skysight-inc/HackerNews huggingface dataset:
Taming the MTA’s Unruly Turnstile Data
That doesn’t mean it’s a sound policy.

Public markets bid up a stock to an insane valuation in a matter of weeks and then the price comes down (due to technicals, fundamentals, whatever) and you have shareholders trying to weasel out of their gambling losses by suing company.

Let a customer who was actually harmed by this sue. Much more compelling to me.
Show HN: Deepfence ThreatMapper – A powerful vulnerability scanner
We are super excited to release the community edition of our product to help DevSecOps teams -- Deepfence ThreatMapper !
Deepfence is a unified platform to protect kubernetes, virtual machines and serverless workloads at runtime.

We have packaged a subset of important features of the platform in this edition. Essentially, you can visualize kubernetes clusters, virtual machines and container images in real time and scan them for vulnerabilities. You can also scan an unlimited number of container images by integrating with popular registries.

This community edition comes with batteries included and should be ready to use by small startup teams as well as enterprises teams. Hence the edition comes with built-in integrations for Slack, PagerDuty, Splunk, SumoLogic, ELK and more.

For more details about the features and installation instructions, refer to our page at https://github.com/deepfence/ThreatMapper. There is a live demo available as well. Try out our product and don’t forget to send us your feedback. We’d love to hear from you to improve our product!
Agreed. One of the major problems I had with Gatsby, for the brief period I used it, is that the documentation at the time did not clearly delineate what occurred when. E.g. how did I make code run at build time versus at rendering time?
I was laser cutting the clear parts of the shields with a local makerspace. We ran out of the thicker material that was being used, now there is a worldwide shortage. We were making for doctors and nurses in hospitals, so we wanted something more substantial. These look pretty flimsy, but are probably better than nothing. We failed to realize the supply of our material was not infinite. We actually had a fair number of people 3D printing, but that was still a major bottleneck.
also Safari
Love your landing page -- was it designed by a professional?
There are a lot of good reasons to buy less beef, but I don't see how it's going to make ranchers less inclined to shoot wolves.
To fit a better lens and image sensor, they would either have to thicken the Macbook lid or add a camera bump. Seems unlikely.
all of these alternatives which people are posting: simpleanalytics.com plausible.io are not free, which is the main reason people use Google Analytics
It seems like it would work if there was an unencrypted metadata stream with it, indicating boolean talking or not, etc.
Detroit hospital nurses refuse to work without more help, ordered to leave
An Undetectable Computer Virus (2014)
You may find your answer in a PDF paper from here: https://www.researchgate.net/figure/Layout-using-constraint-...
Skype used to be flawless until Microsoft decided to get rid of the P2P model and replace beautiful native clients with an Electron pile of crap.
What is crippleware? Does it mean it doesn't work?
Open source is a work in progress. There are plenty of software and hardware projects that care about security and big tech can't stop them although they would probably like to.
It sounds like a lot of effort to steal and replicate my fingerprint. Conversely I find my fingerprint a lot more usable to unlock than a biometric like a face ID.

I'm willing to trade a little convenience for security, with the caveat it sounds like a good idea to power down electronics when they're out of your sight.
Is It Better to Buy Bitcoin on Robinhood or Coinbase Pro?
But Skype was actually an encrypted communication channel until Microsoft bought it and removed server-side encryption
I'm impressed with Jitsi, it all works pretty well. The only thing i noticed, compared to some of the proprietary solutions, is that my laptop got pretty hot because of CPU usage. I wonder if they're doing anything about that for the next release.
There's a big blue button at the top of the page that says "Start Free Trial". Click it and you get this:

- Quick and easy to set up

- No credit card required

- Unlimited use during the trial

- From just $6/mo after the trial

Looks like a flat fee? Hard to tell from that wording. They should make this more visible on the front-page and elaborate on the "from just $6/mo".
But remember that a respirator blocks 0% of particles getting in your eyes.
I showed Alex Stamos information two days ago that Zoom engineers had surreptitiously spied on women around the world and then assembled their webcams into a single dashboard for Zoom engineers to view.

