skysight-inc/HackerNews huggingface dataset:
Hilariously I see privacy invading advertisers loving this. No more DNS blocking ad traffic! And since it's only a matter of time before Apple removes root access on their PCs, it puts them in complete control off what you see.
You cannot do so because US congress is prohibited making laws "abridging the speech."

Such law abridges what somebody says, and thus cannot be made.
Also I think GCC's loss of prominence due to LLVM hurts the pull of the whole GPL ecosystem.
True, I started optimistic seeding much potential in possibilities to extend HTML only to discover that embedded javascript only works when the SVG is the main URL target or wrapped in <object> or <iframe>. Sad actually.
DoH isn't blocking anything that any existing application can already bypass. It merely points out the fact that the rise in encryption makes it difficult for third parties to administer the software running your device.

DoH will not be extended to allow firewalls to decrypt it. The entire point of DoH is that firewalls cannot do that. It's not hard for an administrator to set up their own DoH server, though, so there is no need as long as that server can be configured at the network level. This is currently possible through group policies on Windows and most MDM applications on mobile devices.

The nice thing about encryption is that only the software and the server know what is being exchanged. The not-so-nice thing about encryption is that only the software and the server know what is being exchanged.

You already can't see the difference between your computer connecting to some S3 bucket to download a picture of a cat or malware connecting to a S3 bucket to get a list of IP addresses mapped to host names. It's possible to run fully-fledged VPNs that look exactly like normal HTTPS traffic on the network level. DoH changes nothing about that.

On enterprise networks, IT administrators can already put measures into place that prevent DoH on support applications and restrict HTTPS connections to trusted hosts (through SNI sniffing + validating the connection). The upcoming encrypted SNI will make this harder, but group policy will be able to disable eSNI on any trusted computers and browsers, leading only untrusted software to be unverifiable, which can then be reasonably classified as malicious.

If IT administrators cannot put measures on employees' devices then... well, they've already lost. Before DoH, they just didn't know that they'd lost yet.

Palo Alto currently blocks DoH by decrypting all TLS traffic (ranging from cookie recipes to naked pictures your phone is syncing to the cloud) with a man-in-the-middle attack which requires their certificate authority to be installed on your system. They filter out the DNS requests inside those TLS streams and apply some kind of rule to them. Right now, they can either block the requests or change the contents (as long as the website and/or client doesn't use DNSSEC).

With ODoH, changing the contents will no longer be practical, but blocking the connection will be. Together with decent group policy settings, networks with such a setup should be as safe as they were without ODoH.

On a side note: these types of middleboxes are often trying to be transparent and silently violate many standards, breaking stuff that works on every normal network. Stuff like these firewalls are the reason that TLS 1.3 is pretending to be a special type of TLS 1.2 every time it connects, because otherwise some big middlebox vendors' platforms freak out and kill the connection. I doubt the inevitable transition towards HTTP/3 or even HTTP/4 will do these boxes much good. I don't put a lot of faith in devices like this.
The Atheris Python Fuzzer – Google Open Source Blog
I tried to find official information about Amazon Linux but I can't find. Is it based on what distro? (maybe RHEL7 but not mentioned) How it's compatible to EPEL and other software for RHEL even though they are different from RHEL? (at least they uses different glibc version)

I'm really curious whether Amazon Linux is accepted by Linux guru or not. It seems that there are very little docs for a distribution.
Certainly, all the current implementations of Kubernetes are built out of enterprise-scale components — even if they're then squeezed into the girdle of a developer tool, the way microk8s is.

But the design (functional architecture, APIs, etc.) of Kubernetes makes good sense for small scale as well.

There's nothing fundamentally stopping someone from creating an "embedded Kubernetes" that exposes all the same resource APIs, but which is just a management interface for e.g. a JVM, or an Erlang node, where all those APIs are just controlling in-memory abstractions existing inside one userland process. Presenting itself as a "cluster" with one fixed node pool, with one fixed node, with one fixed type of container runtime which is just "spawn an actor-thread in this process."

I don't disagree that people are pursuing the enterprise k8s stuff when they aren't at the right scale to need it — but I think it's important to realize that they're often doing that because they see the design of k8s as fundamentally sound, providing sensible abstractions and management interfaces that neither plain OS process APIs, nor Docker's APIs, nor IaaS-level control-plane APIs have great equivalents for. It's that design they're after; the HA stuff is just a "nice-to-have" that they end up adding on, because all the guides they read (that are written for enterprise integrators) insist it's a great idea.

(Tangent: if Docker Inc. would get off their collective butts and do Docker Swarm over again, but this time with k8s-compatible APIs, I'm sure it'd become the most-used "Kubernetes" overnight. Most devs just want a regular Docker host, that they can `kubectl apply -f` against.)
The system where prisoners have all of their needs met (health care, dietary needs, etc) isn't sustainable. The Californian solution to this has been to release prisoners, rather than cut off these perks that many contributing members of society don't have access to.

