skysight-inc/HackerNews huggingface dataset:
CISCO has not only a long history of creating backdoors, but have also been marketing them as features. They even wrote an IETF proposal (RFC 2804) for a LI backdoor:

https://tools.ietf.org/html/rfc2804

https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/Bl...

Edit: Schneier wrote in 2018: "We don't know if this is error or deliberate action, but five backdoors have been discovered [in CISCO] already this year." and linking to this article: https://www.tomshardware.com/news/cisco-backdoor-hardcoded-a... (the final count went up to 7 actual backdoors discovered in 2018.

From May 2019: https://www.scmagazineuk.com/cisco-firewalls-routers-switche...
Agree this is not the solution (though I find it funny and clever), and I say that as someone with lifelong social anxiety.

In fact I think it's counterproductive because you'd bail more often and get less practice with confronting and overcoming anxiety. Avoidance is really tempting, but not the answer.
Yes, you sound like a very typical whatsapp user, I can see how whatsapp could work fine without contacts access, since most users are like you. 3 total contacts, all with different area codes -- very typical, I don't know why whatsapp even asks for contact access, probably something nefarious.
Amusing personal anecdote -- the Knight debacle caused the market in general to tumble. The week before a coworker of mine -- sure of a market drop but for other reasons -- had bought a raft or puts on the S&P 500. When I saw looking glum at work after the Knight news broke, I asked him what was wrong didn't you make a ton? Yeah, he said, but I can't get out cause my account's with Knight.
This may work for some, but not many types of work.

For example

> * Version control [...]

If I am working on a non-trivial system made of some novel-ish material doing some hard-ish measurements (I just described most of experimental physics/chemistry/material science) then there is approximately zero other people in the world who can reproduce without considerable effort.

This reproduction effort is meaningful/justified once the original group finds some cool effect and ensures it is not spurious, but that's relatively late in the paper development (and at a point where it would make more sense to write a new paper for follow up rather than contribute to the current work).
That's a terrible idea. For one, RFC1918 addresses are perfectly fine IP addresses, and as such are perfectly fine to put into DNS, but also, if your security depends on this, you are not secure, because rebinding attacks work just as well with non-RFC1918 addresses if that's what you happen to be using on your local network, so devices and software have to be secured against rebinding attacks with a non-filtering DNS anyway.

Plus, it just breaks things. More than once have I had the problem of trying to serve files to other devices on a LAN I was visiting, only for their idiotic local resolver to helpfully refuse resolving the host name of my laptop because, oh surprise, it resolved to an address on that LAN!
Well put, I’m ashamed at the current state of our industry.
A standardized ABI does not inevitably lead to malware closed drivers. That's a ridiculous assertion.

Device managers don't care about Linux anyway, and wouldn't suddenly start caring if Linux announced a stable ABI.
What does this mean for VM technology like Parallels and Oracle?
This is great. A calm, accessible analysis of a complex, emotive and apparently volatile topic. Well done NHS.

Of interest here's a Freedom of Information request about the consultants Bazian who produced this for the NHS:
https://www.whatdotheyknow.com/request/bazian_services_to_th...
There was a similar app for Facebook too where the app remained quiet unless you were both interested in having sex with each other and then it would send notifications to the two people.
Nothing surprising about it. These cheap Chinese cameras are just like that: buggy, default telnet passwords, silly vulnerabilities, crashing ActiveX plugins. Dahua/Xiongmai/Herospeed/whatever doesn't matter, everything is awful.

Using these devices outside isolated VLAN with only RTSP tunneled to trusted client is just bad idea.
Being behind a nat, without any firewall, is more than enough to protect against this. In other words, you need to work hard to be affected by this "backdoor".
SVT-AV1 is faster than x265. https://medium.com/@ewoutterhoeven/av1-is-ready-for-prime-ti...

