skysight-inc/HackerNews huggingface dataset:
I remember in 2005 when you could just start up Ethereal, run it for a minute, and get many people's email passwords, email, everything...

I think Wi-Fi security is going to be a major FUD talking point for the telecoms as they try to justify high prices, 5G, and the rest of their trip.

5G as it exists now does little to compete with WiFi because (in the millimeter wave form) it doesn't pass through walls. The overwhelming majority of data consumption happens indoors, so it can't make for a revolution in the market unless you get a huge number of antennas and/or cells installed indoors.

That's immensely problematic because building managers aren't going to want to have Verizon, AT&T, T-Mobile and maybe someday Dish Network stomp through their buildings, drill holes, do damage, etc.

There has been talk of wholesale access networks, which would be a great idea (e.g. a neutral vendor installs indoor infrastructure that gets rented by the carriers...) but the carriers are dead set against it.
Estimations work when dealing with symmetrical distributions. You might be wrong either way. But these distributions are fundamentally not symmetrical! Also, you should compare deaths with number of cases a couple of days ago (like 7), since that’s the time between diagnosis and death.
> One thing I would love to see in the future is the addition of LetsEncrypt support for major web servers like Nginx and Apache. I think this could go a long way.

This is not as useful as you think. In nginx you only need a couple of extra lines of configuration to let an external program issue and renew certificates independently from nginx, without reloads, etc. Definitely not worth developing a C nginx module that starts a helper process that does that just so that a few people who run nginx on a single server could get their certificates issued with only one line of configuration.
Try unselect node_modules in Selective Sync for ignoring purpose. Uh-oh, you just deleted node_modules in your machine.
> Phased arrays do leak signals all over the place ("side lobe")

I would expect the intensity of those signals to be constantly varying, given that multiple satellites are moving in the sky on different orbital planes. I'm also assuming that said "side lobes" are not equal in intensity in every direction. That has to be significantly more difficult to triangulate than a cellphone or an AM radio emitter. In other words, you would need trained crews specifically trying to locate Starlink users.

> The reality is that traffic control can be imposed based on physical location of satellite.

Satellites don't have enough fuel to constantly dodge specific countries. We're talking about low earth orbit satellites, that's one orbit every 1.6 hour. You could adjust your orbital planes to optimize coverage for some countries and not others, but once the whole Starlink fleet is up there, you will still have coverage basically everywhere.

> This new internet won't cause any kind of paradigm shift that some people desperately try to push.

Probably not, but it will be one more means of global communication, with more coverage than anything we've seen before.
MTLS with Istio
how much dev time would both approaches take?
The spine of San Francisco is now car-free
Most modern RDBMS are optimized for point-lookup queries and have a very hard time choosing good plans when you're selecting millions of rows amongst billions.

Remove the assumption that the end result is going to be a row or ten (which usually have good obvious plans with clear indexes), and the query planner is forced to make decisions about choosing the best plan amongst very costly alternatives. The exact costs are sensitive to assumptions about distribution, I/O costs, memory costs etc. and those assumptions need delicate tuning, especially when you don't have hinting as a tool (e.g. Postgres basically doesn't let you give many hints - you can kind of force join order, but the biggest tool is the CTE optimization barrier - I can get 100x speedups by moving subqueries out into CTEs and ensuring they're opaque).

To write efficient big queries, you need to think in terms of data flow and write declarative SQL with an execution plan in mind; it reminds me of my days tweaking source code to encourage a compiler to make certain register allocation decisions.

PG is a bitch here. It's often easier to get good performance by fetching one query, transforming it into a comma-delimited string, and then injecting it into the subsequent query (possibly in batches) to be sure you're getting the plan you need.

