skysight-inc/HackerNews huggingface dataset:
Why is this downvoted? It's true:

https://qz.com/519388/this-saudi-prince-now-owns-more-of-twi...

"Prince Alwaleed Bin Talal Bin Abdulaziz Alsaud, who in 2011 invested $300 million in the social network, now owns 34.9 million shares of Twitter’s common stock, according to a new regulatory filing (pdf)."

That is from 2015, but as far as I know he still owns a huge stake in the company. It would seem relevant when discussing SA's influence on Twitter, but I don't see it mentioned in the article for some reason.
The obvious problem is that there are a lot more poor people than there are rich people.
The "small font problem" was practically unsolved until Adobe invented and patented declarative hinting in Type 1. Before, bitmap fonts were used. The bytecode stack machine for hinting used in TrueType, designed by MS/Apple, was specifically designed to not infringe on Adobe's patents.

Only when hinting became an option did vector font representation become viable at all for printing. Digital vector font display was accomplished much later.
Always Use UTF-8 and Always Label Your HTML Saying So
Do you not know the story The Emperor's New Clothes? It's a classic where I'm from. From the Wikipedia page:

"The Emperor's New Clothes" (Danish: Kejserens nye klæder) is a short tale written by Danish author Hans Christian Andersen, about two weavers who promise an emperor a new suit of clothes that they say is invisible to those who are unfit for their positions, stupid, or incompetent – while in reality, they make no clothes at all, making everyone believe the clothes are invisible to them. When the emperor parades before his subjects in his new "clothes", no one dares to say that they do not see any suit of clothes on him for fear that they will be seen as stupid. Finally a child cries out, "But he isn't wearing anything at all!" The tale has been translated into over 100 languages.[1]

The point isn't...whatever you're talking about, it's that the people do value it a lot, they're just shooting themselves in the foot.
> Unencrypted is secure

It is not. Unencrypted is environmental pollution that need to be actively prevent until it reach zero use. A favorable future is one where the firewall blocks any unencrypted traffic by default.

Similar, giving third party clear text copies of private information is not secure. It is never going to be secure, and the only half working solution there is the kind of heavy legal regulations and systems that does not exist anywhere yet.

If people want to debate over which end-to-end encryption scheme is best then they can do so as much they want, but in the end the goal here is to stop plain text from continuing harming people.
Exactly. I respect Udacity's founder Sebastian Thrun for actually owning up to the fact that very little learning was happening on Udacity and that they needed to work on that. They actually cared.
The only thing that can be more efficient is one of the most common forms of heating devices.

During the summer, it's also extra inefficient to pump 100W into a device producing heat and then pump even more power somewhere else to cool down the room.
Pub: An early scriptable markup language
Yep. They're not just collecting info for marketing their own stuff, they're collecting "free" assets to sell, because there's not yet a law against them doing that.
Yes it was edited, the part I quoted came from that comment.

Anyways it's based on physical location. There are lots of specifics around what PII is but in this case: 1) your location alone cannot identify you individually, and 2) nothing specific is stored and IP/network to region lookup for applying GDPR rules is acceptable.
The Growing Crisis in Cosmology
...if anything, they really should've named it "Tactical Cyber Operations Command Center".

...on second thought, I think I know why they didn't.
Resistant to mites, they seem to have improved ability to forage, etc.

A lot of beekeepers have hybridized African bee hives. They can be more aggressive, so wear a suit and avoid irritating the hive too much and you’ll be fine.
Thanks, much appreciated! (RuboCop's author here)
why do priests rape children when they know it will send their soul to hell for eternity?
Two Big Workplace-Software Providers to Merge: Ultimate Software and Kronos
How do you handle the us government censoring newspapers, Wikipedia, etcetc if this is your demand?
> Assange, said Rohrabacher, “emphatically stated that the Russians were not involved in the hacking or disclosure of those emails.” Rohrabacher, who chairs the House Foreign Affairs Subcommittee on Europe, Eurasia, and Emerging Threats, is the only U.S. congressman to have visited the controversial figure.

https://web.archive.org/web/20170817205448/https://rohrabach...

My understanding here is that "Russians" here means Russian government intelligence, it does not necessarily exclude Russian citizens.
Finally someone appreciates my ability to name projects! :D Thanks!
If that turned up outside your office unannounced because it was being used as part of a red team, it might kinda throw the whole red team operation.

"GOTTA BE STEALTHY !!!" rolls up in a massive truck
Inspiring ideas, Perhaps this will be useful for automated testing or accessibility, etc.
Like startups, most intentional communities fail – why
The OP is probably referring to financing that Open Whisper Systems (precursor to the Signal foundation) received from Open Technology Fund (https://www.opentech.fund/results/supported-projects/open-wh...) which according to the Wikipedia has ties to the US government (https://en.wikipedia.org/wiki/Open_Technology_Fund). I guess the idea was to provide encrypted means of communication to dissidents in US-hostile countries.

