skysight-inc/HackerNews huggingface dataset:
I work with a cryto exchange, and fwiw, can tell you that most businesses would agree with you. They pay the ransom. And they use common exchanges like Coinbase, Binance, and Bittrex to do so.

The only way not-paying the ransom is beneficial (aside from having proper backup systems in place obviously) is if there was a large public sentiment shift promoting NOT paying ransoms. If society at large came together and decided the majority of entities are NOT going to pay, then ransomware viruses would be less profitable and thus not as favorable projects for hackers/scammers.

But that would take a lot of effort, organization, and favorable circumstances to have everyone do that simultaneously going forward. And there would be casualties at the beginning before the public sentiment cemented itself in the collective conscious.

But yeah, the only way ransomware will stop is if it stops becoming profitable: which means companies either need to have proper OpSec and backups (so they have no need of paying), or collectively agree that no one will pay ransomware attacks.

Seems like a pipe dream that we'd ever get to that point though. So I imagine companies will continue to fork over the ransoms.

Edit: this got me thinking, say for example, the US government outlawed paying the ransom to hackers. And they could somehow enforce this law effectively. Wouldn't that pretty much stop ransomware attacks in the US? or where ever a law like that could be effectively enforced?
Say I printed this comment. Put it in a frame and auctioned it as art.

Would you be the artist for creating the comment? Or would I be the artist for using the comment and framing it in a creative way?
Trump gave up all his positions in the area, for nothing in exchange. And now his country is being blackmailed by a much weaker one. That is even worse as how he handled Iran. This is a mystery strategy.
The technique is actually used a lot in diets and budgeting. Manually writing down everything you pay for helps you to notice that taxi you take every day or how often you "splurge" for coffee. Same with calories and that afternoon or midnight snack.

But forcing it just wastes everyones time, adds red tape, and additional bureaucracy they purport to rail against.
They do mention that being an option in the comments on the bug report, but still sound the alarm as that’s (seemingly) the only option.
One-off fixes are possible, but that’s not a viable solution at scale.
Or you could just laminate that cardboard with some fiberglass and epoxy, on both sides. A roll of 5cm x 3000 cm fiberglass woven cloth is $9 incl shipping on ebay. Buy some two component epoxy at the local hardware store, like 10 fl. oz. for $15.

Cut your cardboard and fiberglass to whatever size and shape you like. You're going to make a sandwich: fiberglass, cardboard, fiberglass. Wear disposable gloves. Cover your benchtop in two layers of cling film. Put your sandwich down, carefully rub epoxy into the top fiberglass, two layers shrink wrap on top, flip the thing over, rub epoxy into the second fiberglass, more cling film. Put it in press with some weight, leave overnight. If your cardboard has some thickness and good compressive strength, the strength of the resulting sandwich is probably such that you won't be able to break a 10 cm long stick with your bare hands.

3D printing is cool. But for random repairs around the house, or building strong flat things like this, epoxy and fiberglass is the bee's knees. We've built stand up paddle boards with this technique, just replacing the cardboard with XPS plates. No vacuum bagging required, really. (Of course it would give further strength and much improved aesthetics.)
Curious, what call recording app do you use now please, and does it properly record full duplex audio from the line (so not using speaker/headset/other workarounds)?

The last time I had this working perfectly was with a Nexus 4 and I find that call recording apps do not work on newer phones I've bought since. Any suggestions? Android or iOS, I don't care which platform as long as it works well.

I used to set the app to only record incoming calls from callers not in my address book, and on several occasions it was a huge benefit to have these to refer to later.

Companies really do not like it when you email them recordings of their employee lying to you, and will go out of their way to make things right immediately when that happens.
>Otherwise, you will miss out on better ciphers as they are added and would be stuck on this one forever.