MySQL's planner is kind of stupid, but it's predictably stupid and there's lots of hinting tools available. I find it a lot easier to make it work fast for big queries. Sometimes it simply doesn't implement the best strategy (e.g. no hash joins), of course, so sometimes it's not as fast as you could get with PG, but it's usually easier to outperform.
Seems to me like basic financial physics. No one is saying it's moral, or that we should put up with it - but if a for-profit company is paying a bunch of employees to provide a free service to you, you'd have to be dumb not to be curious about their business model.
I believe there was at least one plains indian tribe that banned any discussion of their historic stories unless there were at least a dozen members present.
while i don’t use it it should be possible for ppoe with hw offloading, so i don’t get it either. maybe that’s disabled on the slow one...

https://help.ubnt.com/hc/en-us/articles/115006567467-EdgeRou...

but i’d assume it should handle fast rates like this if hw offloading was on.
Thanks for your comment, I'm not familiar with presto at all - but I did do a bit of reading of an older article: https://www.slideshare.net/frsyuki/prestogres-internals

Would you view presto in its current state as a replacement for vanilla Postgres with FDW for standard data analysis queries? I don't fully understand the Postgres/Presto relationship.
If your app does that then it's not particularly safe over an encrypted wifi either.

The solution is to fix that app, not to rely on a very weak defense that may help you in a fraction of the possible attack scenarios.
does anyone actually use the REPL CLI, and not a client?
Hadoop is very slow, because it persist the data to disk before every stage. You really wouldn't want to use Hadoop if you don't have a good reason too. More modern tools like Spark and Flink fare better there.
I have refused to hire people who did this. (FALSE, too, even though it is safer.)
The industrial farming practices are so disgusting I'm just lacking the words. Antibiotics should be a last resort, prescribed by a vet on a per-animal basis after other conditions are verified to be fine. There should be a clear financial incentive to keep farm animals healthy by default!
I wrote a wifi hotspot app for Android that could MitM HTTPS requests as you suggest about 8 years ago. Even back then it didn't work very well because even without HSTS preload, most people aren't visiting new websites for the first time on your free public Wifi.
This is a bank, and they are regulated. Depending on the information shared, this may be a breach of that regulatory code.

I do not have access to see what the data is, but would certainly in their shoes investigate with high priority, and Would raise a security incident to do so. If it turns out to be empty and of no concern, then great. But ignoring such things is seldom wise.
I just installed it, it's nice. The UI is simple ("webby" is how I'd describe it), and it seems adequately responsive.

Being able to switch between the file browser and terminal is very handy.

The one thing I would like to see is the ability to set the editor for the remote files instead of relying on my system defaults.

I'm not quite sure it's ready to replace WinSCP for me yet, but I'll definitely give it a chance and see how it goes.
Self-Hosting+with+Docker:+The+definitive+handbook
So while I disapprove of this kind of data collection and wish it was more tightly regulated, I wonder...

What makes this newsworthy compared to the "regular" data collection done by Facebook and Google?
Birthday paradox is way too important to omit from this list!

For example if you're uploading stuff to a bucket, you can compute its hash first to figure out if a duplicate already exists and if so, skip the upload.

Why can you do this? What if it was just a hash collision? Shouldn't you still compare the contents to really make sure they are the same?

Turns out if your hash function is N bits you will need to have 2^(N/2) items before you see two hashed to the same thing by chance. If you choose a 256 bit cryptographic hash function like SHA256, that's 2^128. This probability is so low you have a higher chance of encountering a cosmic ray bit flip!

https://en.wikipedia.org/wiki/Content-addressable_storage

https://en.wikipedia.org/wiki/Birthday_problem
This looks super cool! I'd love a pitch for when you use a terminal clj repl versus your development environment. For years using Python I was constantly experimenting in a terminal REPL, but now with CIDER (or other IDEs--I just happen to use CIDER) it feels like the integration is so good I just do all my REPL work as a side effect of using an editor.

For a long time I ran venantius/ultra but too many of the dependencies ended up randomly breaking stuff. These deps look a little less likely to do that so I'll give it a shot :)
From the CEO message: "As CEO of Avast, I feel personally responsible and I would like to apologize to all concerned."

As I always read (and I don't agree much), everyone says "it's better to ask forgiveness than to ask for permission".

