skysight-inc/HackerNews huggingface dataset:
TNG has such careful framing too, even if they didn't have crew in the shot I bet it'd look off in 16:9 anyways.

What would any of these shots look like in 16:9 [0][1][2]? They really liked filling the frame to the brim with TNG, and any side-areas would just look empty.

[0] https://static.wikia.nocookie.net/memoryalpha/images/3/37/We...
[1] https://static.wikia.nocookie.net/memoryalpha/images/3/36/Sa...
[2] https://static.wikia.nocookie.net/memoryalpha/images/9/90/Tr...
I think the point is e.g. being able to quickly share a file with a smartphone nearby, that is not yours. Not telling your co-workers to install on their phones some app foreign to them.
> braindead advice in there too, like disabling RDRAND because there might be a backdoor

Two sources of entropy xor'd will always be as strong as the best source. Done properly it's perfectly fine mixing rng sources you don't trust.
I'm not sure what is problem with that? Firefox supports service workers and other PWA stuff, right?
that is an amazing story. once again you're showing how to hustle well beyond what most people think their limits are. well done.
That's an interesting idea. A landing tower, built to refurb the first stage before wheeling it back over to the launch tower for refueling and then another launch.
Ask HN: How to brainstorm a product name in 2 days?
We are launching a new SaaS platform in January. We realized yesterday that there is a risk of confusion with a well established brand here in France.

We need to change our brand name as quickly as possible.

Our app will help french private practicioners in their daily tasks (appointments, consultations, invoices etc.).

Any advice on how to brainstorm for a product name would be really helpful right now...
Yup. The list over[0] is a good place to get started.

It may be annoying[1] to correct people on such stuff, but it is important. Misinformation established at social/cultural level affects us all. If you ever wonder where these people afraid of microwave ovens or infrared thermometers come from[2], it's this: many misconceptions adding up to an invalid mental model of the world, which makes them susceptible to further scares[3] they hear or read.

--

[0] - https://en.wikipedia.org/wiki/List_of_common_misconceptions

[1] - Probably as annoying as hearing someone spout these misconceptions once you know the correct answer.

[2] - And behind each such person there's dozens if not hundreds people who harbor similar beliefs, but won't admit to them.

[3] - It's not just conspiracy theories, either. There is plenty of established businesses that just sell this kind of bullshit, usually as a part of an ad delivery vector. For instance, all the health and lifestyle magazines general population reads are a major source of annoying health-related misinformation.
> just by an OTA software update and/or flipping some feature flags

Sounds like you might not have "experienced being a Tesla owner". There are a ton of Tesla's which, according to the company, will definitely require hardware updates for full self-driving.

https://www.tesla.com/support/full-self-driving-computer

They're not a tech company, but they think (and loudly say) they are, and that causes these kinds of problems. Using tech jargon does not a tech company make.
Using ssh-add -c when adding keys means it asks for user confirmation (but can still cache the passphrase) each time key use is requested. This can mitigate some of the risk here in the absence of other solutions.
Oh, I'm wrong then. I was under the mistaken impression that he was CEO much more recently than that. Thanks for the correction, it appears that you're completely correct about his leadership.

Thanks for updating my view!
Biteable raises $7M Series A for its template-based online video builder
They won't stop it from working ever, they will stop the updates but given Apple has about 7 year trail and still sells Intel Macs today that might even go into 2030.
You're right, and it's a great example of how a classical analogy (lattice ping-pong) while "makes sense" is not what is physically happening. As I said, classical analogies cannot be taken literally, and this one is definitely a blunder on my part.
Bountysource is dead, unfortunately
How to Hire an In-House Python and Django Developer
Yes this seems to only affect the Site-Specific Browser (SSB) implementation.

