skysight-inc/HackerNews huggingface dataset:
>>> Then again, we're talking about DoJ indictments of foreign soldiers for allegedly accessing data that was open to all...

I just noticed that you made a pretty mind-boggling claim there. Is it really your position that Equifax's data was "data that was open to all"?

> There was an unsubstantiated claim that something had happened in one nation, therefore we can assume it happened in some other nation!

No, we can make informed speculation in a discussion. That's quite different than "assuming it [actually] happened."

The main issue here is that you appear to read something, misunderstand or exaggerate it into hyperbole, then respond to your own hyperbole. That's not a good way to have a discussion with anyone.
Definitely gives me some nostalgia for the days when I ran AfterStep for my desktop machine while at Netscape.
You should try living for a while in a country with no rule of law and no judicial system. I suspect you would quickly change your views.
I pay about $60/mo on digitalocean for a side project that brings in about $65k/mo now. Digitalocean is severely underrated for startups.

project: https://www.indiehackers.com/product/crave-cookie
oops i mean big corporates, like, major companies throwing millions at them
There are examples in that paper of scenarios of effectively influenced coin tosses...
You fool!
If we don't stop polluting CO2, there will be no where on earth where we can live. This cannot be mitigated away. There are multiple dozen positive feedback loops that will take us to oblivion.
I was going to say, I'd love something like this for OS X circa Leopard era.

We all have our dead favorites I suppose...
I was going by AirSafe reporting 0.00 for their FLE. However, due to the size of SouthWest, a single fatality throughout the history of the company probably does not change this number from zero.

http://www.airsafe.com/airline.htm

However, they may not have updated their site beyond the incident summary because Southwest is still listed as an airline with zero passenger fatalities.

http://www.airsafe.com/airline.htm
Too much uncertainty can also risk war. It all depends on what you're uncertain about.

MAD doctrine is based on both sides being reasonably sure neither can get away with a first strike. There is interest in having that fact independently verifiable; spying is both providing that verification and serving as an incentive against overstating your actual capabilities.
why not be a real man and then translate back to python?
Three Ways David Calhoun Can Fix Boeing
You're way too cautious in your human interactions, which is terribly sad. But I understand it because of our business culture.
The same is true for a die :-) It could make a difference for the coin if you “rolled” it instead of catching it in the air.
It's sustainable because the amount of money that's life changing to people in the poorer parts of the world are a moderate purchase to people in the richer parts. Additionally the benefits last way longer than just the initial purchases made with the money, by giving it directly to people instead of giving them things it's injecting cash into the local economy where it circulates multiple times going through multiple people's hands. There's studies showing this kind of direct giving and the economic activity it generates is effective at improving people's lives. The goal of GiveDirectly is charitable after all so they're not trying to extract value from the population.

> And who wants free money?

Are you trying to say people won't accept free money?
text-only version: https://text.npr.org/s.php?sId=804586191
Thanks! Yes, and we’ll soon be offering Melodia's own premium service as well :)
if there's a feature i want as a customer, i do care if i can get that in two months vs six months vs a year. i also care that it's stable.

reputation and trust are hard to measure, and the effect is delayed. unless you have the killer app or feature, with the internet now, word will get out. many a company has tanked their reputation.

iteration speed also makes you vulnerable to be leapfrogged. Azure vs AWS seems to me to be this. a lot of Azure stuff is great now, some of that is hindsight, but real innovation at AWS is also rare. their developer tools, aka code*, are completely underwhelming. as is cloudwatch. ec2, s3, dynamo, and general lock-in are just enough to keep a lot of people.... for now.
Afterstep blazed on a Pentium 100!
True ! Apart from
That working on something you care about at least a bit in an industry that you also care about .
There’s a number of problems with that:

1) With node sizes getting down to 5-7nm, it’s out of reach for standard X-ray technology.

2) Lets say you use some cutting edge technology like x-Ray tomography [1]. Now how do you read this back out and know what each circuit is doing? You could compare to a ref design, but maybe that ref design already has the backdoor in it?

