skysight-inc/HackerNews huggingface dataset:
If you're trying to prevent credential theft: Educate users on password managers, deploying 2FA, or tokens like this would also make sense. MFA deployments are probably significantly cheaper though (And yes, ActiveDirectory OTP and smartcard based MFA tools exist). Productivity-wise, MFA will work better than USB tokens - I know a bunch of people who regularly forget their work smartcard pass, I don't know many people that forget their mobile phone.

If you're trying to have rock solid audit trails that will stand up in court: This, or 2FA won't have a huge functional difference, but chances are unless you have NSA/Google tier security, your money would be better spent hardening infrastructure - your logs won't be worth jack if a pentest rips your network apart in two hours. I regularly see $1m+ SEIM deployments on MS17-010 vulnerable networks, I feel like security gimmicks like these distract them away from fixing real problems and are, if anything, detrimental to security.
Go into pre-"web" USENET archives and tell me that you don't find inaccurate, sexist, and hateful rants. And most people there were easily identified.
> Perhaps with social media and the internet it is unlikely any student would be this misinformed.

graduated a few years ago

how i wish that were true
Outcomes over Output
You can make beautiful static websites with almost no extra load. Just add a little CSS.

Using e.g. Hugo you can generate nice static websites from markdown that are compact but not ugly.
This is using Catalyst, right? UIKeyCommand is a UIKit name, not an AppKit one. And Catalyst doesn't exist prior to Catalina. They've added a whole other (temporary?) operating system. It's perhaps not surprising this has a lot of bugs. Classic wasn't perfect, either.
If your host is infected with malware but it can't steal your passwords due to hardware boundaries, it still has access to your host at a pretty reasonable permission level.

In most corporate environments that's far more damaging than getting persistence in a handful of webapps.

Also, 2FA solves this exact issue.
That won't help you escape Catalyst bugs, except that you won't be able to run any Catalyst apps. But you can just stop running Catalyst apps, now, without reinstalling your OS.
It kills far more than rational discourse. People have had their careers and lives ruined over what somebody else deems to be wrongthink.
A Wireshark plugin that tells you process name/id instead of just address/port. This would only work for local server or clients, not remote ones.
Well, you're right that the internet has not yet turned into Cable TV style bundling, and you're double-right that they could hardly care less about Kombucha Korner.com.

The crappy swings at CaTV-style service bundling that the telcos have whiffed so far such as Uverse failed to grab enough momentum to jack any of the internet streaming video limelight from youtube, netflix, or really anything from anything else at all. Who really uses Comcast's, or even Verizon FIOS' bundled voice service? A gas station before they get fed up?

Also, please consider Verizon's NXDOMAIN[0]: Purposefully hijacking RFC behavior in order to slurp in a few extra ad clicks off of granny. And if that doesn't just scream "Corporate Governance", I've heard they know which porn I visit. I mean, no surprise here, but my point is that while I really like my car insurance and recommend it to my friends, boy howdy, I have never enjoyed interacting with any telco for any reason, ever.

But, I wonder--if the FCC had never bothered with regulating away the gale-force of swarming telcos voraciously borging away at the PCS spectrum in the 1990s, would MVNE services even be available today? And if they weren't, or were just really shabby, How would The Bell Collective choose to market its services to the low end of the cube market? I mean would they program customers to remit extra currency units for a special Verizon speed-charge port for your alcove or something? Their service couldn't possibly be that bad. Everybody here would be out of the job.

Nowadays, AT&T Uverse keeps putting on for some reason, meanwhile at Comcast and Verizon, their top lobbyists have miraculously cured their chronic internet content aversion syndrome, commence with bundling Netflix. On the other side of the cubefarm, just past that one weird closet nobody ever goes into, Verizon Wireless is slowing some of its MVNO customers.[1] This is fair play too, since two years ago I'd say. Who is to blame them for propping up their own quality of service at their competitors expense if there is no regulatory recourse?

