skysight-inc/HackerNews huggingface dataset:
You can literally do the same with DoH.
DoH can be blocked by IP addresses, DNS canary and probably SNI, while DoT by IP addresses and port number. So "DoT is DoH with a kill switch." is again nonsense.
Amazon is opening its first full-size, cashierless grocery store
I didn't even know what the new gesture was, just kept doing it by accident.
what's interesting about this is : judging from the comments they have a horrible customer service, yet they seem to be in hyper growth mode
Radar, ultrasonic.

The radar can penetrate fog, rain, etc. https://navtechradar.com/features/autonomous-vehicles/

Ultrasound works well up close for detecting a potential collision.
You know that dietary cholesterol has no relation to blood cholesterol levels, right? You know that the saturated fat myth--started by the sugar industry--was debunked, right?
Top 5 science and technology screw-ups
> Also the article states that Google Pay provides a virtual credit card when used with PayPal. How? All I saw up until now was virtual debit cards.

Naming confusion, I think. To some people (mostly Americans), credit and debit cards are the same thing - just plastic payment cards. Some Europeans think Visa/Mastercard can only be credit cards (they can be either credit or debit).

To me, the difference is that credit cards use the bank's/issuer's balance (that you can pay back later, all at once or spread out in smaller monthly payments), while debit cards use your bank account balance directly. I think that's the proper differentiation.
>> They're also prone to the start-upy customer service "minimalism" math.

I have found their customer service to be very good. They respond within 2-3 minutes so I don't know what you could ask more. It's nothing like Paypal.
Posting the same content repeatedly is looked down on by HN, fyi

You posted this twice in one day, but many of your submissions look duplicated, and all seem to go the the same GitHub repo
Sony did for ages (with their flagship compact line), but in general people don't actually seek out and buy products with the features they claim to want/need.

(I am very, _very_ bitter over the growing certainty that the XZ2 Compact was the last of the compacts).
If your entire infra is dockerized, you are in the vast minority and should probably be discarded as an outlier.
Seems really useful in my company!
Eating meat is not worse than smoking. What a ridiculous claim.
Site is also non-responsive with <meta name="viewport" content="width=640" />, looks horrifying on the 12.9’’ iPad Pro even without taking color scheme into account. I know complaining about blog design is out of scope, but if @tonsky is reading this thread, please consider fixing your meta viewport tag.
To be fair, Lovelace seemed to grok the idea of general computation in a way that Babbage didn't.
One of the worst aspects of Spotify's near monopoly is that it comes bundled with their app, which is functional but not great. I'm particular, the number of times I need to reach to the top then bottom of the screen to accomplish simple things is too high.
Wonder why meat eaters have so much higher cholesterol then. Must be a vast vegan conspiracy.
It's nearly always the target system, so they have to be familiar with it.
It might help if they do what HP did and branch out their enterprise offerings.

This is, in my opinion, one thing that greatly helps apple build their reputation. When you mention "Dell" people first think of their cheap/bad inspirion stuff and not of the high priced xps, elitebook etc. models. Similarly for HP, similarly for Lenovo.

For the most part it helps to think of the consumer and non-consumer branches as completely different companies that just happen to have the same name.
Belgian license plates also have 3 letters, and there is a list of 99 forbidden combinations. Most of them are slurs, swears, political parties or things like SEX or BOM (bomb). No idea about some of them, like KKQ.

https://nl.wikipedia.org/wiki/Belgisch_kenteken#%22Verboden%...
Not sure about DO, but Linode will bounce your servers whenever they feel like it. They usually give notice.
A good solution would be to do DoH upgrade to their existing provider if the user already has DNS set to a non-ISP resolver (eg. Google, openDNS), only using CF as a default for ISP dns. That or racing multiple DoH providers for the first few queries to choose the fastest one for the user.
> before DoH, setting a custom DNS via DHCP was enough

That ship had already sailed. You also have to run your own DNS, allow DNS egress only from your own DNS, and DNAT the rest back to yours in order to un-break all the things with hard-coded resolvers.
You are most welcome. I'd be somewhat surprised if crypto exchanges supported all the same stuff I mentioned - it's based on my history on equity exchanges and I'd expect crypto to be different.

