skysight-inc/HackerNews huggingface dataset:
AI Categorizes 30,763 Grocery Products Based on Customer Purchases
Safe use of Microsoft Windows also requires rebooting on a slightly shorter schedule, because GetTickCount will overflow. In particular if you're running a real-time simulation which is likely to use delta time as a critical parameter, and you can't audit the code or know for a fact that it uses GetTickCount.
Sending out responses to applications would actually be nice ... just saying.
> My understanding is that they do in fact have end-to-end-encryption between Zoom clients, it's just that when you join via a dial-in phone number, the connection is (of course) not encrypted between your phone and the system you're dialing into.

Which means, there is no end-to-end-encryption. Zoom knows the key but does not decrypt the data unless they need to to let a member join via phone. You need to trust Zoom that they keep their promise not to decrypt your communication, there is no technical hurdle.
France blocked the export of (purchased) masks to Switzerland, and other nations.

https://www.swissinfo.ch/eng/coronavirus_medical-goods-from-...
One thing that probably helps AWS is that they have experience preparing for peak usage given Amazon's peak traffic (and others) on some events during the year, such as black Friday, Prime Day, major holidays, etc.
Nothing prevents you from using QUIC as a replacement for TCP AFAIK - on the surface it seems like it would be potentially useful for more applications than HTTP. May even be a decent option for video games and other things that need somewhat lower latency and wish to avoid head-of-line blocking.
The 51 days in the headline popped out to me because I have a Sonicwall brand firewall I help manage which requires a reboot every 51 days or it starts dropping packets. Yesterday was day 51 and like clockwork, it started failing.
I've been told in the recent past that there is so much old internet infrastructure equipment that only knows UDP and TCP that any other protocol will fail to meaningfully catch on. This equipment will drop anything that isn't TCP or UDP and until it's replaced you will have a lot of trouble.
Because people don’t care the architects of such systems need to care.

We should build systems that protect their naive users.
Slightly unrelated: I am a complete beginner in Javascript, and I was trying it out for a small web-based UI. I was surprised how importing one js into another was non-intuitive. One would need to import all the js's into the main HTML. Feel free to correct me if I am abusing it.
IIRC it had very tall and narrow pixels to work with NTSC compatible displays. 1280x400 was the highest you could do with the super-high-res card.

Later cards got rid of the ~400 scanline limitation and would do things like 1024x800.
Leela: "Great. We're two days from earth with no food."

Bender: "Problem solved. You two fight to the death and I'll cook the loser."
Ask HN: Are .io domains out of style?
Today, I noticed that draw.io - my favorite diagram tool - changed its name to diagrams.net.

Is the .io wave of 2016-ish already gone? The only .io domain I use often is github.io, but that isn’t even their main domain.

Was .io a fad and did it already pass?
1M cases of Covid, 1 pixel = 1 case
We have an over-reaching central government, but that is not a despotic tyrannical one. The closest thing to a despotic government is to be found in prototype form in the despot-petri dishes of universities with their "free speech zones" and their "hate speech laws" and their sexual harrasment star chamber courts and their chorus of "believe all women" (except Joe Biden's accuser). That's where the fascism is being auditioned and wants to break out of.

Nothing radicalized more people than seeing these same professors surface during the Kavanaugh fiasco and hearing their own ideas come out of their own mouths in their own words.

The left-wing echo chamber people have no idea the damage their pet obssessions and totalitarian visions are doing to their brand: literally, New York Times' Bari Weiss was on Joe Rogan and revealed she had no idea what the whole "wax my balls " controversy was about- she hadn't heard about it.

That my friend is living in a bubble.

OrangeManBad squeaked by in 2016. In 2020 it will be a landslide.

