skysight-inc/HackerNews huggingface dataset:
Recent pet project: I wanted multiple network clients to access the internet concurrently, each through its own separate VPN session, established on demand and without elevated privileges.

The first part seemed like a simple enough idea until I remembered that traditional IP routing is based on destination address alone. Although I could establish multiple VPN sessions, give each one its own network interface, and configure each client to bind to a different interface (and therefore send packets with a different source address), the routing table had no way to know that it should send CLIENT_A's packets to the server via IFACE_A and CLIENT_B's packets to the same server via IFACE_B.

Policy-based routing looked like a promising solution, but it would require hooking the VPN startup sequence to find each new tunnel interface as it was created, using elevated privileges to install a special routing policy for each interface, and reliably cleaning up the routing tables when each client was done. This seemed overly complicated, and a poor fit for unprivileged users.

Linux namespaces, along with tools that are already in the debian/ubuntu repos, let me do everything I wanted. I ended up writing a couple shell scripts that create N namespaces, give each one a veth connected to a shared bridge device with internet access, establish a namespaced VPN session via each veth, and let the VPN take control of its namespace's default route.

That by itself would have been enough, since any network client running within a namespace is at the mercy of that namespace's routing table, and therefore goes through its own VPN session. I went a couple steps further, though: I added firewall rules within each namespace, to prevent any leaks if the VPN failed or a routing mistake crept in. I also decided to launch a lightweight proxy server in each namespace instead of running my network clients directly within, allowing me to conveniently start and stop my network clients outside of the namespaces and independently of the namespace setup/teardown process.

With the addition of user namespaces, the steps that would normally require root can be run as a fake uid 0 by an unprivileged user. With the help of lxc-user-nic, the one privileged operation that must be run outside the namespaces (adding each veth to the bridge) can be done by an unprivileged user as well. With the help of dumb-init (or tini), stopping the parent process of any namespace automatically cleans up everything within, including the routing table, firewall rules, veth, VPN, and proxy.

This arrangement solved all the problems I set out to solve, and the exercise was a good way to get familiar with namespaces. I might some day convert my hackish shell script implementation to python, perhaps with a little GUI, and see if I can combine it with Firefox containers. Per-container or per-tab VPN sessions in a web browser would be neat.

Related:
https://github.com/mozilla/multi-account-containers/issues/3...
Nobody wants to step up

So step up. Or are you just too comfortable in your armchair?
HN is so obviously controlled by globalist interests.
The most important thing to me as a senior developer is a company that will respect my personal time.

I want a company that treats me like an employee, not a friend. I don't need perks in the office.

When I apply to a position I expect that my unlisted experience is as valuable as the listed requirements. Have a list of technology that is comprehensive but make it clear what fraction of those should be prerequisite. (I encourage people to apply at 1/2 to 2/3 usually). If you choose to require a cover letter, be specific about what you're looking for in the letter.

Use a litmus test like a 10 minute coding challenge as part of the application process if you want a first level filter.

Also, use a tool like hemmingwayapp or textio to clean the post. You don't have to take all of its advice, but it helps to understand what in the text may be at distracting
I found the matching paragraph in my 1918 Maude translation:

"At that moment there had happened to him what happens to most people when unexpectedly caught in some shameful act: he had not had time to assume an expression suitable to the position in which he stood toward his wife now that his guilt was discovered."
You can see this on a micro scale in Basel, CH. Buying bread in different countries, just a short walk / bike ride with unenforced boundaries and there are real price differences. For luxury goods it can be even more extreme with Sushi on the french side of the border being affordable, and on the Swiss side... less so.

You would think that the effect of the German and French markets would create a local dip in prices in Basel, but it doesn’t seem to be true.
Here’s some background on the concept:
https://physics.aps.org/articles/v8/18

Basic idea is that you send out a microwave signal and at the same time send entangled microwaves/photons (in the microwave band) into a trap where they basically spin around “idling”/waiting for the potential weak signal to come back. You then feed both the returned signal which is super weak and the idled signal into a josephsen parametric converter. Basically an amplifier based upon a Josephsen junction. The result is that using that type of amplifier it amplifies signals that are quantum entangled more than it amplifies non entangled signals. And you get increased SNR on your signal you get back. So the microwave still has to hit the target and bounce back to you / receiver station you just can use a much weaker signal to transmit the microwave and as a result it acts similarly to passive radar that uses ambient RF to detects objects in the air.
This is currently on every news channel and the content was pure trolling, no politics or agenda besides pushing some Discord channel. So seems like a win to me.
Can we stop referring to Telegram as an "encrypted app"?

