skysight-inc/HackerNews huggingface dataset:
Source code availability isn’t really a solution to the trust problem. Sure, it allows for an audit, but the practical truth is that few people are qualified to perform those audits and few of them have a sufficient incentive to spend their time doing so.

So you still just invest trust in the maintainer or — if you’re lucky — the third party auditing firm who was paid to review the code.

That you can review the code doesn’t mean that anyone does so. At least not in an exhaustive and relevant way.

Closed source or open, the problem is made even worse now that we live in a Package Manager culture where even the simplest applications adopt dozens of dependencies.

I’m not saying that you should trust Facebook and their closed source applications, just that you’re not really all that safer trusting anyone else just because their source code is available.
There are also many ways for the tech to be used that obliterates all forms of liberties and civil rights, and unfortunately it takes just one bad actor for any goodwill to disappear. Making the world Orewellian is never a good option because even the power to rebel against the systems of control is removed.
No, I live in the NE USA, but outside of any big cities but definitely not in a rural area. My country has a population of ~300,000.

Nowadays I'd probably be paid more if I still lived in my hometown that I had to leave (ironically).

Job hopping definitely isn't a big thing around here like in tech hubs - new hires don't get huge salaries starting out no matter how much experience you have.
A Cat Explains DNS
Growth of 2-3% in anything you are actively work towards is the baseline success expectation as it is stagnant or declining otherwise. That is the equivalent of losing a decade's growth. Losing 20% of your salary would certainly qualify as losing 6 to 10 years of minimal growth expectation. It is twice that of a literal dictionary definition decimation. "Plummeting" is certainly not hyperbole.
The Small Business Myth
Or maybe reading it and not getting taken by spin and misinformation
Do the police show up if you don’t register in Other countries they do in China.
Most of what the federal government does is against one or another amendment (the 10th mostly) but gets slipped by under the commerce clause as that's how the system turned out.
That's the nerdiest, but most British description of them ever. I'm nicking that.
My take is that you’re misinterpreting what you (theoretically) have purchased. You bought an iPhone, not a pile of hardware. Nowhere in the transaction did Apple misrepresent what they offered. Your wish for iPhone shaped hardware that is yours to do whatever you want with doesn’t change the fact that this isn’t what’s for sale.
I would continue to rejoice in our altruism but I have to feed my cat with that special gourmet pâté. I'm a horrible being too.
Relying on laws leaves a lot of wiggle room for bad actors, slippery slopes, and political opinions changing over time. Laws are based on trust in institutions (do you _really_ trust large governments?).

Laws are probabilistic, whereas math & source code is deterministic. You can verify that computer code does what it says it does. Laws depend on enforcement and complicated judicial systems (based on humans) to interpret and apply the laws, which means they can effectively change over time, and the goalposts are never stationary.
Actually asking because we are building data science automation software which we deploy onto our customers' cloud infrastructure. Very similar value proposition to Rudder re: privacy and security, but different use case.

Always interested in how other people achieve similar effects.

Right now, for AWS, we provide customers with a zipped up Packer+Terraform configuration with source and a README which lets them:

1. (terraform+sh) Create an IAM user responsible for the deployment with the right policy to deploy and export environment variables for the user.

2. (packer) Create an AMI for an instance that can host our APIs

3. (terraform) Spin up an EC2 instance on the desired VPC to host our APIs (with optional key pair for debugging, etc.)
Even better, the cities on Azgaar's maps link to Oleg's (watabou's) maps! Click on a city name and then click the "folded map" icon. It will create a city that matches the environment on Azgaar's maps (e.g. port city vs inland, rivers, etc.).
> Google Achieves Quantum Supremacy

Is it another careful crafted academic lie or is it real this time?
If copyright didn't exist, nobody could be required to share their changes to another person's work under schemes like GPL. Corporations would no longer be legally compelled to contribute to free software projects. Projects like Linux would likely be abandoned as large institutional users fork the projects and leave the original project to rot.
It used to be a good estimate not so long ago. Things have improved dramatically recently

You see the same on laptops. Each generation seems to come with a smaller wattage brick
Yes of course. The old argument that Linux is free of backdoors because it is open source. It's such a ridiculous claim. Software systems on that scale are so complex, there is NO way whatsoever to make sure there isn't a backdoor in there. I would go as far as saying that OpenSource software by definition is more vulnerable to backdoors than closed source software, exactly because the source code is available and anyone with some credibility can make patches. It is the dreamland scape of the NSA.