Is that actually a real concern at this point vs the risk that comes from not white listing a few known reliable ones? It seems like old-style security, favoring modularity and "what if we need to change this someday soon?", but in practice it's turned out to be a lot less valuable than expected and raise significant risks of accidentally using something bad. We seem to be past the point where new ciphers being "better" is actually an event to be expected with any real frequency, prime/elliptic curve seems pretty mature now. Post-quantum could be a new frontier at some point, but may well require significant other changes as well.

WireGuard for example decided to just flat out say that any cipher changes will be tightly coupled with a full on version change. If you're using it you know exactly what you're getting and that's it.

I don't disagree that white listing means care with what is chosen, and picking AEAD-based seems like a better idea anyway (WG is Curve25519/ChaCha20-Poly1305/SipHash/BLAKE2s). Plus there is server compatibility to consider in some cases. But I'm not sure the logic of "you might miss out on better ciphers as they are added" is convincing either, vs setting yourself an alarm to recheck your SSH setup every year or two. Shouldn't any cipher additions/deletions arguably be something you actively consider, rather than have automagically added?
Seems like an actually useful thing for our so called 'defense' agencies to do, so im sure it will never happen.
Half measures definitely will not fix the problem. The only way we can make progress on this issue is to fix the problem of transparency on costs, billing, and payments. Right now it's impossible to make any sort of realistic policy proposals because we don't have access to the fundamental data.

One thing that concerns me about "medicare for all" is that from a lot of things I've read hospitals that have too many medicare patients go out of business -- what's really going on?

Also, another key issue we need to address is the fundamental costs; we can perhaps lower the bar needed to administer healthcare -- if the error rate goes up a little but is offset by access and earlier interventions we could big improvements. Right now we are pretending that we have one standard of care and it's high and expensive; but we really have two high or almost nothing. Perhaps theres room for a medium quality of care that is backstop so that no one gets nothing.
In Brazil we have that option, but one must have a cryptographic token accepted by the government to access it. People usually don't have them, while companies are required to have one.
Brazil is going that way too. Currently only public servants and people with an expensive X.509 certificate get this pre-populated tax return, though.
When people stop believing in God, they don't believe in nothing — they believe in anything.

G.K. Chesterton, circa 1924
Eons ago Nokia phones were able to learn "voice commands" tied to certain numbers. This was in the dumbphone era.
Top Attractions You Absolutely Need to Visit in Venezuela
> It's a beautiful language but it lacks a lot of features to make it useable at scale.

Can you expand on this? What features is it missing?
Long Strand of DNA from Neanderthals Found in People from Melanesia
Pretty disingenuous to not mention the rainy day and surplus funds:
https://www.politifact.com/california/statements/2018/dec/18...

Include all facts if you are trying to make a point.

Yes we have issues when it comes to poverty and housing but we are not doomed.
New and Promising Runtime for JavaScript/TypeScript
I don't understand whether you're saying that DoH+ESNI will make it harder for malicious network operators to compromise user privacy (clearly true) or whether DoH+ESNI will make it harder for home users to run their networks as if they were enterprise networks.

It would be a genuinely weird new take to argue that encrypted SNI was somehow harmful to privacy.
My understanding my be wildly incorrect, but I have the impression that the GDPR is something that applies to EU citizens regardless of where they are. A German tourist who visits Tennessee who uses his cellphone, with a local sim card, to log into a website hosted in the US to buy tickets to view the world's largest ball of twine can, under GDPR, require that said website remove all information about his visit beyond what is required by law. That seems to be quite reaching.
Its funny when you think about whats fair in this kind of stuff.
For example if you use AppleSomething, apple is a fruit, was a famous record label before being a famous computing brand.

As theres a fruit before anything else, you can argue why you could have some rights over the brand. If is AppleOS of course you can have trouble because Apple the IT company have a OS and they might argue this is a common way people refer to iOS or MacOS.

But Lego is a whole different category. There is no well known concept of Lego before Lego was created, and theres a sort of mechanics and way of thinking that is totally associated with the idea of Lego because of the Lego toy.

