skysight-inc/HackerNews huggingface dataset:
Blogging Secrets That Seasoned Bloggers Rarely Share
@rucciva, those are very good questions. I think the story is that Kuma is going to be better fit for east-west (mostly L4) traffic, while Kong is a better fit for north-south (mostly L7 traffic). In that sense, the Kuma is part of the network infra, while Kong is more on application side (now the obvious question is, isn't there a lot of application layer API-traffic between services). I think there is some truth in saying Kong focusing on API management. Though, I see Kong being more useful outside REST-APIs in a future, e.g. stronger gRPC story, and better understanding of other (application level) protocols. And at the same time, I don't see Kuma focusing on that. So while there is overlap, I can see them standing on their own legs.

API management being dead, yes that was a bold statement. Perhaps the message was a bit strong, especially if taken literally. If seen as a marketing, e.g. Kong pushing forward on the future with upcoming offering(s) of service mesh, being strongly investing on developing (perhaps even defining) the concepts of the meshes, it is perhaps closer to truth.

Will the service mesh capability on Kong be removed?

I am sure it is a very debatable. Having Kuma and Kong offering service mesh, makes the message Kong (the company) is sending a bit confusing. I believe the Kuma's service mesh story is stronger and more focused than that of Kong. In that sense, it could be that the service mesh capability in Kong may be removed in future. It is certainly possible to keep it around too, at least some parts of it, perhaps the automatic mutual TLS part (e.g. the connection between two Kong nodes on same cluster being mTLS secured), but I guess it might be reasonable to think that Kong is not going to push on areas where Kuma shines. So some overlap, I think, but still somewhat clear. Of course, if there is a lot to gain with removal of service mesh from Kong, then it is reasonable to remove it. I can think about it making Kong focus clearer, some of the complexities from code can be removed. I would perhaps deliver stronger (tcp/udp) stream story with Kong (I know L4), and removing mesh parts could improve that.

But we'll see. Of course a lot of landscape in orchestration and service meshes is still somewhat seeking the form — especially on deployment side (outside the big players). There is a long legacy on all of this, SOAP/WS-*, MQ, service busses, REST-APIs, gRPC, and now meshes.

I hope, this clears up some of the confusion, and not just adds to it, :-).

PS. I work for Kong (mostly on open source Kong product) as an engineer. In general, I feel that there is a period of confusion and the message will get clearer. It is rather natural with products like these, especially when talking about future technologies. I see service meshes as a future technology for a lot of us, perhaps you are already there, and if you are, thanks for pioneering! Sometimes we just need to wait for a better answers.

The views here are my personal views. A good place to clear up the confusion is Kong Summit next month at San Francisco.
App lets you encrypt/decrypt without choosing a password
But it should be that most rare "benefical" mutations have at the same time drawbacks, otherwise they would be probably much more widespread. In this case the drawbacks are just not yet known.
Those "tons" are a minority, most people immediately upgrade.
It's possible to compute which exceptions can be raised, but it's impractical to handle each exception in each function (this is how I understood your comment, I guess this is not what you meant). E.g. nearly any call can technically raise an OutOfMemory error or an IntegerOverflow error, but most functions are not competent enough to handle that, all they can do is to clean up and raise this up the call stack.

But it is indeed possible to have a single top-level handler (or a carefully constructed hierarchy of handlers) that explicitly handle all exceptions that may arise. (And to ignore an exception is also a form of handling.) The handler already exists, but it's pretty simple: for any exception it prints the error and terminates the program. It's up to developer to override this to make the program more robust.
The article clearly demonstrates that The Guardian has become a shadow of its former self - pro-Establishment, anti-Assange, anti-Corbyn/Labour, all of its trustworthy intelligence reporters having left. Something of an open secret to be honest, how it now arrogates to pretend to still be "Left"-leaning but is nothing of the sort, under editorship veering from amateurish to clearly complicit.
Also (A) would probably be a big issue, since Uber, Lyft etc. actually do interfere fairly directly with exactly how a driver provides service, even giving them a constantly-updating rating from detailed feedback collected from riders, and manipulating rides sent to drivers to influence what time of day / parts of town they end up working in to satisfy macro level shifts in demand that the larger organization observes.

