skysight-inc/HackerNews huggingface dataset:
dnscrypt-proxy can now provide a local DoH server that Firefox can be configured to use. So that you can keep using whatever resolvers you want and have your filters, logging, etc. working as before.
For this particular case: if you have GnuPG or SSH private keys, do not store them on-disk. Use a hardware token, such as a gnuk token, or a token with a secure element if you also want resistance against physical key exfiltration. A gnuk-based hardware token can be had in a nice format for under 30 Euro [1] or you could buy a STM32F103-based microcontroller for a few bucks and flash gnuk [2] if you like DIY. If you are a company, invest the 50 Euro in hardware tokens for your employees, one compromised SSH private key means that all the machines that use the public key are suspect.

I don't know what the solution is but it feels like this is a much bigger issue and we need some rethinking of how OSes work by default. Apple has taken some steps it seems the last 2 MacOS updates where they block access to certain folders for lots of executables until the user specifically gives that permission. Unfortunately for things like python the permission is granted to the Terminal app so once given, all programs running under the terminal inherit the permissions.

I fully agree. It seems that the UNIX model is not very compatible with the macOS permission system, but one could imagine defining multiple types of shell sessions, each with its own set of permissions.

[1] https://www.nitrokey.com/
[2] https://salsa.debian.org/gnuk-team/gnuk/gnuk
Most likely due to Waymo being not designed for personal consumer use... but I’d also say they are pretty detached from having to deal with real societal problems.

Self driving cars is indeed a cool technical problem to solve if you asked an engineer, but if you asked society what it needed I doubt self driving cars would be the answer.
Do people actually ship items to buyers on Craigs List? In Canada, Kijiji (the only popular online classified system) explicitly says that you should meet with the seller face-to-face. They offer PayPal payments (being owned by eBay), but say something like "Pay with PayPal when you meet with the buyer" or something.
Its a tragedy they dropped 3D view. Makes it pretty useless for the area around poles
The python3-dateutil listed jeilyfish as a dependency - so I'm guessing that upon installing the fake dateutil, the user would see something like "installing dependency - jeIlyfish" - which, depending on your font, may, at the very least, cause a person to google "python3 what is jellyfish" arriving at a concise description of what jellyfish is from pypi.

Then dateutil calls the code in jeilyfish.
I really wish I could tell the browser to default those to "Nope" for me.
Optimal Solid State Neurons
The Profiler reminds me a bit of PHP Symfony's https://blackfire.io/. Even the graphs (flamegraphs) have some strong similarities (e.g. https://blackfire.io/docs/reference-guide/analyzing-timeline...).

I've used Blackfire for a while, and this type of visualization is definitely helpful for finding bottlenecks in web performance. I've been able to reduce page load by caching big chunks that I was able to see in the graph / timeline.
What you lose is the ability to model objects based on the behaviours that they can perform.

I want to be able to design objects that have toString() and I want to be able to design objects that don't have toString().

The same goes for clone(), hash(), getPtr(), getEndian(), equals(), toBytes(), toJson(), encrypt(), delete(), isNumeric(), toXml(), serializationVersion() or compare().
Only if you're trying to deliberately obfuscate the issue.
It's not really a fallacy. However most people think playing == improving. This is not the case.

The best players I know, and the fastest improving players I know, all review their gameplay and take notes on the mistakes they made. They watch other high skill / pro players and take notes on what they do. They practice PERFECTLY, over and over and over (i.e. executing a combo flawlessly 20 times in a row, if you make a mistake, start over. Now do something else for an hour, then flawlessly do the combo 20 times in a row again). They find good players to play with in high stakes situations, such as tournaments or money matches.

Most people don't improve very much because they aren't actively trying to improve. I know many people who are at roughly where they were a year ago, or just marginally higher.
Back in the 1990s Jeff Shrager (then at the Carnegie institute at Stanford) built a library of algae strains that thrived at different concentrations of O2 and CO2 as a last ditch hedge against climate change. Then he lost funding and the library was discarded.
No. Quoting the manual page:

The alloca() function allocates size bytes of space in the stack frame of the caller. This temporary space is automatically freed when the function that called alloca() returns to its caller.

