skysight-inc/HackerNews huggingface dataset:
regional hegemons enforce embargoes on nations which refuse to behave according to new standards. a carbon non-proliferation treaty backed with coordinated blockades and cyber-attacks of critical infrastructure, initiating limited civil wars. the top level view is mutual cooperation to avoid global catastrophe.

this would require america and russia to stop selling their terrestrial missile technology and fossil fuels to the rest of world. once the current generation of inventory and raw energy is cleared it, orbital space based weapons can be deployed, obsolescing land and sea nuclear delivery and defense. this might explain china and india's rush to space, in order to have a bargaining chip in the future discussion about their territorial and energy sovereignty it is necessary for them to have a significant presence in low earth orbit.

things typically don't escalate dramatically during international disputes, and it's likely that the russians and americans will just use blackmail diplomacy to freeze, then develop the rest of the world with new energy they control. in order to avoid public scrutiny it's important to paint this as a critical emergency rather than a strategic sharing of influence between continental superpowers.

i suspect this will play out slowly over the next century, all the while regular people will be cowed by the ever looming threat of total extinction. not a very original sequel, a real throwback your parents might enjoy, cold war 2: fight the heat. the science on anything hardly matters, since scientific truth is subservient to pragmatism and political realities. given the massive investment in government information collection, it is clear that any large popular movement would quickly be steered towards desired policy goals, which should reinforce some version of the above story i laid out.
Not goods at all, nor really an open market. Permission to drill was granted to American companies in exchange for a share of the profits to the royal family, and from that point forward the American government began to defend the interests of its corporations geopolitically. Very normal sort of arrangement, but absolutely responsible for the power and strength of the Saudi regime today.
Take a look at how the prior 0.19 release makes elm projects smaller than is possible with normal JS [1].

[1] https://elm-lang.org/news/small-assets-without-the-headache
UC Browser potentially endangers 500M users
>The rest of them passed by cheating and seemed to mostly be there to scam free college

Oh boy here I go ... I am a student at KAUST (their flagship university with an endowment in billions), I would say that the ratio of students who take it seriously vs. the ones who just fool around is 1 out of 10, and I'm being generous. I once called out some guys for partying (drunk maybe?) while at our office space and was basically told (by a mid-level exec. nonetheless) to deal with it or they would kick me out if I kept 'complaining'. No one is accountable for their actions, research quality and personal integrity are mostly an afterthought. If you point out something that is wrong you immediately get ostracized and even get some benefits removed (with some bullshit excuse). This feels like a modern version of the Stanford prison experiment, people endure it mostly because the pay is good but it is pretty clear that this thing is going nowhere. I would honestly have left if it weren't for the great relationship I developed with the professor I work with, but I just want to finish quickly and get out of here.

To the guys running the show (I know they monitor HN as well): you really need to sit down and rethink if this attitude will help you survive in the post-oil era, because I don't think it will ...
Sdfda
asfsafs
The "searching" volume of The Art of computer programming seems a bit outdated, though, in this age of search engines.
Getting the Nukes Out of Turkey: A How-To Guide
Be ready for a career change.

Within 2 years, the vast majority of the ~300 person startup I worked for had found new jobs, and if they are still there they're likely not in the same role.
I think this definitely would (have?) been an issue, and "priced in," at least to some extent.

OTOH, it's not just rule of law that might restrain the king. It's not in his best interest to cause a run/devaluation of shares in his kingdom's wealth.. in some senses in the crown. International corporate capitalism 1.0 was long-lived and happened while kings still had power... parliaments or not. It's not impossible Aramco could find some equilibrium.

Anyway, even just internal Saudi money could amount to a lot. A little bit of international billions would help boost their trust. I think it comes down to execution mostly, whether or not it happens.

