skysight-inc/HackerNews huggingface dataset:
As a younger developer, I feel like I would have enjoyed the work of writing code for those sorts of machines more. These days it's just too easy to throw a bunch of junk at the wall and seeing what sticks.

I would have loved to be able to slow down, have an incentive to really know my stuff, think through all the possibilities and write out a few lines of beautiful, efficient code.

I suppose I can still do that with discipline -- but it's too easy to lean on the debugger, and even if you want your code to be clean, the codebase you're working on isn't necessarily going to be.
Sounds a lot like digital computers in the early stages.
Do you refuse to take a car to the airport?
Using Koin for Dependency Injection
R&D in general (but, in particular, engineering, innovative software development and other highly-trained CS-based roles, life sciences research), highly-trained managerial roles in finance, accounting, operations management
Put yourself in the attackers shoes. Your goal is to spread this to as many machines as possible. The best and easiest way to do that is to add your library as a transitive dependency. What better way to infect people than to get everyone who ran `pip install numpy`? As for getting it in, I'd push it to older projects as part of a "styling cleanup" PR because there's so much noise in the diff anyways. Imagine a PR to a project adding a transitive dependency for python3-dateutil. Most people would merge without looking twice, especially if you add some scary "this deprecates py2 support" to the PR.
I have been thinking about how to implement that after the MAX starts flying again. Flight search interfaces don’t seem to filter on equipment. And of course, equipment gets changed at times, so you may book one aircraft and have a different one swapped in on the ramp. I wonder if after you have checked in, and the airline swaps in a MAX, if you can get credit for your ticket if you refuse to board a MAX? I would guess not. (Yes, I know airlines try to avoid changing equipment because it causes reseating hassle and crew scheduling hassle. But it does happen)
They also will often install their own trusted root certificate and then MITM all HTTP/HTTPS connections. Often, this MITM will significantly reduce the cryptographic security of the connection over the public internet [1].

[1] https://jhalderm.com/pub/papers/interception-ndss17.pdf
Looking at the bottle of vermouth while stirring the gin provided enough vermouth for Churchill and it provides enough for me.
but it may also mean far less chance to innovate production practice.

If vertical integration is always good, the ideal situation is a single producer for any kind of product and no suppliers, which doesn't seem to work too well either.
What part of the Github ToS would that violate?
I have the same issue, AWS pages are not returning any IP address.

dig lightsail.aws.amazon.com @1.1.1.1

; <<>> DiG 9.10.6 <<>> lightsail.aws.amazon.com @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7818
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1452
;; QUESTION SECTION:
;lightsail.aws.amazon.com. IN A

;; ANSWER SECTION:
lightsail.aws.amazon.com. 10 IN CNAME lbr.lightsail-lbr.com.
lbr.lightsail-lbr.com. 10 IN CNAME ap-southeast-1.lightsail.aws.amazon.com.

;; Query time: 4 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Wed Dec 04 23:32:58 +08 2019
;; MSG SIZE rcvd: 138
The problem is convenience vs. security, and we all know that even knowledgeable users will often sacrifice the latter for the former.

Technically on many OSs you already have dozens of ways to achieve what you're saying. You could spawn a VM, use a different user, use some container framework, use SELinux, etc... The problem is that usability is generally terrible. Or maybe not terrible but bad enough that many people will start mashing the "allow" button indiscriminately when they're in a hurry and want the thing to Just Work. There's only one thing I know for sure how to do with SELinux without having to lookup a guide or manual, it's how to disable it.

Look at the modern Linux desktop for instance, you need admin privileges to configure a printer but your sensitive private files are just lying on your home directory with user privileges. That makes no sense.

This is not really a technical problem, that was solved when we invented the MMU, it's an UI problem.
Up to a point. But when you get to the point that an industry is so vertically integrated that only one entity can viably compete, you have a monopoly.
Depends what flavour of SQL you want to use. As pointed out already the DB plugin/DataGrip 'stand alone' app from Jetbrains is not bad, and has pretty wide language/protocol support.

