skysight-inc/HackerNews huggingface dataset:
If I buy a domain via auction on handshake for $20,000, who does that money go to?
> The reality is that grandma is going to be better protected while running Windows or MacOS or Chrome OS. If she's running Linux, she is wide open.

Strongly disagree. The linux desktop has something like 1% of the marketshare and is far from the lowest hanging fruit. And basic, sane security defaults are plenty good for simple web browsing and emailing.

My grandma used to get calls 2-3 times a month from "Microsoft" and "Comcast" trying to get her to download team viewer and cough up some passwords to Windows 8. She eventually got phished by downloading something dumb via email. I put her on the Ubuntus, with some tweaks, and she's doing fine. 10/10 would do it again.

> For example, the package manager is very nice, but when you want to install anything that is not in the official repos, your options get just as bad as windows, or worse

Grandma ain't installing Steam or an obscure 3rd party metasploit framework -- standard Ubanto repos are fine. She doesn't need rpmfusion to access Office365 emails.

> On Windows, you at least have some anti-virus tool scanning for known malware

Clam-AV is a thing in Linux and works fine -- we used it on mail relays a while back and had decent results. If you're putting trust in the default MS virus protection you're naive.
A new spin on the dream country house
For it to be virtue-signal would Kaepernick either have to not really do much or the board/c-team be dismissive of his ideas/strategies?

I think companies are taking a hard look right now at if what they say they stand for is being represented by their leadership teams. My guess would be EV saw a big gap there and tried to make improvements on representation. It's hard for me to see how this could make Medium worse, and if we trust Kaepernick to make sound decisions for himself and his well being, what is there to be cynical about? Any African American being chosen for a leadership role right now have to deal with a large percentage of people questioning whether they deserve or are qualified for the position.
LIGO Shares Caltech and MIT Statements Responding to the Death of George Floyd
I made the mistake of jokingly asking people if they wanted a hey email address.

I had 12 responses in a minute.

Two DMs offering $100.

They are going to make a killing.
"In the last few days, Next Anime Episode has started to receive an unusual number of 1-Star reviews and all in a quick sucession, so I am starting to think that someone is targetting me for god knows what reason"

Speculation but my money would be on some unethical competitor or even just a jerk who doesn't like Andy is spamming negative reviews and reported him to Apple for fraud. Since I've never heard of this happening, I don't know if Apple's fraud department takes a guilty-until-innocent approach or if they agreed fraud occurred. Either way the lack of transparency and communication is not right. I'll echo sentiments that I've spoken to humans about app issues but never about fraud.
Should've went with Frank Gore.
I appreciate the dev-friendliness of this (libp2p leaves a lot to be desired last I looked from a dev perspective). How chatty is it? How resilient is it to untrusted peers (e.g. any of skademlia features built in)? Any plans to let the user provide their own net.Conns or io.Reader/Writers (e.g. I might want to run it over Tor)?
Exactly what I thought when I read that it was in Italy.

I mentally rolled my eyes and thought "here we go again".

-

(My partner's from Italy and I spend at least a month there each year, so I hope I don't come across as being entirely needlessly snarky saying the above! :) )
I either use JavaScript or a strongly typed programming language in a strongly typed environment but not something between.
This is good, but "nobody reads the privacy policies" is the wrong reason. "Due to market pressures, consumers have little meaningful choice of service providers without onerous policies, and invasion of consumer privacy on a nationwide scale is a net social negative" is a better reason.
The Art of Electronics is also fantastic
> The problem is that you need to get the authentic public key of the software distributor to verify the signature.

Right. If you already have a secure channel to receive the signing key over, you can just use it to receive the software to begin with.

Meanwhile we do have a CA system that lets you download the software via TLS. It's not perfect, but breaking TLS or compromising a CA are not even close to common methods of delivering malware.
I would very much like not to use it but I am forced by my employer, including to divulge sensitive info like my passport.