I realize that Verizon Wireless and Verizon Verizon are not the same Verizon, for some Verizon, even though they're both owned by Verizon. Regarding Verizon, I have met many former and current Verizon customers. I assure you, we are very certain that neither Verizon nor Verizon Verizon would deign to charge you any less out of the goodness of its heart.

Helpfully, they seem quite eager to itemize regulatory fees and taxes.

So I'd say you're triple-right about looking at Verizon-er, uh, I mean Portugal.

[0] https://en.wikipedia.org/wiki/DNS_hijacking#Manipulation_by_...

[1] How MVNOs compare to Verizon, AT&T, T-Mobile, and Sprint: https://www.tutela.com/blog/best-mvno-us-2018-consumer-cellu...
The reality is it’s a company giving offerings away for free. Do the people in these companies who care about education wish _everyone_ who needed to learn could have it for free? Of course. But welcome to businesses. The definition of “student” is as it is because it’s a verifiable segment. Self learners are, unfortunately, not.
Yesterday:

https://news.ycombinator.com/item?id=21391509 (49 points, 51 comments)
Garmin Emergency Autoland Flight Trial
Well the population is about 20% of CA's and it's much greener and cooler.

California lacks a planning structure. Until recently it was pretty much a land of misfits from the east coast. They should have consolidated local governments long ago and drawn urban growth boundaries. Instead the path they took has resulted in an utter mess.
Is your position that there was no hierarchy of status or prestige below the aristocracy in a feudal society?
> Being able to fully-automate manufacturing of silicon chips is an incredibly opulent affair, but if you can simply automate a paper-bound business process that is on a hot-path (I.e. used many times a day), it could potentially save a struggling business.

That's funny. I work at a very large fab, and of all the places I've worked, this is the one that's most in need of the sort of in-office hot path optimizations you mention, and doubly worse is that it's the least susceptible to allowing someone to do anything about it.

(In fact, it's regressing. This month saw a fab-wide rollout of a document management system that has caused a ~10x increase in wall clock time for attaching files to emails or through forms on the intranet. Now consider what that means when the company exhibits a pathological form of the passing-MS-Office-documents-around-to-each-other mindset...)
From experience I agree, but is it impossible or are the current frameworks just lacking?

Usually some terminal UI is the best for rapid data entry, which is why a shop I used to work at switched back to their TUI because the shiny new GUI was blocking everything.

The TUI you had to learn and the GUI was intuitive, but after a week anybody could use the TUI at the same speed and after a month they'd 10x or and soon 100x the entry speed.
Aside: The WH series is just fun. It's total candy, not a lick of realism or historical accuracy, just total fantasy and great visuals. The IP from GamesWorkshop has a lot of depth and breath that CA has been able to really bring to life with their engine. I'd recommend it to anyone with the sufficient computer resources and a few free weekends.
Ask HN: What's your best startup idea?
Google Firestore is allowing parent child model
FireO allow to create sub collection in Google Firestore which is a parent child relation. You can read more on our repo https://octabyte.io/FireO/managing-data/adding-data/#sub-collection

Appreciate our work by giving start to FireO https://github.com/octabytes/fireo
C/C++ compilers matching Fortran performance in numerical work is a relatively recent development. F90 and later said to be pretty ok ergonomically.
It depends on what you mean. We understand that it is a mechanical, computational process. As opposed to, say, the reigning theory of mind in philosophical circles which is dualist. (Spiritualism in academia in the 21st century... sigh.)

We have not yet mapped out the wiring diagrams of our brains which result in the human experience of consciousness. But that's a technological limitation in brain scanning and simulation. We also haven't yet created AI machines that exhibit what we would call consciousness, but we have good ideas of how to do so and are making progress. In both cases we know there is no need to invoke dualist answers, whether it be souls, ghosts in the machine, or 'qualia.'
Good to see a bigger distro supporting the Pi 4, with 64 bit available too.
At least at my org it's awful because dev teams wrote / spec'd their own UX for "their forms."