So if you use Lego in that sense even if its for something else, they might reclaim the concepts name, because they actually invented not just a toy, but a toy with a concept of composability for which people might be inclined to reuse the name, not because of the toy, but the larger concept the toy represents.
> or Google is selling services to Startpage below their own search margins

I expect this is the case - it's still better for Google to capture a user at lower margins via Startpage than to lose them to Bing.
Yeah that was honestly what I thought too. Definitely wouldn't be that far fetched for them to do. Or at least something officially endorsed by them.
If you can have 100k ARR organically already why do you still need YC?

Nevertheless, great job and execution!
Class+Action+Lawsuit+Class+Action+Settlements+-+YouTube
I believe the fundamental problem of CA is Prop-13 which has a substantial impact of its revenue as lots of very high value properties pay a substantially low property tax.

On top of that, in many cases, as the property tax is so low, people who otherwise would not be able to afford such high value properties continue to hold them, leading to an artificial increase in the overall property values.

If Prop-13 is abolished, a lot of properties will enter the market, and overall revenue would increase resolving many of CA's and local government's woes, including that of the public education system.

OTOH, I know that abolishing Prop-13 is an impossibility. Our best hope is that the split tax roll is successful that that would require at least the commercial and industrial property to be regularly reassessed and taxed at their full value.
If you have to register with I.D., it's not purely based on trust.
Germany's cyber-security agency recommends Firefox as most secure browser
A “workaround” doesn’t mean someone posting a link to Outline or a similar service. It means having a way to access the content on the site itself. Economist.com links should be blacklisted, because they have no workaround. If Outline is required to read a given article, then the main link on the submission should go to Outline.

You seem to be stickler for the rules, so I can’t understand your position on this.
I will never use this but I don't mind that it's being made.
Conversely, on my property tax they itemize where the money goes. Presumably showing what I'm getting for my tax money. Or maybe just making me angry how much local schools cost if I don't have kids? (that was the vibe I got when living in FL)

I appreciate transparency like that, but I hate other examples that add additional steps or paperwork to the process.
The scale isn't all that different though: Pokemon, Digimon, Yugioh, Silly Bandz were all insanely popular and operated under the same principal.

If you're willing to allow the skinner box to in in-game then we have to include arcade games and pinball machines which all optimized for quarters.

Another precursor was WoW in which the rewards are entirely in-game but aggressively designed with random rewards and growth to keep players paying their subscription. I lost years of my life to WoW and everyone I know who used to play it talks about like they're in recovery.

Look, I think the trend of lootboxes is terrible and has made a lot of games worse but I think your argument falls flat since cash for serotonin is basically the definition of the entertainment and gaming. "High replay-ability" is basically code for how addictive a game is and people actively seek out these types of games.

The thing that feels different is that in modern games you can waste money instead of just time with your addition.
At the Times, a Hesitance to Hyperlink
It's no different than an iPhone
Javascript falls short of scheme in ways more substantial than java-like vs s-expression syntax. It also has one of the worst numerical towers ever put into a language (that being: "lmao everything is a float".) Also, "function-scope" is an abomination compared to proper lexical scoping.

Edit: I forgot to also mention: weak typing was an awful idea.
I've wasted so many hours on support calls just trying to deal with their shitty "enterprise" accounts and Adobe ID accounts. Like, you weren't able to manage your Adobe Licensing console using an enterprise account, it had to be an Adobe ID. So when we converted our Adobe IDs into Enterprise accounts, we got locked out of licensing.

The only way to get back in was to create another "Adobe ID" using gmail or hotmail, etc. Because all of the myschool.edu e-mail addresses were registered as Enterprise accounts now. Their support is all but useless when it comes to these kinds of problems, and there's no way to submit feedback to a higher level about what's going on.

This also broke access for people who had subscriptions and accounts tied to their school addresses. Total disaster.
$ help command

command: command [-pVv] command [arg ...]
Execute a simple command or display information about commands.