Yes, you have read that right. I was forced to make a zoom call and hold my passport open to the camera. No, they wouldn't accept a scan and an email, or even a call through Jitsi. This is a major public institution with a 200+ strong IT department consuming millions of pounds a year. This is the moronic "enterprise" stuff those millions of pounds buy.
The fault can be corrected. The term “violation” seems to imply that it can’t be corrected. Your program only crashes if the segmentation fault isn’t corrected.
I second this view with this old full circuit simulator: https://www.falstad.com/circuit/

The default example here is the LCR-circuit which to understand mathematically requires a bit of work https://en.wikipedia.org/wiki/RLC_circuit
Exact same reasoning here. I was burdening my users with slower load times, for something that didn't ever impact my "product" decisions. For any meaningful analysis, I always pulled up server side logs of things.

So I changed to GoAccess too. I don't check it too often, just when I want to see the impact of some spam/publicity posting around.
Security, Seclusion and Infrastructure – Things for Successful WFH Experience
> Today's discussion about racism isn't (mainly) about critiquing the motivations in peoples' deepest heart. It's about acknowledging that the outcomes of this kind of assumption can be racist, regardless of whether any harm was intended.

Words have meaning. If an act wasn't done with a racist motive then it isn't racist.
As the previous commenter said, it's just heuristics : they can be more or less in tune with reality. The only way to make someone change his heuristics is when reality and his map of reality become too different from one another.

> Acknowledging your potential to participate in racism doesn't mean admitting you have a cartoonish hatred. It means recognizing that it requires a proactive effort to keep assumptions from becoming self perpetuating in harmful ways.

So now people have to go against an evolutive and efficient process that enables them to not spend 1h thinking about how to behave in front of a lion or a boss ?
The self-perpetuation will stop by itself when people's experience will change.

With such wishful thinking are you conscious you could then ask people to believe anything you want, regardless of reality?
Indeed, my co-founder and I were colleagues at the time and we were given the opportunity to lead a new service (almost like a startup inside a larger company), with me as the technical lead and him as the business lead. We had discussed starting a company before, and we thought it might work, but after that we knew it would work. Five years in and I have no regrets.
You can easily set it up on a VPS with docker, check github for instructions.
Interesting, did Firefox revert their decision towards DNT? I remember being confronted with the behavior of it sending DNT headers no matter what, which must have been something around spring 2019.
I mean, they specifically say they are partnering with him and his publishing company to write stories on Medium about race and civil rights.

Outside of that, they call out how his voice/actions led discussions on racial justice and how the world is just now catching up to him. I believe they are calling this out because they believe these discussions will be continuing, and they want to be the place for the discussions to happen. Also, Colin led those initial discussions years ago and took a lot of heat for it. History is now proving that he was in the right, and his critics were wrong. If you want your platform to host content about race/civil rights, Colin seems like a great person to have on your side.
Eh, you could argue evolution is still relevant in human populations up till today.
Perhaps this can inspire https://www.pretotyping.org/
I agree completely. I think it’s a super interesting discussion whether she’s actually done anything morally wrong (again, barring the identify fraud).

It’s possible that the root cause of this is simply a mispricing of insurance caused by Chinese regulations.
I think after effects of COVID-19 will significantly re-arrange the economics of work and working. Unless a vaccine is miraculously discovered in the next two weeks, there is a very good chance social distancing could last into 2022 and that will almost assuredly solidify a lot of the work and work related changes in place.
If you are related to parse.ly: it's really confusing that clicking "pricing" doesn't show the pricing first.
Show HN: Automatically rename your GitHub default branches
A more accurate headline would be: "In many US metro areas, renting may allow more rapid accumulation of wealth than buying."

I've gone from renting to owning to renting and back to owning. Depending on what factors you consider to be important, then one may be better than the other or vice versa. For example, one of my periods of renting allowed me to live in a city where my work, my son's school, and nearly everything I did was within a 20 minute walking radius. I certainly didn't build as much wealth as owning, but owning wasn't an option in that area. Therefore renting was "better" by that measure.
Non-Russians often assume some sinister motive behind actions like that, but reality is much simpler.

