skysight-inc/HackerNews huggingface dataset:
PRNG needs entropy, but it doesn't consume it. You don't need to feed entropy into it continuously.
WebThing CLI
Obama talked in public and even campaigned about surveillance state reform, but in actual action doubled down on the darkest parts of our post-Patriot Act government. Obama wasn't responsible for starting our incredibly unethical use of drone strikes on civilian populations, but he massively expanded it, and much of the misconduct revealed by Snowden and Manning's respective leaks were Obama's shames to bear.

I think it's easy to look back fondly on his Presidency in comparison to the travesty we see today, but Obama was not a good person.
IANAL, however I have been led to believe that those reciprocity agreements usually include some statement along the lines that said infraction needs to be prosecutable locally. Countries usually don't extradite their citizens for things that aren't considered a crime in their jurisdiction..
I store the keepass file in a cloud sync service. The file is encrypted.

The keepass application can perform "auto-type" which works for all sensible applications and websites that have username/password input fields and a log-in button.

Recently, more and more websites split the log-in into two screens, first email and then password. This completely breaks auto-type and is horrible in every way. Please don't do it.
Find Best Treatment and Recovery from Addiction for a Greater Life
No analogy is perfect. Amazon obviously isn't a mall, but it's not a grocery store either.

A grocery store owns the goods in their possession even if they have agreements for sellers to buy some unsold product back. Amazon does not own the 3rd party goods in their possession.
Well yes and no. Most grocery chains have more than enough weight to make sure they can return whatever they can’t sell. And the pay their suppliers so late that 99% of the time they’ve already made the sale before even paying for the inventory
Yeah, the search vs shop tension is the big question.

The difference being that Google are ostensibly a search engine, who are looking to monetize and leverage their ubiquity - Amazon are a book store grown to titanic proportions looking to maximize profits.

The same, but different.

I fully support Amazon's divergent empire being broken up into sperate companies, but for the moment Amazon.com - the online marketplace - is still an internet shopfront.
I've always considered Amazon's search system as pretty bad, often ignoring keywords to get more search results. It does look like their sort by price mechanism has improved. eBay has my favourite search system because it's willing to admit if there are no results and allow me create an e-mail alert. It also allows negation and lets me use parentheses to define a logical "or" as part of the query.
Or another nice one I saw recently on twitter - "@oneunderscore__"
lastpass' privacy policy is very privacy hostile. They're now aggressively offering a free product with the ability to monitor (and sell) all browsing behavior tied to you as an individual (thanks to LogMeIn).

>How We Use the Information We Collect and Receive

>LogMeIn may access (which may include, with your consent, limited viewing or listening) and use the data we collect as necessary (a) to provide and maintain the Services; (b) to address and respond to service, security, and customer support issues; (c) to detect, prevent, or otherwise address fraud, security, unlawful, or technical issues; (d) as required by law; (e) to fulfill our contracts; (f) to improve and enhance the Services; (g) to provide analysis or valuable information back to our Customers and users. [1]

(e) is a very broad and loosely defined category. A contract can include Anything and this ambigious statement enables LogMeIn to inturn do anything with data they collect from all their services (including Lastpass).

In the new firefox updates, Lastpass won't let you open/run the extension until you provide it the abiltiy to monitor all browsing behavior (whereas on chrome I have it restricted to monitor sites when the extension is clicked/activated)... I will not be renewing my premium service and am looking to migrate away to another service.

[1] https://www.logmeininc.com/legal/privacy
Andreessen Horowitz Returns Slip, According to Internal Data
I'm wondering what Russia did or did not get.

Assuming we trust that Snowden acted based on the motivation he stated, it's plausible that he destroyed his copy of the documents before traveling to Russia.

However, once there, and stuck in that holding cell for weeks, completely in the hands of Russia, I can't see how he'd withstand the pressure to give them what he still had and couldn't get rid of - the knowledge in his head. (But keep in mind that the US brought the "Snowden in Russian hands" situation upon themselves by cancelling his passport.)