This was previously implemented behind a feature flag.

https://en.wikipedia.org/wiki/Site-specific_browser
https://www.maketecheasier.com/enable-site-specific-browser-...
If you are running a modern proper devops environment you shouldn't be git cloning anything on a production sever, nor would production servers be using the same ssh keys to do that via whatever production server login you configured to reach out externally as the keys from a local sys admin dev machine to ssh into to the production server, which hopefully if you're running anything significant in production is through a proper IAM account or service account through a command line tool authing you to a certain level of underlying vm/node access to all production services in that rbac role.

To be hotly debated but regardless of the most secure production deployment environment you should have production environments like layered images and all required installs on a private company image repo where the company vpc deploys through a build server that deploys image tags to a private company image repo in which an ingress pulls down from after running things like clair and what have you to make sure at the very least you have the latest library versions running with the most recent patches on stable and can deploy replicas as across many servers/nodes through an intermediary deployment architecture whether it be k8s or nomad (which also allows for VMs not just containers) in which you could standardize and highly specify seccomp profiles app armour and any custom kernel modules or what have you.

Anyone using the same server to git clone (messing around in a private development box) to deploy production services would be a no go for me.

Any gitclone should be automated from a jenkins or similar build where org repo keys are authed before pushing to a private company repo (which also required with)

The only thing more annoying than the comments scoffing at how basic the advice is the reflection of how basic the production deployment techniques of the scoffers are. Nothing should be so non standardized in production as got cloning on a prod server ad hoc.

Ssh keys on a server seem an irrelevant situation to me in any production scale server I've worked in.
"My mother had a scheduling algorithm: look for something that you can to do and do it.
Instead of planning, she just said look for something that needs to be done and do it. It worked
for her for ninety years."
> If possible, your timezone should be set to "UTC" and your locale and keymap to "US".

Is there any special reason why other values would be less secure?
I've played around with terraform and lambda in a web app context[1] and it works quiet nicely for creating per branch testing environments.

[1] https://github.com/netsome/djambda
Speed, scale, accessibility, and the ability to target susceptible people without geographic proximity make it a novel problem.

A person handling out pamphlets (asserting something like "Liberal politicians run a pedophilia ring, look for the Pizza code!") can communicate with on the order of 10^1 people per day, and can persuade on the order of 10^1 people per year. The medium is sketchy, the messenger can't be abstracted from the message, one would have to be physically near the messenger, and the messenger would have to be actively trying to communicate with you when you came into proximity.

A person posting links to a (fake news) site (asserting something like "Liberal politicians run a pedophilia ring, look for the Pizza code!") via FB can reach on the order of 10^6 people in a day or two. And FB promotes that content to the people who are more susceptible.

Ideas couldn't spread like this ever before.
How would you automate a job where a server uploads something, say a backup, to another server, without a private key?
try it at your own risk & peril
Ironically Apple is also the ones who kicked off the entire PWA race because of the lack of an SDK when the iPhone launched. The messaging then was "build for the web, that is better than native" and now its "native or gtfo" and web apps are not preferred. The last 5 years that I've built web versions of apps first, the client told me "look the web app is great, hard to tell its a web app honestly. Except when I want to..." and you all know the rest of the conversation from here.

Firefox, I love you, but you're bringing me down. We need a powerful, semi-native, offline capable architecture for the web. I don't care about the PWA spec, it's quite messy handling the implementation of one. But I do think it has always been the vision that the web is accessible regardless of physical connection to it.

As long as I can remember in this industry we've swung back and forth between "thin" and "thick" clients as if one way is the right way. Microservices over monoliths, etc. It's all the same symptom that naturally we don't want to grapple complexity. This announcement is yet another entry in the cannon of thin vs thick. It's a hard problem and any PM who only cares about optimizing time spent will say everything they can once they've zeroed in on the perceived waste.
It's relaxing because people have convinced themselves it won't happen to them (which is probably true, experimentally).
Sadly there is currently no hardware equivalent to free software. While anyone with a computer can learn programming and enrich the world by contributing, manufacturing modern hardware takes billions of dollars worth of equipment.