"We have found that the real-world compression/speed trade-offs for AV1 are in fact excellent, and better than HEVC." https://blogs.cisco.com/collaboration/cisco-leap-frogs-h-264... Discussion https://news.ycombinator.com/item?id=20291344
I'm in full agreement, but that idea isn't popular here, where I find folks a bit fatalistic. I understand why of course, assuming 'someone will solve it' takes the urgency out of the problem. We do need to take action, absolutely. But am I worried about sea level rise here in Florida? Not at all. There's just too much money at stake to throw our hands up and run. And I don't mean just here, or even the US... most of the world's wealth is on the coast.
Show HN: Self-Published Book – “Guide to Nevada's New Data Law” for Developers
I just self-published a book about Nevada's new data privacy law for web developers, website designers, and internet companies.

The European Union's GDPR and California's CCPA receive more attention in the news, but some websites must comply with Nevada's new data privacy law.

Here are some links:

- Sample Excerpt (PDF):
https://www.dropbox.com/s/ljs3sjke3nmfzby/Nevada_text_pocket_guide_February_2020%20%5Bexcerpt%5D.pdf?dl=0

- Paperback (on Amazon.com): https://www.amazon.com/dp/B084DGFQK3

- Kindle (on Amazon.com): https://www.amazon.com/dp/B084H37KC3/

Please let me know of any feedback.
>but how many of those projects is it possible to install and use without installing and using at least one other project from the same repo?

Nearly all of them. Have you actually tried to do this? The only thing I can think of off the top of my head that won't really work separately is journald.
Yeah 10 years ago you could support millions of users on a high traffic site on a single box. (This was on postgres in my case.) Today, I'd guess at least a 10x increase due to both software optimizations and increased hardware capabilities, if not significantly more.

Truthfully, unless you're working on some kind of non-transactional problem like analytics, even assuming you will need to shard the data or scale out reads ever due to user activity is borderline irrational unless you have extremely robust projections. The database will be the last domino to fall after you've added sufficient caching and software optimization. It's so far down field for most projects (and the incidental complexity cost so high) that my personal bias is that even having the conversation about such things on most projects isn't even worth the opportunity cost vs talking about something else.

Even then, the first thing to fall over will probably be write heavy analytics-like tables that are usually append only due to index write load. Out of the box, you can often 'solve' this by partitioning the table (instead of sharding.) In modern DBs, this is a simple schema change.
The word the author was looking for when they wrote "explainability" is actually "explicable," as in something that can be explained, and is converse to the more commonly used word "inexplicable."
i see what you mean but it 's kind of circular: the causal model is assumed, then observations are made and a law is formed which can be used to make predictions. The law itself is symmetric in time though and can make predictions in reverse, so the causal model is not baked in it. Regardless, this causal model works for physics which has well defined hypotheses and well defined deterministic systems. In biology , establishing causation (and thus explanability) is tricky because , even though hypotheses are well defined, the systems are not very deterministic.

In ANNs OTOH, even though the systems can be very deterministic, there is very little to make in terms of hypotheses. An explanation of the sort "you have cancer because neurons 10, 18, and 19 fired" is not satisfactory enough to pass the human test. It may be that for some complicated problems, searching for patterns in the neurons in order to explain them may prove to be futile. Not that people should give up on that, but not everything has a neat closed form explanation. Lecun mentioned above that you may have recurrent relationships (which also occur in quantum systems), and these muddy the waters a lot, making it difficult to establish cause and effect. It is also a major pain in neuroscience, when real neurons are seen as an evolving dynamical system.
Electrical 'storms' and 'flash floods' drown the brain after a stroke
Having been forced to become a single dad over the last few years - your view is wrong in my opinion. But I will admit I had a similar view before my own experience. The thing is, society teaches boys/men to be self-focused and work-focused, and we subconsciously derive our own self worth from being good at those things. But that is not biological, I am pretty convinced of that now. If you were to single parent your children, you would see quite quickly you can develop a very similar relationship that a mother traditionally has. It's just a matter of spending less time on yourself and work, and more time on your children and the running of the family. Then those stronger bonds just develop naturally (and are the silver lining of my own experience).
Lex Fridman Interviews Jim Keller
An hour of work put in by any of you reading this is worth several months of hosting for a starter project in an expensive provider like Heroku.