Runs COMMAND with ARGS suppressing shell function lookup, or display
information about the specified COMMANDs. Can be used to invoke commands
on disk when a function with the same name exists.

Options:
-p use a default value for PATH that is guaranteed to find all of
the standard utilities
-v print a description of COMMAND similar to the `type' builtin
-V print a more verbose description of each COMMAND

Exit Status:
Returns exit status of COMMAND, or failure if COMMAND is not found.
The Pixel 4 does speech to text on device. They do it because it's faster.

Once it becomes a solved problem, there will be better open source devices and more competition. On device will be a checkbox feature.

Not every company makes you the product.
This was announced on the Future of Coding Slack [1] not long ago. I encourage people who are into things like structured/projectional editors, visual programming and other wild re-imaginations of programming to join.

[1]: https://futureofcoding.org/community
Business Logic Security Bugs
A better analogy would be Pizza Hut or Taco Bell ... They absolutely market both and some share space, that doesn't mean they each respectively don't care where the spend goes. If people are buying from Taco Bell, the Pizza Hut a block away may or may not shut down, and spending efforts will reflect those differences.
Me too. I thought this was going to be about the Lego Mindstorm Robot OS going open source.
That may well be the case, but that is not caused by the term "dark matter", but by people not making enough of an effort to distinguish between leading hypothesis and discovery. That could happen with pretty much any name.
As a workaround you could rename your .env file to something else and mount it as .env in the docker-compose volume options.
Show HN: Jasmine unit test generator for angular
4chan /g, /fit and /biz boards
It's because of an old popular joke in that the government is a lion that will always take a lion-sized bite from your income.

It's really an old joke. On any reference I have ever found, no matter how old, the joke is already old and the readership is expected to know it.
I wonder how difficult it would learn to be to read musical braille using your foot. I know there's less sensitivity than your hands and fingers, but seems like something that may be possible. Though, pianists still use their feet for the pedals, but for other instruments it's less of a problem.
List of Employee-Owned Companies
So I'm a software engineer in the private sector. What would be the path for me to take if I wanted to become an IT director for a local government?

It's actually not something that would be my first choice, but I do personally know people who have been harmed by incompetent/apathetic IT leadership in local governments. It angers me enough that I would consider a career change.
I wonder if they give a class in juggalo paint at the farm, and other means of bypassing facial recognition programs. The tenure of a field operative these days must be incredibly short
The Return of Nature: How Technology Liberates the Environment
Is the join domain prefix legally risky?
How legally risky is it to register a joinXYZ.com domain when XYZ.com is an existing business (different industry/product)? I'm concerned that XYZ could argue that I'm trying to capture their customers and prospective hires.
I'm in the same boat. I never could get TouchID to work reliably or fast enough. To the point where I never even bothered to have it on. FaceID on the other hand has worked great for me, and only doesn't work if I have a motorcycle helmet or goggles on, which is understandable.
This should be easy to implement at the OS level. Protocols like HTTP/3 would work out of the box with quicker network switches and MPTCP should work just fine as well.
This was reproduced with the protector added only after registration. Yikes. https://twitter.com/Sta_Light_/status/1184475413252210688
This raises an interesting question for me: how do people find real-life things on the internet? If I want to find an escape room near me, I'll do a web search, or possibly open Google Maps on my phone and search for it. It wouldn't even occur to me to use Facebook for this (granted, I've been off FB for a year now, with an account open just for event invitations, so I may not be typical). Do people actually type searches to find things off-internet into FB's search box?

Or is the advertising "discovery" more organic, in that escape room ads are just showing up in people's FB timeline or alongside unrelated Google searches (or on sites that display Google ads), and people think "oh, neat, I like escape rooms, I should try this one"?
There are early efforts under way to do just that: https://www.youtube.com/watch?v=RjD1aLm4Thg
> You have to report the SSN of your dependents on your tax return

The point is that the IRS does not have this information available to pre-fill your form with.
> It just sounds like we are heading down the wrong road.

