skysight-inc/HackerNews huggingface dataset:
How paranoid do you want your security to be?

In general I would suggest using a key vault. AWS, GCP, and Azure all have cloud versions that are backed by virtual HSM's built on top of actual physical HSM's. For the vast majority of usages they're good enough. Use admin account management to enforce 2FA/FIDO for all AWS/Azure/GCP logins. (You should be enforcing 2FA with phone/FIDO auth anyway.)

If you need truly paranoid backups, you can back the key up onto a portable hard drive that you lock in a safe in the closet, with a few key people who know the code.

I recommend against using a (cloud-synced) password manager. Cloud key vaults do the same thing but offer specific features relevant to server stuff. And if you want more paranoia, a physical safe is probably safer than extending your attack surface to a cloud-synced password manager.

Also: make sure that you set up a ~quarterly ritual of opening and verifying the backup. For crucial backup fallback systems, you want to make sure you actually use the system so that you know if it fails.
I didn't know we had a king! I thought we were an autonomous collective.
https://hacks.mozilla.org/2020/06/new-in-firefox-77-devtool-...
Not all ISPs have NATs, I guess.
I'm not sure openly calling out other countries like this is really new. See for instance [1]:

> By 1987, the Soviets began to sour on the campaign as Moscow’s scientific establishment rebuked it. Secretary of State George P. Shultz also accused Mikhail S. Gorbachev, who was then the leader of the Soviet Union, with hawking “bum dope about AIDS.” Mr. Gorbachev ordered the K.G.B. to stop spreading the conspiracy theory and after the collapse of the bloc, former Soviet intelligence officials owned up to it.

[1] https://www.nytimes.com/2017/12/12/us/politics/russian-disin...
We make no distinction between dev keys and production. Consider them production.

Since it's of interest to HN, I am working on educating our very small team on how keys should be protected and used. I am the youngest developer by about 15 years. It's a very rural company and it often feels like all learning and passion for development stalled around 2005. It's a company that gave me a chance to grow into a development role with no previous experience so I feel indebted to try my best to keep the lights on.
We have a main config/setup git repository which contains keys (and passwords) in git-crypt. 4 people have GPG keys able to decrypt it, and this is used in normal operation for deployment (i.e. for ansible to feed the keys into systems.) The repo is cloned in quite a few places.

None of our secret material is particularly hard to revoke or replace; we don't run an internal CA or anything like that.
> Source map support also got a lot more reliable and will just work for a lot more cases

This is good news if it's true. Source map support seems pretty patchy across both Chrome and Firefox. I've had the work reliably at times in the past. But something always seems to shift which breaks them again, and I've never been able to work out what it is.
As a child I got to play around with a war surplus shortwave in the 50's and 60's. The English language Radio Moscow signal was very strong, even in Texas. The stories, vignettes and takes on the news were an interesting and sometimes confusing contrast to my essentially Ozzie and Harriet existence. Later, as an art student, I also became fascinated with their visual propaganda. It was not too dissimilar from our WPA stuff:

http://www.loc.gov/pictures/search/?st=grid&co=wpapos
103 Ways to Hedge Trading Risk
We store all keys that do not required automated access on Yubikey with the option that requires a physical touch per use.

Usage includes SSH authentication, file encryption (backups and exchanges), git commit signatures and password/secret storage using `pass`.

Copies of the offline master keys keys are stored on flash in safes onsite and offsite in bank vaults, and sub-keys are valid for one year.

We use Hashicorp's Vault for secrets that require automated access.
I would also argue that "intellectual property" is also a major reason for wealth disparity ("intellectual property" is the wrong term, but basically it's knowledge that is "kept in the family" and passed down with each generation). My parents do not own land worth "obscene amounts of money" nor did I get my finances "kick started" by big allowances or inheritances.
However, just having parents who:

- encouraged me to take education/my future seriously

- could easily help/tutor with any homework I had since both parents have graduate-level education

- could answer any questions I had about life in general (investing, career, college, etc.) with quality advice rooted in experience

Has helped me immensely to become self-reliant. And now that I've built up my own "intellectual property" I can pass it to my kids.