End-to-end encryption only works in "secret chats" and voice calls. Outside of those, it's as encrypted as HN is (connection happens over TLS, but that's about it).
Hand identification has been used to convict at least one person:

https://www.bbc.co.uk/news/av/stories-45190746/how-a-paedoph...
The integers do not form a group under multiplication. As you noticed, the multiplicative inverse of any integer other than 1 or –1 is not an integer.

You might be thinking of the rational numbers (excluding zero).
Would it really make a difference? That account is already unhinged, and few take it seriously.

It's like, we say it would be a big deal, but I think it has proven itself to not be, again and again. Precedents are being passed every day and in the end it hasn't been a scandal that sticks, catastrophe or anything..
https://youtu.be/02h74L1PmaU
Well in any case it's pretty clear which one needs to come first, convince the creators and they'll push existing users to the new platform.

The chicken problem is more about the ad buyers and the users, not creators. The patreon system scales better this way but the ads are what holds most back.

I know quite a few YouTube channels who tried pushing one of those
awful decentralized versions of YouTube that look like Chinese knockoffs when the either the demonetization and copyright stuff bit them hard and threatened (or simply ruined) years of their hard work, but there was never a proper alternative to offer. I'm sure they'd love a legitimate alternative designed by top tier designers and developers for once.

Otherwise the creators will have no financial incentive to route users to another platform. Which is a far higher problem than not having enough other people commenting on the same video as other users.
> We don't do third party ads.

Are the ads hosted by the websites your users visit? If not, they're third-party ads, with you being that third party.

> Lotta green handles fibbing about us here.

Oh don't worry, I'd make the exact same comment from my other (non-green, thousands of karma) profile, I just like to occasionally switch aliases.
> It seems like MrGilbert was cherry picking the data.

I was not - I had to work with what I had, and I clearly stated at the beginning, that you have to take it with a grain of salt. However, I did not cherry pick any data. That‘s a false accusation.
Yes, you can. Data only SIM cards can receive SMS's. At least in Portugal they do.
People have pulled artefacts off the seabed where Doggerland used to be (and still is, it's just under quite a lot of water). Mostly by accident: fishing sometimes fetches stuff up from down there.
Didn't say it was, but the ones requiring IDs are more the exception than the rule, meaning hundreds of millions of people, and hardly anyone knows to do it so it's worth mentioning.

Fortunately that's not the only identity separation you can create, which IMO is as or more important day to day than encryption and other technical solutions.

But nothing beats limiting government power through policy which seems to unpopular these last few decades.
Wouldn't being constantly killed by the same default guy hurt more? If I would be a pro gamer I would do just that, just to troll them.
39 acres, room for 221 units...

Good that only SF is expected to accommodate density.
I get your point but my intention was not to highlight the different areas of security GPZ and PlayProtect tackle, but the gulf in class in competence and level of execution between those groups (if I may say so from the armchair I'm sitting on).

That said, the last bit abt a 100% coverage rings true. The signature check; however, seems like one of the important things to do (of course, there are lot of edge cases to be taken care of)? It can't be any more expensive than the AI they run on millions of apps.
Extreme network effects make this an unreasonable thing to ask.
I'd like to know is there actually a statistical correlation between BMW ownership and being an asshole? There seems to be.

EDIT: Apparently there is! lol
https://youtu.be/cFQsOnunSGk
> Anthropologists are dedicated to the study of human culture, which is related to but no the same as the study of human history

This doesn’t seem quite right to me, as the child of a professional anthropologist and historian. My general impression is that the difference between anthropology vs. history (not to mention sociology & political science) has more to do with methodology than subject. Think of ethnography vs. archival research. The subject is often heavily overlapping.
The original on Twitter [0] shows not only that head to the right side but also the torso of another person in the center. Doubt that's Trump's head though, the contour looks off.

[0] https://pbs.twimg.com/media/EDPFB_XWkAY6QWB?format=jpg&name=...
That was the correct thing to do. Considering how many npm packages the average project consumes, having even a single line of advertising for each would make npm a pain in the ass to use, and people would be looking for ways to block the ads.
NYPD wants Waze to stop locating DUI checkpoints
YouTube is a video hosting platform. It targets whatever the people who upload videos target.

Stop clutching your pearls and start being responsible for yourself. The "please think of the children" rhetoric has the effect of ruining it for the rest of us, and it's especially frustrating when the subtext is "because I'm not willing to think of the children myself."

