skysight-inc/HackerNews huggingface dataset:
I often find myself scrolling to the bottom of these snowden threads just to see how often people downvote/flag opinions they don't agree with.

HN doesn't seem to be much better than reddit in this regard
We haven't considered that properly, I think chasing up copyright infringement is a difficult one, especially for Instagram reposts where the payout will most likely be so low.

Having said that, in the US, the CASE act, which will introduce a small claims court for exactly this kind of use case (excuse the pun) made it through the House of Representatives yesterday. So it's an interesting option for sure!

https://www.theverge.com/2019/10/22/20927545/copyright-bill-...
Yeah, default configuration of systemd-logind is to prevent network access. This means if you use e.g. NIS authentication weird things happen.

Weird as in 3 minutes after someone SSHd into my workstation, X11 restarted. Until I tracked it down to a default systemd configuration I thought I was going insane.

Beyond the default configuration, which is somewhat defensible as NIS is probably not a typical case, it really bothers me that if someone else's login process has issues, everybody's logins get killed.
i'm more thinking about libraries like tensorflow, ssh, or libgit2.

Yes you could rewrite them in Rust, but considering these are tools which are used all over the ecosystem and have massive momentum behind them, your time would be better spent building cool things on top of existing work than reinventing the wheel and trying to convert the ecosystem to something which will (initially, at least) be an inferior product.

The original statement was deliberately opinionated and extreme, but I still feel like the pragmatic approach of reusing existing libraries instead of rewriting them is the best one for the short/medium term (jury's still out on the long term costs/effects).
Just a friendly reminder : https://www.nytimes.com/2014/07/21/us/politics/edward-snowde...

Theses guys just shared naked pics of peoples ...

This kind of power corrupt ...
Some of the best and most detailed information on database internals available on YouTube. Also great at integrating the current state of the commercial database industry with trends in academic database research.
I do not use ANY cloud for my business/private accounts. I just host my main and backup servers here and there with providers I can switch to / from in a flick of a finger.

The only "cloud" I tolerate is buying stuff from the watching movies on Netflix and shopping on Amazon and likes.

Of course when consulting and client demands it I work with the Azure/Github/etc but that is the extent of my involvement. Anything that happens on that front becomes a client problem. Not mine.
I'm surprised nobody has mentioned Trilium Notes in here so I will:

https://github.com/zadam/trilium
Video Games and the (Male) Meaning of Life
Actually, you can again. At least in Safari with Wipr installed. They're doing an overlay at the bottom of the window instead of just blocking the whole thing.
Ask HN: How many of you were impacted by the Route53 issue?
I notice some people looking or using OctoDNS and other solutions. Were you affected and do you use OctoDNS or similar solutions?
Show HN: Certera – A central validation server for Let's Encrypt certificates
I am not wise in the ways of Firefox plugins, but if the ability of a plugin to read a password field is not a separate permission, then that is a much more serious problem than the lack of native translation. That's just a huge gaping security hole, full stop. If that is indeed how Firefox is designed, then the lack of native translation should be the least of your concerns.
https://www.nytimes.com/2014/07/21/us/politics/edward-snowde...

The problem is how to be sure the line get not crossed ?
Currently a DevOps Engineer and Mobile app developer. I'd like to build something with someone. I work full time so it would have to start as a side project.
> Last time someone had to perform hardware maintenance was at least 3 months ago. If you're small enough (20-30 servers for us) the things mostly run themselves.

If those servers are production servers, I'd say that's not small--you're already scaled to the point where you have hired a whole person (or two) to do server work, no?

I've worked at places where I'm the only technical person. I know enough to set up a Django server, but the reality is I'm not an IT guy, I'm a developer. Paying for a few cloud servers means we don't have to hire anyone to do server maintenance, which gives me an entire person's salary as a server budget before we have to consider whether hiring a person would be better. A lot of companies never reach the size where that becomes a concern.

