skysight-inc/HackerNews huggingface dataset:
I can only speculate but I've given a lot of thought to this problem and:

1. nobody has suggested it as an alternative; nobody wants to completely get rid of the system we have now. PKI requires electronics to create and verify signatures created with the keypairs.

2. Because financial institutions do not care and it's not their prerogative. The social security administration is not responsible for people's credit reports and as far as their concerned their is no problem.

3. People are afraid to try new things and new technology and it's up to the government to see that it's done correctly. Theoretically a problem could arise from somebody making a business out of "keeping track of your private key for you" which negates the purpose entirely.

4. People are lazy, and not everybody cares and doesn't necessarily speak to the benefit of people who don't care about their credit or their identity which is why I say it should be an option.

5. If cryptography fails, then the whole thing is pointless. But, I think most people will agree if cryptography fails we will have much bigger problems.

The solution I have in mind is similar to what I've seen with "paper bitcoin wallets" where you have two QR codes: a public and a private key. Imagine a social security card with two QR codes. When you create a bank account, or when you get a state id or something you can get another set of qr codes, that have a record of signatures provided by a state department's private key or that of a financial institution along with a signature provided by your social security card. With your new set you can safely put away your social security card. The idea being, signatures can represent business and billing agreements as well as establishing an identity chain similar to how PGP's web of trust works. Anyone can have your public key, you just have to keep your private keys safe. Even if somehow you stupidly manage to screw this up, it's not that hard to start over. People lose social security cards now and they have to be re-issued. They just have to come up with the system for it and start doing it.
1) Aforementioned companies don't market themselves as "privacy-centered"
2) If you re-read the original post, you'll notice that I was talking about trends. Increasingly aggressive telemetry and "interest-based" features is a relatively recent trend in Firefox, so give it some time before comparing it with megacorps that developed such stuff for years.
We had this PM who ran our meetings, when people phoned in from the road she would say, "please take your calls while your aren't driving" and boot them from the meeting. Now I do the same thing and you should to.
Same here. Was expecting Safari to suggest a password, yet it did not. By inspecting the cause I was appalled to see custom inputs! Mother of dragons!
Any home office post that doesn't mention leafblower noise mitigation is unprepared for the rest of society =(
Risk distribution is very bad. You have a long dam, of which a single failure at any point means flooding a lot of land. Individual dams along the coastline will, in most cases, only affect the land behind them. Plus it's easier to fix a coastline dam than one in the middle of the sea, possibly during a storm.
My wife is a woodworker by trade and this metaphor is on-point.

I return to my original point: if your company is working on something where "production" is novel/unique/a differentiator, then you probably need to invest a little time in how you manage and deploy to production (e.g. you need something that's more than just a jig, and you can't go down to the store and buy it because it literally doesn't exist).

There is probably a certain point in scaling an engineering org (maybe 50+ devs) where you inevitably have to devote some engineering time to this anyway (e.g. you adopted/bought a tool that requires non-trivial maintenance and customization).

If, on the other hand, you're working on something where production and deployment are a well-understood--maybe even commoditized domain--then you should direct your precious engineering time elsewhere.

Marketing website infrastructure has its nuances, but it's well-understood. CRUD apps that talk to databases are a similarly well-understood area.
I always imagined that iPhone users can install keyboards from the app store like Android users can. Is this type of app forbidden in the store?
Show HN: A Review and Discovery Platform for Crypto Products
>Unlike LSD or psilocybin salvia hallucinations salvia . . . user is often rendered catatonic.

Woah! Granted I’ve see only seen a handful of people use it, but it’s the only drug which I seriously worry about it causing agitation/frenzy so severe as to induce outward violence.
Yeah, I would think that it would still "count against" SW in that regard, even though it wasn't a "plane crash" or whatever.
The NTSB report information is public, from the NTSB docket, https://www.ntsb.gov/investigations/Pages/HWY18FH011.aspx, he wasn't traveling at 71 miles per hour.

