skysight-inc/HackerNews huggingface dataset:
GnuTLS TLS 1.3 session resumption works without master key, allowing MITM
If the article itself isn't wild enough for you, be sure not to miss the video at the bottom. I'm speechless.
But HN was never hardcore tech content? It is more of general set of articles about wide range of tech issues.
Why do people use Lua in a world where we have Python?
Well when you can't deliver a working product to clients because your code is so bad it can really matter. And the thing is any half decent developer is not going to code that way even within hackathon time scales
Which sugar?
In all fairness, it looks like user DIY Perks on YouTube already did the work to make the prototype. I’m not sure what’s different about this version; I’m sure it could even be superior. But let’s put credit where it’s due.

https://www.youtube.com/watch?v=sJ5vhShdVjo
The main reason books are better is because they are harder to write and produce. The person making the book actually has to invest a lot of their time in making it happen, unlike a blog post.

I've seen lots of articles on hacker news (and other places) that is "PART 1 of..." which does the introduction to what they plan on teaching, and then it just dies right there in the land of "PART 1's"

With a book, if you stop at part 1, no one is going to publish your book.

Another thing about books/web, is books go MUCH deeper into topics. It seems like 99% of the content on the web is "INTRO to xyz" but never "Advanced xyz"

Books are also broken into logical section so you have a learning path you can progress through; not just random content that you are to piece together yourself.

So, yes, very good advice; if you want to learn something, read the book.

blog posts are more just advertisements for buying an actual book.
> Businesses are opening

Yeah. We never were going to be able to keep everything closed for much longer. There is a very anti-handout ideology here, and the amount of political will for more bailouts was dwindling.

> Protests...

Sorry about this one. There are more important issues that need solving right now, and momentum and timing are very important. Right now we're in a perfect storm where a large amount of people can protests. Day after day after day.

The only way we could have kept the pandemic at bay if it was the only thing in the news and on everyone's mind. And more important things came along.
> I don't work 16 hours a day.

Exactly. You probably spend at least some time on a hobby. For some people their hobby is technical writing.
Assemble carrying weapons and with half the crowd claiming that the entire disease is fake, though?
San Mateo County health officer: "The third modification of the shelter in place order is being made on 6/1/20. These modifications are being made in attempt to strike a balance. They are an attempt to find a way to increase the immunity of the population (in public health terms, this is called “herd immunity”) slowly and methodically, while minimizing premature death, with equity in mind, while not overloading the healthcare system, and minimizing economic damage. Many of these considerations work in opposite directions."[1]

The current US death rate is about 1,000 per day, and that probably won't go down much until there's a vaccine or until 70% of the US population has had the disease. This is a "bury the dead and go on" situation. The US hasn't faced one of those since WWII.

Meanwhile, don't bunch up, get good masks, and wear them. The mask supply situation has improved, although too many of them are junk. The US could probably beat this thing with enough N95 respirators.

[1] https://www.smchealth.org/health-officer-statements-and-orde...
> Covid as bad as it is will be an issue of the near future, civil rights gains or losses will have an impact in decades to come.

There is a lot of truth in this.

In any war there is a level of acceptable losses. For most of the spring, the modern culture wars were on hold and there were no hills worth taking. Now there is something going on that has the potential for long term consequences, so the level of acceptable losses has gone up.
A lot depends on the programming language used in the online tech materials. It's very hard to find anything worthy in Python or JS, because for many people it's their first language, and "teachers" are only one lesson ahead of their "students".

On the other hand reading something explained in OCaml, Scheme, Erlang, Julia, D or similar niche and not hyped language can be of very high quality. C also tends to be good. Interestingly, C++ is also slowly becoming a niche high-quality language recently.
Not a surprise, COVID19 is pretty soft compared to the historic pandemics. I'm actually suprised that this continued for so long, I gave the lockdowns 4 week, but I guess the media propaganda blessed it with longer life.

Just to clarify about Covid:
-The highest deathrate from it is around 1%, CDC reports 0.30 lately.
-Hits predominantly the old parts of the population
-The death comes in a normal way - pneumonia -> death, nothing like the bubonic plague or ebola symtoms
Right. As if the virus has its own agency and cares why you are gathering.
coding-bunny solved this in the comments:

echo "alias ruby_lint=rubocop" >> $HOME/.bashrc

...unless your objection is that other people will see this suddenly problematic word.
Bah. Don't fall for this kind of bullshit manipulation.

> [0] (I prefer not to name them, lest I be disregarded as a fanboy, but the clues are in the comment)

Cite your sources mate. If they had such a profound affect on you, surely you can link to something they've said or written as an example.

But I'll bite: is it Eliezer Yudkowsky and Warren Buffett? Elon Musk and Steve Jobs? I want to get progressively more psychotic and unhinged as my guesses progress. Is it Slavoj Žižek and Donald Trump?