Though I think it is a moot point. Signal foundation is a US organization and its officers are US citizens. I don't think the US government will have any trouble coercing them to do its bidding regardless of whether it financed them or not.
It's particularly in systems like these where they usually leave SSH w/ password login, or an oudated Teamviewer install. [1]

Realistically, I can see this working. For Disney. For use in action movies. In fact, "23 tons of cyber capabilities" is exactly the thing I would expect to hear from an action movie.

[1]: https://www.pentestpartners.com/security-blog/pen-testing-sh...
FractaSketch (1997)
Thanks - I'll check it out.
Before checking every time, I only read the ingredient list occasionally, usually at home when eating it. I started to notice things, like this progression:

Ingredients: peanuts.

Ingredients: peanuts, peanut oil, salt.

Ingredients: peanuts, hydrogenated vegetable oil (one or more of: peanut oil, palm oil, rapeseed oil, soybean oil, cottonseed oil), salt.

The company might run up against a supply problem, where they have to choose between a bad batch of peanuts or nothing at all, and they choose to remain in business by "remediating" that bad batch. But maybe their sales actually go up, so instead of going back to basics, they keep doing the same thing, but with cheaper oil. I get it. I don't like it, but I get it. You can make more money by trying to eat Jif's or Skippy's lunch than by catering to purity snobs.

Repeat similar scenarios for other brands of other products, every year, across the whole grocery store. Products try to stay competitive by masking inferior base ingredients with added fat, salt, and sugar, then go on to game the ingredients list, to obfuscate the fact that they replaced expensive ingredients with cheaper ones, while simultaneously reducing the package weight and upping the unit price. Those oil palm farmers don't need to worry; peak capitalism has their back. Palm oil use will continue to increase, because the marginal cost of production currently makes it the cheapest of all plant-based oils, at least until oil-algae farming technology matures.
> unless you really need an specific file format for your application

It's all about choosing the right tool for the job.

There's great reasons to use xml files over SQLite, but that mostly comes down to needing a file to be human readable versus file size.

In the product that I work on, I moved very small tables out to xml files because it's easier to inspect them in a text editor instead of expecting non-developers to figure out a database. These files are also small enough and are written infrequently enough that any performance difference between xml and SQLite is negligible.

The vast majority of data is in SQLite. An older version of the product would always write out a giant xml file, but when the xml got big, performance suffered. In this case, SQLite is the correct choice because it can make a small change to the database without needing to rewrite the entire file.
The problem is worked around with raster icons by just not providing the flexibility that a vector provides.

Rasterise your icons to fixed sizes that you’ll use in your application. Of course, this has its own set of compromises (namely the inflexibility) that may or may not be acceptable for your use case.
I wish there was a M2 SSD port
I remember serious concerns about Australian citizens suddenly being legally required to be spies for the Australian government regardless of where in the world they're working due to a new anti encryption law sometime in 2016. That and Twitter somehow being caught with their pants down regarding user phone numbers and other personal information makes it all the more important that all the engineers and product people on this site make it very clear to management that the systems must be set up in a way that simply doesn't allow people to access that information. It's morally good and it might prevent you from making the papers as a host of a bunch of spies that got your Chinese, Saudi Arabian, or Turkish users assassinated or jailed.
If municipalities stop giving them local monopolies they can have rights again. Until then, they should be beholden to strict rules.
Your sample code looks like a puppeteer script.
Ask HN: HNers, where do you hang out online in your spare time?
That's not how "free speech" works. That right isn't violated by privacy protection laws.

Free speech states that a state isn't going to prosecute you directly for whatever you may say. But that doesn't mean you are free from the consequences of what you're saying.

Privacy protection simply states that any legal person who feels that your actions violated the consent they gave, is free to sue you via the legal system for compensation for damages incurred. Which has little if anything to do with free speech.

If a telco uses the "free speech" argument, they essentially argue "we're a media company and we are accountable for what we publish".

If we're discussing media companies, it's interesting to note that these pull the "freedom of press" card to defend divulging person or confidential information in news outlets.

At this point, the entire discussion becomes rather silly semantics.

