skysight-inc/HackerNews huggingface dataset:
I think they are just being pragmatic. No one, not even RMS, ever felt that open source needed to be open source from bottom to top, just the final product. You have to be pragmatic in this life. We can't wait for open source processors running on open source hardware on and open source OS compiled on an open source compiler before something gets released. I find it entirely appropriate for them to be pragmatic and use the tools to get done what they need to get done.
why not just tax all phone calls with a 1 cent tax. that should stop most robocalls.
I am using Cloud66 that gives me both the advantage. I push code to github and Cloud66 deploy to Digital Ocean. It's very easy to use and I don't need to manage my server at all.
I was using Heroku before, now I am completely satisfied.

PS: If you want to try this is my referral code (10$ off): https://app.cloud66.com/referral?code=IOwgnqPHIEJwEzG
I should probably emphasize that it's difficult for me to get new things approved, but if we NEED it then money is not a problem.

The response I get is we don't _NEED_ a CI/CD (and haven't had one for years), so they would rather I find a solution that can run on our hardware for free.

I'll add that I enjoy my work environment and they treat me very well, I'm young and I'm known to "like shiny new things". I also have to work on how I pitch why we need certain things, again I'm pretty young so I'm not well practiced in that just yet.
Riot is pretty finished. So you have one fully-baked client, and a bunch of others to choose from if you don't like Riot.

Compare that to Slack, which only has one client, and it gets worse seemingly every day (somehow?).
Bingo. The teaching and counseling crowd are non-technical for the most part and they're not concerned with Django or Ember.

Independent college consultants also seems like a fairly niche market.
One does not exclude the other, in my experience.
I read that as Magical Sky Lizard and... I want to believe.
After reading the article, it's pretty clear that it was credential stuffing and that the writer didn't take the time to understand how it worked. Not sure what security experts they talked to, but credential stuffing absolutely can get all the information described, and the whole part about wifi connected devices is completely unrelated.
They never mention WHERE in Mexico is that rural town exactly, not even the state name. They only say it's in the south. Weird.
It feels like your being obtuse on purpose.

Surely you understand the difference between a part that naturally wears out over time due to friction and wear and tear, versus a part that's delibrately installed incorrectly to cause a malfunction?
I don't know if Apple did a study, and I'm not particularly inclined to look hard for it, because the argumentation from the article series itself is pretty much bogus and uses some weird test setups (like https://www.asktog.com/SunWorldColumns/S02KeyboardVMouse3.ht... and the e -> | replacement game); that, coupled with my real-world experience which every day proves superiority of keyboard over mouse in structured interfaces, leads me to assign very low prior to the validity of the conclusion of that Apple study, as reported by Tog.

(The study perhaps had a more narrow set of conclusions than presented in the article. Wouldn't surprise me.)
There is. http://fraidyc.at/
I doubt this will get much in the way of mainstream penetration. You're never going to see any competitive phone installations of this. It'll probably mostly be for things like portal. I doubt they'd be successful in doing a chromebook competitor either given how horribly tarnished their name is, but it does at least seem more realistic than a phone.
Why on Earth do you think backdoors and ML having any part in the solution?

Telcos peer with one another and trust each other's traffic implicitly, all they need to do is stop trusting implicitly and ask for verification for things like caller id.

A Telco may not know where a call originates but they know what Telco it's coming from and can pass responsibility for fines back to that Telco.

Since no Telco wants to be saddled with fines, they'll quickly pass it off and it will eventually reveal the origination.
Calling for? No. Don't shoot the messenger.

In the first year of flying their most important new airplane, they managed to kill 350 passengers. This is unprecedented in modern air travel, worse than all others combined (including DC-9, Tu-154, and A320). Boeing had information on MCAS's twitchiness in 2015, so why did they allow a second plane to crash? And now they've bungled the grounding, originally suggesting to airlines they might be flying again in May: https://www.nytimes.com/2019/04/01/business/boeing-737-softw...

