skysight-inc/HackerNews huggingface dataset:
> In the immigration story, MacDougall shows that the consulting firm encouraged ICE to give less food and medical care to detainees.

I guess this is one big reason companies hire consulting firms - a consultant can act as a mouthpiece to say things you want people to hear, but not say yourself. A kind of moral laundry, absolving insiders from blame. Similarly they could recommend a risky business plan that someone believes in but doesn't want to stick their neck out for - if it fails, blame the consultants and move on.
> nping --tcp --flags SA --source-ip 192.168.12.1 --dest-ip 10.8.0.8 --
rate 3 -c 3 -e ap0 --dest-mac 08:00:27:9c:53:12

Why is Linux accepting packets coming from one interface into an IP address belonging to a different interface? It feels like it is "forwarding" the packets internally, but `ip_forward` is turned off.

Is there any case where this behavior is legitimately useful?
> The grad might be a customer contact collecting and organizing customer issues before presenting them to internal subject matter experts, and then presenting those findings back to the client

This might describe how technical consulting is done at big firms where the output is a product, but when the output is strategic documents... this is grunt work done by the front line analysts with a generic playbook. There is no "behind the scenes" strategy work like there is for dev. Maybe there is a lower analyst or intern that doesn't interface with the customer.
The Digital Pinball Kickstarter Story
Ask HN: How do you plan to work on the feature/code?
Hi,

While building the application feature, how do you plan to work on the specific feature? Like creating the user-stories, gathering requirements?

I am looking to improve my thought-process and cover most of the edge-cases edge-cases as a solo developer.
Any Linux phone is going to be expensive vs. an Android phone for what you're going to get given the low unit volumes. For some, privacy is worth a premium. For others, the ability to just run Linux will be.

That said, I'm probably going to go for the PinePhone as I just don't see the value add of the Librem. $2k is nuts for the dubious value of assembling a device in the U.S. (both because of our current <cough> issues and the fact that the chips, the things you need to be most worried about being compromised, would still be produced elsewhere... so you're paying a lot of money for a placebo) I think the Pine approach makes more sense cost/benefit-wise: just get a Linux phone version 1 built, worry about adding the sun and the moon later. But I can understand that there are those who look at the Pine as being too low-end feature-wise and are willing to pay up for the Librem.
Haven't there been some studies that associate smart phones with addictive drugs? Something to do with dopamine dependency. If true, how do you ween people off drugs?
If you run a NAS at home, you should also setup syncthing. It's replaces Google drive for your phone's camera, seemlessly.
> The Network panel has a new Messages tab. You can observe all messages sent and received through a WebSocket connection.

This is awesome. Definitely a feature that separated FF from Chrome DevTools
How well does it integrate with other financial services? I currently just use Mint because it's the only app that can consistently pull in all my accounts into one place.
This is all very interesting, you should do an AMA.
That thing is $750 and probably performs much worse than a two year old Ryzen 1500X ($159 at the time) on a $105 motherboard. Nevermind a new Ryzen 3500 which is $194.
> Personalized search is not inherently bad.

Maybe, maybe not -- but Google's implementation of it is very much not great. It seems to ensure that I won't get the results that I'm looking for.
Possibly the change could have coincided with humans learning to use weapons regularly during combat. This would have made violence much more deadly and potentially resulted in more violent individuals dying off early.
I never realised that existed. Does the r stand for region?
Dont forget that if you manually update, Firefox destroys your update settings:

https://bugzilla.mozilla.org/show_bug.cgi?id=1576400
Choosing Privacy
As a motorcyclist I fucking hate people who drive and txt. In my state it's against the law and they don't give a fuck.
They can inject TCP data which looks — to the application — like it came over the VPN, but it didn't actually.

The vulnerability here is unencrypted TCP streams running (purportedly) over a VPN. Not TLS streams (HTTPS and HTTP/2.0+), unless you've also got a TLS 0-day.

