skysight-inc/HackerNews huggingface dataset:
I will never be okay with enabling a third party service to skim my emails wholesale, so IMAP creds is absolutely out. I don't need an Unroll.me going on here.

Suggesting users use rules to forward to your service is a good choice, it allows the user to control what you can see, and it's exactly what the user wants you to see. I personally would be nervous about letting a third party see my flight itineraries, as general opsec, but if someone wanted to do this, I think this is the best way to do so.

Browser extensions are a rough choice because if you want to support many email services, you probably will end up asking to see and modify all browsing data, which is a scary permission to give third parties, and arguably one browsers should stop handing out.

I wouldn't mind running my own apps that read my email somewhere I could monitor what they do and ensure they don't talk to any service but my email service. But you won't see widespread usage with selfhosting, and good luck monetizing it.
Hate speech is anti-free speech as a principle. Hate speech, which Moleyneux is known for, is actively trying to step on the free speech of others.
A Fully Remote Incubator
Why not? It’s so clear cut it’d be a slam dunk for MailChimp.
What about, rather than a subscription, you pay a one-time fee?
It still uses Mongo on Heroku for now - the Postgres changes haven't been pushed yet.

And yes, good point on the README not explaining what it does. Thank you. I'll fix that.
If you could, how would you rate the value of self-promotion compared with learning and education in your own industry?

Obviously learning is more important, but would you recommend spending, say, 1 hour of promotion or networking per 10 hours of learning, or 5 hours? What worked for you?

For what it's worth, I'm about 2-3 years into my career and see a lot of advice to spend a significant amount of time promoting yourself.
What alternatives exist to Hipmunk's display of flights? I've never seen a site with a similar display of flights by time, including display of the layovers, and easy ways to drag the earliest and latest start times to eliminate flights that aren't an option.

> ITA Matrix still has time bars, if you loved that UI

ITA Matrix doesn't seem to do anything like Hipmunk's UI.

> flights are just not that profitable. In North America, you'd be lucky to get 1-2% commissions. In the rest of the world, it's a bit better, but Hipmunk was definitely North America-first.

Why is that not enough? Does 1-2% not cover the (hopefully minimal) costs of performing such searches and calculations?
> True, but then it's on MailChimp to prove it.

No, it's not, unless they want damages or some other government-imposed remedy.
Is number of users/percent of addressable market going up, or just spend from the same existing userbase?

(I did some strategic search-on-page-ing, but didn't find anything addressing it, and as a non-gamer, the breathless excitement about the topic was exhausting)

I get the general impression that 'casual gaming' (which takes me back to the bad old days of Zynga) was bringing in new users by the truckload, but I don't really feel it "in the real world"
> I never got why credit cards were such a big deal for consumers...

For me, it's always been about that buffer between my actual money and the merchant. Sure, credit card rewards programs have been great, but having a middleman who is more or less on my side in all financial transactions is a game changer.

If I use my debit card, the money is out of my possession; it's possible to get it back, but it's not certain, and while I'm waiting for that to happen, I don't have access to that money. (And if I use cash, I pretty much just have to accept that the money is gone the second it leaves my hands.)

If I use a credit card, I still have the money, and can dispute the charge. Even if I don't notice the problem until after I pay my credit card bill, I still have a single entity (who, again, is more or less on my side) who will refund my money if I have a valid complaint, even if the merchant isn't playing ball or is a fraudster.
I had a raspberry pi vpn server. serveed traffic over UDP, used port knocking to open it up. blocked everything else, worked pretty good, but damn SD cards kept dying. :-/
I almost think I want a new kind of search these days, for which flights are actually cheapest, not just on ticket face price.

I want to know if I have to pay $30 each way to check a bag, or try to pack something that will fit in overhead, not trigger a TSA panic, and then struggle past everyone else's delays in security and boarding because they wanted to save $30 and are trying to carry on a bag they can barely lift over their head.

I want to know if they have created some "special class" that you have to pay $50 to be in, or wait twice as long at poorly staffed "regular" desks.