Couldn't ask for a better time, macro-finance-wise.
As a person who was a young developer in the .com boom and a middle-age programmer now, I think youth puts too much focus on this and lack experience in this area. I think there is a general opinion that the old guys will ruin everything and serious up the environment. When my experience has been the exact opposite, the old guys usually bring in some good practices the young guys find are good ideas but they really don't care about the culture or changing it. At my age now, I enjoy the antics and find them amusing, joke with my younger colleges and tend to get along well with them. I just don't hang at the bar with them until 3 in the morning. I think a lot of younger programmers would be surprised at how much older developers don't infringe on their culture, they may not be an active participant in all circumstances of said culture but a lot of them, lived it, and have a boys will be boys attitude about it. If anything I would say that many older programmers are a passive cultural fit for a youth oriented company.
I think most of us commenting here don't share this view.

Then "most of us" are part of the problem. Maybe the admins should rename this site to "Geeky/Techie/Science-ish News Stuff", because the "hacker ethos"[1][2][3][4] seems to be disappearing from here.

[1]: https://en.wikipedia.org/wiki/Hacker_ethic

[2]: http://phrack.org/issues/7/3.html

[3]: https://www.gnu.org/gnu/manifesto.en.html

[4]: https://www.mozilla.org/en-US/about/manifesto/
Buy a $5/month VPS and run your own VPN on that (popular setup script: https://github.com/StreisandEffect/streisand). It'll cost you a little bit of time in setup and maintenance (mostly just upgrading packages), but it has many benefits:

- Cheaper than most VPN providers

- You won't be using a known VPN IP

- VPN providers are more likely to snoop on your traffic or be targeted by snoopers (such as the government), specifically because they seek out traffic from people trying to hide

- You get to pick the port/protocol/software you use, rather than being forced to accept the provider's ones

- You can run other small servers you may need on the VPS as well
The used books being sold as new is a big problem on Amazon. Amazon has ignored our request to remove these sellers.

Amazon has become the place to pay for a new book, but receive a used.
So did I, 33 days ago :/
I've been using Mullvad for a while now and I have nothing but praise for them. Only complaint is they're more expensive than some of their competitors.
While I agree with you - I do think it's slightly less bad than you make it out to be. For example, if I connected to my bank over this VPN I would only be as concerned as my HTTPS connection. So my VPN still doesn't know my bank login, assuming my TLS was sound, right?

This would hypothetically be as bad as logging into my bank on a public wifi.

Am I paranoid enough to not log into my bank on a public wifi? Yes. So I should be concerned here. But, it's at least not immediately insecure.
It doesn't make much sense to me, even with iDRAC/some other console access you don't really have access to OS unless you reboot & go to single user mode etc at which point they should be noticing their servers rebooting etc. would love more info
When fascists and Jews battled on the streets of London
>NordVPN said it found out about the breach a “few months ago,” but the spokesperson said the breach was not disclosed until today because the company wanted to be “100% sure that each component within our infrastructure is secure.”

So instead of allowing their customers to do their own damage limitation, they left their customers in the dark and continued to expose them to a breach they weren't sure they had fully contained.

I wonder when that sort of thing will become a criminal offence.
I was having a similar conversation about how interesting it is that celebrities are all for easy moral decisions like “you can pee next to me” but when it comes to moral decisions that might hit their pocket book, they are quiet and even suppressive.

Taleb’s Skin in the Game gets brought up a lot, but I think it’s safe for me to assume that unless someone can suffer a loss, they are just saying blargh.

I know there are a few people who might buy less because they really hate trans people (which is really terrible as people should not hate someone on how they express their gender), but it’s not the same hit as 400 million Chinese not buying my stuff.
Investing in any company carries some risk that the whole thing is a sham and it blows up in your face. There's probably a bit more risk in Saudi Arabia, but a democratic system and impartial courts didn't stop Worldcom from lying about basic information and being taken from its stockholders.
> Like hearing a family member or friend say, "Summers are getting hotter, and we got 2 extra inches of snow this past winter. Climate change must be real!". Usually these types of comments are ignorant of multi-year long climate cycles.