The authorities failed to shut Telegram down while making active use of it themselves. So now they are giving up because there’s not much point in continuing the efforts.
My Favorite CLI Tools
Agreed! I read the headline and my first thought was "Guess it's time to stop using Telegram now"
People should be allowed to install other installation platforms. This needs to be made into the law. Consoles are a different thing, in their case, they must be made to allow cross play/communication between other consoles if the game developer wishes to integrate the functionality. If consoles turn into a general purpose compute thing, then they must be made mandatory like that too.

Remove the network effects that ruin innovation and keep society behind. Compete on merit.

If Apple is so sure that they are providing consumers with the best experience, why do they not allow competitors and make it fair? Make it mandatory that a developer has to support Apple payment method, fine, but don't add anti competitive clauses like you shouldn't tell the consumer that you can get the app 30% if you pay with PayPal/Stripe etc instead of paying with Apple. Then look at what the consumer picks. Is Apple's quality assurance really worth that much? Give free markets a chance, and we'll find out. 10 years are enough to make a profit, innovate and open up.

Stop using network effects/lock in as your moat, use your innovation to stay ahead.
Hey, so I'm the very part time volunteer sysadmin for LibriVox, can I use this opportunity to ask for help?

I have a day job and two kids, the amount of time and energy I give to LibriVox is sufficient to keep the lights on, but not much else.

We don't have money, in fact we don't even have a legal entity, any donations we get are handled by Internet Archive, who also kindly provide us our two servers (yes, only two).

If you want to help and know PHP and CodeIgniter, we'd be very happy to have you on board! While I am a developper, it's currently Python, and not at all web related. LibriVox's tech sack has fallen woefully out of date (PH 5.6, CodeIgniter 2), and I can't bring it up to date all by my self.

I'll be honest, it's not glamorous work. There's no automated testing, anything we change has to be tested and validated by the volunteers themselves - who are awesome, by the way. But we're a fantastic little nugget of Internet, and I think we should stick around on a solid tech stack for as long as possible ;)

All of our code is on GitHub: https://github.com/LibriVox/
https://news.ycombinator.com/item?id=23560823 got more traction (183 comments)
Always be closing, even when it is not even open.
The Essential Keto Cookbook (Physical) – Free and Shipping
The physical version of the Essential Keto Cookbook with 100+ Keto recipes including breakfast, appetizers, entrees, desserts, drinks, and snacks. Net-carb, fat, protein, and calorie count for every recipe. Enjoy recipes like Creamy Breakfast Porridge, Fiery Buffalo Wings, Mini Burgers, Jalapeño Corn Bread, Fish Tacos, Popcorn Shrimp, and tons more.

The book is 100% FREE to buyers, they just have to pay for shipping. Limited quantities while supplies last.
https://www.digistore24.com/redir/269221/nas1993/
So this can compile other languages to run on deno using Web assembly?

Seems like a lot of indirection to emulate the native assembly code. I guess it's cross-platform though right?
That ignoring or not realising the warning signs and taking painkillers to keep working is a very very wrong thing to do.

Mine developed 2007 onwards and it's still with me today.

The only thing that worked for me was not using that hand at all and using a splint at night.
They can. But the problem lies with Browsers (looking especially at Firefox) just ignoring that. The technical aspects of DoH (or DoT) are fine.
> Having said that, there are many people with the time and means to attend a caucus (as you would define it), still don't attend a political caucus. Why is that? I'll tell you: because they don't care about caucusing and therefore the trade-off for them (as minuscule as it is) is too big.

I'm going to copy and paste something I wrote earlier, because this response still doesn't address my actual concern:

I actually don't mind the additional barrier that caucuses create that deter the people that don't care that much. If two people are equally able to attend a caucus, and the activation energy of the caucus filters out the one that doesn't care that much, that seems good to me.

