skysight-inc/HackerNews huggingface dataset:
Will they though? I often hear stories of people reporting this to Amazon, being assured they'll look into it and the same seller still being up 6 months later.
Raku Weekly Review – Challenge #46
I am glad that you liked our paper :) (the distributed bloom filter paper requires serious editing though).

Current sparse Merkle multiproofs require an index and a hash inside the proof. So in our hypothetical example that would be 30-40 indices and 30-40 hashes. Only then can a recipient of the proof perform the operations in the right order to recreate the original merkle root. With our proposal on the other hand, for this hypothetical example, we would need 30-40 hashes, and only 5 indices for a recipient to be able to recreate the correct Merkle root.

Here's by the way a great repo that can create sparse Merkle multiproofs https://github.com/wealdtech/go-merkletree
But in order to prove that to someone that doesn't have full history, they would have to synchronize it, by downloading all the data and verifying all the transitions. With Merkle tree (identified with its root hash, just as blockchain is identified by hash of its head) it is possible to verify there is a value inside without full synchronization.
What I mean is, doesn't the ubiquitous presence of ordinary email on the desktop create an unacceptable risk of the "inevitable unencrypted reply" for any secure messenger on the desktop?
Sendiio 2.0 Review and Bonuses
Yes. Style with inline tags, you're generating your HTML anyway. Use tag names describe what they do rather than "semantic" tags that aren't. Rather than agonising over which polyfills you need to get flexbox support, do table-based layouts that render reliably and quickly in any browser. People went crazy for the <video> tag in HTML5, but <embed> achieves the same result and a nicer UX to boot. What's not to like?
Secure protocols ensure that user agents are secure, as part of the protocol.

A secure protocol would, for example, not mix plaintext and encyrpted text messages, but would ensure that all messages were always encrypted. This way a we'll designed user agent couldn't accidentally mix cypher and plaintext messages.

I'm not arguing that UAs should do user hostile things in the name of security, which is the straw man you're arguing against. Nor did I mention anything webmail specific.

I'm saying that a security protocol shouldn't have, in practice, fail open attributes that user agents have to put warnings up about. A good protocol should allow the UA to entirely hide those dangers.

This is abundantly clear if you try to use any pgp mail client vs any signal protocol client. The protocol makes it easier for UAs to be both more secure and more user friendly.
How to build and launch a SaaS in 30 days
This has to be satire right? How is it even legal to produce a car that only works with an internet connection?
> So we initially had it towed to our AirBnb because we had Wi-Fi there and thought that would be enough to start the car, having our phones securely connected to Wi-Fi.

> But it turned out it actually needed to be towed ... to the nearest town with cell service.

> I'm a tech reporter. I'm pretty tech savvy.
A smart surface for smart devices
As it seems we have moved away from just Udemy courses - I think the content on linuxacademy is generally good, and their labs are useful.
It might. But the Android phone manufacturers tend to build their own interpretation of the stock Android features. The main factor that confused me on the iPhone was the lack of a back button like I'm used to on my Galaxy.
Zydeco: Jazz Up Your Perl
7 Actionable tips to get you in the “flow” at work
The internet of shit is alive and well.

Live tweet at https://twitter.com/kari_paul/status/1229428892802392064
When I open the page: "Firefox stopped a social network from tracking you here".

Thank you, Firefox.
Well I agree they should think about it before taking the position.

This does not seem to me incompatible with the idea that not paying your TA a living wage is shameful.

I also think most of the strikers did think about it. But if the opportunity comes up to join a movement (which can achieve something, unlike you own solitary actions) to fix a flawed standard... why not joint it? Be prepared to face the consequences if it fails though.
US employees accessing EU data held in the EU in manners that contravene EU laws, would be breaking the law and would expose their company to prosecution in EU courts.

The issue is not about technical feasibility, it’s about exposure to legal repercussions.

