skysight-inc/HackerNews huggingface dataset:
Regardless of the type of environment me or you thrive in, I was just giving my interpretation of his blog post:
http://dtrace.org/blogs/bmc/2019/12/02/the-soul-of-a-new-com...

Here is the particular passage I was refering to:

> And most important of all (with the emphasis itself being a reflection of hard-won wisdom), we three share deeply-held values [....] — and employees will be proud to work for.

> And I've never seen him take down people, except Larry Ellison, maybe, only code, technology,

Somebody wrote that code, or built that technology.

Note this is nothing to do with whether the code is rubbish or not, it's a about a communication style and a mindset that doesn't care or think about the person behind that code.

I'm sure he didn't mean it, but the endless taking down appeared to get to some of his colleagues, and perhaps because he didn't mean it, he didn't realize until it was pointed out to him.
No info on installs but some more details on each:

https://libraries.io/pypi/jeIlyfish

https://libraries.io/pypi/python3-dateutil
How to Apply Ethics to AI
I love how their product screenshots show a 2 BR Victorian in San Francisco for $2,000 / month. At least they're honest about how many scammy fake listings are on their site.
Looking forward to have this capability in Julia.

Is some concept of language support for traits/ interfaces and/or static typing part of this effort?

Also, would there be different levels of leanness for the static compile? I can see some people wanting binaries that use a minimal runtime or GC, but no heavy JIT etc so that a larger set of programs can be distributed but at some tradeoff.
Plenty of people have criticized Wikileaks and Assange for not following a 'responsible' style of disclosure of leaked materials (usually thought of as aiming to minimize collateral damage such as spies operating in the field having their cover blown). Contrast their behaviour to how the Snowden stories were broken for example.

Of course it's more nuanced than that but I don't think it's right to say the criticism is all just shooting the messenger or character assassination.
This is something that can absolutely be decentralized. Problems aside namecoin shows that it can be done. The entire domain name system needs to be overhauled, central certificate authorities need to be avoided.

The internet in general is infrastructure, and protocols that are increasingly controlled by governments and organizations in bed with governments.
It should be the default that they are protected though on all os. We should not automatically trust locally installed apps anymore. They should be sandboxed by default like on Android and they should ask for permissions as they need them.

Windows and Linux need to get with the times.

My dev env should be sandboxed like everything else. Git can have ssh permissions but not every random tool from pip or the ceasepool that is npm.
Firstly see my comment above, China and india take climate change more seriously than any US government ever did and invest more than anyone else in renewables.

Secondly,you are kind of right, the IPCC already has calculated that to keep the rise to 1.5C is only possible if we invest in negative emissions, that is pulling carbon out of the atmosphere. This is never discussed in out brain-dead media, as obvious it is much more expensive to pull carbon out of the air than not to emit it in the first place.
That's kind of amazing. Is it common for wealthy entrepreneurs to create self-funded projects like this?

Sounds like some kind of internet-philanthropy...
China is trying to avoid importing oil and reducing pollution in its large cities. Electric vehicles solves this problem.

Coal is cheaper and they can dictate exactly where they’re built.

Moving 1 billion people a year by high-speed rail is far more efficient and flexible than by plane. 20,000 miles of rail in a country the size of the United States makes perfect economic sense.

China is making its decisions for reasons other than climate change.
SEEKING WORK | Remote - Hiring your dream team just got easier.

The tech stack we now work with: Node.js, React.js, JavaScript, Python, Django, Flask

Couple words about me, my name is Alex and I am a freelance full-stack developer with 8+ years of experience. I've co-founded a software company called BluePixel, where my team and I help start-ups bring their ideas to reality.

Our last client was a SaaS startup (oriel.io), where we've worked with some of the largest news publishers in the world, The Guardian, TI Media (former Time Inc), just to name a few. We helped them solve their Ad-blocking problems and later we switched our focus on GDPR tools.

