skysight-inc/HackerNews huggingface dataset:
> As a very expensive consultant I am frequently appalled at how management teams completely ignore their own employees.

Tell me about it. On one of my previous jobs I would constantly speak out about what we were doing would cause people to lose hundreds of thousands of USD, and every time I was laughed out of the meeting for "overthinking" things (I guess that's what wanting to do things right is called these days). When one of our customers lost US$200k and nobody had any idea why or how or when I knew that company would be the death of me, and coincidentally I was on the same meeting I planned to use to quit my job.

If anything it taught me that working in finance is not for me :p
> I have to politely refute this. "Rushing" is the word inexperienced players use for "playing in a more optimal way that prepares you to attack sooner." If you call it "rushing," what you're really saying is that you need other players to deliberately play worse to give you extra time to prepare. All of these strategies have counterplay and usually lead into long games. Using a vil rush or tower rush is not a way to end the game, it's a way to begin it.

For less experienced players, rushes like these tend to end the game early rather than begin it in an interesting way. Either the defender knows how to hold the strategy and shuts it down, or hasn't seen it before and gets destroyed. While these strategies are certainly part of the game and make high level competitive games far more interesting, it is often a frustrating experience for low/mid level players. Many of those players are looking for an experience where they build their army for a while and attack once they're satisfied with what they've built. Certainly not strategically optimal, but that's often what they find fun.
But emails are meant to be accountable. They are the digital equivalent to sending letters. They should leave paper trails. Just like you have written before, secure messaging should be left to secure messaging apps, not email.
Julia Child Used First Principles Thinking
TiDB on KubeSphere: A Cloud-Native Distributed DB on a Hybrid-Cloud K8s Platform
Based on the medium post: Is FIPS compliance a good thing? I was under the impression that FIPS sometimes... lagged... modern ideas about security, such that if you weren't for some reason mandated to use it then it was either neutral or bad.
I think you'll essentially get your wish regardless. Assuming you're just a regular Joe citizen (not a healthcare worker, not someone high risk) you're highly unlikely to get access to the first run regardless. So, if phase 3 was a beta test, phase 4 will be millions of doses going to people as a sort of invite only full-release. So, as long as you're fine taking it 3-6 months or more after that, if no ill effects have befallen the millions of early adopters, then you're gold.
China, 14 Asian partners sign world’s biggest trade pact
Try Heroes of Might and Magic 3 (HD version with Horn of the Abbys). This turn-based strategy game is excellent. It's 20 years old, and yet it has a larger average Twitch viewership than AoE, because of its awesome competitive scene.
I would be very, very careful with Prednisone; it does not have a friendly risk profile.
Good catch, thank you for digging and sharing that.
This is why I always stay in a hotel and not with friends or Airbnbs whenever I visit China. I'm not bothered to deal with registration and the hotel takes care of it.
Private emails are not speech. Are you suggesting all private conversations should be public? That seems absurd to me. Do you subscribe to the "surveillance isn't bad if you have nothing to hide" concept?
I've responded to a subcomment below explaining why "emails from politicians must be leakable" is not a good argument against the author's case.

That said, I think this would be problematic on some levels not being considered. A good part of the world's email infrastructure is decentralized, and doesn't run on providers who update software well and often. If Google were to publish their keys after rotation, a new class of attacks could emerge where attackers could successfully forge authentic emails from Google that would look secure to an outdated provider. Nigerian prince 2.0 if you will.

Decentralization is one of email's biggest strengths. I agree with the premise here, but I don't think the solution is to publish keys. Perhaps moving to a protocol that explicitly provides non-repudiation while keeping backwards compatibility would work.
Ask HN: What SIEM tools do you use?
The company I work for is currently reassessing their security posture, I was wondering what SIEM tools do you guys use or recommend?
Feature flag for advanced users?
>GCP now blocks changes from being made to those tables entirely, breaking with MySQL's behavior, as well as GCP's own earlier behavior.

There seems to be a common pattern across Google's services of trying to force best practices on users at the expense of breakages. I suspect though that users are more likely to think "screw you Google, stop breaking my stuff" than "thank you Google for forcing me to follow best practices".
Hi. Frontend developer from Czechia here. Market is in your favor, companies hire anybody nowadays. I worked in a outsourcing company that hired smart non-developers (There were math teacher, guy with Ph.D. in philosophy etc..), teached them COBOL and placed them to companies.

Knowing how to build software matters the most. Hiring process usually includes some kind of screening test or homework. Experience matters too, but still they test you to know your stuff.

