skysight-inc/HackerNews huggingface dataset:
That and even if it was a real problem it would just be one more thing on a very rigorous checklist anyway, right?
People with corporate firewalls should also be limiting the unruly behavior of web browsers using group policy. For instance, in my environment, regardless of your browser of choice, QUIC is disabled. (As is DoH and various other recent/trendy things browsers are doing.) We also disable all but a small whitelist of approved browser extensions.
Slack's core flaws require topic modeling to fix
Thank you for correcting me, I was under the wrong impression
Only if you are building standard things IMO.
Factoring the largest number ever with a quantum computer
I wish I could downvote this as there is no substance to the claim that the US stole masks or stole an order from someone else. If anything, the Chinese would be at fault here for diverting an order.
We're using a document delivery system for application UI. That's what's wrong. This could've been fixed in the 90's, but it's too late now.
Show HN: Export GitHub PRs for non-developer consumption
This is such an insane post. Do you literally have no idea how much things cost?
I also set up jitsi, in my case on an ubuntu server 18.04 VM on my desktop [0]. Took about 10 minutes as well to follow that guide.

In addition, I wanted to expose jitsi to the internet but not allow random people to create or join rooms. I basically followed the first part of this[1], which sets up username/password pair that you're prompted for each time you create/join a room.

edit this file:

/etc/prosody/conf.avail/HOSTNAME.com.cfg.lua

Look for the first `authentication` line for HOSTNAME.com and change it to `internal_plain`

authentication = "internal_plain"

Add a username/password

prosodyctl register 'username' 'HOSTNAME.com' 'password'

then restart prosody (or just reboot)

This is enough to make a password prompt pop up every time someone creates or joins a room, and it autofills nicely after you enter it the first time on firefox/chrome/android app. If you follow the rest of the guide you can set up a second domain people can use to join rooms without a password prompt.

This makes me feel a bit better about exposing this to the internet. Not sure if there's other havoc someone could cause though.

[0] thankfully I have fast internet with a public IP

[1] https://github.com/jitsi/jicofo#secure-domain
They are monitoring human movement, at scale. This is dangerous.

* video feeds + machine learning system for monitoring warehouse workers.

* video feeds + machine learning system for monitoring shoppers.

* video for monitoring entire neighborhoods.

Hmmm, I wonder what their business plan might be.
In estimates I've done, in its current un-accelerated state, it would at least triple the CPU cost per byte served on our CDN workload. We basically lose:

- sendfile

- ktls

- TSO

Its like stepping into a time machine and going back to the mid 90s. To send data with QUIC, we have to get byes from kernel into userspace, encrypt them in userspace, and then write them back to the kernel, where they travel down to the NIC an MTU at a time. Ugh.
And why would QUIC not work for other streaming protocols? the only possible disadvantages I can see is that it is a bit more complex and that it requires encryption. It does not in any way require HTTP.
That's a good question!

https://community.anovaculinary.com/t/sous-vide-a-face-mask-...
The Ethics of Artificial Intelligence
A Test
I'm just testing
Betteridge's law of headlines strikes again
How do iMessage and FaceTime provide end-to-end encryption? Is there a public key associated with Apple account? How does my private key get on different Apple devices without my help?
It uses the following data: https://github.com/pomber/covid19
Ask HN: Is it too late to start creating content on YouTube?
Is the Youtube space convoluted or is there enough areas where one can create contents?
Sure. There's lots of things non-tech Fortune 500's should do, but don't.
WHO is hilarious. They told us only what we already knew. For instance, they told the world that there was a pandemic only when everyone knew the pandemic was happening. I mean, what's the use of WHO if it couldn't even forecast something so obvious?

No wonder a meme is WHO cares.
I'd think (if I didn't know any better) that being well-off would result in people having more time and energy to consider things like ethics or politics. I think this is how it's supposed to work, historically. Evidently, it stopped working, both in the general populace and in people involved with tech.

