skysight-inc/HackerNews huggingface dataset:
There will always be a need for a shared global namespace, and DNS needs to improve its security and privacy as the world continues to rely on it. I don’t think DoH is the answer since it just shifts trust from ISPs to CDNs[1]. On the security end, there’s a new DNS protocol called Handshake (https://handshake.org) that’s trying to shift the root of trust from CAs to a distributed ledger. It’s still early but it shows promise with NextDNS.io and Vercel.com supporting it.

[1] CDNs are a lesser evil than ISPs but I still wouldn’t want to need to trust them to protect my privacy.
Six tales from the trenches of running a startup
Yep, I was a little worried about the /e/ account and all that, but after reading someone else's account here, that sounds like it might fulfil the same goal for me, so that's something to look forward to.

But only after my FP2 dies, of course. Which hopefully won't be anytime soon.
I’ve heard PyPy’s JIT described as “meta-tracing - instead of tracing your code, it traces itself as it interprets your code”.

Is that accurate? What are the pros & cons of this approach compared to a normal tracing JIT, e.g. LuaJIT?
I'm really looking forward to seeing this develop. I think we're far from having too many strategies for generating parametric drawings.

I liken this to OpenSCAD, which is really fun in a similar way.
Have you rotated your monitor 90 degrees to portrait already?
Massive spying on users of Google's Chrome shows new security weakness
I can answer this one. Sometimes you have lines like this:

FROM ubuntu:focal
RUN apt-get -y install libssl-dev
<your app details>

Since libssl-dev gets periodically updated (security updates and whatnot) if you build this now and build it again in 1 year you're very probably not going to get the same OpenSSL version. So it MIGHT be reproducible, but can easily give you different results depending on updates to the packages and the way your Dockerfile imports external dependencies. And that's before we even mention updates to the base container image.

Of course, you can refer to a specific container image id and pin all your packages, which would go a long way to improving reproducibility.
How about only showing friends feed and letting the user decide what to filter out?
I made a post about that here [0].

I don't think anyone is seriously applying those to a desktop system.

They are both based on the Linux Security Module subsystem; which is just too low level to be effective at desktop security. Essentially, they suffer from the same problem as traditional UNIX permissions: no one cares that the attacker cannot access system files. The user's bank account is in their home directory.

[0] https://news.ycombinator.com/item?id=23155269
You can always sandbox the process if you don't trust the input. Ruby has taint checking built-in and most operating systems have lightweight sandboxing solutions. Docker is another way to go. You can just execute the script in a container and then grab standard output as the configuration.
Hemp Oil Tincture AU
Monroe, who currently works for Green Thumb Industries (a national cannabis development and activism association), and different competitors have helped put CBD in the spotlight. While the compound is being used for everything from uneasiness to dementia to seizure issue, its rising prominence and use as a sheltered and successful treatment for agony and aggravation is in enormous part because of competitors turned activists.

http://wintersupplement.com/hemp-oil-tincture-au/

https://twitter.com/hemp_oil_au/status/1273484055393140736

https://form.jotform.com/201690628746058

https://youtu.be/7CxTYqrodD8
You’re spot on about the diversity. I did not grow up in a very diverse place and it’s one thing I feel that I really missed out on.

But parks? In the NYC suburbs (maybe exurbs is more accurate) where I grew up, I had like 5 beautiful state parks within walking distance from my house. I could walk through my friend’s backyard to a pair of beautiful lakes where we could swim, fish, kayak, whatever.

It’s interesting. I’m not trying to be argumentative, but when I go to the city (any American city, at least), I find it to be really dirty, loud, and I find the people to be generally rude. I also don’t like the complete and total lack of outdoor space that isn’t public. Nothing beats a backyard to me.
LinkedIn is a must-have if you are an independent consultant, author or product owner. This is a primary platform to promote your product/book/blog and create the community around it. However, regular employee also can benefit from well-composed cv and creating connections. I use it on a daily basis as my only social network
"forthsheet"

What an interesting combination!
Right. An S-curve starts out looking exponential. Then begins looking rather linear in the vicinity of the inflection point. And later bends over. If you are in the midst of it then it might be hard to predict the shape of the curve.
What if the only practical way to 100% stop all crime is to shutdown the internet?