3) How you get from VDHL/Verilog/hardware spec to chip is a proprietary, difficult, and computationally intense process that is anything but open and even if it were, require extreme computing and specialized technical talent to understand the final chip layout vs the input

4) Even if you could do that, the shear complexity of the code could have things hidden “in plain sight” by exploiting non-obvious features, such as all the side-channel timing attacks common on Intel chips these days.

5) Even if you had that down, you’d have to have someone like AT&T opening up hundreds or thousands of these machines, removing all the chips, hoping that no damage occurs and your imaging technology can read through the chip packaging, and imagine them one by one and ultimately compare to some reference.

Needless to say, this is not a realistic endeavor. We’re talking state-level espionage with resources and motivation. You have to control the supply chain, and hope your own supply chain isn’t compromised itself.

[1] https://arstechnica.com/science/2017/03/bright-x-rays-reveal...
My sister's cat is a mouser and at some point he learned how to catch them w/o killing them. He likes to bring them inside and let them loose to run around under the furniture.

Anyway, one day he caught a little gopher, and man was that thing pissed. They were facing off and I still remember how impressive and silly it looked when the gopher stood up and roared at the cat. It was super high-pitched but unmistakably a roar. The cat blinked! (But only for a moment. The gopher was really small. She got the lil guy away from the cat and put it back outside. But at one point it was under her bed doing the "E.T. among the stuffed animals" routine with the junk under there. Oh look! That's not a wadded-up sock that's the gopher!)
From the article: Havre, MT is using this approach and has been able to put off a $1MM upgrade to its wastewater plant (in addition to saving $16k to date on alum).

Bozeman, MT but is not currently using the process, as you noted.
As a person who has fond memories of Solaris CDE and and Irix, I can sympathize with you.

However, overlapping windows and toolbars and launchers and mousey-mouse-mouse for everything ... it's bad usability and very inefficient.

The high water mark for GUI design is something like ion3/ratpoison, xterms running screen/tmux and a "desktop" that you never see ...
No, right?

Because the prospect of financial growth is missing in a mid-level 9-5 job.

Whereas the 4k/month could be 24k/month next year.
That's a more recent phenomenon in the US, which had usury laws in place in most states to prevent predatory lending. Payday lending was the province of the mafia in my lifetime.

In 1980, congress passed a law that neutered state usury laws, and prompted banks to change their charters and re-domicile in places like Delaware, South Dakota and Utah, especially for credit cards. The supreme court further weakened state regulatory authority in the 90s by defining fees as interest, and thus outside of the scope of state authority.
If I didn't know any better I'd say you were trying to sell me wooden nickels. This looks exactly like Windowmaker :D I like to say that about people's next stations whenever I have the chance
Beer has a long history of byproduct uses. Bakers used to approach the brewers to see if they could skim some of their excess yeast to use for baking bread.
Ah yes, the alcohol excuse. Who would have thought that allowing alcohol on flights wasn't the best idea?
The Samsung Galaxy S20 Ultra features a 108 megapixel camera [video]
Do you usually pay by the hour for these services? I'd like to try it but am pretty cost-conscious lately.
I don't see information on how names are handled. I know Zeronet started the entire .bit (which can be purchased with NameCoin). Are there reserved TLDs for handshake?

Has ICANN said anything about .bit or .onion TLDs? I suspect TOR is big enough they won't touch .onion, but if they sell .bit, you'll then have some name overlap/conflicts.
Where I work, we just hire the best applicants for the job. As it happens, at least in the dev side of things, the workforce is approximately equal in diversity with the community we're in. The same was true with my previous employer as well.
Very cool.

I just signed up, but was a bit frustrated by the hijacked experience for sign-up as it broke my LastPass plugin to generate and save my password. Just wanted to point this out.
This seems like a good opportunity to plug two aliases I wrote about a year ago that have been very helpful for cleaning up all the extraneous branches that would show up when I ran `git branch`.