We'll always be at the mercy of hardware manufacturers until we can make our own chips at home.
KDE's Highlights from 2020
Wasmino is an Arduino core fully compatible with the Arduino IDE. It allows you to compile your Arduino sketch to WebAssembly and run it in a browser, all using the Arduino IDE.

The Arduino IDE usually requires a physical board, which can be cumbersome. For example in a classroom setting: holding up an Arduino board showing the entire class a LED blinking is not very doable. This is where Wasmino can be used.
Wasmino can also be used as a stop-gap during the first few classes, giving students time to purchase an actual Arduino board.
Other solutions exist such as 123D Circuits. Wasmino is different as it is integrated with the Arduino IDE, providing a seamless experience - using Wasmino is just like using an actual Arduino board. Migrating to a physical board is also as simple as selecting another board in the Arduino IDE. I believe this is valuable in a classroom setting. Wasmino is also open-source, while most alternative solutions are not.

Needless to say, this project is in a very early stage - feedbacks welcome. Also if you can think of other use cases, let me know!
So now you send a link instead of the whole thing. Who cares?
Assuming your local agent silently signs all requests. This attack doesn't work if e.g. your Yubikey is configured to require a physical tap for every authentication.
I've been through multiple jury selections where they've explicitly asked if I'd be willing to convict based solely on the word of a police officer, with both lawyers seemingly expecting the answer to be yes.
Uber should just pull out of the Seattle marketplace. If government regulation makes it unprofitable, go elsewhere. This is what happens in places where the government interferes with economic reality. Look at all of the companies leaving California.
You sound..jealous. Are you unable to afford ride Sharing?
Veritasium recently published a video [1] on why the speed of light can't be measured one way, only two ways (i.e. the speed it travels from point A to point B then back to point A). While I'm not privy to all the physics details of it, I found the video very compelling even as a thought experiment.

[1]: https://www.youtube.com/watch?v=pTn6Ewhb27k
I did this, and 1 month later got bad emails about shutting down the server because of ntp vulnerability. Maybe it was just a new vulnerability found at that time, but then this brings me to the missing item of the text: how to keep up? What pages tell you about new found vulnerabilities, so you can mitigate.
RC3 talk: How to survive in spacecraft [video]
Have you tried it? I recently got my first car that has adaptive cruise control and “lane-keep assist,” which is essentially what Tesla calls “autopilot,” and it’s really great even with its limitations and flaws. Yes, you need to remain alert, and it doesn’t do everything for you, but it still does some things for you. I’m not sure what’s difficult to understand.
This is why I’ve been telling people to not order end of quarter and to instead order right at the start. You’ll wait a bit but you won’t have a rushed car or delivery.

Part of why this keeps happening is Elon knows it’s possible to deliver x many cars so he pushes even if it hurts quality. They end up pulling it off and that ends up as justification to push harder. Probably cheaper in the long run to fix the cars post sale. I’ve had a few issues but they fixed without question.
Darn. Doesn’t look like it runs on ARM. No Raspberry Pi. I can appreciate that it is difficult to port things.

On a side note: I’m eager to see how much support for non-x86 architectures will grow with the introduction of the M1 chip.
The tool may be proprietary, but the output is not. It outputs standard JSON, HTML, SVG, and JS.

I imagine there are some open source authoring tools out there. I doubt they have the polish that Adobe products have. If you find one, or make one, post it here.
About the only thing that has really solidly changed over the last several thousand years is the near eradication of warlike hunter-gatherers and human sacrifice/cannibal societies. Every other stupid human behavior (and enlightened human behavior) is more or less the same now as it has been as long as there’s been civilization.

Most of the obnoxious things people do are features of our biology, not some emergent effect of the blame target du jour.
Would you honestly say systemd is the most secure init system when writing your own "Linux Hardening Guide"?

That's a big call to make in such a context.
Awesome-selfhosted: Free Software network services and web applications
#3 pops up when you start reading up on meteorology. I was quite recently surprised by this myself, when some article on climate I was reading started talking about gravity waves...