Paul Graham and Richard Stallman?

I don't believe in personalities. Wisdom is perishable.
There are people who definitely should not be voting. The trouble is… how do we decide who they are? Well, it's as simple as whoops we're in a dictatorship now.

Plus, the unwashed masses might not be very good at deciding who's acting in their best interests… but the set of people who are good at deciding who to vote for has different interests (on average) to the set of all people. So even if there were a perfect way of doing this, it wouldn't achieve what we want it to achieve.

I really want the minimum voting age to be lowered to 7 – it's something my seven-year-old self swore to do. But then parents would basically get an extra vote for each child they have, given how easy it is to control a seven-year-old's access to information and how much trust they place in their parents' judgement, and that would be really bad. So I'm not actually going to support such a measure.

(Rebellious teens, on the other hand… well, perhaps 14-year-olds voting wouldn't be so bad. Except there would then be higher incentives to manipulate them, and do we really want to put 14-year-olds through that? Well… you could argue they're already being put through that, so perhaps? But —)
From the video referenced in other comments, the parachute is disposable (looks like it's made out of a bit of paper or plastic and packing tape), and the range is 160km round trip, the service area is an 80km radius around the droneport.
Sure, I also like those inspirational hints.

But the category of articles that I was criticizing here is when unemployed students pretend to be the authority on topic X to improve their chances of getting hired. Those articles typically do not disclose the lack of experience of the other. Quite the contrary, some of them even make up achievements and/or credentials.
I agree that public assembly is essential regardless of what is going on.

But why were the people protesting the lock downs and business shutdowns and the limiting of freedoms the yahoos and crazy murderers? Why did nurses block them from protesting but not one would block someone now?
It's a good submission, but lists can't be Show HNs. Please read the rules: https://news.ycombinator.com/showhn.html.

(I've popped "Show HN" off the title now.)
Moped Electric Conversion, Puch Maxi “Electropuch”
There's a note-management system that can be built that's much better than all existing systems, I am certain of it, but all my attempts to design it so far have failed.

It somehow involves a combination of organically determining a hierarchy of the notes, and then helping to algorithmically prune notes that are no longer useful.
The one bad thing about Vim
I feel like this is not specific to TS or JS but any of these modern technologies that are popular and attract beginners.
Fair enough. I use a ton of rounds, but yeah that's fair.
Zoom has become annoyingly a social phenomenon which makes so little sense given the many alternatives out there.
Relatedly: anyone in the Bay Area know a mechanic who could perform an electric conversion on a similar Puch Maxi?
I wish Dijkstra had named his article on the go to statement[1] something else. It feels like every other author nowadays want to use the sense of authority that the "considered harmful" gives them. Like it's obvious and widely accepted that it's harmful, and they're giving you an FYI.

Just name it "The downsides of microservices" and we'll know that it's your personal opinion. This title might get you more clicks, but it's a turn off for me.

[1] - https://homepages.cwi.nl/~storm/teaching/reader/Dijkstra68.p...
Does Python have any good game engines? PyGame project is a nightmare.

Lua's https://love2d.org/ is amazing.
Microservices are middleware. That's they way I treat them anyway. I build them as the glue between the backend and frontend. They handle things like authentication, business logic, data aggregation, caching, persistence, and generally act as an api gateway. I really only ever use microservices to handle crosscutting concerns that are not directly implemented by the backend but have a frontend requirement. The only way that is harmful is if you write bad code. Bad code is always harmful.
Airtime is finite - editorially, it's unsurprising the story took a backseat. NYC curbed infection rate, there may be seasonality, numbers in general are going down in this country.

If we see another phase it will be A1 material again.
Eh, not that weird looking. They look like they could be tiny mammals. Just with strange eyes.
I've recently started using Express.js for a project at work, and I've never before encountered a seemingly popular framework/language with such frustrating content churned out by the community. Express's official docs have all the technical specs you could ask for, but the framework is very light weight without any structure and feels more like a library, sort of like Flask. I wanted to see what a typical app structure looks like, but just about every single "article" I found was either a copy/paste of the same app with everything crammed into one index.js file (routing, logic, db queries, etc...), or they were walls of text filled with occasional code snippets and didn't even provide a repo for reference. The community feels like it's targeting complete beginners with its simple examples, lengthy explanations of trivial tasks and extremely little coverage of architecture. My experience with Express felt like PHP 10 years ago with w3schools.
I think this is a lot of it, for better or worse. I feel like a lot of people are afraid to talk about anything but the protests lately, lest they be branded as not supporting the protests.
Meetups cater almost exclusively to younger people who want to learn something and socialize.

