skysight-inc/HackerNews huggingface dataset:
That's fine but it doesn't have to 'take off' everywhere to be useful and interesting
If you're thinking about risks, it's important not to conflate 3 scenarios: (1) running a Tor exit node (potentially very risky), (2) running a Tor relay node, and (3) just using the Tor browser as a user (should probably be fine for most users - depends on what you use it for of course, and Tor by itself is of course not sufficient to solve all privacy issues - you can still be deanonymized if you're not careful).
I was under the impression Figma was an executable, not a web app.
Why do you trust literally any secure comms code?
I'm not sure I understand what you mean by the pipeline being exposed. No processor I'm aware of other than the i860 exposed its pipeline, so I don't know what you mean by that here. Can you elaborate?
Sometimes I can't log into HN with Tor. Do you have that problem?
Competition was the I think the biggest barrier for my youngest, she hates losing. Old Maid flips the equation a little because there's only 1 loser and many winners. Carcassonne can be played without keeping track of points, just rules for how you lay tiles. We recently got a game called Outfoxed! where you collectively hunt down a thief, it's great for kids because it exercises memory and deductive reasoning to eliminate suspects, and you have to strategize as a team.
The solution is more nuanced and powerful group (social) filters - just like RL.
It's possible tear gas may be a reasonable choice under extreme circumstances.

Please take a look at the linked article (and HN comments https://news.ycombinator.com/item?id=23385741) and note that the Federal "Kerner Commission, which was formed in 1967 to specifically investigate urban riots, found that police action was pivotal in starting half of the 24 riots the commission studied in detail."

Today we can see ample evidence of police escalating use-of-force (rubber bullets, tear gas, batons, etc.) on peaceful protesters.
You can use GCPKMS (probably AWS KMS too) to unseal Vault automatically.

https://github.com/sethvargo/vault-on-gke/blob/master/terraf...

The KMS ring itself is only accessible by Vault. People with high enough privileges for our Vault GCP project could technically grant themselves access to it, but on day-to-day business, nobody can view the project.

At some other place, where we were using AWS, I wrote a script that would store encrypt unseal keys (need multiple due to shamir) via pgp using their keybase public key. IIRC you can store encrypted keys in Vault that can be accessed only for unsealing purposes (please correct me on this). When needing an unseal, the script on the user side would then decrypt the key and submit it to Vault for unsealing. It worked well enough, and it felt like being in the movie/game GoldenEye, but nowhere as slick as auto unseal.

Regardless of the setup, yes, at the end of the day any solution is really just pushing the problem further down the stack.
This is related to the triage theory of nutrition
Police power is not intrinsic. It is granted by the people through their elected government. In my state, every local authority has the power to designate entities to exercise their various powers. By tradition these are police or sheriff departments but there's nothing preventing the local government from vesting police powers in the 4-H club or Wal-mart.
I get the sentiment here, it's very annoying for developers (including me). Establishing trust is very hard problem, though.

Let's move this to a productive conversation though. What can Microsoft do, as an alternative, that doesn't result in an identical or worse situation?

Giving out free code-signing certificates also makes it easier for malware to get legitimate certificates. This is akin to LetsEncrypt for certs -- https://yourbank.real-secure-website.xy can have a valid cert but it doesn't mean it's legitimate. What's the equivalent to the "URL bar" for software? What's the equivalent to the ACME domain validation challenge?

The SmartScreen stuff is another attempt at this -- software that's not frequently seen is flagged as a potential problem. As a developer, this annoys me greatly. As the de-facto support person for family that don't understand computers... I don't mind so much. Without this, malware gets executed directly and now you're dependent on (very imperfect) anti-virus software.

I guess the Store is another way to have "trusted" applications, but you only have to look at the Google Play or iOS store to see how well this ultimately works out (for both malware and legitimate authors).

