skysight-inc/HackerNews huggingface dataset:
That's not what "security by obscurity" means. (I had the same question a while ago about something similar, so I learned the distinction.)

If my secret is kept at "example.com/sadf23s[...long uuid...]" then that is not an example of security by obscurity, any more than a username/password combination is. Indeed, my long url is almost certainly much longer than the majority of user's username/password combinations.

It is potentially sharable, if that's something I'm concerned about, but that can be managed via cookies, timeouts, single-use urls, etc. And I also might be ok with it being sharable, just not discoverable. (e.g. Google Sheet's distinction between "anyone with a link can access" sharing and "anyone on the internet can find and access.")

"Security by obscurity" refers to relying on some part of your architecture or code being obscure. E.g. hoping that no one knows what static salt you use in your simplistic hashing function, or hoping that no one learns that there is a page called "s3cr3t-admin-access.html" that lets you get into your site without a password.

The usual test is: if an attacker had access to all my source code, could they get in? In the case of randomly-generated uuids as urls, the answer is "no."

"System security should not depend on the secrecy of the implementation or its components."
Fortran 77, my favorite programming language, supported imaginary numbers. Back in 1977

https://www.obliquity.com/computer/fortran/datatype.html

Fortran IV, did, too:

http://www.math-cs.gordon.edu/courses/cs323/FORTRAN/fortran....

...in 1957.
Sorry, WireGuard is in kernel, but jitterentropy may still be able to help: http://www.chronox.de/jent.html
The Five-Minute Rule 30 Years Later and Its Impact on the Storage Hierarchy
First issue: publications. I think this is not a big problem in the USA relative to China. Is there evidence of American scientists who have greatly benefited in reputation and prestige, despite doing very shoddy work? Many scientists have been rebuffed and rejected from grants/awards due to not having enough publications. American scientists, though, are more attuned to the quality and integrity of journals in which publications appear. Whether for tenure or grants, a Nature or Science or Cell paper will mean a LOT, and many scientists evaluating other scientists wouldn't care much about a journal publication with Impact Factor under 1.0.

Meanwhile in China, there are numerous article-factory-journals that are pay to publish, you can put your shoddy work in those and amp up your publication count easily. Surely, these exist in the USA, but are career scientists at major institutions utilizing these shady Chinese journals? There is evidence that some of these Chinese journals are publishing straight up BS, which is especially easy to do with data analysis where you could "clean" your data easily. Perhaps it is a cultural or political difference, but I don't see nearly as much rigorous self-reflection of Chinese scientists on this front?

Second issue, grants: publications are a small slice of this story. Science departments (not humanities) in universities are MAJOR revenue generators for the University. My university took 1/3 of your grant straight off the bat, to cover overheads like shiny facilities and administration and marketing. Meanwhile, the scientists themselves may make huge salary bonuses or advance their tech/staff substantially when they have substantial grants. So, getting a grant is great for you personally, and improves your chances of further grants.

So, is it really that surprising that there may be pressure to publish at all costs, to p-hack, to reach for those low-impact journals despite their lower reputation/impact, given both universities and scientists are BOTH massively financially benefited from this incrementalism? Does it really pay to reach for pie-in-the-sky, fundamental sea-changes in your field? It seems like a high variance, high risk strategy that only very bold, well-funded, devil-may-care scientists would employ.
> a regulated free market economy with a Basic Income

As an adamant libertarian, I'll admit that this is the right way to do socialism.

(Though I'll co-opt Linus's opinion on CVS: "There is no way to do socialism right.")
Reattempting bc i appear to have been silenced...i don't like these dark patterns...prevents genuine dialogue.

In the spirit of contributing, yes I understand the challenge and regret any loss in radio astronomy we may lose as the value this resource provides humanity is priceless. It speaks towards a collision between progress and desire to control how IoT persists in our lives.
The amish are an extreme but I want zero market or policy pressure to have a surplus of IoT sensors and controllers around me. Only what i want, for starters the security implications i dont want, etc.

