skysight-inc/HackerNews huggingface dataset:
Joyent merged with TextDrive, a hosting company by Textpattern's creator.

They got bad press years later when they didn't honor TextDrive's "lifetime account" anymore, which TextDrive had used to get early funding.
I have often wondered this myself. Considering if github was ever compromised, could an attacker modify your source code without your knowledge. Seems like a holy grail of attacks.

What would be interesting if there was some at-rest encryption and maybe some audit functionality.
MicroMathematics Plus – extended visual calculator for Android
> People who speak in favour of exercising a basic human rights are labelled extremists.

No, not extremists, more like the Patriot Act has been in place since 2001 and other things like Facebook running most people's lives (maybe not you, but 1+ billion other people) are a fact of life now, and has been for decades. If someone says we must have privacy, I'd say sure, but that's not how it's been for decades now, and there is no realistic solution in sight, only keeps getting worse. Hence the calls for some middle ground.
Really? I am curious to know what observations or evidence you base your arguments/predictions on? Do you believe they have an (even better than 'post-Snowden leaks') search-engine like PRISM, but for private networks all around the world?

Could a user tell it's happening? What signals would indicate this? Is it increased CPU usage disguised as a system process?

And are you talking about mainstream proprietary OS'es like MacOS and Windows? I already know a little about Intel ME and proprietary silicon, but I don't know where to find a proper analysis, or a blog or book that deep dives into the ramificitions of the existense of these backdoors.

It seems to also not be in the mainstream consciousness just how serious it could be?
I tried one of the Stalk Market Predictors based on Ninji's decompiled algorithm and it was awful. Didn't get a single day right as we went through the week. Suggested a high of 500-600 on Friday, highest all week was 163.

Which isn't down to the code, I should add, but more that they don't (yet?) know how many times the random generator can be spun outside of the turnip price price setting which obviously makes their predictions very finger in the wind.
Oh first it was "Africanized Bees", and now it's "Asian Giant Hornets", what's next "Russian Communist Ants"? Everything that's bad, must come from afar. There be dragons yo.

(j/k)
My biggest issues personally are the lock-in of systemd overall and for journald the binary file format. If I could use journald on its own with OpenRC first and foremost and preferably have it store logs as text be it json or whatever then I would use it hands down.

Journald just works for the most part and is much more convenient in most regards nowadays. If I remember correctly, interop was more of an issue before the big distros started to switch to systemd but now things seem to have mostly worked themselves out.

With regard to my comment about wanting logs stored as text, it really just comes down to having had to deal with corrupted binary files one too many times and unless it is absolutely unavoidable I find myself preferring text files for that reason. I'd imagine file system based compression leaves most if any storage benefit from binary logs rendered moot.

I know you can run a secondary syslog daemon from the output of journald or alternatively use a job to backup to a text based format but it would be so much more convenient to be able to just set a config setting. Having easy config and things "just working" is supposed to be one of systemd's strengths anyway.

Final thing to note is that at least from the perspective of someone running Gentoo w/ OpenRC, issues with traditional loggers are typically config mistakes more than anything. As for your debian log example, syslog-ng which I believe Debian had used should default to isodate for the datetime format. At least this is the case after RFC 5424 was adopted in 2009. That should give something along the lines of "1985-04-12T19:20:50.52-04:00". Nowadays unless the defaults are changed, most logging systems shouldn't have that datetime issue.
Because the law should skew towards pragmatism.

Not everyone can run an their own email server.
the claims in the article, which are very specific

Hardly. Their entire research for that content in this article is just offhand comments by Apple executives -- the most biased possible source.
Must forbid encryption to save the children from the pedo...les.

But these are grown up people though, using those arguments, not high schoolers.
Nothing will happen.

This is USA where corporations have bought all parts of system including Supreme Court.

It’s all about giving a hope of justice but never delivering on it.

This is very much true at Federal Level, lot less at state and city level.
1. It takes time to adjust to demand changes and they're hoping covid19 restrictions ease in a reasonable time frame and demand goes at least partially back.
2. Russia started flooding the market prior to this to disrupt the saudis and US oil producers. Cutting production would need their collaboration or they've ceded market share and influence to Russia.
> It wouldn't be difficult at all if the optimal running technique was known before hand;

You're right, but this is a simulated environment. It means the physics in it are driven by a small set of known (and most likely deterministic) rules.

So I wonder if it would it be possible to analytically determine what is the best possible running strategy.
> Anybody can buy a domain for the price of two coffees and have full control over their email addresses

the only control you have if you go the "own mail server" route is the control on your tears when you see that your mails are rejected by every other mail server in existence because you made it in some random blacklist
Crimea comes to mind.

This is the point I was refuting.
We must be nearly at the point in the plot when somebody declares that df "never did work properly anyway" and rewrites it.
> That means, if it isn't a "syntactically" valid program, you can't create it in the first place.

