skysight-inc/HackerNews huggingface dataset:
There has been some news lately regarding UFO's that have been very strange, regarding government knowledge and disclosures.

Things started in 2017 with TTSA and the Pentagon's acknowledgment of a series of videos regarding craft that showed strange movements of a unknown craft[1]. The fact is there is a pentagon program looking into this phenomenon, whether they are a psyops organization designed to deceive or mislead the public or a genuine org that is fact finding is yet to be revealed.

Couple that with the acknowledgement of a series of fantastic technology patents that show off technologies not known by mainstream science by a engineer in the Navy [2].

Even more interesting is some of the technology in the Navy patents(room temperature superconducting) has recently been shown to be feasible(although with strict environmental controls) by MIT [3].

I am uncertain what is going here, If these craft are indeed genuine my suspicion is the Govt has made a lightspeed advance in technology and these craft being seen are products from a unknown skunkworks, if that is not the case than possibly China has made the leap. If they are not genuine, then the US is running a brazenly deceptive misinformation campaign with the media(and China). The other alternatives which would be a truly unknown source, or a known extraterrestrial source. The last two being least probable.

[1] - https://www.nytimes.com/2017/12/18/insider/secret-pentagon-u...

[2] - https://patents.google.com/patent/US10144532B2/en
[2] - https://www.thedrive.com/the-war-zone/28729/docs-show-navy-g...

[3] - https://www.technologyreview.com/2020/10/14/1010370/room-tem...
Analyzing SolarWinds Orion Sunburst DNS Traffic for Threat Intelligence
> When it does, it will be massively destabilizing as it places the "invulnerable" second strike capability that guarantees deterrence against peer states at risk.

It never been such to begin width, at least by the late cold war, some portion of missile subs were reliably tailed by adversaries without any high tech trickery.

North Korea, Russia, and China each already have more submarines than USA, and would have no problem to put 10 subs to tail each Ohio.
I never understood the appeal of Nginx. I mean, I understand the web server, it's much easier than setting up apache, and before apache introduced event based mpm it was also much faster.

What I mean is the load balancing functionality of F5. It's in the same league as proxy support in apache[1]. Hardly comparable to for example what HAProxy provides, yet for some reason F5 (which is a leader in hardware load balancing, sadly though with public cloud that market is shrinking) found it interesting. Is it because of the name recognition, and they plan on turning Nginx into a proper load balancer? Because in terms of functionality Nginx is not even close to their LTM (even HAProxy is missing a lot of its features).

[1] I'm talking about the non paid version, there are some health checks in paid although still the support is rather weak.
Not trying to justify it, but one could read it defensively in the same light that all employer-patent-grabs share: If you invent something directly in the course of your assigned tasks as an employee, i.e. they instruct you to invent X and you then do so, for pay, they want some legal basis to prevent you from turning around and charging them for a license to use/sell the invention they just paid you to create.
Apples are not processed at all. Coincidently, they have tons of fiber and you wont actually get fat from eating apples.

Unless you eat them dried, in the form of juice or in other "processed" form.
Otherwise known as The Curse of Knowledge.

The reason so much documentation is garbage.
Does anyone happen to know of a service like this that is free (not self hosted) for non-commercial, low-traffic sites? Or which costs less than ~$10 per year.

I have a basic Github Pages site, and I currently don't know whether anyone is looking at it, beyond the very few who take the time to email me. I don't need (or want) to know anything about my visitors, but it would be nice to know that I'm not simply tossing stuff into the ether.
Could very well be. Though, it seems like the attention given by the people in authority was a little too genuine.