That my friend is a consequence of living in a bubble.
I see no problems in Google continuing to replace basic protocols. In fact, why not get rid of the open Internet altogether and just use all Google products all the time? It'll be like the good old days of AOL.
Treft Systems Inc | Technical Support Engineer | US/Remote (anywhere) | Full Time

We are a looking for someone who can help us streamline our Technical Support. We don't have a clear distinction currently between Tech Support and Development team being a small bootstrapped team and we are looking to solve this problem. The ideal person would have enough understanding of how Web Applications work including basic HTML/CSS and any knowledge of PHP etc is a major plus. You would not be writing code necessarily but you should be able to troubleshoot and figure out issues.

Technologies: PHP, WordPress, Laravel, vuejs and others.

You should ideally be a native English speaker but we are willing to work with anyone who can effectively talk to clients. If you shy away from getting on a call with a client, this is not the right position for you.

Timezone: You must be able to work out of Eastern/EST timezone as much as possible (some flexibility possible).

Salary depends on a few factors but would be somewhere in the $25-$40/Hour range along with bonus tied to client retention (happy to explain). For US based employees, we will offer W2 Salary with other benefits such as Paid Health Insurance, 15 days of paid vacation and discretionary bonus every year.

Please email me at yc@treftsystems.com
You're right; it's not. But as an adult, I get to make that decision.
> But this blog post explains that if you don't have any external connector attached, it in fact is end-to-end encrypted, no false advertising.

No, it says that they don't decrypt it until it reaches the other client, not that they can't decrypt it.
GitHub uses Datasette to publish an SQL-enabled interface of Covid-19 data
QUIC operates over UDP. That’s really why this question is worth asking.
Just tried it again and it works for me (in the UK). Cleared browsing data and everything, and tried in another browser.

Edit to add: it is also here http://archive.md/DL5nc
Good question. On classic Amiga, the UI was designed for the default un-interlazed resolution of 640×256 (PAL).

Anyone wanting higher resolutions on would go to the interlaced resolution that doubles the vertical resolution to 640x512 (PAL). The UI, however, does not adjust resulting in squeezing UI elements vertically.
We will not know how effective testing has been until we have serological tests. There are a few assumptions being made regarding the efficacy of testing, and contact tracing will certainly miss pockets of asymptomatic people.
And emerging QUIC acceleration technology is likely to be stifled by intellectual property laws.

Intel has already filed (in 2019) for a European patent that seems to claim inventorship of the generic concept of hardware offloading (as it applies to QUIC)

https://data.epo.org/publication-server/pdf-document?pn=3541...
Especially since so many tech people were taken by surprise by this -- thousands of upvotes for all Zoom topics together now
People have misconceptions about the virus regardless. Fever checks are not the cause.
They will have to be careful about whom they invite because this sadly seems ripe for cheating.

I know there will be cameras on the players and analysis software will be used to catch anomalies, but with this much money on the line I don’t think those measures will be enough to discourage bad actors.
It's amazing that people in the freest nation on earth have to be battled by their own citizens to not give up the rights and tools that keep them that way.
I cannot inspect what closed source software is sending to the server, how it is tracking me or what information it has. It is encrypting my data against me so not even I can view how I'm being studied or recorded. This applies to the public writ large, nobody outside the deep annals inside the company knows how the public is being monitored and sold.

I've tried to make various tools and utilities for things like logging, auditing, inspection, etc, and have had to do self signed keys and a number of interesting hacks to work around encryption. Often times it's impossible.

It's thousands of times more likely that the authorized party is spying, snooping and stealing my information to package and resell it in open bidding data markets and trying to hide that fact and cover their tracks then they're trying to be bold protectors of my liberty against roving blackhat ne'er-do-wells. Although they'll run to that defense whenever necessary.

Ever see the amount of data trackers on say, a local news site? It's astounding, and they are the technically incompetent. Imagine what happens when people with the same wanton disregard for scruples knows what they are doing.

I've convinced myself at least that instagram listens to the microphone and services ads based on conversations. I have blackboxed tested this in many ways --- and that's the only way I can do it, blackboxed - that's the problem. I could lay out the tests if you want, none are of course definitive, they can't be, that's the point. It's uninspectable and can't be proven either way because it's encryption that none of us can inspect.