"At 3 seconds prior to the crash and up to the time of impact with the crash attenuator, the Tesla’s speed increased from 62 to 70.8 mph, with no precrash braking or evasive steering movement detected."

The autopilot accelerated into the barrier.
Yea, but if you reuse the paper, it becomes an accidental palimpset with all the layers visible.
I've been moving domains to uniregistry to get away from godaddy's constant price increases.

In the middle of transferring another 60 domains over I get a notice that goaddady is taking over uniregistry.

then later that day I see these stories about icann raising the prices even more.

maybe the article about this handshake un-censor-able domains thing will provide some good news for this space.
( https://news.ycombinator.com/item?id=22310604

What is the most uncensored registrar for .coms now?
I refuse to let the names I've been working on be taken over by godaddy.
How to escalate privileges and steal secrets in Google Cloud Platform
Everything You Need to Know About Chocolate
I'm reading about the product, and hoping it's not too good to be true.

I'm working on a digital magazine and have been trying to create animated SVGs for interactions, and it's been a struggle, as the existing tools (some described in the post), require far too much work to animate a small icon or graphic.
That site also uses the word "crash". The Southwest flight in question didn't crash, per se... it landed at an airport. So if they mean crash to really mean "incident", then their site would be wrong. If they meant something closer to "fell out of the sky"... well... they'd maybe be right, but misleading. Crash or incident, that person certainly had a bad day and probably didn't care much about how that was categorized.
I really need to go back and clean up that article but I got so much hate for talking crap about as3 that its pretty much pointless.
Southwest uniquely allows passengers to board the plane as they please. Random boarding is mathematically the faster way to board (where other airlines choose the slowest options to drive priority boarding upsales), but has this side effect.
The project raised $10M and then gave 100% of it away to open source projects. They receive some HNS tokens in return. There is a massive airdrop of coins to hundreds of thousands of guthub users, spreading out the money supply to people who might be the most interested in using the system. In other words, this is the least ICO-y new blockchain in a decade.

Names roll out over 52 weeks: HashName(name) % 52 = week number that a name is available. So that should attenuate squatting. Also bidding on names locks up coins for something like 2 weeks, so it's hard to bid on too many names.
Seems to me that Forge already covers all demonstrated features via the GitHub API, so I'm guessing: not at all. Forge is really nice.

(In case 'tarsius is reading this, one thing I would wish for is if Forge could work independent of a git repo. I've seen a pattern in several places now where they run a single project in Gitlab with just the issue tracker, and no associated repository.)
Improving Compilation Time of C/C++ Projects
Preliminary feedback: it took me 5s and single downscroll to grasp what this does and why it may be useful.

In current climate this by itself is a remarkable achievement so wanted to point it out.
Hottest datastore on the web. If you like JSON, and dealing with things later
Handshake didn't do an ICO. They raised $10.2m from institutional investors like A16Z, Sequoia, Greylock, and Founders Fund, and then donated all the money they raised to non-profits and open-source projects. Here's a notice from the free software foundation when they received $1m from Handshake https://www.fsf.org/news/free-software-foundation-receives-1...
ENS is running on top of ethereum just fine
Compared to Spotify, SiriusXM has lower content costs (favorable statuatory licensing rates and a larger fraction of exclusive owned content) and a better user demographic (wealthy middle age Americans). Their churn rate is negligible.
Until you apt-get update and they break :)
Yes, that is very unfortunate. Ars Technica at least will disable trackers on paying members
The question is whether the problem is one of insufficient engineering optimization or whether it requires a step-function in technology that does not exist now. It appears to me that self-driving cars are of the former type, while flying cars are the latter.

Current-resolution lidar, cameras, and radar seem to provide sufficient sensor input. The costs are too high by a long shot, but that may just be a question of getting economies of scale established. Current PC graphics hardware has sufficient bandwidth to process those sensors. I don't think you can just throw current neural net training at the problem and get Type 5 autonomy out of it - there will be lots and lots of engineering hours in figuring out what to do with that sensor data - but that's just a problem of doing many man-years of straightforward work.