I run `git listdead` after I merge and delete a branch and do the next fetch (`git pull --rebase`). That lists the branches that can now be deleted.

Then I run `git prunedead` and it actually removes them.

Previously if I ran `git branch` it would list every development branch I had ever created in nearly a decade of work. Now it lists maybe ten branches.

listdead = "!sh -c \"git branch -vv | grep ': gone]' | awk '{print \\$1}'\""

prunedead = "!sh -c \"git branch -vv | grep ': gone]' | awk '{print \\$1}' | xargs git branch -D\""
DAZN
WWE
TuneIn
JeFiT
Spotify
Netflix
Sirius
Dropbox

Does not include subs I use for my business like GSuite, Freshbooks, Front, Zapier, Monday, etc.
Already posted here → https://news.ycombinator.com/item?id=22310813
It seems like anyone that can find steady work outside of the algorithm is definitively doing things right.
Hub[1], the previous Github CLI, was written in Go too, so I don't think this is much of a surprise.

[1]: https://github.com/github/hub
There is a limit where the pain is too much. For example we tried to develop for Nokia sometime around 2000 but eventually gave up because the SDK was just too bad. It was a good platform and there would have been money in it but development was just too painful and risky. It seemed Nokia wasn’t really interested in developers despite constant reassurance from developer evangelists.
Nice astroturfing.
It also means that you can destroy your ‘backup’ easily, and get your erroneous change synced to every machine that syncs with the same Apple account, destroying most copies of the affected file(s).

Unlike Dropbox, iCloud Sync doesn’t version files, so that’s not easily corrected, even if you spot the problem early.
> these places tend not to hold their value over time, and to feel very dated after a couple decades.

Is anybody building property near the coast of Florida hoping for more than a couple of decades of value? Sea levels are rising.
I think the statistics to compare self-driving miles vs human driven miles are quite tough to judge.

Tesla was criticized quite a bit at one point for comparing deaths per Autopilot mile to deaths per all motor vehicle miles. This was a bad comparison because motor vehicles included motorcycles, as well as older, poorly-maintained cars, etc.

Then Tesla released a comparison between Autopilot miles in Teslas and human-driven miles in Teslas where Autopilot was eligible to be engaged. This felt like a much more fair comparison, but Teslas are lenient about where Autopilot can be engaged - just because the car will allow it doesn't mean many people would choose to do so in that location, so there might be some bias towards "easier" locations where Autopilot is actually engaged. There's also the potential issue of Autopilot disengaging, and then being in an accident shortly afterwards.

This is morbid, but I also wonder about the number of suicides by car that are included in the overall auto fatality statistics. If someone has decided to end their life, a car might be the most convenient way (and it might appear accidental after the fact). That would drive up the deaths-per-mile stat for human drivers, but makes it tougher for me to decide which is safer - Autopilot driving or me driving?
My mistake. 6 or 7 DIFFERENT apps. I have one Sirius sub that we use in the one car we own.
“semi-” is not a synonym for “easily done with production-ready results”. Until that changes, people are going to need to write new C code even if they're working to refactor their code into a better language.
Not sure what you mean with better. However great the content is doesn't matter. Producing great content consistently is already going to cost money. Buying readers is going to cost even more. How much would it cost to take on say newscorp? But say for sake of argument you happen upon a pile of money at the end of some rainbow. If you then chose to publish rebellious unflattering articles about the status quo there will be infinite funds available to silence you. Not that you will ever get to that point.

I look at things like facebook likes and youtube views for US presidential candidates. There are lots of candidates! The amount of attention they get drops to 200 views per video at the green party. Slightly further down they don't have the likes or views to account for direct friends and relatives.The numbers are so incredibly low that we can see non of the journalists around the world even took notice.