I want to know if they're skipping included meals on longer flights in favor of charging inflated prices.

I want to know if they're charging more for more desirable seats, both in location and comfort.

I want to know if they paywalled any other things that used to be standard.
AWS EC2 Spot instances can now be stopped and started like On-Demand instances
I built my own VS Code Syntax Highlighter from scratch and here's what I learned
I still use my HP LaserJet 4L from the 90ies. It just works.
As a random person who's been on reddit for over a decade now, it's really cool to see how close-knit the reddit team is. Partially I'm jealous, since I've never found anything even close to that.
As an alternative to archiving the build chain, consider documenting a reproducible build from widely used components.

The risk is that the components of the reproducible build may no longer be available 50 years from now. But rolling your own archival is not bulletproof either, for the same reasons that untested backups aren't bulletproof.
It's a separate adaptation of the game engine, but your account, purchased items, friends list, etc all carries across, so the only thing that doesn't transfer is an ongoing game.
In theory an asymmetric connector can have a "correct" design orientation, like "for horizontal insertions the wider end is always down toward the floor" and "for vertical insertions the wider end is toward the body of the appliance."

Not everyone will notice/remember, but some will, especially if it is logical - like 'the "heavier" end is down for more stability.'

Unfortunately it looks like the accepted orientation of HDMI connectors is a precarious "heavy side up."
> I addressed it in a comment: https://news.ycombinator.com/item?id=22045670

As I read that, users must trust you. There's nothing that would actually prevent you from accessing the data.

So it's arguably misleading to call it a "private diary".
This might take a moment it said but I think I waited two minutes with no result in sight.
The Bpftrace Pony
I really liked Hipmunk's interface and used it to dream often.

What I want out of airline aggregators, and what GFlights seems to do alright at:

* Multi-city itineraries
* Source and destination searches based on region/airport group (e.g. "AUS or DFW or IAH -> MUC or LHR)
* Date range searching for flexible schedules and pricing

One of my example searches recently:

I want a flight from somewhere in Texas to somewhere in western europe, then to Dublin, then back to somewhere in Texas. I want to go for 9-13 days in February or March. Show me results by price.

GFilghts seems to do this pretty well. I used to like Hipmunk, but I don't know if it had any competitive advantage over other systems mentioned here. They certainly pushed the envelope, even influencing the tools we name today.

And to other comments, it is indeed unfortunate that pricing data is so obscured by airlines. Another instance in which the government should mandate more transparency.
Perhaps its small countries that do it best. Eg Hong Kong, Singapore. Well, the website needs a database of "in transit" aware countries (or airports) and option to prefer them.
This attack targets the nuts and bolts of how the Windows platform actually implements TLS; a vulnerability in CryptoAPI that allowed you spoof any ECC certificate would presumably break all of TLS. What might mitigate this in Windows Software Update would be some kind of key pinning that prevented arbitrary certificates from being used.

Later

Dmitri Alperovitch at Crowdstrike says this doesn't impact Windows Update.
Today provides tons of forensic evidence. So I don't really think it's any easier, at least for anyone living in a western country.
Wow, wanderlog seems very cool! Way more intuitive than my custom google map / sheets that I've set up for a two week honeymoon around the corner. Will give it a whirl!
This becomes data archeology quickly, and leads to necromancy. Project necromancy is fine, but is fraught with danger and tends to be about as popular as normal necromancy in a D&D game.

The more shared documentation that exists at an organization, the easier the archeology portion will be. Even old Slack threads and half-finished README docs can point in a direction, and help with hidden requirements that would have taken more time or painful failures to find on your own. The steps I usually see are:

1) Identify a problem

2) Create a useful documentation infrastructure, like a GitBook or Sphinx, and write down the problem in a well-thought out matter

3) Explore old sources of documentation, and rewrite them into the new structure you created; include the original material and perspective on what's happened between then and now

3a) Find references to other sources of documentation (from when everyone moved from Hipchat to Slack three years ago), get copies of the logs, and search further.

