keybase CEO using Slack in the first place?
as long as you're still at or below ios 12.2 you can use unc0ver.

note that it's a semi-untethered jailbreak so you have to re-jailbreak every time you restart, but that basically comes down to opening an app and pressing a button.
That is why you use a system with a package manager. Maybe you could follow the releases feed on Github. It was what I do when I maintain a package on AUR.
It was my understanding that Hawaii is one of the two best places in the world for ground based telescopes though? I'm not refuting you, just interested in your insights. Wouldn't the light pollution in Spain have a noticeable effect?
Not sure why on the downvotes. I was more curious if you could link to a specific source file.
Are you suggesting there's no mean behavior on 4chan?
Great stuff! I was looking for something like this just a couple of days ago.
Very cool! Thank you for sharing -- and for creating it! Have you considered taking a step further in the "open" direction and making it OSS?
Google is depreciating the xss auditor anyway - https://portswigger.net/daily-swig/google-deprecates-xss-aud...
I think it's safe to say CRTs were killed by their incredible bulk compared to LCD displays.
It's OK, notifications collapsing is somewhat wonky for some people and some of my friends complain about the app's performance vs something like Facebook but given the security model it will never be as fast.

disclaimer: I work for Keybase
Why does anyone make 200M? IMO literally nobody contributes enough value to society to outweigh the negative externalities of one person controlling so much wealth.
Which is something a novice computer user might try when 'hacking'. Really Cylance?
Does water freeze or boil in space?
Calif. ISO to require equipment improvements for inverter-based generation
Ask HN: What is your one advice for new programmers?
It may be any tip, trick, or hack.
JMAP is pretty explicitly meant to replace IMAP.

IMAP was originally conceived essentially to allow a very thin client that proxies every user command back to the user store, and it also embeds some reliance on old implementation artifacts (UIDVALIDITY, anyone?). There are a lot of "fun" corner cases--I once found a message that was interpreted 5 different ways by 4 different implementations. (It doesn't help that MIME structure is actually pretty loopy and maps very poorly to how all modern clients view mail messages, resulting in many interesting interpretations).

Modern email clients are all structured very differently from the "thin client" perspective--everyone keeps their own copy of the email (metadata) database locally, and use IMAP essentially as a database synchronization protocol, but IMAP is pretty bad at synchronization, at least until the LEMONADE additions came in ~a decade ago. IMAP is especially bad at handling multiple folders correctly, since it assumes that every folder is independent of the other ones, and you can only sit and wait for messages on one folder per connection at a time.
To be fair to wireless carriers, wireless is different than wired when it comes to bandwidth. Theoretically, if you throw enough money at infrastructure, you can allow everyone to have truly unlimited bandwidth at the advertised rates wired. Of course that would be cost prohibitive.

Wireless is different. There is only so much bandwidth that you can have over a given frequency, only certain frequencies are available to each carrier, and only certain frequencies are conducive to cellular transmissions. For instance for years T-mobile has horrible reception indoors because of the spectrum they had.

https://www.t-mobile.com/offers/mydatausage

It looks like you’ve used 48GB or more of data overall in this bill cycle. After 50GB, you still get unlimited LTE data but may at times notice reduced speeds in areas with network congestion.

In the vast majority of times and places, you will notice little if any difference. In the small number of times or locations where there’s network congestion, you may notice reduced data speeds. This experience is due to our data prioritization practice, which prioritizes customers who use more than 50GB of data in a single bill cycle after other customers. This practice helps to optimize overall network performance and maintain a quality service experience for as many customers as possible. Your data usage resets at the beginning of your next billing cycle, so this practice will only apply until that time.
The PDF link appears to be broken — I was expecting a spam signup form but it's just blank.
Generating Negative Output from Positive Input Voltage
Either one of:

- iOS only

or

- an extremely-crypto/privacy-aware family who is concerned that although end-to-end encrypted, there is no out-of-band user-validated key exchange (e.g through a digit code or QR-Code) or prior validation (e.g per-key TOFU) of the other party's identity or update to their keys. Which means that theoretically Apple could insert a new key in the user's set (there is a key per user's device for perfect backward/forward secrecy†) anytime to MITM/intercept messages and you would not be able to monitor it††.

† This is obviously defeated by Messages in iCloud (which you can disable) but the iMessage protocol has this built in.

†† Of course if there was some feature like that, Apple could also make such a key hidden in some way because they also control the Messages app code.
That's true. But that doesn't mean they're "human beings". A corporation doesn't have blood or skin or a physical human body. Again, based on our definitions here, "Human being" =/= "Person/Personhood"
Whether it's actually a good idea isn't something I know enough of the real numbers to comment on, but it seems plenty possible that an expensive step that substantially reduces risk might be appropriate in some circumstances and not in others.
>By contrast, Keybase currently runs all of its mission critical chat applications over Keybase itself.