But I really very much do mind the additional barrier that caucuses create for the people that are not able to attend them due to their circumstances. If two people care equally, but one doesn't attend because they would lose their job or need to earn enough money for dinner—then I have a massive problem.

---

To reiterate my point: I am genuinely unconcerned even slightly about those you address in this post. My concern is still entirely unaddressed, except for being dismissed as not a problem or shifted to the alternate concern about people who can attend but choose not to.
The shape of a "V" is a fault.
Ah, the other definition of elevation. I'm not really sure.
> Are they just typical cases of starting out idealistic, getting investment due to rapid growth despite no solid path to profitability, later frantically realizing it's totally financially unsustainable, and then doing a complete 180 to satisfy investors / not have to shutter the company?

Yes.
Someone should run a service where they have a chatbot pretend to be a terrorist on every chat app on every country and if the police reacts it means messages are being intercepted, like a status page of how much communication is being tracked.
If you enjoy Mark Twain, the John Greenman readings (https://librivox.org/reader/107) are fantastic.
Working from Home During Lockdown
Opportunity cost. Hacker News has some of the best developers in the world reading it. $100-500 / hourly rates. Why would they spend their time building & maintaining something when they could pay $140 / year for a top tier, privacy-focused analytics product like Fathom, where both founders work full time on it?

Then you have redundancy of data. How are they backing up historical data? Are they running with failovers? How will their analytics do in the event that they get a hug of death from Hacker News or Reddit? There are so many factors to consider.

I don't think we should discourage people from rolling their own if they enjoy it. Heck, I've built things that existed. That's how we get better. I'm just sharing why a lot of developers won't roll their own.
To be fair, the line works much better than "is probably noise".
Management via Worry and Crisis
>However, there's still no concrete proof that government has backdoor access to it, so if they do, they're being very careful about it.

Sadly I feel like that is a very real possibility for any software / hardware produced in any significantly non free country.

It can happen in other countries, but the likelihood of you hearing about it seems much much higher.

It's a sad situation as I don't like the idea of being suspicious by default of other developers / products simply because their country of origin, but I have trouble avoiding the obvious fact that even a well meaning developer / company based in those countries would / could easily be pressured into introducing some sort of access (doesn't matter how) and it's simply unlikely we'd know.
Show HN: GitHub Actions Ranking
And much of Canada too.
There are no public caches with HTTPS, but there are still private browser and CDN caches to contend with.

To ensure your origin server is hit on subsequent HTTPS requests, you would still need to configure response headers for cache validation [1] to be

Cache-Control: no-cache

instead of

Cache-Control: private

[1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Ca...
> I know a real estate company that distributes its app to its customers that way.

That's insane. Their brand must be in the toilet. This guy has a "niche" product that is probably only of interest to a few geeks. A real estate company, on the other hand, has a brand that it needs to protect and project.

Also, I'll bet they will get to interact with the account fraud department, sooner or later.
> Put it up on Google Code, Rubyforge or something similar. Haunt the IRC channels..

I guess we'd be looking for "something similar" these days. Sad that there is so little competition in that space now (all github)...
I love this quote at the end:

“ Succeeding, like flying, is throwing yourself to the ground and missing.”

Cool article and definitely as someone else mentioned, very similar to a locker room pep talk.
Quasars, pulsars, and the Cosmic Microwave Background all started as unexplainable experimental data: I know the most likely explaination is the mundane one, but what if it is not?
It also is infinitely more clear and simple to understand when you correctly realize that "F equals M times A" instead. I assume this was just an accidental transposition and you're not actually a crackpot. :)
I really enjoy the forest preserve. Love biking the north branch trail. Especially nice how easy it is to get to it by going up Milwaukee.
It definitely also helps that Apple has been churning out laptops with heaps of major issues. In recent years they've had issues with their keyboards, screens, and audio hardware. Plus they don't do any board-level repair or allow anyone else to, so if you're stuck with a dead mainboard outside of the warranty period the solution is basically "say goodbye to your data and buy a new laptop."
YouTuber creates fake Nirvana song using artificial intelligence
Jitsi worked fine for me every time.
Setting aside for a moment whether DACA is 'good' or not, this seems like a bit of a strange decision to me. If rescinding DACA via memorandum was unlawful as a violation of the APA, why was implementing it by memorandum lawful?