Hacking into closed source code is much more dangerous (politically) for them and also more difficult.
I believe I have only heard about automatic recovery for forms. Would this "stash" you mentioned be more general for recovering state?

For what it's worth, I very much appreciate the work you and everyone involved has done for LV (and more generally, Phoenix).
This guy read Snowden.
Here is what is most frightening.

So let's say this law passes BUT someone builds a really good open-source messenger.

You can't install it now because you can't side-load apps on devices.

You alpha geeks can but the other consumers can't.

What we need is a law requiring some type of side loading.

It needs to be possible to go to a website, and install an app there directly and have it support all of the native platform features.
A Marathon at Midnight, to Beat the Heat at the World Championships in Doha
SPARCs fly as Oracle recharges Arm server processor designer Ampere with $40m
We urgently need new domestic spying laws given that five eyes has effectively broken them.
Understanding Universal Basic Income
PSA: instead of buying a kill-a-watt device rather get a smartplug with monitoring. Similar result except has other uses
Consider that your generalization of all religious people as same is illogical, and that some religious may be more or less worse than worst. Perhaps you meant to say that this particular person proselytizing to you is in your subjective opinion the worst.

Or perhaps you are comfortable making sweeping generalizations about abstract sets of people.
Babel compiles whatever you tell it to, and each piece of syntax is a separate plugin.

For `babel-preset-env` specifically, it compiles whatever syntax is not natively supported by the browser versions you told it to target.

So, compiling `async/await` and compiling ES module syntax are separate things.
Whenever we talk about web encryption, people make the (valid) point that needing to trust the server to deliver the encryption mechanism greatly reduces the benefits of clientside encryption.

I agree with that analysis, but it's not clear to me why we don't have similar levels of skepticism about auto-updating desktop apps. Signal in particular uses a third-party software repository, so if it wanted to push a malicious update, it wouldn't even need to sneak it past package maintainers.

Package signing protects you against developers with bad personal security practices, because it makes it harder for a third-party to MITM their apps. But it doesn't do anything I can see to protect you from a developer that turns malicious in the future.
Nowhere in the article is backdoor mentioned. Only sharing data that is encrypted.

US an UK governments can't just force FB to add backdoor. It would require new legislation. FB must play ball for that to happen.

Since WhatsApp has forward secrecy and end-to-end encryption, giving access to encrypted data is not easy to use. There might be some useful metadata that helps though.
That's why I read Financial Times, however even they started leaning towards extreme left,instead of simply being a newspaper of facts with no political bias.
How would chrome know whether getaddrinfo() uses DoH to resolve a host?
Not that much less, and the cost of living is geared towards someone making a tenth of what you make.
I find I'm saving more than when I was living in a western country.
It's all in how you present it. If you say "hey, I just thought of X, do you want to do it?" It's much less likely to get approval.

If you say, "hey, for the cost of a gift card or two we can prevent a single person from disrupting our campaign" it's much more likely to get approval.

And agree, this should be extremely trivial to implement and if the project was quoted prior to development should be included in the initial scope.

We can't prevent all malicious behavior but we can prevent the easy stuff.
If China abide by WTO rules, environmental protections required by developed countries and had to abide by basic human rights for religious groups the Muslim Uighur, Tibetan Buddhists, Confucian Falun Gong and other groups would be freer [1,2,3,4]. Abiding by these rules would also make it hard to make their social credit system effective in stopping anyone that themselves or with a family member that voice dissent from taking public transit, transacting, getting a job etc [5]

All great gains for the Chinese people.

[1] https://www.google.com/amp/s/www.nytimes.com/2019/09/25/worl...

[2] https://en.m.wikipedia.org/wiki/Persecution_of_Falun_Gong

[3] https://www.voanews.com/south-central-asia/tibetan-re-educat...

