skysight-inc/HackerNews huggingface dataset:
Well, I only brought up physical print newspapers to explain what "revocable access" means, not to make any sort of argument. Arguments by analogy aren't valid logic anyway.

Non-revocable-access subscriptions are, in my opinion, just a convenience layer around the ownership model. The man function of these subscriptions is automating the buying of something you buy on a regular basis anyway. There's an element of vendor lock-in in some models, but not all.

There are plenty of examples of the ownership model gaining access to an extensive archive: it used to be that you could buy the Criterion Collection on DVD, for example. Presented this way, however, it becomes immediately obvious that people don't actually want to pay for the entire archive, at least not at the price the owners of the archive wanted to sell it at. You don't want the entire Netflix archive, you only want a few movies and shows from it. The primary problem here is that archive contents are massively overpriced: nobody wants to pay $8 for every DVD in the Criterion Collection. In an ownership model you have to let people pick and choose the parts of the archive they want and buy only those, or if you're selling the entire archive in one chunk, the price per-unit has to be low enough to justify making the buyer pay for vast swaths of content they don't actually want.

Steam does a good job with this: they generally price their older games at a price that people are actually willing to pay, and their bundles tend to be intelligently grouped so that if you're interested in one of the bundled games, you're probably interested in at least a few of the others.
They have been giving out grants for Checking security of open source software. I think that in the past projects such as Rust and curl have gotten grants to make a review of the code.
Interesting that there is no mention of using Lunux or FreeBSD.
You can configure your browsers not to accept any cookies, or not to accept 3rd party cookies. These may or may not break many sites.

Tracking more generally is not something that can be prevented by a browser which executes code written by the tracker, and must give that code access to the internet. Even if the SOP was completely enforced, trackers can still store the information on the origin server. Even if the browser doesn't expose any tracking information, the tracker can still measure all sorts of information which may be unique to your system, especially in concert with your IP address.
The immediate thought looking at that diagram is that while on first glance serverless runtimes seem to promise that you don't have to care about the details, turns out you really do have to care a lot about the details!

You're not really relieving yourself of concerns by using serverless runtimes, just shifting them around. Sure, you don't have to care about managing state at the leaves, but you very definitely do now have to come up with a way to hold state globally with ephemeral/stateless leaves, and it turns out that's... a really hard problem with a really complex solution space.

Not to be overly dismissive or say that one way is better than the other, it definitely depends on the usecase and probably the underlying business model of the usecase. Just to point out that when it comes to engineering abstractions, there really isn't any free lunch. It's all tradeoffs.
Hosting Checker
If you have any old browser toolbars installed, remove them ASAP.

Often they were subcontracted out, even by name-brand companies, and the result was a security bugfest. In particular, I'm thinking of one that starts with Y.
I’ve been looking at Ryzen CPUs for a while, and although I don’t have the budget for a top-tier box right now, this is excellent news. Drop one of these and an RTX into a good case and you have a workstation that will blast most Macs out of the water (if not all).
My company does this often. It sends legitimate looking emails and at last I fell for one recently.

I thought about it, then I understood why. My company uses a lot of saas products - for submitting expenses, for giving appreciations etc etc. These saas products regularly sends emails, and they come from other domains.

When my company used all home grown or on premise web apps I never ever opened any emails coming from a different domain or open them very cautiously.

And now I think these saas emails have probably taught my brain to trust emails from other domains.

I am not sure.
Not sure we are talking about database tables here. A user friendly email looks like help@xyz.com or support@xyz.com, not candidate.serialize.json@xyz.com
In a simplistic free market model, both employer and employee aim to optimize their gain.

The employer sets their wages only as high as necessary to attract, motivate and retain, and hires whoever provides the most value over that cost. Wages are not set based on value provided to the company, but by maximizing the spread between cost and value.

On the other side of the table, the employee wants to optimize the combination of their income (after-COL) and other aspects of the job they value which may include their location.