I've never heard this kind of statement. I've only heard it the other way around where it snows and people are like "what global warning?".
Not sure if it is still the case but a while ago it was standard on OVH servers for them to put some public keys in their root-like's user authorized_keys. I think they used that to perform tasks requested from the web management system.
I knew Mark personally. We played tennis together in High School. My mother made dinner for him many times.
All I can say is, "You can't judge a book by it's cover"
The State of Serverless, Circa 2019
Oh if only that were universally true. There are some terrible people that survive and some folks would say they live to suffer for their life of ill.
Molecular Trap Locks Away CO2
I am not the person who wrote the post, BUT they didn't mention anything of the unusual working hours or a pay cut (that they wouldn't take).

And in any case, this is something that's discussed outright (hours) and while extending an offer (salary).

Socialization outside of working hours is nobody's business, and reaches into illegal land (I don't care if one doesn't socialize with old/black/other gender people; but making hiring decisions based on that is illegal).
I'm not buying it. Why does Google "have to be" ethical?

If Google has to be ethical, doesn't Uber have to be ethical?

If Google and Uber have to be ethical, doesn't Blackwater/Xe/Academi have to be ethical?
You should probably ask for a refund, then set up your own VPN.

Commerical VPNs are, for the vast majority of cases, simply not a good bet for your privacy. You're changing your network traffic path from a diffuse and byzantine series of paths to once centralized collection point. The payoff for an attack on a VPN rises very quickly. Meanwhile, you're also conditioning yourself to say, "My traffic is secure while my VPN is on."

It's not a great combo.
Sounds to me like amazon takes a 15% or 20% cut of the transaction, and the customer gets to do all the work of vetting sellers?

I’d rather pay more and support a reputable manufacturer or vendor directly.
What doesn't kill you makes you stronger?
NASA Just Unveiled the Space Suit to Be Worn by the First Woman on the Moon
Is ninja python or C-based? I cant remember.

Is "-pipe" in their c-compiler's make.conf ? Would that even matter when using ninja as the compiler?

Im curious, and trying to think towards a solution.
Agreed on all points.

We happen to be in a situation where we have very long development cycles, and also rarely need to go back and rebuild older versions. So, in our case we could get away with this.

And yes, the speed improvements came from a combination of iterating over Git commits in a single Python process vs running Git as an external command, and avoiding touching disk for everything except reading and writing blobs and commits.
I had similar experience. I get the core syntax of elm, but where I run into issues is how to USE things like the browser module to do routing. That isn't a syntax problem but a larger structural one.
So, a monitor?
Sigh - just because one has a VPN, doesn't mean it has to be used all the time.

My NAS device, uses a VPN - my other machines do not.

My laptop, uses a VPN when I am travelling and using wifi from unknown sources (i.e. coffee shops, airports, etc.)
> "he was "famous" by then and I was an annoying little kid disturbing him at dinner"

At the age of 14, I and a friend decided to pay a surprise visit to a famous demoscene musician at his home in Espoo, Finland. He was not very impressed by this pilgrimage.

This was still in the BBS era, just pre-Internet (around 1994), so scene people would regularly include their mail address for contact purposes. I don't think they expected young teenage fans to show up.
> When Järlström brought the issue to the Oregon State Board of Examiners for Engineering and Land Surveying, [they] fined him $500 [...] for practicing engineering without a professional license.

Wow, as described this is outrageous. It's not like he was out there changing the lights himself. He made a proposal. I guess that's why he won the court case, although I think that might go too far as well: requiring licenses for engineers makes sense. It should be required for actually implementing changes, though, not just talking about them.
MitM-ing a VPN does not break HTTPS. Hence, any passwords send over HTTPS are still safe. You could speculate that a VPN MitM is a nice way to get an MitM position for a further attack on TLS. But that requires a lot more speculation.