You must admit, their ineptitude through this whole ordeal is just incomprehensible. I'm sure you're right, and Boeing probably better people in charge of their other divisions ... but, if so, then they need to put them on the MAX!
We might have a different concept of "architecture", but for me it looks like all cloud apps share the very same one. A bunch of (hopefully) cpu bound workers connected to one huge, intransparent persistence service. Not that this is not a viable architecture, but there exist different ones.
Finally, a rival for Fuchsia.
> If you want to block our numbers...the API should return something that tells us that

As a consumer, I disagree. When I send a message to spam, it doesn't let the spammer know they should switch the e-mail address they're sending from. If I block a phone number, that's not something for the dialer to know.
Sounds like an easily abused system.
"appropriate jobs"

most devs have "appropriate jobs" for their skillset. It doesn't follow that the tooling chosen by others before you at that job is "appropriate" or that the language is "appropriate" or that you have any choice in the matter. Most of us don't. Most of us work within the constraints provided. Some of us work to remove or change those constraints.

getting an "appropriate job" rarely addresses these problems and even more rarely makes it evident that they exist before you take the "appropriate job"
I disagree. Some kind of new system that isn't first-past-the-post is definitely necessary, but it won't solve partisanship right here and now. The state we are in has a huge portion of people literally hating the guts of anyone who is in a different party from them. The republican senators who are claiming they won't vote out Trump are largely doing it because they fear not getting re-elected, and a different voting system right now won't solve that, because republicans will still be republicans and see a vote for removal as "betrayal". It would take years before sufficient numbers of new parties would form and start to gain enough traction to get anywhere (I don't think groups like the libertarian party will do great, because they tend to be pretty polarizing, but I could be wrong). I don't call that an easy solve.

A different style of voting might have lead to different election results though, due to the huge number of people who either abstained or voted for Trump because they disliked HRC, and the people who only voted Trump because they are registered republicans and that's that. It would not have lead to people voting in a non-partisan way.

It's gotten so bad that there's a top subreddit, r/ENLIGHTEDCENTRISM, dedicated to making fun of people who don't vehemently subscribe to either Democrat or Republican ideologies.
Blocking all of those would be vastly preferable to what we have now. I get about 5 spam calls a day, so the only thing I can do is disable all incoming calls altogether. Blocking all of the things in your list, while hamfisted and far from ideal, is better than that.
I would rather the drama of bickering with others and putting up with people who disgust me (as a result of freedom of thought and speech laws), than the terrifying tyranny that is China's system. It is also tyrannical what is happening in India right now, with the systematic marginalisation of Muslim people.

We need more decentralisation of power. That's the common problem here, right? Singular governments trying to rule too many people at once? The world has diversity - it's not meant to be a monoculture.
And here I am paying 30ct per KW in Germany whereas I would pay 13ct in my home country, France.

de: https://www.electricitymap.org/?page=country&solar=false&rem...

fr:https://www.electricitymap.org/?page=country&solar=false&rem...
> Why do you need me to name a person impacted by cancel culture? The discussion shouldn't latch onto one person's particular situation. I have enough empathy in me to believe that some people impacted by cancel culture regret their actions, and are given no opportunity to make amends, and I think that's toxic and it encourages people to be further more toxic, because they're given no other option than to double down. Cancel culture is a very new phenomena and is not as old as electricity or democracy.

I think the issue here is that you haven't given any clear explanation of what you believe "cancel culture" to be, and seem unwilling or unable to give a single example of it.

Without an example or at least a clear explanation, it's hard to evaluate your concerns about people "given no opportunity to make amends". For instance, I recall pewdiepie said the N word on stream and got some backlash, apologized, and moved on with his very popular channel. Is that cancel culture?
Bad faith fucking with people that are exercising good faith isn't taken seriously enough.
Before betting on stocks, bet on ideas for products
Well, not federally, I guess it's an opinion question re: how you feel about states rights.
Haven't you heard? Nuance isn't a thing anymore. All decisions are binary. Get with the times.
Riot should be way lighter these days, at least on web. We reduced RAM by 5x by lazyloading about a year ago.
Eye OS, because they will always be watching you?
Regain Control over Your Inbox with a Custom Domain, Wildcard, and Aliases
Has anyone had experience with both Matrix and Mattermost? What are the main differences between the two?

