skysight-inc/HackerNews huggingface dataset:
Really? Alright then, right now, off the top of your head: What are the set of TLS ciphers which are generally regarded by the security community to represent the highest security standards?

I have no clue. The AWS ALB 2016-08 security policy allows for ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 and another 16 or so.

Of course, that's the default ALB policy. I didn't know that. There's a more strict TLS policy available: TLS-1-2-2017-01. Do you know what the difference between the 2016-08 and TLS-1-2-2017-01 policies are? I don't. I could look it up. Well, beyond disallowing TLS 1.0 and 1.1, TLS-1-2-2017-01 also disallows the ECDHE-ECDSA-AES128-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA and ECDHE-ECDSA-AES256-SHA ciphers. Cool.

This shit is VERY domain specific. Its arcane. The way I worded those last three paragraphs was patronizing, to establish a point: No one knows this off the top of their heads. This naturally leads to two things I believe are true at any company (beyond a certain "garage"-scale): As few people as possible should worry about this, and even those people should encode it in some kind of automation that guarantees they don't have to be hands-on when configuring future resources which need this information.

Otherwise: YOU WILL GET IT WRONG. Guaranteed, at some point, maybe today, maybe in eight months, if you let every developer at a company worry about TLS ciphersets, one of them will screw it up. That's not patronizing; that's human nature. We're fallible. We don't all have massive domain expertise, and even the ones who do make mistakes. Manually configuring things is a guaranteed recipe for mistakes.

I'm using ciphersets as an example, but these things are everywhere. I don't trust any developer, including myself, to remember that by default most JWT libraries allow an alg of "none" to pass verification. I don't trust anyone to remember that S3 buckets by default allow per-object public read settings without a separate non-default bucket-level setting to block it. I don't trust anyone to remember that SQS FIFO queues only allow one concurrent reader per read group (nor understand what that means in practice, because this issue is Literally a weekly thing on /r/aws), or to know that hosting a public website on S3 is startlingly easy to DoS via egress network charges and AWS wont refund it.

Capital One, one of the biggest banks on the planet, was hacked because of a misconfigured S3 bucket. I have relieved myself of the hubris of believing I can do this on my own, a hubris every developer needs to relieve themselves of. Encode this stuff into automation and have every eye you can find inspect your changes. And while there's room to give developers a lot of power in this setup, part of that is not "here's an AWS account, have fun".
The knifes in my kitchen only I have access to and I know I'm not going to behead anyone. However I live by my principles and I have no problems with banning knives in public, or vendors securing them. (which is relatively common around the world btw, see Japan, UK, much of Europe etc..)
To be fair to Dallas[1], the city itself has begun to rapidly densify and build up rather than out – it looks like a real city in many more parts than it once did (I grew up there).

Would I move back there in the near future? No. Is it comparable to any first-class European city? Definitely not. Is it on par with NYC/SF/DC? Not really. Los Angeles (where I currently live)/Seattle/Atlanta? Somewhat. Heading in the right direction? Definitely.

[1] Unless you're talking about DFW suburbs. In which case, once you cross the city line, try not to lose your soul in all the cookie cutter subdivisions.
You're focusing on the wrong stuff like the monitor and the webcam. This is a completely open computing platform... a Chromebook is a thin client for Google services. They couldn't be more different.
That raises an interesting point: Is it the existence of the iPad Pro that prevents Apple from moving forward on touch screen laptops. Introducing a touch screen MacBook could completely kill the iPad Pro and I'm not sure that Apple want to lose that market.

Still it could be that they still firmly believe that touch screen on laptops are unnecessary and provides a poor user experience, something that I happen to believe that they would be right in.
Timewarrior + a little spreadsheet that gets exported to a PDF.

You are conflating a few things though:

* invoicing per se. You should get the habit of doing this even if the customer only want to know the hours. Paperwork matters.

