skysight-inc/HackerNews huggingface dataset:
Cool project! I am also not fully convinced by one choice though.

If you're using the user password to decrypt the encryption key, why don't you simply derive the encryption key dinamically from the password each time the user logs in? I'm thinking of an algorithm that, given a string (the user's password), constructs a given key. Something like SHA-*, but more tailored to your use case.

In this way you wouldn't need to store the encryption key anywhere, as it's dinamically generated on demand.

As per the criticism on the user losing the password, I disagree with most comments. I think that if it's made very clear to the user why there is no recovery procedure, it can be a plus, but is has to be properly explained.

Anyways, to solve this, I'll throw my 2 cents. The recovery process could be done woth a local-based (no server) Q&A process. For example, when the user creates the password it is asked to provide three security questions, and the corresponding answers. Then the questions are stored locally and the answers are used to create an encryption key to encrypt the password, which is then stored locally. If the user forgets the password, it is asked the three questions and if the answers are correct the password is correctly displayed.

Now I know that many will tell me that storing the password in a database, even though encrypted, is a bad idea. But I'll respond that we are talking in this case of storing the encrypted password only locally. This means that to stole the password one would need phisical acces to the machine, and then it would need to crack the encryption. Which at this point makes this system much more secure than most SAAS that, while encrypting very well passwords server side, do allow (for obvious reasons) the user to stay logged in. So anyone with access to the machine can access all data without further work.
I don't see any credible source for the "300 billion" claim. The official statistics list 168 billion since 2000 for all renewables combined: https://de.statista.com/statistik/daten/studie/36306/umfrage...

On the other hand, nuclear power has been subsidized with about 200 billion as well without ever producing more than one third of the electricity output: https://foes.de/pdf/2010_FOES_Foerderungen_Atomenergie_1950-...

The other elephant in the room is that nuclear energy relies on having cheap sources of Uranium available. This works fine for the almost negligible amount of nuclear energy being generated today. Scaling this up to a significant fraction of the world energy consumption would require usage of breeder reactors which nobody has been able to get to work at the required industrial scales.
I'm going to need to see photos of the finished treehouse before we go any further.
Yes, for that situation you additionally want sum types.
Spectacle is another alternative on macOS [1]. There's also Amethyst. I'm not sure which one's best. It is a matter of getting used to the default keybinds IMO.

With Spectacle, the default keybinds are using Alt and Cmd as super key. I like that one; I rather keep Caps Lock as Esc (else I'd use it as Ctrl).

As for i3, there's a backwards compatible Wayland successor called Sway [2].

[1] https://github.com/eczarny/spectacle

[2] https://github.com/swaywm/sway
But ignoring it is how you get journalists parroting lines like “the middle class has been stagnant for decades” without reporting on all the contrary views.
Danny was already Google's parrot (benefiting indirectly), at least he's more honest now. He took (IMO) his Google handler's job. Matt Cutts used to do this
We can never seem to get a scientific assessment of whether it works. It's critical to assessing the morality of it.
Boot, and then what? Are there open drivers to the iPhone peripherals? Last I checked, there weren't: only having access to the CPU is not entirely satisfactory.

That's the point of the article: being capable of running code on main CPU is but the first step, drivers and firmware for all the other parts are far more problematic.
Isnt it the opposite that googles policy of showing same icon for DV and EV certificates are making it a lot more difficult for security companies to make money selling expensive EV certs?
"if you are doing some financial math that does not need to be accurate to the penny, just use floating point numbers. If it is good enough for Excel, it will be good enough for most applications".

Uh, no.
Can confirm—vterm is very stable now. I've ditched separate terminal applications and exclusively use Emacs+vterm.
Hope they overtake TikTok, we don't want a totalitarian government poisoning our children.
Privacy is really the wrong word in my opinion. What you mean is confidentiality. This might sound like nitpicking, but private communication might mean that some attacker does not know who is talking to whom, which is not what TLS even tries to provide (anonymous communication). The term is somewhat overloaded. You can have fully encrypted communications and still give away information you intended to be private.

TLS does try to provide confidentiality and part of that is authenticating who you are talking to. Without this your communication is not at all confidential, as anyone could impersonate your intended target. A passive adversary can't read your traffic, true, but an active attacker (of for example the coffee shop dwelling variety) is not a major step up and would undermine the confidentiality aspect entirely.
Satoshi Nakamoto's Identity
Okay, Verizon's consent process is a disaster. After following several options to try and opt out I gave up and left. Which unfortunately means I can't read this article.
We hold consciousness to be a marker of "something worthy of ethics" but it's a bit of a species solipsism. Consciousness is a biological process or effect. Why is it more important than other biological processes or effects? Well, because we're humans with "consciousness" and we think so.