Flying cars don't have adequate power from a current-gen internal combustion engine running on petroleum, and especially not enough power from lithium-ion batteries and electric motors. If you could get a power source that provided an order of magnitude or two greater power density than the best of those technologies, flying cars would be viable. Until then, no amount of engineering hours will make it work.
Thank you for the incredibly insightful reply! There are a few things in particular that stood out. I have worked mostly remotely during a period of my career, and I know just how important it is to maintain discipline and clear, constant communication.

I feel we'd be quick to identify low-performers, because it can get demanding quickly here. I'm a pretty hands-on manager for the time being, though always trying to foster autonomy as much as possible, but I know what the team is doing at all times -- we keep track of it with the help of allocation maps, and regular syncs with the dev teams that would leave little space for someone to... space out. The team keeps itself accountable, too: they wouldn't let anyone underperform for long, without trying to address it -- and mostly, in a very positive way.

The one-off calls with Engineering you mentioned, that's something I'd really like to highlight: it's been a mixed bag for us. As practice, I usually reinforced the need to collect all information needed in one batch and only then addressing the teams to get the answers needed. Sometimes, it just works, but there's always something missing. Following-up isn't always easy, and not everyone takes it lightly. That's when it's just easier to go and get 'em, in a 5 minute catch-up for clarification. Technical writers, per nature, are shy people, as are devs. Face-to-face interaction doesn't come naturally, but it's been known to work.

The problem is when other teams just choose not to reply. That's usually when I'm CC'ed, but there's good will established, those issues have been mostly overcomed.

As for the working hours: I am, and the company as a whole, is very flexible. I don't care what time they get in and what time they get out; I don't care if they're at home, as long as they're approachable when needed. I only care about them getting the job done. If they wanna go the same way that fella who outsourced all his work to China or something and then just validated their work? I'd promote them.

In its entirety, your answer was great. Thank you! I'll be keeping this all in mind, even share with the team right now. (Maybe not the part about shady promotions and all)
I received a trial of Sirius when I bought my vehicle. My Dad bought a life-time subscription (at a time they were practically giving them away) so I had listened to Sirius a few times when borrowing his car. My impression was they have bought and paid for a particular catalogue of music and they play that catalogue pretty exclusively. That catalogue seemed to have the 4th or 5th most popular songs from a huge list of artists but rarely the top 3. It is a massive catalogue but when you listen to it enough it starts to become repetitive and I would start to wonder "do they even have any other songs by that artists" after hearing a b-side for the third or fourth time.

I even considered buying it anyway since I like to go on trips to remote areas (fishing/camping) and can't rely on data for my phone for Spotify. In many rural places there is only a single radio station and even then it may be mostly static. But I found in those locations even Satellite reception was spotty, especially in the mountains or valleys I frequented.

Compared to top-40 FM radio, Sirius is amazing. It had its time. But comparing it to the internet with Youtube and Spotify (or Apple Music, etc.) just blows it away.
>Google Analytics doesn't report visits for users that have ad-blockers on, right?

It's not really on GA but rather the ad blocking plugin you use (Or even if you are using some browsers that try and block trackers).

As an example, if you use UBlock Origin, I think by default it uses the "Pete Lowe" list to block, which by the looks of it Simple Analytics is also blocked on : https://github.com/simpleanalytics/roadmap/issues/200

Typically UBlock is just a "block all" type thing. Adblock is a little different in that they started allowing through "Acceptable Ads" (Not sure if that extends to trackers), which people went absolute ape about because now "Ad Block" doesn't block "all" ads, just ones that it deems not acceptable.

But anyway. TL;DR; Any tracker, ad, CDN, hell even HTML Fingerprint can be blocked in ad blocking plugins, just depends on the will of the people maintaining the block lists to add it.
Mudlarks Scour the Thames to Uncover 2k Years of Secrets
Right, you're comparing against 50 years ago. Yes it was the Wild West back then.
Namecheap and Gandi.net get a lot of love from HN.
I'd say it extends more than overlap: If a name is not found on the Handshake chain, the resolver "falls back" to legacy ICANN DNS. Since all current gTLDs are reserved as well as the top 100k, there won't be any overlap for a while.
Note: The following might be considered off-topic. On the otherhand, there might be something nefarious in the SMS network.