* invoice details. Try not to go overboard here. Split per project, total number of hours, make a SUM and you are done.

* work status updates. Don't keep the customer guessing. But also, don't allow the customer to manage your every 15minute increment. You are a 3rd party not their employee.
> Hooks based components are trying to make modules that are “about” the problem domain they illustrate, but they do it as a feature of React. React isn’t about your problem domain, it’s about driving the DOM and rendering, and I think it makes more sense to treat React code that way.

This is why I think it's going to take a bit more time with hooks code to realize the opposite to csande17's complaint is really true: the problem with the hooks React ships with is not that they aren't primitive enough (as the sibling comment points out, csande17 probably is also missing that some of the primitives they are looking for expressly don't exist as React hooks because they don't fit the algebraic effect model React is moving toward, versus the lifecycle model React is moving away from), but instead that the hooks React ships with are still (or least feel) far too primitive an algebra for the "calculus" needed for at least some problem domains (if not most problem domains).

I don't specifically have any answers for what the next layers up will be, though I appreciate this article for trying to explain how algebraic effects work in other languages because that provides ideas from other places of how their primitives get composed.
Their excuse is not to give away their anti-fraud measures.
"that being said I don't have the time to give you a full introduction on Marxian economics"

Thanks, but not interested anyway. Read enough of him to dismiss it. And we seem to be in 2 different realities anyway.
Anyway:

"I've never heard of big socialists group who do not want total egalitarianism in the end".

you may insert a radical

Obviously there are also many soft version of socialism. Here in germany they are regulary part of the government. But not really socialist. When referring from the very radical leftwing socialists. And I thought those are the types we are speaking about, when refering to revolutionary spain. And of this group, the ones I met, were mainly literal egalitarian. Sometimes even without the concept of personal property etc., mostly with. But negating the concept of rich people was the unifying idea.

So if you insist to never met a socialist like that, than I just keep on not taking you serious.
These discussions are why I use Firefox and Searx[1].

[1] https://github.com/searx/searx
It seems more like a reminder that watch-out - it may happen to you too. I use personal domain that I prepay for 5 years in advance. I recently started using gmail account more and more, but this is another reminder that I may lose access to important business emails if I continue to rely on Google.
Several likely killed in suspected Vienna terror attack, says interior minister
And someone just fixed it shortly after your post. Thanks, I guess?
https://Deepl.com/translator is really good IME. It provides more fluid translations and some better, more precise use of terms for me when translating technical documents (mechanical engineering) from French/German.
We don't have to look forward, we can look backwards and see that temperatures are rising. https://climate.nasa.gov/vital-signs/global-temperature/

==No matter where 2020 ends up in the standings, it will be warm enough to knock 1998 out of NOAA’s top 10. When that happens, all of the 10 warmest years in their records will have occurred since 2005—and the top seven will have occurred since 2014—Sánchez-Lugo says.==

https://www.scientificamerican.com/article/will-2020-be-the-...
Exactly a tightly integrated SoC could revolutionize high performance at low price points, giving low end MacBooks performance that may rival far more expensive PC laptops.
The lack of empathy, reasonableness, common sense, or logic in this post is stunning.
Protonmail integrates with its client (web app, iOs/Android app), unless you use the additional Protonmail Bridge service.
While that's true, there are many more debunkers than credible conspiracy theorists. As long as they can maintain their reputation and that no one is too dismissive, and as long as a sufficient amount of actual conspiracies are defeated, I don't think it would be too much of a problem.
Pretty much. Long predates WSL1, though, and facing many of the same difficulties that prompted the Windows team to just run Linux in a hypervisor (WSL2).
Like, Share, Hack
$100 Amazon Giftcard Sweepstake for Self-Improvement Survey Completion
Hi all, I am building a product which aims to help people improve their lives and I'm asking for about 5-10 minutes of your time to fill out this survey and in exchange you have a chance of winning a $100 Amazon Gift Card.