Interestingly, many EU countries also have "secrecy of correspondence" enshrined as a fundamental principle into their constitutions. The U.S. does not:

https://en.wikipedia.org/wiki/Secrecy_of_correspondence
It originally was to verify identity. Then they started withdrawing it from controversial figures, as if those people stopped being who they really were overnight. Nowadays it just means “this persons views are endorsed by Twitter staff”.
Lol well, that’s unfortunate- how long has that been and when was that posted?
A good tonic for everyone who wants to simplify the solution by cutting bits off the problem, making a solution which is simple, easy-to-understand, and incomplete. If your program stops doing something, some other program has to do it, and that complexity must be considered as well.
A friend of mine with a Model 3 says it sometimes works better in rain than he does. Agree there are edge cases and probably 10 years is optimistic. But, of course, plastic shopping bags and tires on the road are a challenge for humans as well.
It's an interesting and unsettled area of the law. It gets even more interesting when the perpetrator behind the cybersecurity incident is a state because, some have argued, it constitutes an "act of war" which has long been considered covered by a force majeure. Though FWIW I think eTrade's stance is here is very aggressive and I'm surprised it hasn't caught the attention of regulators yet. If financial institutions can be allowed to disclaim any and all responsibility for cybersecurity then our whole system will be in serious trouble.
In theory, both Matrix and XMPP+OMEMO handle multiple devices. In practice, I've found it to be less than smooth.
No you don't. Those folks are a different class of people than you, a better class, a class that deserves privacy - us peons aren't important enough to have to worry about that stuff.

That's what they'll argue anyway. They'll use different words, but whatever words they use will carry that message.
Pardon my ignorance. Does your bare SSD sit outside without any case (connected to the Pi via the SATA to USB cable)? Does it need any kind of heat dissipation mechanism (or cooling) at all?
Here and reddit.
> It’s not to verify identity.

I think that is precisely the purpose. If you’re looking for Donald Trump’s Twitter profile the idea is the blue tick helps you find the right one rather than a parody.
You're right. Maybe I was too harsh.
Sled: Embedded Database Written in Rust
Typically in restaurants
Presumably the company is profitable and it could very well have racked up quite a substantial return in dividends despite not increasing in value.
Sad. Soundcloud API maxes out at 15000 calls per day and these guys hit it. I'm not sure how Hype Machine gets around it.
Change in EV is not an appropriate metric to measure PE returns, you need to take into account recaps, dividends, loan interest and whatever other weird stuff took place.
For non-marketers here: you aren’t supposed to use utms for internal links anyways. Doing so will break your analytics and there are ways to track button/link clicks without utms.
On Instagram
> Would be great if this "transpiled" into a more robust and popularly supported formalism so that the functionality could be refined over time.

Great idea. Would love to see something like that. For now I'll have to continue to roll my own generators/templates.
I think many traffic signs are visual. Ie they would not work as well if you did random assignment of sign graphics vs its purpose.
Not all of them are, of course.

For a very basic and obvious example, possibility to turn right vs turn left signs look different not just because of convention but they resemble the shape of the road.
Try PAPL if already familiar with Python, last few chapters are on interpreting https://papl.cs.brown.edu/2019/

Pyret.org has an online interpreter, no local install needed if you don't want. Same author is also rewriting PLAI

https://www.plai.org/
Been meaning to do this, but with root on NFS, not USB.
You son of a gun, good job. I initially looked at the wrong part of the code, my apologies. This part describes it very well: https://gitlab.com/NebulousLabs/merkletree/-/blob/master/ran...
It's basically the same thing. Implementation wise it's slightly different, but it's the same idea.

During the upcoming days I'll add to the paper that you were the first to propose this algorithm.
It was never really useful anyway as the noise is exponentially more present than few useful tweets.
Freedom of speech exists so that entities are presumed to be able to say things without interference from the government. An absolutist stance such as yours results in things like governments disincorporating newspapers that publish politically unfavorable content simply because the newspaper is s corporation and it can't itself physically speak (or write something, or publish something) without a human intermediary.
Only the endpoints can fragment.
Inside Hifter's Libya: A Police State with an Islamist Twist
BBC Micro Bot – Runs your tweet on an 8-bit computer emulator
Please do not do this. The previous comment does not take into account the huge security hole you're creating by doing this, in particular the importance of ensuring that whatever hosts you're signing certificates from does not get compromised, and the risk to things like online banking and online payments caused by your own personal MITM host being compromised.

As frustrating as tracking on the internet may be, you'll be a lot more resentful of your bank when they outright refuse to refund you any of your money, when it becomes clear that you opted to MITM your traffic, and your MITM host got compromised, resulting in the theft of your banking credentials.