It's not very surprising, though. The technology is mostly built by one-step-above (or outright-) autistic nerds, and marketed and sold by hyperactive pie-in-the-sky megalomaniacs. The nerds don't care that much about anything in particular (other than tabs vs. spaces), and the business types have flexible ethics. Both groups would be dangerous - for different reasons - if taken separately but taken together make for the most ethics-free industry ever.

The complete inability of both nerds and founders to act as a (larger) group might be the only reason why the industry is not under regulations stricter than surgeons and soldiers are. If it were possible for this industry to actually wield the power it has, the governments would be much more pressed for securing what became a vital infrastructure. My guess is that they know for a fact that shutting down Google for a week is not going to happen, ever - and that they are content with the kinds of people that self-select into IT.
Not that I am aware of. And the counties vary a lot in terms of the data they provide. The best is Napa County.
To start, https://wiki.lineageos.org/devices/bullhead/build but you won't get 17.1 support from official Lineage sources. The most you can do is the latest 15.1 with the last ASB merge from Google, but at that point you may as well find the last official and install.

I'd recommend looking for other 'trustworthy' developers who are working on your device in the open. You can install their pre-compiled builds or you can use their sources for your own builds. There are unofficial builds of Android 17.1 on XDA [0].

0. https://forum.xda-developers.com/nexus-5x/development/rom-li...
You talk as if there are currently shortages of essential supplies. There are not. You could stock up tomorrow if you wanted.
Adoption of HTTP/2 also limits the appeal of QUIC. HTTP/2 delivers many (not all) of benefits QUIC offers and is both widely implemented and adopted now.
It means nothing but this is what Zoom tells us we have. Encryption given "in the spirit" of their intentions.

> Zoom has always strived to use encryption to protect content in as many scenarios as possible, and in that spirit, we used the term end-to-end encryption.
If the unemployment rate continues to rise at this pace (about 7% every two weeks), it will match the peak during the Great Depression (25%) around the end of April.

That's 40 million people who will have no income and likely no health care in the middle of a pandemic.

Not sure how to process this information honestly.
Is also like to know if this has worked.
Consume Authenticated APIs in Next.js (Server-side and client-side rendering)
Some use 32GB cartridges.
ha! but maybe not too surprising given the origin of the word googol
This is a real problem, but I'm not sure the root cause is that senior developer.

We've been building software far more complex than any web front-end for many, many years. Much of it was built without the help of all-encompassing frameworks. Much of it has stood the test of time longer than any web app, too.

Doing this requires a basic understanding of general programming principles from all developers. It requires a solid understanding of software design and architectural concepts from at least the more senior developers.

These things aren't rocket science. Millions of developers around the world have these skills. Many books and conference talks and training courses have been created to pass on the knowledge and the important ideas behind it.

Unfortunately, lots of people get into web development without ever learning even the basic skills of their trade. They learn by copying and pasting snippets from Stack Overflow or some YouTube video they found, jumping from one trendy framework or tool stack to the next every five minutes, with no awareness that those snippets were often also written by people who never learned the basics. Rookie mistakes are everywhere, and the culture often favours shiny new things over solid, well built solutions to real problems.

You can't really fix this just by getting developers to use a well-documented framework. For one thing, a lot of those frameworks aren't great themselves, either in their design or (not coincidentally) in their longevity, because they too were written by people with limited experience and understanding. But even if you do find a good framework, if your developers don't understand how to use it and the trade-offs it makes, they will still make dumb mistakes. When you have requirements that can't be implemented by just joining one framework dot to another until you're done, you definitely want someone who knows what they're doing writing that code.

As is often the case, the key to improving this is probably better training, particularly in the early stages of a career. But that doesn't always work in business, where resume driven development means developers will stick around long enough to add a few buzzwords and then jump ship to a better paid job somewhere else, taking the value of any accumulated experience with them. Until businesses start looking for real skill instead of buzzwords when they're hiring and start rewarding real and growing skill with their compensation packages, unfortunately the cycle will continue.
How is that positive? They have great engineers, great infrastructure and a lot of money. It would be great if they could help.
Ask HN: What are the big tech projects for Covid-19?
Years ago i remember Google launched Flu Trends. Apart from scaling up their operations for increased demand, and Apple's evaluation test, what is being launched for COVID-19 by big tech companies? Any interesting projects?
> May even be a decent option for video games and other things that need somewhat lower latency and wish to avoid head-of-line blocking.