To me, consciousness is likely to be explained as an emergent phenomenon allowing humans to collaborate, rather than something that is more akin to the "soul" or "self" that is often ascribed. To my mind, ethics, if we can separate that concept from other emergent phenomena, should be applied more holistically than just to things we believe are conscious.
> Did Picard violate the Prime Directive in TNG S6E13

I know you typed that randomly, but for anyone wondering:

> Geordi La Forge falls in love with a woman accused of murder in an isolated communication relay station. The Enterprise crew investigates the crime, the only other suspect is a Klingon officer who frequently visited the station.
> In 2019, ScreenRant ranked it the ninth worst episode of Star Trek: The Next Generation based on IMDB ratings, which was 6.1 out of 10 at that time.[3] They were critical of the Klingon subplot and described Geordi as a sexual predator.[3]

> If five ninjas attacked you, how you would you physically defeat them?

Don’t let them circle you?

> Here's the intellectual take on Spiderman fighting Batman, do you agree?

Batman would win. Bruce Wayne is smart and has a bat cave and Peter Parker is just a junior intern at buzzfeed.

> Men who have dated supermodels, what was it like?

I would click that
Similarly with Hetzner, they give you 3 TB with their 2.5 € VMs and let you use it.

Unfortunately I've noticed that their "unmetered pipe" offering is quite a downgrade, as it's only 10 Mbit.

EDIT: Sorry, I'm wrong. All dedicated servers have 1 Gbit unlimited uplinks. I'm not sure why I keep getting confused on this point, their support has confirmed this fact many times to me.
That'll absolutely not happen in our lifetime if ever. You're projecting your developer centric view onto non-technical users who demand solutions that don't add friction to their lives, if it does it's not solving a problem but just adding a new layer of problems for them.
we had a similar system at high school: VNC on all computers, staff reguarly logging in to check you weren't doing anything fun

VNC ran as a separate user with its password hash protected by the relevant registry permissions

one day we found a machine undergoing an automatic rebuild, found the password hash, and of course VNC only supports upto 8 char passwords

apparently it turned out they used the same VNC password for every single machine, including the staff ones
+1. The downside, of course, is procrastination. Back when my plotlines were really farfetched, I really wasted a lot of time dreaming about all sorts of stupid (in hindsight) stuff. Sometimes I regret that if I had spent that time usefully, I could have done better for myself, though I think I have done pretty well for myself. I think excessive daydreaming is a form of anxiety

Restricting the scope of my daydreams to align more with my actual goals (like starting a successful company, becoming an engineer of renown, making tons of money) was a very important step. It is closer to visualizing oneself as a successful person which, in general, is a good thing. It has also had the welcome side effect of curtailing the duration of my daydreams.
regulatory approval is easy to get with the right kind of lobbying.

i would say assays are useful for personal medicine. they get about 6m variants.
What makes a programming language Turing complete?
I think Lehrer's point here is that journalists often speak to sources "off the record", and that this is often used to fuel conflict instead of illuminating the situation.
Isn't Google just following the lead of all news sites who claim to be reputable, but are burying "sponsored news" or "sponsored BS" on their websites which are PAID FOR by companies and not really news ?
I fully agree, and furthermore, I think that if ad-supported sites were wiped out, the people who genuinely cared about the content would come out and make a replacement with just the useful content. People who have a need find a way.

Right now I can't think of any ad-supported site that I critically need. It could all go away and my web experience would probably be better for it.
> I also don't dream (or more correctly I do dream but maybe once ever couple of years I actually remember one)

Personal question, feel free not to answer: are you a regular cannabis user?
Vast majority of journalists don't make it past #2. The problems you mention are stretch goals, it would be nice to have them.
As I stated in my original comment: sure, if you arbitrarily redefine what terms mean, HTTPS doesn’t provide authenticity or non-repudiation.
To advance robot swarms, UB engineers turn to video games
> When we say "MITM" who is this man?

Anyone in `traceroute`, even indirectly. Your state. A rival state. Your ISP. Your neighbor at the coffee shop. A rogue employee at a CDN. A poisoned cache. That little thing that no one noticed in the closet. The latest malware on your router. Any of those threats on any path between the visitor and any resource on the page.