What isn't safe is your browsing history. True, any HTTP data isn't safe, but trusting that to be safe is baaaaad anyway.

In short. This leaked browser behavior, and could be a single step in getting a MitM possition on users.
"I don't understand the obsession with VPN providers. Funneling all your Internet access through a single entity no matter where you connect from just seems like a fundamentally bad idea to me, especially if that entity's business is getting people to funnel all their traffic through, making them a juicy target for governments or hackers."

Agreed - especially when it is so very, very cheap and easy to fire up a handful of VMs - around the world - and run your endpoints any way you like.

By far my preferred technology is 'sshuttle'[1] which allows you to use any host, anywhere, running ssh as a VPN endpoint. That cuts the setup time for your VMs down to almost zero.

[1] https://github.com/sshuttle
A High-Tech Solution for Rooting Out Counterfeit Goods
Nord has a couple thousand severs, and each has their own key. In order to decrypt traffic, you'd have to intercept some traffic to decrypt, which would require a MitM attack unless you're an ISP/state actor.
As a developer, you do some builds on your local box, so it's really up to you what filesystem you use.
Tangentially related to the topic but I am going to ask here since it seems to be trending. Based on this query and another topic that was popular a couple of days ago around SICP, here is my question:

The last time I did any kind of math that was more complex then simple operations was a long time ago and math was never my strong subject.

I have pretty much forgotten any kind of algebra, calculus etc I learnt. So assuming I know very little math, what is the best way/book/method to learn algebra/calculus etc to tackle SICP ? I would like to do that before I begin my SICP journey.

Any suggestions appreciated!!
> If I understand correctly, these are icebergs.

You do not understand correctly. From the article, italicized emphasis mine:

> In a warming climate, as Antarctica’s ice shelves collapse into the ocean, they expose towering cliffs of grounded ice, or ice over land. Without the buttressing support of ice shelves, scientists have assumed that the continent’s very tall ice cliffs would collapse, calving into the ocean, to expose even taller cliffs further inland, which would themselves fail and collapse, initiating a runaway ice-sheet retreat.
The Key to Bliss for a Dual-Career Couple? A Contract
Great feedback. Will incorporate it in the upcoming UX/UI updates. Thanks for the effort to make us aware.
Nord specifically has a retailer system, I wonder if accounts can be created 3rd party and sold greymarket like that without any nefarious hacking scandals?
I thinking about spinning up a Digital Ocean droplet and rolling my own right now
You shouldn't have buried the lede.You should have just said, "Here is a link on why commercial VPNs are a honeypot and bad privacy."
I wonder why that never goes well, because it's an incredibly offensive and out of touch statement.

Yes there are schools, pharmacies, and grocery stores, you just didn't see them because you were passing through.

That is nowhere near the level of homeless shooting up in the street, it's just a small community.

Of course you see signs and gas stations, because you are driving through the towns on the highway...
Wow 96, what an amazing grandfather to have! I hope to survive as long but it seems the my grandparents generation can't make it past 80. So much so that my nephew thought when you hit 77 you died and that was how life worked.
I wouldn't try to go top-down like that. The process should be:

I now need to git commit. Googles "magit commit"

I now need to git revert. Googles "magit revert"

It was much harder for us old timers who didn't have the benefit of google or
stackoverflow. We had to read manpages or ask the guy sitting next to
us to figure anything out.
Note that those riots were in '69, and the T was only added in the late 90s.
There are pros and cons to this, we think it's positive (aligns the EU with privacy), but we provided all the details in the below link so people can draw their own conclusions: https://protonmail.com/blog/eu-funding/
Why Do Some People Need Less Sleep?
Ask HN: Full stack interviewers, what do you look for in a junior candidate?
Or at least in a candidate that doesn't have full stack experience but has developer experience.
Depends, if they have a root (or a wildcard) certificate, they can show you that, and your browser will happily show you a green lock. However, the list of root CAs in your browser is public, for Firefox see [0], and hopefully someone would notice if a VPN provider has access to such an certificate.