Also, to ensure that only serious and quality responses are submitted, you need to sign in with a Google account and enter your email. Your email will ONLY be used to notify you if you've won the sweepstakes.
Fun fact: That was probably still cheaper with the Beetle than a record run with the Veyron :)
If the people in Oslo can and use e-bikes and e-scooters a lot (which made me quite surprised) to move around I'm sure that other non-flat countries can do well.
Location: Romania

Remote: Yes

Willing to relocate: No

Technologies: Go, Javascript, React.js, PHP, Laravel, Symfony, MySQL, Postgres, Git, Linux, HTML, CSS

Résumé/CV: https://www.linkedin.com/in/andrei-boar-7aa32ab7

Email: andrey.boar at gmail com
Apple has already announced ARM-based Macs will support running iOS apps. While they’d technically be usable without a touchscreen, I’d expect the user experience to be quite bad; especially for iOS games.
> Rather than having your traffic logged by your local ISP, bound by the laws of the land and all the privacy regulations in your country

That's nice if you live in one of those countries. Some countries have very little privacy regulations for data collected by ISPs; others actually mandate collection and storage of data.
to be fair, i dont mind the colorfulness or any of that, but the huge bezels, margins and font sizes are a huge waste of space in a desktop environment

its kind of obvious that for the need to compromise the ui of mac in order for ipad/iphone apps to look "at home" and im sure in apples calculus its worth the hit in the near term, but for this person its a bit too far...

*ive been using the big sur betas on and off for a while now

> Aqua interface and its 4-5 next iterations, which was praised as a great looking

sure, aqua got a lot better after the next iterations, so lets keep an eye out and see what happens...
> The comment I replied to implies "why didn't the lower castes just always change their surnames"

Not implied. I was outright asking.

> I pointed out why.

By adding a non-existent condition that doesn't follow and using it as a reason.

That's unless you're saying that if the remaining lower-caste also used these neutral names, that would cause the upper-caste that had chosen to also adopt these neutral names to return to using the upper-caste names.

What's wrong with having these neutral names be used by many of the upper-caste (as they apparently are) and also all of the lower-caste? Am I not making sense? Because that's the scenario I was asking about.
Stairwell Inc. | REMOTE USA, VISA | Full-Time

Stairwell is seed funded and came out of stealth mode last week as a new cybersecurity company that seeks to empower any team to defend against every attacker. It is composed of security industry leaders and engineers from Microsoft and Google and is backed by Accel, Sequoia Capital, Allen & Company, and Gradient Ventures.

Technologies

-Backend: Golang

-Frontend: Typescript and React

-Other technologies include: Terraform, GRPC, Kubernetes, and more

We're hiring across a variety of technical roles including: Engineering, Data Science, Product Management, and Technical Account Management.

If interested in learning more or applying feel free to check us out at https://stairwell.com/careers
Alphabet’s X lab details Project Amber mental health project
Because sometimes the data is useful when combined with other data you might not have yourself. Example: you have data on number of Netflix subs. That’s great. It would be even more useful if you combine that with Netflix churn data.

You can think of company analysis as a jigsaw puzzle. You may have a few pieces. That by itself isn’t useful unless u have the other pieces.
But the server space will within a few years begin transition to ARM as well . Look at Amazons graviton ARM cloud offerings. It beats x86 on bang for buck.
It's worth pointing out that having a Senate based on states not population is not unique to the US, Australia does the same thing. In Australia, the 6 states get 12 senators each, and the two self-governing territories get 2 senators each. This means that Tasmania (with a population of 539,590) gets 12 senators – 1 senator per 44,966 people – whereas New South Wales (with a population of 8,157,735) also gets 12 senators – 1 senator per 679,811 people. So a Tasmanian's Senate vote is worth 15 times as much as that of a New South Welshman such as myself.