Note this isn't even about admin vs non-admin installations. Obviously malware running as admin can do more damage that's harder to recover from, but non-admin malware is just as capable of doing bad things (think: stealing credentials, running cryptocurrency miners, ransomware), and after being hit by a randomware attack I doubt your "typical" user is going to really care much about the distinction between their account vs the entire computer being trashed.
If you consider when their collaboration were announced and product shipping within ~18 months it seems the only choice would be to use TSMC instead of their own Fab, given both ARM and AMD has many experience with TSMC and the Cortex-X1 design likely have blueprint ready on TSMC.
Dwl: Dwm-like Wayland compositor based on wlroots
Is there a way to listen to the broadcasts in a web browser without Flash Player?
Trudeau pauses 21 seconds on question about Trump's actions [video]
Platform Science|Senior Software Engineer|San Diego, CA|Onsite

We’re a fast-paced, rapidly growing, award-winning, and well funded IoT startup. We’re on a mission to make transportation smart.

Qualifications:
-5+ years experience in full-stack development
-A solid portfolio of experience building web services/APIs

Stack:
-PHP, Node, Vue, Python, AWS, MySQL

We offer a competitive salary, full benefits (some 100% covered by us!), free gym membership, monthly chair massages, office happy hour, and more.

Apply here: https://www.platformscience.com/careers?gh_jid=4062624003 or send me a message at ctrilus@platformscience.com. I'd love to hear from you!
Ask HN: How do I debug my back end in production?
We're a small startup running Node for our backend. Using a combination of LogDNA, FullStory, Sentry and Mixpanel across frontend and backend.

Problems I face:

1. Can't trace user journey: User reports a bug. I look through logs with a timestamp of the user report, but can't trace the user journey, especially with lots of asynchronous operations going on in parallel

2. Insufficient logging: I can identify the error being thrown but can't identify the cause. Would want to see logs of surrounding code which we maybe didn't log

To solve this, I've resorted to adding logging around the suspected problem path, pushing to production and asking the user to try again (very annoying for them)

Any best practices I'm missing or is this really the best way to be debugging issues in prod?
Rights don't come from laws, we are endowed with them by our creator.
More on Roman fish tanks if anyone wants to read about this topic. I thought this was very insightful:

https://www.harvardmagazine.com/2016/08/what-roman-ruins-rev...
Is there any evidence this is true? The vast majority of cops will never aim their weapons at another person or use military gear beyond training. Is the slim chance of getting to use a humvee once in your career really compelling?
Bare Minimum UX Research
>Rust believes that tech is and always will be political

As long as it is about American politics. Shame.
ParaLLEl RDP now on Android – accurate N64 emu comes to Android – benchmarks
Early self-check kiosks did this very poorly. It was super frustrating as a customer to be constantly asked to "please place the item in the bagging area", even when I already had, not to mention the hassle it caused when buying something you don't want to bag. Eventually I'm assuming they gave up on that and turned it off.
I definitely will look at the indices. I have several joins. Perhaps if I explain what I'm trying to build.

I am building a git analytics dashboard. I want to help my organization analyse developer productivity from bitbucket. So I am pulling in all the git commit logs, the diffs for all projects my org within the company has. We have 1500 repos across 20 projects. I am building dashboards atop of this. The data will grow daily. I would like to showcase project health in terms of commits, pull requests and whether there are duplications in work (surprisingly we have this. Actual repos being copies from here to there btw, insane shit). In doing this I realized I am struggling to scale it. The UI Takes 2 minutes to load. It is abysmal. The org is impressed but I am not, and it is for my own learning.
I would have to say "it's not".. anything non-encrypted you risk being manipulated by a node of the TOR network. I bet there are people who act as relays just to try to sniff out any good non-HTTPS traffic.. although, I suppose generally anyone using TOR is mostly aware of this so there's probably not that much to gain.

Complete side note.. but this just reminds me of back when I was in college in the late 90s, and our entire apartment buildings traffic was a hub (not a switch).. so I had a packet sniffer running for fun on linux and could see everything from everyones internet since every single packet was rounting to every machine on the network, and lots of stuff had no encryption... nuts to think how open stuff was back in the day.
>"A beam of light can possess two kinds of angular momentum.