For MySQL/compatible stuff, I still end up back on SequelPro though, because it's much "lighter", IMO.
Creating a Microservice with Http4k and AWS Lambda
Ok, but your private keys are stored in your home directory. No root access required.
There is contention about what this supposed progress entails; if its as great as touted, if we could be doing much better, etc.

This open letter is a good starting point: https://www.jasonhickel.org/blog/2019/2/3/pinker-and-global-...

>There is nothing worth celebrating about a world where inequality is so extreme that 58% of people are in poverty, while a few dozen billionaires have more than all of their wealth combined

I also think the point about changing goalposts to focusing on proportions (the absolute number of people in poverty is increasing) is interesting
How do I allow maps to use my location, but disallow "system services"?
> Large US ISPs can’t be trusted.

It's certainly unfortunate that we've gotten to this point. The net result is that nobody can be trusted: Not ISPs, not Cloudflare. There is a clear conflict of interest in Cloudflare's strategy, and their "aww shucks, we're just being the good guys" attitude is dishonest. At this point, one or many not-for-profit DoH providers (with easy selection of service in your browser or OS) would be the only true solution to this issue.
There's #sr.ht on irc.freenode.net
There has been a bit of research on this[1]:

> I qualitatively analyzed the top 50 clones in that list and was able to identify the source (or at least a source) of the snippets in most of the cases.

[1]: https://meta.stackoverflow.com/questions/375761/how-to-handl...
Economics is laughably bad at predicting real-world economic behavior.
What Happens When You Take a Facebook Break
The person has no rights under that judicial process so it's no defence.
Terminal FM nnn adds sessions, cloud mounts and several other exciting features
Callaba – beta-version of the new communication platform
It seems like Airbus currently is different. Maybe the friction from it being very multinational prevented it from becoming like Boeing, maybe it will have its own big scandal in a month. Who knows. But currently, Airbus does look better.
Best practice: Don't use pip search && pip install. Search for the project site and copy & paste the pip install instructions.
> apparently HN limits the number of emoji per post, I originally included several.

I am surpeised HN allows any emoji an all. Pretty sure they have been totally banned in the past. It seems like the orange heart is now (or has always been) whitelisted. 🧡🧡🧡
Snap packages on Linux do this already

https://ubuntu.com/blog/a-guide-to-snap-permissions-and-inte...
Have you ever heard teachers say that they don't allow cheat sheets on tests because students learn the material better without them?

Have you ever studied for a test and REALLY mastered the material, and walked away with the feeling that you know it inside and out? It's actually a great feeeling. Alternatively, have you ever managed to squeak and get a decent grade despite the fact you only partially knew the material but had prepared a good enough cheat sheet?

I feel like code completion, fast compilers, and debuggers are one big cheat sheet.
What’s the state of mechanical engineering Software tooling / infrastructure On Linux and UNIX-like operating systems? I know Solidworks and AutoCAD are primarily Windows-based software, with proprietary data formats like .SLDPRT/.SLDASM (Solidworks Assembly) and high vendor lock-in. Why haven’t we seen greater adoption of scriptable, composable utilities (like a finite element analysis simulation) that might enable better horizontal scaling and commoditization of complements? Is it because hardware and mechengr is capital intensive already and high capex on software is justifiable? Seems to me like a first principle (software is free to copy) just waiting to be executed on.

