skysight-inc/HackerNews huggingface dataset:
Same here.

Herman Miller dealers are everywhere, but I hate their chairs. The closest Steelcase dealer is an hour away, but it is worth the trip.
Note that the Paris Fire Brigade is a branch of the Army [0] (and in this case, it shows).

[0] https://en.wikipedia.org/wiki/Paris_Fire_Brigade
> Any claim that Google would have helped China censor Chinese citizens ignores the fact that Chinese search engines are already censored.

so, maintaining the status quo is not 'help'?

> I know some people prefer to stick their noses up and hold what they perceive as the moral high ground, but do consider how lives of hundreds of millions of people will be affected by your actions/inactions.

so which is it if one says no? sticking ones nose up or considering how the lives of millions of people will be affected by your actions/inactions?

or is it only sticking ones nose up when you disagree with the decision?
Assuming you don't live in a food desert. Cheapest food from a place served by dollar stores, bodegas, gas stations and other small chains is often not rice, beans and frozen veg. I invite you to try shopping at a Family Dollar and see what comes out the cheapest per calorie. Most likely it'll be high carb high fat processed food.
That’s another part of it, to be sure, but yet another dynamic is that it being a mostly fixed system, rather than a wide array of target hardware, is what makes it feasible to implement these tricks and accumulate knowledge in the first place. It all kind of goes hand-in-hand — the fixed nature of the hardware makes it so you have to find these tricks in order to compete with games that play on newer hardware, and also makes it so that it’s possible to do so. I find it fascinating. But I suppose the market would have just found different stabilizing points were this not the case.
The counterpoint is that superpowers do not come bundled with superior morality, but the consequences are magnified.

We're facing this everyday with rich and powerful making likely bad choices, for themselves and for others. Why would any other kind of superhuman be different?

The question is only of magnitude - what could one person do? How would they do it? What would be the cost or benefit?
Sculpture Garden ftw, also CDM took over the morning call stand for now so you don’t even have to leave there for beignets
The better way to describe it is that healthy food that triggers the same visceral pleasure reactions as junk food and that takes the same minimal amount of time to prepare is more expensive than junk food.
Well "the interface was confusing" doesn't really rule out "user is an idiot", but most likely will make matters worse.
The government would toss me out a job if someone else wants to come in the country that can make them more money. It feels pointless to stay pledged to one country when someone from another country can just get an H-1B visa and take your job in a matter of months.
"13 years ago... ....drifted ~1m"

That's incredible
'Ciao' has an interesting etymology:

https://en.wikipedia.org/wiki/Ciao#Etymology
The Racist History of Tipping
In my corporate environment, we are prohibited from using HTTP but we do not require our certificates to be up to date. Since the proxy does not allow Internet access except to a whitelist of hosts, we have to do something like this in order to take an ubuntu iso from a vendor, and convert it into an os template that my company can use:

echo "Acquire::http::Proxy \"http://personal-cntlm-proxy:3128\";" > /etc/apt/apt.conf

apt-get install -y apt-transport-https

echo "deb [trusted=yes] https://someserver/somedir bionic main universe multiverse" > /etc/apt/sources.list

echo "deb [trusted=yes] https://someserver/somedir bionic-updates main universe multiverse" >> /etc/apt/sources.list

echo "deb [trusted=yes] https://someserver/somedir bionic-security main universe multiverse" >> /etc/apt/sources.list

echo "Acquire::https::Verify-Peer \"false\";" > /etc/apt/apt.conf.d/80ssl-exceptions

echo "Acquire::https::Verify-Host \"false\";" >> /etc/apt/apt.conf.d/80ssl-exceptions

apt-get -y install ca-certificates # and now the server is trusted finally

echo "deb https://someserver/somedir bionic main universe multiverse" > /etc/apt/sources.list

echo "deb https://someserver/somedir bionic-updates main universe multiverse" >> /etc/apt/sources.list

echo "deb https://someserver/somedir bionic-security main universe multiverse" >> /etc/apt/sources.list

rm /etc/apt/apt.conf.d/80ssl-exceptions

probably not even anywhere near the prescribed way to do this, but everything in corporate america has a few extra dance steps.
Faster reaction times are "low-hanging fruit" until the reaction is wrong...