The only one I didn't like was #6 - I think it may be wrong. Not just because of language use (words gain multiple meanings over time; dieting!weight != physics!weight), but also because, while weight is indeed a force (a vector), it's also proportional to mass - so if you lose mass, you also lose weight.
For an interview with someone who cared so much about formatting and elegance, that PDF is kind of ugly I just have to say. How about just keeping everything at the same font size, putting the questions in italic, and indenting his responses in blocks? Even better, LateX?
What is PWA?
By your logic, the problem is not that people are willingly signing up to drive for Uber, but that the government has failed to foster an economic environment in which "poverty" is an option that plenty of drivers will willingly choose.

There is already a minimum wage that people can go out and try to find a job for, but mysteriously, there have always been plenty of Uber drivers! Is it perhaps that by creating a minimum wage law, there are fewer jobs available? Or maybe they just like the convenience of working for Uber, even if they aren't guaranteed to make minimum wage after expenses. Or would you go so far as to suggest that these people are too stupid to know they are being voluntarily oppressed, but because you know what's best for them, you would help legislate them out of a job? (Make no mistake: higher prices will result in fewer Uber rides.)

The real minimum wage is zero. Just add a UBI and get rid of all the other market distorting AOC-economics. The resounding success of the gig-economy (in terms of labor supply specifically) is a side effect of a minimum wage that is too high, crowding people out of full time jobs. In the meantime, adding these minimum wage laws to Uber will just result in more people making nothing and fewer people having convenient transport.
> RDRAND

Did you read your own link?
Tl;dr Yes! But.. it needs more, significant direct investment, and research.
That hardly matters. Amazon provides hundreds of thousands of new jobs and they get crucified for it. Same with any other large company with a huge number of workers.

It's just a bad incentive structure because nobody wants these workers due to the terrible PR. Amazon is trying it's hardest to automate everyone out of a job.
There’s a few resources listed here: https://www.freebsd.org/doc/handbook/security-advisories.htm...
Social distancing can have a compounding effect for people that are bad at managing relationships. If you just maintain space, most of your relationships can remain in neutral status for a long period of time. This is good for long term networking professionally.

Lately I’ve being doing worse because I compounded all these healthy (as healthy as can be) connections at work but fell into the trap of talking too much with them. Need to scale back and stick to the process.

I know this sounds sociopathic, but the amount of problems you can avoid by just shutting the fuck up and maintaining space (against all of our instincts to socialize) can be healthy for everyone.

This thing pays dividends in the long run since neither party will feel any which way about the other. If it wasn’t for HN, god knows how much of my bullshit I’d be dumping onto others.
Corner stores don't need to be providing higher education to employees in order to be giving them skills. Basic jobs provide plenty of skills and lessons that cannot be learned while sitting at home, such as dealing with customers, time management, and basic problem solving in a work environment.

I think the better option is to guarantee a minimum wage through a subsidy, while abolishing all minimum wage laws. Like a negative income tax. So let's say you earn $12 stocking shelves, the government should subsidize $4 per hour to give you a total income of $16 per hour. If you make $15/hr, they subsidize $1. If you make $20, they subsidize zero.

In this way, the downsides of minimum wages are avoided (cutting back on hours, laying people off, raising prices, and pricing low skill people out of the workforce), while still allowing a decent income for anyone working full time.

You can tax the subsidy at a higher rate than your normal tax rate, so that businesses are still dealing with competitive market incentives and cannot pay a $1/hr leaving the remainder to the government, and so that employees are always incentivized to take the highest paying job.