Which, as you might imagine, resulted in a huge number of multiple choice, similarly-named properties, with all options also being inscrutablely named.

Long story short: programmers are terrible at UX.
We have built projects where we used python Alembic or Ruby's Activerecord migrations to manage the db.

The actual application was in Go or nodejs.

I daresay that Activerecord and Alembic outclass Liquibase in a lot of things.
I have had this happen to me twice as a pedestrian, in 2011 and 2012. I didn't care about what it does to the environment, it felt like a personal attack upon me.
Charlie Brown's Birthday
https://djrobstep.com/docs/migra
You can see how the company responds to customer problems though.
I’ve seen people get viruses from downloading the “first result” on Google, which winds up being a malicious ad.
Honestly? I don't know of any tool that handles database migrations as well or as easily as Ruby on Rails and ActiveRecord.

I have literally spun up a barebones Rails app just to manage my schema and migrations for a completely separate Python/PostgreSQL project before.

https://guides.rubyonrails.org/v5.2/active_record_migrations...
This is the same situation that the vast majority of entrepreneurs are in and they make it work. What is so special about journalists that they always need special rules or consideration?
Because we don’t live in a make believe world.
My own – perhaps controversial – take is that a lot is explained once you realize that the United States, as a country, is deficient in empathy.

One example is The American Dream: the idea that anyone can be rich if they just work hard enough, which also implies that being poor is a personal failure: you didn't work hard enough. What this misses is that in the end, you're still going to need people to pick up the garbage, and serve McDonalds, and so forth. turns out not all of society can be composed of lawyers, doctors, and computer programmers. Who knew?

There are many more examples, but I don't want to sideline this too much by various political issues.

I'm not entirely sure what the source of this is, or if it's recent or more rooted in history. It's just my observations of the US as an adult.
I see the ‘One True Engineer’ has shown up. Comparing bridge building to engineering antibodies is absurd, a x10^12 error in scale. A better comparison would be to semiconductors, where you will find many ongoing failures, even in current production runs. Also, the mere fact that it is difficult to engineer something doesn’t mean it isn’t ‘engineered’, another absurd contention.

I don’t work in biotech, and also don’t take kindly to being called delusional or a liar. The actual bottleneck isn’t human trials it’s better drugs, and even if trials were the bottleneck, why have you decided that bioengineering needs to be able to design a drug with guaranteed > X% chance of working before it gets to be called engineering? Also, you are ignoring all the other industrial, environmental and agricultural applications of synbio.
> I don't recall ever having a single supporter in my claim that a person's genome is private medical data.

Huh. In Canada, that's a settled question. It is, at least with regard to e.g. a medical record that contains genetic information. We're also looking at laws which prohibit discrimination on the basis of genetic information.

Though more directly to what you're talking about, I think it is in fact legal for a private citizen to collect discarded biological material from a person and sequence it. A company would be prohibited, however. I am not a lawyer, though.

> The reasonable expectation of privacy simply does not apply to things one has thrown away.

That can be fixed by statute. While the law is similar here in that items discarded are no longer protected by the constitution regarding search and seizure, statute prohibits a company, for example, from collecting banking information from discarded paperwork in the recycling.
Not wanting to raise someone else’s kids instead of your own is the most natural thing in the world.
This is just... not accurate. The closest I can agree with your description is that (a) getting help on specific questions about the class, is not highly differentiated from (b') having conversations about the class (or about your studies) with the professor. But (b') talking about school and (b) schmoozing are two different things.

Speaking from personal experience (I'm an academic in my late 20s / early 30s, and I know a lot of fellow academics, and we talk about things like teaching and office hours), office hours are for helping students. They're not some kind of country club -- I spend my office hours working on math problems with students, giving study advice, and sometimes talking about my students' academic plans (e.g. recommending other classes for them to take, or telling them about resources they can access on campus).

The injustice in this situation isn't that "rich students are getting unfair help", it's that poor students aren't accessing this appropriate help. Going to office hours, asking professors for help, asking for the occasional (well-justified) extension -- these are not "entitled", they are all perfectly appropriate things to do.