The system is perfect, you cant do better than this.
That does not take away from the fact that the double coincidence of wants is not a myth. A lot of card trades depended on both party having a card that the other party wanted when no monetary medium was used. I am not saying that this was always the case but it happened often.
what the fuck? I specified POSIX alternatives to non-POSIX uses in the code. only one feature, brace expansion, is not POSIX, so I specifically did not recommend its use.
In practice, we're not just talking about the US backdooring telecoms systems within their own borders. They were caught red-handed compromising exactly these lawful access systems in the European allies they're now leaning on not to use Huawei telecom systems in order to tap their politicians' phones.
What are some good ways to avoid distractions? I often find myself watching YouTube/Netflix or on steam for endless hours before realizing it
That would work too :)
>Created: 40 min ago
That’s the part I don’t get either. The only thing I can come up with is he wasn’t paying attention to the drive up to that point and didn’t notice he was in a problem area.

I have a Tesla and there are definitely problem areas. You learn them fairly quickly when you are taking the same route all the time and you’re trained to either turn off autopilot or at least be alert when going through those areas. Or maybe you test it out with your hands on the wheel ready to take over to see if they fixed the bug.

There were a couple spots on my normal driving routes where the car would inexplicably swerve. It happened one time in each spot and that was enough. Both those spots have been fixed since, but there’s no way I’d be on my phone not paying attention driving through there. I’m still cautious. There are two more spots where the car will brake to 45 mph on the highway and then speed back up after a few hundred feet. I am always on high alert around there and usually won’t even use autopilot in those areas.
Research: Organizations That Move Fast Do Break Things
Giordano Bruno said (I've heard) that whatever has the greatest value and least cost of storage becomes money.

https://en.wikipedia.org/wiki/Giordano_Bruno
The specific dealings of the church aside, there are some seriously concerning philosophies coming out of all this. I wrote up a little something because I'm uncomfortable with the things I'm hearing members say.

https://apathofmyown.com/saving-for-a-rainy-day-prosperity-a...
That’s simply not true. Manhattan is home to 1.8 million people, several hundred thousand of whom are children.

18% of Manhattan’s population is under age 18, compared to 24% nationwide.

Fewer families than a suburban area, sure, but still many, MANY families, a large fraction of Manhattan’s population.
What do you mean it's a punishment?
Languages like Haskell, OCaml, Rust are a perfect fit for financial industry. I would not trust my money to the Python runtime errors. It's always good to see more and more companies who realize benefits of them.
First impression: Great another ICO.

Second impression: Not a wildly outlandish idea but im not sure if it's a good idea either. Decentralized and automated registrar with a concept of renewals. Nifty.

I'm not really sure how the economics here work out.. Could I scoop up a few million names early on and then hold them forever? Has that already happened? Could this enable anonymous registration? Would these things make users trust these names more or less?
https://watrydesign.com/insights/top-10-issues-affecting-cos...
They've somehow managed to make the two least optimal choices of language possible.

The full node daemon, hsd, is written in Javascript.

A non type safe language with poor package management for consensus critical code.

We also have a light client, hnsd, which is written in C

A non memory safe and error prone language for client code people would run on their systems as root.
That’s great feedback, thank you! We’ll definitely see if we can test across a few different password managers / signup experiences to make sure it’s a smoother process.
Some humans drive blackout drunk. You overestimate our competence.
Google uses a custom implementation of the Perforce interface called Piper. Google has looked at git and mercurial, but have concluded that they can't scale to the level they need it to. Read more about it here:

https://cacm.acm.org/magazines/2016/7/204032-why-google-stor...
It's frustrating that they'd release a new CLI and nowhere address its relation to their existing 'hub' CLI.

Edit: found a note in their readme on github: https://github.com/cli/cli#comparison-with-hub

> For many years, hub was the unofficial GitHub CLI tool. gh is a new project for us to explore what an official GitHub CLI tool can look like with a fundamentally different design. While both tools bring GitHub to the terminal, hub behaves as a proxy to git and gh is a standalone tool.
Entrapping users with interest bearing loans is modern day slavery.
"US says it can prove Huawei has lawful intercept access to mobile-phone networks" would be a better headline.
brew install github/gh/gh is a shortcut for brew tap github/gh && brew install gh

It has worked for several years now, but I'm not sure if it's documented anywhere.
Oh cool, so they work now?

