skysight-inc/HackerNews huggingface dataset:
Starting at 10K makes the most sense because getting from 0-10K may be short or long, but after it should reflect the rate of infection more relatively
No, it's $440 / month if you look at the actual pay-per-month option.
Gem Fatale: The frenzied hustle of the jewelry business
> Oh, come on, that’s not the same thing at all. Here Zoom actively decrypts the stream so that it’s compatible with non-Zoom clients and then advertises it as end-to-end

I took issue with a specific definition that precludes both products. I didn't say that both products use the same protocol.

> you’re comparing it to (outdated, FYI) information

Has the implementation changed in any way that makes it meet the definition? No? Then the information is not outdated for our purposes.
How is this any different than the liberal media making Trump the voice of conservatives in the 2016? (which backfired spectacularly and led to his rise and eventual win in the election).

Before liberals downvote me. Conservative media does this too. In fact, journalism these days regardless of political views is riddled with making someone look bad to score cheap points. One of the most toxic more recent developments is taking particularly unflattering still images from high definition video to present someone as dumb, stupid, angry or any of the myriad emotions one might present in the course of existing while filmed.

Making your opponent look bad is sadly par for the course pretty much everywhere these days from politics to corporate PR to social media debates on facebook and twitter. Heck, you see it here on HN too these days. Certainly far more than in the past.
Sorry, but I'm extremely skeptical that rewriting a framework based codebase into plain old PHP is ever a good idea. I've maintained too many legacy (mostly PHP) codebases in my career where the creator thought he knew better than everyone else to think otherwise.
Lithuania.Not sure what the law is really like, however people can freely move in forests irrespective of who owns it as long as one doesn't start some sort of crazy activity in there.To be honest,I very much doubt that majority of private owners would mind too much if someone would be living Flintstones style as long as it's fairly reasonable and not like ' let me litter as much as I can around my tent' type of living. Yes,one would have issues with permanent structure,if it's like a house, however a few planks and some bushes on top of it would hardly pass as a perm structure..
Israeli spyware firm pitches to be Covid-19 saviour
You can squat in the National Forest lands, if I recall correctly.
What does prevent your team from using "ungoogled chromium"?
Trump Replaced Pandemic-Response Team with Jared Kushner
TLS is designed to let you replace the provided peer authentication, people have looked at drafts to hook a PAKE into TLS 1.3 in the past but those drafts have expired. There has more recently been interest in trying again. You can even (though it's discouraged) just make the right noises to get appropriate enumerated values reserved for your mechanism, and ship it, without the hassle (valuable as it would be for actual security) of peers offering their opinions and maybe not doing things how you prefer.

I don't see how certificates are relevant at all? You clearly don't want a certificate if you intend a PAKE to provide mutual assurance of identity.

I think Colin grossly overestimates the chances of some bozo getting an RSA (of all things) transport protocol to work securely. My guess is that most attempts will end without it working at all (frustrating but safe) but a potentially very scary number would work in the sense that they seem to function as intended while not delivering the expected security through a combination of ignorance and inadequate testing. I particularly don't buy that a bozo who actually does get all that right can't instead write code against OpenSSL without ripping a hole in the universe. I don't like OpenSSL, but even I can see that it gets enough hard things right to be a useful contribution.
Specifically for the javascript frameworks, the use of a popular CDN increases the chance that the browser will have the asset in the cache already. Browser cache is a huge win for load times.

Static file hosting via a managed CDN is a fairly reliable option, better than many companies can build on their own.
> No, Apple cannot decrypt iMessage or FaceTime traffic because they don't have the keys.

They can very easily decrypt iMessage traffic using the method outlined in the article. They simply provide the sender with an erroneous key.

> key distribution is out of scope

Not according to GGP's definition, which didn't require merely that messages stay encrypted between endpoints but that middlemen have no way of decrypting the data.
So, are you trying to say that the results that the researchers say are statistically significant aren't actually statistically significant? They give their numbers in the paper and the p-values are less than everyone's favorite threshold (.05).

If you are trying to say that their sample size was too small to find an effect using null hypothesis testing, then that makes no sense.
there's a few points where people tend to give up on it. i myself stopped reading it twice at the giant cocaine adenoid, and again when the man chases the harmonica into the toilet. never finished it.
mumble / murmur is great, I host it for family and friends to use. That said, it's only voice and text. No video or screen sharing yet.
Know How Did the Tradition of April Fool's Day Orignally Begin Start
Quarantine Book Club
Just a nitpick: Kurento still exists on its own, and provides a generalist framework of components to build a service that can handle media.