You can argue that respecting EU laws might expose you to prosecution in US and vice-versa, and that’s absolutely true. International law is messy.
Things to know before the stock market opens Thursday
Gwern Reviews “The Cultural Revolution: A People's History”
Has "private equity firm" in a sentence ever been followed by good news? Why do they seem to mess things up so badly?
GDP rankings are as follows from the last posted results (2018):

1) United States 20,544,343.46
2) China 13,608,151.86
3) Japan 4,971,323.08
4) Germany 3,947,620.16
5) United Kingdom 2,855,296.73
6) France 2,777,535.24
7) India 2,718,732.23
8) Italy 2,083,864.26
9) Brazil 1,868,626.09
10) Canada 1,713,341.70

So out of "EU" it's only Germany which was larger according to those figures (from the World Bank).

Of course things will have changed over the last couple of years, but I doubt it is substantially different in terms of order.
> PS - Btw, skeumorphic design is back, watch out for it in the next decade.

I think it was seen as cool for some people to talk negatively about skeuo, because it brought clicks. Most of these blogposts criticizing skeuomorphism never understood what it was about at first place, and it has nothing to do with how much bevel/emboss or drop shadow a UI has. Realword users like skeumorphism because they want some familiar UI, not some abstract/minimal thing that looks good only in Dribbble...
Last I checked the formatting results of toLocaleString differ between browsers and NPM for certain locales. A quick search finds a handful of issues on Github about it, but I'm pretty sure there's a more in-depth stack overflow discussion too. I'm not sure if this will all be superseeded by the new date handling proposals or not, but it's something to be wary of.
As nice as Godot might be, it still as a lot of growing up to do before it can match "ancient" engines.
Property Search Insider| in US AU Si HU NZ NY CZ SK CH IT
Damn, that good to see that $50 million Signal recently received is already being spent on marketing.
I've been generally happy with Ben Tristem's beginner game dev courses. Specifically because they make an effort to stay up-to-date with the engine updates, and they demonstrate every single step involved in the process so if there's anything a beginner Unity/Unreal dev gets stuck on in the process, they'll find a video demonstration of how to do it there.
I would think this would function better as a hat than a bracelet.
The play button points at the direction the tape will roll in your cassette player. It had a very practical function once upon a time.
Remarkable how the designers did not conceive that cell coverage doesn't actually cover every inch of the planet or is 100% reliable. What will we have next? A heart-lung machine that depends on 24x7 internet access?
Show HN: Walling comes to Windows to help you organize your ideas
Integrating a non-replaceable lamp is the trend. You buy the whole unit, it works for say, ten years and then you buy a different one when remodelling. This made no sense when a light bulb was just something that needs replacing every few months in normal use but LEDs mean you can engineer that out.

Replacing a "light bulb" will seem as weird as replacing the backlight inside your laptop. Obviously a technician can do it, might even make sense to pay for that rather than buy a replacement for the whole unit, but it's not something regular people do themselves.
Also see https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
Fresh images of the new railway super-hub at Old Oak Common
C is even more ancient and it is used by more developers than all the game engines added together. When people use "ancient" tools they tend to have good reasons for it.
The simplest way to add superior authentication to your website
The syscalls are quick enough when done locally. What I think is going on is that for a directory with N files on a share, I get N (or likely multiples of N) network roundtrips.

If the network round trip time is 1second and the time to delete the directory with 1000 files is 1 second when done on the local drive, then I want the delete on the network share to be 2 seconds not 2000 or 4000 seconds.
DeepMind releases JAX neural networks libraries
Udemy is a great platform for beginners who want to try different field or a niche without shelling lot of money (hey 90% off). They also have refund policy which is great too. I had purchased courses for photography, aws and newer javascript frameworks (e.g vue.js) in the past. There are many courses out there for the same topic, have to be careful in selecting quality course with good feedback.
Seems like (1) is doable, as long as it's opt-in. But if it becomes the default behavior, existing applications would break when they do something against the type system. I'm not sure what (2) buys you.
Remember the Freeman's Mind joke about guided missiles that fly out of range of the authentication servers?
>@GIGCarShare told us to sleep in our car on the side of the road and try again in the morning

...i...what...but why...that doesn't even make sense?...