Do not invest time making sure your service runs for $6 a month if it can run for $50 with 0 hours invested. Invest that time talking to customers and measuring what they do with your service.

Most times a few customers pay for the servers.

This is just a friendly reminder. I see a lot of comments talking about running backends for cheap.
Ask HN: Is it possible to get Blessed to render to the DOM?
I'd love to be able to take advantage of Blessed's (https://github.com/chjj/blessed) terminal capabilities in the browser, perhaps with Xterm.js (https://xtermjs.org/) or something.

Has anybody made this happen yet?

Thanks!
Drivers are moving to user space too, but it's another case of something that will phase-in over two versions of the OS.

>DriverKit is a new SDK with all new frameworks based on IOKit but updated and modernized, designed for building Driver Extensions in user space outside the kernel.

You can build and test certain types of drivers in Catalina, but they won't be required until the next version of the OS ships.

>In Catalina, you can control USB, Serial, Network Interface, and Human Interface devices.

They will announce support for more kinds of user space drivers over time.

If there is not an available user space option for a particular use case, the existing kernel space option will continue to work.
> Not so with Nvidia GPUs. The open drivers are awful; the proprietary drivers are good.

Good by comparison to nouveau (the open source driver) perhaps, but definitely not good compared to the open source intel/AMD drivers.
Yup -- these already exist. I can't find the 6-port commodity surge protector implant (I've seen it before), but these are the other relevant tools you're thinking of: https://shop.hak5.org/collections/network-implants
I believe, that the difference between purchase price and retail price is a major and tricky one, if you set for retail, but if you can't solve it for 500 million, then there is something wrong with your software.

Also

"Critics inside Lidl say that KPS was too slow. But Matthias Nollenberger, a senior manager at KPS who was responsible for overseeing the eLWIS project, says his company was working too short deadlines compared to other similar projects"

I belive when you have the choice between aborting 500 million and increasing some deadlines, I doubt they were the problem. It simply was not possible to adobt SAP with reasonable amount of money. And the consulting company or SAP should have said that at some point clearly.
"Jerk's don't know they're jerks, that's why they think you're the jerk."

Don't violate your own standards of conduct, but don't put up with their shit either.

Stand up for yourself, but politely.
> It's because I've tried to follow these discussions, and usually it resolves around that.

Fair enough. That hasn't been my experience, but it's not important.

> It would end up being just another coffeescript without any notability.

Ah, perhaps I was unclear. By "turn elm into something mainstream", I meant something like "make it indistinguishable from other mainstream things with nothing to distinguish it". That sounds like what you mean here.

In any case, I don't think this is true, and I'd still be interested in hearing your reasons for thinking it.

(For example, are there specific design decisions that you think (a) people are clamoring for Evan to make differently and (b) would turn Elm into something that isn't distinguished from anything else? I can't think of any. Parent seemed to be referencing kernel code, but Elm 0.18 had that, and it wasn't just another coffeescript.)

> It is precisely so interesting because Evan is being pragmatic.

What do you mean by "pragmatic", here? My natural interpretation would be "Evan is making compromises to the core design to make Elm easier to use", but that doesn't seem to fit. If that's what you mean I just plain disagree, and I think Evan would too. (Though, again, if that is what you mean then I'd be interested to hear your reasons for thinking it.)
This. You aren't asking for vague blanket permission, nor are you asking for the user to manually fill out a survey. And you give them the opportunity to review what they're about to send.
On YouTube you already need a device that supports VP9.2 to get HDR. And there's a huge amount of HDR TVs/STBs (including Sony and the flagship Shield TV) which don't get HDR YouTube because they only support base VP9 and H.265.
Those things are only around 30 nanowatts each.

https://en.m.wikipedia.org/wiki/User:BRW/images#/media/File%...

https://www.wolframalpha.com/input/?i=5.4+MeV+*+33000%2Fs+in...
OpenCore loads kexts differently (sorry for lack of technical explanation) so you can keep SIP enalbed, in addition to other advantages over Clover or other methods. More info below.