A lot of black people stuck in poverty don't have those three basic things. My next door neighbors are impoverished African Americans. Single mom household; the mom dropped out of school. Her son (11) dropped out of middle school. He comes over a lot for snacks, and seems completely unconcerned about his future and the trajectory he is on (he seems to think he'll be able to just get rich using Twitch/YouTube). Very depressing to think about, but I do what I can to try to encourage/motivate him to invest in reading, school, etc.
You are not market share Microsoft aiming for. But you are not obliged to use run Microsoft Windows either. Linux runs perfectly on old hardware.

42 MB RAM without graphical system

64 MB RAM with graphical system

You may run Windows applications on Wine. Or Windows 3.11 on virtual machine.

Netbook I bought in 2008 was underpowered for Windows XP but was perfect for Linux. I still have it around. With up to date Firefox and Chrome it feels slow but in console mode it's snappy.

No need for install with LiveUSB. Everything is here, countless people made it possible, would you use it?
Read about extremism and why it is necessary
What is your site about? I've seen it four times this week, but I haven't really figured out why it's popular.
Incorrect. Mcatee was part of a peaceful group. The police fired indiscriminately into that group after someone else fired on them.

> We don't know if they were all "protestors" but at least not the police

In fact, we don't know if any of them were protestors, so your insistence to relate the two groups is odd.
Are you purposely being obtuse? Or are you trying to argue against a different point than the one I made?

If not, please explain how you having a mutual fund means that "the elites" who control Apple aren't impacted by lost revenue.
HK-ers aren't black. And, as of yet, have never been abused by US police.
As a native to the US west coast, I was very surprised to realize that Toronto, Ontario is further south than Portland, Oregon.
Zero to 1000 users in 18 hours – a HN story
He's saying that capitalist or not, "Producing energy is about the most productive thing a country can do for its people, no matter its politics of distribution".
I'm almost convinced instead of looting, in many cases (at least here in WA) it's some sort of organized crime syndicate working with street level gangs using the civil unrest as cover to commit grand theft.

In DT Seattle, protests turned into violent riots, and many nearby businesses were damaged including looting.

In other WA cities, criminals picked strategic targets (Target, Walmart, and BestBuy) and hit them in multiple locations. In Bellevue, there was footage of cars pulling up to take the stolen possesions and drive away.

That was different than with looting, in which people typical take anything that isn't nailed down.
I wonder if anything else happens on the backend when a user attempts to say these banned words...

While other nations are condemning China for their actions in Hong Kong, once again, we see Google developing solutions for authoritarian regimes under the guise of "complying with local laws". More like complying with authoritarianism. Instead of joining the world to put pressure on China, Google is enabling them. Pretty shameful, I think.

This probably won't score any brownie points with the US government while they are being investigated (unless the gov't actually wants Google to do anything to get more integrated with China for intelligence reasons, which I could see as a possibility).
There's in-betweens. [0]

[0] - https://en.wikipedia.org/wiki/Battle_of_Athens_(1946)
The place they are fascinated about is only imaginary, it never were. The symbology had to look so imposing, powerful, "having a grip"

The "Socialist Surrealism" would be a much better calling for it than socialist realism.
Memory bandwidth keeps the cores from being bottlenecked, but saying it is the reason GPUs are fast is simplistic.
With the rise of corporate censorship I don't think its wise to rely on app stores for access to police frequencies. Dedicated radios that monitor police frequencies are widely available and you don't need an amateur license to use one (since you're only listening, not transmitting).

My city is on 700MHz P25 which requires a fairly pricey radio, but its been worth every penny over the past week. After listening in last Saturday we cancelled a trip to visit family after hearing about a riot on the local highway.