Reminds me of the time Amazon learned that using S3 to host status indicators for S3 is a bad idea if S3 goes down.
Very minor bug - if a user has an emoji in their Twitter name the default blank avatar doesn't quite work correctly - https://trennd.co/user/5d31d11ce6f3ce02e53269c7
I responded to someone here the other day who couldn't fathom how macOS is restricted compared to other desktop OSes.

Given that you can't install it on anything but one brand of hardware and you can't even change the color of the mouse pointer/cursor from black to any other color that you desire (as you can on just about every other major desktop OS)... I think some of these people are just victims of marketing and a small but loud minority.
KAccTime – Virtual Time System in Linux Kernel
I'll tell you what I don't understand. I don't expect random engineers on HN to be especially crypto-literate, nor should they be: it's a super-specialized field that demands a lot of spare storage capacity in your brain, and a lot of us had enough algebra after Algebra II in 10th grade. Engineers who specialize have a whole huge variety of things to pick: machine learning, distributed systems, optimization, network algorithmics, graphics, systems security, you name it. There's no reason a significant number of people here should have to know what Noise or SPAKE2 is.

What's weird is: if you don't know what any of this stuff is, why would you feel the need to express strong opinions about it? Is it really your belief that intuition and a drive-by reading of some slides on Github page can bring you up to speed with the field? I read every "Call Me Maybe" post and I absolutely do not think I'd have a chance in hell at getting a distributed commit protocol right. Hell: I "specialize" in cryptography and feel the same way about crypto protocols!

My thoughts about Signal and Wire are that I did a good job of relating in the post you're talking about what I think about Signal and Wire.
The importance of hardening firmware security
>In many spaces today, being a straight white man is far more inflammatory than being a non-binary person of color.

As a straight white man, this is bullshit. I have many close friends who are part of the LGBT community, so I can see their experiences compared to my own. They don't go around "pushing their identity onto people" and neither do I. We're all just normal people trying to build cool things.

And I see my experiences are much more positive than theirs.
There is something interesting there, I think, in that it shows the market penetration of their CI stuff. It's hard to justify shelling out for Bamboo or running Jenkins when you've got a very capable CI tool right in your repos. That tells me that a primary use case for Gitlab is running everything in one box, rather than bringing it in and having it talk to already-existing CI infrastructure.
99.9% of the time the biggest threat vector to your company is going to be preventing your employees from sexually harassing each other, not preventing the Russians or whoever from reading your internal messages.

Yes, but:

1. We always have to combine the likelihood and incidence rate of threats with the magnitude of damage. I do not personally subscribe to this thinking, but some bloodless financial types will suggest that you can compensate harassment victims, but a major security incident could cost you the entire company.

2. Insert animated gif of a little girl asking, "Why not both?" Companies can and must address threats like sexual harassment AND exfiltration of sensitive data.
I hear they've recently been pushing racist and edgy themes like family cohesion, Christianity and a fatphobic healthy lifestyle with exercise. \s
Everyone is very entitled to their consumption habits in the west.

Why?
More backends have been considered: https://github.com/DanielDe/org-web/issues/5

Would be nice to see Syncthing support.
kAccTime is a Linux Module Kernel (LKM ) that allows users to accelerate and shift the date/time on the host. This module was developed as a dependency to internal scheduler migration projects. The main goal is to reduce the cost and the delay of the correction step and the validation process.
Lots of “why don’t you just use rsync” type answers .
Perhaps I dont fully understand the value of something like DropBox, when it comes to syncing my files the only thing I've ever needed has been github (or other online repo). Among syncing it has all the other version control goodness, and I will likely use it until I can setup some kind of home server
CanvasKit – Skia and WebAssembly
Every tech IPO filing has a generic statement saying something like "our software may contain bugs, including bugs that we cannot fix blah blah blah." So unless Slack has made fraudulent statements about this specific breach, I doubt they've done anything illegal WRT securities fraud.
Don't be afraid to fail.

Failure is only when you cannot reflect on what went wrong and learn from your mistakes.

No one became an expert programmer overnight without 1,000's of mistakes unless you are a very gifted individual. (personal opinion)
Jaron Lanier often recommends the story in his talks on the dangers of social media.
Object Detection: A 2019 Guide
If only there were a way to power a cargo ship with a renewable such as wind... /s

In all seriousness, I don't think the market would bear how slowly cargo moves under sail.