It's an interesting idea. I don't know if it would work for me, though. I don't write code as a stepwise refinement of a valid program, I massage the text gradually into a valid program. This is especially true when refactoring.
I actually organised this once (not torture, paying a large amount for an hour or twos work). I was made tech manager at a startup and that included the on-site infrastructure where we had ~10 support agents taking calls for our main client. We were having VoIP issues (dropped calls) due to a misconfigured router/switch and I just couldn't solve it after spending a week investigating (I was ~2 years into my career with very little sysadmin experience). I hired a contractor to remotely fix it at £375 an hour (took two hours) and was entirely worth it.

P.S. It was an inflated amount to get an immediate fix based on his daily rate knowing it'd only take an hour or two - not because sysadmins working on ~30 person networks reguarly earn ~£3k a day.
Extremely unlikely. Unintentional introductions happen all the time. Someone imports something, and a species comes along. It's even known to have happened because someone imports nothing — empty ships need ballast, and the most conveniently available ballast for a ship is water. So sea species are picked up near port X and transported to port Y.

There's such a lot of trade in the world.

In this case, whoever ordered a doodah from Japan may have ordered eleventy thousand, and a couple of them came with an unintentional extra.
This is really sad. I am sure hundreds of hours were spent on this project with now essentially does nothing.

Does this mean all free software advocates are stuck on archaic pre 2010 hardware?
That should be easy. You’ll find plenty of “master classes” on online marketing from the same snake-oilers. They might actually fit the bill here, because the only thing they teach you, if anything, is how to push useless, digital content to suckers.

source: I know someone with a proper addiction to this stuff. Think 6-digits “invested” in “life-changing material”...

;(
> much more effective just to make changes in a text editor and track your state using version control

Statements like this makes it seem like while you probably have dabbled in Clojure and other lisps, you haven't used them substantially, as if you're using Clojure, you still make your changes in your favorite editor and code is still tracked in version control. It's not REPL _or_ code editor, it's code editor + repl backing.

Redefining functions on the fly is not a hack to lessen the pain, it's a defined workflow that makes you be able to work faster. If you're using it and it feels like something to lessen the pain, you're using it wrong.

> Sure, and with Go in VSCode, I just click 'run' above the test I just wrote. It isn't any more difficult.

This assumes a lot of things around the code that you're executing. First, you've already setup a test and it's already isolated enough. With a powerful repl + idioms, you don't need to do that, as you can execute parts of a function just to introspect that part, kind of like a debugger but works anywhere automatically.

In the end, I'm not gonna try to convince you to try something if you don't want to try it. But if you're anything like me, finding more productive ways of working is always interesting, even if they end up not being as productive as we first thought. With that in mind, since you seem to not have super much experience with a powerful repl, if you try it I'm sure you'll find what I say to be helping you be a better programmer.
What's weird to me is that they do the exact opposite for SEO spam/scams. They will (maybe) put a penalty on one domain, but they will not touch your other domains. And as soon as you stop doing the spam/scam thing and pinky-promise to not do it again, even the original penalty will be lifted.
Some aspects should be taken in to account.

1 People that desperately want to be good at something are delusional because thats is just a dream they see themselves already there but they do not have the key to unlock that door.

2 when people go and see someone to help them out in something they want someone to fix that for them otherwise they would be fixing that by themselves.

3 People like that are emotional strugglers they have mental blocks they do not follow up.

4. If a third part is going to make them to commit into something they will be blaming the third part for their failures.
Although the explanation of what you mean by "context-free grammars" is clear, it seems to me that you should be using "unambiguous grammars" instead. An ambiguous context-free grammar is not going to facilitate the job of an IDE. I also think you are mistaken about the C++ grammar not being context-free. The problem is that it is ambiguous. I could be wrong here since I have not kept up with the C++ standards. So can you provide an example of C++ grammar productions you think are not context-free?
Google has an interesting "inactive account manager" feature, which is basically a dead man's switch : https://myaccount.google.com/inactive

Unfortunately, it's not available for GSuite accounts. I suppose the rationale is that organizations don't have the same requirements as individuals, but that's not the only use case for GSuite : any individual (like me) who set up legacy GSuite to use GMail with a custom domain is out of luck.
I'm sure money is a real argument for some people, but it's probably also as much an argument to hide for the fact that many (non-Hacker News visitors) don't really have any idea... about how to properly make their online life "redundant", or even the need for it.
There's also the Blackbird which is even more affordable - https://raptorcs.com/content/BK1B01/intro.html. It's still sadly more than I could justify spending - for my non-portable needs I use a ~5 year old Intel NUC which was cheap as chips and still going strong. But if that ever changes a Talos POWER-based system is at top of my list.