I found something strange that affects SMS in Canada. You can send the lower case text "secure communication", but it will never be recieved by the recipient. I am not sure if this behavior is reproducible outside of Canada. It might be a software defect, or perhaps there is something capturing the text and trying to interpret it as a command. The issue is more difficult to reproduce if both the sender and recipient devices are iphone's due to the default behavior of sending via iText.

I originally posted about this late last year [1]. I intend to investigate this issue more deeply, but my time has been consumed by another more pressing matter. The original HN post links to my blog post [2]. Originally I jumped to the conclusion that it was a case of censorship, but I backtracked on that because the issue is case sensitive. I would love confirmation if this is reproducible in other countries.

[1] https://news.ycombinator.com/item?id=21593276

[2] https://bloggerbust.ca/post/text-messages-are-being-censored...
Treating Front End Performance as a Feature
What you describe as a "high water mark" is only optimal for a very limited set of use cases. Overlapping windows with toolbars, launchers, and mouse control is on average superior for the total set of use cases especially for non-expert users.
I don't know why people comment with archive links for WSJ articles that were in the print edition

https://www.morningstar.com/news/dow-jones/202002128400/boei...
That’s a fair point and I share the same concern. I would have allowed anyone that owns a domain and can prove it, to get their domain for free in the new system. You could do the proof similarly to how Let’s Encrypt does it
He was a VP. I’m not aware VP is a mid level management job. I always thought director level and below would be the case.
There are a few replacement keyboards you can use on iOS, yes
Good2Go – the mobile consent app that doesn't get consent
I usually go for the one with the most downloads, but it's true that it can be confusing. Reminds me of the SUSE package web search back in the days.
Thanks very much for the summary!
Option A is the best imo, I worked on many sql db's that the rule was to fit it into ram. Option c will bite you in the ass eventually. The kernel and your other processes need some space to malloc, and you dont want to page in/out.

Having 4/16TiB servers or "memory db servers" as I thought of them solved a lot of problems outright. Still need huge i/o but less of it depending on your workload.
The Magic of Compounding Skill
Electric cars didn't even take off yet. It's 1-2% of total car sales and valued like 90%

There is also a lot of gouvernement subsidies die electric cars and the range was not good.

There internet in those days was as good as it is now in Western countries.

We'll c, but I'll be happy to place an online money bet.
In the medium term the intent here is Delegated Credentials. The TLS working group is putting the finishing touches on a mechanism which goes like this:

You still have TLS certificates like today, but the private key corresponding to the public key in that certificate lives on a dedicated machine that's not accessible to the outside world, rather than your web server.

This dedicated machine uses the private key to sign tiny messages which basically say "I, the owner of this TLS certificate you've seen, authorise this web server for a short period (say 24 hours) to prove its identity using a short-lived key which you can verify using public key P".

Then your web servers serve up the TLS cert (for which they don't know the private key) this short message with P in it, and proof they do know their short-lived private key which can be verified using P. Browsers check the certificate, the delegated credential message and so on and you've got all the same security but with much shorter lived credentials.

This way, when somebody finds a zero day in your tremendously complicated web site and uses it to steal the private key, that key is only valid for maximum 24 hours and so you can close their window of opportunity relatively swiftly if you're on top of it. Meanwhile the dedicated server for making the signed messages is not publicly accessible and can be simpler and thus more secure.

