skysight-inc/HackerNews huggingface dataset:
Are you talking about a fully internal site, with not even indirect Internet access? For those kinds of airgapped applications, you should maintain your own CA infrastructure, and update all clients/browsers to trust its certificates.

For the more common scenario of internal sites/services which are not accessible from the public Internet, but not fully isolated from it either:

You don't need the internal site exposed to the Internet. If you use DNS-01 ACME challenge, you just need to be able to inject TXT records into your DNS. Some DNS providers have a REST API which can make this easier.

Another option – to use HTTP-01 ACME challenge, you do need the internal host name to be publicly accessible over HTTP, but that doesn't mean the real internal service has to be. You could simply have your load balancer/DNS set up so external traffic to STAR.internal.example.com:80 gets sent to certservice.example.com which serves up the HTTP-01 challenge for that name. Whereas, internal users going to STAR.internal.mycompany.com talk to the real internal service. (There are various ways to implement this – split horizon DNS, some places have separate external and internal load balancers that can be configured differently, etc)

Yet another option is to use ACME with wildcard certs (which needs DNS-01 challenge). Get a cert via ACME for STAR.internal.medallia.com and then all internal services use that. That is potentially less secure, in that lots of internal services may all end up using the same private key. One approach is that the public wildcard cert is on a load balancer, and then that load balancer talks to internal services – end-to-end TLS can be provided by an internal CA, and you have to put the internal CA cert in the trust store of your various components, but at least you don't have the added hassle of having to put it in your internal user's browser/OS trust stores.

(In above, for STAR read an asterisk – HN wants to interpret asterisks as formatting and I don't know how to escape them.)
How much more aerodynamic is your car now versus then?
not always
sometimes users want to know that you have something new
Google already tried and sort of failed/
From further down the comments: "robber baron, slaver, and plunderer"

Calling people by those things in a work environment might not be the best strategy to demonstrate process irregularities.
If you still think in 2020 after all the scandals about political manipulation, psychological experiments and dark patterns that Facebook's helping people stay connected you are an incredibly naive person.

You are so uninformed that it will take you days of continuous research even to form a cogent opinion about this topic.
Good, companies shouldn't employ people who deliberately smear and sabotage them.
Switched to a safety razor (Also called a Double Edge) after Mach3s had been out for awhile and they started jacking up the price. That must have been 2005ish and I've not really used anything else since. For quality of shave there is no comparison. Badger & Blade forum had a good process at the time where you started with a certain blade and worked up the sharpness ladder as your skin toughened up and you found the blade/razor combo that worked best for you. I'm a Personna Prep and Merkur 34C guy myself.

Shaving with a double edge instead of using a disposable is comparable to preparing your own dinner rather than going to McDonald's. It's a skill, it takes time, it's far for economical, there's a ritual to it, and it's enjoyable. It's also a uniquely positive masculine thing (and I think that that does matter) and one day I can pass the razor to my son or grandson.

> Merkur 5C
>you have to safely get a certificate across the air gap to the internal network.

you can't trust a server on the internal network as root certificate trust? sounds like a scary situation.
> is consistently shared more than other content

That is a surprise. Is there data that this has also been the case before the increased efforts to moderate content?

All criticism aside, I think Facebook does a better job at providing a platform for users. Yes, I don't like a lot of content either, but if I compare it to Twitter, I think FB did much better.
Hah - except there were overestimates at every level, like where teams were confident of there 50% growth per quarter for the next 2 years, and that never materialised. Know the right people, and that unused capacity can be reallocated to you in a few hours.

Capacity planning done like that is mostly a waste of time...
you do not need to post private information in this Google Sheet
these are just public notifications for the site
you are not hiding your blog post, are you :)
But why are the elderly more susceptible? Shouldn't the probability of exposure by higher, the older you get? Wasn't that the reason the Spanish flu killed more younger people?
The point he was making was the thanks obama doesnt make cents. Thank bush for the economic catastrophe for obama to inherit.
Quite a shallow post that essentially boils down to:

"We should not be this hard with China, let's keep doing what we were doing in the past."