Make sure to look up the frequency your town uses first before dropping so much coin on a radio. If your local LE is encrypted, you're out of luck. But many aren't.
My mid-2012 air was also the best machine I’ve ever owned. The chassis and portability could not be beat. I have a well equipped 2018 Pro now, but it’s not the same. I like having a serious H series processor and 32GB of ram, but the 15” chassis is just too big.
> ...some of the best stories on the web, will appear on the Firefox new tab...

Why is FireFox trying to get into article recommendations? I can only assume it allows some method of monetisation once users get used to it being there. Feels a bit off.
Show HN: Our Product(INCOX) is live in Product Hunt today.Pls check and comment
Yes, it's pretty simple. There has been a proliferation of apps that all do the same thing - front end our feeds, and so we're protecting the investment that our core partners have made to write apps.

We are extremely plugged in to AI efforts that are occuring around the use of our feeds, and so we have a pulse on what is going to work and not going to work in those area. You are more than welcome to use the feeds to develop AI models and present that back to us so that we could grant an exception, but the simple reality is that 99.9% of developers that want access to our feeds are simply trying to get yet another scanner app in the marketplace. It just dulites the environment, cheapens the brand, and presents a race to the bottom scenario in the app stores.

I'll readily admit that we don't "know it all" and there could be some serious innovation out there, but the app store market has left a serious bad taste in our mouth of nefarious actors who will go to the ends of the earth to make a buck vs innovate.
Why AI fails and how to avoid it
I don't have a macbook so I can't comment on it, but I have a touhgbook with thinkpad power supply, and I feel it only on my wrists when I'm well grounded. Can't feel it on my fingers or palms.
I agree with the author. I never used all the space dedicated to this trackpad, seems like a waste. That and I cannot get used to this "3D Touch" trackpad compared to the older clicky ones. 99% of the time I'm going along just fine and randomly I cannot seem to select a line or something and it infuriates me when that dictionary lookup thing pops up instead.
GoHook, Go global keyboard and mouse listener
Dynamic DNS has been a thing for ages and it is trivial to PAT on most any firewall you may have hooked up to a modem in bridge mode.
If it's not then it seems an excessive amount of engineers at one time even for Intel. The goal would seem to be to cull the whole team.
I'm building a site generator for this very purpose (apologies for the shameless self promotion)....

https://findingmyhtmlgoddess.com

git: https://github.com/jonascript/htmlgoddess

It generates static HTML pages that are as simple as can be. If you setup a git account, it will cover the hosting for free. A domain typically costs $12 a year.
The 28nm lithography half-node is almost ten years behind the state-of-the-art.

Apple, Intel, AMD all have commercially available products based on 7nm now.
You can tell it's broken when the Collections framework and JavaFX (a part of JDK before Java 11) could not use the capture conversion themselves.

The only solution seems to be to drop the type system in the places where it can't be used.
Windows Terminal is great. https://github.com/microsoft/terminal

Just missing a Quake mode for me (summon from a screen edge with a keyboard shortcut), but that's being talked about for v2. https://github.com/microsoft/terminal/issues/653
There is no such thing as essential telemetry. There should be an option to turn it off completely.
I've heard one of the only things that are safe in any amount is alcohol-free beer. Which leads to some funny images of our medical studies if that was the standard we held.
B vitamins are the exception to the rule, most vitamins and minerals are toxic in high doses (like most things).
Simple Fetch API Wrapper with Concise File Upload
Not through that menu, but it can be done through the policy editor. You can also just disable the update service if you want to.
This was a mislabed and mis-attributed video.
I think it really matters how sensitive these keys are.

It's been quite a few years since I interacted with them, but for some keys there is a server somewhere with an HSM installed, and two people have credentials for it. If you need something signed you send it to them, with a justification for why it needs to be signed with the real keys, and they will send you a path to get the signed file, and remind you to delete the signed file when you no longer need it.

This is overkill for some things, and probably would be considered sloppy for others.
Who is lobbying congress? The investor class is certainly among those who are. The working man certainly isn't.