I also can't see how the newspapers would be able to keep the documents secret from a foreign intelligence agency. Such a high-value secret stored and handled in a dozen different places, by people who only have a short opsec training, limited understanding, and few resources and little support to establish effective security...

Not saying Snowden shouldn't have done it; his revelations showed massive illegal spying by the NSA, and triggered (some, not sufficient but better than nothing) reforms. But claiming no harm seems a stretch.
Don't leave us hanging killer, what is that ideology?

From where I sit it's mostly a lowest-common-denominator approach that's designed to be inoffensive, appeal to the broadest culture possible, and sell the most tickets.
>One way out of this is for the major OEMs to band together and create their own standardized platform that works across OEMs. At minimum, that platform should expose a single standard interface to all third-party service providers.

This already exists, and it's why there's a slew of Bluetooth-enabled apps on the app stores that let you self-diagnose your own car. It's called OBD-II and it's federally mandated on every vehicle since 1996 in the US and since 2003 in the EU: https://en.wikipedia.org/wiki/On-board_diagnostics
Don't autoworkers get stock? I remember vaguely in The Simpsons that the nuclear powerplant employees got stock, and Homer stupidly sold his stock.
It's the cost of a bed in a subdivided apartment, not an apartment itself.
The only reason Edward Snowden is in Russia right now is that the US cancelled his passport while he was in transit, leaving him stuck there.
Unconsciously, yes. You could be more strategic about it.
>When a grocery store puts something on it's shelves, the store itself bought it from the manufacturer. They have already made their money. On Amazon, manufacturers don't make money when the item is listed, they make it only if and when a customer buys the product.

That's not how it works for a some perishable products in grocery stores. For example, bread is stocked daily by the bakeries themselves. Same thing with potato chips.

If a grocery store has their in house bakery up front right when you walk in selling bread, and the vendors bread is all the way in the back, is that unfair to the vendor?
The CIA's entire network in China was rolled up and liquidated due to an IT security failure and that certainly made its way to the press.

I think we can infer that Snowden's disclosures didn't have anything like such an impact.

https://foreignpolicy.com/2018/08/15/botched-cia-communicati...
All of the ones around here do. Used DVD racks still exist. Soft drink vending machines. Seasonal items. Newspaper racks.

In the case of items actually run through the register, I'm not sure how that's dealt with from an accounting standpoint. I do know that the stores have the ability to return 100% of unsold goods in those cases.
That seems related to the US. Is there anything where he leaked memos between other countries, etc? I faintly remember something like ambassador of A stationed in country B reporting that the government of B had a problem with country C.
Call me tinfoil, but I got the feeling the interviewer was fed questions by the government.
Before every disclosure, Snowden asked the white house for comment, or to propose a reason why the information should not be released.

According to Snowden, the white house never provided a convincing case for why the information would harm US interests.
Just want to give props. This is the clearest explanation of the value of typed FP I've ever seen.
> We do have all sorts of laws and regulations preventing formation of large monopolies in corporate world. Do we have anything to prevent a de facto monopolization of workforce by a union?

It's called "right-to-work" law. Some states have it and some states don't. But it prevents a union from requiring you to join as a condition of working for a company.
Spigen is a legit brand
Had no idea he'd said something like this. It's deeply disappointing - he always seemed analogous to a software Jesus or the like.
Sorry, I should clarify-

The US has upheld, culturally, that what Rosa Parks did was just. Snowden isn't asking not to go to jail, he is asking if he goes to jail that he be given a fair trial where the cultural impact is also implicated in his law breaking. Thus, I'm confused why his position is so contentious.
Will Humans Survive the 7th Great Extinction?
The authors and publishers created this problem and the marketplace is pushing back. I was buying a lot of e-books when they were significantly cheaper than paper. Now that's no longer true and I've renewed my library card for the first time in 20 years. I already own too many paper books and I don't want any more. But I also refuse to pay as much for e-books as paper. Libraries to the rescue.
richard feldman, evan's colleague, is not exactly a nice person on the internet. There are several times where he's ranted or had a temper tantrum for no particularly good reason.

now he alone does not make up the "community", but he's certainly a prominent member of it.
Having attended public elementary school in the 1970's, it would seem we were fed a very optimistic, filtered version of American politics.