On top of that, we've previously worked for Adobe, IBM, Avira, and others.
Some of our latest freelancing projects are: oriel.io, moldr.io, yournet.io, careradar.co.uk, relocately.com

If you’re interested in hearing more details about us and how we can collaborate, we can have a call or a chat.

Our website: https://bluepixelgroup.com/

Email: alexm [at] website above or contact us directly on the website.
This is all incredibly fascinating, but was anyone else's first thought "geez, look at those incredibly uncomfortable chairs/desks. How did they manage?"
How to Discuss Founder Compensation with the Board
No. Not an act of war: an act of embarrassment. Merck should be shamed.

Can we stop calling these things "cyber attacks" or "hacks"? I think "gross negligence on applying even basic information security" and "a focus on security theatrics" fit much better.
The tech is interesting, granted. And I find the overall idea of it quite beguiling from an outlaw/risky/renegade POV. But I can't help but feel it's still massively irresponsible from both a public safety and environmental perspective.

It's one thing to drive your car into a tree in the middle of nowhere at 120mph, quite another if you drive it into someone else obeying the speed limit and going about their day.
This is part of why I install my Python dependencies from downstream Linux distro repos. I never use virtualenv. If a distro is missing a package I need, it's a simple process to put it together, and the additional steps and checks built into the process stop close to 100% of these issues. Getting a human here also lets you do things like patch out telemetry or other anti-features.

Software repositories without a human review process are a bloody stupid idea.
Complete false equivalency. Exploiting user data deliberately, when you technically mention it in a thousand page legal document, is completely different from distributing malware because your dev machines got infected.
I've got Symantec endpoint protection on my work laptop, using WSL and doing an npm install causes the laptop to Blue Screen everytime.

The bsod error indicates it's Symantec.

My solution is that it seems to be because it's creating so many files so quickly, so I made a power profile that sets the max cpu frequency as 5%, it takes longer but doesn't break the computer.

In comparison windows defender is slow but works. Haha.
The point is that if you change the type, existing calls to country.toString() will still compile. (Normally, fixing compile errors is a fairly reliable way to do this kind of refactoring.) That means you can’t guarantee to catch them all, so there’s a risk of modified behavior escaping into production.
Genius Allegedly Caught Google Stealing Its Lyrics with an Ingenious Watermark
I once sold an iPhone to a 16 year old. I said "I want $300 but I'm willing to negotiate" and he said "okay, how about $350?"

That was a good day.
I totally misunderstand how does it work. Can anyone recommend me something to read about it?
> You make one wrong move and you know you’re in for 2.5 hrs of pain ...

I mean, why continue at that point? That just sounds silly.
When I first started using Plan 9 I thought it was
great how it (ls)'d give results the same way you
asked for them, i.e. if (cd a; ls) would print 'f'
then (ls a) would print 'a/f'.
There's a fair amount of other solutions to this too.

Things today:

- Protective monitoring. If it's stealing your key, it's presumably sending it somewhere, so somebody alerting should be going off asking clients are calling something external.

- Peer review. Maybe its about time we question whether we should actually be running so many random modules without actually vendoring and reading the code.

- Subscribing to security lists, so the people who actually do the above stop you from using dirty modules.

- Yubikeys, etc.

Things in the future:

- New home directory model. I believe systemd crew are looking into this, so I imagine it'll be hated, even if it does help solve similar issues.

- Newer distro models such as fedora silverblue where every process is isolated. I believe this currently mounts your home directory though, so maybe wouldn't work.

- New FS layout. Putting .ssh keys in something like .secret/ssh would likely make it easier to not mount secrets into isolated processes and help MACs too.
VinWIKI (its founder is the former record holder) did an excellent video where they interviewed the team [0].

I guess it's congratulations to the team, but I would never endorse such record attempts. It's just to dangerous to do.

