skysight-inc/HackerNews huggingface dataset:
Our country was founded with gun rights, and 100 years ago gun ownership was nearly unrestricted. Our country is unique in the fact that we have a constitutional right to arms - most don't.

At every step, law-abiding gun owners have given up rights and gotten nothing in return.

The great irony, to me, is that almost all of the "successful" gun/weapon control campaigns have been rooted in nearly blatant racism. Yet repealing those laws born of racism isn't something the left is willing to entertain.
Stay on brand, I guess
A billion dollars? That's a lot larger than what I've seen before -- $15 million according to http://nomorecopmoney.com/
Which one, and when?

Edit: OK, I've turned on "Show dead" and there it is. My guess is that it was DOA. Lots of submissions are DOA, and the reasons vary. You're best to follow the advice in the Guidelines[0] and email the mods.

And it also appears that your question is answered in the FAQ[1]:

"Why can't I post a comment to a thread?

"Threads are closed to new comments after two weeks, or if the submission has been killed by software, moderators, or user flags."

[0] https://news.ycombinator.com/newsguidelines.html

[1] https://news.ycombinator.com/newsfaq.html
The calculation isn’t that simple. It should include the elasticity of sales versus warranty period. For example, if few customers care about warranty periods larger than 3 years, but all customers still would claim a new drive if their drive broke after 3 years, there may be more money in offering 3 years of warranty, even if that means losing some customers.
FinFisher has "drive by infection" packages for sale called FinFly that require traffic injection, according to their brochure. How exactly those work today, i do not know. For example: until 2011 they used a bug in the self update code of iTunes. Having a network level man in the middle can benefit many complex exploit chains.
The street value is the only value they could possibly quote with some accuracy, it is not as though Cocaine is a listed wholesale commodity. But I think if you discount by 50% or so you'll be pretty close which is still an immense amount of money for a single shipment. 14.5 Million TEU / year. How big a fraction of those are drug decoys?
Yes, I only addressed the part I agreed with. I'm not the author or trying to defend the entire article, just saying that I strongly agree with entrenched technologies being entrenched for very weak reasons. Do I think relational databases have no merit? IDK, probably not, though I haven't chosen to use one in a very long time.
> 1 is that there are extremely few cases of QI for teachers, QI is used primarily by police officers

To the extent that's true, it's because people don't sue teachers personally as a way of getting some largely symbolic measure of justice for things that are actually crimes but where public prosecutors won't prosecute, because teachers don't benefit from the same working relationship with prosecutors that police have.

> 2 is that the unions don't back teachers that come up on QI charges

There are no such things as QI charges, and unions do, in fact, back teachers sued for discretionary acts, the space where QI applies. Which is why education groups have raised concerns about the pressure to end QI.
Whiteboard Fox – a simple online whiteboard
Damn, too bad it requires Catalina. I've still been hanging on to Mavericks for the 32-bit app support.
> Not sure if you're familiar with how these major investigative articles are written, but something this big can take months to put together.

The article was supposed to drop a couple weeks ago, the same week Scott took down his blog (if I remember correctly).

> Scott had his panicked meltdown the second this guy started asking questions, which was probably just the beginning of the investigation.

Pretty sure that's false.

> You think the outfit that took down Weinstein cares about some SV tantrums?

Taking down Weinstein was a noble endeavor. Taking down Scott is not. If you think the concern is just limited to SV, you are not reading the room.
I love this thing. It only seems to work over DisplayPort cables for me. HDMI doesn't work. I'm using a MBP mid-2014.

Saved me from buying a new monitor or something silly like getting an iMac. Seriously weird why they don't just support DDD/CI natively.
Hey HN! I Director of Product for Teleport, and that does include CLI and YAML experience. This is a bumper release, with a bunch of fixes https://github.com/gravitational/teleport/releases/tag/v4.3.... . Even for OpenSSH users using Teleport in Recording Proxy mode.