Humans are a lazy bunch and this feeds into these genetically coded tendencies in the worst way.

I feel like there is a growing backlash against these technologies that are getting way too invasive. Myself and a few of my friends have gone back to being as "analog" as possible. Dumb thermostats, dumb tv's, regular old key locks (you can still get some pretty secure, non-electronic locks), dumb fridges, etc, etc. The point is to disconnect as much as possible from the internet, Google, FB and Amazon. Three of my best friends now just carry Windows phones. Internet connected, very few apps, and phone service.

We are of course, a very small minority whose seen the dark side of these technologies. I don't think enough people know or understand the consequences of having these devices in their homes.
*
'Small proteins also promise to revise the current understanding of the genome. Many appear to be encoded in stretches of DNA—and RNA—that were not thought to help build proteins of any sort. Some researchers speculate that the short stretches of DNA could be newborn genes, on their way to evolving into larger genes that make full-size proteins. Thanks in part to small proteins, "We need to rethink what genes are," says microbiologist and molecular biologist Gisela Storz of the National Institute of Child Health and Human Development in Bethesda, Maryland.'

Wow. Amazing how incredible biology and proteins are and their still-barely-understood mechanisms. For anyone who hasn't already seen it, I highly recommend The Inner Life of a Cell [0]

[0] https://www.youtube.com/watch?v=wJyUtbn0O5Y
Yea i guess its helping the bottom lines of tax payers in UK.
It does that. You can hack the script to only install partial sets, but you're encouraged to install all the sets.
I've seen at least one mention on the mailing list about merging the sets because the recommendation is to always install all of them anyway. They're just files on disk if you're not using them.
I naively thought this would be an article discussing overpronation and supination.
Archived copy without GDPR nag screen:

https://web.archive.org/web/20191017140046/https://www.npr.o...
s/LegoOS/LegOS/g

Edit: snark aside, another user points out that LegOS is taken by a mindstorms operating system: https://news.ycombinator.com/item?id=21285290
> Why do you have to track what apps I use and upload this info to Google in order to remember where my house is?

It's not a real requirement at all. I have "Home" and "Work" remembered from before it was a "requirement". They pop up as quick nav actions when holding the Google Maps homescreen icon on my phone, or when opening a GMaps Driving icon.

But I'm not allowed to set the "Home" and "Work" locations in the actual app, so they don't work via text or voice search.
I just checked this out and from what I can tell at this point, it sounds really great! I'm definitely going to give it a whirl in the next few days. I've been wanting something like this for the longest time.

Thanks for creating this, please keep going.
Why I Quit Social Media and What Made Me Quit
Given the changes google is making...

"Google is breaking ad blocking in Chrome, try a browser that works for you."
Creator here. In this project I tried to bring a new perspective on code repository, transform "git log" into a contributor collaboration network, display it nicely and try to make it useful and hopefully interesting. I'd very much appreciate your feedback.
I have a suspicion this is only semi-true.

For controlling what the CPU and RAM are doing? Yes. The graphics shader, on the other hand, is a pipeline architecture with extremely tight constraints on side-effects. The fact the shader languages are procedural seems mostly accident of history or association to me than optimal utility, and the most common error I see new shader developers make is thinking that C-style syntax implies C-style behaviors (like static variables or a way to have a global accumulator) that just aren't there.

The way the C-style semantics interface to the behavior of the shader (such as shader output generated by mutating specifically-named variables) seems very hacky, and smells like abstraction mismatch.
This is a trademark issue and I believe laws vary by country. No idea how to quantify the risk though.
Here's a talk on making real world commercial games with Clojure on top of Unity.

https://www.youtube.com/watch?v=LbS45w_aSCU
The problem is that Prop 13 for so long restricted the legislature from modernizing the tax structure or directing funds appropriately that taxes on new residents are very high and basic services are not appropriately funded.