Even taking Alaskan fog banks out of the equation, a machine need to be pretty near AI-complete to not be fatally wrong about how to react more often than every few hundred 100 million miles, which is the human benchmark (including inexperienced, tired, drunk and stupid drivers) if it's driving in normal road conditions without a human failsafe. Or for the road environments to be very different, or for the 360 sensing and autobraking to be primarily driver aids, which are the real low hanging fruit for all that investment in AI processes to understand roads and control vehicles.
Depends on what they mean by messages? The whole raw message, incl. all headers? The text user sees?

Google can probably serve nice ads just based on metadata it gathers on the SMTP level, without even using the raw message. Someone mails his bank, maybe show some banking related e-mails, etc.

And it would still stay true to the proclamation on that page.
Free Crypto Signals Telegram – 8 Channels with 300% Accuracy
I've seen this repeated as dogma. Is this based on empirical science, or just a hunch?
https://miro.medium.com/max/1838/1*KedwLPE9eXoeuwdciZpE0Q.pn...
Some possibly interesting stuff about topography on the 660 km 'boundary':

The 660 km boundary (aka the 660 km discontinuity) is primarily* a mineralogical phase transition in the mid-Mantle. What that means is that the bulk geochemistry above and below this boundary are the same, but the crystalline structures are different (different mineral assemblages are stable at different temperatures and pressures given the same bulk rock chemistry, and the transitions are sharp-ish rather than gradual). The rock below the 660 boundary is maybe 10% more dense than the rock above. Because rock in the mantle is viscous (say, 10^20 Pa s) in the absence of persistent stress or pressure gradients, any topography on this boundary should eventually level out. So seeing kilometers of topography on the boundary means that there are some sort of persistent differences in force in the mantle of magnitude 10-100 MPa that can sustain the gravitational potential energy gradients produced by irregular topography and therefore irregular density distributions. Over broad scales (hundreds to thousands of km laterally) this could be from the big mantle convection cells that drive tectonic plate motion on the Earth's surface. At smaller scales I have no idea what could be driving it.

Another interesting thing about the 660 km (and 410 km and shallower) phase transitions is that I think that the density and viscosity contrasts due to the phase transitions causes a lot of the deep earthquakes such as the Bolivian earthquake from the paper. These earthquakes are in a subducted (sinking, falling if you will) old slab of oceanic crust. As these sink due to density contrasts (they are cold from being at the Earth's surface), they will slow down when they pass through the 410, 660, etc. phase transitions and should deform, kind of like a big icicle that falls of a cliff into water fracturing when it hits the water's surface (except it may continue to sink).

* Some say it's a chemical boundary as well, i.e. that the material above and below doesn't mix. I think most high-resolution seismic imaging of the mantle shows that many convective features such as mantle plumes and subducting oceanic plates penetrate the 660 discontinuity so I don't know if I believe this but it's hard to say and this isn't my area of expertise. It could be either or both although we have solid experimental and theoretical thermodynamic evidence for saying that these are phase transitions.
Your problem is that you're seeing this issue as black and white, which never does good.
With unspoken assumptions about how much an increase is needed things become arbitrary.

IMO, if allowing self driving cars on highways costs less than 100k per mile it’s a rather trivial expensive at 16 Billion in the US. Extending that to every road would be much harder to justify. Similarly, developing something like a set of more clear hand gestures for directing traffic would not be a major issue.

Honestly, the need for expensive changes seems unlikely, though some changes such as paint choices for lane markings would probably increase safety or efficiency.
OK, so I'm working on something that could be like that, and looked at dat and ipfs, but only IPFS is reasonable for filesystem access, and both have decidedly nontrivial access latency. DAT/IPFS experts: how would you apply it to something like a Google photos app, where the majority of assets are private, and subsets of assets are shared? How do you propagate edits (like adding and removing assets or changing asset metadata, like "hidden" or reactions) with reasonable propagation assurances?
As I've heard it: "You cannot outrun your mouth"
I'm not sure when this site was last updated, but I'm guessing this is being posted here due to the edits added to the top of the post this year, most notably the link to CVE-2019-3462[0] which was reported in January.