There you go.
This is kind of the opposite. With Selective Sync, the file exists on Dropbox.com and 0 or more client devices, and each device can choose whether or not to sync the file. The new ignore feature allows a file to exist on one device without being uploaded or synced to other devices.
Caches are not "unambiguously beneficial".

They are beneficial in many situations, but from time to time you find the case where using a cache introduces more latency because the failed cache request + the request to get the real data takes longer, or the failed cache request causes a cascading failure rather than a request to the real source.

Then there are all the problems with invalidation.
To be honest I'm not sure if the corruption was replicated directly, or if it's just that the same file got unlucky on two different drives -- I can't recall if this was before or after a drive failure.
Slug can glue frogs to trees for days (2019)
It has a GUI and a CLI[0] option. You need a license to use either.

[0]: https://www.filebot.net/cli.html
Could they make it work like git? Then all of the templates hosted by https://gitignore.io would work!
Not trying to convince anyone, but if someone is already using Clojure with Emacs (which the annual survey seems to suggest is the most common case): those are all features you get with CIDER + clj-refactor as well. If you use spacemacs, I think they mostly just work out of the box if you turn on the Clojure layer (and maybe turn on clj-refactor -- I forget if that's an option or a default now).
Not really because most sites you visit you've already visited before. HTST preload only helps for the first visit to a site. After that it makes no difference.
In a Recent Simulation, a Coronavirus Killed 65M People
surely this is jailable fraud?
I get it. But to be fair, there are many for-profit companies that offer lower tiers of their products for free (or even opensource), no (or little) strings attached. So it is certainly not the norm.
duplicate, https://news.ycombinator.com/item?id=22167651
> airports especially

Indeed, lets not forget what the Snowden leaks said about airports:

https://www.cbc.ca/news/politics/csec-used-airport-wi-fi-to-...
This just in: you can write bad code in any language.

In this case, that language is the C Preprocessor, already well documented and widely accepted as a Bad Language To Start With.

The title of the article is misleading: it's not "destroying C" it's writing Bad Code using the C Preprocessor. It's not destroying C any more than a series of bad puns destroys the English language.
There’s a thing often used of “fine triple the financial gain”.

Fines towards individuals tend to be associated to the crime committed , not to the persons paycheck. Why should it be different for companies?
> It's a terrible Java GUI.

As far as Java GUIs go, I've seen far worse than this. It's fine to me.

I use WinSCP daily. It is very functional, but beautiful is not a word I'd use to describe it.
The key here is “admitted.” Reports from Wuhan all indicate the hospitality rate is much much lower than usual circumstances since the patient count is over the roof (due to CCP trying to cover up initial cases), and a lot of patients don’t get treatments at all as a result. The high mortality rate is expected sunce only the most acute cases are admitted.
Making vehicles is hard. There are a lot of logistical and technological challenges, plus the deep penetration of cars into society means that marketing, perception, and utility are on the lips of the hyper-rich down to the common man.

With batteries... you just make batteries. With cars you have to score adequate or better in lots of different areas to be competitive.
I came across too many people who value mean soooooo much in the analysis. Well, some of them made mistake and the project died.
Hypothesis: heavy reliance on mean increases the probability of failure in internet industry.
This reminds of PG's essay mean people fail:
http://www.paulgraham.com/mean.html

Pun intended :)
I use it in every single IntelliJ IDE I use. It is highly underrated in my opinion. When I first saw it suggested I was immediately sure it would be useful. Somebody tried to argue that good spacing is the way to resolve any confusion with multiple parens, but I don't think so, visual colors are way better. Java devs love to put curly braces egyptian style, I prefer the C# approach personally, but with Rainbow braces I don't have to care.
I've never seen this. They usually just block all HTTPS connections and rely on automatic captive portal detection in modern OSes. Occasionally I've had wifi that had a captive HTTP portal but would allow HTTPS through anyway.
Sea Jellies Triple Swimming Speed Through Cybernetic Implants
TL;DR: absolutely yes it's competitive with CIDER; there may be experiments in the CIDER ecosystem that you won't get with Calva but 99% of the stuff you will actually use works totally fine in Calva and if you like VS Code you should definitely not think twice about it :)

