skysight-inc/HackerNews huggingface dataset:
It is still technically possible to do RSA key exchange. About 2% of sites surveyed for SSL Labs "Pulse" don't offer anything better. Current browsers will (reluctantly) accept that you only speak RSA.

But it's a terrible idea. If your employer purchased that appliance believing it was anything other than a temporary stopgap they were incompetent and/or the appliance was mis-sold.

The right way to build such an appliance records the session keys. The growing pile of keys is a constant reminder (in a way that a copy of one RSA private key is not) that this is valuable/ dangerous private information which you should have a habit of routinely destroying once it's not operationally vital.
In both monitoring and config management, the majority is right.

Monitoring: you don't want to have all your applications and even scripts run a thread to listen on a dedicated port to allow pulling. It's bad for security, code complexity, configuration complexity (all those ports) and reliability (when an application stops the datapoints are lost).

Config management: with a push model you can easily end up having 2 developers push to the same system (or to systems that should be updated in sequence) in an unmanaged manner.
احصل علي كود المسافر
يعد كود المسافر من اشهر المواقع التي توفر لك اكبر خدمات السفر و تنقل و ترجال باقل الاسعار و اقل التكاليف
You're right, but it's worth reading the rest of the paragraph:

"We should forget about small efficiencies, say about 97% of the time: premature optimization is the root of all evil. Yet we should not pass up our opportunities in that critical 3%." -- Knuth

Knuth was trying to say you shouldn't guess. If you think you will get a performance gain, but you're not sure where or how the performance is going to suffer, hold back. But if you know you're doing something that is normally bad and you can fix it, it's OK to get on with it.

Your final paragraph makes me think we're both on the same wavelength here, but I think it's worth remembering that Knuth was not saying "never optimize until you have to"
Oxymoron: no comitee can overrule Zuckerberg since he holds the majority ownership.

This is just PR.

Zuckerberg is not bound by anything to actually execute the comitees decision.
It is because even they come via XAML Islands, or UWP/COM interop, at the end of the day it is still UWP/COM that is going forward.

Looking forward how Windows will look like now that it was officially communicated that Windows 10X is also coming to desktops and laptps, with its sandbox model for 100% of all userspace.
Some of them even connect to any available open wifi without being configured to do so, so even keeping them from phoning home
is difficult/impossible if your neighbor is careless.
There is zserge/webview which is a component that wraps the native webview on a given desktop platform. I haven’t checked it in detail but I’m curious if building an electron-style app framework with this is possible.

https://github.com/zserge/webview
Soooo much money, what a time to be a sec-expert!
> Lockdowns might help the economy more in the long run.

It might. We're not really sure. Either way, I think OP has a good point. It is not entirely impossible that we do the lockdown, still same number of people die and we also grind economic activity to a halt leading to other kinds of shortages. If this is what will happen, then the lockdown is a would be a bad choice. Sweden actually is banking on this. They might be wrong, but it's not an entirely crazy stance, there is a reasoning behind it.
> Http is just clearly not made for the current state of the internet

As a corollary/reformulation of that sentence you get that what businesses are trying to do in the web is clearly something it wasn't made for. Yet businesses want to free-ride on the web's success, and are ruining it.
In my experience they are really responsive to help even without a support contract.
>It is only by going through a volume of work that you will close that gap

I think this is key to building any skill. Find a way to get more reps in. Find a safety net to allow you to finish quickly and start over.

For example, when I learned how to juggle the important thing was to find a way to recover from failure and start over. I started juggling standing up. The balls would fly everywhere and I would spend 10seconds picking them up, bending over, etc. Very annoying. Then I found out that if I use cloths or juggled over my bed or on the ground, I could easily pick them up and start over within seconds. This got me reps. They weren't always quality reps, but I wasn't going for quality, I just wanted to get the skill down.
KW specifically asked for (actually were persuaded to commission) two step sequencers - not "something to automate their tape loops."