I haven't yet read the entire majority opinion, and maybe it will change my mind, but right now I tend to agree with Thomas:

> Perhaps even more unfortunately, the majority’s holding creates perverse incentives, particularly for outgoing administrations. Under the auspices of today’s decision, administrations can bind their successors by unlawfully adopting significant legal changes through Executive Branch agency memoranda. Even if the agency lacked authority to effectuate the changes, the changes cannot be undone by the same agency in a successor administration unless the successor provides sufficient policy justifications to the satisfaction of this Court. In other words, the majority erroneously holds that the agency is not only permitted, but required, to continue administering unlawful programs that it inherited from a previous administration. I respect-fully dissent in part.
Yep. And ham radio is both an interesting hobby in its own right, and one place where you can build, experiment with, and learn about all sorts of electrical and electronic concepts. I can't recommend highly enough getting a Technician class ham license (the test is super easy with a little bit of study and only costs something like $15.00), a cheap dual band transceiver (I use a Baofeng HT), an RTL-SDR "dongle", and starting to explore the world of radio.
Relevant Wikipedia entry:
https://en.wikipedia.org/wiki/Postmodern_literature
yes, but those options almost invariably result in having a significantly less income. Believe me, I am working hard to make the location/salary arbitrage work, but employers are not stupid. The only way to "guarantee" it is to work for yourself, but if you leave the high-cost-of-living area, your network gets drastically smaller and you risk losing work.
>What about your ISPs employees? Do you trust a sysadmin pulling 40-50k a year (or less) to not sell your DNS resolver data?

Yes. What use do you have for that data? Especially if it's only one user. There is not much that you can do.
It's an example of how what matters to people in the HN crowd is not necessarily what matters to the target audience of things that crowd is aware of. Most people also don't care about banner ads, auto-playing videos, and a long list of very legitimate annoyances. I don't know how people read with so many widgets bouncing around the modern web. They really do seem to not notice or don't seem bothered.
Implausible undeniability, a brilliant way to plant the seeds of uncertainty. For the people who have enough reasons to be concerned about intercepted communications, the ones who were the core reason for the blocking (like activists) this can't sit well.
Using x and y to track individuals is still using x to track individuals.

> when the stated purpose of header is to create a new tracking identifier that accomplishes the same thing as a personally identifying identifier when you combine it with the other data that Google already tracks

This is not stated anywhere except by you. The stated purpose of the identifier is to track analytics around chrome experiments, and only that.

The tuple (IPv4 Address, User-Agent) is already unique for almost all, so why go to all the effort?
How Much Should You Pay Your Engineers to Ensure They Stick Around?
One thing I'm curious about is what they do to try to stop you from just ripping out the obfuscated token generation library and setting up a harness to run the whole thing in https://www.unicorn-engine.org/ or something. Like presumably they don't compile their whole app with obfuscation and it's just some library that's linked in with some kind of stable-ish API contract with the rest of the app. I wouldn't be surprised if they do interesting things to try and stop you from ripping it out and it'd be cool to learn what those are.
A blood type test is easier, faster and cheaper for a hospital to do than a genetic sequencing.
Those famous cases are the exception that proves the rule.
SledgeConf Request for Talks and Themes Guide
Manga guide to electricity is a cute read!
The first corona patient is always going to be expensive. We had no testing infrastructure or really any best practices. We were unprepared in every way imaginable. Nowadays it doesn't have to be that way at all (and in fact it isn't that way). Watch videos of Korean drive through testing sites.