As always I love some HN comments. While you do need a running proxy. You can use Teleport without ever having to use the UI.

Here to answer any questions.
Even with typed driven development you still want unit tests in the form of property based tests. Also a nice way to resolve the 10-50 lines issue is to follow the Arrange, Act, Assert pattern where you could look at the second block to see the actions. Move as much of the Arrange section into a setup and it should be a bit clearer :)
The root of the problem (and this isn't unique to US-style democracy) is that any body that has to deal with re-election every few years is going to focus more on things that get them re-elected, not necessarily things that are good or sustainable for the state as a whole. That's just human nature, and I don't think there's a way to fix that problem without fundamentally changing how with think of elections and terms in office, and I'm not sure what that would look like.

One thing that makes SCOTUS interesting is that they have no enforcement mechanism. It's mainly only tradition and respect for the institution that causes people to follow Supreme Court rulings. If the executive branch suddenly decided to do whatever it wanted, as long as they had support within their own ranks, including the military, there'd be no one to stop them.

On the flip side, this means that SCOTUS has a huge incentive to do their best to figure out what the actual right thing is, and rule that way. Because if too many people think SCOTUS is a shady group of individuals whose rulings are arbitrary and don't deserve respect, that's it for their power. And that's why even when I believe one of their rulings to be counter to my values, I can usually understand why they came to the decision they made, and at least respect the process.
This is a super politicized issue, but my understanding is that the evidence that they're better is actually pretty good. Here's a fairly comprehensive set of studies by Stanford:

https://credo.stanford.edu/studies/charter-school-studies

You do want to read carefully, because Charter schools are often mixed by 'online' and 'brick and mortar'. When you aggregate these two, Charter schools as a group tend to match or underperform traditional public schools. But this is primarily because online charter schools do substantially worse. When you disaggregate the brick-and-mortar charters, they usually overperform traditional public schools, though not totally uniformly. And these studies do try to do matched control of students, to account for that selection effect.
Flagged, dead. See submission history.
Hetzner Cloud Loadbalancer (Beta)
Indian Reservations still have to abide by Federal Law (which the ruling today affirmed) and selling of 'drugs' is illegal at the Federal level. They can use them in a religious service, but they can't sell them.
> I don't support trying to redress ills from over a century ago

That isn't what this decision is doing. This decision is pointing out that the current state of the law is not what the State of Oklahoma claims to think it was. (But even that claim is dubious since, as the Court's opinion notes, Oklahoma admitted more than 30 years ago that it was improperly taking jurisdiction over cases that should have been tried in Federal courts.) It's not saying "we should give eastern Oklahoma back to the Creeks". It's saying "eastern Oklahoma, according to current law, is a Creek reservation". And it gives plenty of examples of how this fact has been implicitly recognized for quite a while.

The decision also does not affect anything involving non-Indians on the land in question. The city of Tulsa doesn't have to move. Nobody has to leave their homes. No business arrangements have to change. All it does is explicitly recognize that a certain class of criminal cases need to be tried in Federal courts instead of Oklahoma state courts.
That's a strange way of framing things. Anyways, here's some actual evidence:

https://credo.stanford.edu/studies/charter-school-studies

Be sure to read it carefully, and disaggregate the online charter schools from the brick and mortar.
1. Use shift+click.
> It's crazy to me that in 2020, there isn't comprehensive, mandatory Federal tracking of police-involved shootings.

This may come as a surprise to you, but that would be unconstitutional. The constitution limits what the federal government can do, and thus, there is no provision for what you're proposing. Unless of course, you mean an amendment, and that ipso facto requires approval of 3/4 of the states.
India has similar systems as well.

One 'neat' tweak that the Indians take is the publication of the scores. You find out how you did because your name and score are printed in the newspaper, along with everyone else's.

So all the gossipy aunties and your folk's friends know your score and you know the scores of everyone else in school.

The social pressure to do well is insane. Your score reflects on your family, not just you.
>And a torture chamber in the port because the "encrypted chat" everyone was using was not encrypted anymore?