I just made this model up. Assuming it is reasonable, if living back home near the grandparents, likely with a lower COL, has a higher value to them than commuting in a tech hub, it is possible for the company to pay lower wages, and still be equally attractive to labor that is equally valuable. And given it is possible, they will do that.

Evidence : remote developers exist today and they are typically paid local market rate.
Any recommendations on hardware U2Fs? I’ve looked a couple of times the yubikey but didn’t go through with it
Right, rather than managing your own server with a known interface and familiar commands, you get the pleasure of managing everything through a single bloated configuration file typically with very poor documentation.
Yeah sorry, I should have been more precise: I meant to say that it should get turned on for those users automatically at those times.
AWS Credit for sale (USD 9k) with 50% discount
Hi guys, we've gotten this AWS account of our startup which raised $10k 4 months ago, due to the Covid19, we've faced issues with financials and paused the project thus, wish to sell off the credit with a great discount. it expires on Feb 2021.
kindly email me if you're interested (I can show you that this is a legit and real account of our startup and i'm ready to do any escrow)
#aws #discount #aws_credit
I like like the bottle neck in the future will be Harddrive/SSD file read/write speeds.

Honestly, I'd love to have my hands on a terabyte drive with 1TBps speeds.
Velomobiles! A velomobile is a recumbent bike with fairing which enables them to be more convenient and much faster than a regular bike. A fit rider can easily overtake the peloton in Tour de France (https://www.youtube.com/watch?v=UBb7YIRcBe0). The velomobile in the clip is a standard model and there are racing models that are faster still!

Just like with regular bikes, you can add electric assist to them to extend their range and make the job of the rider easier. In this clip (https://www.youtube.com/watch?v=OCo4cRQMBlo) the rider gets an average speed on 37.5 km/h (top speed 84 km/h) over a distance of 73 km with over half the battery remaining. And that is without wearing the racing hoodie which significantly reduces drag.

The main problem with velomobiles is that they are expensive. The frame is made from carbon fiber and needs to be handcrafted. So the price ranges from about €5000 - €10000 which is too expensive to most. If some Chinese giant or billionaire investor set out to mass produce velomobiles I'm sure they could totally revolutionize transportation.
If they ever interviewed an engineer from EU then what they are doing is very much illegal, it doesn’t matter even if company is based on USA.
Programming has two stages that alternate: bugging and debugging.
> For example, in C++ a generic `T` can only mean an owned type:

Wrong.

template<class T>
void foo(T t) {
}

int main() {
int x = 0;
foo<int&>(x);
}

Unadorned Ts as function parameters will by default be deducted as value types, but a generic T parameter can represent references just fine. This is especially important for template classes.

> you might probably think that generics in Rust work like templates in C++. One couldn't be more wrong about this, they are in fact completely different language features. They might solve very similar problems, but they are as different as Python is from Haskell.

it seems to me that they are more similar than different.
Why not? Don't have a lot of experience with React Native, so it's not immediately obvious why that is a bad thing.
I'm not sure you'd even need separate Bluetooth chips/antennas. In theory one device can connect to up to 7 others. Although, to be fair Bluetooth audio streaming is barely reliable with one device so maybe that is just asking too much of it.

Apparently Samsung phones can connect to two devices:

https://www.lifewire.com/how-to-connect-multiple-bluetooth-s...

Here's another one:

https://techcrunch.com/2017/04/30/tempow-turns-your-dumb-blu...
That’s not true. Even if it were, many Americans live in Europe and are subject to GDPR.
Coming from JS it was rather counterintuitive for me that a function would "own" a value even if it was ran synchronously and finished.

Also, the whole 'move' terminology sounded to me like Rust would move memory around, but it usually referred to the move of ownership. Also 'consume' didn't make no sense to me. "into_iter consumes a vector" what does it mean? Where does the vector go?