>Gig told us we used our “allotted restarts” of the car

why is this a thing? if i rent a car from enterprise etc, they don't care how many times i start the car up, it's paid by time...just seems like yet another needless over-complication

also i wonder if these cars have similar issues in parking garages where cell reception is less than ideal.
Yes, the World Wants Your Startup to Fail
Is "pdns" PowerDNS?

* https://doc.powerdns.com/authoritative/dnsupdate.html

If we're just talking about issuing certs, I don't know why one need 4-6 instances for serving the dnsauth sub-domain.
> My English still needs work.

I had no trouble with your original post.

However, in my reply I tried to convey the fact that over time my level of care had diminished.

There was a time when I did care.

However after decades working in this industry I can honestly say my level of caring has been beaten down to a minimum.

My impression was your post was reflective of the start of that process.
>The internet of shit is alive and well.

IoS

It has a nice ring to it. However, I fear for its wider adoption:

https://www.apple.com/legal/intellectual-property/trademark/...

"IOS is a trademark or registered trademark of Cisco in the U.S. and other countries and is used under license."

Uh-oh.

Can see the headline now: Cisco sues budding Internet of Shit (IoS) startup claiming trademark infringement. Plaintiff filings also allege numerous instances of patent infringement, as well as theft of trade secrets.
Udemy's business model is, as far as I can tell, identical to Valve's: get digital pack-rats like me to buy a ton of stuff we'll never even open when it's on sale. Can't fault them for doing what works, though. Of the courses I've actually gotten around to taking, I thought they were pretty good.
DANE is only an option if your zone is DNSSEC signed and you have control of your DNS. Of course, there are other ways you can go: https://slxh.nl/blog/2016/pgp-and-dns/

You’re in control of publishing your public key, not the email provider.

I’d be remiss if I didn’t tell you how bad MTA-STS is:

* MTA-STS: compromise for the DNSSEC-challenged

* Still can and should prefer DANE outbound

* Authenticates domain control via CA leap of faith

* Vulnerable to MiTM at cert bootstrap

* Vulnerable to weakest root CA, and unauthorized certs

* Open to downgrade on first (or irregular) contact

* Complex mix of HTTPS, unsigned DNS and SMTP
Reverse engineering APIs from recorded traffic
"after
@GIGCarShare
told us to sleep in our car on the side of the road and try again in the morning we called a tow truck..."

Ugh.
Even smartphones sometimes have lower-resolution displays. 720p resolution is still rather common at the low end, and that's something where a 'pixel perfect' 16x16 icon can still make some sense.
For what it's worth, the success of my business doesn't hinge on whether Stripe gives me a dollar. I hope yours doesn't either.
Anatomy of Cascading Failure
Is it related to Bitcoin's design with input and output transactions and the double spend problem?

It still seems that the problem can be solved by including a hash of the previous record as part of each new record. Then to verify the validity of any given record, you just fetch that record, its predecessor and its successor. If the record's hash cannot be computed using the predecessor's hash plus the hash of the current record's transactions (in a way that it's consistent with the successor's hash), then you know the current record is invalid.
Looks like a case of great app developed without testing the usecase scenarios.
If I'd be the creator of Black Mirror this would be a fun idea to bounce around in the writers room.
I suspect this is a case of when it all goes well or at least not badly that it is simply normal and a case of 'not newsworthy'.

Yes, a lot of bad things happen in the world, but don't forget that a lot of good or just OK happens and never gets reported because it is just normal.
Facebook expresses 'deep concern' after Singapore orders page block
We already have a ton of apps which assume that everyone has a decent internet connection at all times.

I frequently land in places where my connection is but a trickle(with an absurd ping of 20s at that), and because of that a large part of apps simply refuse to work.

One notable exception is Facebook Messenger - if it doesn't work then you really don't have internet.
Thank you for sharing. You write:

> The source is incomplete, because it depends on several libraries that are not a part of this distribution. However, with an exception of simple_work_queue, these libraries are simple Win32 API wrappers and their functionality should be fairly obvious from their usage.