But i digress, its a challenge.

Meta sidebar - i don't think there should be an expectation that all responses meet varying thresholds of content quality. It should be standard.
I don't remember when friend generational relations began...
I have very few friends. I have a discriminating taste aka standards.

Something society has lost.
Star Wars Setback: Game of Thrones Duo David Benioff and D.B. Weiss Exit Trilogy
Bankruptcy will eventually improve the score. It's not instant, and may substantially worsen it in the short term. Some organizations that do credit checks may also have a "no recent bankruptcy" policy despite accepting lower credit scores.

Not everyone's way behind at the time they declare bankruptcy, either. We did it because six figures worth of medical debt was ceasing to be juggleable, and disability approval (and back pay) looked to be years out still. Credit score was largely fine at the time we filed.
The thing about systemic risk is that it's systemic. You don't have to wait six months for leaves to fall because when it's spring in North America it's autumn in Australia. One place going without rain for months may be common but every place going without rain for months would be unprecedented.
> My business can't survive unless my employees are living in poverty.

The corollary being "You're actually worth LESS to me and my business, but the state won't allow it"
I used to use tmux to do this. Split the screen half a dozen times. Connect each pane to a separate instance. Enter `setw synchronize-panes on` and you are now running commands on 6 instances simultaneously. From there you can run `htop` to see resources being used on all instances on one monitor, run `apt-get` commands, etc.
I'm seeing a lot more love for ansible than any of the other competitors in the cluster/pool management sphere. I didn't know HN had reached a (rough) consensus on this, is ansible well-enough-accepted as the configuration management tool of choice when not integrating into a larger cluster management system (e.g. Kubernetes)?
>It seems wildly strange in that context, when Facebook could easily take the stance that it’s hard and they might not get it right but will try anyway, instead of bogus misinterpretation of free speech that is Zuck’s current stated position.

Because not getting it right can actually be worse for society, because at that point Facebook is picking and choosing who gets to run political ads. This should be terrifying considering that some of these tech companies have so many oopsies when it comes to certain political leanings. What do you think the calls will be like about Facebook when it turns out that one side in politics tends to not get to run their ads on Facebook while the other side can?
I think we can declare generation bait articles off topic for HN as a category. Their signal/noise ratio, and especially the signal/noise of the resulting threads, falls off the bottom.
How We Misremember the Internet’s Origins
If nobody was a follower, could there be any leaders?
My Most Embarrassing Mistakes as a Programmer (So Far)
"de-energization" doesn't say anything about the reason either. Using overly-formal worlds is PR spin tactic to suppress the connotation of the common term, and psedo-justify the action by connoting scientific credibility.

https://en.wikipedia.org/wiki/Rolling_blackout
> I think the fundamental issue Musk has is that his cars can’t drive safer than even a below average driver.

Agreed.

> Oh wow, it can stay in a lane and match speed! So can every car manufacturer. They’ve got a level 2+ system and cars won’t be safer until level 4.

I don't find this to be true at all. ProPilot is terrible compared to AutoPilot and many of the other manufacturers have the same limitations (or worse).
> As for Facebook "mediating our cultural superstructure", this is a completely untestable and probably ideological claim.

To the contrary, there's been quite a lot of research indicating that Facebook has an outsize influence on culture to the point that it's substantially affected elections (and not just America's). Google "facebook influence research" and you'll see plenty of interesting results.
> I think it would have been better to have every body just learn english as their second (computer usage) language.

That seems a little extreme to me. It seems like it might have been better to just adapt writing systems for computer usage. Originally a lot of computer systems didn't have lower case letters, japanese tended to just use katakana, etc. Sure, it kinda forces everyone into an alphabet or syllabary, but language adapting to medium is hardly a new thing.
I've found pretty much the opposite. People don't consider public transit unless its clearly the better option.
> I live in Korea and older people are technologically no inferior to younger people in that regard.