The name of this dashboard was p*ssy4all.dashboard-production.ipa.zoom.us. A quick way to prove this is to type this subdomain into securitytrails.com.

It lists a dozen different IP addresses this internal product had for several months between September and November of 2019.

LINK: https://securitytrails.com/domain/pussy4all.dashboard-produc...
> Earlier this year, Google informed us that they were going to begin charging for reCAPTCHA.

Wait. Is this news? I don’t see other article about this. What is the pricing?
Author here! If you want more, I just released a book on DynamoDB yesterday --> https://www.dynamodbbook.com/ . There's a launch discount for the next few days.

The book is highly recommended by folks at AWS, including Rick Houlihan, the leader of the NoSQL Blackbelt Team at AWS[0].

Happy to answer any questions you have! Also available on Twitter and via email (I'm easily findable).

[0] - https://twitter.com/houlihan_rick/status/1247522640278859777
Uh, this is quite verbose :-/

"The following information [a boolean, not the event details] is sent when the specified event occurs:
- Sign-in Error
- Account creation
- Login succeeded
- reset password
- updated password
- Joined a channel
- Created, edited or deleted a message
- searched for a term"
… and the list goes on: https://docs.mattermost.com/administration/telemetry.html

Thanks for letting us know…
I started using this (for https://virtualcoffeebreak.app) but in the end had to switch to daily.co - the jitsi support for mobile devices is a bit painful and doesn't work so well.
The mobile iframe is quite jarring and doesn't provide that nice user experience; for example it doesn't detect if the app is already installed or not.

Having to download an app increases the barrier compared to other solutions.
To address each of your points:

1. I do have an ad blocker installed, but it's not very aggressive.

2. All scripts are enabled. I already have trouble with some sites due to my fairly lax ad blocker.

3. I do not use a VPN (since it just transfers who is able to see my traffic from one party to another). Additionally, virtually every service provider penalizes VPN IPs to the point where it's probably not worth the hassle.

4. Not sure what you mean by "stores tracking Cookies".

---

> If all of those do not apply to you, I would feel discriminated against by Google

I do not agree with that (mostly because of point 3). The reality is that VPN traffic is significantly more "spammy"/bot-filled than non-VPN traffic. It's a perfectly rational and justifiable way to protect sites (albeit ReCAPTCHA is of dubious effectiveness).
It looks like a nice product but GA is free!
> But now it just pisses everyone off.

Though we're still just talking about a few HNers here who complain about doing "free work for Google", not the broad population.
One commercial said it could host 9000 docker containers per lpar. Sounds tempting of course.

But nah. I am not touching it, until IBM gets their ducks in a row.
We use Simple Analytics [https://simpleanalytics.com/] as alternative to GA and it's also privacy-friendly.

I saw Plausible appeared after Simple Analytics launched their product. I'm glad to see GA alternatives becoming popular.
I think the point is that this is testing your MTA, not his. I.e., if you're connecting directly to unverified.email, you're not really testing whatever your app uses for outbound.

Afaict, this isn't a forwarder, just a mailbox endpoint.
I can't find this language in the GA terms and conditions.
There's many reasons not to trust the CPC. (ip theft, surveillance, etc.)

There's also many humanitarian concerns as well:

https://www.cnn.com/2018/10/10/asia/xinjiang-china-reeducati...

https://nypost.com/2019/06/01/chinese-dissidents-are-being-e...

https://www.npr.org/sections/health-shots/2019/09/04/7570898...
So the European equivalent of the Five Eyes?
to learn contract bridge, I find the bcalc single/double dummy solver bcalc useful: http://bcalc.w8.pl/index.php?lang=en&topic=download

also good is the freeware bride program Wbridge5, which has won several world computer bridge championships. It is a Windows program, but runs fine on linux with the wine emulation layer. (I've run it on fedora 30, debian 10 and ubuntu 19.10)
Stanford researchers show how forest loss leads to spread of disease
Random fact: the 'Big Buck Bunny'[1] short film that the presenter shares during the screen-and-audio-sharing demo was made by the Blender Foundation[2], an organization that develops open and free content creation tools.