The Talos guys pop up in the comments on HN now and then and they're very pleasant.
Announcement: Version 5.0.0-beta of GRDB, the Swift toolkit for SQLite databases
With a domain, you don't have to run your own email server. Many providers offer the full package: domain, website, email.

Having a domain and email address is as easy as: Buy the domain, log into the domain account, create an email address, done.

At that moment, you have an email address with a web UI to which you can log in as easy as to any other email provider.
Show HN: Scrape any webpage using proxy API
Hi guys, just launched scrapingdog.com over the weekend and got my first few customers, it's a tool that handles proxies, browsers, and CAPTCHAs so you can easily build scalable web scrapers. I'd love any feedback on the landing page or the product itself!
Hell, at least 50% of my day job involves hacking together SQL Server sprocs, most of which have thoroughly used (and abused) most or all of the concepts demonstrated in the article, and I take no shame in admitting that I'm frequently double-checking syntax or looking at how other people solved similar problems.
There was an article posted here a few years back which visually shows how a git repo’s source code changes over time. Projects have varying degrees of downward slopes in the banding, which indicates the rate at which old code is overwritten.

One commenter (puredanger) ran the tool against the Clojure repo and remarked on its stability. After 2011, so past the time examined in the notes from this article, the banding is almost flat: new layers get added while very few changes are made to old code. The image stands out, and indicates how sound the language core library is. They keep adding new features, and don’t have to mess with the plumbing to make them work.

Code half-life: https://news.ycombinator.com/item?id=13112449

Clojure repo chart: https://m.imgur.com/a/rH8DC
How can I know whether I have a real of fake charger?
Nitpick: Remote code execution is breaking a TLS implementation (eg. openssl), not breaking TLS itself.

> so I'm assuming the difference here is that it's the CPU management chip instead of your browser?

Yes.

If a vulnerability is found in a SSL/TLS implementation, it can be fixed with a software update.

I don't know how Intel ME works, but I'm guessing updating it is harder to update than a browser.

> For that matter, do you trust SSL/TLS significantly less than SSH?

I'm not the GP, but I'm guessing they do. TLS solves a more complex problem than SSH, as SSH assumes the user validates a server's public key manually (even though they usually don't, but TOFU [1] makes it somewhat harder to exploit), whereas a TLS server's key can change at any time.

[1] https://en.wikipedia.org/wiki/Trust_on_first_use
When the gates locked down: India in the time of Corona
There are great phones being sold right now which run Android and which have zero Google integration whatsoever. The parent post was implying that it's literally impossible to use an Android phone without a Google account, which is straight up not true. What's so strange about that?
So long as the API works, I really don't care about the implementation details.

I also don't care about Microsoft's UWP and sandboxing stuff.

They might have a desire to take the platform in that direction. But I have no obligation to follow, and if they want to retain application developers they won't be able to simply cut us off. We've always got the option of abandoning Windows entirely if they make it too inconvenient and troublesome to develop for. It's not like we don't have a precedent for abandoning MacOS X as a top tier platform for exactly those reasons.
You can go to Gmail, open the email from your mail server, click on the three dots menu, "Show Original".

There you can find some hints, e.g.:

SPF: PASS
DKIM: PASS
DMARC: PASS

If any of those are not in 'PASS', you need to fix it and retry.

Yes, setting all of these up is not trivial, but it's also not the monster people usually claim it is and I think we should all do our part that this knowledge doesn't appear so unobtainable, as we're already centralized more of the internet than we should have.
Theres research from Google about this:

https://rework.withgoogle.com/blog/five-keys-to-a-successful...

"psychological safety" is nr 1.
There are on average a dozen submits a day that are just lists of affiliate links, most of them even violating the rules of Amazon affiliate agreements. Why aren't the repeat offenders banned? A handful of far more innocuous sites are banned.
Sum of All Fears Still Can’t Dispel Speculation About Inflation
The concepts are intuitive enough, and make sense. But I don’t see what non-trivial insights this gives us.

I found the talk frustratingly vague. After all the hard work of setting up categories/operads in an example, the talk moved on without using them to do anything interesting.
RISC-V has found a niche in anything embedded that needs some decent performance, especially in storage and networking. With a little imagination you can see some products there merge with other functionalities and take over larger markets, e.g. a NAS product line incorporating smart home and smart speaker functionality, evolving into 'home box' systems.
Awesome hack, but surely the underlying problem is better fixed native than depending on a Linux VM? But, indicative of how good virtualisation is.
Why isn't Google Drive considered backup?
Don't have to run your own mail server, nor would your mails be rejected necessarily... There are a lot of providers around which let you use your own domain.

And if you're using your own domain, you're always able to switch providers by updating your mx records.