I don't think it is particularly wrong, but more experienced people tend to be older and less likely to have inclination or time to prepare talk or go to pub every week or so.
> A recent blog post by neobank Monzo explains that they have reached the crazy amount of 1500 microservices (a ratio of ~10 microservices per engineer)

That’s wild. Microservices are mostly beneficial organizationally — a small team can own a service and be able to communicate with the services of other small teams.

If anything I think a 10:1 software engineers:services is probably not far off from the ideal.
SF sidestepped state law on developing toxic sites
LuaJIT is much faster than Python, directly interfaces with C, incredibly small,and the language itself is very simple. This is also built on top of LOVE2D which is written in Lua and is arguably one of the best game frameworks out there.
Tl;dr: politicians are reopening schools, restaurants and shops around the country, but a week of BLM protests is going to cause a surge in COVID cases in the coming weeks.

The models are so good they predicted the surge before George Floyd was killed.

Did I miss anything?
If those engineers are working 40 hours a week and are awake for about 110, what are they doing with their other 70 hours? Sure some of that is commuting, showering, etc., but presumably they have other activities.

For some people, their hobby is technical writing.

Saying that they are mutually exclusive would be like saying that being an engineer and doing puzzles is mutually exclusive because they both require a lot of mental effort.

Or being an engineer and a musician are mutually exclusive. It's a silly thing to assume that technical writing is somehow different from any other hobby.
An ensemble model of trust is entirely reasonable: for things that don't require a mountain of evidence, you can mostly trust that the collection of sources you depend on will not all simultaneously gaslight you in a consistent way. But the comment I was replying to suggested that in an ideal world you could trust one source (political leaders). I'm suggesting I'd like a world where everyone consistently applies critical thinking to all sources of information.
Daily new deaths have been steadily falling even as states continue to ease or eliminate restrictions [0]: https://www.worldometers.info/coronavirus/country/us/

This article seems to completely ignore that, instead focusing on positive test results, even though the vast majority of infections are mild or even completely asymptomatic. If anything, America is giving up on the breathless projections of mass die off that aren't supported by reality.
I think you may be confusing pasteurized milk cheese with pasteurized cheese. Many cheeses are made with pasteurized milk and cultures added after pasteurization. These cheeses are most definitely not sterile. I’m not sure that genuine pasteurized cheeses exist in the US, at least not ones that are sold as cheese. There is “cheese product” that is a whole different beast.

(Even home made yogurt is frequently pasteurized at home. IMO the tastiest yogurt is made by first holding the milk at 180F or so for half an hour, at which point it’s pasteurized. Then the milk is cooled and a starter is added. The result is not sterile and has a respectable shelf life.)
Could you detail your post? I'm afraid i'm not informed enough to understand the words after "one of the few people".
I'm aware of legibility research, although you do have a point. It's just that I could read 95% of this at first sight without any particular training, so I figured its legibility scores would be quite high. But yeah, n = 1 and all that.
> Logically then, the time is ripe for a new search engine to disrupt but the problem - that of determining intrinsic worth - is really hard to solve, so as yet nobody has

I'm sort-of trying to solve this with a recommender system approach.[1] Search isn't my primary objective; I'm mainly focusing on the case where you want to be made aware of relevant information on an ongoing basis but you aren't necessarily looking for something specific.

But that involves building up a ratings database of lots of different URLs. If it becomes really popular, I'd like to experiment with search. It could start with a "normal" search algorithm but then adjust the results based on rating data. E.g. "the top result for this query is X, but people with similar rating data to you always down vote that link, so we'll move that result down".

I've heard people complain about how Google gives you personalized search results sometimes, but I'm not sure if the approach is actually bad. Perhaps it could work if it was focused on from the start instead of bolted on.

[1] https://findka.com
Lua has significantly better performance than Python, but the big reason is that Lua has a very nice C/C++ API that makes it easy to integrate with other programs. Combined with a 20k LoC source code, and you have a programming language that is cheap and easy to embed, fast, and simple. Batteries are not included, so it’s very light weight.
>If your codebase has failed to achieve modularity with tools such as functions and packages, it will not magically succeed by adding network layers and binary boundaries inside it

This is assuming you're converting an existing non-modular monolithic service to micro services. If you're starting from scratch or converting a modular monolithic service then this point is moot. It says nothing about the advantages or disadvantages of maintaining a modular code base with monoliths or microservices which is what people are actually talking about.
https://news.ycombinator.com/item?id=23448489
I think CCP legitimacy does depend upon a social contract of rising living standards, compared to the Mao era when political idealism had more purchase.

Moreover rising expectations beget rising expectations, and the genie is out of the bottle.

I don't foresee a revolution either, rather a perestroika movement that will be forced from below but embraced out of necessity from above. As the video said, all of the energy needed to address domestic unrest will drain from China's ability to project their national interest.
Also me, but I did have one (on tolerance analysis) that helped my career.

It made rounds in the professional circles I traveled in and established myself as, while not necessarily a leader, someone at least very fluent in a particular process.