Schoolhouse Rock's presentation was very selective.
When Adleman gave a seminar I was an undergrad at UCSC. We chatted with him afterwards and it was fun to calculate that, using his design, if we wanted to scale up to solve more interesting problems, you'd have to have a bathtub's worth of solvent and very good mixing (better algorithms aren't as wasteful).

I don't see any DNA-based computing or storage systems as being capable of outdoing a general purpose computing system that already exists off the shelf, for the foreseeable future, for any reasonable use case.
The integrity of the Linux source code still matters whether or not you trust your hardware vendor. Linux runs on more platforms than those two as well.
This was on a wired connection in the US (75mb down / 25mb up). I'm not sure what was up but every other site worked and I had no packet loss anywhere else. I had a 7ms ping time to my gateway and <= 20ms to a bunch of sites I tested.

It's just photopea.com is down for me completely and that prevents the app from allowing you to use text since that depends on network loaded fonts.

It's actually still happening now every once in a while over 24 hours later. Like right now it took 2 minutes to access the program but it eventually loaded (this was due to the site having 100% packet loss at the time).

A few "is it down for me?" sites are reporting it down as well but it seems to be pretty spotty (sometimes they report up, sometimes down). I'm from the east US if it helps.

Is there any way you can have the program use local fonts when no network is detected? With the current behavior when there's no network you click the text tool and then it sits forever while the font selection window fails to load.
PrivacySpy – Making online privacy (slightly) simpler
Spigen is a completely legit brand.
Can't speak for the others, but Spigen is a well known and generally well-trusted brand.
Cool, thanks for that! Beyond Speck and OtterBox I actually couldn't name any other legit brands. I had an easier time finding seemingly "legit" brands via Google.
Anything and everything is because of quantum mechanics, sure. But you could've asked a classical physicist to design an apple "computer" (the fruit)— just arrange the right atoms— but you couldn't have asked a classical physicist to design a retina computer exploiting rhodopsin.
You grew up in a America that exiles people to Russia?
Stallman wrote that email and sent it on an all-blast mailing list. It was his choice to publicly state his opinion that rape is okay if it's done in a country where it's technically legal.
It is an advertisement. The content was crafted to generate fees. Its objectivity is questionable.
I read a lot on the matter and concluded RMS's commentary was aloof, tone deaf, and stupid for him to be making. His comments from more than 10 years ago on age of consent and child pornography are also highly problematic.

It's also rather disappointing that it will be harder to cite him and be taken seriously on other issues where his commentary is more relevant and correct. The FSF and GNU are good things. To have the founder seen as pro pedophile is not a good look.
These sorts of things keep on happening all over the world. Last big breach I read about was unsecured s3 buckets. Should AWS and Elastic and other software infrastructure providers allow for these things to be deployed unauthenticated? Not saying its their fault that these security breaches happen, but its been pretty evident that many of their customers do not understand security. Maybe the solution is to just default to a more secure system out of the box, and make it much more difficult to make your system insecure.
His administration also prosecuted more whistle-blowers under the Espionage Act, than all of his predecessors combined.
I got this one on the advice of a coworker:

https://www.amazon.com/s?k=B07GSZ124H&ref=is_s

It works ok, but charging is slow, it keeps my phone from discharging while watching a movie, but it barely charges (like it would if plugged directly into a USB cable)
iStat Menus will give you amazing insights on your system in the menu bar. It has a rich choice of views.

There's also Little Snitch for network monitoring.