Anyway the way MXQ and pinging works is imagine you have an orderbook where passive orders are not visible to other participants (ie the venue is dark or you have a grey venue where some orders can be flagged as dark). It's possible fro participants to pay to learn what orders are in the book by making some very small aggressive orders and seeing where they match. In the world of equities this would be buy 1 share agressively, sell 1 share agressively with a limit in each case. This is called "pinging" because it's like ICMP ping discovering whether hosts are alive. The concept in crypto (if it applies) would be the smallest quantity the exchange allows you to buy or sell.

Assuming the venue supports it, you can prevent your dark orders matching these pings by setting an MXQ. If your MXQ is 100 say, they would need to buy 100 shares for your order to match. You would set the size to a point where you don't mind giving up the information about where your order level is because the match is meaningful enough.
Well, in the context of DNS resolvers and general computer security the vast majority users are dumb. Mozilla has does know what’s better for them. You, I, all of the readers of Hacker News - we’re the minority.

And for better or worse, the average user’s OS is hostile to a user’s privacy and security, with a few niche exceptions.
For Vue.js fans, try https://github.com/nuxt/nuxt.js
We are very happy with it!
Transferwise though is not playing the free game. They charge you fees and they have been profitable for three years now. https://transferwise.com/gb/blog/annualreport2019
> They haven't even bothered to make their official emails not look like phishing attempts. They don't care about security.

Man, now that you mention about it, I thought the same thing every time I see an email from PayPal and just disregarded the thought because it's so common from websites and nobody cares. It's _literally_ the business model of some of the top email marketing companies.

In either case, now that you mention it, I don't think it was mentioned in yesterday's six vulns disclosed or in today's.
So your point is that your attack model was that makers of malwareApp would try to connect to malwareapp.net instead of a random IP?

If you are worried about traffic in the browser you can not enable it, it you are worried about anything else then VPNs were already a thing since some time ago.
True. The Google interviewer should have those two settings turned off.
Chase Sapphire reimburses me third-party ATM fees.
I have to mention this:

http://sydneypadua.com/2dgoggles/lovelace-and-babbage-vs-the...
Maybe data of this guy was matched with data provided by some external screening provider with the data of a politician? What's the point of asking them if they were a member of some other party if they only expect him to be a member of that specific one.
Which makes sense, given the corpus they trained T5 on.
The real evil came from the sugar and meat industries, who knew their products caused disease, but paid researchers to cover it up. You my friend are but another victim of their propaganda.
If you uninstall the app it has a seven day forced delay for releasing your phone number, it isn't disclosed anywhere and the form just silently errors out when seven days haven't passed.
Kafka disaster recovery on Kubernetes with CSI
Sony Xperia 1 II: Sony's 21:9 Smartphone 5G
Lifting gains convert to dating gains in my experience. Property owner, stable job, financially secure, in shape in your 30s and you’re punching above most of the unpaired competition.
Here in NC, license plates are usually in the form [a-z][a-z][a-z]-[0-9][0-9][0-9][0-9]

For example, DBX-2399 or something.

Anyway, apparently they just rotate through the first triplet in a completely mechnical fashion... so you go from DBX to DBY to DBZ to DCA, yadda, yadda...

Logical consequence? At some point, license plates were made that started with WTF. And of course somebody took offense, called the DMV and complained, and it caused a big brouhaha. I'm thinking "are you freaking kidding me?" Talk about a "WTF moment".

https://www.wxii12.com/article/potentially-offensive-license...
Go to about:networking and look at the DNS tab
In prefer the approach Google is taking with Chrome and Microsoft is taking with Windows 10 which is to use the system defined DNS servers and if they support DoH to use it and if not to fallback to using them with normal DNS.

