skysight-inc/HackerNews huggingface dataset:
It's easy to make a basic password login system, and very technical people use password managers, long passwords, etc. But there's a long "tail" (ha ha) of people who don't use long passwords, who will reuse their password on multiple web sites, who will forget their password and need to recover it using their mother's maiden name, etc. This opens up unlimited opportunity for phishing attacks.

And you don't get any key rotation unless you force people to change their passwords occasionally, which is itself now deprecated as a bad practice because people then start writing their passwords down on paper or storing them in a spreadsheet, which is even worse than no rotation. (Tailscale rotates your VPN keys automatically, but it's all for naught if the root key is just a password.)

We know that something better is needed for personal accounts, but please, not username+password. Your private network security is important. The world needs something much closer to foolproof.
If you're paying for a service they are not providing, that's extremely clear grounds for a CC charge back, or surely similar in court.
A lot of people here probably won't believe this, but Cisco Webex offers end to end encryption, but not by default. If you use it, you lose a bunch of features. But it is available, and Webex is immensely popular in the corporate world.

https://help.webex.com/en-us/WBX44739/What-Does-End-to-End-E...
The reality of that makes my skin crawl.

Maybe the only way to get useful code that starts off secure is to start it open source? That way, even if it takes "forever", there's no profit motive or need to rush into adoption...

I'm trusting for-profit software less and less and less by the decade.
You're looking at a recession right now. Everything else is pure speculation. Buckle up, you're going for a ride.
> Their comments had already caused a shortage of HCQ

HCQ can only be obtained via a doctor's prescription. If there is a shortage of HCQ, its because actual physicians are writing it more, either for their own benefit or for their patients. This isn't the average person panic buying toilet paper. Its trained medical professionals. If you are implying that they are incapably of thinking rationally and professionally in response to a short, offhanded comment by the President, then the issue is far graver than anything Trump is saying.

> led to at least one death

Which occured because an elderly couple saw the news, realized that HCQ is in a chemical used to treat their fish tank, drank it, and one of them died. If I read an article saying a drinking alcohol in moderation can reduce heart disease, and in response I go out and chug a bottle of isopropyl alcohol, the consequences wouldn't be blamed on anyone but myself. If anything, it supports the idea that any partisanship in this situation is coming from those who are trying to pin every instance of something bad occurring, literally at the level of a single idiotic individual, on the POTUS.
I can assure you there are a lot of great books that would not have been written if the authors first had to either 1. become beloved enough on the internet that they could crowdfund their income for five years or 2. somehow secure a "wealthy patron" who wanted to finance it (I can imagine a pretty fierce competition for that pretty rare beast).
So if they hadn't done these buybacks, they could have deployed the capital in a number of different areas, including paying down existing debt. They now could add additional debt (bonds, loans, etc) at good rates.

In general in personal finance the first rule of excess capots is to aggressively pay down existing debts, why do corporations do that?

Many of these same companies floated bonds for their buybacks!
Depends on your device state. If you've unlocked your bootloader already, you should only need to wipe system-level partitions (which would affect applications, but not user storage).

But if you haven't, you need to do that first, which requires you to wipe your entire device, including data.
802.11 is inefficient? What are you talking about. It is more efficient than cellular systems in terms of bits/second/Hertz. Unlicensed does not mean inefficient.

Europe is targeting 500 MHz towards the end of this year.
Parenting in a pandemic: Chaos, control, and an Animal Crossing meltdown
Is there cheaper bandwidth available than Hetzner's 1.19euro +vat per TB? (Linode seems to be at 10$ / TB).
Writing Tests as User Stories in React
The wondrous life and mysterious death of Golden Eagle 1703
SOC2 and PCI are a lot more than running an automated scan. Sure, that's part of it, but both are full-on frameworks that stretch well beyond technical controls and deeply into organizational questions.