Of course everybody wants to get big enough that they need a server farm, but as long as you don't vendor-lock yourself, moving from a virtual Linux server on the cloud to a physical server in a colo center is fairly trivial.

My personal website has been running on a single $10/mo Digital Ocean server for 5 years. I think it would be very difficult to beat that price with a colo center and physical hardware. Most businesses are obviously larger than that, but I think it's a bit of an overreach to claim that it's always more expensive to run on the cloud. It just isn't, for many real-life situations.
This seems like the perfect post to showcase a little weekend project of mine.

I kind of wanted to checkout Joes podcasts on the go, but I don’t want to listen to the whole 2 or 3 hours. Instead, a list of topics with timestamps would be much better. So I hacked together a little feed and a player doing just that.

This episode is also already live:

https://joeroganplayer.com/episodes/1368

Granted, it’s all done manually at the moment, but I share the work with friends also interested in this.
For one thing, I don't want my browser to have low-level access to USB/Bluetooth to begin with. Browsers are already doing too much (see Chrome's built-in malware scanner), and with complexity come additional security issues. Plus, what are the chance that this won't be used for tracking somehow?
http://archive.is/3ajcQ
I actually like the Spotlight screen wallpapers a lot.
Stupidity does not play well in front of a judge, in particular if you are Google being sued by the European Comission.
Summary:
- Google overhyped their results against a weak baseline.

This seems to be commonplace in academic publishing, especially new-ish fields where benchmarks aren't well-established. There was a similar backlash against OpenAI's robot hand, where they used simulation for the physical robotic movements and used a well-known algorithm for the actual Rubik's Cube solving. I still think it's an impressive step forward for the field.
Can’t you already post through the Facebook API, just in a non-standardized format? I know you can’t anymore for Instagram, but I thought that third parties could post to your feed with your authorization.
It is serious, but as I said, it's also vaguely defined. We can continue quibbling over details for decades to come. Suppose Google does slap on more qubits so the time estimate goes up from 2.5 days to 25000 years. Is that quantum supremacy yet? Well, maybe if you used literally every classical computer in the world in parallel, and also used a very optimized algorithm, it would only take 2.5 years, which isn't that long if you're patient. So you could say that Google needs to slap on yet more qubits.

That's why arguing over whether it's really quantum supremacy is just not useful. People can always move the goalposts, so we might as well ban that word from discussion. The underlying fact, which nobody is debating, is that quantum computers are regularly doing tasks that are harder and harder for classical computers to.

And yes, the ECT is obviously false -- or at the very least, not obviously true. I'm surprised at how many CS people think it is some unassailable principle. Most CS courses devote precisely zero time to non-classical models of computation. If you've never studied a model of computation that could challenge ECT, then how can you be so sure of it? This is like being absolutely certain that I am the tallest person in the world, and refusing to ever leave my house to check.
As someone using ML in production at scale, it's not the sophistication of the models themselves, but all the "boring" operational stuff around them.

- Keeping them fed with clean, high quality, low latency feature data.

- Understanding the impact of an ML intervention on the overall system or business process, in aggregate and for all the relevant subpopulations.

- Understanding why scores may be drifting. These are very challenging alerts to investigate.

- Resource efficiency at very high QPS or in mobile contexts.
APIs are locked down to the point that only Apple can add useful functionality, which is by design.
But is there actually a proof that these are improvements over all possible classical algorithms or are they just improvements over the best currently known classical algorithms?
Why do they mention Cellebrite when there's no reason to believe that they had anything to do with this story? Odd.
Thank you for sharing.

How much time it took you to build first version and whole product? Any advice for starters?
I feel like export capabilities is a must-have-feature for me....
The possibility of a secret police state scares me more than any bombs or shootings ever could. It is absolutely an existential threat to freedom, because as part of its nature, it is able to quell dissent, and largely control the flow of information "in the name of freedom".

Hypothetically, of course.
Most of the common C dependencies were implemented in Go before its public release - https://golang.org/doc/go1. These implementors are exactly the "better-equipped" original authors to which the blog post was referring.

