skysight-inc/HackerNews huggingface dataset:
I'm not sure why they'd benefit from that, but it's interesting Microsoft has been going hard on evangelising Rust.

For once I'm taking a not-conspiratorial line and think it's just all concerned parties wanting fewer bugs in software. But it does lead to an interesting line of thought for Mozilla...
Hence the value of liberal arts. And yet I have spent my whole career feeling behind. The permanent skills didn't seem to serve me that well, or society shifted to deemphasis them over pure transactional technical work
Can an Army of Feral Cats Help Solve New York City’s Rat Problem?
ProtoBuff, Serialization, JSON, etc.
I have been programming for more than 40 years and I have seen many evolutionary and some disruptive changes in technology. While working on a large project for NASA in 1990 we determined and all agreed that data files (containing complex combinations of objects and primitive types) should be both human and machine readable. If they were entirely binary or cleverly condensed to some obscure form, we would have great difficulty detecting and tracing data errors when then occured. To implemenent human and machine readable data files we created a utility that would perform all of the necessary reading and writing including procedures that would read and write all conventional data types, objects with names for each field, delimited lists,
fixed length arrays, necessary but uncommon data formats (such as UTC), and we would add new data types and associated readers and writers when then became necessary. I find it comical that JSON provides the means to read a few delimiters, a few basic data types, identifiers, numbers, strings, etc. I also find it alarming when major players go to great lengths to create intermediate binary representations that are (generally) unreadable by humans that may need to debug their data transfer applications. I categorize this as lazy: we will make it possible to read text enclosed within quotes, but leave it to the user to parse the text within the string. Likewise, java scanner can read an entire line of text as a string, but leave it to the programmer to parse the string to extract structured information. I agree with one readers comments that smart people can make great tools, but also make tools that are unusable by others. C'est la vie. Those that control the machines of technical governance (microsoft, google, oracle, etc.) are not accountable for the quality and usability of their tools. The rest of us are left with the challenge of using the tools.
> BTW, you can download and install games from Steam using official console client [0]. Not sure if will allow to play [all] games, though. I had limited experience with that.

Yeah, SteamCMD can download but usually not run games—my experience is the only games that run are the handful that can run without Steam in general.
This thread is a minefield. Any claims about discrimination on race or gender is going to ignite controversy. Why is it OK to talk about this subject despite the fact that it’s in no way relevant to tech?

Why is this on HN?
10 years in the industry I guess, and the article linked
https://gravitational.com/blog/how-to-ssh-properly/

Signing certificates for hosts and users. Never deal with authorized_keys files ever again.
Take a look at Rossum https://rossum.ai/ - hopefully the highest accuracy out there and as good a momentum in terms of dev community etc. as the big cloud services. (disclaimer: founder here :)
Oxygen Not Included has the same sort of effect for me and my experience with that game has kept me from picking up Factorio. Once you start getting into ONI's automation tools and design optimization; time just ceases to exist.

It remains the first and only game I have ever fully removed from my Steam library (not just uninstalled) after purchase.
How long before there is a major commercially-backed fork of Firefox? As a huge Firefox fan, I'm incredibly dismayed at the priorities expressed in these layoffs, and I know it is gonna bleed through to browser performance and security sooner or later. I don't want to stick around and find out the hard way when it happens.
Show HN: A pytest plugin to notify test results to a Discord channel
I still haven't found a good answer why they do this. "Makes it harder to tell if the current site is legitimate" sounds like an excuse. If you are the perfect target for a phishing attack (= clicks on everything, enters passwords everywhere, has no clue about host names) then you also won't be able to understand what Chrome presents you in the address bar after obfuscation.

My best explanation so far is that the Chrome team doesn't know how to improve their browser anymore so they just make up work to keep the software engineers busy.
Trust in media with a reputation. Trust in journalism to unearth attempts of deceit. Quality journalism and reputation will become more important and powerful than ever
No, that is not true. We know how to produce energy without fossil fuels. All carbon emission can either be completely replaced by such means, or adequately reverted.
If you're willing to entrench yourself deeper into the AWS ecosystem you can go completely keyless and manage access solely through IAM by inventorying your instances in AWS Systems Manager - then you can start SSH sessions right from the AWS CLI itself[1].

[1] https://docs.aws.amazon.com/systems-manager/latest/userguide...
LG holds the remainder of the Palm WebOS assets, and has been doing decent things with them. So there's at least partially a history of them doing this kind of thing. Maybe there's a slight chance they might have an interest.
You sound like you might be emotionally invested. Fact. Period. End of story.
The argument typically is that good encryption causes the call setup time to be too long and costs battery life, but this indeed is an exceptionally dumb flaw.