If you run the numbers, providing every employee in america with a $16 minimum wage, working 40 hours per week, and assuming the average employee making less than $16 makes $12, would cost $500 billion per year. This is not an out of reach policy.
This is a very interesting project!
An Introduction to Kubernetes Security Using Falco
As Kubernetes continues to grow in adoption, it is important for us to know how to secure it. In a dynamic infrastructure platform such as Kubernetes, detecting and addressing threats is important but also challenging at the same time.
If you measure they will still have variances between doors, Toyota is just more strict with allowable tolerances.
Apple wanted native apps, not the ‘one size fits all’ poor experience Flash promotes.
Why? There are many ways prosecutors can coerce people, and not all of them involve money.
I think what greedo is saying is that since the stuff would happen anyway, it shouldn't be attributed to the lockdown, but should be attributed to COVID.

That is, instead of having 2 categories: (1) effects of COVID and (2) effects of lockdown, with economic downturn put in effects of lockdown, there should be 3 categories: (1) direct effects of COVID, (2) indirect effects of COVID, and (3) effects of lockdown, with economic downturn put in indirect effects of COVID (or at least largely there).
Many people have a book they read in their teens that changed their outlook. For some it's 1984. For me it was Greene's "The Power and the Glory". It, and the questions it raised, are still with me.

Monsignor Quixote I can also recommend. The others I read I have forgotten, except for Brighton Rock which I didn't like.

As a sibling commenter has said, if you have any form of religious background or have seen that world, his books speak with a depth I think it would be difficult to grasp without that.
YouTube Enhancement Suite (YES): My First Chrome Extension
Suggestions and comments are welcome!
That's why ;) No one is advertising a DSN lookup tool, so CPC on Google search is 1 cent. I've set the limit on 1 euro per day, but I could probably buy more traffic if I wanted.
Wait until the start of the next quarter. Vast majority of the cars are fine, but just be aware what to look for. They will fix issues after the fact but it’s helpful to catch anything early on.
Ho-Mobile (Vodafone IT MVNO) allegedly hacked. 2.5M records stolen
A few points make the difference bigger:

- Gross to net includes 13.07% employee side social security contributions. The state somewhat lowers those for the lowest income earners. This increases the gap.

- Progressive taxation. Under 24k gross, you pay 40%. Up to 41k, you pay 45%.

- A large part of the bottom 25% tax bracket is actually 0% (~9k tax free base).

- Local taxation (usually about 7%, but 0% in the richest enclaves) gets tacked onto the tax amount.

- Regional taxes are also progressive.

[0] https://financeinfo.be/belastingen/belastingschijven/
You can bootstrap key exchange from a short-lived password. Not perfect but at least limits the attack time window.

Companies serious about security just have a trusted person hand out hardware with signed keys on it.
I really like the look of this however bare it mind that it not able to run on raspberry pi / ARM processors.
> We've had dancing puppets like Walt Disney's Small World.

With all due respect to Disney's Imagineers and their technical accomplishments, you can't really compare Disney animatronics that are literally bolted to the floor to what's being demonstrated here.

You can compare the animatronic presidents etc. to various industrial robots that are also fixed in place if you like, but the closest Disney equivalent to Atlas etc. are the 'stuntronics' first demonstrated in 2018: https://techcrunch.com/2018/06/28/disney-imagineering-has-cr...
It’s not our responsibility to make up for your lack of income. Poverty sucks, but punishing the masses so you can feel good about “fair share” creates resentment and abandon.
https://en.wikipedia.org/wiki/Progressive_web_application
Well, that problem will quickly fix itself because now that will just not work and there is no workaround. And coincidentally that is why you need to make sure there is 100% no workaround.
> This is how the best technologies are usually made, not by academically trying to perfect everything, but by banging out something that works and running with it to solve real problems.

I think this is a really important point. I don't think I've ever told you this before, but I am really impressed by how quickly you turned out proto2. While there are some things here and there that we wish we could change, a lot of it holds up really well. A lot of decisions I made in upb early on, where I thought I was improving on proto2, actually turned out to be bad ideas and the proto2 design was better.
I miss flash games. The internet is not better without flash, because it lacks those tiny creative games people with little tech knowledge done fast.

That kind of scene is not present now.