It takes serious mental gymnastics to say a driver is not simply an employee of the company, in terms of operational workflow. Drivers aren’t going off and figuring out everything (or even hardly anything) about giving rides at their own discretion, or even just with minor intervention from a central dispatch. The whole thing is constantly controlled in lock step by the central dispatch, and Uber, Lyft, etc., employ data scientists and other experts specifically to make it more centrally coordinated based on data.

Frankly the only thing the driver controls is the financial risk of the car itself and clocking in / clocking out overall (though this is also manipulated with incentives).
The short answer is because people will pay for them.
You can, but that means if a user scrolls through a page and decides to share it by copying the URL they'll get a link to the page they've just scrolled in to rather than the one they've just read which is very likely to be wrong. It's something that makes me much less likely to share links.
I'm not at risk, because I deleted my Twitter account when they started nagging at me to tell them my phone number. Demanding more information from users than the company understandably needs to provide its service, is a huge red flag for me. It's good to know that they're now getting the medial backlash they deserve.
How Well Do Founders Do in Venture-Backed Exits?
We (Spain) have a similar story but with a more recent church:

https://www.atlasobscura.com/places/sant-roma-de-sau
Writing maintainable Swift code for iOS apps
However, with the growth of more organic looking content on social media, there are a lot of other types of "pros" using iPhones daily for commercial content creation.

Where I work, for example, the social media team are looking to buy an iPhone for IG Story content, as well as internal videos.

Whilst it obviously won't replace a pro photographer's equipment for static, paid shoots, it will be used often in a "pro" setting.
If you want something really accurate and resistant to any problems with CPU and drift in tickers, then you need to schedule ticks by yourself by reading e.g. performance.now(), like so: https://gist.github.com/sheerun/00e358e7bdbcd2088573e4b7b921...

Above example will indefinitely beat with 60bpm (10ms accuracy)
How does this work? You have to send in your old sim before you can receive a new one? What if you lose your old sim?
That's quite neat
California passes landmark gig economy rights bill
OP's intent was clear, at least to me: never transfer my number on the phone. Require it to be in person with some stronger form of identification.
Replace your query-term with "to-do" and google will yield plenty of results
The USA did such a startup. It’s called healthcare.gov, AKA Obamacare. It allows you to get health insurance, without consideration for pre-existing conditions and provides you with significant tax credits to offset the premiums, based on your income.

Most of the policies are high-deductible, which means you’ll end up paying for the “scratches and sniffles” yourself but have a per-year maximum-out-of-pocket that can be planned for.

It’s not perfect but it at least provides an option whereas before if you had any non-trivial pre-existing condition you couldn’t find any insurance at all.
In India, SMS services are blocked for the first 24 hours whenever a SIM is changed. This creates a bottleneck for the hackers but doesn't quite solve the problem.
You've missed the point. It's not that his twitter was hacked, it's that an attacker can get control of your phone number.
I'm afraid I'm totally new to this and don't even know what I don't know yet, I'm coming into this from the taxation angle and illicit trade is a major concern across Africa but also very hard to identify given some of the issues I mentioned above (plus porous borders, corruption, etc.). I guess my general question is how much does one of these cost to build and maintain? If you could point me to any reading for a total beginner to get up to speed on the capabilities of the technology I'd really appreciate that too.
I'm a bit out of my waters when it comes to aerospace, hopefully someone more familiar with the field can correct me if I'm wrong on any of these accounts. I knew I should have given examples from the medical field, but the parent post mentioned airplanes and nuclear plants so...