Now, I'm not saying there is nothing that can be done to reduce it. I very much hope there can be, especially if counsellors can find warning signs and we can better figure out how to spot the danger signs, both online and off.

Facebook took a good step forward by putting warnings up to minors when someone outside of their social circles has contacted many others, although there are other things which could be done.

Should they be allowed to contact them through onion routing during such situations? Where do you draw the line of when such technologies can be used? Is it better not to open this can of worms and risk a slippery descent? What are the chances of false positives, will it unfairly impact relatives? Will it give a black mark to privacy technologies and civil liberties to be associated with automatic blocks? What if minors want to engage in activism, should this be limited? At what point does pushing and pushing start the lie about your age shenanigans again?

This is about Facebook here but it ties back to arguments about doing this or that for the greater good.

Is a more grounded approach better? Ensure minors are well-educated of the risks and dangers online? Invest in mental health services to avoid minors falling into depressive slumps where they might be susceptible to such criminals? In the rare event they drag anyone back home, whether they think they're of a similar age or not, they bring them before the parents first?
Yep - I care a lot about my monitor and spared no expense but got a 1440p 60Hz because I care more about color.
This is also my concern. ISPs are typically located in same country making them follow the laws of that country.

I belive authors of the DoH idea were doing it with good intentions but road to hell is paved with good intentions.

What we are doing with DoH is actually breaking decentralised internet infrastructure to centralized (or lets say, less centralized...for now) and this was never a good thing (historywise).

For test why is this bad you can try to block google and amazon ASNs and try to surf around the web. You will notice that the internet is quite different (a hint, yandex.ru was the only search engine I have found that still works)

For instance selling the information about user accessing some domain would be a big no-no in my country.

They are obliged by law to protect customers information except if ordered by court.

With DoH all bets are off. Surely it will give some privacy for users where ISPs are sticking their noses into customers data (like in USA), they wont be able to do it anymore but for me, I trust in our ISPs (or laws) while I surely dont trust google or cloudflare.

We will just give internet resolving into hands of multinational corporations, what could go wrong, right? (Just quick ideas: for $10 / day we offer redirection from yourdomain.com to sellingcrap.com or we resolve .ourinternaldomain only over DoH and not resolve to external ips to force you to use our DoH,...)
The Intelligence of Earthworms
My game, Shadow Physics used Lua as a serialization format as a side effect of the game initially having no level editor or level import capabilities, only Lua scripts to create levels procedurally. Copy and paste was also implemented using Lua, a fun side effect of this you could copy and paste arbitrary Lua code as a live coding technique.
You'd get close by doing all you mentioned, but also compiling and hosting the code and infrastructure yourself. Not often this is feasible.
I don't think deduplication can do much of a job on media files which are heavily compressed anyhow.

As for Windows, that's a new one! When I think ZFS I think NAS although I did briefly had it on a laptop with FreeBSD I think.
> Statistics are only a cursory form of understanding a subject and hardly comprehensive.

And yet your anecdotal evidence is much better at estimating risk than it?
I am amazed the EU hasn't jumped all over apple for that kind of shit.
Ask HN: What about this tweet makes Twitter think it needs translating?
How about beating Slack first? Slack charges more.
News: Kim Kardashian Signs an Exclusive Podcast Deal with Spotify
There's a market power story here. If one grows a perishable crop, like onions (or even hogs, in countries with centralised meatpacking), one is at the mercy of the markets that season. If one can store the crop (corn->bourbon, poppies->opium, etc.) then, for the price of the processing, one has a lot more options about when to sell and can attempt to get better prices.

(I live in a jurisdiction where people come around the villages with stills on trailers, and will distill your excess fruit production. Some farmers even leave their extra bottles on a table in the farmyard, with a box for the money when we non-farmers stop by to buy some)
Twitter starts rolling out audio tweets on iOS
I agree, it's unreadable - Dr. Zeuss books make more sense.

Perhaps if somebody has a motivation different than "I just want to read a classic," then there could be an approach or motivation to invest the time and energy.