(And maybe also unencrypted UDP sessions and unencrypted services, but that's less clear to me.)
Estonia (heck, Israel too!) is really good at this - the problem is local tax law. Jurisdictions almost uniformly have rules and regulations such that decision making is deemed to happen in the jurisdiction of residence and declaration. This is more or less a worldwide phenomenon.
How to fix qgrid in Lab – Error displaying widget: model not found
Yes, that's the issue I'm talking about. It already works both ways on CI images, which every customer can grab and install themselves - it simply has packages taken directly from git, as opposed to explicit releases from regular images.

I have said that because of:

>It seems less like a bug and more like a major design flaw/hurdle.

to show that it's not true.
This.

I have done lots and lots and lots of enterprise sales and consulting, and a big part of bringing in outsiders is to provide the illusion of social proof.

"Well, we had the experts in, and they found..."

That sounds really, really terrible when put so cynically, but the flip side of that is to view it as insurance. If you bring the consultants in, hoping that they will recommend Plan A, and Plan A is truly terrible, a reputable consultant will find a way to sell you on Plan B, by couching it as "A few adjustments to Plan A."

So in effect, yes, it is about making changes management wanted all along, but in addition to providing the illusion of social proof, you can also get an extra set of eyes to make sure that you don't completely footgun yourself.

Sometimes. Maybe. If the consultants are good at both analysis and selling management on adjusting their plans...
Thinking about Color
> it's the political cover to make changes they knew they should make all along

Or the political cover to make the changes they wanted to make all along.
One way would be to read a lot of the type of writing you want to emulate.

But you'll get the best results by putting a lot of directed and specific practice into it. Ben Franklin wrote about his method in his autobiography. He would try to reproduce passages he admired from memory. Then he would check his work and repeat until he reproduced it verbatim. Then he would repeat but try to improve it.
This is awesome. It seems like it provides the best info if I search for an artist I know, then click two more artist I know. Then I get a grouping of artists inside a triangle that are similar to those three, most of which I haven't heard of.
This is a very noisy attack, for sure.
There are few details in the abstract but wing length is notoriously difficult to compare across measurers - the standard method of measuring the leading edge of the wing by gently straightening the primaries along a stopped ruler can easily generate differences of 2-3mm for different people measuring the same bird. It can be done for small groups of people who work together - wader ringers (shorebird banders if you are in the Americas) where they deliberately practise to standardise their technique. If the sample sizes are good then the error should be consistent across time so the conclusion might still be sound.

https://en.wikipedia.org/wiki/Bird_measurement#Wing

The good news from this is that nature is splendidly adaptable and able to compensate for changes that occur within a few decades. That says that plants and animals are a lot more robust than we think they are.

UPDATE: One confounding factor is that standards in handling birds are always improving so there's no way of telling whether measurements are comparable across time.

UPDATE: Thanks to throwaway5752 for finding the full text. The birds were measured by a single observer so you can ignore everything I said. Interesting result.
I like awk as a calculator:

calc () { awk "BEGIN { print "$*" }" }

$ calc "2^16"
65536
$ calc "2*16"
32
$ calc "2+16"
18
Selfish people doing selfish things.

Everyone thinks they're above average, that bad things will never happen to them, that they're faster and have better reflexes than everyone else.

And then they kill someone.
This may be a dumb question, but if I'm in the situation where I'm being questioned by the police and need a lawyer, how do I get one (a decent one, not a public defender)? Is there a hotline or something? I've never interacted with a lawyer before.
It's obvious that most of those random crashes are caused by memory starvation. They should have all the telemetry they need to understand and fix it, if only by popping up an error message saying 'Not enough memory to render this page' or even Safari's maddening version of the same message ('A problem occurred with this web page so it was reloaded.')

The only explanation is that they don't give a crap. Very frustrating.