OpenVidu is one such service, it builds _upon_ Kurento, and itself can be used to make videoconference rooms very easily. Otherwise, Kurento is just a media server that handles media but doesn't have the concept of "rooms", "publishers", "consumers", escalability, reliability, etc. so you would have to develop all those things on your own.
Umm.. So I'm trying to find out if this survey is legit and I can't find a mention of it on https://www.research.ox.ac.uk/Area/coronavirus-research or by googling "onlinesurveys coronavirus-disease-covid-19-in-the-uk-community site:ox.ac.uk"?
IMHO, biology is most easily looked at as a recipe for order, from whatever ingredients happen to be laying around.

Essentially, everything is in the service of increasing order. And maintaining it.

Polymerase creates more genetic code out of raw ingredients.

Genetic code creates proteins.

Proteins perform all kinds of functions by leveraging physics and chemistry.

Membranes prevent all of this from being blown away and scattered in the chemical equivalent of a slight breeze.

... so, as you ask, 'Why genetic material in the first place?'

And to that, something of a tautology: because reproducing order reproduces.

Randomly assembled self-assembling assemblages constitute the major components of our environment, because everything else... didn't.

A rock is still one rock. Water is still water.

A blade of grass is now a meadow. A tree, a forest. A slightly intelligent primate, civilization as we know it. And a single mutated coronavirus, a pandemic in every country on the globe.
It’s fascinating how much this has to do with personal preferences and cultural fashion. When I lived in Europe I would always make an effort to find the third wave coffeehouses that focused on aeropress and pour over preparations so I could enjoy the light-roasted subtleties and terroir of the different beans. It made coffee more like wine or microbrews. These places usually had a younger more international crowd and were frequently run by Australians or Kiwis.

I find the dark espresso roasts produce a more consistent product but only because a whole range of flavours is missing. But different strokes for different folks.
You can kill it in the sense that you stop it being a mutating replicator. That is pretty much the bare bones of life, an abstraction you can't get away from in defining life, but also one that encompasses things that aren't "life". It also applies to things like memes (both the original form from Dawkins and the internet form).
They All Retired Before They Hit 40. Then This Happened
Hmm, I swear quite a few ads often attack rival brands by name, and make them out as significantly worse on questionable grounds. Like many console war era ads in the gaming industry, which were very happy to tear rivals to shreds over things that didn't match reality.

So it seems there are definitely ads that attack competitors or make false statements about their products, and they don't all get banned/spark lawsuits over it.
Congratulations on launch! The solo tier looks very nice and useful (except for missing Android client for now). Low the sign-up flow, very easy.

This looks very similar to ZeroTier - apart from building on wireguard - how do the solutions differ? Is tailscale also a true mesh (ie packets go direct between two tailscale nodes on a lan)?
Do it in base 9000 with baby names and common words. "Join us in black raven deodorant daisy mega delta leo"

Also create dud rooms with prerecorded conversation.
Zulip hits all of these if the "view edit history" feature fulfills #1 for you.

There's also an iOS app.

https://github.com/zulip
I recommend Crash Course's youtube series on biology. Specifically this video about DNA and replication. https://www.youtube.com/watch?v=8kK2zwjRV0M

In very broad terms, the segments of code in DNA/RNA acutally provide a template for specific molecules and enzymes.
I'm rather disappointed that Cloudflare did not proactively identify the possibility of blocking this sort of content and put tests in place prior to launching to ensure that access to these sites were unaffected. Content blocking has a long history of blocking legitimate sites, especially LGBTQIA+ sites, and ensuring that these sites remain accessible should be a priority, not something that you rely on customers to notify you about after launch.
Zoom is facing questions about how private or secure it is
The graph can have an y-axis starting at 0, and still have all the data points start at 10k.
If you consider the abolition of private property, and the central planning of the economy to be the core aspects of a socialist society (which is a rather uncontroversial, though incomplete definition), and the exact opposite of that to be full property rights, and full free market, then you won’t find a single organised society that fits into either of those buckets. All socialist societies throughout history have allowed for some level of property rights, and all have had some level of market economy. Conversely, any society that could be described as capitalist has had restrictions on private property (at a minimum, through taxation, though there’s lot of other ways too), and have had restrictions on free market activity (again at a minimum, through regulation). To say that any of the socialist governments that emerged in the 20th century are not truly socialist is a quintessential No True Scotsman fallacy, and the same reasoning would be equally valid for making the (equally fallacious) argument that there are no true capitalist or free market societies.
I think you're confusing the implementation of threads with the feature itself. Emails (and mailing lists), forums, reddit, HN, etc has shown us that threads are great. IMO they make discussions less ephemeral which is a good thing for slower communication methods. So hopefully the use of this tool is less "chatty" and less stream-of-consciousness.
Why not just take caffeine pills at this point?
Quic is being standardized in the IETF there are a couple of companies involved:

- Cloudflare

- Facebook: They already use QUIC for some of their products, or at least it's a pretty sensitive piece of software on their architecture because they ask to report bugs to the bug bounty program[1]

- Microsoft

- Nginx

- Google

- NetApp

- Mozilla

- Traffic Server

- Litespeed

- Fastly

- F5

- Apple

Amazon is very quiet about all that, but they are probably looking into it. So, it is pretty backed up. If you take a look at their workgroup homepage (quicwg.org) you will see a couple of open source implementations, some from those same companies.