There are many reasons why you should MITM your hosts, and there are many reasons why companies Bluecoat make large sums of money providing solutions to this problem. It is not a trivial problem and solution. In a much simpler space, "just run an FTP server" does not encompass what Dropbox does.
Thanks, this really help me get a proper perspective on this!
Pasting the "source code" tweets into the emulator does nothing.
Acceptable but tar's have their own set of issues (mostly efficiency and being tape oriented)
What type of work was it for the FAANG? Just curious why a company like that would go on Upwork.
Udemy sometimes is a circus : https://www.udemy.com/course/remote-viewing-basics/
Complexity is not conserved. It is a bound. A solution can not be simpler than the problem, when both are viewed holistically and complexity is properly understood. (Yeah, I'm handwaving, but at least I acknowledge it. I don't want to write twelve paragraphs defining "complexity" right now, because my real point is....)

But the solution sure can be more complicated than the problem.
> Nowadays it just means “this persons views are representative of Twitter staff”.

For example both Sanders and Trump have a blue tick. They obviously can’t simultaneously be representative of a majority of Twitter’s staff’s views, can they? And I’d estimate Trump isn’t representative of a substantial number of these west-coast tech workers at all. So that doesn’t seem to hold up.
It’s easy to roll eyes at this.

I’m curious if anyone knows of a situation where having a “cyber NOC” situation room was actually useful?

Major corporations are building them and hiring “Cyber Resilience” teams. Is it all fluff, or is my cynicism causing me to miss key enterprise threat models and communication needs?
> It's far from clear, though, that they constitute more than a tiny fraction of the cards that matter.

This isn't true. Take any intersection and add minority status and you'll see increased poverty, reduced college attendance, increased arrest rate etc. There may be other cards but none so universally an issue as the continued disadvantages faced by POC in the USA. Sure other issues exist, but saying that while people are discussing racism is the equivalent of walking into a San Jose city council meeting and asking "what have YOU done for the city of Hollister today?"

> I prefer to deal with each person as an individual.

As is the only rational way to go about interpersonal interactions. You aren't America, you aren't Every Hiring Manager, you aren't Every Cop.
Javascript.info
It's free and has everything you need.
LOL @ “a mole.” China has at least a dozen moles inside Twitter. At least a hundred inside Google.
+1 for FreeNAS. I recently converted my Mac mini 2012 into a FreeNAS box, I just replaced the SSD with two 2.5" HDD. No ECC but also way cheaper than the alternative I had in mind.
> Could you explain what "AC components" refers to?

All but the first component of the Fourier transform. (The first component is the average of the data.) The term comes from electrical engineering, but Fourier transform has lots of applications also outside of electrical engineering.
A caliper, percent sign, stylized bacon, a person with a double outline, bubbles?
I worked on a support team for a company that that had some major financal institutions as a customer.

We had remote access to their networks at times. My very first day I was amazed how much access I had at will.

One day it was announced that a customer had come to us and demanded everyone had to meet X requirements to be able to work on their networks.

Not long after another financal institution made a similar request.

Some folks inside the company were a bit riled up by the requirements (background checks, some other things). They felt the requirements were absurd.

Considering the access we had I thought they weren't strict enough. As just a lowly support dude hired during the dot com boom because the company needed warm bodies (who could do some independent thinking / troubleshooting) ... I had a lot of access.

I don't know if they were thinking about spying like this, but I'm always amazed how much access people have to data and etc just from a technical support perspective (forget developers...).

Later the company outsourced support to other countries... I'm not even sure you need spies in the US / would know anyone was spying under those circumstances.

Support teams are probabbly a hell of a lot cheaper / easier to infiltrate / they get little / poor management / oversight. I saw tons of strange choices by our outsourced technical support staff, every single time I raised concerns it was discarded by something to the effect of "yeah they suck".

And that doesn't account for all the financial institutions who outsourced their own direct ops teams to other countries ... I'd call them and if they ever were capable of following instructions 9x out of 10 they'd open up the wrong network / modems / etc.
You may have to prove residence too in the requests, and that can include notarized documents (all acceptable under GDPR rules).

As for trade deals, the Safe Harbor agreement that would have allowed this was repealed before (and partly because of) GDPR. The only deal in place now is Privacy Shield which is completely voluntary and has no cross-border enforcement.
Yeah, to me, this is the most important response.

In theory, you could layer an email UI over a federated secure messaging protocol, like Matrix's E2E or XMPP+OMEMO. In practice, no one has done this, and infosec people only seem to care about instant messaging for some reason.

Besides all of the points you make above, Signal Desktop is terrible. I often want to use it to avoid typing on a phone keyboard, only to find that the experience of using Signal Desktop is actually worse than that of typing on my phone.
Never forget that RSA is the company that sold out the security of all its customers for a $10M payment from the NSA. https://www.reuters.com/article/us-usa-security-rsa/exclusiv...
As soon as companies and businesses were considered "people" and got the same rights, it all became a farce.