Just curious - if they're trivial wrappers - why not share them?
Well fuck me and shit in my pocket. This is a whole new level of Internet of Shit.
I miss recognizable colors, and clear silhouettes.

Too many icons now are monochrome squiggles and blobs on a (rounded) rectangle silhouette. About as horrible as it can get.
“Gig also told me is that they offer RFID card where you kind of scan the card to get into the car. So in the case that you don't have cell service or Bluetooth, you can still get into your car.”

- From the article.
You should have use "spelt" then :-)
From that list: “Senlin Ascends” is a journey up a steampunk Tower of Babel whose main character starts off as a bit of a prat, but over the course of the book (and series) really matures and becomes a great character. I highly recommend it.
How I Gather News to Help Build Communities
Thanks for the link. Bookmarking it.
Given that the UK is "intending" to follow GDPR and, for now, it is still enshrined in UK law, this initially seems like a bit of a sensationalist scare piece.

However, the lede is somewhat buried:

“There’s a bunch of noise about the U.K. government possibly trading away enough data protection to lose adequacy under GDPR, at which point having them in Google Ireland’s scope sounds super-messy,” Kissner said.

It's possible that, over time, the UK will adjust its laws and lose EU "adequacy". This currently seems unlikely so the game, from Google's point of view, is to work out whether to move out early and cause a sensation or to wait until it happens (if it happens) and then make a rush then.

It's complicated because things may change gradually, over a long period of time, and there may be some things that are advantageous earlier or later. Also, Google might not want to put itself in a position where it appears to be trying to influence British law: "if you change that particular thing, we'll move out". If they do it up-front under the guise of Brexit then they put themselves in the best possible position to use the data as they wish (within whatever law applies) and avoid such accusations later.

This is complex and involves a lot of game theory.
While we are at suggesting encrypted IM, I'm wondering something: I'm not using Whatsapp or Signal, but I have the feeling that for UX reason the users never have to validate a fingerprint (or QR code or anything similar). How is this working? They are using TOFU right (there will be a notice if the fingerprint change)? What happens if a user gets a new device? Can anybody with experience with those apps explains how it works?

Because e2ee doesn't really makes sense without proper authentication (we're talking about protecting against malicious server, right? So what happens if a server add a fake device or change fingerprint).

Conversations use Blind Trust Before Verification, that means that until a first fingerprint is checked, everything is accepted, so e2ee only protect against server archive/passive attacks, but not again an actually malicious server.

note: I'm a XMPP dev and I'm wondering how it's done in other apps as a point of comparison.
i would definitely expect it to be less secure, but not exactly plain text?
Displaying a date on a web page is so common that there should be an HTML tag for displaying a date in localised format.
And mark a few bees would not do any harm. Would made slightly easier to find the colony later in some backyard. Workers have short lives sadly but marking queens with a number in torax is easy and feasible and the mark will last for several years. Queen and colony are the same thing, stolen colonies could be easily identified just looking at the queen.

Is not a new technology. Microfilms and microfilm viewers exist since decades so the solution is available
Had the same experience in Spain. Turned off the car in a location with bad phone signal and the car wouldn't start anymore. Not even creating a wifi Hotspot with the phone (funnily enough our phones did have a weak signal. Ludicrous how a big car can have a weaker antenna than a weight-size-optimised phone).

After hours of talking with support, they finally sent someone to tow us to the nearest city. The car then had reception and finally started again.
Indeed, I stand corrected.
At 2:22 in the video, Ivan's manager says (paraphrased): "We are making the computer the human's (engineer's) assistant".

In 2020, he would say: "All engineers are the computer's assistant".

Where did we lose the way or we haven't?
The title is "Stop Using Encrypted Email" though.
ah come on, don't give anyone ideas :)

btw, testing is very important and i think most companies don't exhaust enough test cases. had google maps gone bonkers in the country especially during very bad weather. i don't think there is a map app out there that takes the weather into account...
Our goal with Walling is to create a beautiful looking app with an intuitive experience to help you collect ideas and organize projects into visual boards/walls.