Apropos of nothing, currently I am running:

* Signal
* Wife
* Family
* Google Hangouts (web)
* Friends and ex-coworkers
* Slack
* Vendor A
* Vendor B
* Team C
* Team D
* Keybase
* Some friends
* SMS
* My Stepdaughter
* Skype
* Coworkers too stubborn to open Mattermost or change what they do
* Mattermost
* Coworkers
* Various teams and groups
* Remote Desktop
* Microsoft Teams
* My team
* Client coworkers
* Other teams at client
* Microsoft Skype for Business
* Chats from people who don't use MS Teams
* Meetings
* Gitter
* Spacemacs chat
* IRC (web)
* Various random channels

Out of all of those, only SMS isn't on my macbook, and I'm sure I could put it on there if I wanted to.
This is a high tech solution which just won't work for lots of people. Example: The local medical practice uses simple mobile phones. Think old Nokia with 3-line menu to display and no camera. You want a call back from a doctor on call and have no internet access. How would you do any pre-auth/whitelist in that case? How would you do it if you only had a land-line on POTS?
synapse. ruma is pretty alpha, alas.
The authentication required by the law. Doesn't stop them from offering a "premium" blocking package.
It's not easy, margins are thin but it's the nature of the beast. We were able to maintain a 20% - 25% margin over the past few years.
So is the high latency reputation from satellite links just due to low end hardware on the satellite?
I used to do software for large fruit sorting machines. Nothing quite like standing in a huge multi multi million dollar buildings built to house a number of these machines all working together through your software and for the many many many thousands of concurrent actions working in perfect harmony at speed. Especially when you give those machines "smarts" and you see it adapt to changes in the environment / deal with problems. It was fun setting it all up testing, all hands on with the electronics/mechanicals

Also, nothing quite like the terror of when it all goes horribly wrong and you end up helping clear a mountain of fruit turned into unplanned jam(jelly) and everyone turns and looks at you....
For causing harm to the nation, direct election of senators is second only to the commerce clause abuse. (and both are of questionable constitutionality)

Senators appointed by state legislatures could be counted on to oppose any attempt by the federal government to harm the states. Today we have huge problems with unfunded mandates and with funding being used to coerce states into making state law.

Example: states don't get highway funds unless they make the drinking age at least 21

That kind of stuff is all over our law. With senators being chosen by the states, it wouldn't happen so much.

BTW, regarding the constitutionality: our constitution prohibits a state from losing representation except by consent, but not all states ratified the 17th Amendment.
http://exple.tive.org/blarg/2019/04/26/synchronous-text/
If you mean running it all in lock-step cycle by cycle, and then pausing, then, yes that is possible.

But you need to run the full system simulated cycle by cycle in lock-step, not just the CPU.
From two Matrix members, one who is the matrix.org team lead today:

https://news.ycombinator.com/item?id=21836684
My explanation is we are all dead and in a level of hell that looks just like the life we left. And the Devil is slowly changing things to fuck with us until we realize we are in hell.
>can someone explain this

Gotta love cryptography. I read through the article, read it again, and started googing things I didn't understand.
Yeah perhaps I don't need to block absolutely anything outside the US (and Canada), but clearly at some point there's an initial caller. If at any point I hit a hop that's not trustworthy, I don't want the call. If you can't reach me without resembling a telemarketer, I probably don't need the call. If legal but irritating companies find themselves unable to serve calls, I consider this to be a positive. If the phone system collapses, I consider that the be an improvement over having to sometimes be reachable over the current phone system.
Mebel-elanları-artwood-mobilya-brends-store
I think it’s not just the money. There is something about going against all odds and coming out ahead in the end that many (especially younger) people find tantalizing. There’s also the fact that many people that work for startups have a very individualistic, creative streak and resist the corporate neutering that happens at most bigger companies.
FWIW, there are a couple of things about Apple's and Google's systems that don't work for Signal:

1. There is no meaningful remote attestation. There's no way to verify that there are HSMs at the other side of the connection at all. The people who issued the certificates are the same people terminating the connections.