But parsing gibberish is like reading zero-point SO answer code.
My current job at Google working on virtualization?
https://blog.ycombinator.com/getting-press-for-your-startup/
I’m in a very similar situation, and recently have been laid off. My plan is to find an open source project which is aligned with what I am looking for.
My main problems are staying focused in one area and mastering it.
So it's wrong (or rather uninformed) usage of Docker that leads to this, the tech itself is sound and does guarantee reproducibility.
The LibriVox app on iOS has reviews.

Otherwise, uh, it’s free. Take a listen, if it works, keep it. If not, drop it. Conundrum solved.
Is there maybe a way to get infrastructure as code into your current projects? This way you could start getting the grips onto HashiCorp Terraform,

Maybe you have a project which would benefit from Terraform but is missing a provider implementation. This way you could extend your knowledge and learn Go to implement said terraform provider.

Even without having to program a custom provider you might have a chance to implement terraform for your customers. And from there on you could move onto K8s with terraform etc.
How do you block font-weight: 300? On Windows I uninstall thin fonts, but on Linux, Firefox doesn't respect my fontconfig settings to avoid using thin fonts.
Trump administration proposes rolling back protections for big tech
At the enterprise level, almost always pricing information are "guidelines". They serve as anchors to the commercial negotiation stage. Often pricing is specific per customer. And heavily "discounted" based on various factors.
I just did a quick search of "y'all" and it came up with this tweet: https://twitter.com/lisacursed/status/1273489302761033733

and it doesn't offer up the translate button. How does twitter decide what does and doesn't need translating since it's clearly not just the words used.
Awesome thank you!!!
> Can you imagine poking a screwdriver around in a magnetic circuit? :)

I wouldn’t bet my life on it but my expectations is that you don’t feel much of the high frequency magnetic fields in your screwdriver.
I'm not sure if you're talking about daily deaths, or in total, but California has had 5,286 deaths as of today, not 58. We also had 81 deaths today specifically.

In a perfect world, the point of a lockdown is to arrest the spread of a disease entirely. Unfortunately, we're well past that point in the US. Having failed at that, the goal is not just to keep health care utilization below capacity, but also to buy time to mitigate the disease, by stockpiling PPE and health care supplies, implementing robust contact tracing, and establishing policies for individuals and businesses.

California has been prudently relaxing restrictions for a month now, and is now in Stage 3 of the reopening plan.
Hmm... USB-C is complicated because there are a couple different ways it's used to display video. If your computers are able to output Displayport over USB-C I would think you should be able to utilize a Displayport KVM and USB-C->Displayport cables on the input of the KVM and the same cable in reverse on the other end. I think the hard part is figuring out if your computers all push Displayport over their USB-C ports or not.
>> Loglo is an experimental programming environment by Avi Bryant.

Avi was one of the founders of Dribbledb. I miss Dribble!
> natural and warm feelings commonly associated with blasting things with nuclear radiation

Try going outside sometime ;)
Depends on your audience. What's the percentage of your audience with Linux? Is the effort of supporting Linux worth the revenue?
And cost more and had worse handling. There's no advantage.
Sir Tristram: Tristran is the hero of Tristan and Iseult, introducing the theme of the two lovers. Also referencing the Earl of Tristram, lord of Howth Castle from the prior paragraph: https://en.wikipedia.org/wiki/Earl_of_Howth, https://en.wikipedia.org/wiki/Tristan

the short sea: the English Channel

North Amorica: North America

penisolate: combination of pen, peninsula, penis, and isolated

topsawyer: Tom Sawyer, an American character written by Mark Twain. Also, for lumbermen, the top sawyer stands above log, while the bottom sawyer stands below the log, introducing the theme of a sibling rivalry.