OpenCore Reference Manual
https://github.com/acidanthera/OpenCorePkg/blob/master/Docs/...

OpenCore Vanilla Guide
https://khronokernel.github.io/Opencore-Vanilla-Desktop-Guid...
Private payrolls: the best gain in nearly 5 years
First step would be to kill advertising-based models. Get them banned. Because it's the advertising industry's race to the bottom that poisons everything, and fuels the creation of surveillance infrastructure. With ad-related snooping gone, it will be much easier to rein in the remaining few players who misuse data in pursuit of optimizing their business models.

(And yes, I know ads enable a lot of free content on-line. But as countless problems like this show, it's a bad tradeoff.)
Firm360 – All-in-one accounting practice management software
Is there more to this, or can you really just be employed to make babies? Most couples can produce another baby before the leave expires.
The standard objections apply:

- Correlation, not causation

- Self-reporting questionaire

- Not controlling for meat quality/sourcing (though at least they differentiate "processed meats")
A bug and a misconfigured file share: a tale in two parts
It doesn't matter that it's optional and you could use some other service manager. The minimal amount of stuff it does is not really that useful without registering with a service/container manager. Of course it doesn't have to be systemd and machinectl, but anything else would have to implement the same dbus interface if it wanted to work the intended way. My point is that nspawn would not have been written if it couldn't piggyback on this work that was already done. Otherwise all you have is a cgroup, some firewall rules and some mounts in a random folder, which as demonstrated here recently, can just be done with a small bash script.
I've never needed more than a "normal" gas spring monitor arm for any of my ultrawides
This helps explain why reviews on Amazon tend to be worthless.
The way things were done before the current system took over (in the 1980s, I believe).

Not sure what it was exactly. I heard rumors that the journal often did its own review. Either way, if it was good enough for Einstein and Feynman, it might work for others.

The important thing is that the people whose careers might be upended by revolutionary findings can't stop or steal the ideas.
How to make money online with affiate marketing
Hello guys are you looking for a way to make money up to $100-$500 online, in this place I gat you cover. Check out this amazing website called WP affiliate suits. Is a place that
teaches how to create a long-term and sustainable affiliate marketing business promoting physical and digital products through WordPress websites. Click on this link to check it out https://warriorplus.com/o2/a/blv0z/0
I think it's quite funny, and you're taking it a little too serious.
Re: A lot of what people call logic are things like "not expecting a different result from the same behavior"

That can be semi-formal logic if it's stated as a given rule-of-thumb. Most of the time your debate partner(s) will agree with such rules of thumb, barring some odd edge case. If an edge case is allegedly in play for the context, that path is then explored in more detail.

In IT, often rules of thumb will conflict, such as "a stitch in time saves 9" versus "keep it simple" (YAGNI). In such cases I often use labor hours and finance-like decision making techniques, not unlike deciding on insurance: what are the monthly premiums (ongoing costs), how likely is the targeted/prevented event to happen, and what's the cost of not having the prevention or preparation in place. It's not a perfect model, but at least is a numeric framework to discuss with rather then "I feel that...". Probabilities and money (labor hours).
"Beasts of expert domain knowledge hidden in shitty codebases" is a great way to describe most of the enterprise software I've spent my career configuring and administering. And it highlights what most users of enterprise software don't fully grasp: You don't buy it because it's user-friendly or because it's the most modern technology; you buy it for the battle-tested built-in domain knowledge.
I find it incredible that cold calling works for you; everywhere I've ever worked in the UK and across Europe, cold-callers get short-shrift - with no exceptions.
What rebuttal?