You guys truly are wonderful unicorns. How do you do it? (serious question in that regard)

On topic, I think the ultimate solution is to have whatever language input/output be essentially a placeholder, and then some general "switching" system which puts whatever language a user prefers. It should be able to switch on-the-fly totally independently of application state. (same thing for numbers, outputting decimal or hexadecimal should happen on-the-fly, same model value but different user view)

Commercial OS's tend to be pretty invasive these days, but the one thing where we need more of them, and better tooling, is definitely text i/o.
You’re confusing the product with production. Google has plenty of product people that can tell them what to build. FitBit has engineers, hardware designers, production capabilities, suppliers, distribution, as well as the ownership of name ‘Bit’ in the wearables space. Makes perfect sense if Google is trying to make a rapid push into a new market.
Politeness aside they won't be remembered fondly.
It seems like suggesting someone else is acting in bad faith is different from pointing out that someone has openly acknowledged that behavior in themselves.
You would rather reward Lee's toxic behavior than Francis' loyalty to the company by pointing out Lee's technical issues?
the commenter here is talking specifically about ad-hoc commands:

https://docs.ansible.com/ansible/latest/user_guide/intro_adh...

these are pretty easy to understand.

Also chef, puppet and ansible are becoming very niche tools these days now that we have kubernetes and docker, all we really need them for is provisioning out k8s infra if we run bare metal.

Terraform is a different tool entirely working at a different level.
So you quit loving your mom and dad at 18 ?

And Im callous ?
We are closer now that the ISS has a functional 3d printer (looks like PLA)

https://www.nasa.gov/content/international-space-station-s-3...
Then you don't believe the article in the first place.
For example by representing numbers as pairs (a, b), where the real part is a and the imaginary part is b. Then:

1 = (1, 0)

i = (0, 1)

2 + 3i = (2, 3)

and so on.
Gen X has been screwed too, just not quite as hard.

From all the reading I've done over the past decade or so, I've come to the conclusion that the thing that has been most damaging to younger generations has been real estate hyperinflation.

I don't think the term hyperinflation is that hyperbolic here... the run-up in real estate cost has been spectacular. Tuition and health care have also gone up but not as significantly as real estate.

I do think the "boomers" carry a substantial amount of the blame for this for supporting a whole raft of policies that have created artificial housing scarcity: restrictive zoning and NIMBYism, purely car-centric zoning, things like proposition 13 in California and similar bad policies in other states. I don't think it's malice per se. I think the boomers genuinely don't get it. When they were young housing was not so absurdly expensive, and the run-up in home values has been good for them. They don't see the problem because they're quite insulated from it.

The rest of the blame goes to the financial industry for marketing real estate as a financial instrument rather than a durable good (a place to live) as it should be.
That's a hit to your pride. Who wants to give up like that? And in more practical terms, how does that help with your problem this week? Now you have a broken car and zero ability to get non-predatory credit.
It got to the point where it was too annoying to visit all those different websites with animated intros, weird menus, sounds etc. It was like 1000000 cdroms on the browser. But yeah, thanks to 20 years of progress we can now stare at 1000000000 identical bootstrap homepages.
Using the increased speed features of mpv and my mp3 player have absolutely revolutionized my viewing and listening process. I can get so much more viewing and listening in in the same amout of time. It's absolutely fantastic, and it depresses me to think about how many hours (or probably days and weeks) of my life I wasted when I was listening and watching everything at only 1x speed.

That said, I don't speed up fictional movies nearly as much as I do everything else. But I agree with the person quoted in the article that with a 10% speedup you really won't notice, but it'll still save you time. On nearly everything else I listen and watch at about 2x or 3x speed and save a lot of time.