> I believe that less than 20% of the population is using rogue networks.

The network is hostile. Believing that it's not contributes to its insecurity: you get an architecture with a hard shell and a gooey center. One box in your "safe zone" gets popped and you're done.

So make the safe zone your box and nothing else. HTTPS helps you get there.

> What about the issue of broken WiFi security?

What about it? Someone snooping on your WiFi can't see through your TLS. That's a reason to support HTTPS, not to dismiss it.
New coronavirus can spread between humans, but started in a wildlife market
Totally agree. I can understand that someone might think the favicon makes it look tacky but ads have the word AD next to them. It isn't hard to tell the difference.
Because the FAA has very strict rules on cost-sharing limits for Part 91 (roughly "private") aviation and very strict operating rules for Part 135 (roughly "charter") and Part 121 (roughly "airline").

Under Part 91, even if you could get around the "common purpose" concern, the rules are such that no profit could realistically ever be made. (Insert snarky ride-sharing economics joke here.)

The FAA has shut down several operations who were tiptoeing around the rules. Having a single regulatory body that pays attention to this across the country makes it harder to make an end-run.
To be clear, the only thing that strikes me as ridiculous about the proposal is having them in the cabin of airliners.
It's interesting to see how HN has grown so far beyond these initial goals. I'm sure it's still useful to YC for their purposes, but it's also an important part of the internet in its own right. Despite growing massively in scope, the moderators do a remarkably good job of running the site true to its potential, rather than optimizing it to service the YC startup pipeline. No doubt this makes it more useful for YC's purposes, too, but I imagine that the cost/reward ratio is exponentially skewed against YC's favor (i.e. the bigger this community becomes, it provides diminishing returns to YC but requires ever more moderation effort to keep in order). The fact that we can be openly critical of YC or YC-funded companies here, and our open criticisms circulated throughout the community of people who might become YC founders or customers of their companies, says a lot about the integrity of the moderation.

It's not perfect, but the mods strike a great balance and are receptive to feedback. Anyway, thanks to dang, scb, et al for keeping this community a good place to be.
The purpose of the list is to aggregate sources of data that you can connect to and receive events as soon as they happen. If there is one that you believe does not support real time events, then let me know and I will remove it.
Theranos case: Feds claim patient harms related to HIV, pregnancy
Yes, because the author didn't make its contents available for free. Websites can do the same, and many do. They could even disallow other sites from crawling them and processing their contents through the (mostly) respected robots.txt. But publishing something for free, not forbidding crawling through well-understood mechanisms, and then demanding payment is ridiculous.
And if someone palms your GPG private key, or the public key is not properly authenticated in the first place, you don't get any of the kind of absolute authenticity you're talking about either. You complain about CRL/OCSP, but a GPG keyserver has all the same flaws (with worse default configuration of clients).
Wouldn't that be better? Anything you can script with AppleScript (OSA) you can also script with JavaScript, but not the other way around.
> The stench of MBAs and quarterly profit optimizing execs is all over the valley.

A good explanation for the increasingly normalized dark patterns ruining user experience on the web.

"Conspiratorial"? You bet. Have we not seen huge (and small) companies committed to screwing the public in as many ways as they can? It's not by accident, there's a widespread, condescending disrepect of users and just plain old conspiratorial maliciousness, intent on manipulating users and squeezing more profit.

Google's search results design (backtracked for now) is a clear symptom.
Thanks, glad you enjoyed it. Yeah, I first got into the C64 in 97. College was 5 years afterwards, so in 2002 for me. I link to another story, “Give yourself more playtime”, at the bottom of the post. You may enjoy that – it’s the story of how I securely wrote password programs to all my favourite game cassettes :)
I believe you're asking for the Underhanded C Contest: http://www.underhanded-c.org/
BBC How They Dug the Victoria Line
I sometimes feel that we are in this echo chamber.

These threads always follow the same patterns, someone asks if they know of an alternative search engine and a HNer quickly mentions they have gone to DDG and haven't looked back.