Airplanes that cannot be flown without computers definitely do exist. The F-117 is perhaps the most famous. Its shape makes it aerodynamically unstable on all three axes and it needs constant correction from the FBW system. Which has quadruple redundancy :). You can turn off the autopilot in these systems, obviously, so you get to say where it goes -- but without the FBW system to issue corrections, the plane crashes.

As for Boeing (or Airbus, who have this ELAC thing)... the main thing to understand here is that there is not a computer. There are several computers, each of them covering a particular set of modules (e.g. ELAC controls the ailerons and elevator, SEC controls spoilers and elevator). There's a more in-depth overview here: https://aviation.stackexchange.com/questions/47711/what-are-... . The autopilot is only one of them. The way they take over each other's functions is actually remarkably advanced, and leads to very interesting procedures for handling failures, see e.g. https://hursts.org.uk/airbus-nonnormal/html/ch05.html .

Now, on some airplanes, some actuators can only be controlled through these computers. They get the commands from the pilot and they issue the right signals that control the actuators. There's no way to bypass them. You can turn off the autopilot and the plane goes where you want but the actuators that control the flight control surfaces are still acted upon by computers.

I don't know if this is the case on Airbus specifically (like I said, I'm in a different field), but if it were, then simply turning those systems off in case of something unexpected is definitely not the right design solution.
In Re Banksy, Pseudonyms and the USPTO (Better Out Than in) (2013)
Back in the days of the OLPC, the Fake Steve Jobs blog used to have some vicious takedowns of the MIT Media Lab, and how it's not really part of MIT or held to the same standards.
Fry’s tries to quell rumors of its demise as customers worry about empty shelves
Yes. Of course it works, if it was not possible for you to move your phone number to a different device then you'd be trapped and of course the mobile phone companies would take advantage of that to gouge you.

The problem is your cell provider doesn't have a very good way to be sure it's Svip asking them to do this transfer. They are mostly going to rely on low paid call center or shop floor staff to decide. Fortunately for them this is a low-value transaction. If I get them to transfer Svip's number, I don't cost them very much money and I don't inconvenience you all that much really. Why would I bother...

Unless some idiot decides to rest the authentication scheme for their valuable service on control over a phone number.

In the UK in particular for example the person doing the authentication in an actual store will usually be a teenager working part time for the mobile phone company to get some spending money or during tertiary education. When a hot guy approaches them saying they can make twice their weekly wage if they just "forget" to do a proper ID check for a few friends of his, why wouldn't they say "Yes" ? They might get fired? They have never had a serious job, they're treated like shit, unless they're unusually upright and honest or they think it's a trap they're going to agree.
Any word on whether using Google-Voice would be a good safeguard against this? Presumably, because your google-voice account is so intrinsically linked to your Google account, which is much harder to hack, that should mitigate this threat tremendously. Especially if you're using google-voice to forward all calls to a number that no one else knows about.
Apple sells roughly twice as many iPads as Macs.
I keep seeing this as a main issue with EV's. But it's something that can be changed. In Amsterdam most streets have electric charging points. The city made it really easy to apply for one, and lets you skip the (multi-year) waitlist for parking permits. My friends with EV's just charge it in the streets, no problem. I don't see why other cities couldn't do the same.
Pretty cool! My vision keeps shifting to the left though if I don't actively counter-rotate to the right. It makes it a bit hard to keep looking at the same object.
> From half a world away OLPC was a very nice concept

That's kind of the point, isn't it? Once you got up close and personal with the thing, you saw the issues... The netbook-class computers were much better designed, overall.
There are interesting bits in this article, but on the whole it is not well written and clearly slanted. For example, section about Guardian's reporting on Corbyn has 8 long paragraphs about other media reports like it has any bearing on Guardian's.

I don't like much of Guardian's reporting, but it is difficult to evaluate how much credence to give to an article that is also problematic.
Funny that you use Twitter as an example because infinity scrolling on
Twitter is the reason the side is so unusable. Whenever you click an
image/link or try to zoom in/out, you take the risk to lose your current
scroll position.
Passwords don't work these days for sophisticated attacks. Phishing is too easy.