That would not work, since the code calling alloca() is the library, and you want the to allocate on the stack frame of the function calling the library. I don't think that is possible, unless you make the library function into a macro (perhaps using ?: on the allocation size).
The article is based on how we have failed to achieve 50/50 parity and why that is bad. You yourself have reiterated it as a good goal to chase. But is it? That is what OP is objecting to.

Do you believe if the world was completely fair we would have 50/50 in every industry or is there (shock and horror) perhaps an uncomfortable biological difference driving our interests.
And we tend to drop these hallucinations on high level of cognition. Self driving cars also can have a weirdness censor. No particular intelligence is required to ignore "faulty" sensor inputs or to not act on weird sensor combinations.
The accusations against tech have been a decades long Kafkatrap essentially for the sin of "not fitting in with their expectations and being successful" as a trial where the conclusion is guilty but they must deliberate over what sins. Look at the oldest accusations which failed to illustrate it best. I believe one howler was that "It would make cultures homogenous."

At a certain point you are clearly dealing with bad actors and the default assumption stops being any attempt to accomidate them and starts being to tell them to fuck off.
tldr: the train journey starts in Porto (Portugal), stops in Paris, Cologne, Warsaw, Moscow, Beijing, Hanoi, and ends in Ho Chi Minh City (Vietnam). Total distance is 17.000 km, and the journey takes 275 hours (12 days).
Just an idea: in autocomplete scenarios, jeIlyfish comes alphabetically before jellyfish, while looking like it. That could hijack an install. I don't know if and where autocomplete can be used with PIP, though.
I habitually use a VPN, and Wikipedia does not let me contribute (specifically, edit pages), even if I am logged in. So, I don't contribute time anymore, and given the facts mentioned in the essay, I won't contribute money, either.

Pity, I profoundly admire Wikipedia.
>I'm still trying to get away from Gmail because I know everything I send/receive is parses but the struggle is real.

There's the spying, but then there are also the numerous instances where Google simply terminated someone's account for completely random reasons that their automated system picked up. And you literally cannot ever get a human to talk to you at that company unless you manage to create a social media circus. Just semi-recently a bunch of people got permanently banned (that includes gmail, gdrive, everything) because they spammed emotes on a YouTube stream (something that is fairly commonplace on Twitch, at most you'll get a small timeout on that stream). I think most of them got unbanned eventually, but it took like a week and the streamer trying to raise awareness on social media. If something like this happens to you and you're alone, your account is just dust.

Using gmail or google drive isn't just giving Google your data to look at, it also means that everything you don't have a local backup for might be completely inaccessible to you on a whim, forever.
I recently had the strange experience of writing a Promise.allSettled implementation in Node.js, but it wasn't quite working. I checked Stackoverflow and found an implementation that was almost line for line what I'd written.
I have been working on a Node.js library (very much work in progress and progressing slowly due to lack of time) that integrates libseccomp to be used programmatically inside Node.js whether at library or application level. For me at the moment it's kind of an experimental idea as it can be quite tricky to get everything right and in order without the kernel killing the process by mistake, but at least I think for some of the cases in the category that this issue is in, it will help mitigate it. I believe libseccomp already has official bindings for Python, as well as third party bindings for other languages, but this kind of work has been very successful in OpenBSD with pledge and I think it has been overlooked in dynamic programming languages and Linux in general.
If I had equity in craigslist as a employee or investor I would be furious.

Think about how much value has been lost to offerup & letgo because they literally took over a decade to release a official mobile app. There is no excuse besides incompetence and gross negligence.