4) Repeat step(s) 3 until you feel mostly fine, and/or other people on your team start to ask you questions about the problem because you've written the docs

5) Architect a solution to the problem, and add your reasoning to the documentation

To do this well, your documentation system from Step 2 should be one that the rest of the team actually uses, and will hold up for a while. At the very least, when your Step 2 is someone else's Step 3, try to be more useful than terrible.

Remote work makes this harder, because it means that you can only use digital archives; a lot of people use paper, and if there's no paper, you don't get random lucky bits of paper that turn out to be exactly what you needed. Instead, you'll have to ask people, hope their archiving system of choice is working, and they are willing to share.

Prevention of these problems involves consistently using the same tools over time, indexing all documentation in a central location which is widely accessible, and meaningfully valuing project document creation as actual work within the organization.
I get your point, but I feel that’s a bit off topic. You can definitely lose money by being overtly discriminatory, that doesn’t imply that diversity is a lucrative thing. Not being discriminatory doesn’t imply that you’re promoting/focusing on diversity.
My medical education is congruent with your thoughts. Liver failure is defined as partial or complete loss of function. You're also right about the "too poisoned to survive" aka end-stage liver disease. People in this stage often die from too much toxin build up, infection, or bleeding. Your explanation is great.
>Nor Thunderbolt

It's possible they exist, but I have yet to have personal experience of an actual Thunderbolt cable that didn't have a thunderbolt mark on the connector.
I've reached the same conclusion. What we have the past 20 years is phantom technology and phantom wealth. So many tools to distract us and fill our time, but shockingly few tools to liberate us from labor. Only a tiny handful like rooftop solar panels, electric cars and Roombas have decreased our labor measurably.

I'm going through a midlife crisis right now where I'm actively rejecting the decisions I made since 2000. I had a falling out with professional programming last year and am looking into the gig economy. I'm not going to buy new anything if I can possibly avoid it. I'm trying to turn my attention from external expectation to what I felt was my life purpose when I graduated college in 1999.

Which will basically amount to finding a way to earn roughly $1000 per month doing whatever it takes and then using the freed up time to work on inventions. I'm hoping to resurrect my blog and write about progress or my thoughts on tech rather than devolving into my usual diatribes about politics and how the world has generally gone the wrong direction. My acquaintances are concerned about me, and rightfully so, but I just don't care to live someone else's life anymore.

I think you're right though, that when basic needs are met, most people want to work on their calling whether it be art or recreation or simply being human. Which looks a bit like how the aristocracy lived in the Gilded Age over a century ago. There's no reason why we can't have that level of affluence today for every single person by letting machines do the labor, or by taxing profits on that labor and providing cash to all via UBI.
These days you leave a much longer trail, though. You can't just walk away from your attempted con. It could come back to bite you at any time.
because adding that single header breaks the behavior on old browsers
The problem isn't that they need to add a header. The problem is that they need to add the header _or not_ depending on which browser is making the request. Which means you have to sniff the user agent, even though pretty much everyone agrees browser agent sniffing causes problems, and the same browser that is pushing this change is also trying to get rid of the only way to know if that header should be set or not.

And I think the chrome team could have come up with a solution that didn't involve browser sniffing, such as sending a header in the request identifying that SameSite=Lax is the defualt, or that SameSite=None is accepted. But instead they recommended sniffing the user-agent string.
It's not clear to me why anyone in 2000 would choose 20 as the pivot year, unless they were working on a system that needed to regard 1921. Why wouldn't a parking meter or subway system pivot at, say 1990?
Not exactly but I'm not sure it matters. It sounds like if the curve parameters are crafted just-so, they can dodge validation and use anyone's public key and yet still negotiate successfully and decrypt everything. The "gramdma" explaination is basically the green lock next to the URL in your browser doesn't mean spit at this particular moment in time.
I don't know which way all my motherboards are oriented. Opening the case isn't easy.
There might be necrosis of the liver involved, which adds a dump of toxins on top of non-functioning liver.
Schneier: “It's too late to secure 5G networks”
I was surprised/annoyed by this as a very casual gamer—my sister lent me her Xbox One a few weeks ago, and I have a copy of Halo (Master Chief Collection). I wanted to play it for a few minutes just to relive some memories from Halo CE and see how the remastered graphics looked.