For the rest, haven't researched much.
Best Places to Visit in Kerala During Winter
> When a grocery store makes its own novel product and puts it on the shelf, it's taking a risk. If they make those products, but they don't sell, they just lost a bunch of money. Or, if their product is a competing one with an existing product, they know that products like that can sell, but now they have to focus on outselling the original product. When Amazon makes its own product, most of the risk has been removed.

The grocery store's risk on store branded products is about the same as Amazon's risk for Amazon brand products. They have the data to know what sells and what doesn't, they have control of the store layout, and they also have pricing data. There's really no major differentiation besides the physical store front and how manufacturers "rent" space.
I wonder if he is seriously considering returning, or if this is just to generate some renewed interest, or perhaps offers from countries more comfortable to him than Russia.

While I respect his motivations for doing it, smuggling classified info out of a secure facility on a memory card hidden in a Rubik's cube is a crime. A fair trial won't change that.

He can do a lot more good staying free and sharing his viewpoints, versus rotting in a Federal facility for years.
Let’s Go Further and Hope for All the Joy to Be Drained from the World
I work in a Museum, and I would LOVE to be able to upload the letters of J.F.K. or Abraham Lincoln to create a fonts based on historic personages.
Thanks! For those curious, here's their Amazon brand store: https://www.amazon.com/stores/page/2A847EF6-D682-42A6-8564-E...
This is like calling a heart transplant an everyday affair. It's deeply incorrect.

Corporate reorganizations under bankrupcy law do happen, but they are rare, newsworthy, and very disruptive to workers (at a minimum, their pension and health benefits are renegotiated). Shareholders being wiped out is not normal, and retirement funds -- or really, the stock market at all -- would not work if it was.
Germany has some surprisingly regressive (IMO) laws about the internet, copyright, etc. See: https://teleread.org/2018/03/03/project-gutenberg-blocks-ger...
The workflow that creates a new request from historical 404 requests is incredibly intuitive. I could see this helping entering the development "flow" zone when jamming on a brand new project.
Mesa 19.3-rc3 is enough. Besides, that you also need Navi firmware (not sure why it's not in upstream repo yet¹): https://people.freedesktop.org/~agd5f/radeon_ucode/navi10/

That's about it. I wouldn't use Ubuntu for Navi though. Some rolling distro makes more sense.

1. https://git.kernel.org/pub/scm/linux/kernel/git/firmware/lin...
I have lukewarm feelings on the issue, but the difference to me is that BigBoxCo isn't selling counterfeit products in their stores, which means their brands have to compete on price/quality with the rest of the store, even if they are "pushed". With Amazon, the presence of counterfeit items, especially due to shared inventory, etc. means that even if I wanted another brand, I can't guarantee that I will even get a genuine item. This gives Amazon brands a huge advantage they wouldn't have at a big box store.
Attempted getting CTRL going myself yesterday to no avail, and subsequently was refreshing your twitter this morning waiting for this :) Thank you!
They recalled a quarter million power banks because they were catching fire.

Everybody uses the same factories and Amazon doesn't have better quality control than anyone else.
The OBD interface is too cumbersome (vehicle owners have to mess with hardware installation, etc...) and is more geared towards aftermarket devices and software. This effort must be at the core of each OEM and be completely seamless to the end-users and even third-party developers.
> But, to avoid signature attacks, only signatures made with other keys stored in the repository are retained; that is sufficient to build the web of trust while eliminating the results of any signature spamming that might have taken place.

I didn't understand how this alone is sufficient to prevent signature spamming, once a single compromised or bad-actor signature is in the repo.

"https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/tree/... suggests a bit different process, which currently seems to require manual importing of individual signatures into one's keyring.

And the automated updating of user's keyring is only of such manually-imported signatures. (And the commit from which the updates are taken must be signed by a key that was signed directly by the key of Torvalds or the user.)
> And yet you're incapable of building something that's usable.

What is this supposed to mean? I really don't understand who "you" is in this context or what "usable" means.
You might like to update your blog post with that info.