Also, often listening at a faster speed makes some otherwise slow media more interesting, as I have to concentrate more, drift away less, and there's more information per second to digest.
Shopify Shares Tumble After Surprise Loss on Spending Boost
Linux software I'm currently paying for:

- PyCharm
- GitKraken
- Dropbox
- Postman
- ExpanDrive
- ProtonVPN
I could imagine that the future of search engines is more specialization in different topics. As the content in the web keeps growing it only makes sense to only "search in a specific corner".

Maybe it's a good time to be innovative here..
One should be thinking of using terraform and something like chef/puppet/ansible or even better yet moving to kubernetes if you find yourself having these kind of problems.
I don’t know much about the inner psychology of Elon Musk, but I wonder what would happen if he had started his career out of college working at an investment bank or a hedge fund. Even with his endless ambitions and truly disruptive ideas, would he forego the paycheck to pursue those ideas? I have no idea what the answer to that question is. However, I do see this dynamic of golden handcuffs preventing talented people from venturing out to work on their own projects all the time.
You dont need to spend that sort of money to make it so a wheelchair person can use the pooper. Govt regulations require you spend that sort of money.

Therein lies the problem.
Thought this was an interesting question.
Or American startups like uber copying successful European startups like blablacar.
It confirmed the things I’ve learned in the past year. Not sure what you’re talking about. If you have something more constructive, tell us.
I agree with this article and have always thought about this but never voiced it.

I think a few things could improve the quality and discovery of published papers:

-After so many publications, could it be mandatory for random samples in that author’s publication be tested? I get that there is a limit on resources, but some advanced undergrads could do this with guidance.

-I would love to see some version of a journal of failures. That is, well intentioned research that had poor outcomes. It was so frequently in Chemistry research that my compounds were useless or the methods to synthesize them did not work, and it would be helpful to document that. Unfortunately, there is no “Journal of Failed Chemistry.” Only research that ostensibly make a contribution with a clear outcome get published. So much time wasted experimenting where you could save another scientist time and encourage them down another path.
c) overnight success stories take years to realize, d) it takes a long time to get all the failures out of the way
Read the Arstechnica article linked in the parent. It was not pitch-black. The pitch-black video was PR.
I want to add a note to this - if you're using something like this to manage linux servers you're almost certainly doing it wrong. At a server level use ansible, puppet or chef.
GoFundMe is a charity platform. How can p2p microloan platform replace it? So I'll make a micro loan fully know it will never be repaid?
IDA still doesn’t support ctrl+z for field renames. Which makes working in it an absolute nightmare (e.g. accidentally renaming a field at the beginning of the structure which will remove all mapping after it).
Musk has been talking more and more about the moon lately. Maybe he's thinking the same.
Same here, I have their domains blocked in my hosts so if I accidentally click I don't see anything.
> You receive some JSON over the wire, it's not the right format, and everything blows up in your face.

If I was using a staticly typed JSON parser, like say Rust's or Crystal's, then it would blow up, right there. It'd throw an exception, or pass back a failure value that I have to handle.

JS doesn't do that. It just keeps going, and due to the way it implicitly handles types, getting a list instead of an object can mean you end up with a string later on.
I am reminded of the comic, "What if it's a big hoax and we create a better world for nothing?"
It's probably because men are trash.
Aggregating some 30 000 rss and atom feeds it became obvious to me what an echo chamber it is. It also becomes obvious how big media dictates the topics. The negative consequences are also obvious since big media has no intend to inform or educate you. For them it is all about the bottom line readership and revenue. shocking > informative. My endless thought experiment is: What is news? What should it be? Can we exclude some of the audience to involve some expertise in it? Should we provide real study material so that the reader may understand the context? Something constructive would be nice? Whatever the answer is, it isn't to just endlessly repeat and repost what newscorp wants us to talk about. It isn't our friend, it has no great plan for us to prosper.
"All sorts of groups"? Only a very few sort of groups need special legal imprimatur to exist. And if you want to be granted special and extraordinary treatment by a community, why would that community not expect you to not be an asshole about it? If you don't want to uphold your end of that bargain there's always the general partnership. It confers no special legal privileges, it's purely contractual, but it's actually a "group of people" rather than A Fictitious Person Created To Avoid Liability. In my experience conflating these is never, never, done for good reasons, so I'd certainly like to hear yours. Maybe it'll be the exception, so lay it on me.