If you want a website you can let your kid use with unfettered access and no supervision, go use one of the sites that claims to provide that.
First Steps with Universal Scene Description
A freeware protecting privacy of the people from the government they pay to protect their privacy (among other things).
It's Karenina. There's a typo in the title.
Can you fix the typo anna KARERINA please?
TypeORM – Express – Angular 8 – NestJS Server Side Rendering (SSR)
Only over short distances? Is this because entangled photons decohere as they go longer?
Continuum Damage Material Point Methods for Dynamic Fracture Animation
I was a little worried about moving to something so "minimal" but I quickly grew to like it a lot more than the bulkier wallets that I've always had before.
I'm sorry, I do not understand from the article what the Baseline Interpreter is or does. It keeps the Baseline Compiler from having to compile so many functions by turning some sections into bytecode first?
FQEKNHRKMGOKTVZB
stupid typo: for kids hands...
Seeking the Magic Mushroom (1957)
> Is that the difference, or am I missing something else?

That's part of it. The generated interpreter should be a bit faster for simple instructions because of the reason you give (also: things like debugger breakpoints have more overhead in the C++ Interpreter).

However, the bigger speedups are because the generated interpreter can use Inline Caches like the Baseline JIT. The C++ Interpreter does not have ICs.
Didn’t say anything about it being an iron civilization.
That would probably help a lot. I had a leather wallet -- two leather wallets -- and both of them left pretty noticeable on the card I could never quite clean off.
It’s an interesting idea. I think the main concern is time frame? I think instead of asking one Question each, it’s better to work on the same question together.
The idea of making a change and rebuilding is about proving that the build process does not require a network connection and that you have properly resolved the depencenies on that machine.
The best places would have been deltas on the coast where you have an immense fish supply in the ocean and fresh water from the river.
I bet you’d enjoy Pyramid by David Macaulay (https://www.amazon.com/Pyramid-David-Macaulay/dp/0395321212). I read it as a kid and loved the glimpse into Egyptian construction with an architect/engineer perspective.
Not sure if that's a torso, or the hand holding the phone, the whiter 'oblong' being the bottom of the phone, with the flash at the top
Sympathy for literature’s least heroic characters
Not really.

Whereas the execute flag on a page allows one to only load data from there but not jump there is nothing that allows one to execute code while preventing mov.
If I had to design a system to track students without teacher's involvement, my first step would be to find the stakeholders and remind them that they are asking for a system that is worse, more expensive, and more dystopian than the simple system they already have. It's kind of a false question - like asking, "suppose that a boot was going to stamp on the face of humanity forever, what kind of leather would you make it out of?"
This is a good point. And in EU interoperability is explicit reason for not just this but full fledged reverse-engineering.
Is Shoreline a specific place?
What’s the deal with the legality of dui checkpoints in NY? I understand that they’re technically unconstitutional, but in California they’re ok because we’re in a certain distance of the border l.
What's you opinion about “smart” solutions in development and frameworks
Steam already does this type of differential pricing, they doing it by essentially region locking a price, the Indian keys will not work in the US, so they cannot be traded to someone in the US.

I wish if other stores also does these region sensitive pricing like steam does.
I work in public digitalisation in Denmark, and I can’t think of a single reason of why you would ever even want this.

What’s the use case? Automatic student registration? If it is, and I can certainly imagine some HR consultant going “weeeeeell we can squeeze five minutes of extra education in if we remove this teacher-student interaction of registration, that’s a gazillion hours of extra education a year!”. I know this is a strawman of my experience, but it’s frankly the only way it would happen at my place. Which would be crazy considering the primary focus of Schools in Scandinavia is to educate democratic citizens, and automating something as meaningful as presence registration is damaging to that focus because the “AI” won’t be able to have a conversation about the usefulness of attendance.

So I absolutely agree with you. This is completely crazy, but what I really wonder is why no one asked “why?”.
It is, but it could have been much better from the get go.
Are you using cwm on OpenBSD or on something else? (Just curious.)
This is the outfall of threatening rent control and additionally demanding below-market units. It then makes more economic sense to not develop housing.
From that paper: "Of course, there are caveats to these findings. First of all, GDPR has only been in effect in the EU for a short time, and the effects we’ve observed may be temporary, with investors potentially taking a wait-and-see approach."

Given the year-over-year trends shown in [0] I feel like one should not overemphasize the timeframe that article looked at. The decline seems to be relatively contained at best and future development is unclear at best. And honestly, who cares, even if we suddenly got 20% of startup failures due to GDPR concerns alone. If those concerns are reasonable I'm totally fine with that.

[0] https://news.crunchbase.com/news/decade-in-review-trends-in-...
I'd really love to see this plotted as a histogram of the age of founders of the top N companies according to some metric, and maybe even founder's age vs. some monetary evaluation after a certain number of years.
How safe is it esp. in low light/nights? Unless other vehicles have Radar/LiDAR sensors, it’s not so easy to detect.camera sensors might face challenges to detect this car. Other vehicles might hit this vanta black parked car.
Cartoon nursery rhymes directed at as low as even 1 year olds will sometimes have ads popup for a tv show containing drugs and guns. Completely inappropriate!