I came here with the same thought, assuming that your client was German. But it seems you are just a third party, and good luck to them.
> I would also like to clarify that in some headlines, including this Daily Beast one, Stallman is said to have defended Epstein, which is not technically true. Rather, Stallman was defending Marvin Minsky. I directly emailed and corrected reporters who used that language if I myself had given them any comments or information. I say this to show that I never intended to “inflate” anything, because there was absolutely no need to.

It goes further than that. According to the original email presented by the author, this is what RMS wrote:

> We can imagine many scenarios, but the most plausible scenario is that she presented herself to him as entirely willing. Assuming she was being coerced by Epstein, he would have had every reason to tell her to conceal that from most of his associates.

https://medium.com/@selamie/remove-richard-stallman-fec6ec21...

From this statement, the Daily Beast produced the title: "Renowned MIT Scientist Defends Epstein: Victims Were ‘Entirely Willing’"

RMS is defending Minsky by saying that for him the most likely scenario was that the person in question presented herself "as entirely willing." Whether or not the person was willing is a completely different question.

So the article is wrong on two counts, and no amount of righteous anger or revulsion around RMS as a person can justify it.

In the mad dash for clicks at all cost, the Daily Beast has really made a mess of this thing.
Ask HN: What's Your Experience with Cloudflare Registrar?
Anyone used or have comments on Cloudflare Registrar (https://www.cloudflare.com/products/registrar/)?

I dislike commingling any internet related services when it's not necessary but zero markup on the TLDs that they support is quite compelling. As an example, the renewal price for .com or .org domains is about $7 cheaper per domain/year than anyone else I've seen (specifically for renewals, not new registrations). Across a decent number of domains that adds up.

Anyone here with negative experiences, gotchas with the setup, or a reason to avoid switching?

Note that there's no intention of leveraging any of their firewall / protection services. This is purely to save money on the annual scamola of domain renewals.
>If a grocery store has their in house bakery up front right when you walk in selling bread, and the vendors bread is all the way in the back, is that unfair to the vendor?

That would be for the vendor to decide when planning out where to sell their product I guess
yep, keepass is my preferred password manager. i have the database in a dropbox folder to handle syncing between my desktop and android phone.
I was just at my local library over the weekend, not having stepped inside one for a very long time. I was actually there to get my library card renewed, as I hadn't used it for so long it became out of date.

So, I'm browsing the stacks, and see a few books that look intriguing. But here's the thing: I don't have time to check them out and read them. There was a time I could and would do that, but age and responsibilities have cut that short.

So - I do what any 21st century citizen with a smartphone does - I searched for them on Amazon. I ended up finding all of the titles on Amazon, but the kicker was that the physical copies of the book (even hardbound!) were cheaper - cheaper! - than the ebook (kindle) version.

So - I purchased them; they should arrive at my door in a couple of days. I'll get to read them at my leisure, I won't have to worry about overdue fines or anything like that, and best of all - I have physical copies.

Overdrive goes away? Well - I can still read my copies.

Publisher decides to revoke the ebook license? Well - I can still read my copies.

Long story short: Nothing beats having a unencumbered, non-licensed, non-encrypted copy of a piece of information (physical or otherwise). Without it, you are just borrowing it from someone, and they can take it back at will, and you are SOL.

I'm not sure what it's going to take for people - ordinary people - to understand this. Maybe the 50,000th time they have to repurchase the "White Album"?
I'd say it's the same company if the same stock holders exist.
> having a back button where I expected it but after a few days got used to it.

Dont forget that iOS has an almost universal left swipe gesture that doesn't require acknowledging the top left-back chevron

It also has an optional swipe down gesture at the very bottom of the screen to cut the screen size in half, useful for hitting the back button if you have to
>The biggest hurdle at this point is, what does any European government have to gain from granting Snowden asylum?

Preventing the Russians from extracting information from Snowden that they haven't extracted already.
Say hello to 802.11ax: Wi-Fi 6 device certification begins today