Here's a concrete example of what's actually a power grab: the Dole company literally-not-figuratively knocking over the Hawaiian monarchy and the subsequent creation of the "Republic of Hawaii" as a Dole-owned, Dole-operated state. Why is that not a "power grab" about which you get up in arms? Why is it that it's a "power grab" to say "hey you have a duty to not do that kind of shit"?

What you are categorizing as a "power grab" is a refusal to accept the status quo as legitimate just because it happens to be where we're at right now. Why is it that that advocacy, the use of the state to control its creations, is the "power grab" here--and not the accumulation of that power in the first place?
Python has had decent C++ interoperability for several years (see https://cython.readthedocs.io/en/latest/src/userguide/wrappi... ). Though, yes, C has better support.
They did and it was pretty good 3 years ago when I last used it. It's possible to merge it with your own code, but it was bad at managing images and SVGs. Flash's strong suit, at the time, was the vector rendering.
> but the economy is taking advantage of them.

Interested in hearing how you explain this.

I dont disagree with you but I would like to know what you see as the root cause.
I agree with Adam here, she gets it.
How do you quantify rigor?
I am glad to see this raised as a bug, even if the fix would be a huge breaking change. It highlights one of many ways that growth of complexity and API surface of the browser has become a serious security issue.

Maybe merging the concepts of a hypertext document layout system and an application platform wasn't a good idea.
>It's technically easy to do. You hire a roomful of people to vet advertising, similar to how every media company did it until 2010 or so.

But it's not a room full of people. Facebook doesn't only exist in the US and I doubt that people from the US will be good at vetting political ads in Poland.

What's even worse is that at that point you're asking Facebook to censor political ads based on what Facebook thinks is right. Do you really think that Facebook wouldn't be labeled biased and there wouldn't be even further demands from them?

This is easy to do in the example of a health clinic, because there is a right and wrong answer, but in politics that's not the case.
Direct-to-consumer businesses have taken off due to the internet. It’s never been easier to start a sock company or glasses company etc. Historically you had to get in to the big box retailers to sell anything non-local but the internet has flipped that on its head. Even big platforms like eBay and Shopify (and even Amazon) are offering small businesses and individuals way more opportunities to sell than they would have had pre-internet.

Furthermore in a direct to consumer world, incumbency matters way less. People had fewer options pre-internet (whatever was at their local store) and now brands largely compete on quality (reviews/ratings) rather than pure placement and marketing.
Dappkit, Firebase for Web3.0 – 24/100 Invites Remaining in Beta Test Program
Autopilot isn't even designed to be used without a human driver. Which confirms that even Tesla doesn't think its better than a human.

It can't even handle intersections.
I'm surprised there isn't more consumer action, such as boycotts, against Amazon.

I guess consumers are either ignorant of how crappy an employer Amazon is or care more about getting their cheap goods than about the welfare of Amazon workers.
afaik there's an offline flash player
Americans not having a national ID system has nothing to do with what Americans want. It is expressly unconstitutional for the Federal government to require such a thing, only the individual States have the authority to issue IDs and the States are required to recognize these documents from other States. Again, the US is organized more like the EU than a single country.

Consequently, all Federal identification documents are strictly voluntary (like passports), which means some significant fraction of the population will never have them.
New .new Shortcuts
It has been a problem, but it is definitely not an intrinsic defect of camera based solutions. The stopped truck example has been examined in depth with rooted Tesla's. The Tesla actually detects the truck, but fails to fully recognize the scenario and attempts to drive under it! See also, greentheonly's work on Twitter on researching this.

Ignoring some stopped objects is only a temporary limitation.