Your post history also looks very interesting, for anyone investigating state-actor social nets.
Comments moved to https://news.ycombinator.com/item?id=24077339.
World’s dilemma – How to help Lebanon without empowering its shady rulers?
thanks, fix it now, please try again https://proven.ly/demo-notify.html
It depends where in the UK you are driving, I have to wash the car after every major journey > 1hr long because its covered in dead insects and the red, I guess blood, staining the paint. I would say there has been more sightings of wildlife and more insects this year because of lockdown, more hedgehogs seen walking on the roads, more deer, rabbits and plenty of insects especially at night at the moment. So I normally walk my dog with a headtorch at night as its cooler for him to run around off the lead but the insects getting attracted to my headtorch this year is a stupid amount to the point I've stopped taking him out at night. Germany may be onto something by reducing the light sources. Where I live we do have LED street lamps which cast a very definite circle of light on the road, but there is no "side leakage" of light so its darker walking between street lamps. You also dont get any orange glow into your house or bedroom window like the old style street lamps used to do which can keep you awake especially when stressed. The number of small birds nesting in the area has also gone up over the last two years but its nice watching them feeding on insects crawling up and down plants like rose bushes, or hanging onto the side of brick houses getting the odd bug.
According to this, the sleep is very short indeed, done only while gaining altitude, and only done with one side of the brain at a time!

https://www.audubon.org/news/scientists-finally-have-evidenc...
This comment breaks the site guidelines. We ban accounts that do this. Please review the rules and stick to them when posting here. Note this one:

"Please don't post insinuations about astroturfing, shilling, brigading, foreign agents and the like. It degrades discussion and is usually mistaken. If you're worried about abuse, email hn@ycombinator.com and we'll look at the data."

https://news.ycombinator.com/newsguidelines.html

This community is vastly more diverse than the people making up accusations of astroturfing imagine that it is. If you don't have evidence, you can't sling such insinuations around. Someone advocating for a view you disagree with does not remotely clear the bar for evidence of astroturfing or foreign spies.

If you want more explanation, you'll find years' worth at these links:

https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme...

https://hn.algolia.com/?sort=byDate&type=comment&dateRange=a...
An airgapped network can include its own internal CA, and all the airgapped clients can have that internal CA's certificate injected into their trust stores, and all the services on the airgapped network can automatically request certificates from the internal CA – which can even be done using the same protocol which Let's Encrypt uses, ACME, just running it over a private airgapped network instead of over the public Internet.
to be honest, I will not start talking about the so called firewall of America as long as extreme examples like Chinese firewalls exist. Everything pales in comparison. you want to object to this , ok fine but there is a monster size censorship of Chinese firewalls that should consume 90% of any censorship and firewall discussion
I checked, until it is not blocked even by a adblocker
Blacklisting some competitor URL's is discriminatory against smaller competitors or people's on-site solutions at private URLs
No idea where that figure is from, but Google photos must have about 100 to 200 gb of photos and videos I've taken, plus the meta data - and I am not an avid photographer.

Fb will then have another chunk, in the UK they used to also have an auto photo backup service at one point but I don't think I used it for long.

Assuming the meta data they have on me won't be that big, but who knows - all my search and other data in the last 13 years will come to a fair size - but would guess that would be more 10s of gb - total finger in the air.
That's how I like to describe Trump. He's not willfully destroying the fabric of our society, he's just prone to process irregularities.
It's not just the hosting, it's decoupled from where the project is hosted. Some packages do just use an arbitrary groupId. The reversed-domain-name convention makes sure you'll never get two different groups claiming the same name, and aligns with the convention for how code is namespaced in Java, but it is ultimately only a convention.
To give an example: I once considered entering the market of doctor appointment software. The existing players in my country all have bad UX, and it seemed relatively easy to build a superior product.

But then on researching it deeper I discovered the basic problem with the market is that doctors won’t pay enough on a monthly basis for a high-touch sales process and they still mostly insist on one or more personal visits before buying the product. So, you basically lose money on every customer for the first year or two, meaning it is really hard to build a sustainable business. I got access to the financials of two of the existing players, and they were not good. They did the minimum investment into the product they could get away with because the market wouldn’t allow for more than that.
I get the sense over the last year that the wheels have fully come off the bus there
How so? The point is that his behavior is not the best way to drive change.

If other people are behaving in a way that better drives change, how would the above offend them?
This design was also radically unrealistic, due to the shape in particular. Fighting your own reentry decelerator on your way up is a ridiculously ineffective way to reach space, for one. Spike engines are also suboptimal in many ways, the cost isn't exactly the reason they aren't used.
Your comment resonated with this quote:

It is the individual who is not interested in his fellow men who has the greatest difficulties in life and provides the greatest injury to others. It is from among such individuals that all human failures spring.

Dale Carnegie, How to Win Friends and Influence People
Ask HN: How to think about retention when the goal is churn?
I'm running a medical device startup. We make a treatment for depression.
A discussion that often comes up is how we should think about and present our retention numbers. Since, ultimately our goal is to make our users recover from depression, and churn.
Im looking for articles or other resources discussing growth and retention for these types of businesses.
Dating apps have the same problem to some extent I guess.