There is no need to configure individual applications and no need to develop a new means of distributing DoH server information.
An MPW emulator! That’s very cool. What I really miss is the MPW environment though. Sometimes I daydream about doing some kind of dyld hack or FUSE filesystem to make MPW-style tool/editor integration work on MacOS/Linux.

IIRC, the current iOS app rules don’t prohibit emulation, just downloadable code. There are games running Lua scripts inside, right? Or am I confused? (That happens.) But that does make the ROM a conundrum.

I can’t think of any theoretical reason you can’t make a new native version of Newton OS that runs old apps — it’s more or less like making a new browser that runs websites. Of course, you’d need to reimplement some fairly hard things in the undocumented native part of the toolkit, like handwriting recognition.

One nice thing about working on the ARM4 to ARM6 was how clean the assembly code is. We didn’t have a source-level debugger, so I spent many many hours debugging C code in an assembly view, and it really wasn’t too bad.
Feature comparison of file systems -- no other file system has all the features of ReiserFS or Reiser4:

https://en.wikipedia.org/w/index.php?title=Comparison_of_fil...
This is not the full picture if we are being honest with ourselves. When DoH is default on in all browsers, the masses will be talking to 2 or 3 companies. Sure, they can change what server they talk to, but we all know that most people won't even think about it. DoT implemented on all DNS servers would keep control as distributed as it has been up until now. Until the root serves support DoT, which I doubt they ever will, there will always be weak links. This includes from Cloudflare, Mozilla and others talking to the root servers. I am not trying to convince anyone of anything. This is a very polarizing topic and has been every time it is discussed here and other news aggregators. The best I can do is educate people that I care about so they can make an informed decision.
No, well, maybe, depending on your country. I know some countries have laws preventing ISPs from interfering with content, but even those laws do not apply to technical measures, like DoH, they are still completely free to block it.
Assuming that the subtext here is wanting to address potential reasons for Lisp's chronic underpopularity, I think that all conversations like this miss the mark. Lisp was never failing to attract many users because people hadn't experienced sufficient evangelism about all its advanced features. It fails to attract many people because it's not a fun language to get started in.

A year or so back I picked up a copy of Land of Lisp and burned through it for pleasure reading. And I was struck by how gross Lisp looks in that beginner-oriented treatment. Just this huge slog of car and cdr and let/letrec/let* and the 37 flavors of equals and the function namespace. . . and, all the while, you're being told that persevering in mastering this confusing minefield of subtleties will somehow enable you to write bug-free software. I doubt it's actually fun for most people, and the grandiose claims should beggar belief for everyone. I suppose I should count myself fortunate that I got to learn Lisp in college, where there was little attempt to make it fun, and plenty of graded assignments to keep me motivated.

Racket and Clojure are right to clean up some of the language's evolutionary history. That's a start. But even then, the treatment in beginner's guides isn't all that enticing. I've also skimmed through Realm of Racket and Clojure for the Brave and True, and, while both of them work hard at being entertaining (and were fun to just sit and read), they don't really succeed at dispelling the sensation that what you're mostly doing is wrangling with the language itself.

Compare with some of the more popular Python guides. They tend to be much more dryly written, but the actual flow of the guide tends to get you pretty quickly to

from pypi import have_fun
have_fun()
Same. Was a normal college thing. Classroom, teacher, chalkboard, occasional glazed eyes... but also the expectation you'll ask questions, and the ability to get feedback or clarification.
I would avoid anything provided by Laureate Online, I have an MSc from the University of Liverpool that was provided by them and although the degree was legitimate, the quality of the "tuition" and course material was very low; ultimately I still got some value out of doing the coursework and dissertation but definitely not good value for money IMO.
But, so, at what point, like how many people have to experience making this mistake, does it have to be for it to become AWSs problem?

Everyone makes mistakes, you can either help them not make these mistakes or do nothing and blame it on the users.
FT: BlackRock’s black box: the tech hub of modern finance
Tesla will not use lidar apparently. They'll use cameras, radar and ultrasonic.

In theory you could have all four.
For many businesses, the prospect of being cut off as a result of unexpected demand would be a serious liability, so therefore this would have to be an option -- but if it is an option, the customer has to select between it or an alternative, which is exactly the problem in this case.