This was also in 2010 though, so the social landscape Was quite different
Ok, but please remember that this is a highly international site and there are many thousands of non-native speakers posting in English here. It's not cool to shame them. (Especially since most of us who would criticize them have no second language at all.) If you notice an error, it's better to neutrally offer correct information.

Submitted title was "Show HN: Some Bookmarklets, I Use".
Like almost anything when not used for the correct application. Say a hammer to insert a screw. It is not a good idea. One of my favorite things about using microservice, is that you can use multiple languages. This can grant you the ability to use a language which is better for the task, or for other programmers to contribute in their favorite language.
Can you please stop posting unsubstantive comments to Hacker News? Also please see my sibling reply (https://news.ycombinator.com/item?id=23449760).
I think that pattern scales really well up to a medium-sized startup.

I stick those two (webserver/static content and API) plus a database in a docker-compose file, and put all three plus a frontend in a single repo. That feels like the sweet spot of "separate but integrated" for my work.
I have noticed that as well, the media across the board is no longer using the numbers to score points for their team. Certain politicians are no longer touting the death counts as political leverage. They've all moved on in the span of a week or two (they must have received their talking points update).

They can't tout how horrible and scary the pandemic is (forcibly close all businesses! we're all gonna die! put people in jail for failure to socially distance! take their kids away from them!), while cheering on protests. They're in fundamental conflict and it became too obvious, the obnoxiousness of the contradiction was being pointed out constantly. They had to pick one, so they pivoted.

Don't worry though, they plan to go back to focusing on the pandemic after the protests fade. There is more political juice there yet, perhaps in the fall if the virus picks up.
Illustrated Guide to Databases
Yes, sure there are good devs who write good content. But what I'm saying is that if you spend most of your time writing, you definitely don't have the same experience as someone who's mostly doing work with code.
This misses some of the main reason Microservices are nice, it’s much easier to change code that isn’t woven throughout a code base. Microservices make the boundary between units defined and forces API design on those boundaries. Yes, you can properly design these abstractions without a service boundary, but having the forcing function makes it required.
So is Europe. Apparently fueled by the protests in the US there have been demonstrations in Berlin, Paris, Amsterdam, Madrid, Barcelona and other cities. Not only are they protesting against racism but it seems like there are quite a few also protesting against the lockdown measures.

Once the weather gets better again you can bet that all along the European coasts hoardes or people will be ignoring the laxer provisions. In fact, they already are.

Europe (at least Western Europe) is also giving up on the pandemic. At this rate there's going to be a second wave. I have no idea if this will create better conditions for the virus to mutate and possibly herald a third wave keeping us in until 2022.
Can you describe what this experience is like for the attendees? Are all of the attendees transported into all of these environments with full control of their character given constraints like being underwater, flying through the air, etc? I've played video games my entire life, but not Fortnite, so I find this absolutely fascinating as a future medium.
Was responding to the OP that the "Trump administration who in 4 years totally managed to end the standing of the US on the world stage."

Have heard that Biden would be soft on China/Xi because of his commercial interest, but I haven't done enough research to justify this viewpoint myself.

It's kind of ironic for me, who identify both as a HKer and a Chinese, to hope that the world can get tougher on China, or Xi/PRC to be more exact. What they're doing is IMO damaging to the Chinese people in the long term, and let's not begin to discuss HK.

OTOH, I also understand that every country, including the US, has her own dark side as well. But then, when you put everything on a balance... It's just overall a complicated, difficult and sad situation, as life often is.

Cheers.
Telephones have always been operated by for-profit institutions in the U.S. I much prefer at least one layer of indirection between my computer and the NSA. You put the government in charge of the internet and you'll get censorship.

I'm perfectly fine with the innovation coming from SpaceX and mobile operators with 5G to solve these complex problems. It works well by and large.

As for a publicly funded Twitter, meh, would you use it? Have you used government software? Rarely is it designed and run well.
Here is the original Lancet article [1] that has been used as the basis for the article.

[1] http://www.ias.org.uk/uploads/pdf/news%20stories/dnutt-lance...
Not getting a haircut won't kill you, the police will. Also, for the most part, anti-racism protestors are wearing masks, anti-lockdown people, for the most part, are not.
Somewhat agree, but this gets tricky fast. Everyone only has so much time, so how can you tell how much time is appropriate to spend investigating problems that you're only generally aware of? And what about the opportunity cost of all of the things you didn't do instead? Does it matter if the factory produces things that save other people's lives? How much time should you spend trying to figure out how much time you should spend determining whether the safety problem at the factory is worth pursuing?

(I've faced this problem directly at work before.)
Race Conditions on Rails
There was a lot of science denialism in those protests, conspiracy theories, and (based anecdotally on photos which are the best we have to go on) mask usage seemed a lot lower.