[1]: https://github.com/facebookincubator/mvfst/blob/master/READM...
In the dashboard, there is no link to support. There should also be a way to create a support ticket or even better live chat.

I am getting intermittent errors in the dashboard as well.
I wouldn't recommend trying to understand it through analogy to CS - I'm a biologist and know enough CS to feel uncomfortable really using any of the usual analogies. The problem is that they work ok for a layperson understanding, but are fundamentally wrong enough that if you want to understand it at the level of something like virology you'll be lead constantly astray. I dont know of a better recommendation than "watch some recorder bio 101 lectures or pick up a textbook, and learn it like a bio major instead of a CS major." It's a lot of time commitment, but I think you have to put in the time to actually learn it from first principles.

For context, imagine if I as a biologist asked you, what's a good read on CS for a biologist? And generally how algorithms, data science, AI, and operating systems work?

You can understand why it would be difficult to recommend any readings on it. For me to learn to code at any level, I had to spend the time learning it from the fundamentals, and it was worth spending the time for me as it was far more rewarding than trying to wrap my mind around something like "so imagine source code is this thing that's like DNA + epigenetics + dna topology that codes for the information you want, but instead of a complex set of chemical and physical interactions, it's math, and you can change it at will and nothing is leaky on purpose, and the code you write doesnt evolve unless you tell it to which you might want to do sometimes for AI stuff, but usually not."
Bruce Jay Nelson along with Andy Birrell.
ngrok Is Down
That's awesome. I certainly missed this bulletin!
Maybe a better term is denature, like with enzymes?
> if those users can join the meeting after it has been established between Zoom-clients, it's not e2e.

I don't think that follows.

First, it's absolutely possible to design an E2E system where users can join the meeting after it started: https://signal.org/blog/private-groups/

Second, you can have your phone gateways be stateless and unprivileged: when a user calls up the phone gateway, it generates a new keypair. The user enters their PIN and the phone gateway derives a key from the PIN using your favorite password hashing algorithm, HMACs their public key with the PIN, and sends it to the existing participants. The other participants have the same PIN, so they can decide to let this public key join the call without allowing random callers to join. (I'm not sure if Zoom does this, but it's straightforward enough and it makes the phone gateways much less juicy of an attack target, especially because you can now reboot the gateways from read-only media and you don't need to provision them a secret, so I hope they do.)

Now we're left with the argument about whether it really counts as "end-to-end" if the plain-old-telephone-system part of the connection isn't encrypted, but also it can't be, so I'm not sure anyone reasonably expected it to be encrypted. Anyone who really wants "end-to-end" encryption can just make sure nobody joins their call by phone. (In the end, end-to-end encryption is a tool to make sure the right people join your meeting - i.e., anyone who cares about end-to-end encryption already cares about who the ends are.)
The cost for the lawyers? Not cheap at all.
(Morally) Because reproduction without purpose is not life. Necessary but insufficient.
Yeah, if you multiply "a billion billion billion billion by a trillion trillion trillion trillion, then multiply that by a thousand" you get a larger number than the atoms in the observable universe.
To clarify, do you mean usability as "how easy is it for an end user to perform X?" I feel in general, adding security to a system without security does decrease usability.

I think focusing on "relative usability" is important too. IMO it should be able to increase relative usability AND security.

For instance, I find unlocking my phone and paying with apple pay is easier to use than taking out my wallet and paying with a card. Having my credit card information encrypted on the phone makes it harder for a thief to access, when compared to gaining physical access to the credit card.

I also use a yuibkey to store cryptographic secrets.
Generally I leave it plugged into my laptop, so it does not add inconvenience to me in using it. Before I had to type in a long password to decrypt my SSH key. Now it's stored on a YubiKey, protected by a shorter PIN, and requires a physical touch to perform cryptographic operations. By moving cryptographic secrets from a system with a large attack service (the laptop) to a device which requires physical access and has a smaller attack service(the yubikey), I find the system is easier to use, while increasing security.

One could argue a lack of security can lead to a decreases usability. Ex, a system under a successful DoS attack makes the system not very useable. I digress though, as I do not believe this is what you were getting at.
This is great. Do you know other similar resources that have been made available during this time?
There are some CDNs in front of rawgit like jsDelivr that may work.
Iam looking to build my own CO2 Meter for a while know. I even thought about making a little series as christmas presents.
My struggle always was to pick the right module. Its so hard to pick one and really trust it when you don't have a reference.