[4] https://en.m.wikipedia.org/wiki/Social_Credit_System
500k March in Montreal – Climate Hero Greta “Strikes” Again
This service exists, it is called Blendle.
That paper just threw a mind-blowing title and abstract but the task they were solving was too narrow. No general-purpose quantum computer for the moment.
Police can only search what belongs to the company. If it the data is yours, and the keys are yours, then the company can only provide it by theft (if at all).
You realize that the physician could have done both eyes in the same sitting, and then used the saved time to perform a procedure for someone else, right? Doing so would have been better for everyone, rather than riskier and much less convenient for the patient.
Trumps actions seem dramatic because they are largely incoherent with no end goal in mind and based on his personal feelings.

The US would have made far more progress against China if it had remained in the TPP.
"harm others"... that is extremely subjective. Everyone can claim they have been harmed, say, psychologically or whatever. This is not going to end well. Oh well, I am not surprised.
Previous discussion may deliver:

https://news.ycombinator.com/item?id=21053405
Out of interest, what are the other problems you've encountered with it? We're considering porting our whole app to LiveView.
Ask HN: What's the Legality Around Web Archival?
What's the legality around Web Archival ? Is it possible for a startup to grow around web archiving, or a business to build APIs which allow pages to be archived ?
If copyright didn't exist, they could only use physical tamper-resistance techniques to protect their work from reverse engineering and copying.
Very few details about the confirmations of the confessions here, and a lot of insistence that Little has a "photographic memory" a pseudoscientific claim which implies we shouldn't question whether these confessions are real.

There is a mutual relationship here: Little gets company, attention, and praise, police get to wipe 57 cases off their books that they have no intention of ever trying in a court, and this particular investigator gets lionized.

edit:

> After the confessions came the painstaking work — confirming killings. There won’t be time to prosecute Little for all the deaths, but authorities believe they can sufficiently tie him to a homicide to consider the case solved.

This is the entirety of the content detailing the confirmations that I can find in the article.
Is it that hard to imagine implications? Do you need convincing?

For example, everyone's iPhone X and before being vulnerable to airport security scans. If they can root your device, they can install anything without your consent.
I’d prefer not to “trust” any network, even my local home network, and encrypt all the traffic traveling over it I can. especially in an age where a security camera or even your fridge can be compromised by non-targeted automated scripts and then all plaintext traffic on your network is exposed.

As for not using TLS/http to wrap the dns queries for secure transport across the net, what “existing crypto protocol” do you suggest they should have implemented instead?
Coauthor here. As it turns out, this is one of three papers released near-simultaneously that uncover the extent of tracking on TVs or IoT devices more generally. I've written up a survey of the three papers and what I thought were especially interesting findings, along with some thoughts on why targeted advertising as a business model for TV platforms is harmful to users: https://twitter.com/random_walker/status/1177570679232876544

Direct links to the other two papers:

https://moniotrlab.ccis.neu.edu/wp-content/uploads/2019/09/r...

https://arxiv.org/pdf/1909.09848.pdf
Canada does it because of pressure from the US.
I go out of my way to avoid them generally. If they're spending their budget on advertising, I can usually find a similar but less advertised product priced cheaper
The multibillion post 9/11 ones for one both post attack and Iraq wars and SARs related travel reductions. If you count uniquely privileged bankruptcies and other activities there is a whole lot of the 20th century to include.
I didn't mean financial risk. As a public officer, you are taking risk in terms of your public reputation and legal responsibilities. That does factor into the comp - in fact, it is fairly common in certain highly regulated industries for the CEO's entire role to just to take the burden of liability.
Yes, most certainly. It charges enough for the whole day in like 2 minutes with Lightning fast charge. It's really not a problem.
If you have kids, boys and girls, expose them and offer them equal opportunities in various domains, it is beyond obvious that we are different, yes, including in the brain. To me the idea of labeling this conclusion as sexist is simply laughable because any parent who is a neutral and honest observer knows the truth.

I have a simple example of this. Two of my kids, boy and girl, one year apart. They go to school together, play together all the time, we fish, kayak, do martial arts, build stuff and do everything together.