It was the same process Tangerine Dream went through with Projekt Elektronik, PPG, Steinberg, and other collaborators. The band had an idea or some product feedback, and the designers implemented it.

KW's sequencers were unique in that they had rotary switches instead of pots for the sequence steps, which made them much easier to program.
Firefly Semantics FS Alpha
The UK Universal Credit system requires that you spend 35 hours a week looking for jobs that in aggregate cannot exist.

Pakistan is hiring unemployed labourers to plant trees.

Argentina had the Jefes programme.

If you look you'll find that "guaranteed jobs" are generally already there as part of the stabilisation process. They're just not very good, don't pay enough to live on and aren't available to all - which is what is required to make them work effectively as an automatic stabiliser.

And of course that is because the current regimes want an unemployment buffer to drive down wages at the low end.
Nice! Congrats!
There are several levels, not just on-prem vs cloud. You can for example co-locate, rent dedicated servers, rent a single VPS, or put your website up on a web hosting provider...
The problem is that it happens silently and without consent of the owner of the hardware.

It’s win-win for facebook and the app developer. It’s only lose for the actual user.
> the software is garbage.

Yeah, I agree in many cases that's the issue, as the author pointed out in the last paragraph.

Let me also add that on this particular stack this happens with caching enabled (W3 Total Cache). Without cache it struggles with 10 concurrent clients (TTFB > 5 seconds). 100 MB per client to serve what's pretty much a grid of products and a button, it's scary
Just got started and I'm already fascinated with generations and rolling back.

How difficult is it to use as a complete replacement for Homebrew? Am I likely to find most of the packages provided by Homebrew?
Tree Data – Cambridge City Council
Does this mean a user might open a link and get either WebView or GeckoView, according to what the application developer chose, or that the user can choose which all in-app links open in (if *View enabled in that app, etc.)?
You wanting more data does not give you license to assume consent for using a device you do not own to spy on a user. Even if a majority would have consented, assuming consent means that you are now co-opting some number of devices which do not belong to you to do things the owners of those devices do not want to happen.

It’s extremely unethical, and should be illegal.
I personally find GIMP more intuitive than Inkscape. I think most of it depends on what you're using the tool for, though, and I think I just do more GIMPy takss than Inkscapey tasks right now.

Try using Inkscape to cut a person out of a photo, adjust contrast/white balance, and add a vignette...

On the other hand, try making a beautiful invoice template in gimp, with a nicely laid out table, and nicely typeset text....

It's kind of like comparing Word to PowerPoint. Both can place text on pages, and it's possible to write an essay in PowerPoint, or make a presentation in Word, but you'll be hurting to do it.
Is there an online version of this? I see one of the "features" is that it's not cloud-based, but it is a web app... so can I self-host it, or would I be stuck with Electron and sharing files on a thumb drive like a caveman?
Mostly because it is a lot of work and tends to lead to new and exciting compromises.

This is for example why Chrome decided to fork WebKit.

(I do believe that people messed around with Electron drop-in replacements, but it's probably hard to sell if it doesn't bring anything new to the table.)
If it means a guaranteed perfect cup of coffee then by all means why not? I hate when I go to a place I am used to getting decent coffee at and it comes out tasting terrible.
It’s spyware when the user is unaware of it and their usage data is used without their consent.

If the parties consent to it, it’s fine. When it’s hidden and nonconsensual is where the problem arises.
I would like to add, that even for small teams/projects the cost is the reason. We have small business project, with only one server, few hundred customers, with varying traffic (database sync between thick clients, web portal,..). We were considering cloud, but with the features we needed (few different databases, few APIs,..) it would be cca $1000/month (with reasonable response times - could be cheaper but terribly slow). Having our own on premise server, the price is back just after few months and then just the minimal cost of connectivity, energy and occasional maintenance.. it just didn't make any sense for us to choose cloud.
Open source React web application with Firebase
The purpose of Fireact project is to provide a starting point for building web applications that require user management functionalities, such as SaaS, membership websites, etc.
You make the excuse to remove the video with no actual proof that this is dangerous misinformation. In fact, YouTube, and the media are the real danger.The biggest threat to Americans in the history of all.
My girlfriend and I sometimes start reciting Vogon poetry to one another <_<.