Might make entry into otherwise moaty markets like aerospace a bit easier.
I like the idea to solve this on the software side. Be it by peer reviews or by some sort of social network, similar to GitHub, but for security reviews of software. Then you could decide to only install libraries that have a certain number of "good" points on the reviewer network, for example.
An Introduction to Timely Dataflow [video]
Only the cars that are subject to mandatory recalls.
‘I’m Defective as a Human Being ’
This article is so far off base. They really should have done some research. Fail.
I'm sure WMF does some good stuff, but I'm sure the average donator just thinks they're donating to keep Wikipedia alive and online and has no idea about all of the extra stuff WMF does (and therefore needs money to fund). I'm not necessarily saying WMF's stuff isn't worth funding, but it really seems like they're tricking people into paying for it under the guise of keeping Wikipedia running.
It's weird since they are forcing opt-in in this feature if you want to use your GPS functionality in anything else. A force packaging of software features. Allowing it to be disabled like any other system service would be optimal.
I'm amazed at just how little press coverage that is getting. Some public figure says something that's not sufficiently woke and it's on the front page of every news site in the country. China gets caught putting religious and ethnic minorities into camps and harvests their organs and most Americans haven't heard about it.
There's no monopoly here, there's a duopoly. Airbus and Boeing are in fierce competition with each other. On top of that, the Chinese are entering the fray too.
We have lawyers and industry execs to thank for that. They want to squeeze every less penny out of their content across the globe forever. It's ridiculous.
It can be difficult/impossible to get to the bathroom during portions of the meal/drink service in a single aisle aircraft.
That's it. Sorry, didn't know the name of the channel.
Two lottery-crazed bank clerks cooked up China’s biggest bank robbery
Housing is already taxed. In the U.S., property taxes are about 17% of government revenue.

https://www.economist.com/finance-and-economics/2013/06/29/l...
The medium is less than ideal for delivering this kind of information, but it does force people to actually distill their thoughts clearly instead of writing a rambling medium post.

Which is kind of funny, because I assume punch cards forced people to distill their thoughts better, too.

TWITTER IS THE MODERN DAY PUNCH CARD
Well, in the US, as possibly in other places, elections are usually won by the candidate who receives the most corporate support. On top of this, a bipartite political system can quite easily keep out candidates with views that are unpalatable to the rich and powerful (e.g. see how Bernie Sanders was treated by the Democratic establishment in 2016).
Individuals mostly rubber-stamp one of the two mainstream candidates.
> Look at the modern Linux desktop for instance, you need admin privileges to configure a printer

Not for an amount of time that is firmly outside "modern."
i've used united twice this year for international (and internal us) flights and holy damn their planes are dated compared to other companies.
Jesus, some of those images turn my stomach and I can't explain why.
Bananagrams is a great game, especially for people who want to improve their word-generating skills for a slower game of Scrabble.
Yeah, physically visiting a potential Russian asset _in_the_London_embassy_ will get you more scrutiny from the DoJ. I have zero sympathy for this person.
I've had people do this to me. It irritates me so much that I tell them 'your loss'. Someone offered to go get the rest and I called them out on this scummy practice and moved on with my life.
If you break both of them up too much, they may be unable to compete against a major Chinese manufacturer when it scales up.
This post is great. I've never understood why they used punchcards in the past until now.
I'm sure Boeing would have loved to have those orders, but 50 planes is not catastrophic.

In terms of the aircraft group, Boeing has steadily growing 787 orders and deliveries, with about 500 orders yet to deliver.

In terms of their space program, they are close to testing their manned capsule and just got a light touch program review, while SpaceX got put through the ringer.

And there are other aspects to Boeing that I'm not familiar with, but I'm sure don't relate directly to the 737 MAX.

As for Airbus, they have had to kill their A380 program, seemingly prematurely, in the face of declining interesting and cancelled orders. So, it's not all roses on the other side of the pond either.
Exactly. Tax the capital that those other bastards have. My house? Oh, that’s totally different.
The Myth of Talent
You get a single emoji on HN 🧡
> Edit: Just to emphasise - I hope they have fun spending their billions.

Meh (time for my socialist side to come out) they could try and do the Bill Gates Foundation thing. Don’t be cynical — it is making some much needed positive change!

Money = Power = Responsibility (with wisdom).

Exponentially true if you are a super billionaire.
They have not fixed it for almost 3 years - except for a really really tiny attribution only in web that too almost invisible. I challenge you to find it.