> red meat: 0.17% over 10 years, 0.41% over 20 years and 0.62% over 30 years

0.62% increase over 30 years is next to nothing, especially when you consider that many people have shit diet habits anyway.
All about JavaScript's New Data Type: The BigInt [video]
>red meat: 0.17% over 10 years, 0.41% over 20 years and 0.62% over 30 years

Isn't this essentially nothing? Am I misinterpreting these results?
I would love to see the BMI as another dimension in the study. Given that a portion of meat would have _10-20x_ more calories than an equal amount of vegetables, you need to try hard to get overweight on a mostly vegetarian diet.

Of course, stating that red meat causes CVD is much more sensationalist than merely confirming that extra weight does it, since it implies that ~90% of the population [0] are making an unhealthy choice.

[0] https://en.wikipedia.org/wiki/Vegetarianism_by_country
Any Java code that is that tight would probably be looking at eliminating allocations, not making them faster. Allocations mean new memory addresses, new cache lines. If you reuse the same objects for the next operation, they're already allocated and maybe even still in cache. And since Java touches all the memory on object creation anyway, resetting the object isn't too burdensome.
Ask HN: Who to Follow on the Internet in 2020?
Do you know any significant figures with interesting insights and ideas that we can follow online? If they have a blog, Twitter, etc. that would be perfect!
And yet google is pushing hard to keep ABI stable in the name of extending android support because manufacturers just won't release their SoC drivers.
Create a Reading Scroll Progress Bar for Your Blog in JavaScript and CSS
You could sell the "flake metric" to advertisers.

It would be valuable information to say, used car salesmen.

They could look up a prospective customer wandering around the lot. If the customer asks for a test drive, check the "flake metric" and deny it for high flakers, who are probably just noncommittal tire-kickers.

:)
I know a number of developers in Berlin who speak little German. That said:

- If you go outside of Berlin, it will be harder

- Even in Berlin, sometimes your baker, cab driver, etc. might not have a good command of English

- dealing with authorities can be difficult (that one's even difficult if you know German because of the excessive legalese)

Also, in the end, personally I think that if you want to live somewhere you should learn the language because otherwise it's kind of a shame (unless you don't plan to stay long). But you don't have to know it necessarily before moving there, and plenty of people here just stick to their expat bubbles...
Back when I used to smoke I would ocassionally hang out with this guy from an investment bank that traded on the Japanese exchange. They had really cool working hours (started a lot later in the day) because we were based in Hawaii which is a few hours behind Japan.

Anyway, the guy told me that they had multiple big red physical kill switches so that they could immediately turn things off if shit ever hit the fan with their systems.

If you have ever spent time in Michigan you'll notice that the manufacturer test vehicles have a big ass red button on the dashboard to kill the vehicle in case something goes wrong.

I cannot imagine doing anything remotely close to this sort of thing without a big ass red kill switch on my desk.
Is that 34 inches? You might be luck that the one you bought has higher max weight capacity.
Early stage social media/news feedy startup here, wondering if a strategy of just starting off with Firebase and praying will work.

I figure if we did get to a thousand or ten thousand users, we could recruit the DevOps talent to pull this off before the bills kill us!
now that is a novel idea!
Context: I'm building a roguelike (https://en.wikipedia.org/wiki/Roguelike) and would love to be able to take advantage of Blessed with react-blessed (https://github.com/Yomguithereal/react-blessed) to render everything.

If I can get Blessed to render to the browser, perhaps I can use that as a renderer for react-blessed. That way I can build an entire terminal interface in React. And even if that didn't go through, I'd at least be able to write a custom React renderer to take advantage of Blessed's window functionality and stuff.

If all that fails I'll just have to write a Blessed-lite layer for XTerm and then write a custom React renderer for that.
Note that this wasn't actually a study, they just looked at 6 other studies and based a consensus on that.
PS -- author here, happy to discuss.
> the only relationship required is "customer"

That's what I meant by "third party". Do you have an idea who that is in this case?
I'd say it depends on the product and market.

Account-based selling has a few reps focused on a few key decision makers within an organization. It works exceptionally well for mid-market and enterprise software.