Reading the bug thread cited above, it may even be a case of, "I was able to get Chrome to crash under similar circumstances, therefore it is conforming behavior. WONTFIX."
IP addresses don't "belong" to interfaces in the general case. It's just a hard problem. In fact there are lots of multi-homed use cases where you want to internally route packets across interfaces without an affirmative mapping of what address is supposed to be used where.

For the specific case of point to point VPNs, there's a rule that makes sense. But that's not part of the network stack per se and there's no way to enforce it generically.
The best thing that learning to ride a motorcycle taught me is “always ride like everyone is actively trying to kill you”.
So what’s the point if it’s imprecise? I use both Wunderground and Weather apps on my iphone and both are pretty fast.
haters gonna hate ;-)
Ford dealers sell used cars of all types. My local Ford dealer is where I bought my first Integra (an Acura).
> modern AMD processors support these instructions

... and that's the whole point of the post. AMD CPUs support the instructions, but Intel's compiler ignores that support on non-Intel processors.
electric companies are public utilities.
If this isn't really about packet filtering we could call it something else, right?

xmlHttpRequest became Ajax after all.
Disclaimer: ex-AWS

Wowzer. Amazon, and in particular AWS, sits on a treasure trove of hard-earned lessons abt designing, building, operating, maintaining systems at scale. I'm glad they have began to share some of that know-how with the external world.

I wrote abt longing for AWS to do this some 6 months back [0] as I dearly missed access to those docs and videos that helped me understand so much abt the underpinnings of some of the most staunchest challenges dealt with by behemoth-esque services like S3, EC2, Redshift, DynamoDB, Kinesis, LB, Lambda, Edge, Security to name but a few.

I must point out though, re:invent does have a ARC track [1] which gives glimpses into AWS' design principles.

There's so much they could still share (for instance, abt how they track and run their operations, how they deal with service outages, how they do change management, how they continuously monitor and improve the weaker and slower parts of the systems, how they gear up for launches, how they deal with issues facing larger customers, how they go abt their design process, how they refine their internal tools and processes, the internal tech talks, the review meetings esp the one run by Charlie Bell...), and I'm glad they've committed to be doing just that.

It'd be fun comparing literature coming out of Amazon to what's published by Google et al.

[0] https://news.ycombinator.com/item?id=20251589

[1] https://www.youtube.com/playlist?list=PLhr1KZpdzukfzSjpgH4E5...
It's not just governments. Large corporations too frequently use McKinsey to make recommendations for things they want to do anyway (e.g. layoffs or restructuring). From the client executive's point of view, the money spent on a McKinsey contract effectively purchases credibility for these decisions.
The bits aren't VPN-framed packets; the attack isn't VPN specific. They're just sending ordinary TCP setup packets and ordinary TCP stream packets with fudged parameters until they find the right ones by brute force. It's a really noisy attack that uses weaknesses in packet routing to find existing TCP sessions and inject into them.

It's also, like, an escalation from a relatively high privilege level. You need both a passive network observer (compromised router or ISP) and a noisy, active LAN device (to inject IP addresses that a router would filter as bogons). That's not to say this is crazy hard; these are definitely within the reach of a motivated attacker. Routers were the original the-S-in-IoT-is-for-security, and if you've got an IoT type device on the LAN it's probably vulnerable once you've popped the router.
Agree that the advantage on storage is no ARM-specific. It is what it is on AWS and we have shown that. But the whole point is that the Arm platform is doing great.

The CPU comparisons matter more
1Password X 1.17: New brain, new menu, and even more accessible 1PASSWORD X
Doesn't seem surprising. If it's implementing a specific technical process, there are measurable outcomes that must be met, and your client will know whether or not you met them.

Senior leadership contracting an outsider to tell them how their own industry works and explain their place in it, though, is right up there with asking the Psychic Friends Network for career advice. They're just begging to be taken for a ride.
For two years until the non-replaceable batteries in the used phones wear out, so you'd also have to do it again every two years. Whereas with this, it's expensive because it's uncommon, but the more people who buy one the faster they can cover their development costs or fund further development that makes them more popular and achieve economies of scale, and the sooner it is that they can be making them at commodity prices for everyone.
python
irb
etc.
Wasn't it also because the republican senate stonewalled quite literally anything Obama tried to do, good or bad?
>It seems like you’re just paying people for critical thinking.