The containers were located in a rural area. Read the article.
What are you talking about? Education budgets are almost comically prone to budget cuts, it's one of the most contentious facets of government spending (at least in the U.S.)
The irony of this being downvoted...
That happened to me as well here in AZ. There is a popular local cookie place that we wanted to support. Ordered a dozen cookies from their website thinking it would put more money in their pocket vs ordering from DoorDash. However, the entire delivery process was DoorDash done all via SMS. It was odd.
I recently switched from the new to the old UI simply because the new UI became very laggy after scrolling for some time, sometimes taking a second to react to clicks.
Julia has a much larger ecosystem in terms of things like numerical linear algebra, scientific computing, and differentiable programming. How do you use block banded Jacobians inside of ODE solvers? Python's ML ecosystems just barely got non-stiff methods, so advanced accelerations are fairly far away, whereas these are things that have worked with Julia's ML solvers for a long time now.
The way I used to value my free time was by figuring out how many hours I would have to work to pay for something.

A two hour movie would be one hour of work. Probably worth it.

A trip to Disneyland was about 10 hours of work, but if I got there when the park opened I could do 16 hours of entertainment, so it was probably worth it.

Paying someone to mow the lawn was a few hours of work, but I could mow the lawn myself in an hour. So not worth it.

And so on.
Adverse possession is a specific thing in some jurisdictions where if you visibly and openly occupy a piece of land for long enough without a challenge from the original owner, it becomes your property and the original owner loses it.
https://en.m.wikipedia.org/wiki/Adverse_possession
According to their whitelist[1], cdnjs.com, dropbox.com, glowing-bear.org, minigames.mail.ru, report-uri.io, scotthelme.co.uk, securityheaders.io, stefansundin.github.io, udacity.com, yadi.sk, and yourvotematters.co.uk are known to have issues. For as long as I can remeber, you can also whitelist sites yourself.

[1]https://git.synz.io/Synzvato/decentraleyes/blob/b3931febc234...
If a cargo ship full of Porsches sunk, I would expect a news story about it to quote the total MSRP value of the cars lost, not the wholesale cost. And certainly not the wholesale trading value of the iron ore that Porsches come from.
> Teleport solves SSH'ing in to a ton of machines on private networks from outside the private network.

SSH with a bastion (jump) system and ControlMaster/ControlPersist settings is generally how SSH handles this.

> Teleport handles the auth at its entry point, so you don't need a keypair for every node in your cloud. Just one for Teleport.

That's interesting. I'm initially skeptical of how that shifts the security responsibilities based on that description, but don't know enough about it to level any specific criticisms, if any are warranted.
My hands are pretty big, but I can only do that on non-full-sized keyboards. And to make matters worse I need an ergonomic split keyboard due to issues with my hands
So LinkedIn has a lot of anti-scraping points in their terms of use. How are you dealing with that?
On a $300/mo server from Hetzner it can run git, CI, image registry, Mattermost, email, wiki, Discourse, Mumble, and host a bunch of apps (dev, stage, prod) without breaking a sweat. I set up the filesystem so it stores all server state for all apps and stuff in a single directory tree (thanks to Docker you can mount whatever source directories you want into a container at any path).

A continuous rsync job in a loop makes sure that that directory tree is always synchronized onto another $20/mo VPS elsewhere. (Failures on that backup machine/script are reported realtime via webhooks back into Mattermost.)

It's a really robust system (for a single machine) and thanks to everything being containerized, can be easily replicated from the backup host back onto a new machine in under an hour or so in the event of crash/disaster.

For 90% of small businesses, even the $300/mo server is significant overprovisioning/overkill.
I'm a bit more than half your age and I have the exact same questions. Most of Teleport's features seem to be things that e.g. sudo/doas, PAM, etc. have already solved, just with a prettier interface. And don't get me wrong, some of those features do look interesting (like the full replay logs of an SSH session), but most of them reek of "if it ain't broke we're gonna fix it anyway".
I agree it's dead, although it doesn't say "[Flagged]".