There should unironically be employee lawsuits at the management.
1. Generate large amounts of carbon-free energy

2. Use the excess energy to sequester CO2 out of the air.

Now if only there was a proven technology to consistently generate lots of energy that is clean, safe and has plenty of readily available fuel...
Impossible! Java-heads consider this solved! /s
I think they should change it to MIT or BSD or CC0. I've put in my profile that all code I post is CC0. I don't want or need credit for explaining something and a 5 to 50 lines of code. Sometimes the code is longer but it's usually because it's setup for the actual important part. I don't really understand why people feel they need CC-BY-SA.
> > And remember… don’t be evil, and if you see something that you think isn’t right – speak up!

How does this fit in the narrative, when the ones speaking up (right or wrong, that's not the issue here) are being fired?

https://www.nytimes.com/2019/11/20/technology/Google-union-c...
Still they place FreeBSD running on prem hardware in the ISP PoPs as a caching layer because it absolutely makes sense. https://papers.freebsd.org/2019/FOSDEM/looney-Netflix_and_Fr...
I'll try to present a different point of view from the other comments. (Whether it applies or not, depends on the actual context within your environment - which only you and the people around you are privy to).

There seems to be some history to this decision (and probably other decisions), as indicated by your comments:

This standup was imposed after many of the team members that participate joined the company (before that, the standard time to arrive was at 9:00am)

I brought that up to the CEO/founder and he responded that he's open to proposals. I said that my proposal was to eliminate that policy, but he mentioned that "you cannot replace an idea with a non-idea". Then I mentioned that they should at least reduce it, but he responded that if they reduced it, people would start getting in late (which they rarely did before that policy, and if they did, it was for very justifiable reasons).

I find it hard to believe that simply having new hires would have triggered this change in timing from 9am to 8am. Did someone, deemed senior/important, request this change? Is the standup headed by your founder? Were people constantly late to this standup/meeting?

Further, what is the average/median work-ex of team members in your company? Are people able to work largely independently, or do they essentially need face-time with senior members to be productive?

PS: Try not to internally frame this as an "but flexi-time should be there, it is best for developers" argument. Those are not universal truths. They need to be seen in the context of the business/domain you are in, the maturity of the team, and the culture that the company wants to build/promote.

Context: I'm a founder where I have implemented heavy-handed policies after getting tired of people not adhering to basic work-place protocols ("professionalism"), even after informally pointing out such things multiple times.
Would sticking to the OS upstream package manager be a safer option compared to installing from pypi directly?

How often does something like this happen with packages in the CentOS, epel, or Debian repositories?
Ask HN: Is there something better than screencast?
I'm wondering if there is a way better to do communication rather than screencast ?
Luo Yonghao's Black Technology Conference
Examples of APIs that provide a "LastModifiedUser" result:

* https://docs.aws.amazon.com/systems-manager/latest/APIRefere...

Huh. Turns out fewer of the ones I use than I thought provide that level of detail. That just happens to be the closest approximation of what I'm currently trying to automate.

Anyway, there are several API endpoints in Lambda which supply "LastModified" but none that I can find supply "LastModifiedUser".

* https://docs.aws.amazon.com/lambda/latest/dg/API_GetFunction...

* https://docs.aws.amazon.com/lambda/latest/dg/API_GetFunction...

* https://docs.aws.amazon.com/lambda/latest/dg/API_ListFunctio...
What happens if, today, 4th December at 13:05:00 GMT, the UK specifically stops using coal is that it switches from exporting 802 MW to France to importing 1290 MW from France.

Right now, even though we’re pretty close to the Winter solstice, the UK is producing about 1.5 times more electricity from solar than from coal.

Yes, there are other fossil fuels besides coal in the UK, and yes renewables only supply about a third of the UK’s electricity right now, but coal itself is practically dead.

https://gridwatch.co.uk/
Putting a URL in a comment still requires you to share the rest of your code does it not? The SA part of CC-BY-SA?
Terrifying but understandable. We need better ways to stop this but I'm not sure how...

In the meantime, store your private keys on a security device like a YubiKey. I use it simultaneously for all signing, encrypting, and authenticating (SSH as well as PAM to my workstations).