Oh freddled gruntbuggly...
you are splitting hair on definitions.

It is the pure function nature of functional programming that makes it easy for concurrent and parallel tasks. Recursion is neither here nor there
(1) Food safety issues could literally kill Starbucks

(2) Starbucks business depends on having those measurements for quality control

(3) Starbucks gets lots of vendor deals from partner companies because they are a well know brand and having them on board helps land more deals

(4) Hacker using the machines might be able to sabotage the stories; food poisoning, fires, etc

(5) The smarter the tech in store — less training required per employee on site.

(6) Starbucks has other plans for it, such as enabling customers to use their network for IoT devices

(6) etc.
It is expensive, but also it is a competitive advantage (of sorts), as we can see with electron. At the end of the day its just a strategic decision Mozilla made to focus on the application itself.
The record for Shor's algorithm is still 21 = 7 x 3

You can instead do "big" numbers like in this article with machines that can't run Shor's algorithm, but there is no good reason to imagine these would ever be competitive with a conventional computer like your laptop or phone.

Shor's algorithm (and similar algorithms) are definitively faster, if you can make a quantum computer to run them. That's the hard part, and as you observe the result is no clear progress in almost a decade.
The Summer Day
by Mary Oliver

Who made the world?
Who made the swan, and the black bear?
Who made the grasshopper?
This grasshopper, I mean-
the one who has flung herself out of the grass,
the one who is eating sugar out of my hand,
who is moving her jaws back and forth instead of up and down-
who is gazing around with her enormous and complicated eyes.
Now she lifts her pale forearms and thoroughly washes her face.
Now she snaps her wings open, and floats away.
I don't know exactly what a prayer is.
I do know how to pay attention, how to fall down
into the grass, how to kneel in the grass,
how to be idle and blessed, how to stroll through the fields,
which is what I have been doing all day.
Tell me, what else should I have done?
Doesn't everything die at last, and too soon?
Tell me, what is it you plan to do
With your one wild and precious life?
> Remember that Google is effectively not operating in China anymore, so their information is bound to be outdated and incomplete.

Yes, but the PDF that the GP comment scrounged up online used Google Maps. If you look at Baidu or Bing Maps, you see that the Wuhan CDC has many local offices. It appears to mainly be a community health organization that deals with things like vaccinations and awareness. What you're pointing to is not the central offices of the Wuhan CDC.

> are studying live bats

No, they're not. All the papers I've seen only discuss samples collected from bats in the countryside, and standard practice is to deactivate any virus in the samples before working with them.

Where the research described in the video you show is unclear to me, but it's not taking place in some little satellite community health center across the street from the seafood market.

It's really alarming how much of this Internet scavenger-hunting is being passed off as legitimate evidence, by people like "Project Evidence" (or whoever is behind it). People desperately want answers about the virus, and there are political actors taking advantage of that.
Yeah agreed. I was just replying to elric who argued we shouldn't need cookies at all.
i love new order but i thought they were well-know for having bad live shows? Stuff going wrong, bum notes, lousy singing etc
Not just human cost, but also environmental, animal, and habitat. It's why I stopped purchasing things altogether, as much as I can. My costs are now limited largely to web hosting and water.
> As the original author of GtkMozEmbed I'd like to say that this is way too little, way to late. Mozilla has historically been very much against anyone trying to use the engine in anything other than the firefox app.

Your comment reminds me of a 15 or 20 year old remark from Feeddemon and Topstyle author (Nick Bradbury) about how he gave up baking firefox preview into his CSS editor.

https://nick.typepad.com/blog/2008/03/can-mozilla-be.html

I loved Topstyle. It was the first editor I invested time into (after Visual Basic for windows 3.11 in the 90's but I was a kid, not a professional or a student).
It's php-fpm persistent threads (seperate Daemon listening on port or socket), not web server threads, just to be specific. You have a lot of control of how many PHP threads you will allow per web node using php-fpm, very reliable tech. The days of mod_php are long gone.