Unless you know what you’re doing it’s hard to test for though, and if you know what you’re doing you wouldn’t make this kind of mistake.
Go watch "three identical strangers".
I think part of the reason for this inflation involves modern academic faculty rejecting the traditional antiquated assessment-based educational system. In other words, they're of the opinion that "marks don't matter" - what you learn and what you can demonstrate does.

James Paul Gee from Arizona State University put it best when he said:

We take it as completely natural that you would be in an Algebra class for 12 weeks, and then I would give you a test on Algebra …. to see if you learned any Algebra. Let’s say a kid plays Halo on Hard …. and finishes Halo. Would you be tempted to give him a Halo test? No. Not at all. You’d say the game already tested him. So let’s think - Why is it that we’re not tempted to give him a Halo test, but we are tempted to give that Algebra test and use that as a judgement? We’ll its because you actually trust the design and learning of Halo better than you trust the design and learning of that Algebra class.
Have any universities stated how they will handle all of the fees that are tacked on to tuition, such as the parking fees?
What does mozilla spend money on outside of personal costs?

Mozilla had approximately 1000 employees. If they are grossing 450M a year in revenue and 50% of their expenses are personal costs, tht means on average they are spending 225K per employee. for a non profit (even if its a non profit in the tech field and has to compete with tech firms for employees), that seems high. i.e. if one would compare them to Series A or B startups in SV, those would be reasonably high compensation packages (albiet without the stock option upside, but most stock options aren't worth the paper they are printed on, even for series A companies perhaps a bit more likelihood with series B).

Even if one says its 33%, that's still 150K per average employee expense. while that wouldn't result in a great SV salary, its would probably be competitive in most of the world.

just trying to understand where all the money goes?
This almost reads like a parody to me. The author was introduced to alternatives for just about everything they used the tech giant services for, and therefore, living without their services was impossible.

The issue that alternatives are harder to find and use is something that should be solved. Instead of pursuing policies like nationalizing Google into a public service, what if various public agencies tried to operate with free software internally and then exposed their tools to the world with things like public Searx and Peertube instances?
I was always under the impression that the word "frosh" was weird slang for freshmen, not a word considered just as proper for written communication.
I agree with you that Dockerizing everything is a fad. My team migrated off of Docker 4 years ago and couldn't be happier. But if you're keeping long lived SSH sessions alive for weeks on production servers, and expecting to fix things RIGHT NOW by "loggin in, change a couple of lines and restarting," then you have process/methodology issues my friend. Handle that!
I hope universities die. Along with the insurance market, for-profit medicine, the US Petro-Dollar cartel and software patents.

The system is broken. The very existence of Stanford is a symptom of the problem.
Kind of how all games are.

I could sit here and get virtual levels and virtual money... or go raise my actual human fitness level, or go work on my actual business for actual money.

Games are an easy win to feed you nuggets of feeling like you did stuff, but a poor substitute for real life.
I don't think hunting wild fish is sustainable at all, just the same as hunting bison, etc. It's maybe OK as a hobby, but not as mass a industry.

For food, we should be farming fish, in indoor, controlled environments.
Hi, I get why going with an early stage service can feel dangerous Maybe Rossum (https://rossum.ai/) can be a good compromise - a more mature startup with significant portfolio of enterprise customers already and a big momentum, nothing is likely to veer us off the path anymore; our product isn't the cheapest but our customers keep telling us it's the best in class (in the end it's definitely cheaper than trying to build your own).
we use signed certs with authorized principals to manage access [1] and sign the certs after successful MFA. if you need a non-interactive connection you can use token authentication to fetch a cert.

[1] https://engineering.fb.com/security/scalable-and-secure-acce...
You must be aware that Square is operating a service in a regulated field (fintech) and that openly advertising their possibly illegal business practices is not to their advantage. Let's assume that everything you've said is true that could come in handy one day when a regulator is looking to determine the difference between whether this is an oversight or willful. You are making their job a lot easier and Square's situation a lot more difficult.

For your sake I hope that Square plays it as much as they can by the book, and that if they don't that this will cause them to wake up to the fact that all it takes is one employee blabbing online to get them into seriously hot water.

People here are on average quite aware of how data is stored, but they are not always empowered to make the call on how it should be stored. As long as that happens behind the curtain it is a problem, but not a huge problem for any particular company.

You have just raised Square's profile in many ways at once, not in the least by alerting the hacker community to the fact that Square has a lot more data than they should and that their security measures are not exactly top notch. The consequences could be substantial especially when that deleted data turns up in a dataleak. When you represent your employer online be careful about what you say and write.
Like it or not there is a genetic architecture for intelligence. The paper https://www.nature.com/articles/ng.3869.epdf identifies 22 'new loci and genes influencing human intelligence' and notes that 'we are beginning to understand the molecular neurobiological mechanisms underlying intelligence, one of the most investigated traits in humans’.