(To add, I see a weird vibe of resentment running through this and a handful of other posts. For what it's worth, I will say that academics basically universally loathe students who suck up to them and complain about their grades. So we're agreed in that...)
First, you are probably not so terrible as you think. Impostor syndrome is very common, everyone gets it at some point. Just work hard, apply yourself. Everyone else is just doing their best. I have 25 years as a dev and I've felt out of my depth, didn't know what I was doing many times.
A defense mechanism that is triggered by a hormone? Doesn't seem terribly far off
It's ongoing. He had been stopped on a technicality related to deadlines, but a new ruling by the court gets him past that.
Interactive page showing the scale of the universe
Prices vs. Quantities [pdf]
It's a poem. I'm getting unstuck, lol
The tracking scripts are what I hate most about modern adtech. Coincidentally, they are also the reason ads are so resource-heavy and slow.
Humans are social animals, so I tend to agree. My hunch is that feeling, on a visceral level, that you are necessary to the people around you in some fashion is what will keep the will to live burning bright. It can be actual or merely delusional - the important aspect being the level of conviction in the belief.
Maybe it means a gravitational insulator?
See also: Truck nuts

https://en.wikipedia.org/wiki/Truck_nuts
i would figure in that parallel universe lol, or if you want to be more general, in some overarching metaversal container leading out to the omniverse at greeter degrees. but that's just me ¯\_(ツ)_/¯
my favorite radiolab episode is about this: https://www.wnycstudios.org/podcasts/radiolab/articles/from-...
IndiGo Signs for 300 Airbus A320neo Family Aircraft
So AWS, if your chief advantage is your operations, then why not open source both improvements you make to third party open source products and your own products? It seems like it wouldn't help your competitors that much since they don't have your operational expertise, and it would help your customers a lot, since they could have a better understanding of how the products work, and even make contributions to fix bugs that effect them, instead of waiting for the amazon team to make it down the backlog.

I get not wanting to pay for the open source software you use. I don't get why so little code is contributed back upstream.
I guess there's no reason not to try this kind of thing if they can do it without destroying any other "ufo" investigators by doing such a terrible job. The universe is so huge it is certain for there to be life in other places, it is extremely likely life exists off the earth in our solar system (at least microbes on mars under the surface). The chance of intelligent life is a whole other matter, but I'd put it at probable. But the chance for that life to get to earth is virtually impossible based on what we know.
Why would you open source the thing you're selling as your competitive advantage?

Amazon is a business, not a charity.
Did Trump Just Spill Sensitive AI Details About the Al-Baghdadi Raid?
I don't disagree. I absolutely think Twitter should draw lines. It's just intellectually dishonest to try and get around it by banning all political advertising, but it's obvious because Twitter doesn't want to take a stance on anything. So they want to act like they effectively take a stance on nothing.

Twitter isn't drawing a line in the sand as much as they are deciding to ban the whole beach and kick everyone off it.
>The disadvantage is that you have to manually add an Envoy container and minimal config to everything you run, which people apparently hate.

Correct me if I'm wrong, but I think envoy (or istio, at least), uses a mutable admission webhook to inject the sidecar into your pod. This means you never have to enter anything into your pod spec.

Edit: I noticed you pointed this out with istio.
Interesting, wonder if that's how they are up and running faster then. I was wondering since I know California has their huge rail project, but missing deadlines and might even have to payback federal funds.

Was also reading Miami has a trolly, the MetroMover and also one of the talk walkable areas. Kinda didn't realize they were that invested in public transport but I guess it is a huge tourist area. Plus also a top walkable city too, however I know other parts of FL is very bad for walkability, was reading that Broward County for example issued hundreds of erroneously jaywalking tickets and also infrastructure for pedestrians were poorly built, such as lacking sidewalks.