It took like 20 minutes for the game to copy from the disc to internal storage (luckily her Xbox had some free space!), and then it spent another 10 or so downloading an update/patch.

Back when I remember playing Sega, Nintendo, etc. (even Xbox 360, which was the last console I owned), it was a matter of plugging in a cartridge/disc, turning on the system, and playing the game after a few boot screens.

In the end, I only got about 20 minutes of time to play the game since it was night and I had to be up early to help the kids. The experience didn't make me anxious to buy a modern gaming system.
This is a book that really, really needs a second edition.
I would happily donate a thousand dollars towards seeing MAC integrated as a first-rate feature. As-is, I have a massive love-hate relationship with it.

1. I'm horrified using Chrome these days. Browsing to a random site and having my Google account avatar pop up and offer to log me in is really unacceptable. So I fundamentally love what MAC provides. (Though some of this is also Firefox's aggressive cookie options.)

2. It's ridiculously buggy. "Reopen in Container Tab" often reloads in the exact same container. Trust me, I've checked the various bits of configuration that control defaulting certain domains to certain containers, there are just times that it does the wrong thing.

3. The config is hard to backup? I gave up last time I tried. It's a lot of work to get all of the domains setup to open in certain containers, establish the naming/coloring conventions so that it's not a mental burden.... and then have to lose it when I'm inevitably told that somehow Linux performance will be magically better if I make a new profile.

Example usages: multiple "personas". I have a Google Suite account and domain for certain things. I don't have issues switching between Google accounts because to Google, I'm only ever logged into one at a time. Dev/Test purposes.
> But if you don't want to be sitting and coding at the age of 50 with 20 year olds around you "changing the world"

I would actually be okay with doing this, if it were an option. I believe it is not, due to how ageist tech hiring is.
Basically there are standard curves and software assumed parameters matched, bad design.

edit: more detail

https://news.ycombinator.com/item?id=22048619
Creating an Autonomous System for Fun and Profit (2017)
I think the reason why it is so well integrated is that it used to be part of the standard installation of firefox and only later moved into an addon.
I think this is at least partly a generational thing. Kids and teenagers seem to be much more willing than my peers to play demanding games on mobile, and to play them in public.

It sort of makes sense, since anyone my age or older didn't _really_ have access to serious mobile games growing up.
I was going to say the same thing except with Call of Duty as my example.

Having never played an FPS on my phone, I had to download Call of Duty to see how it worked, being a heavy kb+m FPS player in my youth.

Played a dozen or so rounds in a couple weeks. It worked surprisingly well with plenty of skill gap between the players.

A couple years ago I also tried a MOBA on my phone wondering how that could possibly work on such a small tap-input device

Turns out mobile screen + tap input game UX is well-explored and polished territory.

Now all I want to see is Crusader Kings or Europa Universalis on a phone and I'll agree that nothing is impossible.
> I can't imagine that either, but this isn't a case between Stefan and Mailchimp, this is a case between Stefan and Nandini in Tort Court

Well, it's not a case at all, and it's not likely to be one.

> Intent of the third party to induce a party to the relationship to breach the relationship.

Terminating a contract as provided for in the contract is not a breach of the contract. The only arguable breach is on Molyneux’s part by violating the ToS, and clearly Nandini didn't induce that breach.
I have been involved with Web development in some form since late 90's, nice utopia that will never happen.

Unless in 5 years we have only Chrome left, then surely.
Students are campaigning to get facial recognition banned from campuses
I agree this is true of engineering managers but its also true of engineers.