Like any other powerful party trying to hide information and abuse their subjects, they claim to actually be protecting us against the dark treachery that surely lies beyond the forest. Let's all tremble in fear and thank them for their service! Give me a break. It's a slight of hand, they've instead taken our digital stuff and protected against us from inspecting the process, the protections against an additional third party is merely a side effect.

If I can't turn encryption off and see what's going on OR if I can't inspect my own device then I don't trust the network OR the supposedly "trusted" party with access to it. I don't trust Google, or Facebook with access to my microphone or ad networks running on apps and you shouldn't either. If I can't inspect the contents of the payloads, then I don't know what's happening. Platitudes and assurance be damned, what data is going OTA, that's all that matters.

I understand there's brigading and hivemind against this basic reality, but I'm dedicated to reality, not to popular opinion.
That would discourage people from upvoting new stories, and sites like HN already struggle to get enough attention on the /newest page.
I just hope Amazon has bulked ordered masks of sufficient quality that we ourselves can buy some from Amazon.com that are sold by Amazon.

We have to move to a mask culture until we get a vaccine.
Unfortunately from my experience, Jitsi does not reliably handle 20-35 users
Technically the runtime is the browser.

index.js
var foo = document.body.getElementById("bar");

That is dom manipulation using vanilla javascript in all modern browsers. I can use webpack, rollup, parcel, or load it in a script tag, it doesn't matter it's still just plain old javascript.
Well, they break TLS. That's almost as broad as breaking TCP.

And it's because they want levels of control on the least affordable place. They wouldn't need to break anything if they added the supervising software to the endpoints.
Frrifayer
Also Betteridge's law of headlines.
Luckin Coffee: Fraud and Fundamentally Broken Business
Cleaning and Disinfecting Your Facility
I'm not sure why you're feeling like this is secret when we make a point of explicitly disclosing it, and always have. In fact, haven't you and I had exchanges about this years ago?

There are three formal things that HN gives back to YC in exchange for funding it: (1) job ads, which appear on the front page and later on https://news.ycombinator.com/jobs; (2) Launch HNs for YC startups, which appear on the front page and later on https://news.ycombinator.com/launches; (3) YC alumni usernames display in orange to other YC alumni (though not to themselves, which has led to a stream of emails over the years).

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

We explicitly don't do anything beyond that to favor YC or YC companies on HN, though we don't draw lines to exclude anything either, because YC-related people and content are an inseparable part of the community here.

I really need to add this to the FAQ though.
I still don't get homescreen apps. When I put a bookmark on my home screen, it just open safari to that page. It's not it's own app, all the other tabs are still there. /confused
An Astronaut's Experience in Space Can Enable Us to Study Better from Home
Also used in early Need For Speed games and later Sleeping Dogs.
Show HN: Etee: the button-free VR controller
> After the war ended, cooler heads prevailed and all wartime orders were lifted and capital and labor could reform, as it saw fit, and as such, the year immediately following the war produced the greatest annualized economic gains in the history of the country

the reason the US was ably to basically jump start it's economy after ww2 was mainly because all of its competitors got either got their industries and cities literally leveled, or their nation/people nearly utterly destroyed.

Even the UK, which was a victor of world war 2 had an economy which was basically dead in the water until the late 70's.

The US got incredibly "lucky" during world war 2 in the sense that it didn't fight the conflict on its own continent.

Also, the marshall plan was a smart policy in an economic sense because it allowed the war economy to transistion back into civilian goods thanks to having a massive (subsidized) export market.
ok thanks.
I'm living in Germany right now, and want to move to SE Asia.
So i might give US companies a try.

But yea, as it seems, most remote positions are for seniors with at least 5 years experience, and lots of skills needed.

Thanks for your answer
I spent 1 year learning to code to launch my SaaS
thanks for the complimentary tip ;) fixed.
Nations with Mandatory TB Vaccines Show Fewer Coronavirus Deaths
doesn't work with firefox resistFingerprinting though...
Disappointed they didn't add any new google devices. It seems odd to me they built this off of the Pixel 4 tag but they don't support the Pixel 4 (or the 2,or 3, or 3A).