Seems like Broward County is one of the most mismanaged parts of FL. Was just curious and looking on the website and if you want to dispute a ticket without showing up, you have to purchase a form "Affidavit of Defense" and then the site to download it says "IMPORTANT NOTICE: All Report and Form Downloads are compressed in a file with an “exe” extension and are available for download within 7 days. If you are not using a Windows Operating System you may not be able to complete the download process or access the contents in the download file."... Wow seems so outdated, have to download a exe? Why not just offer PDFs... I guess Mac users are screwed unless they run a VM. I wonder if library computers would even let you do that, since some block running your own programs. Also seems horrible they charge for digital forms which should be free and cost literally nothing to offer for a download. Wonder if other parts of the US is this backwards.

One of the things I want when I move, walkable would be nice. I think people would be much more healthier if didn't drive everywhere, and then of course it's warm there. Hurricanes is a worry though but does seem like a great area. But it seems like my mind of where I want to move changes a bunch over the years... Seems like like no place is perfect though, part of me dreams of being a nomad traveling full time earning money passively from investments or owning a business managing it remotely.
For example, say that the Green New Deal is a specific bill in a House committee. For some political reason (maybe the Democrats aren’t ready to vote on it yet), the Republican chair of the committee, Representative X, votes in favor of it. Thus an ad saying “Representative X voted in favor of the Green New Deal” is factually accurate while an ad saying “Representative X supports the Green New Deal” is debatably true.
If reposts are a problem for you then you're spending too much time there.
Worth pointing out that there are two Ebola vaccines on the market. One is a recombinant vesticular stomavirus, VSV-EBOV, that was engineered to express an Ebola glycoprotein. It was found to be reliably efficient up to 5 days before infection in macaques. It requires only one dose to be effective, because the VSV will replicate in the host to some degree (asymptomatically) and produce a strong immune response.

There is also another 2-dose vaccine that is actually being distributed. I don't know much about it, but requiring a second dose likely means it's a protein fragment or attenuated Ebola virus, likely making it more heat stable and actually easier to distribute. Compliance is an issue, but it has proven effective in ring vaccination usage (vaccination of those around people who have contracted the disease).

There's also been some initiative to grow human Ebola antibodies in crops and distribute those as well.

As usual, the primary challenge to stopping Ebola spread is the political and social climate in the war torn DRC.
The simultaneous occurrence of this and very high consumer confidence says a lot to me about the widening margin between the poles of the Middle class. Because people taking out double digit loans just to exist probably don't feel that confident.

I think both of those poles are slowly merging with the strata outside of them with a dwindling amount left truly in the middle.
Ask HN: Which tools do you use to measure SMART goals?
I just discovered the SMART method (Specific, Measurable, Achievable, Relevant, Time-bound) to set goals. I really like it and want to apply to my programming projects. I was wondering whether there is a tool or strategy to MEASURE efficiently the progress of a goal ?

In my open source projects, I use the number of commits to measure the progress but I feel it's not enough nor precise.

I would really appreciate knowing the tools/methods/technics used by HN community to MEASURE ?
I've been using Dbmate for a few years now across our entire stack. It does the job perfectly.

https://github.com/amacneil/dbmate
Hah, that was a fun read. Thanks for posting.

It reminds me of the days when I used WinRAR for a lot of things. The password field would only allow entry of ASCII characters but the program will accept any character by copy and paste, leading to a world of pain where certain archives can only be opened on a specific OS with one particular version of WinRAR because the internal parsing seems to depend on both when it comes to exotic characters. Good times and I think everybody have learned to avoid this sort of hiccups by now.
I tried doing this once with Go, hoping for a static binary, but SQLite library requires glibc.

There’s a huge need for a sql-compatible sqite-like database for this purpose in Go.
There is a depressing lack of open standards with these off-the-shelf physical tokens. It's unfortunate that a company's security can rely on the APIs of another company which could go bankrupt and disappear at any time.
There is a delta-v map (not to scale) of our solar system that could be used as the basis of this:

https://www.reddit.com/r/space/comments/1ktjfi/deltav_map_of...