I repeat, they don't work. No 2FA means you'll experience many successful account takeover attacks on your customers. 2FA does not mean you won't, though.

Coinbase had a great talk about account takeover attacks on the recent DefCon. They receive some of the most sophisticated attacks, sometimes when attackers already have control of every other account that the target has. Email, Facebook, Apple Cloud - you name it, now they come for the coins, to cash out.
I’d have to side with Uber and I don’t think their lawyers will have a hard time arguing it. Uber doesn’t own, lease or maintain the vehicles. If the argument is that Uber is a transportation company than how can a transportation company operate if they don’t have any vehicles?
Ask HN: How to decide if feature request is worth implementing?
Hi HN, I'm a developer at an early-stage startup.

One of our users requested a feature and it took about 3 weeks to implement, but later we found out that they don't really use that new feature. It was more of a 'nice to have' to them rather than necessary. So we basically wasted three weeks, which is kinda demoralizing. I thought 'make users happy' makes sense, but in this case it was a waste of time.

When a user requests a feature, how do you decide if it's really worth implementing?
Laptop audio is ~1-2W of power from 5V rail. Thats at most 500mA going thru this 225 milliohm rdson mosfet.
There are enough people every year who need a new tablet. Millions of people would've bought iPad 3 years ago, for them this would be significant upgrade.
How does adding a second factor of authentication to an already good password make it less secure?
> It doesn't necessarily mean (in Apple's marketing terminology) actual, legitimate professional industry

I made the point elsewhere, but I think that ignores "professionals in the workplace doing this alongside other things". These can easily be "pro" for content creation teams, like editorial staff for capturing Stories from events and the like.

Just because they're not replacements for high-end commercial photography equipment doesn't mean they're not being used as intended by professionals.

Completely agree that their terminology might be skewing, but I wouldn't be so dismissive of their use in a professional context, even if the users aren't "photography professionals" themselves.
Fedora 32 Looking at Switching Firewalld from Iptables to Nftables
California Passes Landmark Bill to Remake Gig Economy
Google face-tracking tech raises privacy questions
Thanks. If I had to guess, I'd say this sounds more like a problem with KeePassXC than the site. I haven't used KeePassXC, but in my experience of these kind of addons, the site is not even involved in making a request for a password, the password manager kicks in when it detects a login prompt and suggest a password based on the URL of the site you've loaded. That's why I was curious how it would be possible for the site to not only initiate this, but demand passwords for other sites.
Microsoft Brings IBM Power Iron to Azure Cloud
My Pixel 3 updated perfectly fine on the release day using OTA. Possibly the issue is limited to just the 3XL ?
Good grief. All this power in the hands of a career politician, with no background in technology (she studied economics before becoming a politician).

I imagine we’ll see more ham-fisted attempts from the EU to regulate the internet in the immediate future.
Show HN: EXamples – Python Tests and Document Done by Example
The 20 month person was a different guy
Lost continent revealed in new reconstruction of geologic history
Works fine in my Firefox.
Ignoring a D notice seems to get the system renamed, but brought back almost identically each time. Each time they've been renamed, there's been an "incident". :)

Or just never ask authorities of the possible conflict with national security in the first place, and just publish unasked. Obviously that's not always possible, but what happened for the first Snowden story. The rest had to go through D notice as everyone now knew they were there...

Edit: Here's a Guardian piece on D notices and renaming, confirming the first Snowden story simply side-stepped them: https://www.theguardian.com/media/2015/jul/31/d-notice-syste...

Fascinating to see the first major incident being Chapman Pincher, Daily Express defence correspondent. Ah, the days when the Express was an investigative broadsheet with pretty good (right of centre) reputation. How far they have fallen to today's comic...
"dischuffed"?