DDG is decent but not even close to the search quality of Google. I know the folks here want to see Google dethroned but DDG won't do it.
Use two blank lines or the breaks won’t show up in the post.
A Survivor’s Diary Emerges from Auschwitz
I'm sick of waiting for the reply button to show up and I'm heading out for the day. But it's not hypothetical. My state voted to give our electoral college votes to the popular vote a few years back. I emailed all the state representatives and got canned emails back along party lines, some explaining how anything but direct democracy causes people's voices to not be heard. I asked the Democrats if they would support a proposal to eliminate superdelegates in the primaries, and I didn't get any responses. I've asked two directly at various events, one told me "I'm not concerned about that particular issue" and the other one told me that they've already made the opinion on that clear (I never found where and was asked by an usher to move back for other questions). Don't know how or if they voted when the party eventually did change that, but I have little hope that asking them questions in the future would mean anything.
1. Shifting from solo/modular to team software development

2. Figuring out unit and integrations tests

3. Embracing clean code paradigm and SOLID architecture
It's fantastic for artists since its really easy to generate large collections of reference images on just about any subject, inspiration sources etc.

But to everyone else I'm sure it's really annoying.
Alternative to social media. See real people in the real world. The social interaction will make you and others happier. Call people via voice instead of texting them its more personal.

Alternative to Google: Use Duckduckgo and a VPN+privacy extensions.
This does exist. It's called BlackBird. I think there's a couple other attempts at this market as well. It's been a bit controversial and there have been some discussions of how legal it is but it seems to still be up and running.
25,000 neurons with 20,000,000 connections.

How much does human brain contain?
You think that's bad, see AMP
Why bother with password then and just ask security questions each time?
I'm not sure why you were down votes:

Article from 2017 (wuhan built a pathogen lab):

https://www.nature.com/news/inside-the-chinese-lab-poised-to...

Patent:

https://patents.justia.com/patent/10130701

It was designed to combat the avian flu in livestock.

It's not to far of a stretch that someone leaked this from their lab.
We approached integration testing in Kubernetes
The perspective of this article feel naive for 2020. "You can't put out forest fires by pissing, but if we all piss together... uhm maybe... no wait"

Here's what I mean:

withering criticism from politicians, consumers and the press over the way in which search results displays were made to look like... .. It’s also a pretty evil by a company whose mantra was “Don’t be evil.” ..paid advertisements are ever more indistinguishable

This is like addressing the plastic straw problem on Shell oil rigs. Google and Facebook are both (among other things) more influential over media than Murdoch and the next five runners-up combined. Traditional media obviously also violate their own "journalistic ethics" for money reasons, but at least there is such a code. They teach college courses on it.

Google & FB have more influence on things like elections, war/peace & culture, but they don't even have an ethic to violate. Zuch won't even admit that Facebook is a political media outlet, despite being the most significant one to have ever existed.

Withering criticism of font choices is so 2007. "Vehement demands for antitrust action" is what we're about in the 1920s.
Threat Alert: Exploiting Open Docker Daemons for DDoS Attacks
Thanks for sharing your story, sounds fun! Most inspiring comment of the day for me.
I think that’s a gross oversimplification.

If you happen to check your replies I’m genuinely interested:

- do you work remote?

- if so, do you choose remote for solitude?

- if not- do you consider face to face interactions with your colleagues not as good a use of your time?

Again, genuinely interested because the full remote teams I’ve worked with that have voice comms at the ready have a lot less misunderstandings and the barrier to conversation is much lower than having to make a zoom / slack call.
“We need to reduce our burn rate to a sustainable level from which we can focus on pursuing the mission and growing the business over the long term.”. The question is: what mission?
I think the author unintentionally misspoke in calling him "one of the last". The growth of journalism in which Lehrer's standards are not observed should not distract us from the fact that there are many journalists reporting with integrity, and in some cases, great courage.
Tell HN: Three Day Window to Apply to Be an Air Traffic Controller in the US
I imagine that many people here would have what it takes.

A day or two ago there was a thread about Air Traffic Control.

The FAA hires about once a year. This bid is only open for 3 days.

This is for American citizens only, 30 years old or under.

https://www.usajobs.gov/GetJob/ViewDetails/557605800
It's Bing and a few other sources.

They also claim to have their own web crawler but I've never seen it crawl any of my pages before.
Any parent on Tetris would have long expired, Tetris was published in 1984.
I'm a bit confused as to what this has to do with Google? What advantage to they get by promoting HTTPS if all the other browsers support it as well?
If you wish to avoid being redirected to guce.advertising.com when reaching the article: https://outline.com/YEmwdW

You know, GDPR, and otherwise respect of readers.

See also https://news.ycombinator.com/item?id=22019822
I remember repartitioning the drives on the lab machines, so that when they were reimaged, the content in the new drive E, volume label CD-ROM, remained static. Hid the directory at the root, inserted a high ASCII character so that one couldn't browse to the directory without knowing the character, and shared this knowledge with a few individuals.