The last time I read whydoesaptnotusehttps.com the tone of the article seemed disappointingly in favour of the status quo. The intro to the article now seems much more open to change.

(this site isn't on the Wayback Machine, so I'm going on memory—not sure how significantly the article has actually changed)

[0] https://lists.debian.org/debian-security-announce/2019/msg00...
Let's ignore the issue of integrity and look at confidentiality:

• Browsers will reuse the same TCP connection when downloading multiple resources. Does apt not do this? This seems like it would make inferring package versions and names difficult.

• Is it impractical to standardize on a fixed block size that works for most packages, and just add noise as required to 'top up' the size of the payload to match the same size as all the others?

I found these articles interesting:

• https://tools.ietf.org/html/draft-pironti-tls-length-hiding-...

• https://hal.inria.fr/hal-00732449/document

Also, is there an actual PoC for any of these size-related side channel attacks? I'd take it all a lot more seriously if there was one.
Step outside of the US and Western Europe and things can become quite interesting pretty damn fast, for example I had to avoid cows nonchalantly walking down the road like in this YT video [1] at least once every year for the last 3 or 4 years (mostly when I visit my brother in the countryside). Horse-driven carts are also still a thing in these parts of Europe, and they’re basically stationary objects (fun thing when you end up behind one just before a blind curb, preferably with a lorry driving up just behind you). Just like other people have mentioned in here, driving is a AI-complete problem.

[1] https://youtu.be/9vzV7tY8r54
Not exactly. Radio chip firmware is responsible for controlling the physical layer, and restricting access to it is a practical compromise that ensures people don't generally cause RF interference for one another.

The problem discussed upthread is on the application layer - you not being able to run arbitrary code on your own device because companies prefer to please one another rather than their customers.
Are terms and conditions the only thing that keep you from being a raging sociopath? Just because the T&C say you can do something doesn't make it right.

If somebody did that to me, I would be really upset. Therefore, I am not going to do that to somebody else, even if the terms and conditions of the site allow it to happen.

You should listen to your conscience when you "feel guilty" about something.
The vast majority of weight gain is due to food, not a lack of exercise. If you eat a McDonald's cheeseburger, it takes an hour of exercise to burn it off.
Exercise helps with getting in shape, but does next to nothing for losing weight.
Food deserts are overhyped https://www.bluezones.com/2017/11/news-food-swamps-contribut...

Anyone who owns a car can get out of their “food desert” anyway and the obesity crisis is hardly limited to those who don’t drive.
Does it mean your browser is going to leak your sites/account information to a third party?

Will this feature be enabled by default?

Can this be disabled?
Ask HN: Has anyone moved back to home country after 5+ years in the states?
I would like to move back to Europe after 5 years in the United States. I originally moved here for grad school and stayed to work at a tech company (product mgmt + biz dev). I'm eager to return home. Would love to exchange thoughts and hear from other people that have done the same.
I don’t think it'd be so much (the draught from the lakes) that the St Lawrence becomes a dry wash.

Even if parts of Calif are a desert, they become a fertile deserts with water.

I imagine some revenue sharing scheme could entice some of the states to send some water.
I found this cli weather app written in python to be small enough that you might be able to figure it out, and it’s basic enough that you can probably imagine features to add. https://github.com/JasonMFry/weather-cli
> that shows your ignorance of how things work in China

Then please educate us. I'd like to know the limits of china's censorship.
Waiting for the case U.S. v One Copy of Crayon Shinchan
Yes. Presentation matters.
It is something you can sell, and is currently in development by major pharmaceutical companies.
There is more area than meets the eye - a large chunk of PCB itself is a "heatsink" thanks to sheer amount of metal in there.
haveibeenpwned doesn't accept plain-text passwords for checking, they use a k-anonymity model to protect both your passwords and the passwords in the database. the same goes for email addresses.