But I wouldn't ask my family to do that either, that's just something for tech enthusiasts and people that make their actual living by being reachable through mail (contractors etc)
The mere fact that you would expect a system process or anything else visible to the operating system, indicates that you haven't read much about Intel ME :/
I take it you've already looked into CLR stored procedures? I haven't used 'em in a whole lot of depth, but they do seem to at least give some of the tools for a "best of both worlds" approach.
In 2016 I was in the middle of China when my phone got stolen. Obviously I had backup codes saved in a text file so I was good.

Then my moment of dread came: the codes didn't work. I still don't know why but from that moment on the laptop I brought with me that had Google logged in was my only gateway to my personal info.

I mailed account support and after explaining the situation and providing proof they reset my 2FA, after which I could set it up again on my new phone.

Even though Google support was pretty quick and helped me out (in my own language, mailing from China) I have since moved to GMail with my own domain for more control, have printed out backup codes that I test every 3 months, have multiple phones with Google logged in for 2FA and periodically use the GDPR method to download stuff Google has on me, just to be safe.

It was an eye opener how vulnerable I was using Google's "one account to rule them all".
I still don't get who Rachel means with the "beekeepers" analogy linked to in the post. Can someone enlighten me?
Location: India

Remote: Ok

Willing to relocate: Yes

Technologies: React, React Native, GraphQl, Apollo, Express, Postgres, Firebase

Résumé/CV: https://drive.google.com/open?id=1unagTNaVuh6B3KSjWbmPz6h8a2OcobS8

Email: er.adi2612@gmail.com
Choose a domain that accepts 10 year renewals, and extend by one year every year.

If you're in a 9/10 year coma, you probably don't care about your email any more.
We have this problem with both apple cables and micro usb. The kids yank on them and the cables break. Charging cables just seem to be a consumable item. The difference is that the ports in the micro usb devices also get damaged so pretty much all the android stuff we have that the kids are allowed near only charges if you wedge it in a special angle with a something bending the cable in the port. The lightning port seems to be much more robust than micro usb.
Any view on Tailwind or Tachyon? Too big?
James Turrell
So, still moving goal posts?
Non-technical people have no clue what many of the words in your comment mean, at least in this context.

"provider", "lock-in", "domain", "UI", "mail server", "email service"

They have no idea that what you mention is even possible, let alone how to do it.

And you know because you've probably invested tens to hundreds of hours into figuring out these things.
Precisely -- one's estimates about a skill, are accurate (only) when compared with one's own other estimates about oneself.

And can be helpful when preparing for an interview (for the interviewer).

I find it surprising this didn't occur to the other commenters
At risk because of Intel ME/integrity based attacks? I simply don’t know. I assume the risk is managed some way or another, probably a lot with network security. I personally was more bothered by CPU vulnerabilities, and there’s also the looming threat of DRAM vulnerabilities, but for now it seems like almost anything can be effectively mitigated at some cost.
There's also some things that can be automated, so you don't have to remember to do it.

That's what I did for Drive, Photos and Gmail. I setup cron jobs to automatically pull everything from there and save it locally.
You can start by using the mail service of the domain provider.

[edit:] On the other hand, if one wants to run his own mail server:

From the last hn discussions about blacklists, I got the impression that [running your own mail server] is not an issue as long as you correctly navigate the anti-spam mechanisms. It's not obvious, but also not a black art.

I would rather be bothered by server security. Since email is so vital, how do you secure your server against recent vulnerabilities if you are offline, e.g. if you are on a vacation.
Why do you equate "own domain" with "run your own mail server"? There are reputable mail providers that allow you to use your own domain through their setup, many webhosting places do a decent job of it, ...
Really? I've worked at a couple large bay area companies this wasn't true.
Previous discussion:

https://news.ycombinator.com/item?id=18212312
"currently USD is the only real option for international trade"

I think you have conflated currency matters with sanction matters. I will attack that here, but much of your point stands.

My points here: international business tends to be done in USD only because it is convenient, and no business ever failed to happen due to that convention.

International trade tends to happen in terms of the USD because USD is convenient. Factors: (1) The world's largest economy does its business in USD; (2) There are many large lenders in the US and (3) There is a free and liquid FX market for USD.

Many companies reduce their friction by working in USD. They borrow some money in USD and then spend some money in USD, and thereby avoid paying a fee to their bank's FX desk. Instead of managing a complex risk situation between their home currency and a dozen others, they concentrate it into a simple risk situation of their home currency vs USD.

Iran could put oil in ships, and send it to China. China could put gold in ships and send it to Iran. Or - far more easily - Iran could price its transaction in terms of New Zealand dollars, and the two parties could make adjustments to a ledger in a tax haven.

The USD conventions is akin to the role of English as lingua franca. It's convenient., or China

The other part of your point is that US sanctions are harsh and far-reaching. No arguments against that here. Would I trust billions of dollars to a tax haven bank, or in countries with a strong rule-of-law tradition? Also, any time you want to spend substantial money in the developed world, the other party is going to need evidence that it is not sanction affected.