So i thought maybe i give this sensor a shot but i can't find a reputable source for it. Does someone knows where to buy it or uses another module that works good?
Actually it has the wrong indentation style. Should be tabs left spaces right. I run tab width of 3 in my editors. To each their own, if you use tabs left of course.
I want to be a freelancer
Trump Administration Expected to Recommend Wearing Cloth Masks
I'm the same way, it's been 5 years of using it daily and I still look forward to using my Aero Press every morning. If you haven't yet, please do yourself a favor and try the "reverse Aeropress" method. It makes a slightly stronger amount of coffee, about half a mug's worth.
Well, think about it this way, everyone will be 200% unemployed by the end of the year.
Oh my bad, I thought you meant the x-axis
You can check also my lib magnus4j for some ideas: https://github.com/johnathana/magnus4j
How Minimalist Am I?
You really don't think they teach the same high-minded stuff in journalism classes these days? I would bet you that if you sat in on meetings at the NYT or broadcast news outlets you would hear the exact same kind of intent as you attribute to them in yesteryear.

I could be wrong but I think the far bigger difference from then to today is not the quality of the journalism out of mainstream outlets but that the plethora of outlets available has removed the necessity of consensus myth making. Instead of a collected national myth that Americans share they can now choose their own myth.

They used to have to bend their views somewhat towards the major news because people seek to resolve their cognitive dissonance. Now they can change the channel. As an example, my parents are conservative and when Walter Cronkite criticized the Vietnam War and journalists put direct images of the conflict on TV they praised that. Yet when mainstream news which had generally backed the war in Iraq began to report on things going wrong there my parents were livid. When news outlets began reporting on soldiers dying and reading the names of the dead they were even angrier. Nevermind that the news was unable to air the kinds of direct footage of war they had in the 60s because the military had become much savier about the kinds of situations they let reporters into.

I think major news had almost the exact same, pro establishment, upper middle class ivy league bias it has today. I just think it's easier to confirm a contrary opinion. If Fox News existed in the sixties I think it would've run with slander stories about MLK for example and might've hampered Civil Rights. But they didn't exist and general regard for MLK as a hero became the default myth.

Again, I could be wrong but I think it's a perspective worth putting up against the common narrative.
What do you expect when the CEO is a literal vampire for the purpose of staying young.

It was fucking horrifying reading up on that practice. It freaks me out to even type out this stuff but it's all true.
It's like writing ultimate spaghetti code in a dynamic language.

The nature of biology is much like classes and data floating around and all seemingly randomly interacting with each other, because ultimately this is just chemistry with thousands of unique compounds, which makes things messy.

But through natural selection it seems to work. Like a totally incomprehensible compression algorithm learned by neural nets or evolved by genetic code. There should be a source somewhere around here...
It sounds as if you’re more inclined to bend to your employer’s will than to bend them toward yours. Good luck in your search.
New Context is hiring for several REMOTE roles including (Sr) DevOps Engineers, Solutions Architects, Marketing, Sales Managers, and INTERNS.

New Context provides professional consulting services to enterprise clients including DevOps & Application Security along with standards work to help secure the connected world. Its LS/IQ platform helps SMB customers build secure, compliant services, ops, and teams.

To learn more and apply: https://jobs.lever.co/newcontext?lever-via=ZgEpQJVoYJ
Yep, literally applying the strategy Vice exposed, in the article exposing it.
It could very easily be that some manager decided to add an extra day to the schedule "just in case" as in close enough
When I was 17, I built a Java Chess AI for a school project called Chessmate. The AI couldn't castle or en passant, but it won a regional prize that got lost in the mail.

10 Years later, the code (which I had put on GitHub) made its way into a Minecraft mod called MineChess: http://petrustheron.com/posts/chessmate.html

Source code: https://github.com/theronic/chessmate
+1 on this,

Where does one buy a reliable indoor sensor ?
When I think about having two different solutions for two slightly different usecases, my mind always goes to Microsoft's decade-long battle to teach their users the difference between Standby and Hibernate.

There was very real value in the distinction to those who used it, but it proved so irresolvably confusing to the vast majority of users that eventually they pulled the plug and just gave the one Sleep option.

Educating users about technicalities they've probably never thought about is really hard. Doing so without an actual training session, just through interface, verges on impossible. And if Microsoft couldn't convince businesses to train their users, I doubt Zoom can.
Main threshold is if it is beyond RTT or not. But if it is 20pct frequent, there's 4% that are held up and then have their retransmission held up too.

Back to voice, many voice codecs will do forward error correction, but if jitter affects multiple packets in the sequence similarly instead of being independent that might not be enough.
Using the term "zero" is not the best choice. UDP packets have the same latency as TCP packets, you're just saving the handshake.

Games and VoIP still have latency, they're usually structured such the data loss and duplicate responses are normal and handled appropriately.