This is seriously not cool.
Yup, the complainers on the sell-side should accede that roughly half the
value derived from a sold item is out-of-sight-out-of-mind.
Kinda. There were several variants in the early days, until one version was declared the true and only correct version; every Koran since then has been a copy of that one.
I've been playing around with LineageOS [1] (a FOSS fork of Android) and FDroid (the FOSS App/Play Store) and I have to admit I'm impressed. There aren't a lot of apps but what there are are what I want: minimal, open, and useful. The OS itself has a far more thoughtful UX than stock Android in certain pleasantly surprising ways. But one thing you absolutely CAN do is totally turn off Google Location Services (which continuously scans Wifi and Bluetooth), or not even install them in the first place. Thanks to a neat app called "GPSTest" you can see just how good the GPS is on these devices, and it angers me that Apple and Google both make it so hard to do the natural, privacy preserving thing, which is to rely purely on GPS. It's like having your cake and eating it too! (One neat thing you could do if you can't see a satellite is to cobble something together from an accelerometer timeline starting when you're out of range)

Lineage does seem less stable than stock Android, however. I've had two apps crash, and apps never crashed on me with stock Android. But YMMV depending on what device you have and what apps you use.

[1] https://www.lineageos.org/
I know people that don't think a new airframe will be designed in our lifetimes, and it's hard to disagree. Why is it taking so long?
Prosecutors use a system of “strikes” to engineer nearly all-white juries
Could be related to the new 'Find My' functionality where iPhones report the location of devices from strangers around them [1].

[1]: https://i.blackhat.com/USA-19/Thursday/us-19-Krstic-Behind-T....
>The USG is already putting tariffs on foreign planes.

How so? They can't put tariffs on foreign planes purchased by foreign airlines, and most of the airlines in the world are not American.
> I think the biggest injustice is that return of capital isn't taxed at the same rate as income from labor.

Almost there. One step further and you’ll realize the root injustice is that rent is taxed less than either returns to capital or labor.

Compensation for labor and returns to productive risk bearing or entrepreneurship should not be taxed. Rent seeking, where profit is guaranteed disproportionate to investment of labor or capital should be taxed out of existence.

It’s crucial to disambiguate land and capital (in the economic sense: https://en.m.wikipedia.org/wiki/Factor_payments) when speaking about concentration of wealth.
Note: capital gains taxes are closer to around 15%, not 30%.

They're also only realized when they're liquidated, which makes a big difference.
Does anyone know how the subscription YouTube is working out? They sure are putting a good effort into getting me signed up.
You're right monitoring doesn't stop your key from being stolen, but it might stop your key being used or for the vulnerability being used again.
If you’re in a large organization you do not want an auto-update to mess up something for 10,000+ people who are unable to work because the VPN or whatever other enterprise system/software stopped working.

I’ve seen enough issues this year with Azure and multi-factor sso being down. It makes me weary of Microsoft’s updates. Lots of customers screaming because they can’t access our portals.

Sometimes your vendors have to wait for Microsoft to fix something they broke which complicates it even more.
Some of the cool features available in v2.8 are:

- sessions support (start where you left `nnn`)
- `rclone` integration (mount S3, box, dropbox and what not!)
- mount archives and view/modify without extracting
- run custom commands like plugins (short and sweet commands a key away!)
- copy, move as (edit filenames in editor before copy and move)
- `nnn` will now work with the most minimal `xargs`flavour
- keybind collision checker (for those who prefer custom keybinds)
- allow plugins to control the active directory of `nnn`
- several new plugins
- better support for editing files in detached mode
- and lot more...

The size remains ~65KB still!
I think they can also be brought up on criminal charges in most states they passed through. Their radar detectors and, especially, their jammers are strictly illegal in many, if not most states in the US and yet they just gave the authorities pictures of their illegal setup with their names and faces and testimony that they used said illegal setup to enact willful and flagrant violations of the law. I really do hope the authorities come knocking holding a warrant with this article as the justification for issuing it.
Note that a full consumption measure would also capture many aspects “power in a capitalist system.” E.g. lobbying spending.
That's probably the least of their concerns when they design a plane though.
It doesn't, merely thumbing my nose at authoritarians who think they know what's best for other people.
You're not crazy. I feel the same. Similarly, I was beginning to think that I was crazy.... As another pointed out, I give a pass to heavy applications like my IDE.... but when my shopping-list app is using a Gig of memory and spinning up my fans, then I want to gouge my eyes out in disgust.
> just a mass-market t-shirt