Some organizations want them to engage with end users and do a lot of business analysis others want them to focus on coding.

Some organizations want engineers to follow protocol and coding guidelines to the tee. Other want you to make the right call for the circumstances.

Some organizations don't care how long something takes but want it to work perfectly. Others want to make sure you deliver a product on time even if it's buggy.

Some organizations expect you to always choose the right language/tool for the job, some want you to choose the organizational language/tool everyone is familiar with.

I'm a consultant and sometimes run into this issue. Building out an MVP for a start up is a completely different mindset than working on a fortune 500 Enterprise app.
I don't think that's a quibble. I think that's pretty fundamental. Most people don't quit their jobs, they quit their managers. And to your point, it is MUCH easier to quit than it is to fire someone. Firing someone is generally a painstaking process.
Can you point me to where he is trying to step on the free speech of others? That seems like what you are doing. By saying his ideas are hate, you are trying to stop him from saying them.
Could someone clarify: does this allow the creation of fake certificates that are accepted as authentic by any crypto library?

Or rather, does it treat such faked certificates as authentic itself?
Our brains are exceptionally good at pattern matching. The problem is so much of it happens automatically and "subconsciously" that we tend to attribute it to grander schemes.

A good amount of religious motivation has been based on this disconnect in our brains. And plenty of quack science (speaking of conning people).
python: sum([n * n for n in range(1,5,3)])
If there's no error message in the browser console, I guess the 20 million PBKDF2 might be a bit much. Which browser are you using?
The car doesn't define its own interface, so you're stuck using the Internet.

Overall the easiest place to start is a forum for your specific vehicle. You may get lucky with predefined services or someone else having done the reverse engineering for you.

If you don't get lucky, it depends on the manufacturer. In the case of European manufacturers you are best off if you can acquire the ASAM ODX material for your vehicle (sadly there is not an easy "clear market" way to do this - reverse engineering the manufacturer's diagnostic tool is often easiest). This will define in a very complete manner the available services on your vehicle. Some aspects will still be proprietary, usually specified as DLL files referenced in the ODX (for example, the Seed/Key authentication algorithm for flashing VW vehicles). These you will have to find references to on forums or reverse engineer yourself.
I wonder what happens at the Microsoft Security Response Center when a big vuln hits like this? Does it tie up all their resources just working on the one vuln?

Generally no, if only because of Microsoft’s sheer size.

For something like this issue, while its potential impact is big, I would guess that it only tied up the team(s) that work on CryptoAPI.
Oh right, console gamer problems. I guess cloud gaming will make them happy, I really hope it doesn't bleed over into PC gaming.
Google Flights supports "multi-city" travel plans that does exactly this!
The entire Library, Bookmarks/History/the archaic Downloads popup, all just makes me immensely sad. Meanwhile I keep seeing more badges (Pocket, Screenshots, Lockwise, etc) crap popping up in the browser UX...

To add on to what you're pointing out -- they even cloned Chrome's "profile-icon-in-the-bar" model, but didn't actually give you the ability to switch profiles with it! Instead more places to shove more links that I forgot about - Firefox Monitor and Firefox Send.
For those interested in CAN bus for UAVs, there is https://github.com/uavcan as well.
Great, now my server side rendering code needs to inject JS into the customer to feedback agent capabilities.
You got it backwards. The notch was for compatibility with the extension cable, which had a lug because USB extension cables are not allowed by the spec (too much distance for the signal), so the lug prevented you from using the extension cable with a device that might fail.
This is sad news. I used Packet for a benchmarking project (https://github.com/senderista/hashtable-benchmarks) and was super impressed by the ease of use. Put EC2 absolutely to shame (and was much cheaper than EC2’s bare metal offering).
I remember in the days of MSN gaming zone (zone.com, c. 1999), I was a vicious troll, and I'm pretty sure MS used their control of the OS to enforce a machine ban, as every attempt to use it from my home desktop was blocked. Also, somewhere in the Windows system registry I found a list of all the screen names I used.