> After one of his academic papers describing the patents was accepted for publication in 2016, Pais wrote in an email to several NAVAIR employees that “What is most unique about this paper is that it has already won the approval of Dr. [REDACTED], one of the world’s top authorities in Advanced Power and Propulsion/Quantum Vacuum Engineering, who has given his unreserved approval of this paper, calling it “a very good paper.” [REDACTED] has also forwarded the paper to several of his colleagues, including [REDACTED], another top subject matter expert.”
Call them what you want, they're ads.
I believe the idea is that they are taking access to finance from the rich and giving it to the poor. Commissions are often flat dollar amounts, so the more money you have, the less significant they are. Charging a percentage (which this is effectively doing) benefits small trades and hurts large ones. And I believe they still meet or beat market rates, they just find savings that they don't pass along to the traders. No doubt the Robin Hood of myth turned a profit as well.
But not ciabatta?
> bread and pasta have a lot more in common with twinkies and oreos than fruits and vegetables.

Not if you make your bread yourself from unbleached flour. It's cheaper (except for the really industrial sliced junk) and better than most that you can buy and if you let it ferment overnight there is not work involved in kneading it.

My usual recipe is 500 g plain flour (flour here is about 11.5% protein), 400 g water, 8 g salt, 1 g dried yeast. Mix, leave overnight, fold over a couple of times, wait one hour, heat a conventional oven and a cast iron casserole with a lid until it reaches 230 C, drop the dough in the pot, put on the lid, cook for 35 minutes at 230 C, take off the lid cook further for 20 minutes. Total time I spend actually working is probably less than ten minutes. You can use any container suitable for cooking dry at that temperature. Keeping the lid on keeps the moisture in and helps develop the crust.

Adjust the times depending on how brown you like the crust.
Holocaust survivor's daughter in legal battle with historian
The data is available unauthenticated here: https://github.com/webgl-globe/data/data.json

If anyone wants to do any further analytics on it, it's easy enough to pull PRs and lat/lon from that.

It does look like lat/lon might be a fixed value for each city (from spot checking a couple). If it's not, that would be surprising and a pretty egregious leak of user info.
It's quite insane how well Stripe executes their strategies. Their API docs set examples to all the other startups.
Consent often involves more than just cookies. Consenting essentially allows them to use other tracking technologies beyond cookies such as IP addresses or browser fingerprinting.

This is also why the GDPR requires consent forms instead of relying on browser cookie settings, as it covers the intent of tracking itself as opposed to any technical means by which it is achieved (and this is why functional cookies such as for logging in or shopping carts don’t actually need consent at all).
Is Mickey Mouse a copyright? I always figure it was a trademark. Its used as a logo.
The issue is by including google tracking on their web page, then from a legal point of view the publisher is sharing your information with Google
I believe Chuck Moore took a stab at this with "Green Arrays"

http://www.greenarraychips.com/
- Security stuff (auth tokens and similar) are generally essential (if only used for that purpose).

- Any form of tracking people is generally non-essential.

What you can and can't do is not based on technical implementation details but practical usage of the information!!

The tricky part if when both overlap, i.e. if you track people but only for assuring a secure operation, i.e. you don't use the tracking information for anything besides their main purpose of assuring secure operation.

A lot (all?) of systems which provide such security specific tracking do not strictly limit their usage, access and collection of information and as such are also used for non-essential purposes and in turn need opt-in.

But then sometimes companies try to abuse it and will do do until taken to court.

For example Facebook argued that people use Facebook with the (main) intend to get customized ads and as such tracking them is essential for Facebooks service. As you can guess this argument is completely ridiculous especially given that they also track users which don't use Facebook, but if you are the size of Facebook you can try to bring that to court and maybe gain a bit more time before you need to comply.
Seems like a good one, and pretty fitting considering I'm in Canada right now :)

I'll keep it in mind if I end up making myself a desktop PC in the future. But I guess the hardest part about any good alternative design isn't so much the design itself but its adoption and how often you're interacting with it to rewire your brain.
It may be unpopular, but strict lockdowns are untenable in the long term. Living locked down is no life at all, it's just survival.

And I'd rather take my chances if the alternative is perpetual stay at home orders (I'm from Argentina, we spent 9 months in strict lockdown).