Since fraud is a "non-violent crime." Politicians/judges in California have made the punishment of these types of crimes absurdly lax, often with early release or little-to-no time served.
This is way too accurate lol
This I guess? https://marc.info/?l=openbsd-announce&m=160744667011118&w=2
>> the second amendment was crafted specifically so that functionaries of State power can't abuse their position without the risk of extrajudicial reprisal.

What makes you say that? I'm not disagreeing, necessarily, but is there any writing to support this reasoning? Who held this position?
There's a lot to complain about with Etsy (their antique, neglected APIs are where I would start) but I've seen their enforcement department work when merchants screw up. I think they do care but they're relatively low-tech for a tech company, and are barely holding things together. Reporting can only help.
This is not intended as an attack, but a genuine question: what does Dart offer over any other language? Why would I choose Dart?
I can’t help but think you’re subtracting points for needing to upgrade firmware (not sure I would) and the negative experience you had doing so. Also when you say “headset” I think we may be comparing different models.

I’ve never had a firmware upgrade fail on my set of Jabra Elite 75t’s yet, and I think I’ve done three, maybe four since I got them.

I’ve never had to use or been tempted to use an app for them on the PC, only using the one on my iPhone. They work great, sound quality seems fine but not fantastic - maybe AirPods are better, but I wouldn’t know. One nice thing is the EQ in the Jabra app - it’s not “adaptive” like AirPods, but I consider manual EQ a better feature if it’s an either/or decision. Have presets for music and meetings that I rarely mess with unless on long meeting or longer music listening session. I can see how the adaptive would save you from even thinking about it so I can see why some people would prefer it.

The one thing I find annoying about the Jabra set is that if I take the left ear out to talk to someone, I may have to put both back in case and out again to get them both back online. I hear about similar problems with AirPods though.
Perhaps it's all about training and the culture of "killology" that's seeping into our police forces [1].

Or maybe it's the fact that corporations pay police to "protect and serve" them instead of the general public [2].

Or it's the "perceived" danger from the cops' point of view?

[1] https://www.insider.com/bulletproof-dave-grossman-police-tra...

[2] https://readsludge.com/2020/06/19/corporate-backers-of-the-b...
Is Process a Moat in SaaS?
Honestly, I wouldn't expect much from GPS on the Pinephone (at least the 2GB version): the only maps apps available are extremely bare-bones, little more than tech demos compared to Android software like OSMAnd or Maps.me.

Also, while Anbox has been used in some cases so hackers can say "See, I did it", I don't think Pinephone users are actually going to be using Anbox on an everyday basis. It is too RAM-heavy and too taxing on the Pinephone’s weak processor. People expect to be able to near-instantly switch between apps (e.g. between Signal and Firefox), and that is probably never going to be possible on this iteration of the Pinephone.

With regard to music and Bluetooth, however, already Mobian on the Pinephone gives me the same functionality with my Bluetooth amp as my Android phone. No complaints there.
I think I'd put it even more on the syntax. Option requires you to explicitly deal with the fact that it is an Option. For nullable types, frequently the syntax doesn't require you to acknowledge that it is nullable at all, and will allow you to continue forward on the assumption that the object doesn't contain null.
Luckily by the time i leave my house again, version 2 will be out and will have fixed all the annoying version 1 features
I'm not sure if they is why, but even though I use dark mode at the system level, I've found that not every site has a good implementation of dark mode, and for that reason I appreciate the option to revert to light mode.
The why we don't have flying cars yet
You should try a stiffer mattress / topper. I had the same problem because I was sinking, ending up with a weird hip angle. I discovered this once I went wild camping with some friends. Sleeping on a thin air mattress made me realize that.
Maybe you should continue doing work that you love, but outside that company on your own terms.
Nobody disagrees with holding judges accountable but from the context, what you're advocating for sounds like a blood feud and we all know how those tend to turn out.
What country are you from where bug fixes are guaranteed to be free forever? I am not aware of any country in the Americas or Europe that guarantees that unless said company enters a contractual agreement to provide you with bug fixes for free forever?
That's even more worrisome.
A lot better looking, and nearly as expensive:

https://www.humantouch.com/pc-laptop-desk
I think velocity is the most important indicator, at least at the start. How fast can you build and ship? I saw startups spending a year, and they could not launch a website.
Same thing in enterprises too. A team gets formed around a project and they start building everything including a highly sophisticated pipeline, feature toggles and multi cluster deployment; but the product is still not close yet.
Velocity is my indicator for team success. Just ask how long have u been developing before joining any team.
> 'Dark' people don't hide it as well as they'd like.