[1] - https://en.wikipedia.org/wiki/Big_Buck_Bunny

[2] - https://blender.org/foundation/
That's incorrect. Google ads have conversion tags you can do remarketing with, no need for Google Analytics.
Open-Source Unvanquished Game Aiming for a New Release Soon
Habitat Chronicles: The Tripartite Identity Pattern (2008)
Why is having engineers in China cause for suspicion? Lots of tech companies have engineers in China. Eg Microsoft.
"90 day plans" tend to be management & PR things... Real engineering is more of a "it takes as long as the job takes"...
Keep on rocking, friend.
I tried it and it did not work for me. (Macbook Pro and iPhone 8)
After 50 Years of Effort, Researchers Made Silicon Emit Light for the First Time
It's the industrial espionage angle that is probably more concerning. The Chinese government certainly can get attendee lists and keys for Zoom meetings; want to listen to meetings the cxx folks are in?

Or worse, steal prospects for domestic companies? I'd be pretty enthused about getting the list of people my competitors are doing sales calls with.
Feynman's Nobel Lecture (1965) [pdf]
Oh let me be more explicit: Google's destiny is deeply intricated with geopolitics, and as several US-based giants it will have its future indexed on the US destiny.
And the US are declining at the speed of light.
China has built its own tech powerhouse and it is dwarfing the american digital universe. Moreover Trump's tech blocade on China is just prompting them to develop alternatives on every possible hardware and software product and therefore China is becoming the biggest threat to US Big tech companies.
Europe can (and will) go on make easy money taxing Google and other 'privacy predating' companies because they cannot afford the luxury to quit the biggest trade bloc in the world... ANd it is a good strategy to weaken the US.
If you think that Google will remain what is is now, get your head off the SV tech blogs and read a bit about geopolitics.
So yeah, I think that Google is anomaly. And most anomalies tend to disappear...
Obnoxious entitlement? Social pressure? Historical precedent? Why questions can't really be answered. But if you give someone a well-deserved B they cry in your office and then hammer you in their end-of-semester course review.
Which ones don’t? I get the same behavior from Slack, Lifesize, Hangouts Meet, and Zoom.
How Big Tech companies avoid paying tax
Yes, much like a Bloom filter, but instead of 2, it gives 3 output types:

1) not in set
2) possibly in set
3) in set

Depending on the input (sample population), it is possible to get results with all 3 states. Origami Assay's decoder differentiates the "(3) in set" from "(2) possibly in set" for efficient post-testing.
If the lawsuit gets past the pleadings stage, then relevant information would be subject to discovery. So the plaintiffs would be able to get and use that info in court, but Zoom would probably ask the judge for a protective order
so that it doesn’t become public.
The correct proposition instead would be to stop analytics on your website, period. There's many sites that benefit greatly from the insight, but I'd argue they're a minority. Your personal blog doesn't need analytics. Let's be honest, for many people, analytics is just a way to feed their ego — my ramblings reached 100 people, so you could say I'm kind of a big deal. Google is, obviously, very well aware of this target market, and tries to feed back into this loop as well. It's not without reason you get weekly summaries and more into your inbox by default. The reality, of course, is that it's serving them while hooking you, much like social media notifications driving engagement etc.
Azure has been having a really tough time during all of this so my head went there too
You are right, you don't need to know it in a small blog or site

But metrics and statistics are the very foundation of science, and the graal of software engineering. I can't resist the temptation of knowing which browsers and the countries of the users of my website, or how many hacker news visitors come to it every other season, so many possibilities... sigh
So...use a US based video conferencing tool? I'm sure there are no backdoors in those!
Or just do it the old fashioned way - have the server keep an access log, then use something like GoAccess (https://goaccess.io/) to produce reports from it. It’s not real-time reporting, but then you probably don’t need real-time reporting for your personal site anyway.
Yeah, the a-a cable needed is a male-male, but the wyze camera is accepting power via it in this case. The normal power for it via micro usb is disconnected.

I don't use wyze normally, not sure what the type a female port is for.