Oconee: There's a river Oconee that flows through Lauren County, Georgia, and the county seat of Dublin: https://en.wikipedia.org/wiki/Dublin,_Georgia

Laurens County: during the Anglo-Norman conquest, the archbishop of Dublin was Lawrence O'Toole; Dublin would be "Lawrence's County": https://en.wikipedia.org/wiki/Lorcán_Ua_Tuathail. Also, the Earl of Tristram changed his family name to Lawrence (https://en.wikipedia.org/wiki/Earl_of_Howth)

doublin their mumper: doubling their number

thuartpeatrick: Saint Patrick. 'taufen' is German for baptize. Peat symbolizes Ireland. The fire references the miracle of Saint Patrick's Purgatory, where he drew a circle on the ground and the earth opened in flame.

kidscad ... isaac: the Old Testament story where Jacob, in rivalry with his brother Esau, disguises himself with a lambskin, to steal the blessing of their dying father Isaac. "not yet, but very soon after, Jacob, disguised in the kidskin, duped blind old Isaac". This reinforces the theme of sibling rivalry. Also a reference to https://en.wikipedia.org/wiki/Isaac_Butt.

Vanessy ... twone nathandjoe: two/one, nathandjoe is Nathan and Joe, another sibling rivalry. Also, an anagram for Jonathan (Swift): https://en.wikipedia.org/wiki/Cadenus_and_Vanessa

sosie sesthers wroth: transformations of Susie/Susannah, Esther, Ruth, the heroines of Biblical stories.

In vanessy: Inverness was the castle from Macbeth.

Pa's malt, Jhem, Shen: the Biblical story of Noah getting drunk and discovered by his sons, Shem, Japhet, and Ham: https://en.wikipedia.org/wiki/Drunkenness_of_Noah. This introduces the theme of the fading of the father into the sibling rivalry.

Yeah, it's dense stuff, but I find it fascinating. This paragraph is introducing a bunch of themes that are explored in depth throughout the book. It's impossible to get much meaning without a guidebook; I've used A Skeleton Key by Joseph Campbell.
I've always suspected they didn't want E2E encryption themselves, not because of any "work with the authorities" strategy.

end to end encryption would prevent lots of monetization strategies, such as indentifying people via facial recognition and voice printing and then using this data (along with transcripts for example) to "add value".

Now the "we have identified a path forward" bit makes me wonder if they can still pull it off. Maybe it's client-side identification with out-of-band notification.

Google makes an enormous amount of money identifying people.
> Have you ever lived near a Ppwer Plant?

Yes.

> In the case of a melt down, as San Onofre is both on the Pacific coast line as well as along the San Andreas fault line so it was just a matter of time, we would all die. Some slower than others, but death was the most likely outcome due to radiation exposure as an evacuation plan would fail.

This is disinformation and has absolutely no basis in fact or reality.

San Onofre Nuclear Generating Station (SONGS) shut down in 2012 and was replaced (partially) by a natural gas power plant in Carlsbad. There is no possibility of meltdown. Even if there were, the impact would not even approach what you are describing.

> football fields worth of solar farms

Football fields would be tiny in comparison to the immense amount of land that would be required to replace Diablo Canyon with solar panels. Solar Star generates one eleventh the power of Diablo Canyon over the course of a year and occupies almost four times the space. Solar Star produces only about 42% as much energy in December as it does in June, while Diablo Canyon operates consistently pretty much year-round.

A single plant powers 9% of California with near-zero carbon emissions.
On Linux, just automate it.
1440p, 75hz display is perfectly acceptable. If you game, the quality difference between 1440p and 4k is pretty much indistinguishable, but 1440p is much less performance intensive to render.

I upgraded from a 32" 1080p display to a 32qk500. A significant improvement in visual quality for a reasonable price (~USD$270)
Thanks for taking the time to respond.

1) I work on a typescript codebase for work. There is a real need for types in this case because the definitions are about 3 layers of abstraction away from their use. It drives me up the wall because I know when you keep definitions close to use, or have some basic conventions this problem melts away. At least to the point of diminishing returns where types are no longer relevant.

So, i guess over the years ive been caught out by int + string = 0 all of like, 1-2 times in production, maybe a few more while in dev. Either way its rare enough for me to call FUD on the argument. Stop mixing types and this really doesnt happen. To be fair to your point, at work, i know of a recurring error in production where this is almost certainly the same class of error. Nobody can be bothered fixing it because its too hard to track down and the cost benefit isnt there.