The spin angular momentum of a ray of light can make objects it shines on rotate in place, whereas its orbital angular momentum can make objects rotate around the center of the ray.

A beam of light that carries orbital angular momentum resembles a vortex, moving through space with a spiraling pattern like a corkscrew. Whereas a conventional light beam is brightest at its center, vortex beams have ringlike shapes that are dark in the center, due to how some of the waves making up vortex beams can interfere with one another."

Fascinating!
wait! the most privacy centric iOS doesn't support Tor?! but Android does! I wonder is privacy is just Apple's PR but far from truth. The speech to text translation also they need to route via their servers. The contractors listen to recordings of Siri. Its time to unmask Apple's true face.
I'm just now falling down this rabbit hole of working with frame buffers as a result of this project and now I'm curious. Did you develop your own window manager? This is really fascinating stuff and makes it really simple to create low-level things with a high-level language. [1] [2]

Also, does OpenGL work?

[1] http://seenaburns.com/2018/04/04/writing-to-the-framebuffer/
[2] https://www.kernel.org/doc/Documentation/fb/framebuffer.txt
Thanks for the explanation. I'm still not sure about what a "railgun" is, if not an energy weapon.

The Expanse's ship combat is very cool. A worthy successor to the re-imagined Battlestar Galactica (minus the mumbo jumbo that marred the end of that series!).

I like the characters too. I haven't read the books, and I understand this character was changed a lot, but I really like what they did with Klaes Ashford in the series. Way to subvert expectations! The TV show more than once appears to set up a cliché (this is the bad guy, he has delusions of power and is going to undermine this other character) only to subvert it. More of that, please!
ParaLLEl N64 RDP – Android support and Intel iGPU improvs – What you should know
Dangers of Trump's Executive Order Explained
We do exactly the same.
It is not charitable when you give away another persons property and by the end to you are equivocating. Seriously the fact that book is well read or old does not matter, they do not have the rights to do what they are doing and they purposefully trying to use COVID19 by exploiting people's feelings to get away with it.

Publishers have standing and as such they have to file the suit. They are only being forced into this because IA is breaking known law and did so knowing they were.
This could simply mean that metabolic syndrome is the reason these people die. My guess is it's not just a matter of going in the sun more or taking vitamin D supplements. If you have a vitamin D deficiency in the tropics, or even elsewhere, it can be a symptom of kidney or liver or other metabolic issues. Supplemental vitamin D can fix the deficiency/insufficiency, but they may not cure the underlying cause.
The San Jose cop that caught controversy was found by public records to be getting paid over 200k a year: "According to Transparent California, a salary database of public employees, Yuen has worked for SJPD since at least 2014 and made about $153,000 in regular pay and overtime in 2019 as part of a total $226,000 compensation package." You can also look at Seattle police salaries (https://www.thenewstribune.com/news/databases/article2586102... it is normal for police to be getting paid 150k+.
Well, this is a couple decades ago - so the play-by-play is a bit lost, one cop at a locally infamous speed trap after dark started seeing a light in the woods near the road. He reported it over the radio, and speculated it might be someone spotlighting deer. Hunting deer at night is very, very illegal as the deer freeze when the light is shined at them. He didn't hear shots, but was understandably reluctant to pursue the light by himself as people committing illegal acts that are obviously armed might be unsocial. Another two patrol cars showed up and they decided to surround the area where the light was. The "light", when flushed by the officers, took off down the road. The officers only saw the light and not what is was attached to nor did they hear an engine. This pursuit went from road, to another field, down the side of a river, and back into the wooded area. The light would turn on and off traveled at high speed about four feet off the ground. They finally lost sight of it outside town, last seen headed down the road. Apparently some folks called in sightings (land line days to the dispatcher), but the latency made these a bit unhelpful and the officers did comment that some of the callers might not be trusted observers and some might be ..uhm.. less than perceptive having their head inappropriately situated. The officers did say some words that were not strictly professional and threatened all manner of violence on whoever was behind this. It probably cost them some revenue as they were not available to assure the public's safe speed particularly after the bars closed. They did not catch the light nor did it happen again.
At least for standard apps, the user can bypass the warning. For drivers, it gets much worse.