First development job may be harder to find, but it's not that hard. Also depends where you live. After 3 years of experience finding a job becomes really easy.
"Ph.D.? Sorry, you're overqualified to write CRUD apps for us." lol.
OK, now if it were only simple to figure out where on that distribution a particular engineer falls during the limited time of the hiring process.
I can say that while staying with locals I never registered or being asked to. And it went like this for a couple of months.
Not only with Chinese, but also expats.
I mainly got my accomodation though CouchSurfing (I wasn't aware of BeWelcome nor TrustRoots back then)
The hosts seemed to have guests very often and we were never asked to pretend to be friends from home or anything.
This happened not only in the main cities, also in some prefecture-level cities.
It happened on a tourist visa, back in 2015
No, the hope is even greater: your doctor orders a fully formed injectable vaccine for the specific cancer that is currently growing in your body. Nobody else has exactly that same mutation, so there is no point in animal trails as the vaccine will only be helpful to you.

This vaccine is a great help to the above: it proves conclusively that the idea is sound. Probably future mRNA vaccines can skip all the phase 1-2 trials and go directly to 3. And for rare diesease they can even skip phase 3.
The hospital around the corner from me had two freezer trucks parked outside for months because there wasn't enough room inside for the dead bodies piling up. The harm from this virus is very real, even if you are lucky enough to have so far avoided the worst of it personally.
I am not following... we are talking about gmail and email in general, not specifically the White House.

If you think White House emails should be signed and archived indefinitely, that is one thing. That is not what we are talking about.
> Postgres 12 is more than a year old.

This is not a reasonable expectation for managed database software.

For example, I wouldn't put production data on anything younger than 6 months.

If you need bleeding edge versions, you should manage it yourself.

Source: DBA.
So maybe digitally sign the contracts instead of unwillingly sign every single email you send?
Bear spray, easily reachable on one's person, will be much more effective than a pistol. But data-wise, you have to consider that most near-misses probably aren't reported, that successfully defended attacks may not even be reported, and that people in certain environments will have a much greater risk than the average.
decaf espresso*
Neither is measles. Or flu. Or fucking mumps. What exactly is your point? Even if immunity lasts six months, additional infections should be less serious (as is the case for other coronaviruses)
This doesn't really clear up any of the questions I have.

Will docker running on ARM run docker containers from images built for x86?
Will docker running on ARM be able to build images for x86?
I rented a number of Airbnb apartments in different countries, many of which required guests to be registered with the police. Typically the owner would meet me when checking-in, and they'd take a copy of my passport or drivers license, and occasionally I'd have to fill out a form with a few basic pieces of information (name, date of birth, etc) for them to submit. It was usually 2 minutes of work.

The downside was it was all incredibly insecure. They'd be snapping passport photos on their personal phone, and one apartment had a book in the living room with passport numbers and personal information of every previous guest.

So, technically it works now in different countries, but Airbnb really needs to assist these owners and get some proper procedures in place.
We'll wait, what are you calling 'curry'? Because British kedgeree (as kedgeree is) is distinct from what any Briton I know would call 'curry' - even given the disservice we do India by calling almost everything 'curry' - and further distinct even from khicadi (खिचड़ी) from which it takes its name, and moves to breakfast.

Sorry, I know you were just joking.
>Out of interest. You are emperor of Angaria with obviously 20/20 hindsight. What date do you make the decision to lockdown. Pull a Madagascar if you know plague inc.

Before January 1, ideally. Certainly before January 15, which is when Patient Zero is believed to have entered Seattle from China.

Your fictional emperor has a big advantage over the nearby US, though. In January Trump had been impeached by the House and was preparing for his trial in the Senate.

What would have happened if Trump had announced a hard closure of the US land, sea, and air borders on January 14? No one in except US citizens, who all have to quarantine for 14 days at military bases or requisitioned hotels? MSNBC, CNN, the Times, and the rest of the media would have switched from 100% impeachment to 100% "Trump is locking down the country so he can use the military to seize total power!!!!!". Doing this might in and of itself have caused three more Senators to vote for his conviction on February 5.

It's a wonder that Trump amidst all this was able to get a China ban done. In retrospect, those behind the lies about Trump that got him impeached have much to answer for.
What do you mean? Airbnb is perfectly legal in China, subject to the guest registration requirements mentioned here.
The Commodore 64's disk drive was more powerful than the CPU, containing the same 6502 as well as a pair of 6522s. Amusingly some programs would upload mathematical calculations to the disk drives to speed up processing.

https://www.lemon64.com/forum/viewtopic.php?t=27911
I doubt we think as differently as you believe.

I am just a user experience designer. There is a wide, wide rift between what users desire and what will actually solve their problems. I'm paid to reconcile that difference.

I do not intend to design society. But then, people are, as we speak. I don't know what's better--letting them design for what people want regardless of what it does to society, or designing for a society that's better regardless of what individuals desire.

We're primitive creatures. All of us, myself included. We're mostly run by our lizard brains, going after what spurts the happy chemicals into our brains.