The important thing is that they establish enough trust to create basis for shifting liability.
1) This is not something to be predicted in absolute fashion, because it is dependent on government action. I think the best guess can be on the immediate trend, which indicates deep depression and inflation graduating to hyperinflation, but it is important to revisit should government actions change. The scale will be record-breaking in the time frame of all civilizations that have ever existed.

2) It will be far worse.

3) Initially, it will be massive job losses, massive spending, and massive regulations. There will be an apparent bump whenever the lockdowns are relaxed. The bump will likely be smaller than expected, but any bump may initiate a strong market response. Since this is an election year, there will be no stop to the handing out of money to nearly every sector of the economy. This will be followed by increases in CPI, which will further accelerate.

4) Institutional investors and then governments around the world will begin to sell their USD reserves as CPI rate of increase goes up. When they see that there is no counter-response to selling of USD reserves, the rate of liquidation will increase, yet further increasing the rate of CPI increase, though this may be a few years out. The onset of hyperinflation in Wiemar Republic Germany was preceded by a few years of high inflation, but the actual hyper-inflationary period was less than one year and set in within a month or two. This isn't to suggest that conditions in the U.S. are identical or even similar to conditions in Germany, but to demonstrate that hyperinflation onset is far more rapid than most realize.

As a side note, many people are not aware of the concept of Cantillon effects (including most of the popular Austrians and monetarists), which economists use to describe how money flows through an economy. In effect, newly created money does not instantly flow throughout the economy, and in many cases may only flow in very narrow sectors. For example, the bulk of money created over the last decade remained in non-consumer sectors and thus minimally impacted CPI. Further, even within something such as CPI, things may fall precipitously in price, such as airline tickets and gasoline, while other things experience dramatic increases, such as eggs and bread.

I observe there to be a handwavey treatment of anyone discussing inflation. I find across popular personalities, social media, and various forum comments that inflation is some relic of the past, but the only evidence provided is the lack of CPI increase in recent years, which cannot be held up as relevant given the current government activity is very different as it includes creation of money likely to flow directly into the consumer sectors while there is a forced reduction in production (i.e., yet more dollars chasing yet fewer products). Also, I'm not that great on the technical explanations, but I know that the way the QE was performed it created a very high demand for dollars, sending the USD very high. But the velocity of M2 was also very high, and that is largely what has been fueling the apparent boom, but I admit I'm a poor source for these more technical aspects.
Like what problem specifically that you cannot mitigate? If you can't just host static contents on a new empty server and get it going, how does the rest of the world work at all?

That is just an excuse.
Yep, too bad not everyone follows the rules. It's the same with everything that can be gamed from search results to taxes.
This is quite interesting phenomenon, how did mainstream media manage to spread the same mis-information for weeks?

Did they have a meeting together and agreed to carry out the same lie for the greater good???
We - fully remote team - made the switch from Slack to Twist about 2 years ago and really like Twist. Anybody here that uses Quill and used Twist can share a bit more about how these two differ?
This, please! I'd personally prefer username/password auth, otherwise I believe that this is the most privacy-focused option.

https://support.apple.com/en-us/HT210699
I agree. I'm just as skeptical as the next person about PR corporate-speak, but there's a clear action plan here and addressing of concerns. At least give them a chance to make good on their claims right?

We've become such a cynical culture, once pitchforks are brandished they appear to be unsheathable, rather they grow sharper and more wild as the chorus of internet echos grow. While there is value in discouraging certain behaviors (and thus "make an example"), and encouraging new ones (some level of noise was needed to warrant a response at all), surely there must be a path to redemption, an acknowledgement of misaligned incentives in lieu of the demonization of individuals. There are too many true enemies in the world (most of them not processes not people) to harbor such disgruntlement against a platform which is by at least basic measures doing good (providing a service that is obviously loved and used by many and jobs and economic well-being to those who make and support it).