https://haveibeenpwned.com/API/v2#SearchingPwnedPasswordsByR...
it's my understanding that these cars can only drive without any human intervention in certain, somewhat ideal scenarios. I've never seen a direct comparison to humans driving in the same limited set of conditions. are the AVs still statistically safer in these circumstances?
There's no need for a theory of mind - the self driving car can identify the kid as a pedestrian, recognize that it started moving in a possible collision course, then disappeared, thus prompting either slowing down to a non-fatal speed until the truck has been passed.

Children playing in the street are a common occurrence in residential areas, I see no reason why you would not develop a set of rules and heuristics to handle them. Identifying a pedestrian as child, and knowing whether it is running or playing, is well within the capabilities of modern computer vision.
Can you show me some examples of cheap junk food? A bag of chips and a soda costs about the same here as a pound of chicken or pork and any one vegetable side.

Go down the frozen meal aisle where I'm assuming most unhealthy people shop and it's far more expensive than buying the raw ingredients. Sure it requires more effort to cook from scratch, but you can't throw money at people not willing to put in the work and expect better results.
> I have profound sympathy for the victims of authoritarian regimes, and I absolutely do not believe that the way to help them is to collaborate with the very system that oppresses them. Pretending otherwise sounds like Newspeak to me.

I have relatives in China. Censorship is the least of their worries when the current Baidu monopoly is allowing promoted results that are sometimes flat-out evil (https://en.wikipedia.org/wiki/Death_of_Wei_Zexi).
That's like asking why do I have so many outfits in my closet. I choose my JavaScript framework based on what I have going on that day, what sort of mood I'm in, and how sassy I'm feeling.
Agreed. Some of the criticism of the censorship also shows a underlying lack of understanding how search engines works. The Chinese firewall blocks the websites, not the search engines.

What was Google supposed to to? Show links to dead sites that don't load in the browser?
Reading all those IR images popping about the raspberry made me wonder why we're still using a "rainbow" (HSV) colormap.

I think there are better alternatives, that have both a linear luminance variation, and are colorblind-friendly:

https://news.ycombinator.com/item?id=17723041
But you can never exceed the throughput of the phone.
At that point, autonomous driving is a convenience/safety features for autos/trucks that are more or less as we know them today. You can't build transportation systems and ownership models around vehicles that only work in some places in some conditions. (With some exceptions, but they're relatively narrow.)
Restitution Is Not Enough
I was thinking of small inner city channels with floating storage keys the other day. Messages^14 in a bottle kind of.
> I work in Biotech and every time I read one of these articles/posts about how somebody hacked their insulin pump people start asking why there aren't already affordable closed-loop pumps on the market if people are hacking their own with raspberry pis and the like, and they clearly don't understand the regulatory process or the level of clinical testing that's needed to validate something that, if it malfunctions at night, can kill you.

plenty of closed loop feedback systems we are all hooked up to which can malfunction and kill you.. casually thinking of automotive industry I can come up with:

- abs brakes
- engine control units
- transmission control units
- power steering
- traffic lights

and that's just one sector, let alone aviation, mass transit,
power plants, etc etc etc.

granted the malfunction:fatality ratio is probably different, but not so altogether crazy to think that 'closed loop is impossible' .. though perhaps you are strictly speaking w/r/t regulatory climate..

that said, we have had pacemakers for many years..
Foundations of Mechanical Accuracy (1970) [pdf]
Like a recovering alcoholic who avoids going into places that serve alcohol, it's much, much easier just to get rid of all TVs from your house so the temptation just doesn't exist.
> But they are files mounted in that location. You can treat them as a file: copy them to another location, get info about them, search them, etc.

And if I copy that file out of /system/Applications, and put it on a fresh Haiku install somewhere else and try to run it, what happens? Granted it might actually work, but not if it depended on any other hpkgs not in base Haiku or things that were in its hpkg. If applications actually were just files (or even folders), then this would work as expected.