On the other hand, we do use proportional representation (single transferrable vote, STV) to elect the senators for each state, which is different from the first-past-the-post method the US uses. In a normal election, half of a state's senators are up for re-election; exceptionally, the government may call a special "double dissolution" election, in which the whole Senate is re-elected, if the Senate repeatedly refuses to pass legislation sent to it by the House of Representatives. Our use of STV means that minor parties (Greens on the far left, One Nation on the far right, various centrist/populist independents and other small parties) end up controlling the balance of power in the Senate. Some people don't like that because these minor parties end up sometimes extracting all kinds of concessions from the government in exchange for letting government legislation through.

I think some kind of unequal representation – like the Australian and US Senates – is essential for a federal system to work. Look at the United Kingdom – England has almost 85% of the population, so a big enough majority in England can always overrule the other three smaller constituent countries (Scotland, Wales, Northern Ireland), and there are no constitutional mechanisms to prevent that from happening. That's a large part, I think, of why the UK looks like it isn't going to last, with Scotland likely to break away sooner or later, quite possibly followed by Irish reunification some years further down the track, and once its just England and Wales, maybe even Wales will eventually decide to follow Scotland's example. If the British House of Lords was more like the Australian and US Senates, and gave the smaller constituent countries the ability to block an English-dominated majority, then the UK would be more likely to survive.
Have you tried it with --no-sandbox --no-zygote --test-type yet? I haven't, yet. Admittedly, I'd much rather run Chrome in its sandbox, but if this is a good starting point, great.
Well, it's a very, very famous book.
I'm not sure what you're getting at here. NYC is growing steadily, especially around that station.
I had to read this comment multiple times because I assumed that "a single service has full visibility into your habits" was obviously an extreme negative compared to many services each having visibility into some of your habits.

I'm still not sure I understand your comment, but I would add that that even with multiple services, each can buy data from each other and from brokers, bringing the situation with them closer to a multiple-google situation.

Problems like this cannot be solved by technology.

edit: Being all Google may ultimately be more similar to the Apple proposition, where they actively fight their users to maximize their own profits, but also actively fight others for the complete possession of their users. As an Apple customer, you know that if your usage is irrelevant to their bottom line, they'll generally protect you from third parties. The reason it's not obvious that Google could be that way is because they're an ad company.
This. It's an internal system called ChAP, Chaos Automation Platform. It has the ability to target failure down to specific RPC calls in single instances, using platform components that services consume as the mechanism for doing that injection.
SEEKING WORK | CINCINNATI, OH | REMOTE OK

Technologies: C/C++, embedded systems, STM32, hardware design and PCB layout, manufacturing, signal processing, audio, IoT

Email: technology.pma@gmail.com

Hi my name is Paul, I'm the owner of PMA Technology. We offer a wide range of technology services. I'm about to finish up a contract developing an IoT mesh network for a high rise condo building with over 900 zigbee devices. I've previously designed and manufactured high quality pro audio hardware, and developed CAD software for the structural engineering industry.

Currently located in the Cincinnati area, but remote contracts are good too, depending on the type of work involved.
The idea of losing all of my email access, etc, is terrifying, much like the idea of getting in a car accident, or getting cancer, or one of a million bad things that can happen to a person.

But what are the actual odds that a bad thing is going to happen to me?

1.8 billion people are currently using GMail. If 1000 "real" (ie, not bots) accounts were closed every day for the next 80 years, there's a 98% chance that I (or any other individual user) would never have a problem.

Obviously, if some number of people are having problems that's, well, a problem, but as an individual user I mostly assume that it's not going to happen to me, much like I largely don't think about the 1-in-103 chance that I'll die in a car accident.
Canon's image signing scheme was half-assed and was comprehensively broken, they didn't even store their signing keys on a secure element:

https://www.digitalartsonline.co.uk/news/creative-lifestyle/...