Surely "nonchuffed"? "Dischuffed" suggests that they had been previously chuffed with the Guardian.
It depends at what abstraction level of problem solving you work at. Some people work at the 'we need programmers to implement x feature on our system using y language' level, and that quote is appropriate. There are people that make a lot of money maintaining COBOL systems for banks, that we all benefit from.

Some work at the 'there is this problem, what do we build to solve it?' level (myself usually included). In that case you have more scope to choose the right tool for the job, and a lot of the time the tradeoff is not favourable for PHP past the first week.
JPMorgan Tells Staff: Make It Clear Taiwan Is Part of China
The allegation was that Tesla was dipping in to preorder money and was insolvent. You seem to treat it as a foregone conclusion he was wrong, but that seems almost quaint in the context of 420 and the Solar City bailout. I don't know whether or not it happened but Musk wouldn't give it a second thought.

Ed's been continually wrong about Tesla because Musk is willing to do anything to keep it going, ethics and legality notwithstanding.

It's really quite impressive, and while I'm fairly bearish on the company, I wouldn't count it out until and unless he calls it quits.
Do you feel the competitive nature is self-imposed? Do you care if the Jane Doe is living the dream on her Instagram?
Since we're talking about Orwell, it's worth mentioning the whole point of Animal Farm was to criticize the USSR for not being socialist.
Solving spoofed callerid would help reduce robocalls also. I don't understand why the telcos can't make this happen. If they don't figure this out, we're all going to drop SMS and voice forever; the trend away from SMS has already started and people already have stopped answering all calls they don't know.
Make it a lock like domains. https://www.icann.org/resources/pages/locked-2013-05-03-en
If the end goal of the terrorists was forcing the West into a more totalitarian, less free society, then they succeeded.
That's another guy. There are 2 person in the story. The first one throw money out of the window. The second one is the one struggling for money and need the payment plan.
Would PSG Let Neymar Go Easily?
Those were two different people.
I’ve built 40 open-source JAMstack apps with automation tools
You can (should?) protect the verification step with a pin:

https://faq.whatsapp.com/general/26000021/?category=5245245

You can do the same in Signal.
There is no such thing as "proper de-identification" in general; it's all the matter of what other data sets the re-identifying party has at its disposal.

Consider the following de-identified data sets:

- [date, time, clinic, procedure or test being done, insurer] - as collected by the clinic chain so that it can get money from insurers

- [month, clinic, test name, test result] - for all tests made in the last year, collected for statistical purposes

- [date, time, latitude, longitude, phone number] - because AFAIR telcos sell this data

- [name, surname, phone number, ...] - some insurance company's list of customers

If you can get your hands on these datasets, you can trivially de-identify patients and even assign test results to them with high probability (that depends on how many tests of a given type are made in any given clinic per the unit of time used to group the second data set).

Real-world data sets may be less clear-cut than this, but there is more of it, and you can apply statistical methods to find correlations. You don't need to be 100% sure customer X has diabetes for the information to be useful to you; 70% or 60% is useful too.
Beginners Guide to Cron Jobs and Crontab
Unfortunately the EU regulation mandating 2FA[1] is only just starting to be adopted by the banks, in the UK at least. And they're doing it using SMS codes[2].

[1] https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...
[2] https://www.nationwide.co.uk/support/security-centre/interne...
My comment is strictly anecdotal
The deficiencies you've mentioned are real. However, given the less than impressive performance of individuals to date in the US and Europe who are allegedly qualified, she's can only be an improvement.
Stop buying consumer(yoga)products for your work(thinkpad)space. Consumer devices are meant to die when warranty runs out, business line is designed to minimize contracted service work.
What a Firefox plugin does on a computer has little to do with "How UK security services neutralised the Guardian newspaper" and distracts the discussion. It get boring reading about popups, font-choices, a website not working in Opera 9, auto-playing videos, paywalls. What I've witnessed (I didn't downvote) is as soon as such off-article-topic goes to 5+ comments or half the comment thread it gets downvoted.
Intel Issues Second Release of Its Rust-Written Cloud-Hypervisor for Linux VMs