Free tier is even more ideal for testing than this proposal, but the only way you can make options foolproof is to have no options.
The Forgotten history of early Unix
I originally started my current project in Angular, because that's what I had most experience with. Then some stakeholders asked if I could do it in Vue instead, and I rewrote it in a day. I was surprised at how easy it was.
Also, Cloudflare does give Business and Enterprise customers their own IP addresses (although often rotated) so that these sites work with old non-SNI browsers.
It's called the "right of reply". It's courtesy to reach out to a company and include their response without critique about whether it's "corporate bullshit".
Red hat is apparently paying for some work on this: https://blogs.gnome.org/uraeus/2019/06/24/on-the-road-to-fed...

So I guess it is going to land in fedora first and then make its way to other distros.

That said, under windows the fingerprint reader is frustratingly bad (lots and lotsof false negatives and slow). How can they be almost perfect on phones but that awful on laptops?
Early riser or night owl? New study may help to explain the difference
Email Addresses and Razor Blades
That function's code is serialized and sent to remote node along with necessary data.

In erlang, if you want, you can compile whole modules from source constructed at runtime and they behave just like normal code. Typical usage is hot-loading new modules from disk or from other nodes, you load your patch on one node and distribute it over network and if you don't make something stupid, your code is updated in whole system without dropping any tcp connections or the like. Everything happens automatically and every process using old code is updated as soon as possible to new version when possible.
One of my family members has only one hand, the left.

They would love to have a camera on hand to capture spontaneous moments around their young children.
But choosing a smartphone is a compromise between buying a low-level phone that is small enough to be operated with one hand, normally leaving you with a terrible camera, or one with a decent(-ish) camera that is a pain/impossible to use day to day due to the screen size.

BTW just using a camera on a smartphone with one hand is no joke; the trigger buttons generally assume a right-handed or two-handed hold. You can test this by operating your phone with your right hand held behind your back.

I'd love to see more UI designs that take into account that some people have non-standard configurations.
Command enables Startup Chime on new Macs: sudo nvram StartupMute=%00
For anyone else who was wondering, HIG = Human interface guidelines.
Why Interpreters Are Translators
I have a computer science textbook (ISBN-978-93-88174-04-6), which says,

> An interpreter is a translator which turns programs written a high-level language to machine code, a line at a time.

and,

> A translator is a language processor which turns source code into object code.

> There are three types of translators: compilers, assemblers, interpreters.

Why interpreters are translators?

(Think of simple "pure" tree-walk interpreters, not the ones with bytecode VM and/or JIT compilation)
ZString – Zero Allocation StringBuilder for .NET Core and Unity
It's not a simple "giveaway". It's a contribution to society
Yes please, I'm using /etc/hosts all the time when I setup new servers and to access some servers with no name on customer VPNs.
I wouldn't consider the name "Reiser" to be burned in most contexts. It's a normal name. But in this case the name is reminding us that the product was literally lead and developed by a murderer.
They're used for pretty different things. Dart with Flutter is used for the UIs, which Go wouldn't really do well at, and for system services that's where the con list really comes into play.
Lithuanian, yes, AFAIK.
Believe it or not, it's not nearly as impressive as it sounds.

Most of my cameras are WiFi and the wiring is not run in the walls. My front door camera, for example, is actually an indoor WiFi camera looking out a window with its power cord running through a nearby closet to an outlet near that closet. My living room camera is mounted on a piece of wood that's clamped to a bookcase, its power cord runs behind the bookcase to an outlet nearby. The nice thing about having WiFi cameras is that you can move them around really easily. If I'm worried that one of the cats isn't eating, I can just put a camera looking at the food dish so that I can see what's going on.

My driveway camera is unique in my setup though. It's my only wired camera and it's powered via PoE, so all I need is an ethernet cable. I used an existing hole in the house, where the cable and telephone comes in, and ran the ethernet through that to the outside. From there it goes into some conduit for protection, then gets stuffed behind a piece of siding and run to where the camera is mounted. The mounting is similar to this[0] YouTube video.