At this point, even if the government asks for another lockdown, people are not going to listen.
These so-called ethical AI researchers are not really doing much science, not even truly researchers. They are more like politicians, and are playing the game of politics.
The technology is described well on their web site: https://www.spaceryde.com/technology

"A stratospheric balloon takes satellites in a custom-designed, ultra-light rocket to high altitude, where it is launched in near vacuum conditions, avoiding the stress and costs of high speed travel through dense layers of the atmosphere."
Why don't brokers place orders directly with the exchange? Is it more efficient to do it via market makers?
If a company is going to lie or skirt the law about their cookie use, why show the banner at all? It's almost worse to show a decline option that does nothing.
I called them victims, rather than inmates or something, so I don't agree that my phrasing was in any way dismissive.
The Origin of Botox
https://techcrunch.com/2020/10/22/dutch-hacker-trump-twitter...

>Twitter spokesperson Ian Plunkett said: “We’ve seen no evidence to corroborate this claim, including from the article published in the Netherlands today. We proactively implemented account security measures for a designated group of high-profile, election-related Twitter accounts in the United States, including federal branches of government.”

This also would not be the first time someone at twitter was malicious....
I think the tl;dr here is that Dr. Pais appears to have gone through the Navy's standard patent process. There's some minor irregularities with some of the boxes he checked on the paperwork (like the discrepancy as to whose time the patents were developed on) but nothing earthshattering. Perhaps a few more hints at what he's actually done.

For me, the most interesting aspect of the article was that, with a little bit of detective work and some OSINT, the author was able to deduce nearly every single redaction in the emails.
I guess assuming linear correlation between spend and capacity?
This is me as well, for league of legends. It's the one game I and most of my friends play exclusively, and is how I keep in touch with the ones who live far away. I'll have a windows box around until league runs on Linux or dies, and not a day more or less.
> "That's a lot of individuals whose lives are on hold, whose career and educational aspirations are suspended," says Shapiro. "You can almost think of this as an entire generation that will enter adulthood with lower education, lower skills, less employability, ultimately lower productivity."

That's major hyperbole for this situation. An 18-year-old delaying college by 1 year (for totally understandable reasons) does not equate to "a life on hold." I can't believe anyone would blame them for that choice, and in fact, it sounds like the ideal educational stage to be in during this time. You don't have to stress yourself out with the horrors of virtual class. You can just take a break from school and wait for the world to get itself together before beginning the next stage of your journey.

I wonder if this person feels the same way about students who delay starting college to carry a pregnancy to term (or support a partner who is), or serve in the military? It seems like a very one-sided and rigid way to view personal development.
Or blanket non-consent of course.

I too find it quite annoying. The other issue is that sometimes the banners do not properly work with various aids for disability and keyboard-operated browsers.
* Are there bad foods that are ultraprocessed? (Ex: Frosted Flakes)

* Are there good foods that are ultraprocessed? (Ex: Grain Berry)

* Are there good foods that are unprocessed? (Ex: Brown Rice)

* Are the bad foods that are unprocessed? (Ex: Pork Belly)

If "ultraprocessed" fails to distinguish good from bad, then the word itself is worthless.
Clarifying a bit - I can't start up the Docker Desktop Kubernetes - If I take a look at the image downloaded (docker/desktop-kubernetes) it only shows tags for amd64.

When I try to spin up kubernetes, the UI just shows 'starting...' while the logs show the image won't work with this architecture.

Anyone else see this? Any workaround?
Tired of Paying for Bad Internet?
Decentralization Deserves a Chance
> > Did you read the specs?

> 'Please don't comment on whether someone read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that."'

Not an article, but specs. You read specs carefully, you don't skim, especially to write long paragraphs about your personal experience

> And in this case it was very clear that the OP read the article

I disagree. Not read, skimmed at best.

> and just missed that part.