Caveat: I don't use Calva myself, but I'm the president of the Clojurists Together Foundation. We just funded Calva's development and of course did some due diligence in the process. It's definitely got a ton of features, it's stable, but it's maybe slightly less feature-complete than the CIDER ecosystem right now. Hopefully funding helps change that, I'm a happy Emacs + CIDER user but rising tides lift all boats :-) One thing I love about Calva is that there's less fiddling. You just turn it on and you get 99% of the actual functionality of a top-end Emacs setup, except you didn't spend hours getting it to actually work. (Spacemacs makes this a lot better, but not everyone uses Spacemacs.)

While Calva isn't CIDER, it does build on stuff that is either directly from CIDER or de facto from CIDER (e.g. nrepl), so fortunately there's a lot of development effort that directly or indirectly helps both projects.

Finally, the shameless plug: if developing the Clojure ecosystem is important to you you should consider giving us (Clojurists Together Foundation) money -- we've funded critical infrastructure like CIDER, fireplace, Ring, Reagent, shadow-cljs... Oh, and we keep a little thing called Clojars afloat :-)
OLAP: Online Analytical Processing. Cranking through large amounts of data with a focus on aggregations like sums, averages, medians, etc. Measures (numbers) are defined by dimensions (attributes with usually discrete domains). Aggregations are frequently precomputed on many (or all) dimension axes so that they are immediately available. Models can be built from something as simple as a wide CSV file or as complicated as a snowflake schema.

The kind of relational database you're familiar with is probably OLTP (Online Transactional Processing).
Eternal plea: for those of us who want to see what the paper's about before downloading it, it's better to link to the abstract at http://arxiv.org/abs/1810.05338 .
Update yours, and read more carefully.

Direct genetic transfer among higher organisms doesn't happen, and in fact the mechanism for how it happens indirectly isn't really known, but probably includes viruses and some carrier for them between species like mosquitos.

Also, the chunks of information being transferred aren't coding for specific functions, they're transposable, meaning they're non specific enough that even if you copied them from one organism to another in corresponding area of the DNA strands, the results would be completely different.

It'd be like copying the letters "lp" from the word "alphabet" to the word integer, as in "ilpnteger". The result is very different in function to the original. It probably doesn't make sense (not a viable organism) and while it does help drive genetic variation which is important for evolution, that's very different from a wholesale copying of meaning (phenotype, or the function of the genes in the original organism) to the new word.

Putting it more simply, if you copy the genes for a bat's wings wholesale to a human, you don't get a winged human. The most likely result is something that won't grow beyond a single cell, or if it does it wouldn't be recognizable as human or even an organism. The chances of getting something resembling wings are very low, and a human that could fly using them is literally impossible.

You can't copy the moth's "stale offspring" feature to another organism by copying genes, it just doesn't work.
If we are discussing the viability and sustainability of any particular thing we should be using the current industry standard numbers and a reasonable estimate of where the industry is going. There's no sense discussing whether option A is sustainable or not if nobody actually produces option A is outdated and the next decade of installations will use option B.
School Attitudes About Exclusionary Behavior Among Adolescents and Young Adults
Does anyone have any ML Packages that directly integrate with SQL Databases? I feel like the ETL market is well covered with a myriad of tools, but our data scientists at the end of the day still want to extract giant CSVs b/c their python progs "just don't work natively" on an RDBMS (they probably do, but it's not the way it's done, and these guys aren't programmers for their first job anyway).
Past comments

https://news.ycombinator.com/item?id=13449229

https://news.ycombinator.com/item?id=10042050
I think it depends on the developer more than the platform.

On the enterprise side, I've seen a lot of hot garbage. But I've also seen a lot of good stuff.