Most programmers are programmers for hire, and it would be a waste of everyone's time to re-implement (for example) libdispatch in Rust. If someone wants to write it on their own time for their own edification and no other purpose, fine -- but half-assed internal implementations of common functionality are a significant drag on the lives of other working programmers.
> unless these were late breaks only found in GM

That's exactly what the article and the quote above says there was:

> we immediately finished fixing any new crash or issue we could find over the weekend

NEW crashes or issues. In the GM. In four days.
What created CA was 2 fold. 1) people exposed their personal data to their friends, and gave their friends access to read their data 2) friends got a prompt that said "share data available to you" with CA and people pressed that button.

The actual coherent arguments are a) people didnt know what information they were sharing b) didnt understand how that data could be aggregated c) what the share data with a vendor button did d) should be trusted to wield this kind of power e) that entities should have been able to aggregate data like that without arousing suspicion. f) who is even responsible for this error in judgement (data sharers or friends, or facebook or ca)

The data leak here was people pressing "give away my friends data." Facebook designed the system that allowed it, hosted the data collector, incentivizing the bad actors to build their collection quizs and was responsible for communication of how the permissions system worked, but the data leaking itself was the sum of millions of people being careless with what their friends data. Facebook itself didnt directly leak the data. This was an aggregate human misbehavior.
Depends on the health of the organization.
I don't know what you're talking about.

But for an answer's sake, no, Apple should not be able to delete an email I wrote. But that's the entire point of what I just said. I should be the final arbiter of my data. Me putting my data on an Apple Mac does not make the data Apple's. It's still my data. I should be able to show it to other people, or delete it whenever I like.

Apple should not be able to show it to other people.

Apple should not be able to delete it whenever they like.

But again, that's what I said in the first place.

>Your data remains your data, even if you allow someone else to look at it. You should be able to allow others to look at it, or even delete it after having allowed others to look at it.

So I really don't get your question at all?
and by "most" we mean "at least 65%" https://www.citylab.com/equity/2018/05/who-lives-in-border-p...
> The first amendment does not talk about copyright or distinguish first with third-party data

The Constitution talks about copyright and a series of court cases have circumscribed commercial speech within the First Amendment's projections, e.g. you can't commit fraud and call it free speech.
Novell was a successful pivot. Novell started as a hardware company, with a proprietary computer based on the 68000. That bombed, so the pivot was to NetWare. That dominated PC networking for about 15 years.
Curious about the latest (?) tech. nvida's RTX, I found this:

> RTX causes a visible performance hit, which is offset by a technology known as DLSS, which stands for deep learning supersampling. In order to create this, Nvidia trains a neural network on pre-release game engine images at lower and higher resolutions. The AI provides the weights information for Tensor Cores in consumer GPUs through driver updates.

> When DLSS is turned on, the game is rendered at a lower resolution, with Tensor cores working to upscale to a higher resolution using Deep Learning. This results in a higher frame rate with a slightly worse image at high resolution. This can be used in conjunction with ray tracing to provide better framerates. NVIDIA claims that users can achieve performance similar to ray tracing off with a combination of DLSS and ray tracing on.

https://analyticsindiamag.com/nvidias-real-time-ray-tracing-...
Why would they name and quote several lawyers then?
You don't get the 2nd amendment at the border either.
I've used Anki for a while, but never very consistently or effectively until recently. Over the past year, I've started doing the following:

1. Stopped trying to categorize cards and just create them all in a single deck (with tags in lieu of separate decks).

2. Whenever I find myself googling something or looking it up on StackOverflow (that's not wildly specific or related to domains I don't really care about), I add a new card for it.

3. Review cards for a few minutes in the morning.

The above has worked rather well. I mostly focus on topics I'm interested in diving deeper into (python, for example) and has helped fill various lacunae in my knowledge.