There is an extant design, a decade old now, to add a kite to merchant ships to reduce fuel consumption when steaming downwind. It reportedly works, but hasn't been adopted much past the prototype, MS Beluga Skysails.[0]

[0] https://en.m.wikipedia.org/wiki/MS_Beluga_Skysails
Dropbox can handle a LOT of files. I haven't seen any other service that doesn't just break.

OneDrive cannot handle tons of files. It just doesn't work. It ends up freezing, you have no idea what's going on. Can't speak to macOS related stuff.

We finally were able to migrate off of this.. but we had a VERY file hefty folder structure. Instead of databases we chose to keep things in individual files for various reasons. Needless to say this didn't scale well, and there were about 750k files on the structure. Most of this was archival, but we simply didn't have the time or care enough to reduce the number of files.. we just wanted to be able to sync this to cloud data as is. Many files were super small, so never an absolute size thing just a LOT of files. And a chunk would keep changing throughout the day.

Dropbox was able to handle this for years- never an issue. Yeah it was fairly CPU intensive, but it worked very well.

I tried OneDrive on this.. what a nightmare. I tried owncloud, bittorrent sync, some others I can't even recall. Granted this has been about 3-4 years since I really tried some other ones with lots of files, but I was so annoyed every time I did.
What makes this even more sad is the extreme difficulty you'll have if you attempt to remove your company data off of the Slack platform. (Disclaimer: I stopped using Slack 2 years ago)

Our company used Slack extensively for multiple years. A couple years ago, we decided to stop using Slack for official company communication. After switching to alternative communication tools, we tried to delete the data in our Slack account and found it to be nearly impossible.

I recall using 3rd party python scripts (opensource on Github) that took hours to run - the script used an API key to fetch and delete messages individually.

We also tried using Slack's Admin panel to delete messages. At the time, I believe it required clicking a checkbox next to every chat message we wanted to delete. Clearly not a realistic way to scrub an account.

The sad reality is that with many services like Slack, once a provider has your data, there's often no easy way to remove it. IMO, this is a major downfall of our reliance on modern SaaS services (companies have no incentive to prioritize features for deleting account data - the only users who would find those features useful are already churned customers).
The issue looks to be that they thought they had informed all the affected users back in 2015, but underestimated the set of affected users. The breach certainly wasn’t secret until today, they posted it publicly at that time: https://slackhq.com/march-2015-security-incident-and-the-lau....
No, I'm not aware of better tools. I'm beginning to feel like I should start prototyping one.

I though about this topic a bit on numerous occasions, and I keep feeling that trees don't map well to this use case. I still think a directed graph is necessary, and likely one supporting cycles. The structure will be imposed by reality itself. Anything less than a directed graph will fail to capture causal relationships between entities.

yEd... well, I spent a lot of hours with yEd Live recently, and I have complaints :). Like, where's the ability to simply place a piece of text on a diagram as a node?! It's ironic, but it seems to me that in 2019, there still isn't a good tool implementing the simple concept of infinite, pannable, zoomable canvas for typing on it and building arbitrary directed graphs on it.
Show HN: Whobal – Buy and sell side projects for free
The examples on the front page looks surprisingly good, which makes me suspect they were hand-picked. Kind of beats the purpose of the app if I'm just shown trends the author and me already know about, since we seem to inhabit the same subcultures.
I now know what true loss feels like. Lost my grandmother (who raised me and was a mother to me) about six months ago. Things have felt weird ever since, but I'm handling it better than I expected. It might be a different story once I feel comfortable starting to go through her things (I lived with and helped take care of her). I've gotten closer to some other family members since.

I realized that I can handle more than I thought, even though it is a pain I haven't felt before. Just trying to make the best of every day since then and keep moving forward.
Developer Skills for the Workplace
There are so many better options then Dropbox.

iCloud once Apple introduces folder sharing in iOS 13.

OneDrive - $9.99 a month full Office Suite including on mobile/web and 6TB of storage. There is a third party Linux client (https://www.expandrive.com/onedrive-for-linux/)
I haven't seen any comments stating how ridiculous it is to tax a work of art. This is what gets me, not the 0 ~ $29 Million valuation. But that art is taxable. I better burn all of my artwork, every doodle is worth what; $100, $1000, in taxes? Insanity.
I had the same experience with dropbox. I first started to balk at them when the agent kept sucking more and more memory as updates came, then everything you describe. I ultimately just went all-in with icloud. The pricing is (now) better than dropbox, but I'm also all-in on the Apple ecosystem.
We have taken a slight performance hit, but the code is cleaner and much easier to extend.