Most video games already use UDP
I thought IETF QUIC was higher-level agnostic from the beginning, has that changed?
> Can confirm that turn it off and back on again works for troubleshooting avionics issues.

Have you ever had to do this mid-flight?
Austin has a decent breakdown here: http://www.austintexas.gov/covid19
Nobel Prize is just some dude who wanted to do something nice with money he made selling dynamite. There's no reason to imbue it with responsibility for picking which authors deserve to be immortalized.
I feel like I tried these a while ago and neither was entirely effective. Maybe I was doing it wrong, though.

(To be clear, the feature I'm looking for is some sort of irresistible button to start/stop the action that neither the website nor its Javascript can affect. Preferably it would not even be able to tell whether the video was running.)
Any+Corona+tracking+app+must+be+used+voluntarily+and+be+Free+Software
How ironic. If you listened to HN, you'd think that Europe was so pro-consumer, unlike those silly Americans who keep granting Stupid Patents to Evil Bigcorps.
After this is over (whenever that is) we expect people to resume eating out and traveling. I agree that it's likely that 50% of restaurants and 25% of hotels/spas would become bankrupt and shut down, but that does not mean a 50% / 25% reduction of employment; I would expect most of the bankrupt restaurants and hotels/spas to be immediately replaced with new ones, employing much of the same people and renting much of the same premises (only cheaper), and ran/owned by the same people. In such an environment, the main impact of a restaurant going bankrupt is that the creditors and investors of that restaurant lose their capital, but it can reopen after a reorganization when there's demand once again.
Google? Did not they have a multi-hour outage just a few days ago?
Authentication means blocking any calls with spoofed or no info
Hand Mirror [1] is a good free alternative.

[1] https://handmirror.app/
Pixel boot-loader is locked if you buy it from a carrier rather than direct from google. The Nexus 6 I got from Verizon did not have a locked boot-loader.
Conversion. Social proof gets more people to join.
It's been ages since I last saw a PHP script leak anything as it's state should (!) be reset completely, at least on Apache, with every new request.

How did they manage to create leaks? Or was it bugs in their custom PHP interpreter?
100% echo this statement. I have dozens of customers who went to VDI in Azure as their immediate work from home solution. I can't think of a single one that went to AWS. The article makes a bunch of baseless claims to get to an unproven conclusion.

>It’s safe to say that AWS runs a much bigger, if not more critical, chunk of the digital world than Azure.

Based on?? If o365 goes down for any extended period of time, most of the fortune 100 can't do business.

> it generally lacks operational experience in running “always on” services and preparing for unanticipated traffic surges.

Ya... Microsoft lacks experience running always-on services... they'd only been managing hotmail for a decade before AWS was even in beta. They have no experience running always-on services AT ALL.
I rather wish the 3DO version of The 11th Hour had seen release, but the publisher canned the project quite late in development.

There, we had about an hour of video - on CD, it should be noted, not a cartridge - at 288x320 (using an interlaced display mode, which virtually nobody used beyond splash screens), with a perfectly solid 30fps. Left unregulated, the decoder yielded around 40-70fps. All ARM assembly, and a huge amount of fun to write. ^_^

No hardware acceleration, needless to say, other than page blitting to copy the previous frame to the current buffer.
Also, their big principle is human insight over algorithms and machine learning. This was derived from experience in Paypal, where human in the loop approaches worked much better for fraud detection than algorithmic approaches.
No, it has not changed.
Google Maps API reduced their cost by 94%
What's your goal?
A lot of actual Asians in the US, not just "Asian-Americans", are wearing masks too.