EVERYTHING that deals with children whether directly or indirectly is strictly regulated, and rightly so.

Television programming as an example, for 70 years only permits certain ads to be displayed on children's shows.

YouTube should be regulated by the FCC in regards to this and very easily can have a checkbox for advertisers and providers to check that says the content is for under 13 or not.
Have you been to your local library lately? I was spurred to sign up from a post I saw on here, and it’s actually surprising how good the quality of content is. Plus I save a ton of money on purchasing books AND support the community. Definitely check it out if you haven’t!
Why do you say the account is unhinged and not taken seriously? Is this just your political bias showing?
There have been plenty of attempts, nearly all of them failed (with the rest holding onto niche markets)
Are you sure? I wanted to install Telegram and it insisted on having the contacts permission from the get go. I think it's sending contacts to their database so they can match friends.

Isn't there a secure messaging app that doesn't require a phone number and doesn't ask me to upload my contacts?
The main parts of the wrong-doing:

- The school had obtained consent from the pupills and each one of the pupills could opt out at any time. The Swedish Data Protection Agency (DPA) did however find that due to the power balance of a school vs a pupill, these consents are not ”freely given”, and thus are void. The school therefor have no legal basis of processing special categories of data/sensitive data, which processing face recognition data (”biometric information”) for identification purposes is. Violation of GDPR Article 9.

- The school had not completed a sufficient Data Protection Impact Assesment which properly identified risks of this processing. In addition, due to the nature of this processing, they would have been obliged to consult with the DPA about this impact assessment before starting. Violation of GDPR Article 35&36.

- The DPA also found that the processing was more extensive than necessary, since attendance could be taken in less invasive ways. This a violation of GDPR article 5.1c (the data minimisation principle).

I hope the decision will be appealed by the school, which is run by the municipality. There are several interesting questions, such as if consent can be freely given in schools, if the data minimization principle was really breached (the school claimed this way of taking attendance saves a calculated 72,000h of teachers time per year in just this school), etc. I am not sure however that the municipality has the right resources and competency to make a competent appeal.
From my experience, free to play games are basically always guaranteed to be deceptive in order to recoup the cost of development.

There are a few examples that don't fit, like; TF2 and Fortnite I suppose. But I'd always rather pay a fixed fee for a game and be confident there's no incentive to sell me something...
Why did every top level comment here get downvoted? Did this get brigaded by Youtube / Google employees?
But if you check Ideone.com and write a code like this:

while(true){}

the page loads but the ide says time limit exceeded after 5 seconds and stops the execution. Now, how do you do that?
> A combination voice recognition + gesture recognition + eye tracking would make

... retail surveillance much more effective and privacy eroding...
Because children have these things called parents, that are allowing unrestricted access to a platform that they failed to read and follow the terms and conditions of. There is also a YouTube kids app, specifically geared towards helping filter child-appropriate content and advertising policies.

I'm personally no fan of YouTube myself, as it constantly recommends channels and videos that I have no interest in and that I often find to be despicable based on my actual interests. I loathe that it does this, but I have the choice of not using it.

What would you prefer... Every site you going to require that you sign in and verify your identity before being able to use the service, and sign some type of agreement that you won't let a minor or child access it? Same goes to cigarettes and alcohol by the way.
What Does VSCO Think About the ‘VSCO Girls’?
You don't have to convince creator's to switch, just to use your new platform as well. YouTube doesn't have an exclusive license on the content.
See my post below where I link to actual data on sea level rise rate. The ice caps don't melt instantaneously there's not enough energy in one summer to do that. The fastest it ever rose was 3 cm a year during a 1000 year period. Even at 3 cm a year you can build new buildings on higher ground as the water advances and never lose a beat. Especially when we're talking an era when most homes were built out of bones and deerskin and maybe clay. Without metal they couldn't even chop wood but even wood buildings go up rather quickly. I just fail to see how we could believe our ancestors made it through several ice ages,
mastered fire, avoided being eaten by saber tooth tigers and hunted wooly mammoths and populated the whole globe but failed to avert a 3cm a year sea level rise.
you could let the higher price versions include the lower ones. so if you buy an english edition you get russian and chinese for free included, but you don't get finnish or german, whereas if you buy the german one you get english and all the languages that english already includes.
And you, sir, you were fired from Mozilla because of community pressure. I appreciate Mozilla even though I didn’t always use Firefox because of what it represents, and rejecting a CEO who’s homophobic and racist is showing the power of that community.
China is learning ways of US.
Maybe it's your account that is limited, given that the vast majority of your activity the past few weeks is submitting your Medium articles across multiple reddits at once.
First published result? There were reports of military work before: https://www.scmp.com/news/china/diplomacy-defence/article/21... This publication gave some credibility to the earlier reports of presumably classified work.