On 64 bit versions of Windows, there is no way for me to permanently allow unsigned drivers. Every time I want to install an unsigned driver, I have to reboot my computer while holding down shift, select advanced startup options, and then hit "7" on a USB keyboard which I lug out of the closet because my Bluetooth keyboard won't work. The effect only lasts until the next time I restart.

I understand that the kernel is sensitive, but this is overkill. Please let me install the software I want on my own machine!
Thank you. I don't think pagination would help since I'm building a dashboard.

Perhaps if I explain what I'm trying to build it would help.

I am building a git analytics dashboard. I want to help my organization analyse developer productivity from bitbucket. So I am pulling in all the git commit logs, the diffs for all projects my org within the company has. We have 1500 repos across 20 projects. I am building dashboards atop of this. The data will grow daily. I would like to showcase project health in terms of commits, pull requests and whether there are duplications in work (surprisingly we have this. Actual repos being copies from here to there btw, insane shit). In doing this I realized I am struggling to scale it. The UI Takes 2 minutes to load. It is abysmal. The org is impressed but I am not, and it is for my own learning.
I do a lot of planning before 'getting stuff done' which involves jotting down a ton of ideas and linking them to formalize the thought process before performing the actual work. It's not exactly Zettelkasten but the essence is the same. I don't consider it procrastination because a lot of planning ahead of time means less adhoc lower quality planning during implementation.
> Why do you think it fails as basic security against the government?

Tor connections against normal sites use 3 hops while they use 6 hops against onion sites. Controlling or potentially even analysing the traffic from 2 of the hops is enough to know where the user connects to (it might be 4 hops for the onion case but I am not sure). I am pretty sure that NSA has enough resources for their own nodes. I2P has a better architecture in general but it still does not solve the issue. I am looking into evaluating lokinet at the moment.

In general tor does not have a great track record. For example they took ages to upgrade from an 80-bit sha-1 truncated address scheme with dh1024 and aes128 into something more modern.
The fact that the US government, largely through Open Technology Fund, originally an arm off the State Department (via Radio Free Asia!), has arguably done more to fund core internet privacy technologies than the private sector is an indictment of the private sector, not of the U.S. government.

We should absolutely be aware of funding sources, skeptical of code written by other people, etc, but if you were to actually enforce in your life a position that you won’t use any security or privacy technology with funding ties to the USG you will quickly find yourself in quite an untenable position.
> if someone uses your exit node to post a lot of stupid crap to Reddit ...

I think there’s a lot more to worry about than reddit shitposts eg straight up criminal activity apparently coming from your router, and in way you’d have difficulty proving was tor and not you or your family.
Methods for predicting "drivability" or "clearness" of roads based on moving object detection are not different than what I said and are not novel in R&D / literature or practice. I'm asking for exactly that, absolute conservatism first.

In my opinion, autonomous driving should be highway only, daytime only until proven effective in mass produced vehicles. The hype about rushing to level 5 is marketing, not a feasible technology roadmap.
USB-C. Universal Serial Bus, without the universal part.
A peaceful protester posted on twitter the other day, after taking a direct hit in the eye by a gas cannister - he was going for surgery, and is most likely going to lose his eye. Some footage of the incident emerged, but I presume the chance of him getting any kind of compensation is nil.
Can a Rocket Launch Save 2020?
Redirect to a file is done by the shell, not by sudo process.

It even tells you that:

> -bash: /dev/fb0: Permission denied
^^^^^
I'm on a 64-bit buffer on Catalina/2015 Macbook Pro/3rd gen Scarlett/Ableton, just as a reference point. Sorry to hear that.
You can also distribute classic win32 apps with MSIX as well
It's in https://blog.archive.org/2020/04/07/the-national-emergency-l...