So I meant one thread per request at the php-fpm level, not Nginx/HTTPD level.

* Edit for spelling
> Of course if somebody does find a [bug] that invalidates the results of the paper given the stated assumptions, that's another matter

And obviously the 'risk' of that happening isn't a reason not to publish it - you don't not publish the paper for risk that peer review reveals an error!
but that's the point: It can be. Just add that key to the plist file and the SDK won't initialize and won't do any requests by default.

This is absolutely on the app developers. Not knowing what an SDK you linked does or doesn't do doesn't absolve you from GDPR (or any law for that matter)
Automated Deep Learning without ANY human intervention. 1'st Solution for AutoDL challenge@NeurIPS.
Show HN: Interface for all digital aspects of my life
The one well played thing is the narrative that gets people to believe the "coup" nonsense.
Learn to Draw Baby Yoda and Other Star Wars Characters
You nailed it. The infrastructure in developed countries is taken for granted by its consumers. Websites are often not tuned for low speed internet, or for people across the ocean, because everything works so smooth in developed countries. Also, having a server that serves to the US and Europe if you live in a remote area obviously cannot be on-premise, it has to be in the cloud served in those countries for latency reasons.

And you cannot have a website that doesn't cater to US and EU users, unless the website only solves local problems.
> Like Firefox, GeckoView offers excellent support for modern Web standards.

I guess it depends on one's definition of "excellent", but I'm still waiting on ES2018's regex lookbehind assertions to be implemented.
Thanks for following up! I eventually got it working - I'd followed the example too closely and had a rogue `us-west-002` left in the config which broke things because I'm apparently on `us-west-000`. But I'll drop an email anyway because I can't see an easy way to see what region you're in other than visually parsing the endpoint URL.
This reminds me about pentesters being jailed awhile ago.
UK energy provider pass on negative power prices to consumers, pay them 5p/kwh
Do reviewers of such papers write their own implementations, and verify they get (roughly) the same results?
https://cr.yp.to/papers/pqrsa-20170419.pdf

You may need to have 1TB of key storage (and signature) for post quantum RSA.
Maybe you absorbed their value at the time?
This. Webview is a separate app on Android phones for quite a while now(and also I think chrome mobile is another/newer webview provider), which allows for much faster updates. As much as app developers hate not knowing what version of library is actually running in their apps, it is a net win for the user.
XUL could have been a tolerable cross platform toolkit. Still not sure how you can blow something like that.
The new dot com bubble is here: it’s called online advertising (2019)
I like ads tailored towards my interest much better than generic ads. Am I the only one?
Just in case you are not aware of it, DataGrip can do all these things: https://www.jetbrains.com/datagrip/
Powering viewer engagement for live streaming
AutoML for TinyML with Once-for-All Network [pdf]
Yeah, the Sailfish OS project, which is an operating system for mobile devices. They use Gecko as engine for their default web browser, but are always lagging with engine updates as every time they have to painstakingly rebase all of their embedding patches on top of the new Gecko codebase.
We flattened the curve and now we know this is global government attack. 0.1 deathrate is comparable to flu. We've been had.
The [Positron Discontinued](https://mykzilla.org/2017/03/08/positron-discontinued/) post describes why Mozilla gave up on building an electron alternative. I think those general comments apply to anyone trying to do the same.
The two go hand in hand. The less synchronization that is necessary the more reliable a system is.
App developer chooses either this or that.