[0] https://www.youtube.com/watch?v=M6s9o6uIWZw
The constitution does not explicitly grant due process to non-citizens, but statutes and judicial rulings since have generally enforced that non-citizens have most of the same rights as citizens when it comes to criminal investigations. I don't think we know whether or not there was probable cause to believe a crime had been committed. We don't even know what sort of search order was granted. For example, maybe the account owner is not the subject of the investigation, but the account is believed to contain information that would be relevant nonetheless.
> This particular situation doesn't bother me as much as the "Google/Apple/FB suddenly closed all my accounts" scenario

This situation bothers me so much more. Google/Apple/FB are private corporations. If they continue to adopt user hostile practices it is possible for some other company to out compete them in the more or less free market of internet services.

TLDs are government controlled entities administering scare resources. I certainly _feel_ like I have much more ownership over my domain name than I do my Google or Facebook account.
Esolang, the esoteric programming languages wiki
Adopting Value Types: Networking
At least the deep state now lets you know when you're under surveillance / of interest. This truly is progress. In the West usually you don't know. In China, you know. ∴ China > West. But now West is catching up. That's good. The deep state must exist, but if it's opaque, that's worse for individuals. This is a good thing.

edit, to below: >> after arrest? you numbskull, the deep state doesn't deal in arrest. that's police and the courts. the deep state is covert surveillance, influence, blackmail, intimidation and harassment.

in the West, everyone holds their tongue in the hope you go crazy. at least in China you know if you're a target of the security service. no gaslighting is better for individuals.

further example is panoptikon facial recognition surveillance you jaywalk you get a WeChat fine immediately. That's a feedback loop it's actually good for the citizens better than the weird opaque West Germany stasi western-style covert harassment bullshit.

but sure you willingly choose which oppressive psychological torture you prefer to live under. the one where the people pretend it's all in your head or the one where they actually let you know, yeah, you crossed the line. what do you think respects the individual more huh, pal? which has a higher asymmetry of power and therefore is more oppressive huh pal? not so clever now are you.
I doubt Einstein cared what was on his business card, but I'm sure he cared very much about being in the right career position to do the work that interested him, and to have the ability to influence his work and others.
AWS 2006: "Run your workloads on our EC2 instances in the cloud 24/7."

AWS 2014: "Run your work loads on serverless so you don't have to deal with those pesky EC2 instances 24/7 anymore."

AWS 2019: "Click a checkbox and you can have your serverless workloads get dedicated EC2 instances 24/7!"
Sorry to be snarky, but after all this great job, I still have to put the db password in clear text, as an environment variable...

Why not use secrets manager for this? It can even rotate the secret with not much headache.

/edit: I could have a wrapper script that reads the secret and then os.execve()...
Seems like any user of this trick would think of //-style comments and add them to the next language in this lineage. How come this didn't happen until C++?
You can't fix climate change with a war. Modern climate change modeling and concerns grew out of Cold War studies of the atmospheric impact of thermonuclear weapons (referred to as "Nuclear Winter"). Bombing a major country into submission is very likely a humanity ending event because of the amount of material blown into the upper atmosphere (the Nuclear Winter research was itself a direct result of modeling done at Cornell to understand the aftermath of a large asteroid or comet hitting the earth's atmosphere at the end of the Cretaceous era to kill off the dinosaurs). We've reached the point where MAD isn't just mutually assured destruction for you and your opponent, it is for everyone.
I trusted Wikipedia until I've read articles for which I knew aobut the topic beforehand, too. Now.. not anymore. Pretty sure the crazies with lots of times on their hand have won the editing wars.
In the end I think the solution to these issues will be something like what's promised by the Bytecode Alliance[0]. The idea is you give each package its own WASM sandbox with granular control over its permissions.

That solution also has the benefit of allowing you to call a package from any language from your language of choice.

I highly recommnend reading their the article introducing the idea, its very convincing:

[0] https://bytecodealliance.org/articles/announcing-the-bytecod...
I hope to see someone come up with a bright solution to this in the near future and post it here.