2. There's no real information about what these HSMs are or what they're running. Even if we trust that the admin cards have been put in a blender, we don't know what the other weak spots are.

3. The services themselves are not cross-platform, so cross-platform apps like Signal can't use them directly.

4. It's not clear how they do node/cluster replacement, and it seems possible that they require clients to retransmit secrets in that case, which is a potentially significant weakness if true. I could be wrong about this, but the fact that I have to speculate is kind of a problem in itself.

My impression is that you're suggesting the HSMs Apple uses are better than SGX in some way, but it's not clear that anyone could know one way or the other. I think all of the scrutiny SGX is receiving is ultimately a good thing: it helps shake out bugs and improve security. It's not clear to me that the HSMs Apple uses would actually fare better if scrutinized in the same way, which could be a missed security opportunity for them.

We didn't feel that it would be best for Signal to start with a system where we say "believe that we've set up some HSMs, believe this is the certificate for them, believe the data that is transmitted is stored in them." So we've started with something that we feel has somewhat more meaningful remote attestation, and hopefully now we can weave in other types of hardware security, or maybe even figure out some cross-platform way to weave in existing deployments like iCloud Keychain etc.
I’m a front end developer For work and more and more aws experience is explicitly asked for, I feel like I have no choice but to use their services for personal projects just so I can honestly say I have that experience.
All of that information is extremely common when it comes to aggregated information sold/shared for credential stuffing, there's nothing that sticks out as odd or out of place in any of this. It can all be pulled through scripts, there's no extra effort needed.
Mark Lucovsky is pretty legendary! Every Windows exe starts with the two bytes ML!

EDIT: As others pointed out its actually another Mark, MZ. Lucovsky was the Mark, who Steve Ballmer was throwing chairs around when he said to leave for Google. Still legendary. :)
As, despite our efforts, we haven't been able to find big differences between different languages (considering reasonable choices for the appropriate domain) in any important bottom-line metrics, neither in research nor in industry, I don't think there's much point in even mentioning objective value. The only scientifically acceptable working assumption at this point is that language choice (with the caveat above) makes no significant objective difference. It's like saying, even if rum-raisin ice cream gives us the ability to see through walls I still prefer pizza; we have no reason to believe rum-raisin ice cream does that, so why even mention it? As far as we know, it's all about personal preference -- we have no reason whatsoever to believe that either Rust or Zig are objectively better or worse than the other -- as well as some easily observable secondary objective differences such as popularity.
Can the U.S. Military Make an Airplane Invisible to the Naked Eye?
Sed: A 5 minute practical guide
Ah ok. I’ve been playing it all day and got my friends on it. The iOS experience is beautiful, I’m really excited to grab my buddies phone in a few minutes to see the Android weirdness
Every windows exe starts with the two bytes MZ
Yes but if you lose your code, these days you still can get your account back. On the old more secure system, you cannot.
This is really cool but I wonder the practicality of cost when it comes to the through etching on this?
Nah, when people find out it is Pascal, they run away. Can't type begin and end, such words are just too long
Well, I think Snowden told us the tapping happens at the exchanges mainly. Was there a lot of cutting and splicing?
This is not an effective system. Caller IDs are often not verified in any way. Unless the scam/robocall requires a callback, the number will be made up. Collaborative filtering can't solve this.
About Hurricane Electric Internet Services
Recycling Renegade Ready to Tackle the Electric Vehicle Battery Crisis
Welcome to the Falcon Hospital
My cat is able to differentiate between people traversing the stairs to my front door (purely by the sound). The pacing and weight is usually very unique from one person to the next.