The most valuable info I got about lifetimes was: references/borrowing is usually what you want, so always throw in a &.
This. The 3400G is now what, two years old? I have held off on building a small APU-based system because of that.
Yes only for tablets and chromebooks for now.

It uses Qtwidgets and mauikit qml so it would be a heck of a job to port that to qml
All of this talk about what companies should pay is missing the point. The market determines what salaries will be. Someone good enough for Facebook is good enough for a number of bay area companies that would pay top dollar, so Facebook has to make competitive offers. If someone lives in a place where she doesn't have access to those other high offers, then she should expect to make somewhat less. It has nothing to do with what people deserve or their value to the company.
I've tried 1:1 and it is awful. To get from one side of the screen to the other you have to move your entire arm all the way across your desk. Not very practical.
Show HN: Discohash – Fast Hash
Voice Controlled Animations
This is not directly internet related. The original title is better:

> Ultra-dense optical data transmission over
standard fibre with a single chip source

As a compromise, I'd propose:

> 44.2 terabit/s optical data transmission over
standard fibre with a single chip source
They are, what do you think the FED is doing when they push interest rates to the foor? They make investors chase risker and risker assets/bonds to get the same interest rates. Rates on junk bonds have been pretty low and risk on government bonds even lower. This bankrupts savers in the long term but nobody cares about them.
> [...] only run attack when some attribute is true to that company (i.e. their Corp IP addresses). [...] Obviously, a lot harder and lower chance of success, but not impossible.

In general maybe, in this particular case it's gonna be challenging however, as gitlab is a remote company so most employees will logon from residential ips
colorForth uses colors for semantics

https://en.wikipedia.org/wiki/ColorForth
Note that to do the latter ("Usernameless login") you need a FIDO2 key. A relatively modern Yubico product can do FIDO2, but cheaper alternatives mostly don't offer this.

The reason it's a cost upgrade? Those credentials have to live somewhere, and that means they're using Flash storage baked inside the FIDO2 key, ordinary FIDO keys don't have close to enough storage.

Next you might wonder: Wait, how does a FIDO key log me into Google if it isn't storing the keys?

Magic. Well, cryptography. When you registered the key it minted a key pair (Elliptic curve most likely) and obviously it gave Google the public key, but it also provides Google a large random-looking "Identifier" which Google must give back each time you authenticate. That identifier could, by the specification, just be some sort of hidden "serial number" but in reality what everybody does is encrypt the private key or its moral equivalent - with an AEAD scheme using a device-specific secret key and then use that as the identifier. So when Google gives you back the "identifier" the FIDO device decrypts it to discover its own private key for the site which it can use to log you in. The FIDO dongle doesn't actually even know you have a Google account, yet it works anyway. Magic!

FIDO2 is a much less clever trick, and that flash storage is too expensive to use it everywhere - but the UX is so seamless it makes username plus password look like they asked you to undergo a cavity search by comparison.
I recommend writing a technical book on whatever subject that most fascinates you. Choose a topic based on where your passion is, and don't worry too much about sales.
Simple hash, 128-bit mixing function is just:

mix(const int A)
{
const int B = A+1;

ds[A] *= P;
ds[A] = rot(ds[A], 23);
ds[A] *= Q;

ds[B] ^= ds[A];

ds[B] *= P;
ds[B] = rot(ds[B], 23);
ds[B] *= Q;
}

with P and Q prime.
It's definitely much more true of some companies than others.
It is not like that there have been no open source software developed by people working at the european paliment either. You can find such projects on the joinup page where they have projects/documents/other fluff related to this.

https://joinup.ec.europa.eu/
Weekend project idea right there!
Yes, the industry will survive. You can skip the article.
Yes.

Many years ago the internet allowed anyone to post their own websites, blogs, and comments on forums. Sites like Buzzfeed quickly blurted out "Oh noes, now that anyone can publish, will the publishing industry survive?" As we all know, the publishing industry was forced to change (and because it didn't, it has suffered mightily) but proper news sources still hold their value.