For broader sorts of knowledge acquisition, I use Boostnote to keep track of interesting notes/articles, but I have to confess I'm not that great at keeping it updated/relevant.
Hi HN!

Certera is a central validation server for Let's Encrypt certificates. It's a cross platform, self-hosted web application. With Certera, you can centralize all of your LE certificates and keys, monitor certificates and receive notifications for cert changes and expirations. It will also help you stay within LE quota limits. Check out the docs for more details and screenshots. It's currently in beta as I'm looking for folks to start using and provide some feedback.

I created this because I had been using various ACME clients and occasionally a change here and there could cause things to break. Or, a cert would be on a system that I didn't know about and the cert would expire without anyone knowing about it. The biggest driver was making it simpler to use LE certs behind load balancers since Certera separates acquiring certificates and applying them. The idea is that you use Certera to acquire certificates, then use the API provided to retrieve the certs and keys to apply them. Currently, it only works with HTTP-01 validation (and redirects). I'm planning on adding DNS-01 validation and some hooks to make certificate automation much better when it comes to client certificates (i.e. rotating SSO certificates or certificates used for securing endpoints).

https://certera.io (landing page)
https://docs.certera.io (docs)
https://github.com/certera-io/certera (code)

I struggled a lot with the licensing and settled on something that's not "open source"; it's source available. It is free for personal use, nonprofits and small organizations (< $1M in revenue). It's free for all during the beta. 10% of all revenue will be shared back to projects used to build Certera, the breakdown is in the docs.

Some principles I've tried to follow while building this:
- Perpetual license only. I'm kind of burned out with subscriptions.
- The least amount of Javascript I could get away with. There are no frameworks. All in all, less than 10 lines of plain vanilla JS.

Thanks for reading and let me know what you think!
I've been saying for a few years now that self-driving cars are a fetish. (And can we please please call them "auto-autos"?) The thing to make is a self-driving golf cart. You could build that today, make it small, light, soft so it can't kill or maim people, sell a million of them.

(Old people! They still need to get around, they tend to be not so great drivers, and they don't mind the mellow, easy route.)
And you expect legislators to understand that distinction?
Two key points:

> OK, so let’s carefully spell out what the IBM paper says. They argue that, by commandeering the full attention of Summit at Oak Ridge National Lab, the most powerful supercomputer that currently exists on Earth—one that fills the area of two basketball courts, and that (crucially) has 250 petabytes of hard disk space—one could just barely store the entire quantum state vector of Google’s 53-qubit Sycamore chip in hard disk. And once one had done that, one could simulate the chip in ~2.5 days, more-or-less just by updating the entire state vector by brute force, rather than the 10,000 years that Google had estimated on the basis of my and Lijie Chen’s “Schrödinger-Feynman algorithm” (which can get by with less memory).

> But does IBM’s analysis mean that “quantum supremacy” hasn’t been achieved? No, it doesn’t—at least, not under any definition of “quantum supremacy” that I’ve ever used.
Right, it was 19 miles to bike from my house to my HS, which is a bit far, and long enough that a bus was faster (though at least most of it was separated from automobile traffic).
You should probably tell the blob that because to this day they have nothing but complaints about Obama's foreign policy.
My commute for a long time was 16 km each way, now it's 1/3rd of that. I've been hearing about climate change since I was a kid, so I've had my whole life to set my life up accordingly. I didn't make decisions that made commuting by bike unfeasible.

I don't think I've met a bicycle commuting advocate who doesn't also advocate for improved mass transit and walkable development. We stopped building neighbourhoods that way and razed many of the ones we had in the second half of the 20th century, so there's a huge supply and demand imbalance for walkable neighbourhoods in North America.
Launch HN: Gorp (YC April 19 Hackathon) – ML/CV Redacts Protected Data on Device
My go-to examples of people going from skeptical to "WTF?" are Waka Flocka Flame:

* https://www.youtube.com/watch?v=rMyvB2wAXYI

And A$AP Rocky

* https://www.youtube.com/watch?v=p8IYpVF_S5M

He also seems to be able to 'find' people just before they really make it big/mainstream, like Kendrick Lamer, Billie Eilish, and Tyler the Creator. I heard about them from Narduar before anywhere else.
Along that, also Microsoft's commitment to dual-releasing xbox games for Windoes games too. That is an easier venue for cracking so crackers dont bother with xbox.
Which was more-or-less the point I was originally trying to make. Apparently really poorly, judging by the downvotes.