I don't think society should be shaped to battle against human nature; but I certainly don't think uncontrolled human nature should shape society. As in all things, a balance.

That is what design is, always.
> My recollection is that you had to actually have a reasonable justification to be given an official master key

My recollection is that that was strictly correct but that the scope of acceptable justifications (ca. 1990) was broad enough that that was all but a formality.
Just want to point out that your answer is essentially incorrect. Godel's completeness theorem has nothing to do with the existence of models. It is about the provability of sentences that are true within all models.

Also, the incompleteness theorem doesn't say anything about the nonexistence of a model. It gives the existence of at least one sentence X (for sufficiently nice theories that include enough arithmetic) such that there ARE two models where X is true in one and false in the other.
I had to Google it too, so I agree with you - it's Peter Turchin.
See https://keys.openpgp.org/about/news#2019-06-12-launch for pointers to relevant discussions around this.

Plenty of arguments have been exchanged, and some active steps have been taken. Like the keyserver now also default in Thunderbird (and GnuPG?). There is always more things that can be discussed, and more things to be implemented. I suggest you browse the relevant conversation archives in the most relevant places, and engage there if you want to discuss more.

see e.g. SKS, gnupg, enigmail, autocrypt lists:

May 2018: http://nongnu.13855.n7.nabble.com/SKS-apocalypse-mitigation-...

Also May 2018: https://lists.gnupg.org/pipermail/gnupg-devel/2018-May/threa...

October & November 2018: https://admin.hostpoint.ch/pipermail/openpgp-email_enigmail....

From that thread, by the author of GnuPG, Werner Koch: https://admin.hostpoint.ch/pipermail/openpgp-email_enigmail....

Also beyond GDPR, the underlying implementation of what powers the "modern" keys.openpgp.org, Hagrid, groups a lot of interesting "what should a modern keyserver look like" discussions. To pick some examples: https://gitlab.com/hagrid-keyserver/hagrid/-/issues/131 (improve refresh operations) and https://gitlab.com/hagrid-keyserver/hagrid/-/issues/139 (padding for privacy)
> A year ago, the U.S. government accused two men of spying for Saudi Arabia when they worked at Twitter years earlier,

Sounds more like some solid counter-intelligence people to hire would be good here, rather than straight infosec. But still good hire obviously and I'm sure this sort of thing has been thought out already.

Side note: Getting to hand out grants at DARPA sounds like a fun job.
Apple Addresses Last Week's OCSP Server Failure and Related Privacy Concerns
Bursts of exercise can lead to significant improvements in metabolic health
Email is not a "serious secure messenger." It is the equivalent of writing a letter and signing your name to it. Email is useful for when you want a paper trail. Otherwise, you would use a secure messenger instead.
>I go to the page (ad), copy the URL, and youtube-dl.

Youtube-dl has an integrated search function, so you actually don't have to open the video in a browser at all.

That's secondary to the rest of your comment, but I thought it was worth noting.
> our 365-day leap-year 2020

It doesn't make much difference to the calculation, but being a leap-year, 2020 has 366 days.
It probably works for the general population. For me, I've can hit the close button of a dialog without even focusing on the text.
I remember not too long ago, many were saying that Tesla was a scam and it was going bankrupt. It was one of the most heavily shorted stock. People laughed at Musk's $420 stock prediction. Now it's trade at many times the 420 level ( factoring in the stock split ) and it's about to be added to the S&P. I can't think of a company/stock that so many people were so wrong about.
The RIAA/NARM/etc. needs YouTube WAY more than vice-versa.
Perhaps he meant refined vegetable oil? Also, I think seed oils in particular were much less common 100 years ago.
This is total nonsense if my upbringing in an Italian-American household is any indication.
We have run into BIG problems because people don't come close to following recommendations if they're left to their own devices. Sometimes you need a little more of a 'nudge' to get people to do the right thing.

“Despite North Dakota’s remarkable efforts at testing and case finding, these measures are no longer enough, and we are now in desperate need of implementing stronger measures in order to save lives and preserve our health care workforce and capacity,” said Dr. Paul Carson, an infectious disease specialist, professor of public health at North Dakota State University and physician advisor to the state’s COVID-19 response. “We have a growing body of good evidence that masking, especially when paired with other mitigation strategies, can substantially reduce the spread of the virus. I am very grateful that the Governor has taken the bold measure to implement an enforced mask mandate across the state, and am hopeful this will help to flatten the curve.”

https://www.governor.nd.gov/news/burgum-announces-new-requir...

More and more conservative states are finding that if they don't make masks mandatory all that winds up happening is the ICUs fill up, healthcare workers start getting sick, and things get real scary real quick (e.g. Arizona changed their tune about masks REAL quick when Phoenix ICUs started hitting 90% capacity).

I hate the government telling me what to do as much as the next person, but there are a lot of people out there who just don't grasp the concept of 'just because you can, doesn't mean you should.'