Be sure to set a strong PIN on the device. And have a backup!
There are giant voids in the hierarchy between new and established users and between long term editors and the people above. These are mostly sustained by overworking people which in turn is caused by the crappy software.

That there are rules, eh I mean guidelines, is somewhat of a joke without means to enforce them. Disagreements across the void are more often than not resolved by ignoring the lower ranking editor. The concept of consensus[sic] is truly a joke with no clear path forwards. Money doesn't solve anything apparently.
I used to play table tennis against my grandfather when I was in my mid teens (he was on the young side). At first, I needed a 15 point head start for it to be close (first to 21). After playing every day for a couple of months we started on equal terms and I only mostly lost.

That was fun! I learned and improved but also every point I won was a victory. Had I played against a professional I'd probably never have won a point, never have got better, and quickly got disheartened. There is just a limit past which the skill gap stops things being fun imo
Right? I keep thinking that the first place to start on a better C is to ask what needs be removed — not added. Once the “bad parts” are removed, what ergonomic features need be added back in?

For starters: implicit coercion is out; weak type aliasing is out; automatic binary serialization of aggregate types is out; etc.
India's Sacred Groves Are Disappearing
Nobody is calling Musk an expert in this comment or in the article.
Yep and the problem I have with that is that you can be sure it will be used for everything else including tracking my movements in real time and using them against me at some point or for insurance companies or some other org I don't currently know about.
I've done something similar in C type languages to switch between blocks of code:

/*/
This block is inactive
/*/
This block is active
/**/

Just swap the first star to two stars to flip between them.
WOW - that takes a lot of discipline! How in the world would this scale on an Enterprise level (which I would assume would be the primary target)?

Also -- this specifically exploits IPv6 DNS information: You're checking that manually even at your small scale?
Modern antivirus software, to me, feels like a virus. Norton and McAffee are especially guilty of this. They install browsers toolbar, do search engine hijacking, constant nagging. They became the software they were supposed to protect us against. I finally convinced my dad not to renew his Norton subscription.
Your first assumption (that cars are less regulated than guns) is wrong, why refer to the rest of the post if I can just show it's wrong.
If we cut the trees and ship them somewhere they will not decay(south pole?). And then grow new trees and do the same thing again. That should remove carbon from the carbon cycle. Is this doable and sensible?
United orders 50 new Airbus long-range jets to replace Boeing 757s
It's up for the attacked (the US) to decide when the line is crossed and how to respond. Russian strategy is to confuse as mush as possible possible. They do cyber attacks, assassinations and political operations in the western countries.

Obama used covert action against Russia in response to election meddling. "Obama used covert retaliation in response to Russian election meddling." https://www.washingtonpost.com/news/monkey-cage/wp/2017/06/2... Trump is not responding.

Is hybrid warfare a warfare until it includes conventional warfare in the mix?

https://en.wikipedia.org/wiki/Hybrid_warfare

> Hybrid warfare is a military strategy which employs political warfare and blends conventional warfare, irregular warfare and cyberwarfare[1] with other influencing methods, such as fake news,[2] diplomacy, lawfare and foreign electoral intervention.