Just because I can make a porn video at home doesn't mean anyone will want to watch it. Pro models, proper lighting equipment, video editing equipment, and production knowledge all have value because the amateur stuff is mostly horrible.

The rare gem will be noticed. There are a few citizen blogs out there that are very much worth watching. The crappo ones faded into obscurity.

In the meantime, just like crappo publishing houses that refused to adapt and were pushed out of business, the pro porn industry will be forced to up its game. A good thing.
just came here to add that the problem is that the default is to make the profile URL publicly visible. the default should be that it is INVISIBLE and then the user opts into visibility
>> Also how do you as an attacker know that it was user not a e-mail server checking those images?

> Agent signatures.

Can you Expand? Googling isn't helping me understand what this means/how it works.
https://www.programiz.com/python-programming/anonymous-funct...
Your site is a job search site so the fact that someone has an account means they have been job hunting. This is not like Stack Overflow or Hackernews that you seem to like comparing the profiles to. StackOverflow may have job search functionality but it started as primarily something not related to a job search so my having an account there doesn't mean I have been job hunting.
Triplebyte can be 100% fined by EU, there are such previous cases where HQ is out of EU but they are serving EU citizens.

GDPR is very clear in wording that it doesn’t matter whether company has offices in EU or not, only thing that matters is if company is providing services to EU citizens.
I have a Yubikey 5C but it might be a bit of a waste of money, since all I use it is for FIDO2/U2F, especially now that SSH supports that.

I'm excited about the new version of the SoloKeys (https://solokeys.com/) coming out next month, they aren't using secure elements like the Yubikeys are but I'm not really worried about someone stealing the key from me to extract the credentials with physical attacks, so they might be a good alternative.

Other than that, I eventually see password managers having built-in software FIDO2 implementations, so you just open your password manager and it automatically intercepts U2F requests and authenticates them, but that's a different thing.

Basically, anything you get that's U2F/FIDO2 compatible is fine, and much better than the second best thing (TOTP or whatever). Get something that's cheap enough for you to get two of, have one with you and the other at home as a backup, and that's it.
How to create neomorphic web components/elements with only CSS and HTML
Just make a post about rust. Everyone clicks on them. Everyone.

(Myself included)
We shouldn't accept Porn being freely available online. Instead, we should require all sites to charge for content, minimum $5/month, with 10% of that being collected as sales tax.

Sites that do not comply will be blocked.

This will ensure that children cannot access them, and allow people to control their pornography addictions.
I know bodyweight is no perfect substitute and you probably already know this, but you can still have progressions of bodyweight exercise variants in a way that mimics progressive overload of weight to some extent. Check out the infographic here - http://www.startbodyweight.com/2014/01/basic-routine-infogra... - 8 types of exercise with progressively tougher variants. If nothing else it helps keeps things interesting
In my case I see people skipping over things they don’t know when estimating like traffic and actual resource deployment and crap like “yeah Jenkins will be fine in a container”.

Always assumptions, missing info and costs and poor understanding of it because it’s so damn complicated understanding cost. Consider traffic costing across several regions and you can regularly just piss $20k away from a small architectural decision made wrong.

Estimating costs is Actually so difficult that it has almost entirely replaced the old role of license management under the lie that renting your shit monthly makes that concern go away.
Not a system architecture guy. When the industry says "serverless" they really mean hardware-less? It means you are renting on other people's servers?
Good point, it wouldn't work that way with proprietary software.
haha, for the first time i thought the accent on the s in śtellar.org was just a dust particle on my monitor.
People that buy a Mac are looking for the fastest computer that will run OSX.

And if you want to do a Hackintosh then it really doesn't work that well with Ryzen e.g. issues with Creative Suite, Docker etc as well as poorer performance due to lack of AVX2/AVX-512.
I'd say yes, although learning dart maybe take a week or two in worst case. Flutter, as opposed to react native, is quite easy to set up. The declarative UI paradigm is nice.
My 2020 desk setup
I love sqlite, but just a wonder on how big you are going?