I don't care if you kiss your wife or don't kiss your wife. I do care if you stand 6 inches behind me coughing with no mask in the grocery store, and if you do that I would very much like you to be thrown out by force if necessary, because you're putting my life and my family's life at risk because of nothing other than some bizarre paranoia about how wearing masks makes you less of a man (not that I think you personally would do that, but I had that happen to me pre-mask-regulations during COVID in an Arizona grocery store and it really pissed me off.

A sick-looking guy with no mask on hacking up a lung in front of the deli counter at Safeway isn't freedom, it's stupidity. Stuff like that just happens in the absence of mandatory restrictions, and it puts everyone's life at risk for zero reason. I wish my fellow Americans weren't that stupid, but unfortunately enough of them are.
Woh, the idea that private letters shouldn't be private is WAY far away from the privacy standards that have been around in liberal democracies for centuries.

Mail being secure from surveillance is a foundational freedom.

I have no idea where you are getting the idea that we all should have to answer for what we send in private correspondence.
Cancer and heart disease each killed more people than Covid this year. But a working covid vaccine a lot easier to produce (this is something I'm saying on hindsight - 6 months ago I wouldn't have been so confident in the ease).
Craig was my professor at UofO, teaching his Digital Arts class in 1986. Eternally thankful to him for allowing me access to a range of wonderful machines, including Dec, SGI and Sun, for graphics programming.
But you need to be able to prove the existence of the contract. Which DKIM would help with.
There's also members-only content on some channels that requires a paid subscription to access.
I totally understand that. It's how I played from 1999-2015.

I'm just saying that rushing isn't a flaw or a problem, rather it's a matter of perspective. Players who want to build up for a while nearly always want to do that because they haven't learned any other way to play. And they're not under any obligation to do so, either-- but it's not fair to say the game is flawed on that basis.
> This is not intended as sarcastic, but you solve the theoretical problem by making it a practical problem?

I think this is based on some false idea that error is somehow “not theoretical” which makes no sense. There is a rich set of about error and even an entire field dedicated to its study (statistics). The only reason we are interested in theories in the first place is because the theories correspond to the real world. If you have some theory about time which cannot be measured, or cannot explain errors, then that theory belongs in the garbage. (Think about this: if your theory cannot explain errors, but any actual experiment produces errors, then any actual experiment will demonstrate that your theory is “wrong”.)

Or consider other concepts like “flat”. What does it mean for a surface to be “flat”? No matter how flat a real surface is, it will never be mathematically flat. So either we have to throw away the word “flat” and stop using it outside mathematics (which is a stupid idea), or we define “flat” to mean that a surface is within some deviation from mathematical flatness.

You can’t escape error, even in theory, unless you leave the world of physics and do pure mathematics.
Ask HN: How to create a Zoom recording bot?
I want to create a "bot" similar to fireflies.ai with personal calendar integration. I want to be able to add this bot/account to a meeting and for a recording to take place.

How would you go about this project?
I hope you didn't take too many of these comments to heart. You unfortunately got the standard HN comment section treatment – a delightful mix of nitpicking, assuming bad intent, and completely missing the point. I also hope you continue to share things on the internet – it's far easier to criticise than it is to create.
> If you have certain principles such as support for LBGTQ+, anti-military contracts, or a conservative in tech for example, and your company signs a contract to work with another organization that doesn't care about the cause or are completely against it, what happens?

I guess things are changing, but historically refusing to serve customers based on political differences would be considered intolerant. You can disagree with someone without refusing them service. I don't see any ethical dilemmas in serving someone you disagree with. You are free to disagree with that principle.

For any business owner, making a decision to walk away from business on grounds of political disagreement is a huge luxury. I don't think it's commonly exercised, and for good reason, imo. This is very different from walking away from a "bad customer", one who may cost you money over the long run while sapping your soul. Empowered employees also feel capable of walking away from these customers because they understand the business so well that they see the issues coming, and they've earned to decision making respect for their choices to have weight.

> Growing pains, but an employee who is competent or incompetent will face the same dilemma because of what I suggested earlier.

This is exactly what I'm saying. The two are more similar than I think most people make them out to be. You will have differences in freedom, but those are often determined by your competence and success, more so than whether you have a business license.

The way you talk about a business owner sleeping well at night makes me wonder if you know any. Owning a business is extremely stressful. The buck stops with you, and while in theory you are free, your entire business depends on your decisions. You think it's hard to change jobs? How hard do you think it is to move on from a failed business? In a capitalist society, business owners are as much slaves as anyone else. The difference is, you take so much risk on that if you succeed, you end up making a return that does buy you a good deal of freedom. But that's not intrinsic to the business you own, and it is determined as much but what you need as what you have. It's a freedom derived from being a human being that has "enough".