This is a great article about growth, but I feel it doesn't really apply to our case: https://www.ycombinator.com/library/59-how-to-set-up-hire-and-scale-a-growth-strategy-and-team
The same way as I pair it with my smartphone. Put it in paring mode using the button (https://www.jabra.com/supportpages/jabra-evolve-75/7599-832-...) and then in windows go to add bluetooth device.
Note that H264 is not as efficient as VP9, so you may end up using more bandwidth or have lower quality because of this.
There's non-trivial community testing that hasn't found people with Covid-19 in NZ. So either (a) every case in NZ is asymptomatic, (b) there are only a few cases that somehow defy the exponential growth we saw at the start of lockdown, or (c) there are no cases in NZ. I find the lowest probability explanation to be that there are no cases in NZ.

So what about the three cases of travellers testing positive overseas? The one in South Korea went via Singapore and it's hypothesized that the traveller caught Covid-19 there. There has been testing of the places in NZ where the traveller went before they left (e.g., Queenstown and Milford), so far with no positives found. One tested positive in Australia but was never "in" New Zealand -- her flight was LA-Auckland-Sydney. And in the final case, the woman had been ill in March after returning from overseas and it's thought she hasn't been infectious. They've all been contact-traced and testing came back negative.
I would imagine this is going to be struck down by a court not because he doesn't have the power to do this, but because he'll have failed to adhere to a fair process in coming up with this - the same reason that his DACA decision was over-turned by the supreme court.
I wish they would do something similar for the FBI.
It's not like we stopped vaccine development in the 1970s. The HPV vaccine came out in 2006 and by all evidence so far is very safe.
https://qz.com/1698520/free-speech-experts-school-aoc-on-soc...
If you trust the CPU vendor to not be colluding with your cloud provider, and that the cloud provider hasn't found and exploited a hardware or software vulnerability in the enclave, then a successful remote attestation is a cryptographic proof that you are executing your code unmodified without the cloud provider being able to see either your code or (with careful delivery) your data.

There are additional side channel concerns such as RAM bus sniffing; it looks like the EPYC processors handle that by encrypting all memory accesses. Additional concerns include memory access patterns and power usage monitoring; I don't see these mentioned in any of AMD's SEV whitepapers but they can (with great care) be mitigated in your software.

Disclaimer: I work for Google but nowhere remotely related to this (I know only publicly available information about this product); I happened to do very similar research work 6 years ago in grad school.
A depression diagnosis may mean that your suffering is a clear defect and unreasonable given the circumstances, or it may mean that someone thought access to a therapist could help you cope better with your shitty life.
China has been doing this for a very long time to US companies. I'm not sure what pandora's box is being opened here. They just didn't selectively to two companies, they do it to all of them (other than Tesla who was the exception to the rule).
Read the comment again...
It isn't. And to be frank, this is getting really old quickly. It's always the same predictable marketing text, with slight variations depending on the current circumstances.

It's absolutely not about the user or the customer here. It's about them, and only them.
> you have to compare them both completely. Is there an alternative?

When I was doing this stuff for a telco 10 years ago (comparing before/after for CDR mediation changes), I found it was much faster to dump the two x00M row tables as CSV, sort them, and then use a Perl script to compare on a row by row basis. The join approach taken by the Oracle expert took many hours; my dump-sort-scan took under an hour.
Which books would you recommend to solve the first problem? I’m a CS student, but would love to work with data one day, so I’m looking for some probability/statistics/data science books to read through. I’ve heard great things about Elements of Statisticsl Learning, for example, but I’m not sure whether it’s not too DS oriented, giving poor foundations in statistics and probability.
> Maybe you are consciously trying to avoid locking your project into one database accidentally.

People keep bringing this up, but for applications (not libraries), how many times has this mattered (for FOSS DBs), and how many times has upholding agnosticness required weird hacks or limited something?
Sounds like "too big to fail" all over again.
But it's still small compared to YouTube video content served.

Also, the WebRTC stuff all browser based videoconferencing apps are built on supports peer to peer Comms in most cases, so worst case they could have moved all the users over to that in an overload situation.
I feel like somewhere in the next year or two, Western capitalist economies really need to come up with a sweeping plan to pause everything. Because this is probably not the last major crisis like this we’ll see in our lifetimes (unless we are near the ends of them), and having banks continue to collect on mortgages despite on and off rent freezes across the country is a pretty obvious route to a giant mess.
So instead of an ADC converting an analogue charge level to a 14-bit or 16-bit signal from a "big" capacitor, you instead have a tiny capacitor (or none at all) and collect individual 1-bit signals and accumulate them digitally. Photon counting, in essence.
What does victory mean in the era of mutually assured destruction? I don't see how a shooting war between the US and China could not end in both sides getting nuked.
You must be a brilliant person. You know everything that’s going on at Facebook without working there. You personally know Mark Zuckerberg’s character and you haven’t even met him! Can we find out who this poster is and put him in charge. His ability to figure out what’s going on in a company he doesn’t work for by reading news articles is amazing. /s

In all seriousness, your absolute confidence in your own conclusions is exactly why people are afraid of censorship.
Clearly the results of an election are not always black-and-white, otherwise there wouldn't be contested elections.