> The U.S. Army Chief of Staff defined a hybrid threat in 2008 as an adversary that incorporates "diverse and dynamic combinations of conventional, irregular, terrorist and criminal capabilities".[9] The United States Joint Forces Command defines a hybrid threat as, “any adversary that simultaneously and adaptively employs a tailored mix of conventional, irregular, terrorism and criminal means or activities in the operational battle space. Rather than a single entity, a hybrid threat or challenger may be a combination of state and nonstate actors".[9] The U.S. Army defined a hybrid threat in 2011 as "the diverse and dynamic combination of regular forces, irregular forces, criminal elements, or a combination of these forces and elements all unified to achieve mutually benefiting effects".[9] NATO uses the term to describe "adversaries with the ability to simultaneously employ conventional and non-conventional means adaptively in pursuit of their objectives"
Predicting Lonely Twitter Users by Their Tweets
What specific requirements or improvement would you like ? What itch doesn't it scratch for you ?
I am puzzled here...the desc does not match other stuff he did to trigger the judge order or is there other stuff you have not disclosed yet?
I think what the grand parent was hinting with Google Analytics is data collected outside of what's stored directly in the Google account. If you visit a site that has Google Analytics on or if you fill a Recaptcha, do they match this with your Google account and store it somewhere, outside of your account? And is this data available to third parties?
Programming Languages Vital to Learn in 2020
Founder Manifesto
Which is awesome. Standing on the shoulders of giants and all that.
I think the key here is that jeIlyfish had malicious code in it, and the fake python3-dateutil imported jeIlyfish. Even if you were examining the source for malicious code, you might not notice the difference between jellyfish and jeIlyfish, I guess.
Visiting Britain’s Political Prisoner (Julian Assange)
Why do you want a car with an inscrutable decision logic?

The first thing that has to happen is a black box that has to explain the why of any disturbance or crash. It is notoriously hard to actually extract the reasons for any action from an ANN...
Listing some sorts of items costs money. I recently sold a used car and had to pay them a small fee.
Maybe the future is in fully sandboxed/containerized apps, where each action outside of sandbox/container is confirmed by the user.
How many blog posts receive that level of interaction?

And yes, actually, I do find tweet streams to be engaging. It has evolved into a different writing style that suits the medium well.

I should write a blog post about it.
GrapheneOS
I largely agree, but would just clarify that the players in any economy, capitalist or not, can be both people and companies/legal entities. The more globally oriented modern society means that any player of sufficient resource can implement multiple, compartmentalised strategies for various aspects of that resource (eg. various taxes, corporate structure, government incentives) under differing rulesets.

If a ruleset becomes too onerous (which there is evidence for in modern settings like Zimbabwe or Venezuela) then a player may decide that the utility of the society is not worth the loss in resource and remove themselves from a game which enforces such a ruleset. In all other cases though I agree completely with your insight.
I agree, but you don’t need to learn how to use a task-definition file. I would actually advise against it. You can create your entire Fargate environment with CloudFormation.
This is literally what SELinux does, and has been able to do for years. We don't need "default block lists" - we need solid SELinux policy in all distros.
The Cannonball Record has been broken again
I find it disturbing how popular science articles on climate change seem to find it unimportant to convince the reader that human CO2 emissions are causing most of the temperature increases the earth has experienced in recent years.

Here's a challenge to illustrate my point. Where can I find the best popular science treatment of the specific question:

How do we know with certainty that human-produced CO2 is responsible for most (or all) of the temperature increases the earth has experienced in the last 100 years?

I have looked for such a treatment and found... nothing compelling. This is especially worrisome given that nebulous ideas of what caused previous ice ages and numerous interglacial periods within them.

If the source of previous events that grew an ice sheet 1 mile thick over New York and then melted it completely 12,000 years ago isn't understood, then how can anyone expect smart non-experts to jump onboard the notion that we know what's causing warming in the last 100 years?

This question relates directly to the article in the sense that we as a species are very good at causing unintended consequences. Sulfa and penicillin were seen as wonder drugs and started to be used everywhere prophylactically and misused. We now face the specter of planet-wide extinction events based on antibiotic resistance.

Pulling vast quantities of CO2 out of the atmosphere could lead to unintended consequences on an even larger scale without a solid understanding of the system we're dealing with.
Apple admits iPhone 11 Pro still collects location data even when told not to
When you drag the hyperbolic plane it moves and redraws. How is this translation of the cells calculation done?

This is very cool.
America Braces for Possible French Fry Shortage After Poor Potato Harvest
Laws of war require to wear uniform, even for cyber soldiers. If they are not wearing uniform when doing their informational attacks, masquerading as civilians, then it's just act of war crime. There is no need to update the law.