I regularly see 50TB total of databases on SQL Server, and scaling up to thousands of clients.
There was also that incredible stretch from the CDC where they tried to convince the public that face masks are ineffective at slowing the spread of infection. Now they have done a complete 180 and recommend everyone wear one in public. The science of facemasks has been well understood for many decades and the CDC's understanding of their efficacy did not evolve over the last 2 months, their disinformation campaign did.

It's obvious to me that they simply wanted to preserve as much PPE as possible for those on the front lines who needed it most. But they could've just said that, instead of eroding their own credibility with lies. It's no wonder the pandemic response has become divided along political lines when people can't trust their government to give them facts.
Ogilvy on Advertising – How to write successful copy? – Notes
Because gambling has no addiction problem.
This is similar to a correlation problem. I was complaining multiple times to a company, finally they called me back. They had this elaborate explanation and needed me to reset my password.

Then they asked for my password. I was pretty confused but almost gave it to them. It was just a coincidence that some con-artist had called me to try to phish me when I had been trying to reach out to the company.

Those assumptions where you know it’s real are dangerous because it can make you ignore red flags.
I must have missed this change. Searching on the web did not give much information. What's bad about the new address bar?
While I love SQLite as much as the next person (and the performance and reliability is really quite remarkable), I can’t understand all the effusive praise when you can’t do basic things like dropping columns. How do people get around this? Do you just leave columns in forever? Or go through the dance of recreating tables every time you need to drop a column?
One facet of this: the dominant browser manufacturer is the dominant tracking body.
(posting from a throwaway account, but long time HN user).

Well, I was just about to go through your process, since you announced that you are opening to remotes (I'm in the EU), but now I've requested that you delete my profile. No way I want my current employer to know I'm looking, especially in the current climate where job hunting is difficult.

As other people have mentioned, you now have a deeper problem than entering a new market. You just broke your users trust.

And the sad thing is that this was a real opportunity, because linkedin sucks. Unfortunately what you failed to realise is that there is appetite to switch from linkedin to a more honourable company. Not to an equally or more dishonest one.

Most likely your staff were trying to warn you about this from the beginning, and it would be worth your time reflecting on why you didn't take note of that more deeply.

I know you are looking for actionable routes to save your company right now. In my opinion, the loss of trust is so bad that only a pretty costly signal will now cause people to reevaluate. The one that springs to mind is for you, Ammon, to announce that you are stepping down as CEO and starting a search for someone who is committed to privacy to take on the role.
Morality questions aside, this wouldn't practically work.

It would require pretty much uprooting and destroying the internet entirely. It's too easy to share "free" porn pictures on any website. We'd have to go from a free internet where anybody can make a website to a locked down version where you apply for a permit first.
Why is this downvoted? It's 100% correct, except the distinction is not FIDO vs FIDO2, it's "resident key mode" vs not (FIDO2 supports both, and does non-resident keys in the way described above).

Yes, the fact that you need flash storage for FIDO2 resident credentials is unfortunate, but that's why I'm exited about the new SoloKeys, which I heard will have enough flash space for thousands of keys. In comparison, the Yubikey has 25, which makes it useless for what I want it, and they don't even advertise that limitation anywhere.

Logging in with this usernameless mode is just amazing, you can go to an untrusted computer, plug the key in, tap a button and you're logged in with no possibility of any credential theft anywhere (just make sure to log out afterwards).
I THOUGHT THE EXACT SAME THING! That's why I didn't notice it at the time :(
The Internet craves a good dumpster fire every once in a while, with truly evil company actions, tone deaf non-apology apology CEOs, and a certain future collapse.

Thanks for the entertainment!
Yes. Even if there were a number of dominant architectures, install-time compilation would be better than run-time compilation for frequently used software. The RAM and Energy overhead isn't just worth it.