It's a hack on top of a hack that functions reasonably, and helps with supply chain issues.
I'm slowly going through the Duolingo tree :)

Went into it with pretty much zero knowledge of the language, and the thing that caught me most off-guard were some of the non-phonetic spellings, like _jeg_ and _kjøpper_, but else the actual grammar is similar enough to English that it's not causing too many issues!
Zoom won the proverbial lottery with this pandemic and lost their ticket through greed/laziness. Great companies are always prepared when their big break comes. Zoom is not a great company.
Usually I look for a 'pricing' tab. Clicking on 'start free trial' tell me they are going to ask me for my email, instead of telling me how pricing works
How to Stay Private During the State of Emergency
Looks nice. Is the account multiuser with separation between sites? If it is, it's a service I'd consider throwing into my maintenance packages as an added value. Most clients don't need the complexity of Google Analytics and with GDPR the data is increasingly out of line with reality, given we load GA based on consent.
Yeah. but the signature will simply be a new layer on the PDF. So you can: 1) replace it easily. 2) Extract the signature without any jpeg noise.

Also, I like rasterized contracts / text, instead of a small pdf + an image, as it's easier to tamper with
I used bidets a lot when I lived in Argentina. The sensation of having a clean butt is pretty unbeatable. When you poop and then wipe with paper you still feel dirty for the rest of the day.
Very similar to your idea is Cytube, I've been using it for a while and it supports a lot of various video hosts which makes it very nice to watch basically anything together. I've even self-hosted clips I couldn't be bothered to upload to YT.
To learn auto racing or acrobatic flying, there's the esports for engineers package of classic PC simulation games: https://github.com/bencaddigan/esports-for-engineers
It would be great to see a comparison of Zygote to Jax (both features and performance). I think the Julia language with the ability to manipulate it's AST via macros makes this kind of source-to-source transformation a lot easier than it would be in Python. I'm not sure how they achieved this in Python, but I'm going to guess it was a lot more work.

Also, Zygote is much more ambitious than Jax. Zygote aims to support all of the Julia language whereas Jax is limited to a subset of Python. I wonder if the Zygote folks are biting off too much here? Though currently Zygote doesn't support mutation.
In that 8 hour window did you go to sleep only when you are sleepy?
That is the biggest guiding principle of sleep restriction. You want a fixed wake-up time but NOT a fixed sleep time.
I disagree that this feels manufactured. It's due to a catalyst - one that has brought on a lot of positive and negative attention to Zoom. The evidence is all there and it is factual. Zoom has misrepresented their encryption on both the implementation and operational sides. However to say that only the bad press Zoom has received is "manufactured" is a misrepresentation.

I'm not sure I follow the Skype comparison. If you're talking about Skype historically (and it seems you are) - then that was before a lot of the strong privacy and encryption conversations were being had in the larger audience of consumers. Setting this comparison is a slippery slope. Yes, we know Skype was used and abused by nation state actors - but for the time encryption was not the norm. Things have changed and today misrepresenting encryption and privacy is a much more grave sin that consumers are more concerned about. Businesses lying or misrepresenting it should have been held accountable back then - but they only finally are now.
I changed it to the more friendly "core-ware", means you get the basics - the rest is licensed.
Thanks! These are new to me, one normal and one Pan on order. Thank you again!
Matomo: https://matomo.org/
I don't see anything for that domain...
Can you link? I couldn't find that on securitytrails
There are plenty of services that will happily accept a screenshot from a developer, send it out to live humans who solve it in real time, and then return the answers to the developer.

I'm not going to link to them, but you can find them yourself by googling "buy recaptcha solver". The prices for the top two results are $0.50 and $1.39 per 1000 solves (respectively, $0.0005 and $0.00139 per solve).

At that price point, it's feasible for the truly determined to just use those solvers to bypass ReCAPTCHA (or similar services).
This is cool! We’re a small team working on automation for email. I’m curious what’s your vision for this? Are you looking to sell the use of those scripts, the making of them? Is this just you? Is this open source?
The Tibetan Book of Proportions: Book with precise iconometric guidelines
> shouldn't it be enough to record coordinates/location of live cells?