The very idea of a "market" which is a "mass-market" and a "t-shirt" as a clothing item, which then become together a "mass-market t-shirt" (meaning globalised production chains, exploitative corporate governance, fast fashion, conspicuous consumption, etc) is already in itself an example of permeating "American culture".
Canonical Announces Ubuntu Pro for AWS
China doesn't need to keep them locked up. China has the largest rate of organ transplants in the world, the highest rates of executions (actual number a state secret) yet has low rates of organ donors with trial registration schemes only starting within the last decade. Guess where they get the organs from.

Journalists investigating the suppression of Falun Gong estimated that approximately 60,000 convicted members were executed and their organs harvested. People are routinely arrested and never heard from again. In some cases families have been told a relative was executed years previously, but often they hear nothing at all.

In 2008 China's own deputy health minister estimated over 60% of transplant organs were sourced from prisoners, but Chinese officials have clamped up about this in recent years. They have occasionally said that this source of organs has been excluded, but there's no way to verify this as rates of donor registration aren't known, rates of executions are a state secret and none of the people or facilities involved are known or open to investigations.

So yes, sure, just like the USA.
That's too broad a statement. There are some theories in economics that work very well, like supply and demand, or arbitrage theory. The idea of the cost of capital is also a fairly well-trodden one, it is taught in business courses, used on wallstreet, and seems to work in practice.
If someone tried with iOS 12/11 and it didn't happen, this would be the most likely case.

For the unaware, iOS 13 apparently sends the Find My iPhone location of other phones to Apple. https://www.wired.com/story/apple-find-my-cryptography-bluet...
Does PyPI offer package notarization and make that observable in the lockfile or the installation logs? Or offer optimized SEO for notarized packages over those not notarized in package search? If that’s not there, and I don’t see it as part of the PyPA roadmap, it might be a good first step to take.
The selection of the function to use contains information. Once a function is given (e.g. the function specifying the x64 ISA), the function stores no information, it is immutable.

(Sorry about replying so late, I know it's unlikely you will see this, oh well)
Could Python be retrofitted with import flags, much like the openbsd pledge? Eg you could import a library but not permit file io or network access -- that would snipe these kind of attacks, and it would be a reasonable restriction for many libraries
>This guy was a public figure who associated with a party under investigation, he was not directly involved.

Martin Luther King Jr was just a preacher advocating peace and love for all man kind.

The FBI was tasked with surveilling King at the request of J Edgar Hoover in 1963 (a full 5 years before he was killed). [0] [1]

Powerful people are threatened by those who ignore their wills and feel compelled to stop those people by any means necessary.

Nothing new here imho.

At least not new in the last 50+ odd years.

I imagine this has been happening since the dawn of time.

[0] https://en.wikipedia.org/wiki/Martin_Luther_King_Jr.

[1] https://en.wikipedia.org/wiki/Citizens%27_Commission_to_Inve...
They are putting tariffs on foreign planes purchased by airlines in America. It's mentioned in the last paragraph of the linked article.
Reading that stressed me out so much.
I disagree, despite how much the hyperbolic posts I see on this site annoy me.

Assuming good faith, hyperbole is at worst intellectually lazy. It is, however, sometimes a useful rhetorical device.

Snark, on the other hand, is directly disrespectful of the content it is replying to. This signals that the snarker is not going to discuss the subject in good faith and disincentivizes further discussion.
Isn't playing with your phone while driving also illegal?
Show HN: I made a SwiftUI component so you can drag anywhere to dismiss a view
> Surely you are kidding. If that were true, why doesn't OCaml curb-stomp C in benchmarks?

You are confusing predictability with performance. OCaml is way more predictable exactly because it generates way more straightforward code.

On the other hand, GCC could do all kind of stuff, generating any sort of assembly. It can even rewrite fairly complex math functions, simplifying them.

Parent was talking about predictable ASM, not about performant ASM.