One of the most terrifying thoughts is that of losing domains to someone who points them at alternative mail servers thus gaining access to everything that uses email for verification.
There is some irony in this, but it is still a fair complaint
This is my nightmare fuel. Brave New World style
I'm still frustrated that Lambda can't have alias specific environmental variables. Aren't alias' supposed to be used for staging function versions through a release pipeline?
Doctors die. It’s not like the rest of us, but it should be
My skin is crawling/itching just from reading the discussion about trypophobia, and I haven't even looked at the pictures (and can't, because I definitely have the phobia).

I think there are other visual phobias that maybe are even lesser known. I have some kind of phobia-like thing with industrial/mechanical things that are dirty-looking or poorly-lit. It's hard to explain. Also things like dam spillways/etc.

Like, opening up an indoor furnace to repair or check for issues. The dust, the rust, the coils, etc all give me a weird feeling. It's not as heavy or pronounced as my trypophobia. I can overcome it much easier (with strong/bright lighting, etc) but I still notice its presence.

--

Also, I'm not sure if "phobia" is the best term or not either. For me, in some cases there can be some kind of fear or disgust involved. But mostly for me it's not any kind of mental analysis ("ew, gross", etc) it's just a reaction. Looking at the pictures just immediately induces an unsettling feeling, crawling/itching head and skin, etc.
> The most profound issue, however, concerns the meaning of quantum supremacy. After all, it doesn’t take qubits to solve important quantitative problems faster than any classical computer. Any carbon atom can “calculate” the solution of a very important practical problem—how does carbon behave?—simply by doing its thing.

The author [1] is trivializes the notion of computational machine. Calculating using a classical/quantum computer vs doing the experiment, differ in at least two important respects.

(1) Computers are fully programmable while experimental setups are usually specific to calculating a choice few parameters. The universality of various computational models implies exactly this: a well designed physical machine can simulate any other physical system, assuming you have the correct model of the system. A carbon-spectra calculating experimental setup does not have this universal programmability.

(2) A computer often yields the correct answer with a lot fewer resources, again assuming your model of the simulated system is correct. This is because, a well designed computation can ignore unneeded part of the model, which the experimental system must include. In fact, computers are precisely useful where we can get such an advantage, and useless where we can't. As the author points out this is not possible for some carbon atoms, and it also is not possible for medical drugs. But it is possible for a wide variety of other systems - say rockets to the moon.

[1] a Nobel prize winner, so take my words with a grain of salt.
I also assumed it was one of those "acquired taste" things - like as a teenager I really couldn't stand the taste of beer but I drank it because all my peers did. Now I love the stuff.

Unfortunately the same can't be said for G&T, much as I want to like it.
Cassandra is an Apache project and will always have an Apache license.

It’s not a startup-driven product that is worried about AWS as a competitor.
A negroni is equal parts Campari, Vermouth and Gin. Varying the brand of Vermouth or Gin has the biggest impact. Subbing out Campari makes it another cocktail. Should be swapped out for another Amaro (Herbally Bitter Liquer) such as Cynar, Gran Clasico or Brut Americano (never Aperol, too sweet). I'm partial to using Cynar (pronounced chee-nahr) which I've heard be called a Sin-Cyn (sin-chin).

You can also try swapping the gin for whiskey to make a boulvadier and see if that more to your liking as well.
Possibly off-topic but who will be Sundar's successor? Who is likely?
This is closely related to the chess strategy of 'simplification'.

If you are 'winning' (here this works for your idea of winning), it's good to trade pieces to get to the end game quicker while retaining the advantage.
Maybe we would be using oberon. But then, go owes as much to oberon as it owes to C.
"... L.A.'s spiderweb of interstates for a total of 2825 miles—Toman and Tabbutt were able to maintain an overall average speed of 103 mph..."

I've driven cross country a few times and I was always happy if I could average more than 50mph over any long amount of time driving. I can't understand how they averaged 103, that really seems impossible without getting incredibly lucky!
I was recently thinking about this. Farming is essentially constant repeated removal of extreme amounts of biomass from a land area. We rely heavily on fertilizers for industrial farming.