However, I bet noone would choose gecko because it adds to the APK size.
I don't get this fear of math. You're talking about probability theory here. It literally _is_ mathematics. Why would someone want to study applied probability theory but try and dodge the foundation of the entire discipline? Sigh.
A lot of frameworks, libraries, programming languages etc. are .org websites and thus you're probably causing more damage by filtering .org
Ask HN: Open-source solutions for static petition sites
I have a static website running on HuGo hosted in GitLab. I would like to provide a form to visitors to showcase their support on the cause. Just a Name (optional Surname) and an email (for confirmation and optionally a link to more info) would be more than enough.

I've seen FSFE's publiccode.eu HuGo based website doing so but I'm anaware of any other solution.

Are you aware of any open-source solutions to do such a thing?
Sounds like my reaction to Taleb and Mandelbrot.
Every field has cruft. Part of gaining experience in a field is not only learning how to do things, but also learning how to navigate the field and differentiate the cruft from that which is of value.

> Even for seasoned programmers starting web dev is harder than it needs to be.

Maybe, but is it harder than it "can be", or is it significantly different to other fields in this respect. I don't believe so.

If you think the extra layers of unnecessary complexity noone needs is either (a) unique to web dev or (b) easily removable, then I think you may have a slightly naïve perspective on humans & society in general. A perfectly organised and navigable field is pretty utopic.
I get angry just watching it.
Well, what do the consumers pull from, if not a queue? What is an RSS feed if not a FIFO queue of published pages?

Queues inherently lead to a pull-based module. The producer does not publish stuff directly to the consumer, but to the queue. The consumers then pull stuff at their own pace/terms from this queue.
How does it compare to dbeaver ?
I mean, yeah, I guess if we avoid all physical contacts during our entire life until the world pop drops to 0 we could get rid of herpes. /s
It's not hair-splitting. As I understand it, functional shader languages are an active area of research. Mainstream shader languages such as HLSL are most certainly not functional.
Yep - if they are finally open to third parties doing something interesting, why wouldn't they freshen their GeckoView on other platforms? Typical Mozilla bs.
It's a 1 person part-time job. Most of the work goes into coordinating package updates with Ansible. I can include $1000 in the calculation if that makes you feel better ;)

Everything is deployed with Ansible, monitored with Monit. The servers have redundant PSUs and SATA hot-swappable HDDs, so you can fix minor hardware issues without having to reboot. As the result, we have more than a year of uptime on a typical server.

On the other side, we've been hit with several S3 outages. My feeling is that the cloud needs fully automatic fail-over because it is failing much more often than all our bare metal server combined.
Complete guide to kickstart your hyperlocal marketplace in Corona pandemic
Most of your issues seem to have been with Disqus and not with comments on your page in general, though I agree it's probably not worth attempting these days. Blog posts can be linked on FB, Twitter, Reddit and other places and those pages can deal with spam and their monetization better on their own premises, while you are not confined to one particular flavour of filtering/censorship for user comments (as with one service like Disqus). OTOH I don't particularly like the idea of actually interacting with Twitter/FB users as a blogger.
There's an Apache setting to limit that, or at least there was when I last had to deal with this problem 20 years ago on webservers that had less processing power than today's midrange smartphones.

The problem is you have to manually tune the number of max workers a bit based on estimated resource usage.
I've honestly lost track of all the simulation papers over the last few weeks, is there anything in particular in this one that's not reflected by any one of those? I don't think I've seen a single one that didn't come to suggesting a scale that calls for some lockdown requirements.
I wish it would give web traffic for public repos going back more than two weeks.
I've been hearing that "PHP does not scale" arguement for many, many, years, in many, many, variations.

When you really have to scale, infrastructure, resources, and networks will rapidly overtake any concerns around your choice of language. You can develop crappy architectures in any language, and the inverse is true.
For mathematics: The most important part is the problems. You can actually start at the problems, and read the sections until you can answer the problems. Most people avoid the problems because they take time and require them to actually think about the content (it's painful). So my advice: Pick the problems you find interesting and see if you can find solutions to them from the content of the book and learn that well. That would be the most optimised form of studying mathematics. Note: You do not need solution sets to do this.