(However, that is something that also applies to ISPs, at least Telekom has a CA and therefore a root certificate.)

[0] https://www.mozilla.org/en-US/about/governance/policies/secu...
Ancient stars shed light on Earth's similarities to other planets
Only to the existent that any other ISP already could.

Banking info, email, etc would all be protected by encryption in transit (HTTPS or TLS), so an MItM attack shouldn't affect them. The attacker would only know what hosts you were communicating with, any unencrypted headers (ex. TLS SNI), but not the actual data itself.
But then your security rests on your ability to manage a server. I mostly agree with you, but, I don't run one because I'm not a seasoned Ops. At least, not enough that I want to put my security on the line.

In all but the most hostile networks I trust another VPN or my ISP more than I trust my ability to keep a server secure.

Thoughts?
Most likely many of the deceptive Amazon sellers are buying closeout or expired products 10 cents on the dollar and reselling them just below Amazon's price.
Arthropods formed orderly lines 480M years ago
Yes it is?

Giving realtime public status updates makes your attacker privvy to your actions and how much you know.
Fix first, publicly announce when safe to do so.

Same reason why SWAT etc. don't want media crews covering their actions in real time. It's broadcasting your view of the situation and intent to the opponent.
> I guess Clodflare one is only for mobile?

Yes, unfortunately it's currently not possible to use Warp VPN on PC. Otherwise, quite good service.

https://airvpn.org/ is also worth mentioning.
Amazon is the equivocal of the retail end. Any sufficient and provable complaint to Amazon will result in a refund.
The interesting thing about OOB on most modern servers is that its a separate, physical NIC. Not only is that easily VLAN able, a more security conscious datacenter could even air-gap the out of band LAN!
Depending on the web server configuration they could be used to decrypt past traffic.
Web Developer: Best Low-Stress, High-Paying Job in America?
HasField typeclass was recently added to GHC. It has no laws.

https://github.com/ghc-proposals/ghc-proposals/blob/master/p...
These are not gods worthy of our veneration. They are demons born of our vices and weaknesses.
It used to be considered polite to append "(pdf warning)" to direct links to PDFs. I still like it, even though it's way less of a PITA now than it used to be.
But there is an easy RAMdisk for Windows! http://www.ltr-data.se/opencode.html/#ImDisk
On the other hand you will have lesser knowledge of what shady things your VPN provider does.
Depends on what kind. In case of idrac, yes; but it's weird that it was insecure by default in the first place. Usually credentials are configured and provided to the customer. Makes me think there might have been some other interface. Clarification is definitely needed.
> every discipline has it's most fundamental books ... e.g. philosophy -> Socrates, Plato, Aristotle, civil law -> code civil, christianity -> bible, etc. one should read to get a truly deep understanding.

I dispute this idea. For some disciplines, this may be so. For other, such as physics, biology, chemistry, mathematics, civil engineering, poetry...actually, for most disciplines they aren't based on fundamental books. They're based on a living community of practice.

In these disciplines a book is important only insofar as it can be used to increase your abilities. No one goes and studies the textual details of Landau & Lifshitz as a guide to anything, any more than they do so with TAOCP.

Rather than worry about fundamental books, worry about opening up black boxes at a steady rate.
Companies should be comprised of whatever works best to build the product effectively that people want to buy.

Your argument could be used to ban beanbag chairs, nerf-guns, and kegs from the office because it doesn't meet your "maturity" standards. I've worked at places that have all of these and we made a productive and effective team.

If you don't like the company culture, complaining that they aren't "mature enough" is childish. It's their company...

Find a company that suits your temperament and everyone wins - which is what I believe OP was getting at.
Maybe that's a strange form of guerrilla marketing, to actually get people to use the email client ?