It sounds like you're recommending a list (or Vec) of Locs instead of a HashMap from Locs to booleans. Yes, this would also work, but it would be quite a bit slower because whenever it needed to check the liveness state of a given Loc (which it does very frequently), that would be a O(N) search instead of a O(1) lookup.

Edit: it did just occur to me that a HashSet could be used, which would save a small amount of memory without introducing the performance issue. Though it would also prevent (or at least complicate) the strategy below where I pre-mark the dead neighbors of alive cells.

> But it seems the boolean/list of neighbors is redundant?

Technically including the dead neighbors in the HashMap is also redundant, but it's also a (less important) optimization. By recording the dead neighbors while setting the live cells, a little bit of work is saved on the next phase because otherwise I would have to iterate over all 8 neighbors for each live cell, when determining their next state. This would mean many cells would get iterated over several times, as they might have several alive neighbors. Doing it the way I did also just simplifies the logic a bit.
The project is available here

https://github.com/deepfence/ThreatMapper
Paycheck Protection Program and MBL Loans – Compliance Bulletin
One hobby of mine is trying to imagine what it would be like if elephants developed human-level communication and thus civilization. They are close enough that it seems like a coincidence of evolution that apes got there and elephants didn't: maybe ape brains were selected somewhat differently, or maybe we went through moments of high evolutionary pressure (and survived), where elephants didn't (or like the woolly mammoths, didn't survive).

Imagining how a civilization might develop with musth is interesting: it seems biologically antisocial, like periodic insanity. Would there be pressure to self-regulate? Ostracism during that time? Evolutionary selection against musth?

It feels like there's an analogous suspicion and fear of human men as well, similarly peaking for adolescent humans, like adolescent elephants, who are least able to self-regulate. But the fears would be much stronger in elephants, and so acute since musth is temporary and outwardly visible.

If not ostracism, what social pressure could be applied via punishment? Elephants' scale would require different approaches: for instance, I don't believe any number of elephants could work together to lift another elephant. Elephants would have a degree of physical autonomy that, while not unbounded, would be greater than humans: they can hurt each other, but not subdue except through threat. And if you are crazy on hormones a threat might not be enough!
https://carlmungazi.com

I read the source code of popular libraries and frameworks and write about what I find. It's very React and JavaScript focused because those are the tools I use daily in my current job.

My latest piece is a guest post I wrote on how the microtask queue works in JavaScript: https://careersjs.com/magazine/javascript-job-queue-microtas...
> There are very few pieces of information that are truly private, like social security number

Most countries don't have such a number with such high value.
Is it the same company? We have "employees" around the world, but that ranges from employed by the mother ship, employed by one of the various subsidiaries (all with very similar sounding names) or not officially employed but via a local agent (for both liability, regulatory and in certain regimes, mandated).
Not sure who makes Plausible, but if the "live demo" is reflective of the actual product, it's sorely lacking. The reason that GA so popular is because of the free tier, sure, but also because GA 360, the really amazingly expensive version, has features that let you really get insights about your visitors.

Here's a popular question these days: "when can I stop supporting IE 11?" With GA, the answer comes in a couple of clicks; revenue generated sliced by browser version. I don't even see the revenue generated section of Plausible, or really any way to associate any metadata with custom events. GA gives you this functionality without any coding.

If you don't want to use GA, try something like Amplitude, which has a lot more data manipulation options than Plausible.
Slightly off-topic, but are there any analytics for open source projects?

Even if they require the actual data to be public (which would actually be pretty nice)
That would be wonderful if you’re able to! Also doubles as a good intro to Jax :). Please feel free to tweet at me (@tbenst) or email [same username at stanford dot edu] if you do get around to it.
Anyone know who his VP pick will be? I know this won't happen but it'd be funny if he picked Obama.
Sanders Ends Presidential Bid, Paving Way for Biden
No, masks just help. Masks are so helpful that medical workers all need masks before the general public gets any. I am being completely sincere here.

After medical workers, cashiers, delivery people & others who must be in contact with the public have plenty of appropriate personal protective equipment, then the only way to restart the economy may be to spread that equipment to people in other lines of work.