Obviously the statement 'Asians are more intelligent' and analogous dog whistles are crass and deliberately provocative mis-interpretations of IQ studies but to state that the scores on standardized tests are only 'because of the environmental and cultural aspects' is simply wrong if that is what you're implying. All organisms on earth are subject to genetic influence on their ability to negotiate life's difficulties and humans are in it with the rest of life on this planet.
I use SaltStack. I run the state setting the keys fairly often and enforce the presence of only the keys I set. This also prevents people from having the impression that they can add their own.

I think I remember reading somewhere that there's a way of using LDAP / ActiveDirectory (I'm pretty much the only guy running Linux on my machine) but I haven't looked into it yet.
We used to call these virtues: https://en.wikipedia.org/wiki/Virtue_ethics#Lists_of_virtues

They are also covered in the notion of "durable skills," which have previously been called "soft skills" https://en.wikipedia.org/wiki/Soft_skills#Future_Labour_Mark... , which aren't very instructive, but good for post hoc explanations.

Employee skills and virtues are also different from manager, leader, professional, or founder virtues, which are mainly about adaptability and appetite for risk.
16 tons of CO2 per year per capita. That's all you need to offset. We could probably manage that with a single digit cut to GDP.
I would strongly suggest you evaluate KMS. While not open, it has the support and development behind it to make it secure. This is going to get you IAM control of your users and allow group roles.

It also integrates with AWS well, and of course your own applications.

"AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications."

https://aws.amazon.com/kms/
That specific carve out is limited to consume-only media apps and wouldn't apply to an interactive remote learning app with more than just a library of prerecorded lectures.

HEY acquired customers outside of the app but still wasn't allowed.
Yes, it has been doing it for ages, both on macOS and iOS.
I haven't used any of these myself, but you might want to take a look at Facebook's approach to the problem[0]. It's rather different and innovative.

You might also find Smallstep [1] and SSH Lockbox [2] interesting.

[0] https://engineering.fb.com/security/scalable-and-secure-acce...

[1] https://smallstep.com/blog/diy-single-sign-on-for-ssh/

[2] https://github.com/half-cambodian-hacker-man/ssh-lockbox
I am in favour of the immediate cessation of all commercial fishing worldwide until such a time as the world can come together to build a system with the primary goal of protecting the fish and ancillary goals of providing a fair allotment, executing poachers, & educating children about extinction.
I use DDG almost exclusively. I just checked my history, what I use !g for are:

1. Long tail results. When DDG has few results, they completely ignore some of my terms to show me more, but useless results, even when I "force" terms. This is by far my number 1 complaint about them and I can’t fathom why they would do this.

2. Long tail results 2. While in 1) DDG has the proper results but just doesn’t show them, sometimes the result is not available to them. This is pretty rare though.

3. Google products. DDG sucks at giving me documentation (both API and help pages) for them.

I really have no problem with some abundance of affiliate spam, if anything, google is worse at that.
The 'right to be forgotten' and the GDPR data subject access, review, correct and delete rights are two completely different things.

https://en.wikipedia.org/wiki/Right_to_be_forgotten

vs

https://gdpr-info.eu/art-7-gdpr/
Employee only:

https://developer.apple.com/business/custom-apps/
If you have been paying attention you may have seen the term “BIPOC” pop up overnight. This is a less handwave-y way of excluding Asians when it is convenient.
> Also included are rules that network administrators can plug in to the Yara and Snort intrusion detection systems to catch and halt network traffic passing to or from control servers or to flag obfuscated Drovorub files or processes already running on a server.

Page 35 https://media.defense.gov/2020/Aug/13/2002476465/-1/-1/0/CSA...
Although frosh refers to a first-year student and has a resemblance to fresh, freshman is not believed to be the source of the word. More likely, frosh is from the dialectic German word for a frog, Frosch. ... Students already had a slang term for freshman, the diminutive freshie.
And for those of us who still compile ff from source and remove/add things as we please, we'll have to see people moan about something they always had and will continue to have control over, but long ago rationalized away seeking comfort in the chaining of their minds to things/ideas that are foremost in the best interest of others and not themselves.

/me shrugs
Misinformation is already a huge issue; deepfakes can only exacerbate and compound the issue in ways we can't even imagine at this time.

Imagine deepfake used to create false alibis, 911 calls, etc... That's probably not even the tip of the iceberg in coming years.

The fact we went in KNOWING it's a deepfake gave us an unmeasurable advantage/bias. For uninformed individuals that "stumble" upon this on the web, one can only imagine how it'll playout. This thought actually terrifies me... imagine a hypothetical (and conservative) 10% overall improvement AND production price reduction to this video every 6-12 months.

@SamuelAdams: Wish this site had a messaging system. Would be interesting to have a 1 on 1 discussion on this topic with you.
Original title: Canberra students gained access to school network to send graphic content to children across ACT

This stands out to me as particularly grim:

>School students have managed to access the ACT Education Directorate school network and use it to send graphic content to students across the ACT, including primary school-aged children.