Sorry, it is my pet peeve when people assume that everyone living in the US is "American".
Coronavirus cases pass 1M worldwide
Even removing the "paying 3-4 times more, and in cash" aspect, the US probably needs it more at the moment.
Very, very limited data on the Bay Area. Under the "SF Bay Area Actuals" you can scroll all the way to the right you will see what I have been able to find.

California does report them on aggregate, but the purpose of this sheet was to focus on the Bay Area.
>If frontend was bicycle science then I must have missed that in my 10+yrs writing frontends with JS+CSS.

What you've said directly proves OPs point - you've missed the central message: UIs used to be bicycle science before everyone started using JS to make them.

They mentioned VB as in visual basic. GUIs with VB/Delphi are a case of dragging controls to where you want, pixel perfect every time on every desktop.

Web technologies are not designed for desktops but for building on top of HTML, so everything is an abstraction to get back to something that used to be possible with zero experience and sometimes even zero programming. For example, a simple notepad clone can be made in Delphi without a single line of code.

Now you need to 'full stack' to even know what's going on under all the layers just to place a control at an x,y and even then it can't be guaranteed because of all the different browsers, css edge cases, and other caveats.
QUIC seems to have encryption so something like SSH could come
France hijacks masks and other PPE intended for EU: https://www.irishtimes.com/news/world/europe/coronavirus-eur...

“On March 3rd, President Emmanuel Macron announced that he was requisitioning ‘all stocks and the production of protective masks’ for distribution to medical personnel and French people infected with Covid-19. One fifth of all surgical procedures in the EU use personal protective equipment imported from Asia by the Swedish company Mölnlycke. The company’s main distribution warehouse for southern Europe, Belgium and the Netherlands is in Lyon.”
> I could see using jQuery in 2020 if your poor soul still has to support ancient browsers

IE 11 at work for some customer projects. It's dreadful. No support for anything decent, but at least the debugger is better than the "nothing" you had with IE6...
It's odd you refer to endpoints as being the "more affordable place". Because running monitoring software on 5,000 PCs plus management infrastructure and software updates is a lot more "expensive" than having a single purpose-built box on the border between the network and the wider Internet.

Now, I get that QUIC's developers live in a zero-trust/BeyondCorp model, and expect everyone else to too, and with COVID-19, a lot of businesses are suddenly having to look at thinking that way, it's far from how most companies work at present. And having a single box handle filtering and monitoring is actually the most affordable place to put it. ;)
x = 1
x = 2

Why is that a problem? It's shadowing, not mutation.
Cheers, thank you for that. It's so crazy. And then you remember what it mitigates: war. Worth it, eh?
Ok let's leave the theoretical analogy world and talk about the material, concrete, actual reality in actual practice.

the crda regdb database in the Linux kernel, this one https://wireless.wiki.kernel.org/en/developers/regulatory/wi...

It's encrypted and there's a long (somewhat silly) explanation of why it's not in a plain ascii format like everything else. You can't just crack it open and try something if you have a country hardware locked wireless device (via it's firmware). It's still possible to do here with a bit of effort but the next one isn't.

Android adoptable storage, unlike Android traditional storage will encrypt without telling the user https://source.android.com/devices/storage/adoptable

You can not get access to the decryption keys if you haven't rooted your phone. You need to hack your own device to look at what you stored on your sd card. If you're having a failing sd card and want to do recovery on it, well too bad, it's now utterly impossible, even if you own the phone.

These are just two real world actual problems I've run into in the past week alone.

Encryption can be, and often is used to be an extremely hostile, closed-data system. So that devices I Own, with My data I don't have access to and cannot see. That's not a better society, just like closed source isn't a better world.
How does this work? Has your company shared or consulted any resources regarding this?
Is the end to end encryption removed for all clients when a legacy device connects?

I don't understand how some devices could be end to end encrypted in a meeting while some legacy devices in the same meeting are not. How could the legacy devices send and receive to the encrypted clients?
Stockpiling has caused absolutely nothing but problems.
Is this instance of a patent good or bad?
Because we're in a thread discussing the virus problem? This is an attempt to derail the very reasonable cost concerns about these gov't bail-outs. Besides, "helping people" already accounts for a much greater portion of our spending and of the national debt. Also, in terms of debt contributed, first bail-out alone is $2T while the military budget is less than one.
>And people still don't care.