That's exactly what it is. Unfortunately most organizations, probably even ones like the NSA, really struggle with doing any kind of critical thinking on their own. This is especially true when trying to decide on a future direction for the org: the org itself is most likely biased to just doing things the way it's always been done. In that regard, having an outsider's perspective, especially one that has also done work at other similar organizations and has taken note of all the various ways other orgs do things and knows what works and what doesn't, can be quite beneficial.
Starcity launches $1k a month rooms in Oakland
> ... Work of a 23-Year Old

This really bothers me. I understand the point of the article is that they're charging a lot of money for an inexperienced consultant and no bias (discrimination) was meant, however, age is irrelevant. There are a lot of very "experienced" 23 year olds, as long as you're asking them about the work they've done. There are a lot of people in their 50s with very little experience (as their actual experience is irrelevant to the topic at hand or their actual experience has been very repetitive).

I think we need to be a bit more conscious of unconscious bias towards age (in either direction).
Cracking the System Design Interview
...at the expense of piston rings and other expensive, hard-to-get-to items. And, an educated guess here, probably increased emissions on the overrun.

Besides, who drives stick anymore? I've driven stick since I learned to drive forty years ago, and I even I admit that I can't do better than a computer-controlled DCT, on performance or fuel efficiency. Next car is either electric (we already have a Leaf), or DCT if we must.
Randomizers are also breathing new life into chess. Randomizing chess has been around for centuries, but especially since the 90s, when opening theory had become so stable that some grandmasters became bored with the memorization. Computers were especially good at that (though these days they've grown past that.)

So they're holding tournaments now with randomized chess pieces. They've just completed the first FIDE-recognized Fischer Random Chess tournament.

[0] https://en.wikipedia.org/wiki/Fischer_random_chess
If you know anyone personally who works at McKinsey, you know them to be brilliant, humble, hardworking, and unfailingly likeable. Think Pete Buttigieg. It's hard to square this with the company's public reputation in anti-establishment screeds.
DDG aggregates from a large list of search engines, but primarily Bing. I don't think it uses Google at all.
For your first point, this isn't hard if you're in the appropriate position (adjacent or upstream), as the post details. There are already tools available that can do all of this, example invocations are also there.

For your other point, they don't need to know the keys (unless the traffic travelling /over/ the VPN is /also/ encrypted). That's the whole point. This is about being able to trick the machine into accepting traffic for a connection, from an interface that the connection's traffic isn't travelling over. If it's plaintext within the VPN, this sidesteps the VPN interface and you can indeed inject your own malicious plaintext traffic into that connection.
I was going to permanently save my browsering history by running all my browsers through squid. If squid's StorageManager supports it, I'd put page storage in Postgres, then use PG's FTS with a light UI around it.
Do Software Engineering teams need a specialized management approach?
Using the old-fashioned blueprint chemical process for modern art
Austria, End Developer and it’s 2 years now. it was worth it because of the tax break
Yes if they have some that are their best deals.
I agree that the maintenance effort differs wildly per app. I don't actually agree that nextcloud is 0 effort post-setup. If you see our forums or the nextcloud forums, you will see how many questions are really just installation and update related.

We have so far not wanted to get into per-app pricing, because we see ourselves as app packagers and not providing support for the app itself. For example, we don't actually provide any support if Rocket.Chat's mobile app has some problem. Making it per-app pricing can mislead people into thinking we support the app. There is also the issue that we might be seen as competing with the app authors (if they have a SaaS model).