Well, that, and that there's really only so much practical difference between de facto intermingling of the public and private sectors and de jure intermingling of the public and private sectors. Both invite rampant corruption and abuse.
You need to re-read what I wrote.

My claim is that media coverage cannot say anything meaningful about the authenticity of a whistleblower.

To say otherwise is a terrible argument -- Snowden himself had widespread media coverage, both positive and negative.
Ask HN: Most important features for org-mode Android version?
To my knowledge, the only supported app is orgzly. Which was designed as "to do list" more than a note taking application.
As it is not trivial to port org-mode to Android: which features are important to you?
No, as you can see in the video the browser lists available devices and the user then selects from that list. The website only ever sees the device the user selects (if any); it can't read the list itself.

IIRC there _is_ a separate standard that allows websites to scan for nearby Bluetooth devices but it's via a completely different API with its own separate permissions system.
I'm told cheaters run rampant in Dark Souls. Never seen one, and that's one of my favorite games of all time. I've lost invasions many a time, and people have used advanced magic, endgame weapons, all that on me.

Doesn't mean they cheated, new game plus is a thing, and the summoning levels (and now weapon matchmaking) are easily gamed to allow you to invade people less well-equipped than you are.

I've seen videos of actual cheaters, who hit you with a homing soulmass and it breaks all your equipped weapons and armor. Or they never run out of stamina. Or whatever. But I've never seen one in person, and I've wasted far too much of my life on that game.
End-to-End Simulation of 5G MmWave Networks
They are doing a whole bunch of research, including in quantum computing. It's hard to tell what's really "relevant" in research; if you knew, it wouldn't be research. IBM stands as good a chance as anybody to produce a real-live quantum computer, and they've hired the people who are in a position to judge what Google really has and hasn't achieved thus far.
And a subtle but massive change is the removal of imposed formats i.e. artificial time boundaries, as if there were only a few possible lengths for any piece of content — 5 min, 22 min, 42 min, because commercials.

Online audiovisual content is refreshing in that it lasts exactly as long as the creator(s) intended to treat the topic. Likewise for article length in blogs.
A more direct alternative to Alfred on linux is Albert [1]. There's also Rofi [2], Ulauncher[3], and probably many more launchers available.

On Windows Keypirinha[4] is pretty good. There's also Wox[5].

I don't think any of the alternatives are as well fleshed out as Alfred is but there are a lot of 'good enough' if you're using a different OS. Any launcher is better than the default search on windows 10, for example.

[1] https://github.com/albertlauncher/albert
[2] https://github.com/DaveDavenport/rofi
[3] https://ulauncher.io

[4] http://keypirinha.com
[5] http://www.wox.one
Is HN getting product placement rev? The better question not addressed in the associated "article" would be: are F-18 complete nav failures during flight so frequent as to compel issuing pilots $2k nav watches as backup?
Not sure it qualifies as a solo business but I run a tech blog that not only helped me to get my current job but also side gigs and contracts. Besides that I was contacted by tech companies to write paid guest posts for them. Recently a few companies offers me percentage of amount prompting their products via posts. One of them helping me to earn good referral amount. So far gave them 30+ customers in 2-3 months. They are web scraping service. I am thinking to contact a few companies myself in a near future.

My blog URL is: http://blog.adnansiddiqi.me
You mean the were more successful marketing a PDA with phone capabilities? I guess they got something out of Newton.
I would presume they did, but that it takes ice a lot longer to melt than to form on an aircraft, especially when considering how cold it can be even at breathable altitudes.