It's really hard to say what it would cost to replicate it. My cameras have been acquired piecemeal over the span of 10-ish years. My Blue Iris server is a refurbished Windows 10 Pro (Pro is required so that I can manage it via RDP) business-class desktop machine that cost about $300CAD, Blue Iris itself I think cost around $70CAD. The networking gear is UniFi, but really the only requirements are that the switches and APs are VLAN-capable and that there is some routing/firewall sitting between the VLANs.

Beyond hardware, Blue Iris, and AWS, the software involved all open source. The biggest cost is really time, and it's really hard to put a number on it.

Setting up Blue Iris, tuning the motion detection, and building the Node-RED flows that coordinate it all took quite a bit of time to get working to my satisfaction. Tweaking the motion detection to avoid triggering on shadows from trees in particular is something I spent a lot of time on. It wouldn't surprise me if I spent a total of 20+ hours just trying to cut down on the useless alerts before I gave up and started using AWS Rekognition to filter the alerts. Cost-wise, I estimate that I'll pay about $5/mo for Rekognition once I finish up my free 12-months.

The VPN duties are handled by StrongSwan, I built configuration profiles for MacOS and iOS (using Apple Configurator 2 plus hand-tweaking the resulting .mobileconfig file) to do the connect-on-demand magic. The whole thing is backed by a PKI (internal CA, etc), complete with machine and user certificates for authentication. This whole setup is probably 10-20 hours worth of time.

Typing this all out, it sounds fairly insane, but the knowledge I gained during this process is invaluable. It also took place over a fairly large timeframe, so it doesn't feel like I've invested a lot of time.

[0] https://www.youtube.com/watch?v=UjWkB0UZM1M
"Murders Your Wife"
True but I kinda believe that MS understood that these days are over (not only for them but in general)
Why re-solder the chip? It seems as though it would be easier to recover data by just yanking the drive, especially since full-disk encryption was quite rare fifteen years ago. Failing that, couldn't you have used a SPI flasher with the existing chip?
> even when sticking to the standard Navigation components.

The standard navigation components have always been the buggiest part of UIKit. Don't even get me started on how UISearchController and UINavigationController interact on iOS 13…I have an app that's been sitting on the back burner, with full dark mode support, but unreleased for over six months because I haven't taken the time to figure out why the search bar decides it wants to be above the large title.
First time I ever understood what "the meta" refers to. Though I've definitely participated in the metagame without realizing it before.
Do you know many other banks that let you withdraw abroad for less?
I mean, in Romania there are technically banks that give you zero-cost withdrawals abroad... but only because they figured they could shift that cost into the exchange rate and most people wouldn't notice (although it's far worse, now they charge you for online & offline payments too, not just ATM withdrawals!)

Transferwise for instance (which was praised here) apparently charges you 1.25% to _add_ money to your account (USD). Oh, and ATM withdrawals over 200GBP? 2% - just like Revolut: https://transferwise.com/gb/borderless/pricing

Revolut is not suitable as primary bank, IMO (it's not even clear whether they fully function as a bank vs just "financial institution"). But as a card provider for vacation/travel abroad, it's pretty awesome. Many banks will have fees like "1.5EUR + 1%" which sounds less until you realize that most of the time you withdraw less than 100EUR, nevermind the fact that many ATMs won't even give you more than 200E in one transaction.

[edit] For completeness sake... Citibank offered that here. CitiGold is awesome, unfortunately they don't have a presence here anymore - you can still get the offer with offshore banking, but you have to keep large sums of money with them and they charge you through your nose for investing with Citi (something in excess of 1% yearly if I remember correctly - as a percentage of "assets under management")
Swiss scientists develop ultra-fast resin 3D-printing technique
> I gained some great intuition from http://matrixmultiplication.xyz/ and (of all things) a paper named "An Introduction to Quantum Computing"[0].

Just wanted to say thanks for this paper. It really does help with intuition and it's not something I would've expected to get through.