This isn't really a way forward for making toy web sites with 1000 visitors per day, but if you're building anything where you already have multiple servers possibly in different locations then it's more interesting.
Let's say 6 hour battery life was advertised as a feature. Now your phone after 2 years of use only gets 4 hours of battery life. They changed the phone in an update that brought it back to 6 hours of battery life by sacrificing speed. You can't have the best of both worlds.
The 2000-2002 were an anomaly in the entire 35 years history of Nasdaq-100:

https://en.wikipedia.org/wiki/NASDAQ-100#Annual_Returns
Curios if your familiar with any of Gabor Mates writing, and if you have any thoughts?
I installed this on a whim, worked surprisingly well on my lts Ubuntu system. Ultimately I didn't adopt it, missing too many things I have come to expect and depend on, but still was a really fun afternoon project.
Scientists make major breakthrough in ‘quantum entanglement’
Getting Remote Employees Swag in a Breeze
After ‘Parasite,’ Are Subtitles Still a One-Inch Barrier for Americans?
Mac OS 8 migrated from Chicago to Charcoal, I think. Chicago was resurrected as the UI font on the first iPods because it was a similar situation as the original Macintosh that Chicago was designed for (low-res monochrome screens).
At one job, I wrote a moderately complicated Makefile (~200 lines) to build the company's product. Worked great.

After I left, I heard the company 10x programmer replaced it with 10KLOC of C++. (sigh)
Seems like we're proportionally better at the seemingly more complex task of driving, than we are at maintaining our health. Heart disease in the U.S alone apparently kills about as much as half the number of worldwide car related fatalities each year.
This kind of an article sounds incredibly damning to me. It indicates that Boeing is essentially rotten on the inside and that anybody doing business with them should be wary.
Everybody is different. You might be more productive at doing stuff the "Rails way", somebody else might not be. I know I won't be, simply because I don't know Ruby and/or Rails enough to be productive in it.

Not every organization can use this approach either. E.g. I work at a True Java Shop(tm), where voicing the idea of using Ruby for a back end service would get me laughed out of the room with a permanent label of That Funny Guy Who Likes Toy Languages.

Using React for a front end client application that consumes back end API built in Java is 10x more productive than doing the traditional "Java Way" application with server-rendered HTML.
I haven't looked at DNS in depth in a very very long time. My recollection is that it is a pretty simple protocol. Is that still the case?

If it is, I wonder if it would be reasonable to build a small stand-alone DNS server specifically to use with Let's Encrypt for this. You run this on your own server, and it only handles the domains that you need to satisfy Let's Encrypt.

Point the _acme-challenge record there with a CNAME on your "real" DNS server, and whenever you are getting or renewing a Let's Encrypt certificate, bring up the small stand-alone server.

When the certificate issues or is renewed, shut down the small stand-alone server.

Some Googling of the form "simple DNS server $LANG" for various programming languages $LANG turns up a few that could provide nice starting points.

Perl: on meta::cpan there is Net::DNS::Nameserver, meant to provide a local nameserver for testing local client resolvers, but would probably be adaptable.

Python: [1] under 50 lines and using no imports other than "socket". It's very minimal, but shows dealing with the protocol. [2] [3] [4] are all using something called "dnslib". [2] is nearly 150 lines, but it is more complicated than we need. It's even using multithreading. Same for [3]. [4] is much similar, and much smaller (comparable to using Net::DNS::Nameserver in Perl). Another library for simple DNS in Python is pydnserver [5].

PHP: I didn't find anything simple. All I found was much more full featured and many more lines of code than we need.

Go: [6].

Bash: [7]. I'm not sure what disturbs me more. That someone made this, or that I searched for it.

Ruby: [8].

[1] http://code.activestate.com/recipes/491264-mini-fake-dns-ser...

[2] https://gist.github.com/andreif/6069838

[3] https://gist.github.com/pklaus/b5a7876d4d2cf7271873

[4] https://stackoverflow.com/questions/33531551/how-to-create-a...

[5] https://pypi.org/project/pydnserver/

[6] https://gist.github.com/walm/0d67b4fb2d5daf3edd4fad3e13b162c...

[7] https://gist.github.com/CheRuisiBesares/f35f71f028926e65191d...

[8] https://github.com/socketry/rubydns