"Undermine" is obviously a subjective judgement, not an objective one. Which in turn makes it difficult to legislate "prevent people from using social networks to undermine elections" in an objective way.

And this is now my personal opinion, but legislation that cannot be enforced with some amount of objectivity is a recipe for disaster down the road.
I know not everyone is technical but given YCombinators audience, having it all in a git repository might work.
How is Instagram's Reels not IP theft?

"Good artists copy; great artists steal" - Steve Jobs
There are different types of razors.

Gillette double-edge safety razor blades are about 0.10 USD each. Gillette cartridge razors are about 6 USD each.

The former is "expensive razor handle, cheap blades". The latter is "cheap razor handle, expensive blades".
The more expensive cartridge razors don't provide a superior shave, but are much much safer to use.

A safety razor handle costs as much as a pack of cartridge razor blades.

The keywords to lookup would be "wet shaving" to find out more about the safety razors.
Open up would mean an open fiscal policy, namely allow money to leave the country. Companies and especially individuals can't invest and then pull the money back out of the country very easily.
Good joke, but since we're talking about kids... there is obviously more to Covid-19 heterogeneity than previous exposure to coronaviruses, since very young children are least likely to experience serious illness, but are also least likely to have a lot of exposure to other coronaviruses.
Two decades of pandemic war games failed to account for Donald Trump
Please just ban these people Dan. You are banging your head against the wall arguing w idealogues who don't want to participate just throw stones...
> Analysts with 1-2 years experience in SQL are often writing ETL

This is the essence of Big Data.
But only China believes China's narrative... Just ask any of China's neighbors. Philippines is reversing course of late even though they were trying to get closer to China, for example.
But you don’t have to take my word for it.

https://cloud.google.com/compute/confidential-vm/docs/monito...

https://confidentialcomputing.io
I also use a Muhle R41. I have used this since the beginning and never had any problems with cuts. I did have to experiment with a few soaps find the right one to get more mileage out of the blades though.
One more data point in the long list of data points supporting the idea that Apple should no longer be allowed to run its App Store however they see fit, as they are clearly doing so in an anti-competitive way.
You can't do this here. Please review https://news.ycombinator.com/newsguidelines.html and stick to the rules.

See https://news.ycombinator.com/item?id=24079115 for more.
REBOL Shell Interface
It was similar in Poland, but fortunately not all interesting records were gone, so in fact a lot of the scum got exposed.
As an example of bias, I've recently seen on Facebook a post that instructed the readers to shoot law enforcement people in the face. Not exaggerating, those are the exact words, "shoot him in the face". Facebook told me this is well within the "community standards". Yet for example Zuckerberg personally promised to ban any page that promotes protests against COVID lockdown. So, calling for protesting lockdown - ban, calling for murdering the police - OK. Sounds like a bias.
Age isn't the factor, it's just a proxy for immune system dysfunction brought on by diabetes / metabolic syndrome etc.
Are elderly more susceptible to infection or adverse outcome once infected? In the latter case we still can see worse stats for the elderly.
Wasn't China already doing stuff like this?
Dissing the website which hosts original development in favour of others which are profiting out that is.
Audio from Scratch with Go: Automated Constant-Power Panning
In terms of benefiting the government of China, yes.
Looks really nice and simple to use. Great job.
> But you can't go around attacking people like that.

You can, and sometimes you should.

What looks embarrassing for the person they do this and then act surprised when the people they attacked retaliate, especially if those people are wealthier and / or better connect.
> forcing the US taxpayer to incur serious losses in keeping the company afloat.

That would be a first now would it.
Eh, it's a pretty good propaganda channel
Especially right after Zuckerberg gets grilled in congress for being anticompetitive.

Meanwhile the president threatens to ban facebook's biggest competitor...
1. Wireshark
2. Nmap
...
Gotcha. One of those articles...
The Lindy Effect predicts that programming languages will further survive about
Now this, this is a project we can all get behind. Adding radio with kill-switch and getting PostmarketOS working on this will essentially make this a smartphone replacement to reclaim mobile computing from the duopoly.

Also, N-O-D-E publishes all the requisite files; Essentially making this a 'Build your own smartphone' project and those who don't want to get their hands dirty could order one from the website when available.
Software is generally harder to pin down than other things when it comes to IP theft, but even so there is still a clear distinction between "stealing" a feature and stealing the actual code that enables that feature. China / Chinese companies have been consistently caught doing the latter. They also do the former but that is not what anyone is complaining about.