I'll just keep running vanilla AOSP on my 3A :/
> It's long overdue to bring copyright law into the 21st century with one small tweak: legalize noncommercial copyright infringement.

What is "noncommercial"? For instance, if I post the complete text of a someone else's book on Facebook or Reddit or in a blog at Wordpress.com, is that noncommercial because I am doing this on my personal account and get no money from doing so? Or is it commercial because those are commercial sites that monetize visits to their sites by showing ads?
Do keep in mind that "want" isn't exactly accurate. No IT team wants to spend any time/effort maintaining that crap, the business doesn't want to shell out for it either since it's expensive, and the ops team doesn't want yet another thing mucking with traffic.

Yet we have one because it's required by law. Wanna take a guess at what companies make sure it stays required by law?
Dapr 0.6.0 Is Out
For people who don't know what Datasette[0][1] is, it's a tool for exploring and publishing data, based on SQLite.

From the README:

> Datasette helps people take data of any shape or size and publish that as an interactive, explorable website and accompanying API. Datasette is aimed at data journalists, museum curators, archivists, local governments and anyone else who has data that they wish to share with the world.

[0] https://github.com/simonw/datasette

[1] http://datasette.readthedocs.io/
There are a bunch of different solutions out there; Thanos, Influx, federated Prometheus etc.

The local Cortex storage works pretty well but we have a very high bar for production worthiness. Right now I'd recommend using Bigtable of DynamoDB, and if you're on premise Cassandra. In the future the block storage will allow you to run minio.
original study :
https://www.medrxiv.org/content/10.1101/2020.03.24.20042937v...
We want people to be staying home and not working right now. Other countries are smart enough to encourage this. Only the US seems to be missing the entire point of this whole exercise.
The fact that it originated in Google doesn't make it some kind of proprietary protocol. It's subject to the usual IETF process, just like others, and is a public draft: https://tools.ietf.org/html/draft-ietf-quic-transport-22
Will there be a RESTish API available? Or really any well-documented API.

Will Quill play nice with federated systems?
As a caveat, I'm going on memory here, but I remember licensing to be significantly more expensive than $5000 for international distribution of Adobe fonts for a AAA video game I worked on. They had to secure rights for the font for use in game, in print publications (e.g. print ads), TV, etc. I recall each of these was a full on contract and eye-watering cost well above the prices he quotes.

If the prices he quotes are for unlimited license across all media ... $5k seems cheap to me.
Maxwell had P and I, but not D. Derivatives are hard to do mechanically, tend to be noisy, need filtering, and thus have lag. An aircraft vertical speed indicator is one of the few widely used mechanical differentiators.

Enough gain to allow throwing it away with negative feedback to get linearity was a ways off in 1868.
Or a very large bloom filter?
Minutes ago I was reading this Stack Overflow question:

https://stackoverflow.com/questions/60997602/event-handler-g...

I was reading through the code, and was astonished at how this doesn't look like code anymore but a mashup of different languages and patterns in one single block of code.

The only framework I'm willing to tolerate at this point is Vue.js, which, with the help of http-vue-loader, is capable of nicely using components in a compiler-free workflow.

React may be excellent for teams, where there's a clear distinction between font- and backend development, but sometimes you just need to hack together a server with a minimalistic frontend which should just be editable via sftp, when you're building tools for internal use only. Vue.js is great for that, but I'm worrying that it will turn into the same thing Angular has turned into.
I think you've touched on the core problem with the implementation of NVC (and lots of other communication frameworks). People score themselves and others on their adherence to NVC instead of actually just doing it.

It makes sense after you read a book. The author spends all of this time judging conversations. A sentence is put out, and then the author says whether or not it's NVC. After reading the whole book, you come to think that's what NVC is: judging whether other people's sentences are correct or not.