I introduced both of them to Solidworks Apps for Kids (great fun!). I setup their accounts on their computers and also setup a link to a YouTube playlist with tutorials for them to learn the software.

I told them to watch all the videos and start doing as they learned.

They did.

She very quickly levitated towards making pretty things and surface-painting.

He very quickly went towards making more mechanical things and completely ignored making them pretty through painting.

She wants to 3D print flowers and puppies. He wants to 3D print robots, tanks, tools, etc.

No influence whatsoever on my part. This summer they each built beautiful replicas of famous world buildings (check out Machitecture on Amazon, it's great). They both loved it despite the hard work it entailed.

I realize this is a single data point but if you talk to other parents and simply observe reality it is easy to conclude there are differences and they are not subtle.

None of this is to say men and women can't excel at the same things. Not at all. However, pretending we are exact clones of each other would fail to reflect reality as well as provide opportunities to use our differences to deliver better outcomes. Psychologist have studied this in depth. The big five personality traits (Extroversion, Agreeableness, Conscientiousness, Neuroticism, Openness to experience) have been quantified and "fingerprinted" across wide populations. The conclusions are inescapable, we are not the same and we don't think or relate to the world in the same ways. And that's a good thing.
> Do the police show up if you don’t register in the United States?

I think that response is moving the goalpost.

I noted that it's common throughout the world that hotels often require passport details. Your response to that is to change the issue in question to the consequences of non-compliance and away from what you initially presented as the problem ("you must register your passport or state ID").
Unfortunately, unless things have changed since last time I tried telegram, it doesn't encrypt chats by default, which is a huge problem for any movement. OpSec is really hard, even for those who know what to do. (Operators of Silk Road 1&2 were both ha taken down by a failure in OpSec somewhere.) Security researchers have cast aspersions on MTProto the protocol used. The truly paranoid I know, for whom Signal and Telgram don't go far enough, use Wickr, which chooses to more make sacrifices in usability in favor of security, but they are few and far between.
Most of things you listed are done in a lot of countries. 1 & 5 are done in countries like US or France after terror attacks. China also have to deal with the islamic menace, so it's not surprising they implement 6. Passeport registration in hotels is probably done in most country of the world (at least all I visited). Cute police character is something totally normal in Asia (here is a Japanese example http://www.pref.kyoto.jp/fukei/foreign/kansiki/shomei.html). Camera are everywhere in every big city.

Finally, the only (scary) things really specific to China you list are the milice and the fact they clearly told you have no privacy right.
This comment is absurd. Your linked article even says:

> To be clear: the reason for this is not security. To the best of my knowledge, the Signal protocol is cryptographically sound, and your communications should still be secure. The reason has much more to do with the way the project is run, the focus and certain dependencies of the official (Android) Signal app, as well as the future of the Internet, and what future we would like to build and live in.

Beyond the author flat out saying that it’s secure- the title of the article is why they will not recommend it. It has nothing to do with it being compromised.
Muji, Marie Kondo, and Asia’s Tiny House Movement
Where and how do we draw the line, as a country? I can empathize with the struggle of refugees. Is the answer open borders? I would think not, but then, what is?
> Almost everyone in society would castigate me

What are you basing this on? Is there wide-spread castigating going on in Sweden that would lead you to think this? I certainly agree that laws don't always match what people think, e.g. laws helping same-sex couples in countries where public polling goes against it. However laws in a well operated democracy generally seem to match either public opinion or a lobbied interest. Which makes me wonder, why do you think the law allows for it in Sweden? Is someone with deep pockets lobbying for it? Is the law so obscure in Sweden that the general population doesn't know it exists? To me as a neighbor Sweden seems to be quite progressive in allowing sexual variety.
One class per file and mybe some namespacing would be nice to see.
Yes, in the above gist the connect are params used, so connect params are a general purpose mechanism for state recovery. In the above example a form is used, but on mount you can do whatever you'd like with the data. Thanks!
Darknet Market Listings Leak
Last night I decided to see what darknet markets I could scape. I chose my targets based on markets that sell privacy data. I'm not aware of this data being public, anywhere.

Included in this dump is Berlusconi & Grey market. Grey market includes vendor pubkeys.