> Trying to compare a physical check-out of a book with a digital check-out is difficult. Assuming that the number of physical books borrowed from a library corresponds to digitally borrowed books that are read after the first day, then the Internet Archive currently lends about as many as a US library that serves a population of about 30,000.

Of course you won't find any real information in the publishers' complaint. It's all rhetoric and no substance, except where they claim everything and its opposite.
it only runs `cat` as root, not the write operation
This will only run `cat /dev/urandom` as root, while the redirection is run as a normal user:

sudo cat /dev/urandom > /dev/fb0

This should work just fine (with a /dev/null redirection so your terminal doesn't get garbled):

cat /dev/urandom | sudo tee /dev/fb0 > /dev/null
I moved from Mac to Windows to Linux to Windows.

I wanted things to 'just work' so bought an expensive mac. It was very good at syncing iTunes and stuff like that. I found I kept needing Windows only software...

So moved to Windows. It was fine. No problems except iTunes looked weird, but I got my work done easier.

Then I started to code more so went to Linux on one computer and Windows with a Linux VM on other.

As life developed I used Linux less and MS Office more. I write more reports than code now! Since WSL I dropped Linux on the desktop and went Windows everywhere.

I notice now that the only people who complain about Windows are the mac users. I personally find a mac really limiting, and MS Office sucks on a mac. I'm happy with Windows 10, and my users don't suffer many issues compared to my mac users.
> https://archive.org/details/SwitchedOnBach2

Holy shit this sounds so much ... fun! It sounds so incredibly joyful on those synths! Thanks for posting, marvelous
My 3yo daughter can handle Ticket to Ride First Journey, and even now knows some of the city names (we actually have a German edition, since I couldn't find an English one at a sensible price). It plays a bit quicker than the full version, so tends to hold her attention longer.
I hope this news isn't drowned out by the current protests. Unpopular lawsuits, bills, etc. tend to appear and get a hard push during times when media attention is focused on some other larger outrage.

The timing of this is extremely opportunistic and reinforces the idea that the IA is in the moral right (not necessarily the legal right). Imagine if this was filed when the only news was about COVID-19 and working from home? What type of outrage would it have manufactured by all of the working parents stranded at home trying to fulfill the duties of being a teacher too? Of course publishers wouldn't do that. It would be a PR death move.
> If you don't already know, Tor does require an entry IP address list before the anonymization occurs: countries can arrest people who visit these URLs, so this is the big challenge right now.

Sorry, can you explain what this means? Would my home IP address be the "entry IP address" you're referring to?
Ask HN: Good Ideas for Mongodb Projects
I'm a software developer with experience in SQL databases, recently I've been trying different DB and face Mongodb. After taking a basic look at it, I decided to learn the hard way and trying to build something that can be useful for anybody.
That's what I'm asking for, good ideas for a project made with Mongodb, the more challenging the best.
For actual money runs, yes. But as the personal vehicle for a successful marijuana business owner?
Not directly related to the post, but disabling `word-break: break-all` on `.section .ans` made the text a lot more readable for me.
Isn't this exactly how ssl works too, and that also cost around this sum of money up until recently (with LetsEncrypt)?
Why didn't he get a newer MacBook Air?
The 3rd Brandenburg is the song that got me into music -- I first heard it in MIDI form when it was included with Windows 3.1 (or wndows 95?) ages and ages ago. Inspired me to pick up the violin later in life, and a few years after my first lesson I was lucky enough to play this with a community orchestra. I feel a connection to this song.

And this performance you linked is definitely the most fun I've ever heard it played, thank you for sharing. The way they lean into the rhythms and play with accents and boldness is giving me chills just to hear it through my macbook air speakers. Amazing.
Never seen that instrument before. Why are there 6 strings floating out of the arm? Are they ever played? Is it just for the harmonics they produce?