We've just released the Windows desktop app and that makes Walling available on the web, macOS, Windows, Chrome/Firefox extensions. iOS/Android apps are in the making!

You can find the product roadmap here https://walling.app/XvglutVDmXy2tfcm5ggr/walling-product-roa...

Walling for Windows promo video: https://www.youtube.com/watch?v=3PHaGVGdhUA
How to Post a Freelance Job
I'm trying to figure out the correct process to post a very short term freelance opportunity.

The newsfaq page doesn't appear to provide the URL/steps/process to post, and I'm trying to follow the site rules.

thanks!
They probably used too much YAGNI,TDD,MVP and similar fancy named cool techniques and less good old thinking.
Privacy in neuroimaging: removing facial features degrades image analysis
Holy shit. This guy many moons ago taught me a Powershell advanced course in Brisbane (don't judge me).

Did not expect to see this here. Nor was I expecting to see myself already subscribed to his repo.

Edit: I have now noticed you posted it yourself, Grant :)
At this point i'm starting to think that browsers should offer basic stylable charting as a default html element.

This way charts could be implemented correctly, natively and efficiently.
Either they are secure, or they are not.
And don't forget there exist people that will literally try to defend this behaviour by claiming it is "too hard" (doesn't scale, or whatever) to do it right.

Like Facebook moderation, or Youtube complaints.
Intel Unveils Details of First Cryogenic Quantum Computing Control Chip
An M in the shape of two large arcs. ;)
How agile of them!
I never heard of Internetwork Operating System till now.

https://en.wikipedia.org/wiki/Cisco_IOS
> ...i...what...but why...that doesn't even make sense?...

From the article

> Basically, a phone unlocks the car using a combination of cell service and Bluetooth. So when you're out of cell range it can be difficult to unlock the car.

> They were unable to ping the car because, I don't know, they hadn't updated, or synced, the software in 24 hours.

My understanding is that it works like scooter and bike sharing services, where you have to have an active connection to their servers to use the vehicle. Of course, while it works in the city where there is 3G/4G coverage, it's not going to be efficient in the middle of nowhere where coverage is unlikely... so sometimes convenience (AKA it's just an app) becomes a hindrance. Who's fault is it? (rhetorical question)
Nice! I was wondering if would try something like this, but in the end, I takes me too long to create something entertaining even with a nice game-engine such as Unity.

So far I opted to play with Scratch Junior, as that

a) runs on my tablet

b) is simple enough for my kid to do most of the scene-building/programming herself :)

c) the block-language is simmilar to the one used with Lego Boost that we have as well :)

On the other hand, it is kinda limited, and we are only able to do simple point and clicks, so I might try Godot now, and see what can we make of it :)
How did you try to tell the car the network name and password? Whispering into the rear mirrors?
I get paid to fly as a passenger far more often than I would like.

I live in the most isolated capital city in the world and where you can easily fly for well over two hours and still be in the same state.

I would be happy to never get on another plane.
Maybe you didn't get the memo, but you're not allowed to criticize Signal anymore. And any time it's mentioned you have to draw phony comparisons between it and something that is on the naughty list (PGP as of late).
Well, I would be remiss if I didn't say that I also take you seriously and respect you. I also don't think you are wrong... at least in the way you are looking at it. I think there are other ways to look at it, though. Still, no excuse for me being grumpy.
There is a pretty clear distinction between "the person he got it from is of Russian nationality", and the DNC server was hacked and data was taken on behalf of Russia.
Thanks, nice. bytes.fromhex is really reading bytes from a hex string, so perhaps a better name should be bytes.fromhexstring, but since python names are short I understand the trade-off. Also, my first impression is that hex should be called bytes.tohexstring, but for those using python daily I understand the need of shorter names.
What about the queen?
Right! They'll be iterating on the design and correct bugs during next sprint, while their users are stuck in the middle of nowhere. The system works!