If you're unhappy with your representatives, there are elections coming up in November.
The racial framing is also relevant to the black lived reality, which is why black people get more involved in protests. It isn’t a far off, hypothetical issue. It disproportionately affects them still to this day, despite all their protests and efforts. That has to take a toll.
I think it's a bit disingenuous to claim that they do "not care about privacy". Hashicorp has demonstrated they do, on many occasions.
Wild guess here, obviously I don’t know what everyone is thinking, but Bach’s music was very beautiful in an almost mathematical sense. Compositions where the right and left hand are exactly the same but delayed by a bar or two, pieces that are the same played forwards and backwards, etc... Bach was a true genius, as were Mozart and Beethoven, but I think the symmetry of Bach’s music around the axis of time and harmony could be why he’s more prevalent on HN.
If this is a public repo then you are already hacked.

There are multiple automated systems that scan public repos for credentials. 5 minutes later you are mining bitcoins for them.
I've seen mentions of Vitamin K2 alongside D, something to do with the calcium issues with D. Maybe the magnesium is another way to manage that?
I agree with this ratio. I generate a ton of ideas for projects or hobbies, but writing each one down and putting it away (in Trello, Joplin, GitLab issues, etc.) lets me move on with priorities rather than getting pulled into new things all the time.
Then if it's fine I don't see the problem of "setting your kitchen on fire" for a century or so. When it's over you can always move and return the land to its uninhabited state. Right?
Agreed - it's a great intro that really sets the tone :)
The risk of excessive iron is known and not new

If you read that link you'll see the findings for iron and calcium were replicated. (Not to mention this article is basically referencing a different article which is somewhere else, so we're missing the context)

The B12 issue, as the own article mentions, is not necessarily connected to a dietary excess consumption

> Participants within the highest quartile of vitamin B12 plasma concentrations (>455.41 pg/mL) were more likely to be older and have higher BMI and blood pressure.
Luckily I was in charge of setting up our remote repositories and made sure that by default they are all private repos, otherwise this would have happened without a doubt.
Disparities in the risk and outcomes from Covid-19 (UK) [pdf]
I try to push as much to certificate auth as possible. Internal CA keys are stored on an offline USB HSM, which is locked in a cabinet. Access to the key requires 2/10 individuals to be physically present.

There are different CAs for different purposes. There's an intermediate for device management, and another for user or service auth purposes.
Interesting product/service! I've been familiar with it in the past but really used it a lot over this last week - thank you for offering a free n accessible tool.

When, Why and how did you get into it?

Does it generate meaningful/worthwhile revenue or is to more to cover overhead? (I only noticed the occasional 30 second commercial intro) Maybe you have a lot of premium subs?

Why sometimes do certain cities/counties change their feed? For example one night the Minneapolis police were on a completely different county that was hours away.

Majority of the time, these feeds are relatively low key right...with actual concerning/escalated incidents few and far between. Wondering: is there someway to us ML to identify specific things and provide push notifications to people in a given geography around that? For example it could listen for "shots fired" in a specific area and notify me via sms or whatnot when that occurs.

And AI could be used to show more of an abstract map view if and when "violence" is rising based on action on the scanner, right?
Really appreciate the feedback here. That makes good sense on the low quality money grabs.
They also refer each other to their MDT or cell when working, which is equally effective at cutting out the public (whether intended or no). In many rural areas, analog FM voice is still in use with no encryption, which I've heard is at least sometimes due to more favorable propagation characteristics for reception at a distance.
Does it? Please show me that video because this one shows them balancing them on the side of the back of the pick up.
Looking at Cryptopals in particular it's not ideal that you need to get through dozens of other exercises before you finally email off to the authors and start to run into problems concerning today's fan favourites like Elliptic curve DH.

I'm at home even more than usual now (for obvious reasons) but even then I suspect I will get distracted before I get as far as say, Challenge 42 which is - though still relevant and I get that it makes sense to drum that in - ancient history by today's standards, let alone Set 8.