2) Type inference is problematic for me. Doesnt it just open you up to type errors of a different class?

2.5) terse code is not the point, I find rust cryptic and dense to say the least. I prefer something like go wgere readability is a priority over density.
That's a really impressive resource. I admit to being pretty overwhelmed without e.g. example screenshots of applications and video modes with which I was already familiar.

I remember the first time I used a text editor in one of the higher-resolution editing modes. Was it Turbo C? Anyway it was really uncomfortable in a way. Like if you switched your current monitor into HiDPI mode and your mouse was completely squashed vertically. A mouse cursor seems like it should preserve its aspect ratio.

I tried this again recently with MRed I think? Anyway it was just as jarring. Despite the resolution bump I preferred the old way. Maybe one gets used to it after a while.
+1.

See also: Magnetic Amplifier Control for Simple, Low-Cost, Secondary Regulation by Bob Mammano, Unitrode Corporation (now Texas Instruments).

https://www.ti.com/lit/ml/slup129/slup129.pdf
So those people in one town did not have enough cell-mediated immunity to clear the viral dose from spending all day in an enclosed space with dozens of coworkers shedding the virus.

This does not in any way suggest that 50% of the general population cannot have enough cell-mediated immunity (or even immunity from a cross-reactive adaptive/antibody response to another coronavirus) to clear e.g. the viral dose from eating at a restaurant.
Hopefully the money is for preserving nature, and not building bigger roads and tourism facilities like hotels.
Good Grief: Is there a better way to be bereaved?
McKernel, the OS behind Fujitsu’s Fukaku supercomputer
One day you will appreciate your paycheck. That day is not today.
Too yellow, couldn't read. Changing to dark mode resulted in black fonts on black background. End of story.
Still an issue - the scale factor is 2.0 or 1.0 by default depending on whether the display is HiDPI/Retina or not.

There is an option to change the scale manually (-Dsun.java2d.uiScale=<floating point value> in the JVM rags), but I don’t know if it helps or not.
How is that related? Are you justifying violence?
yes, like "dual motor" etc.
Pretty great, but could you add notifications to when you have more comments on your posts?
"flatpak and snap are both security nightmares" and then link to flatpak article... Come on at least bother to explain... As far as I know - with all bad publicity snap has recently - it does isolate package and you don't give root to package maintainer.

Bold claims no arguments
> though the immense amount of [invested|wasted] (take your pick depending on cynicism) effort spent on this game makes me a little sad

that's an odd position to take. You seem to be ignoring the philosophy behind the cat&mouse game that is RE (and Security Engineering in general). What you call cosplaying Sisyphus is to me one of the most rewarding aspects of Tech. Breaking things especially is fun when somebody has made an effort to lock things down (and maybe even claimed it's "unhackable"). This is an area where you're still paid to solve puzzles and where taking the long-view matters. RE is complex and hard but exactly because of this it's one of the most rewarding things in all of CompSci.
I honestly like it far less now that it has been continuous for many months. Far less participation that made the semi annual so great. Probably leaving soon myself... it's been fun
Oh I recently came across a similar topology in welding machines. The Amp output was a large screw shifting a rod (shunt?) in the transformer. I had no idea it was a larger principle at play.
My brief stint in journalism was after hot metal but before full computerisation. We typeset by keyboarding into a machine that produced column-wide printed output. Afterwards, to do layout, 'Cut' was done with a blade, and 'Paste' was literal.
(in this vid, too: 25:32)

Never saw how the actual back-end printing was done, but we did cadge used printing plates from the big paper downtown when we needed thin aluminium sheet for other hacks.

Are 24:32 cordwood modules?

25:13 the days when storage was dangerous if it fell on you (now it's probably riskier that you might choke on it).
I think you've hit upon the fascinating contrast in this review; a reviewer who is empathetic towards an almost disdainfully distant author.

This style of multi-layered writing used to be more common, but I have not seen it in more recent reviews, which read more like ideological screeds.
Apple don't need the source of your app, but some bytecode that they can optimize for target platform. As for making sure that certain app not using private frameworks they can just do it through the testing.
Can't be that secure if you go around telling people that's what you do.