And yes, submission history noted.
If you need just a bit more functionality, I find Paint.NET to be quite good while not too complex.
Interesting! But you see all of the benefits of syntax highlighting and real-time linting is about being steered towards a working code in a gradual and unmotivated way, prior to actually intending to check whether the code works... Although I'm not sure how critical this really is. My personal argument for them might really `only` be habit.
This can only get you so far. We invested a lot time into getting more from system access event using eBPF to take n unstructured SSH session and outputs a stream of structured events. https://gravitational.com/blog/enhanced-session-recording/
I don't think that's a good analogy because having a pilot or not is not optional.

A better analogy would be extra baggage. I appreciate being able to save $25-$50 in domestic flights by not bringing an extra bag.
It is interesting that to remain competitive in benchmarks, SSD vendors have to sell you an incredibly complicated software system alongside their flash chips soldered to a circuit board. They can't fix your filesystem, because you won't switch (and why pay them when your OS comes with one for free). They can't fix your database, because you won't switch (you already pay Amazon a million dollars a month for it). So they have to implement all the complicated parts of a database or filesystem, then try to understand the stream of events that real databases and real filesystems send it, and then restructure them to win the benchmark. All of this with no source code and probably no real test suite, and it all ends up being slower than a database that could just write to the flash chips directly.

I am also "excited" when I think about how the SSD shards blocks across flash chips and adds erasure codes, then people put the SSDs in RAID to shard blocks across SSDs and add erasure codes, then people put a filesystem on top of that that shards blocks across arrays and adds erasure codes, then put an application on top of that that writes to 3 replicas and writes erasure codes to 2 more. Now your "hello world" text file uses 8 gigabytes of storage, but at least you only lose it if there's one bug in the SSD controller, your RAID software, your filesystem, or your application. Or a tornado hits the SSD. Oh well.

HN often contains articles like "abstraction is bad", but even their contrived examples aren't this scary. I'm still pleasantly surprised when I log into my computer in the morning and still have a .bashrc.
Symmetric Shadowcasting
Wikimedia is hosting some now to help alleviate this: https://news.ycombinator.com/item?id=23776786
> Is Congress empowered to clarify the meaning of its own past statements?

I don't think so. The statute is the actual text that is passed by both houses of Congress and signed by the President. Congress does not have the power to "interpret". It only has the power to pass a new statute, which can only be in effect as of the date of its passage (when the President signs it). Anything Congress says or does that does not follow the process given in the Constitution for passing a law is not a law and does not have the force of law.
Right. There needs to be less centralization, not more. Perhaps Chicago should be it's own state, or at least an autonomous district.
I knew this and the first thing i said was “off topic”, but i do think that quoting the street value exaggerates the effects of the bust and the pattern of communication distorting the reality in public announcements is worthy of debate.

And yes, you can distort reality by telling the truth when you choose irrelevant facts for your main message. Lies, damn lies, and statistics.
We did several benchmarks back in the day and it definitely depends on the size of your migrations + fixtures that you need in every test. Performance increases were simply huge for us, despite the serial execution of our tests in our legacy backends.

A new database scaffolded from a predefined template becomes available in several milliseconds or few seconds VS. truncating, migrating up and seeding (fixtures) would always take several seconds. We initially experimented with recreating these test-databases directly via sql dumps, then binary dumps until we finally realized that PostgreSQL templates are the best option in these testing scenarios.

Sorry, I've got no benchmarks to share at this time.
The idea of observability hooks are a nice feature.

Nice job on this, looks fully featured, would like to see a Ruby SDK though
Germany hassome weired laws that prohibit the use of "hacker tools". How can there be a German company creating these tools?
It's fun to take your favorite Twitter handle and cut/paste 4 or 5 tweets from there into this and see the emotion portrayed.
This is already a solved problem and ssh provides the solution. If you have a fleet of machines, you better be using config management to manage them. And you should be pushing out the public key that's on the device you use for remote access to all the machines using that config management. There isnt "a keypair for every node".