How do we make them care?

If one looks at an issue that would emotionally charge the population, the protection of children, and then looks back 150 years, you'll find that much of society didn't appear to care. In the US, for a period of time, pets had more legal protection than children. I'll avoid the grimmer details, but people were willing to tolerate things that today would cause mass outrage. It may have taken over a century to change public opinion, but public opinion did change and massively.

So how can we do the same with privacy and protection of basic rights?
https://healthweather.us/ run by IoT thermometer company https://www.kinsahealth.co/products/ is quite interesting. Not that I would want my thermometer to send back data into the cloud but by aggregate and anonymized it seems useful.
I also had very bad experience with WebRTC in browsers. Just several days ago i tried videoconference with Jitsi Meet. Although it was receive only (no camera or mic), so no encoding, and received video was pretty low-res, it generated enough load on all my cores that after a while it triggered thermal throttling.

Considering that i can play Full-HD H.264 videos with minimal load then this seems ridiculous.
It's not like when you skip a day in changing engine oil.
Sorry to be that guy but there are two big players in the chat industry, and this page does nothing to convince me that this product is superior. There are lots of smaller competitors, including Zulip and Twist, that already do what they claim to be their innovation. There's no product, just an "opportunity" to give your email to someone you've never heard of.
I searched this for the word "test"; it does not appear. No sweat if testing is not in scope for this particular site, but regardless of your dependencies or approach, writing tests for your code is vital.

(The word "test" also doesn't appear in these comments, except for a discussion of A/B testing. Hmm!)
I think it might actually succeed to replace TCP. There are a bunch of benefits. There is a great video here about it that you should also watch before passing summary judgement: https://www.youtube.com/watch?v=idViw4anA6E
My bank account awaits a whole new raft of security problems for me to be paid to support/fix.
I feel like they could have come up with a better name.
France has 900 cases per million vs the US at 700 cases per million. So: no, unless you think French lives are worth less?
Docker Compose syntax: Volume or Bind mount?
Where is the most important metric? Daily tested vs tested positive stats.
SEEKING WORK | Peoria, IL | Remote

Hi HN. We're Nerevu Group, a distributed team of data gurus that specialize in creating interactive data driven dashboards.

We excel at integrating with and developing backend APIs, customizing open data platforms, creating sleek visualizations, and automating marketing analytics reports.

Contact me at rcummings at nerevu dot com

Our tools:

* Languages (Python, CoffeeScript/JavaScript, HTML5, CSS3)

* Frameworks (Flask, Mithril.js, Node.js, Express, CKAN)

* Libraries (Brunch, D3, Leaflet, KeystoneJS, SQLAlchemy)

* DB (PostgreSQL, SQLite, Memcache, Redis, MongoDB)

More info:

* https://www.nerevu.com

* https://www.nerevu.com/blog/category/Case+Studies

* https://www.nerevu.com/services

* https://github.com/nerevu
Compose allows you to configure volumes using a short syntax format: `[SOURCE:]TARGET[:MODE]`

In practice, this leads to different string variations. Every time I read a docker-compose.yml file, I had to refer to the docs or run a quick test to figure out if a volume or a bind mount is used. I wrote a short guide so I wouldn't have to look this stuff up anymore and be able to memorise it by heart.

The gist of it is:

1. No source -> anonymous volume

2. Non-path source -> named volume (defined in a top-level `volumes` key)

3. Relative or absolute path source -> bind mount

Hope this helps some of you out there that trip over this syntax like me.

Stay home and be safe!
So, something layered on top of UDP layered on top of IP is going to replace IP?

Maybe the marketing department needs to hire someone who knows the fundamentals to write the headlines?
OVH doesn't limit it afaik.
Solution volunteer to quit social media. Including these messengers.

Call friends instead
Only compiled for x64... Very frustrating as a user on ARM64 windows.