It sometimes works in reverse though. Sometimes people think I'm funny when I would have though I quite clearly meant the unpleasant truth I just blurted out!
I get where you are coming from in an ideal sense, I’ll entertain the idea instead of for fun.

This is obviously for a specific type of user who is very very much the minority. Any idea that this would work for a broad audience should be thrown away, because your friend Steve in sales doesn’t give a shit about writing their own CSS.

I think what you have left after that is serving two different versions of your content. One has its own styling and the other does not. Don’t pretend that the markup isn’t tied to the CSS, and that the unstyled version just doesn’t apply CSS, because there will always be coupling between the two for any moderately complex site. Just have two deliverables and be done with it.

Of course, duplicating the content is suboptimal. You could have a source of truth for the actual content of the site that is used to build deliverables with, employing a clever build process.

I mean, I’ll just stop there because this sounds like way too much work, being put on the content creator to satisfy an insanely small number of their users. If you want to style the content on your own, just do it. Delete all style sheets and inline styles and apply your own. It’ll be hard work, and the markup will be all wrong for that type of work, but it can be done if it’s really really necessary.
Could encryption also enable these "functionaries" to further hide their abuses of powers? That token has at least two sides.
Also, it's great/free advertising. The more stories of cyber threats out there, the better for your bottom line.

Not saying that the cyber threat isn't real, it is real. Just saying the free publicity is great for these cybersecurity companies.
I’m gonna have one more go at justifying this. Probably just talking to myself at this point...

Imagine Spotify only has 2 users. Both pay their £10 a month.

One listens to 2 hours a day of their fav band on their commute.

The other listens to Taylor Swift on repeat 18 hours a day.

Current system, Taylor swift gets £18 and the other band gets £2.

Use centric version I’m suggesting, both get £10, just as they would if it had been a CD they were listening to.

This seems more fair to me.
Pornhub ends unverified uploads and bans downloads
I personally I'm getting richer. Working for a big corp as a software engineer, I've done nothing but saving more money since the lock down started. I've also done much more shopping on Amazon, so I guess I'm giving back some of that money to other big corps. Doing groceries at Costo so money is not leaving the circle of big corps.

I've tried to eat out more often, even leaving less or no tips in order to feel more incentivized to not eat at home.
Similarly (and obliquely referred to near the end):

Dietary cholesterol is not bad for you. At all.

Saturated fat is not bad for you. At all.

Sugar is all kinds of bad. The more they look, the worse it gets. Particularly fructose and sucrose. (Glucose is fine.)

Meat still causes heart trouble, but it's not the saturated fat at fault. After all these decades, we still don't know what is. Nobody was looking, because "sat fat!"
What a Record Setting Investment in the ICS/OT Cybersecurity Market Means to Me
Congratulations on the V2 release! Does this release set the stage for (extruded) buildings to be "addressable" in 3D? eg. Can you place a marker 5 stories up on a 10 floor building?
>The most recent update we have from the entity that has the power to decide -- the judicial branch

My point is that for most foreign policy matters, the judicial branch doesn't have the constitutional power, or even any congressionally granted special jurisdiction, to decide these things. (Except for very specific exceptions spelled out by Congress, which is what yesterday's case was about.)

I brought up the SG's argument bc of the case law he cited is closely related, not because his argument was applicable to this case. They argued whether a case fell into a niche congressional explicit exception. And both sides recognized that, in general, courts don't have a role in most of these foreign policy arguments.

Import/export control on software isn't an exception, and in fact is explicitly allowed by statute.

I don't think anyone is arguing that the executive lacks the power of instituting import/export control over software that 1) is owned by a non-US entity, and might be either 2a) weaponized by a foreign adversary or 2b) used in a way that compromises national security.

They've already done it for years, including the infamous encryption export controls. Those didn't make much sense, but no one really argued the president couldn't do it.

Those decisions are political ones, not judicial ones.

And judicial precedent recognizes that, and defers to the executive, despite what this judge has ruled.

The US embassy moving to Jerusalem brought up many of the same issues, if you want to explore how this likely plays out. Even in the face of some congressional directives (I think via funding) explicitly not allowing the move.

>So, I'm not clear on whether you're claiming that the president in fact does have the powers you're ascribing to them, or if you're saying they ought to, or if you're saying they have historically.

All of the above :)

>retaliatory expropriation

Whether retaliatory or not, import/export control or tariffs aren't a constitutional taking, and so isn't expropriation any more than taxes are.

There might be some more interesting arguments to be made re:equitible treatment under the law if it were owned by an American company (and I suspect this is where your thoughts are), but it's not, and if it were, many of the underlying issues would be mooted.
That's fair, and we've seen in the last half-century or so that the US military can lose to asymmetric warfare when it can't lose to nuclear powers.