What is the ultimate source of most of the nutrients that are used to produce the fertilizers? There are massive amounts of carbon, phosphorous, nitrogen, and potassium required.
You can request an exemption from these IP-level blocks.
That's awesome. It seems like one could up their chances as well by having a caravan ahead of you as sacraficial police lambs.
Do I trust Google to do the right thing? Hell no. Do I trust Google legal to not directly lie to me? I do.

> Google Public DNS stores two sets of logs: temporary and permanent. The temporary logs store the full IP address of the machine you're using. We have to do this so that we can spot potentially bad things like DDoS attacks and so we can fix problems, such as particular domains not showing up for specific users.

> We delete these temporary logs within 24 to 48 hours.

> In the permanent logs, we don't keep personally identifiable information or IP information. We do keep some location information (at the city/metro level) so that we can conduct debugging, analyze abuse phenomena. After keeping this data for two weeks, we randomly sample a small subset for permanent storage.

> We don't correlate or combine information from our temporary or permanent logs with any personal information that you have provided Google for other services.
Agreed. Well, presumably they're going to be arrested soon.
The section "Why carbon dioxide matters" directly discusses that (the link in your quote is broken fyi).

> It completely leaves out the temperature changes in the 20th century and how there were warming and cooling periods despite steady increase in CO2, which quite obviously means there are stronger mechanisms involved (if there was cooling despite CO2 increase in the 60s/70s).

The second graph shows that the warming/cooling is seasonal and that the overall trend has been up, in-line with CO2 levels. I don't understand what you don't understand about the second graph (your question is confusing, aside from explaining how seasons work on earth).
How do you figure that? The aim is to get back to pre-industrial levels, not to keep reducing in perpetuity. Pre-industrial gives a figure we know all current species do OK with, and most seem to have been doing better with. So where's the adverse effect from reducing the ppm by 10 a year - or month (hah, unlikely), until we hit target?
No I don't mean the automata rules, I mean the calculation describing how the cells move when you drag them around.
"bandit" (available in pypi) is a nice static analysis tool - I don't remember if it is able to recurse into dependencies though

[safety](https://pyup.io/safety/) is a commercial product that monitors your dependencies for this kind of shenanigans

LGTM.com seemed to be working in this area - Semmle was acquired by github/microsoft
It isn't. I'll make it public and announce it here by Friday.
Loaded comments page to post this same thing. For some extra info, based on my understanding of the mechanism:

- Lost devices regularly emit Bluetooth chirps with encrypted payloads

- If any iOS 13 devices hears them, it relays them to iCloud (these devices cannot decrypt them)

- My guess is that the relaying device contributes its own GPS metadata. One of the design goals of Find My is that very low-battery devices can still emit location, so it makes sense they wouldn't spin up their own GPS receivers

I regularly bike around with non-Apple Bluetooth headphones. Anecdotally, I started getting some connection breakups at iOS 13 launch that I had never experienced. I'm pretty sure this is my phone briefly giving the Bluetooth radio more time to receive these chirps, and I'm biking by one.

(I was running the iOS beta since about mid-cycle, and didn't start getting these connection glitches until after public launch)

My home automation scans BTLE to augment my presence information, and these brief interruptions sound a lot like the slight interruption I get when I bike into range of my house.
Someone less technical would likely have no idea what happened to their domain. An individual relying on their web presence for income could be massively impacted by something like this. There really does not seem to be a clear way for someone to a) know what the problem is, and b) get it resolved quickly.
Yes, and gmail if you use, you'r gps/gsm cordinates over the past 3 years and more if you have an android phone.

The scary thing as you pointed out with analytics, even if you have no google account google still hold data on you. If you use a private email server google still have a copy of every email you sent to gmail or received and will hand them over as its associated with you.
Heart of an Electric Bird
Linode Employee here:

I've personally checked with our Network Operations team, and ran a test with a teammate. We do not currently block IRC ports.
FBI Defines FaceApp as Counterintelligence Threat
Modern SSH versions only store hashes of domain names in the known_hosts file exactly for this reason.