>In Canon's second version of its ODD system, the HMAC code is 256 bits. The code is the same for all cameras of the same model. Knowing the HMAC code for one particular model allows the ODD to be forged for any camera within that model range, Sklyarov wrote
When we clear forest or talk of devastation we tend to speak in terms of area.

The perimeter of a rectangle with the same area as a square is larger, so there is more edge for the surrounding forest to encroach upon at the same time.

The worst shape, from a 'fill from the edges' standpoint, would be a circle. (Although I suspect that a square turns into a roughly circular hole within a few years, since the forest encroaches on the corners from two directions at once)
Oh, I assert all that land use happened because of advertising and regulatory capture! The movie theater was in walking distance before the massive interstate highway giveaways.
This is a really great paper that described the concept: http://www.citi.umich.edu/u/provos/papers/privsep.pdf

You got the gist of it: you can have a privileged process that can access resources and pass them to an unprivileged process upon request. The unprivileged process runs as nobody and is chroot into an empty directory, so the file descriptors are capabilities. It doesn't really matter if the unprivileged process is a child of the root one, so long as it discards all inherited resources/privileges other than its end of the socket before real work begins.

The advantage over merely inheriting resources is that you can grant new resources later on and decide whether to grant them in the stateful manner.
In some ways brave is worse.

At least with FF there isn't an incentive to sell your attention.

Brave is explicitly positioning themselves as a reseller of attention which they then obscure by pretending to focus on privacy. I'm not sure why anyone uses them - they're an ad company and their incentives are not aligned with their users.

I find them really untrustworthy and their pro-privacy branding has really confused their users.
How A Quantum Gravitational Notion of Time Solves the Measurement Problem
Atomic Search | Hiring a founding data engineer | Remote (US work authorization required) | Contact: igor@atomicsearchinc.com

We are on a mission to reinvent the way information is structured and served online, to make it easier than it ever has been for individuals to search, discover and learn.

We are constructing searchable, contextualized knowledge graphs using NLP and proprietary algorithms.

Usher in the next paradigm of the web with us.

Learn more: https://roamresearch.com/#/app/Atomic_Search_Public/page/d9T...
This is exactly what Noscript extension on Firefox does since forever.
And every year, fewer people live in rural America compared to those in cities. :)
google is so tightly coupled into my life I don't know how I could. Its not just the search engine, its the tv, the maps, the phone service, the church...
I've been happy with Fastmail as a GMail alternative. Been slowly moving my logins and usernames from one to the other. Only (rather significant) complaint is that since 2018, they're affected by Australia's encryption backdoor bill.
People talking alot about tools. But, for the 15ish years I was consulting/freelancing i think the pattern of billing BEFORE the work starts was the most beneficial change I made.

Built my own tool to email a PDF invoice.
Another solution is to make private presentations still private, but read-only.
https://www.nydailynews.com/opinion/subway-anger-aim-unions-...

https://www.nytimes.com/2017/12/28/nyregion/new-york-subway-...

There are “nippers” to watch material being moved around and “hog house tenders” to supervise the break room. Each crane must have an “oiler,” a relic of a time when they needed frequent lubrication. Standby electricians and plumbers are to be on hand at all times, as is at least one “master mechanic.” Generators and elevators must have their own operators, even though they are automatic. An extra person is required to be present for all concrete pumping, steam fitting, sheet metal work and other tasks.

In New York, “underground construction employs approximately four times the number of personnel as in similar jobs in Asia, Australia, or Europe,” according to an internal report by Arup, a consulting firm that worked on the Second Avenue subway and many similar projects around the world.
>TCP takes care of mere (eg probabilistic) packet loss ok.

I'd imagine this is largely due to MSS clamping rather than actual MTU caused packet loss.
Webkit has the same foundation as Blink. So while it's diverging they are much closer than Gecko or Edge HTML.
+1 for Harvest. It saves me a lot of time generating hourly invoices.

https://www.getharvest.com/
Ubiquitous Medieval Pigs
Subjective statements are just that