> Yes, and as stated many times above, your use-case is in the minority

And therefore irrelevant, yes, I get it. My point is it shouldn't matter that my usecase is in the minority, because my path towards such simple functionality [0], functionality suggested by the --unfortunately illusory-- metaphor presented to the user, shouldn't require me to break out a compiler. Instead it is complicated, because a complicated system was put in place to manage dependencies, a problem so desperately in need of solving that Electron, which bundles an entire web browser with every application, is popular and widely used.

[0] DOS, the original MacOS, RiscOS, NeXT Step, the new MacOS, etc. all had this working.
Press reports that this is shipping in Fx69 were incorrect.
Launch HN: Wren (YC S19) – Offset Your Carbon Footprint
Hi HN,

We're Mimi, Ben, and Landon, founders of Wren (https://projectwren.com). Wren lets you offset your carbon footprint by funding projects that prevent or sequester greenhouse gas emissions. It works by calculating your carbon footprint and then funding a project of your choice through a monthly subscription. Some of the projects we have right now involve planting forests in East Africa, providing more efficient cookstoves to Ugandan refugees, and preventing deforestation in the Amazon.

We met in college, and worked together on numerous side projects and class projects. After a while we decided to try finding a meaningful project that we could work on after graduation. At the time, we didn't know much about the science or emerging technologies for mitigating climate change, but we saw carbon offsets and asked ourselves "why isn't everyone doing this?" Then we got to work on Wren.

Carbon offsets have been around for a while, and with some googling, research, and phone calls anyone can find reliable and transparent projects. Our goal is to make it as easy and enjoyable as possible to offset your footprint. We only work with projects that have good evidence suggesting they're long lasting and reliable. We also only work with projects that wouldn't happen without support from Wren users. In addition to climate benefits, we prefer projects with strong social impact. Projects listed on Wren reduce lung cancer risk for refugees, provide millions of dollars of economic benefit to subsistence farmers, and protect biodiversity.

We see climate change as the most important problem we can work on. Despite growing evidence of the damage it will cause, governments are not taking necessary action. Wren is a way for an individual to have impact today.

Most in this space are nonprofits but we are a business. We take a 20% fee on each subscription. This allows us to hire talented engineers, invest in marketing, and raise capital. This way we can build tools that make our projects more transparent and reliable—daily satellite images of forest projects, data visualizations of tree trunk diameters, and other ways we can build more trust for these projects.

I've seen a lot of posts on HN recently about climate change and potential solutions so I'm looking forward to a good discussion :)
Client-side software update verification failures
Compared to processed food, I think it could be more difficult to prepare those in an appetizing way.
How does Firefox compare your actual password to the leaked password without storing your passwords in plaintext?
I can see how that might be true in general, but would it really apply here? Even at my most cynical, I have a hard time believing a contractor would be so careless about Notre Dame, a major national symbol.
The P2415Q is a 24" monitor.

Also, I would recommend ignoring Dell's dual-monitor stand for these monitors (Dell MDS14 Dual Monitor Stand). It doesn't allow for the monitors to be angled inward very much at all, so the monitors are mostly parallel with each other.
When you're talking about poor people, you can't assume that people have a car. Some of the worst food deserts are in cities where you can get by without a car. Plus when you work 3 jobs and have kids, driving an extra 10 minutes both ways to get to a better grocery store can be too much.
Ikea sells desk legs that can be adjusted to the right height when you install them, but don't have all the machinery needed to adjust it's height while using it. If all you want is a desk that suits you body, grab a set of Olov legs from Ikea for $15 each and take what you saved and put it towards other ergonomic equipment.
'I've also noticed that comment spam seems to actually work..'

My pet theory is that with any filter there is always some stuff that gets through and if you're automatically spamming a few thousand comments then even a tiny percentage is going to make it worth the effort.

There is also a chance they'll get a few comments on sites with dofollow links, of which there are still some around.
https://en.wikipedia.org/wiki/Death_of_Wei_Zexi