When I was setting up internal PKI back in 2015, I wanted to limit the CA to be less dangerous. At the time name constraints did not work. At all.

It wasn't possible to create a CSR with the field in OpenSSL, because the config parser didn't know about the key. So I did what any self-respecting person would do: I created the CSR manually with low-level API, plugging in the OID directly. When I tried to sign that one, the openssl libs just blew up with BIO_read_XXX errors everywhere.

I then tried the same thing with golang's TLS stack. Trying to operate on a CSR with name constraints triggered a panic. So I gave up - no name constraints on internal CA.

Never got to try it out, but considering how the client libraries behaved on seeing the flag, it would have been amusing to see how different clients behaved when served with a certificate chain that ended up in name constrained CA.
Referring to David Moon namelessly as "the author" in comments about language design (on Hacker News of all places) does not inspire confidence. Whether or not you agree with him, Moon has been involved in language design and implementation for decades. His perspective is directly relevant to discussion that's primarily focused on large scale trends in language design. I don't necessarily agree with everything he says here, but it is definitely worth thinking about, especially where it challenges accepted dogma.
In the US an upscale place would never bring a terminal to your table. They give you a check (receipt), you put card or money down, they take it to their register, and bring back a customer receipt or change.

Money is often a taboo subject in the US, and I think that is bleeding into a slow adoption of touchless transactions in nice restaurants.

It will take at least 5 years for this part of US culture to give way to convenience and security.

*Note I've not spent much time on the west coast; I'm sure they're ahead on this
lol you really think we fall for your comment?
The exact person to whom my comment was a reply lol.
Nope! For various reasons, including that the IdenTrust cross-signature has a path length constraint that doesn't allow any longer chains for this path. Also, Let's Encrypt doesn't want to be responsible for supervising the correctness of your CA's operations.

In theory this could be practical if you look at name-constrained delegations but it seems to me that there are a lot of practical problems with making this widespread. If you happen to be interested in discussing them in more detail, come over to https://community.letsencrypt.org/ and create a new "Issuance Policy" thread and we can get into it in more depth. But the short answer to your question is simply no—Let's Encrypt doesn't offer this service, isn't currently permitted to offer this service, and isn't interested in offering this service.
I was about to say you are being cruel by calling these widowmakers
The handshake namespace overlaps with the normal domain name system, but they reserve the top 100k domains for the current owners. My only concern is the long term sync between DNS and the old system. But I like the project and I think it’s a good way forward for replacing the current centralized DNS and PKI system
A tip for anyone reading here — SiriusXM will gladly give you a year of service for $60+fees (about $74 last time for me). You don’t even need to threaten to cancel. Every year I call, tell them it is too expensive, but I’d stay if they give me the same price, and they always do. Something like the last 10 years...
I would really like to see a more modern version of the nextstep style In the same way I'm using fluxbox with my own style that reflects something a little more modern. Just need to figure out how to get proper alpha compositing for a few things. xcompmgr works fine with stuff like konsole for me, but the menu transparencies are not active in fluxbox. still looks very nice. You could do a lot with wmaker styling just get rid of that awful blue gradient and use some more modern fonts (I'm using nerdfonts for a lot) the ui toolkit is kinda blocky/bulky that's all changable though looks a little better on high-dpi
Because we are all part of the Western family. Kiron Skinner has put the point well

> “This is a fight with a really different civilization and a different ideology and the United States hasn't had that before,” Kiron Skinner, the director of policy planning at the State Department, said Monday evening at a security forum in Washington, D.C.

...

> “The Soviet Union and that competition, in a way it was a fight within the Western family,” Skinner said, noting Karl Marx’s indebtedness to Western political ideas. “It’s the first time that we will have a great power competitor that is not Caucasian.”
Looks like this is similar to Namecoin?

https://www.cs.princeton.edu/~arvindn/publications/namespace...
http://archive.is/hk4Cd
Security breach leaks the personal data of all 6.5M Israeli voters