The 30 USD is essentially the price for automatic updates, backups, dns/tls management, deployment with security best practices etc. It is also a 'service' where you can contact us if something goes wrong. As you say, if you want to DIY/time is cheap, cloudron is expensive. That said, if you use the DO marketplace image, you get a 50% discount (you will see the discount coupon when setting up a subscription).
Nope:

https://www.sciencedirect.com/science/article/pii/S014067368...
There's no such thing as "the whole web" - it is simply sites with the most money gaming Google better, and Google being happy for that to happen.

There's a lot else on the web, it just isn't surfaced by Google as much as in the search engine's early years.
As a former military leader, the ability to lead is built on a foundation of trust and competence prior to combat. The Army leadership manual is designed as a framework for developing those skills. The military just generally has a higher acceptance of risk up to and including the loss of life. In war, death is expected and factored into the decision making process. You would not see such risk taking in a corporate world. Strict adherence to orders in a life or death situation is required but often those orders are entirely reasonable.

Leading troops in combat is as much a tactical challenge as it is a logistical challenge. As cheesy as it sounds, leadership skills developed prior to and during combat are directly translatable to the corporate world. A great military leader is equally capable of being a great corporate leader. There is nothing specifically in the Army leadership style that could not be applied to a corporate setting.
In the last two weeks, I've seen two drivers with phones mounted on their windshields, watching what appeared to be the news while driving on the highway. Both instances were men, at least 40 or older. It shouldn't come as a shock in 2019, but I was still pretty surprised in the moment. Unfortunately, according to the article, my state has no such laws against this type of behavior.
Randomizers like this are interesting to me because I enjoy seeing people play with them, but hate playing with them myself. I tried one for Link to The Past and thought it was just frustrating. I think the frustration was in that the game was designed in a way without randomization in mind, so when forcing in randomization, it isn't as fun or interesting as a game built with randomization in mind from the start. If anything, it just led me to going back and playing something like Binding of Isaac again. Still cool! Just not for me I guess.
I've been thinking about moving my home server to an ARM-based setup to reduce power consumption/fan noise. My situation is closer to 'glorified NAS' that runs a few additional oddball things, though. Are you just using USB 3.0 to SATA in the cases where such is needed?
Google makes money by people browsing the Internet. If they can make browsing easier/better/faster, they will do it.

This is why they built Chrome and Android too.
Came to suggest the same... hopefully the fines are significant enough to deter this kind of behavior in the future or to get them to provide an "unlock" after DRM servers shut down.
I appreciate the irony of this based on your username :)

Seriously though, changing human behavior is hard. People didn't just start wearing seatbelts, there were years (arguably decades) of resistance and an active effort by many state law enforcement agencies to ticket it (even including an advertising campaign - click it or ticket).

I agree it's a huge problem, maybe even an epidemic. I agree we should not be lenient (within reason). But we have to start by educating consumers if our goal is change and not retribution.
And if you _do_ want to use a google font, just download it from google and serve it yourself.
I wouldn't consider 70s-era Los Angeles "poor" by much of any standard.
Which (for me) translates to making eye contact with drivers whenever at an intersection, stop sign, or looking to see if people’s heads are up on the road (or down in their lap) when passing on a freeway.

Riding a motorcycle is the fastest way to realize how little attention people have on the road / surroundings when they drive.
A Week in the Life of a McDonald’s Cashier
If that would be the only reason holding up the shipment, I'd definitely want to receive my early device (that I explicitely opted in for) before it's fixed.
I have always connected this problem with automatic cars. I haven't looked at statistical evidence, but I think this is a much bigger problem in the US than the UK and I think it's because it's much easier to drive an auto with one hand.

I often see established vloggers and public figures recording themselves with a smartphone while driving and they always seem to be American.

I believe there has been some adjacent research done into the safety of manual cars which has found that they can be safer since they demand more concentration to drive.
Intel is still doing it [1], at least in some of their libraries.

[1] https://www.extremetech.com/computing/302650-how-to-bypass-m...
How to Create REST API's Using FreePascal and Lazarus
Pachelbel Train Horn – Prague Main Railway Station