I personally have been wary of Zoom since the first reports of their apps doing shady things (and the forcefulness with which they attempt to make you use it) and don't find it provides any value over a multitude of other services. But this wariness warrants a mere "meh, I'll go elsewhere," not a crucifixion. Yet as the frothiness grows from this current story (and it's really not much of a story) it becomes more difficult to see just what sort of blood sacrifice will satiate the mob.
(I work at Quill.) Of course! We take your privacy and security very seriously. Your regular conversations are absolutely yours -- your messages by default are encrypted in transit and at rest.

For user's that want extra security, we plan on offering e2e encryption for direct messages and groups (and maybe eventually channels). There are some tradeoffs with e2e encryption including scalability, search, history, and just the ergonomics of using it, which is why we call out that distinction specifically.

(But, we can see how current wording may be a but obtuse -- we'll tweak it.)
People need to put the pitchforks away.

I don't think Zoom has done anything malicious. I think they just built their software quickly and just made it work.

Now that it's under a lot of scrutiny they're paying a bit of PR price. But they'd probably do it all over again since they are now seeing hundreds of millions of users.
> On March 27th, we took action to remove the Facebook SDK in our iOS client and have reconfigured it to prevent it from collecting unnecessary device information from our users.

Sounds like folks at Zoom take privacy and security related feedback pretty seriously.
Looks like it's a WebRTC acronym: https://webrtcglossary.com/sfu/

SFU stands for Selective Forwarding Unit.

At times, the term is used to describe a type of video routing device, while at other times it will be used to indicate the support of routing technology and not a specific device.

An SFU is capable of receiving multiple media streams and then decide which of these media streams should be sent to which participants.
Thank you, even if publishing it at this time was somewhat Awk-ward...
It looks like Zulip with more stuff flashing around. Can anyone explain how it's different?
Also helps with congestion in dense places like apartment complexes, stadiums etc.
> It's never because the speaker is selfish

Trust me: Everyone is selfish. They just manifest it in different ways. That person who gives everything he has for charity is being selfish.

Most sane people do things because it satisfies something in them. The one who is very generous is getting something out of it. Even when dealing with selfish people, it's good to identify what they are getting out of it.
This is perfect timing as I just wrote this tool to help sign ssh host keys and user keys. https://github.com/GRMrGecko/ssh-cert
A lot of EV use a heat pump.
Some old model had a petrol heater, like the EV version of the Peugeot 106
I really love the privacy- and security-centric design of Sign In with Apple, but so far it only works if you have Apple hardware, right? Tailscale's selling point is you can use it on all your devices (modulo Android support which isn't released yet).
Why Is “The Media” Becoming Polarized
Allow me to explicitly pose the implicit question I see in this thread "What does it mean to be wise, as opposed to robotic on the one hand, and sly on the other?"

How might one cultivate wisdom?
Techies Ignored the Bureaucrats and Helped the Covid-19 Response
This is a great post: it stitches together the benefits of NVC, what turns people off about it, and lastly, what it looks like in the techworld.

Right on!
You’re right. The competitors make as bold claims ;)
The most obvious and direct way to help people is to send them cash payments. The IRS is already set up to be capable of doing this, and to do so at the scale required.

Paying hospital bills would be exponentially more complex of an operation, and there isn't an organization already set up to administer something like that at this scale.
I quite like Keybase. Do they offer an oauth2 or SAML login feature nowadays that somehow integrates with your strong device authentication?
Covid-19 Vaccine Candidate Shows Promise
Been using it for the last few months and it's great. I use it for SSH, NAS etc...

Also, being able to ping my iOS phone that's on 4G from my computer feels like magic.
There are open-source videoconferencing solutions floating around on the Internet.

But they don't have the traction of the videochat-as-a-service options because those options have financial incentive to set up servers, configure them, solve those parts of the puzzle for users, make onboarding frictionless, etc.