I agree: the most important part was indeed skipped.
Or parenting for that matter.
The wording of these banners rarely suggests as much.

They talk about cookies, and little more.
I built an integration with Netlify that allows users of WeBase to build websites/applications with our tool and deploy to Netlify [1].

I'd love to be able to build a similar integration with Cloudflare pages.

How cool is it to build with a UI tool and deploy in seconds to global infrastructure?

[1] https://www.webase.com/blog/build-with-webase-deploy-to-netl...
Because Companies and Governments are different entities?

I can easily choose which company I want to work for, switching countries is something much harder.

A government that does not like what I say can do all sorts of horrible things, jail me, confiscate property and event kill me. Companies generally do not have that power.
I'm well-aware of how to use basic search functionality, thanks.

I'm also aware of Facebook's practices, but your comment seemed to be talking about a specific incident or situation -- that's why I asked.
I know, that's the point of my comment, it's a name that brings up very different imagery accross the Atlantic.
That feels like an abrogation of responsibility.

At this point in computing system complexity, secure defaults over configuration is a requirement for a sane system.

As we increasingly convert infrastructure into code, this means infrastructure configuration requires secure defaults as well.

That the Docker ecosystem doesn't seem overlying concerned (as a core, drop-everything, #1 priority) about a decades-hard security problem (detecting and resolving insecure dependencies) seems shortsighted.

To put it another way, there are two realities:

(A) No tooling support is provided to address a risk efficiently and quickly = no one addresses the risk

(B) Efficient, effective tooling is built, maintained as platform evolves, and advertised to the community = everyone does what they should

I realize the structure of Docker dissuades them from actually addressing (B), but it seems like an existential threat to adoption.
I'd go a step further, and say that most sites don't need cookies either. I wrote about it elsewhere a few days ago:

> Avoid having to put annoying EU cookie consent dialogs on your website with one weird trick:
> Don't use cookies on your website.

> If you want users to be able to sign in to access your premium paywalled/onlyfans content, put that on a subdomain that has cookies and requires login.

> (yes this isn't applicable to all websites with cookies; it's just a nice idea worth considering)

=> https://pleroma.envs.net/notice/A1sZxGnSQ2Oi0oWMy0 originally written here
The regulation explicitly forbids annoying banners, the problem is that there’s currently zero enforcement of it so websites continue breaching it and lying to themselves (and others) by thinking their consent banners are compliant.
Well a large business such as GH also has the resources to build their own in-house tracking solution, which can piggyback off of the first-party auth cookie without requiring any cookie pop-ups.
That's true, it really doesn't immediately mean that. Over time, should the regional spend patterns persist, it would in fact mean that in dollar terms. Edit: Perhaps should have said 'will be'.

It's difficult to nail down the breakout of production regionally, because, for example, the US has 85% of the global semiconductor sales, but only 44% of that 85% are fabricated in the US. Here is the 2019 breakdown from Semiconductor International Association[0].

In unit terms, it could be quite different since there are so many low-value chips made on legacy equipment that has been depreciated.

[0] https://www.semiconductors.org/wp-content/uploads/2019/05/20...
That's because the website operators deliberately design the experience to be obnoxious and frustrating.

They want you to have a bad experience if you decide to opt-out of detailed behavioural tracking, so that you'll feel pressured to "consent" to detailed behavioural tracking, and so you'll feel like the GDPR is to blame, even though it isn't.

I've put "consent" in quotes because it's not freely given consent if you are heavily pressured into it, and it's not consent at all if you end up believing you don't really have a choice.

These banners/dialogs do not even comply with the GDPR (despite saying the GDPR requires them), as GDPR says consent to non-essential personal data collection about you must be as easy to withdraw as it is to give, and the service you get must be the same if you don't consent as if you do.

I wrote a bit more about this here: https://news.ycombinator.com/item?id=25441131
Holding the patent allow the government to recoup its investment to some degree.