40,000 Listings
900 Vendors

To prove I am credible I have included a public key in the data dump and will use that key in future dumps.

I will only target DNMs that sell personal data - account, fraud or privacy data.

#####
-----BEGIN PGP MESSAGE-----

hQEMA98Ix4ouTf1BAQgAtwgkDZuZtHvdtxiuOnROq5tPf3MAtDd9W2fTMirEx2x/
5EEWP2q3iDdXsDtj4UlWzmIngvrbybJwMu3QHfxU7jmlLq864xCsJnL0A4dQRYsT
ocqbKI0ugsGO5oxjXHXottGtDNTrfhSuRZX8kaXpptjgIwlHJko8Vm/KI6vbOamb
kiQswdpe5ajT3xGUsf+Od1+jWnik3LNV/u35KfAksfwsSsSd2LG3mcpCOMCcIhr3
pP2osU9q+iJd+xOVqmZFug+EraP6k/8kPSN4xSsOG/lj9MYih54JilgEx/6FvVsF
HNqO76mrdfder/uOxQhSggjmEywJIAIYsqn1t1Q88tJcAZyne4g7drXX6aA945iV
SIqMIz49IpVqTt7IWlCePSIK/OyY/TMuGwsj6agylZmn2lyEkcDhJYmFJppJbi/g
063Y/Da9GKjwUX9/KB8wVGAfbDgze+2eZ2a1r7A=
=HLq3
-----END PGP MESSAGE-----
#####

Link: https://transfer.sh/AvpN2/dnmdata.tar.gz

SHA256 Hash
e43017d01c095ca977b46c3540e2b3a19795746ea608db4ef792abc0cb60c53b
Google doesn't provide services that provide no benefit to Google. If people can't get the news they are used to from Google News, they will get it elsewhere, and that means less engagement with Google.
Code-wise, it's mostly using d3.js to generate SVG. You can browse it at https://github.com/Azgaar/Fantasy-Map-Generator .

Algorithm-wise, it's built on Delaunay+Voronoi: https://azgaar.wordpress.com/2017/03/30/voronoi-graph/

The project started after Azgaar was inspired by Mewo2's map article and Scott Turner's amazing map blog: https://azgaar.wordpress.com/2017/03/30/first-post/
Yes, your domesticated cat is the same as an orangutan. The problem has been solved!
Love Alarm
This guy always seemed to rub me the wrong way, aside from the fact that he came off as a coked up character from the Hunger Games Elite.

Not only does he proliferate a number of obnoxious bay area stereotypes - but he also made videos like "watch me make a startup in a day". Videos like this were probably the most obnoxious, especially the ones that focused on "AI".
What is the difference between “perspective” and “whataboutism” to you?
Much of this criticism seems to be "Economist says X causes Y in situation A, assuming B. Politician uses that to force change in X. How dare the economist ignore Z?!" Like the draft example. An economist estimated the effect on labor, politicians use the finding to abolish the draft, then the economist gets shit on for not considering the effect on civil-military relations.

It's much the same, but more obviously ridiculous if you rephrase it with a physical scientist: Chemist estimates some pesticide is lingering in unsafe levels on one particular kind of fruit in certain limited circumstances, then politicians use the finding to enact a sweeping farming regulation, then the chemist gets shit on for not considering the effect on the price of food.

As a data scientist, I find this happening to me sometimes. I tell a PM that we can say X causes Y, but can't really say what the relationship between X and Z is, and people get really frustrated by that. Then they really want an estimate. If you tell them, "fine it's 3 +/- 15" all they hear is "3" and now it's your fault if they make decisions as if we knew for a fact that 3 is the answer. Damned if you do, damned if you don't. I'm sorry that the scientific method isn't an oracle, but that's life. We still have to make decisions.
That amazing blog is one of the inspirations for Azgaar's map generator: https://azgaar.wordpress.com/2017/03/30/first-post/
Not sure what they’re planning to do with these encrypted messages though.
Is it me or is this a Facebook version of 2nd Life?
And local.. whatsapp tries to get you to send unencrypted backups to google drive.
I think everyone needs to focus on protocol more than apps per se.