I'm afraid I don't think open source would be a panacea for this problem, because if there's one thing we've observed from the world of open-source and online software, it's that most users adopting an open-source solution have to become their own sysadmin too, and a lot of otherwise-competent hackers are profoundly bad at the ever-moving arms race that is "hosting a secure software service online." Distributing the security maintenance burden doesn't make it easier to solve.

We could get there if, hypothetically, companies cared enough about security to demand that all the software running on (at least) the client machines and (ideally) the service-provider's servers was open-source so they could trust the security model via an audit by their own eyeballs. Then closed-source operations would lose out in the marketplace to open-source outfits because enterprise would only do business with the open-source ones.

They demonstrably do not care that much.
Talking about global state management (not local state/props), when we started working with React their recommended method of state management was via Mixins. Those became deprecated in 2017 (I think). They then recommended to use only higher-order components (HOCs) for state management. Last year they deprecated this in favor of hooks. The context API has changed several times as well, though since that was never meant to be an end-user API I think it's less problematic. They also deprecated a bunch of life cycle methods (e.g. componentWillMount), though that is probably also a minor nuisance.

As you said you can still use the old ways of managing state (except mixins I think which were really removed for good), the thing is just that most of the ecosystem of third-party libraries (routing, state management etc.) quickly moves to the latest paradigm, so if you do not want to run outdated code with potential security vulnerabilities you will need to constantly refactor your code as well just to keep up with the ecosystem.
To put things into perspective, a 3 months internship in France (which are usually imposed as part of master degree) is paid approximately 1650€ (1800 USD), for the whole internship. Yes, that doesn’t even pay a rent.
There is actually a debate about this.

A bad mask (eg a bandanna) means less virus gets out, but it is more likely to get out in the form of a fine aerosol that hangs in the air for hours. On the opposite end it is a reminder not to touch your face (prevents transmission from your hands) but won't stop you from breathing in an aerosol.

Likely still a net win, but kinda a hard thing to do good research on.

There is no doubt that masks that are designed to block things the size of viruses help. Just issues about who is the highest priority to get them when they are in short supply.
If they required masks for all supply chain jobs right now, most places would have to shutdown due to the lack of masks. People would go hungry. We need guaranteed supply of masks and hand sanitizer at reasonable prices. This where the government could step in.
This is juxtaposition, a form of literary style. He is sarcastically downplaying the _flu_ in comparison to the world wars because the _flu_ is already significantly lesser than the holocaust or an atomic bomb landing in Japan.
How cool would it be if you could partner with Jean-Claude Van Damme on this?
If you want to be taken seriously don't make it so obvious.
Why my team should pay Tailscale 10 dollars/user/month? We can get the same features with Wireguard/OpenVPN.
5 GHz is not ISM, but UNII in USA. Similar.

2.4 GHz has 83 MHz spectrum
5 GHz has 580 MHz spectrum but part of it is shared with radars.

6 GHz is 1200 MHz, double of what we have today!!
It's not strictly true that chess is the only sport that is the same whether played over a board or online, poker comes to mind, and in fact most board games would qualify.

Regardless, as a chess fan it's great to see them adapt to the current circumstances.
Pandemic Severity Index
If you work with Microsoft Office add-on dev you can still feel the echos of this with the Microsoft Script Editor.
> Isn't the point to be able to sustain someone until they can get another job?

Yes, that's the point. It's not designed to enable (or even encourage) everyone to live paycheck-to-paycheck during the good times. The value is less than 100% of replacement income for several reasons:

- The system must maintain an incentive to return to work. Paying people 100% of their replacement income to not work will reduce the incentive to return to work. That's the last thing we need when trying to restart the economy as quickly as possible.

- The system should incentivize people to maintain their jobs. If someone can reliably get 100% of their income by being laid off, the incentive to maintain your job is reduced.