>The ABC understands that alongside links to pornography and requests for nude images, some emails reportedly contained photos of genitalia and dead infants.

For some context for non-AU users, "primary school" refers to grades 0(prep)-6, ages 5-12. Grades 4-6 usually have access to computers and emails.
Unless you move to a farm and grow everything yourself, I think yes. It would literally be impossible to live with out them.

I'm sure the POS at your corner store somehow interacts with AWS or GCP, but I'm not sure that should 'count.' As well as not visiting any site that is hosted on a cloud provider.

You could almost certainly live a life with significantly reduced quality by living without the tech giants directly, but to not visit websites that are hosted on AWS, and still shop at a local shop that uses Square or other payment provider that's hosted in the cloud seems disingenuous to me.
Mozilla: The Greatest Tech Company Left Behind
Every star has the force of gravity that is pressing all the gas to collapse, and heat from fusion that is pushing all the gas apart. These forces are balanced in a stable star: fusion reaction provides the energy that prevents the gas from collapsing. In comparison to our sun, a larger star like Betelgeuse needs to sustain a higher level of fusion to fight off the effects of the higher gravitational force. Larger stars have shorter lifespans because they burn through their fuel faster.
Accept previous generations messed up(greed & pride). Even now, most powerful & wealthy are respected more than most wise people. Often power/wealth is mistaken for wisdom.

- Precise definition of territorial waters depending on mainland's size & population
- Hands-off fishing in international waters; farm & eat marine food within mainland marine territory

No international body out there is strong enough to protect sea-life.
> Must build an image before deploying and it takes time, so deploys are slow (of course we use CI to do it, it's not manual

Docker images are extremely fast to build if you use a dockerignore or staging directory properly. Our multi-GB image builds in seconds.
article says

"However, our source told us Moz will likely pocket $400m to $450m a year between now and 2023 from the arrangement, citing internal discussions held earlier this year."

so 400-450 million just from google.

per google, in 2018, their entire revenue was only 450 million.

https://www.google.com/search?channel=fs&client=ubuntu&q=moz...

so if they are making more than 50 million from the rest of their country deals, it doesn't seem like revenue would have dropped that much
The problem I see is increasingly that people who want to do the non-professional things lean towards tablets instead of desktops for them. Most people use their “desktops” for work and hobby things where what software can run on them is incredibly important.
The game has logistics drones that can transfer predetermined resources to keep a certain box at a certain level.
Google doesn't know whether you're installing F-Droid or Totally-Free-Money.apk.
It’s an extreme position, I know, but the collapse of ocean ecosystems is the collapse of mankind.
How do you suggest they do that? As far as I can see, to make money from Firefox they need to either charge for the browser, start selling user data, or integrate 3rd party products. The first isn't commercially viable, the second fundamentally clashes with their principles and the third they have tried but gotten a lot of backlash and little success.
Check Rossum's (https://rossum.ai) free trial - happy to hear feedback!
The article is behind a paywall so I don't know how much is FUD and fear-mongering. These are real concerns but SpaceX has already addressed them.

1: risk of collision. The main mitigation measure here is active collision detection. The second mitigation measure is that all of SpaceX's satellites will be in an incredibly low orbit that decays rapidly without active station keeping. If a satellite fails it will burn up in the atmosphere within a couple of years.

2: light pollution. The latest generation of SpaceX satellites with the visor are so dark that they are not visible to the naked eye. This is dark enough that blooming is not a concern. Of course they'll still be visible in telescopes but that doesn't ruin the shot the way blooming does.

I suppose it's possible that Amazon doesn't address concerns the way SpaceX does, but it seems unlikely now that SpaceX has proven it can be done.
DraftKings, FanDuel Fees Deemed Taxable in Landmark IRS Memo
Seconding that. We use Hashicorp Vault as the SSH CA that issues keys certificates.
Over the last month or so, I've finally gotten really serious about this whole "re-learn all the math I've forgotten since college, and learn more math beyond that" initiative. So I've been going through Professor Leonard's videos on Youtube, intending to work my way through to his Differential Equations class. I'm almost done reviewing Intermediate Algebra, and this weekend will probably consist largely of wrapping that up.

I'm also reading the book How To Think Like a Mathematician by Kevin Houston, so I'll probably spend some time on that.
Unicorns break into RTS: analyzing the OpenRA source code
We can save the USPS by deregulating first class mail, let them raise prices as needed, and negotiate with private shippers. It has been allowed to basically waste away since the 90s and it would take a massive infusion of cash, and significant overhaul of its culture, not to mention many years, before it will be sustainable again.
Yes, and I've also run into the networking issues more than once.

However, both fail states are fairly rare, and Docker Swarm is far simpler to manage than K8s.