And if you're talking about managing host keys, this is solved with host certificates signed by a local CA, the public key of which you put in your known-hosts file.

This "short pitch" says there's a problem where none exists.
I get the sense that most HN commenters are against having police surveil this kind of event in the U.S.

Could someone share the reasons for this strong opposition?

Personally, I can imagine valid reasons for and against conducting such surveillance. But given how many people feel otherwise, I wonder if I'm missing something.
> This is a bizarre claim.

https://techcrunch.com/2020/06/05/alexis-ohanian-steps-down-...

https://www.nytimes.com/2019/12/17/us/california-boardroom-g...

This isn't new news. Diversity hiring and promotion is all over, alongside the recent BLM relevance.
Just a thought. Instead of replacing the f keys and escape, they should have just replaced the whole area under the keyboard where the trackpad is with a touch screen. It is a win-win. Imagine a huge touch interface where we already expect one, with haptic feedback AND visual feedback.
Precisely. I am curious as to what the proverbial 'i's might be in this case.
Ask HN: Are there any good programming books to listen to?
I'm a fairly basic programmer, so looking for conceptual CS ideas that would help me better understand the web/computers.

Are there any good titles that don't need me to read code so I can listen to them on audible?
Congress controls the reservation system. It's not real sovereignty. That's one of many reasons why there is such large debate over accepting federal recognition among Kanaka specifically. At that point the federal government controls the land, distributes it, decides who is and is not eligible to use the land. The government literally stole my friend's house just by revising the definition of "hawaiian" and telling her she was not eligible.
I believe what they were referring to was the death of news subscription model
That's the category of bug (use after free), but that's not the root cause. The root cause would be found from an analysis of the kernel design to understand why it was possible to get into this scenario in the first place. Uncoordinated mechanisms accessing the same data structure (like you mention) might be the root cause, but it didn't feel like this article explored it (not that they need to, since P0 is focused on the exploit itself - I'm just really curious what 'went wrong' with respect to the architecture here).
I'm probably going to get downvoted for this, but yes - that's spot on. It's exactly that kind of attitude I've seen far too often in the culture of well-paid tech workers.

Their lives are all about optimization of time resources / time management, and everyone should bow to their needs - if it results in them shaving off some minutes here and there.

After all, they're making $300k/year working on important products, so it's only natural that every corner that could be cut, should be cut - even if it means driving people out of business.

When confronted with the logic, they regurgitate the same "But you see, my time is worth $xx, 24/7/365 - so 30 mins saved on task x is a net profit for me" (even though, in fact, they would not be working during those 30 minutes)
From my perspective, I would simply restate it as such:

"It's quite a damning indictment of US-style democracy that people distrust a larger pool of democratically elected officials over a small cabal of unelected lifetime appointees without any meaningful oversight"

You're framing it like Congress is elected by the people and are thus more worthy of their trust and the fact that doesn't happen is the damning part. But that's one-sided.

In reality there's a TON of special interests driving who gets in front of the population to even be elected to Congress and then what the agenda is for them after being elected. That erodes the public's trust, not to mention all the Congressional scandals over the years and the cutthroat tactics politicians will do to simply get re-elected.

So I see the same conclusion as you but in reverse.
Couldn’t the browser extensions modify response headers and HTML attributes to avoid CSP and SRI issues?
Discrimination in lending exists, but at least with PPP loans, there was no in-person consultation. For many businesses it was just an online application.

It probably does hold true though that white businesspeople may have better relationships with their bankers, resulting in faster loan processing.
Rubocop-GraphQL
Why do you want Windows when you have DOS? ;)
This is a very good recreation. Pleased to see it even replicates the hidden zoom (below 8x). I also spot a good inaccuracy: the undo doesn't appear limited to 3 :-)