DBVisualizer, while not having the prettiest interface, is a pretty fast and functional application built on Java.
How about both are responsible?
Not necessarily, there are plenty of applications that use their own trusted root CAs and thus technically the app is validating it. Most popular example being Firefox.

Often libraries have options to specify trusted root CAs as well as options to disable validation per host and/or globally. I've never come across any library that would have any of these options enabled by default.

With that said, apps like banks should still not be putting trust into the OS or anything else. Certificate pinning is a good and should be utilised, especially for sensitive systems such as banks' apps.
I know this page visually looks amazing, but it was really hard for me to read the content. Weird layout and huge font sizes.
> Second, when I finally managed to get Guacamole to establish a VNC connection to an OS X client, the performance was straight up horrible.

Well, there’s your problem: Mac VNC. In order to get “OK” VNC performance on a Mac you have to:

* Make sure a display is connected to it (either real or a display emulator dongle)

* Use the built in Mac VNC server

* Use a VNC client like Remotix that has support for the VNC extensions that Apple uses to boost performance

In other words, use something else, like NoMachine (or similar) which does h264 compression.
List of must-have CLI tools for Linux
Oh I hadn't known this, I know the configs for Nginx are rather powerful, but didn't realize they were this good. Maybe alternatively somebody could make a web UI to make managing this sort of thing for Nginx simple. Most neckbeards will rage about that, but they don't have to use it.
Wishful Leading
> there's no magic between iOS and the ipad hardware.

I love hacker news for these gems. Lmao.
I went to a supermarket in the UK recently that had an electric car charging area, with space for around 8 cars. Guess what the maximum charging power was?

7 kW.

Seven! What is the point of that?
Ari Emanuel, WME and the Great Hollywood IPO That Wasn't
> brief period of time where NoSQL was in fashion, but it rightfully died pretty quickly

That what is not standardized, dies
It's also not defined whether the executable code is in RO memory or RW memory. By your argument, we should also be concerned that the attacker could modify the code directly.
Why shouldn’t you implicate the developer?

If your manager asks you to implement something that can kill people you have a moral obligation to quit.

Whoever implemented this is as much of a shitbag as the executive who asked for it.
Pretty sure that government could just buy a patent like this at a price that they choose. Some countries might choose to do that, some might not.

Also, patents expire after only 21 years. They have patented this molecule now, but they haven't actually got a treatment as yet, meaning that the clock is ticking.

I don't know if you can copyright a molecule?
Why Kobe Mourning Is So Intense
+1 for Apache Kylin, it's a great project and awesome open source community. If anyone is curious about what modern OLAP is capable of, check it out.

If you want an alternative take on where OLAP is today and what it is capable of, I usually recommend this article: https://kyligence.io/blog/olap-analytics-is-dead-really/
I thought the name of the REPL was Asciinema.
In some subtle way C was already "destroyed" with the introduction of C89. The K&R C had simplicity and beauty to it. Include files were small as they only contained the essential stuff (mostly definitions of structs). UNIX version 7 - the last "true" edition of UNIX - including its entire userspace - was still written in it. X Window system was written in it. Vi was written in it. Now all people do is complain.
Please stop spreading misinformation outside Twitter, where Indian media is basically rampant, to communities like HN.
Qobuz has lots of popular music from major labels (including Gorillaz). I'm not sure how much more mainstream it can get, but if something you're looking for is missing, I'd say that's a failure and neglect the labels involved should be blamed for. Do you have an example of a release you can't find as lossless download (excluding obviously rare material)?

> Boomkat: See above, except I've not personally used it. Also downloads seem to be a one time thing, sounds like you need to ask support for a limited number of redownloads?

How many redownloads do you think you need? All your purchased releases stay with your account, ready to be downloaded at any time again and while I had to re-download some of them repeatedly due to network errors on my end I never ran into any download limits. Should be a non-issue.
Is it illegal to write someone else's name, like "Donald Duck" in the field, in legible script? It's clearly NOT your signature then...