So when someone says "I feel unwanted" the listener's natural instinct is to act like the author and say "Unwanted isn't a feeling, it's a projection of judgement". This is not NVC. This is not helpful. A simple "You're feeling unwanted." is 100 times better.

I have this theory that NVC, especially for listening, is done way better in "secret". It should be an internal process that the other person isn't really aware of. You don't have to force someone into your definition of observation, feeling, need and request to understand them. Maintain curiosity and respect, and you can get to those things.

Especially with all the negative connotation that NVC carries, if someone leaves a conversation with you thinking "That person did NVC", you probably fucked up. If they leave thinking "that person knows how I feel and what I want", you did it right.
Seeing a BGP implementation running over QUIC would be the end game, right? There is so mug network hardware which will not be replaced for decades, so people would have to get started now if they wanted to completely make TCP redundant in the not so near future.
Is that really the case though? I've never seen any discussion on how GCP is architected and distributed on the google network. Does a GCP server run next to one serving up google.com results?
This reports that this bug was found and mitigation was put in place (maintenance schedules are amended to include a reboot). Where is the "fearmongering"? Because it mentions that the not-implementation of that would be bad?
>If the maintenance schedule is N days, then any news article pointing out how amusing it is that an airliner needs to be rebooted every <N days is at best sensationalism, at worst pure fearmongering.

Why not treat it like security? Yes, there are other layers of defense, but any given layer needs to be measured on its own. If I find that some large government website allows for javascript to be inserted for an XSS, but prevents it from running because it only allows javascript executed from a specific javascript origin, it is still a security flaw because some user might use a browser that does not implement content security policy. Yes, the user shouldn't be using such an insecure browser, but the website itself should not allow for scripts to be injected and not properly encoded.
... but the developers made all their "sprint goal commitments".
The GP was saying VB-classic, implying that he's talking about windows desktop apps. I think that's what he's saying about layout engine stuff; layout engine is only a thing on web apps. Everything you're talking about is re: web apps, just older style web apps with JS+CSS in the past 10 years. For old school windows desktop apps you don't have to worry about client rendering, client's browser size, responsive (mobile vs desktop), etc. I believe GP is making an argument that most of these business-use web apps could've been windows desktop apps where the frontend takes half the time and team to build.
Ask HN: What are some issues with DNS?
Does anyone know where I can look to discover issues that people are currently facing with DNS?
The only one I know with "non-experimental" local-storage is VictoriaMetrics. But the big thing there is that data in VM is not replicated, so when you lose a disk/node, you lose that data.

Having said that, both Thanos and Cortex have experimental local-storage modes that are pretty good. You could also try them for now while they get production ready.
Yes, though this is arguably a big reason why SCTP didn't take off, which is similar to QUIC in a lot of ways (there is SCTP over UDP, but it was a second class citizen until WebRTC.)
Not using strawmen, using actual people, none of whom earn as much as an entry level programmer in the US. It was a counter point to a common generalization. I believe completely there are many in the US who must budget well and barely get by. I've seen it. But I'm skeptical the average HNer falls into this category.
Why would you push it so strongly after only giving it a cursory inspection?
I have not thought much about how BGP would react to QUIC as transport, would be curious to hear your thoughts on the matter.
A good chunk of them block UDP outbound entirely, so the additional traffic never hits the public internet.
So is it safe to assume you're using electron, then?
Quick answer for QUIC...

No, it won't replace TCP/IP
Sure, a few people will be hired. But it is absolutely delusional to think that any significant percentage of people laid off will be able to get a new job anytime soon. There simply aren't enough jobs. Everyone really, really wanting it will just make those jobs harder to get, and will lead to lower pay and reduced safety.

This is not a time to be talking about bootstraps.
I know JQuery, love Vue and liked angularjs when it came out. I've played with react application using local state/drilling down only. I found this to be the best tuturial for me introducing setState.. after reading this I'm starting to understand/accept putting the event code directly in the template rather than it belongs somewhere else.