Governments don't necessarily have to treat patents the same way as private companies do, either. Legislation can require a fairly open licensing scheme for reasonable rates, for example, which balances recouping expense with making the publicly-funded work publicly available.
Don't you think, that the implementation of the opt out process is what is actually flawed? The law doesn't require you to throw this popup at your users. You can just set the cookies that are techincally required and explain their function in you statement about data usage.
If you want to track people, you can then ask for their consent in some nice, locally served banners, where normally you privacy intruding ad networks would put their third party javascript.
This is cool. Was trying to deploy something with just private / internal access recently. It'd be cool if the steps could be simplified. Seems like currently I'd need to configure Oauth2proxy. How can I go from a locally running server with no auth protection to deploy in as few steps as possible? Right now I'd need to add an Oauth2proxy layer. I'm sure I could do it in a few hours... can it be entirely eliminated?
Yes, I’m 50, but who needs to know my real age anyway?
"Multiple studies have shown that cat owners are more socially sensitive, trust people more, and like people more than non-pet owners." That's wild
On several levels. Avgas is still leaded.
TZ/lang preferences do not require consent, a CSRF token for a logged in user seems to me to be legitimate interest too, but I suppose you could see it as an identifier that can be linked back to the user. I still think if you're using it just for security purposes it counts, but the fact that the same identifier could be used for tracking based on differences on the backend is one of the reasons why this isn't just based on browser cookie settings.
it depends if you use a cookie to track individual visitors but do so by generating a hash and saving it into a database that is legal. if you save something along that hash, which would identify somebody or some kind of hash based on browser/ip, that would be illegal.

btw. ip addresses still needs to be saved by german means (when users can log in), since if you are a big service you need to give authorities the identity to your users, if they made something illegal. it's really really wierd.
Show HN: A weekly email helping you become a better solo-founder and maker
You consent to processing related to keeping you signed in. You don't consent to selling all your data away.
Bitcoin is complicated:

- buying and holding actual coins feels feels like investing in other nonperforming assets, like other currencies, or art, or gold

- the world does seem to need / want a decentralized store of value that bitcoin provides

- if you are worried about fiat currency, then just don’t hold most of your wealth in currency, just keep enough float to cover expected transactions

- bitcoin seems horrible for actual transactions, as others have stated, it can do very small number of transactions per day

- some other crypto currency will nail the online transactions part, when that happens, that will be super interesting
The person who changed the date to 2021 is @redhat.com. Who put the 2029 date on the wiki?
I doubt the HN crowd can relate to the general population here. Either these masses prefering in-person class or work environments are losers or this is all good because it sticks it to the dinosaur educational institutions and disruption will lead to some post-pandemic better world.
"Is there a better protocol" ... absolutely, but design for the use.

I had a ~500m link across a campus (heavily wooded) for a while. The main link was often coax cable or fiber, but would get cut several times a year, so there was always need for a backup.

I experimented with several rs232 serial port type methods in that time, from directly wired over 500m on cat3 cable (12 pairs per signal worked well), to modems and my own "POTS" telephone line emulation, with a couple of efforts at optical and radio links. Hardware was all scrounged trash and lashed together zombie stuff.

Somewhere in the piles I still have one of the 486 motherboards that hosted an end of one of those links during a lightning storm. I soldered patch wires onto the ISA slots after the power traces were vaporized by a close strike and that system lived for some time after that.
I would absolutely consider this once email verification exists for new accounts. But not until then.

It looks like a good feature set and yes, I would love to use a solution from someone who focuses on auth vs. rolling my own.

I do think your documentation could be expanded. You have some examples of how to use it with Netlify, but I'd love to see example apps for other cloud providers as well (Heroku, in my case.) Similarly for the react-auth documentation - the basic syntax of how to use it is a good start, but a full working app demonstrating its use with role-based authorizations would put it over the top to prove to me it could meet my needs.