She will consistently jump up from my lap to greet a beloved family member at the door, but never gets up for guests.
I don't get what prevents an attacker from deleting the secrets of everyone by just guessing? Shouldn't the guesses be time limited instead (e.g. once per hour)? Even then you could easily bring the service down...
What would they contribute?
Just to add my voice to the choir, I too got to see this article from rss. I do however think that rss could have been a lot bigger than it is now: it hasn't gone mainstream, though it has had enough advantages to have dome so.

It has reached mainstream in one regard: as a carrier for podcasts. Given the wealth of user friendly tools to consume podcasts, this is perhaps not such a big surprise.
Tilted Toilet: The corporate poo patrol is coming after your toilet time
raaaarely.

you generally have an established codebase of tens of thousands of lines of code that the business is based on... usually with little to no test coverage. Creating a parallel version of the code in the new language would take ages and be filled with errors because the lack of tests proving the behavior in the old one means you rarely know if you new version is "correct" or not ... and then you end up with annoyed customers but... all of that is moot because you can't get management to sign off on using so many resources for so long to do a thing that customers will never see and can't be marketed.
> The enforcement in this case is put on the carriers, so in case of non-compliance that's who's blamed. See the actual bill: https://www.congress.gov/bill/116th-congress/senate-bill/151....

Okay, so that's a kind of a long bill, so I can't verify but you make it sound a bit like the carriers will be fined. They historically directly pass-through all compliance costs to customers, so ultimately customers pay to receive the robocalls?
I'm not making any guesses what actually happened.

Just stating that you misrepresented what the article actually said when you wrote "the attack is called credential stuffing". Your sentence gives impression that the article would have said it, but the article made a point for the opposite.
> This is why the siren call of instant infrastructure is so alluring to you. While your depth of knowledge for startup infra requirements is there, it does not transfer to large enterprises/campuses/etc where demand is very predictable and involving another company (Amazon) in your operations is nothing more than a liability.

My whole original post was from the startup point of view and I made that quite clear. I am more then happy to admit the enterprise space (from an infrastructure POV) is not my expertise. Your taking my points out of context. Even in my own example I added an astrisk of a startup who started moved to hybrid on-prem after six years.
Except for all the companies that accidentally leak it to, all the companies that grab it in breaches, all the companies that find it sitting in S3, all the companies they sell it to, etc.

But otherwise yes only Facebook will have it.
Neato – Neural Evolution of Augmenting Topologies Observable in Minecraft
Almost any feedback is useful. "The other candidates were a better match" — okay, perhaps I'm applying to the wrong jobs. "You failed roll of the dice" — so I did everything right and should keep doing that.
The Neighbors app is filled with posts about "suspicious" people walking down the street. People are very much using these devices to surveil their neighborhood.
Good luck with that, Mark.
Shopify's business plan is offer minimum functionality for a low monthly fee and then users use the marketplace to add additional functionality which Shopify takes a 20% cut.

I'm actually working on an open-source fulfillment and operations app for Shopify:

https://github.com/openshiporg/openship

I use it to build small apps that interact with the API directly instead of paying and relying on any apps.
No it's not. Telecoms allowing to use their platform for abuse and doing nothing about it because it helps their business.

Similar with Amazon allowing seller selling fakes and counterfeits.

So holding them responsible is a wake up call for them where doing nothing from their side is no longer an option.

Telecoms absolutely have powers and know-hows to detect and deter abusive practices.
This proposal has been made in the tracking issue already, yet it hasn't been picked up on yet: https://github.com/rust-lang/rust/issues/44109#issuecomment-...
The first 3D-printed neighborhood is being built in Mexico
OWC Launches Accelsior PCIe SSD for Mac Pro Up to 8TB with Speeds Up to 6000MB/S