As a result Cryptopals feels like it recapitulates history from the point where the authors got into the industry and so may unintentionally mislead. I remember your surprise when it turned out Microsoft hadn't done the necessary checks for a curve based signature algorithm and so they'd actually been shipping code that would accept bogus signatures. My instinct is that Cryptopals challenges would be more effective (but might make some people involved less comfortable) if they rearranged some of the 21st century attacks on those "fan favourite" algorithms into earlier sets instead of accumulating them in Set 8.

I dunno maybe this is like complaining that my school maths textbook (first written in the 1940s I swear I'm not that old) assumes you'll use log tables rather than a calculator. But the Cryptopals challenge site clearly doesn't seem to think it's a historic artefact, so it shouldn't act like one.
Ask HN: Opportunities for a candidate with Ph.D in Physics in Tech?
I have a colleague who holds a Ph.D in plasma physics and works on fusion. They are interested in a career change due to the demands of postdoc work on their time, and are considering data science, consulting, advising, and other research.

What types of opportunities exist in tech that would be a match for someone with this background?
Everything related to drone racing. Applications could be widespread -- but it's also just fun to watch/do.

Some research related to psilocybin, ibogaine, and MDMA happening, mostly in Canada. Several of those firms have gotten lots of small (<8MM USD) investments and look interesting. High risk, long-term plays.
That was 1770's in power transmission.
Here's 1770's in information transmission:
https://www.youtube.com/watch?v=iz8lB3y5euk
Piecing together a key management solution from open source is possible, but if you're trying to encrypt data and are open to commercial products, we do a lot of support of Vormetric.

All of the key management is "built-in" and managed, so there really isn't much overhead. All software-based, with FIPS certified key management. It's very easy to encrypt data this way. It is expensive though.

Disclaimer: while I used to work for Vormetric / Thales, I no longer do.
PCIe 4 bandwidth is around 32 GB/s. Most games or applications don't saturate PCIe 3 16 lane bandwidth. I think you are conflating latency, bandwidth and "speed".
Porkbun isn't just the cheapest registrar most of the time, they are legit and very trustworthy. Moved most of my domains a couple of years ago and it just works.

If you are looking for domain deals, domcomp.com/ is invaluable.
No. Sooner or later, you will have to let it update. Updates are important, and Microsoft doesn't want the service calls they're going to get if you don't update and something breaks or you get hacked.

So just like "your contract with the [TV] network is you're going to watch the spots", your contract with Microsoft is you're going to install the updates, and you consent to be spied on, and...
Sundown Town
I have a complete off the topic question, how do I create a slick blog like this - simple and minimal?
> Although to be fair, my containers are first class citizens

It's a Linux Machine? Because on OSX it's a well known issue that Docker sucks up your CPU and thus battery - https://github.com/docker/for-mac/issues/3499

I get a similar 2-3 Hour battery life on my older 2017 model
Water is lethal at far less than 100x the normal dose. Google hyponatremia. You can die from ingesting a gallon of water in a few minutes.
>If humans weren’t warming the climate, Earth might be poised to enter into another Ice Age in the future.

Is there a chance it is beneficial to keep the next ice age at bay?
Thank you!

You're absolutely right. I have spent a lot of time thinking about pricing. Here is one of my calculations: https://i.imgur.com/sB4CuAf.png I just wanted to give some kind of "discount" for more usage. The higher the number of tracked users, the lower the price will be in the end. In general you can think of a per tricked user pricing.

Prio support is just a "nice to have" addition
Asymmetry found in spin directions of galaxies suggest spinning early universe
I think the repeaters would block out any of the mobile radios. So you could see the dispatchers easily, but the individual mobile operators (EMS, Fire, Police) would be hard to distinguish.

If the mesh was every Digital TV tuner inside a municipality, then maybe the mesh could triangulate position.
I'm not questioning if they should be held liable. I'm questioning if they should be arrested as accessories to murder.
No Firefox, no! Please don't embed distraction directly into the browser (pocket recommendations)! I don't want to hear about Coronavirus or ongoing politics bullshit whenever I open a tab! I just want to ignore this noise.