But, I don't think that e.g. the guerrillas of Vietnam were morally ambiguous simply because they engaged in asymmetric warfare against the US military. They were fighting against identified soldiers in a declared war; they had the right to engage by the international rules / norms of war. They killed people who had taken up arms against them. (Yes, most of their opponents were forced to take up arms; that doesn't make the opposing force morally ambiguous in its opposition.)

They're very different from various terrorists (domestic and foreign) who have attacked the US in recent years, who also reached the conclusion that only asymmetric warfare would work against the US, but chose to attack non-combatants - office workers, children, etc. And they weren't merely casualties of a morally-ambiguous operation; they were direct targets. (As it happens, these terrorists were not particularly effective, either.)

So even if we want to grant modern interpretation to the Second Amendment and read in the right to do whatever is effective against the government of the US (instead of talking about what it was crafted to do), it still seems to me like it should be about making sure you have the arms and the training to defend yourself against an illegitimate government and establish your own, perhaps through asymmetric warfare if needed - which is still very different from randomly attacking individual officials whom you have declared corrupt in an otherwise-legitimate government (let alone their family members).
> With DoH, there are publicly accessible servers that accept requests over plain HTTPS

Which is a good thing for end users on balance.

The Internet is going 100% encrypted and that's a good thing. This helps towards that goal. Relying on unencrypted traffic will no longer work. Networks must not have the ability to intercept device traffic unless the device administrator (not the network administrator) configures it as such; any such mechanism completely breaks the security properties this is trying to achieve. Ultimately, your choice with uncooperative devices is "block the device or don't" (in addition to isolating it on a separate network), along with "replace it with a cooperative device". Stop telling people they need to stop using encryption so that your local network interception will keep working, because your local network interception is indistinguishable from other people's local network interception.

This feels like the geek version of DRM fallacies or the fallacies that governments believe about encryption. Somehow, there continue to be threads full of arguments that amount to "It should be possible for 'good' network admins to intercept traffic from devices that don't trust them, but 'bad' network admins shouldn't be able to intercept traffic from devices that don't trust them". That's fundamentally not possible; any mechanism usable by 'good' network admins can be used by 'bad' network admins. (Leaving aside that 'good' and 'bad' are relative.) And worse, people get so invested in their local network interception that once it becomes clear that isn't possible, some will start arguing that their local network interception is more important than general Internet security.

There are enough outside opponents of Internet security; let's not start holding back security ourselves because it makes our own hacks stop working. We have enough work to do fighting for the ability to keep the Internet secure against real adversaries. We absolutely need full control over our own devices, but many of the people most capable of fighting for that control got complacent about it because a subset of people could hack around it with local network interception stunts.
The Nokia phones had closed binary blobs that required a custom kernel version (so e.g. the Nokia N900 is forever stuck on kernel 2.6), as well as modems that were not isolated from memory. Also, many UI components on Nokia’s OS and Sailfish were closed-source. Yes, they used a lot of Linux-associated software, but the reason why the Pinephone is getting such buzz is that it is both completely open and also it runs a mainline kernel that can be upgraded at will.
I didn't see it as a judgement, just didn't understand the point. I guess you have provided a little more clarity. How sad is it to generalize the idea that disruption can no longer occur. That is one of the saddest things I've read all day. There are numerous cases where companies 'advance technology' into a product to the point where someone comes along with something simpler to undercut the existing player. Apple isn't a good example of this because it's very hard to disrupt their products. They have extremely focus on the end user and simplicity.
Previous: https://news.ycombinator.com/item?id=25301913
Mathematical Necessity of the Infinite (Hugh Woodin) [video]
Elite students from lower socioeconomic strata will likely be harmed. Elite students from upper strata will probably pull farther away (though may or may not suffer as compared to the counterfactual non-pandemic case).

To use your model, what you say is possible, but I think it's equally possible that the delta is additive rather than multiplicative. A 20% student and a 100% student might both lose 10% or 20% to [10%, 90%] or [0%, 80%] without intervention by involved parents.

My kids (grade 4 and 6) are getting a ton of dedicated 1:1 time including more coding time, paid math programs they enjoy playing, white-boarding problems with us, watching Nova/Nasa/other science content with us, and a lot more reading than if they were chained to a desk learning 2 hours of material in 6.5 hours. They might do better in this half school, half home school situation.
If you're eliminating intellectual property you're eliminating the GPL anyway.

You also probably create an even greater incentive for manufacturers to strictly lock down their devices, doubling down on technical solutions in the absence of legal ones.
You've got sympathy and empathy backwards there bub, just FYI.
what kind of doors can I install so that cops cannot casually barge into my home, and I will have enough time to finish my rsync remote backup?
Can you share in your opinion a good single guide to do this in AWS?