- People should share some of the burden for carrying themselves through hard times. This includes maintaining savings to help cover expenses in the event of an emergency and reducing lifestyle spending to reduce expenses. This is a difficult topic to discuss because people reach for strawman arguments about families becoming homeless, but realistically a $60K/year equivalent income is not far from the annual median household income. People can and do find ways to live on that amount all over the country. It's not realistic to expect that we can maintain everyone's previous lifestyle unchanged during unemployment.

- The money must come from somewhere. The more we pay out now, the larger our deficits and the higher our taxes will be in the future. The incentive structures must be aligned to minimize the amount of time people spend on unemployment. It's not designed to be comfortable. It's designed to be a little bit uncomfortable without triggering financial ruin for the majority. I know that sounds harsh, but it's necessary for incentive alignment.
They're both tools. As in webpack is a tool that allows you to use a preprocessor like babel but you don't have to if you don't want to.
Thanks, called my bank pnc and it's going to be an online application
I believe "cunning" is not about intent, but the action's effectiveness.

As an attempt to mislead or imply that there are no problems here, this is pretty much a failure, and thus not at all cunning.
Do you have transit and at rest encryption now?
If they are primarily stored on a central server that you don't control then no, they don't belong to you.
Location: Kano, Nigeria
Remote: Yes (Preferred)
Willing to relocate: Yes (Germany)
Technologies: Python, JavaScript, Android, Node, SQL
Résumé/CV: www.amustapha.com
Email: abdulhakeemmustapha@gmail.com

I enjoy building fast, lightweight and flexible web applications that scale.
Formally be approved on April 23. New devices should be available late summer.

CBRS and TVWS requires database which takes many years to craft.
The parent comment here implies they rewrote it after the article was written.

I read the bit on OSGi. It seems to support interfaces, runtime loading and unloading of modules, and a way to discover modules. Java 1.0 did all that stuff natively, though JPMS adds some more capabilities, since I guess people don’t like package private, etc.

C++ also supports these things. (C does too, but you need non-standard dynamic linker constructor/destructor extensions that are available on all platforms).

I can’t think of any widely used language without support of such things.
Sadly even professionals like dentists do this wrong sometimes.
Where does the difference between Chrome and Firefox come from? Is Firefox using a different video format?
A favourite DeLillo quote from an old interview:

> I ask him what attracted him to writing, whether he studied literature or was stirred by certain authors or books. "No, no," he says, "I didn't do anything. I don't have an explanation, I don't know why I wanted to write. I did some short stories at that time, but very infrequently. I quit my job just to quit. I didn't quit my job to write fiction. I just didn't want to work anymore. I think more than writers, the major influences on me have been European movies, and jazz, and Abstract Expressionism."

Source: https://www.nytimes.com/1991/05/19/magazine/dangerous-don-de...

And yeah, he should get the Nobel.
Kumtor Gold Mine: Allegations of corruption supported by torture
See my comment here: https://news.ycombinator.com/item?id=22759280
I worked with a lot of interns, and in my experience the ONLY value was finding folks randomly who were good enough to hire. The actual productivity / work for the interns on average was very low.

The rate was so low though that I'm not sure if it really was a net positive, but I think the company liked the PR and such too.
If this is how you're going to behave in these situations at work, I'll have you off the team/company in a heartbeat.

Your concerns are valid. Your method of expressing them is problematic. And your automatic assumptions are lethal to a good work environment.

I was going to address some of the specifics, but you're not exactly giving the impression of someone who wants input.
You’re eating babies together?!

jk, hope you figure things out.
I'm pretty certain this fine has been removed from the Affordable Care Act:

https://web.blockadvisors.com/tax-reform-removes-the-afforda...
Thanks for the feedback, we appreciate it. I'm a little surprised that you got prompted to log into Medium. Obviously Medium isn't without faults, but I thought the anonymous viewer experience wasn't login-walled. I'll look into that.

We'll definitely be attentive to pricing constraints (esp given the current recession) and asks for Microsoft support -- thanks for the feedback.