skysight-inc/HackerNews huggingface dataset:
There's an extremely wide range of adversaries between "potentially capable of MITMing a network I use" and "potentially capable of screwing with my OS/browser's CA roots or actively acquiring and misusing an illegally obtained valid TLS cert for ubuntu.com".

Sure, most nation states can craft whatever TLS cert they want, with only some risk of bad press if they get caught signing a ubuntu.com TLS cert fraudulently via a CA they control/coerce. If those people are my adversary I'm screwed. "YOU'RE STILL GONNA GET MOSSAD'D UPON!"

A TLS connection for the download (and the gpg signature) protects against people like the disgruntled hotel IT guy, the kid futzing with the cafe wifi, an evil housemate, some crappy rooted IoT shit somebody hooked up to the wifi, an overly curious coworker or corporate IT drone, the red team in a company pen test.

I've heard the arguments here - that it's a difficult problem for all the mirror operators to add ssl certs, that it'll stop downloads being cacheable, etc. But I didn't really buy those arguments 5 years ago, and these days, with LetsEncrypt and HSTS - I think those arguments are even more bogus than they were in 2015...
Not that we have public evidence to prove whether it was a nation-state or not, but in my experience as a vulnerability researcher, finding high-impact flaws in popular tools (closed + open source) and government services is much more easier than people realize.

Take a look at the number of vulnerabilities reported to US Department of Defense via Hackerone: https://hackerone.com/deptofdefense/hacktivity?filter=type%3... (and these are just the ones publicly disclosed, a lot of them remain undisclosed, you can change the filter to see how many are reported in last few days/hours)

And taking this single report as example: https://hackerone.com/reports/761790

Reported at: December 19, 2019 4:19pm +0000
Resolved: 1 Month ago

And this is when there is no bounty attached to these, just some Hackerone points which help you gain higher reputation and possibly win some private program invitations. Imagine how many reports a monetary reward would bring in. I would really be surprised to know that adversaries are not already hoarding the flaws, especially when this is their daily business.
I don't know what's the "it" that you mean. I simply think that this piece of work would greatly benefit from some image or video examples of the technique being applied in practice, especially to help people who are not very acquainted with 2D and 3D image processing.

For instance, I can only imagine right now how this technique works; I'd rather not leave that to my very imperfect imagination.
>They are very interested in chess, despite the fact that they have eyes with properties that make it impossible to make out what actually happens on a chess board. (The whites and blacks and squares all blur together.)

I suspect that the real breakthrough would come when the alien physicist designs a very sensitive instrument that can observe exotic wavelengths of light at high resolution, and thereby show that the board is not uniform, but is divided into regions that have 1 of 2 states: i.e. black and white squares.
A significant problem with traffic replay in a few cases I've considered in the past is HTTP POSTs and usage of headers. For most, logging that extra info is not realistic and rules out traffic replay as a possibility for simulating realistic load.

Quite often, everyone one the team will already know which endpoint(s) are slow or unscalable. In that case, it is possible to set up a much less realistic load test in order to generate some flame charts of the problematic area. It can be more pragmatic than having to maintain what is essentially a new integration test suite as the author mentions.
>add more photos

How much does image actually weigh in the site's score? What about the text only websites e.g. PG's essays, not including forums like HN. I would presume PG's blog has great backlink score but would a similar site with same number of backlinks but with several images rank more?(hoping for clarification from an anonymous Googler).

I'm asking this because my text only blog content titled 'Startup ideas vs Problems'[1] was the featured snippet when the search term is 'Startup ideas vs Problems'[2] until recently as the current featured snippet features another website with a featured image within the blog post.

Although my blog is still the first result, but google now suggests 'Did you mean: Startup ideas and Problems' which buries my blog post effectively killing my traffic.

[1]https://hitstartup.com/startup-ideas-vs-problems/

[2]https://www.google.com/search?hl=en&q=Startup%20ideas%20vs%2...
Go does include a reasonably capable HTTP server, so they could have done it in Go... but would you add the Go's HTTP server LOC to the count? :)
With any kind of compilation process, a balancing act between time spend waiting and the quality of generated machine code.
Lots of politicians are refusing to get the vaccine. Something about waiting their turn. That seriously undermines democratic governments in a pandemic.

I don't understand mocking freedoms. There are many people in nursing homes that want to see their families but can't. They are angry because the caretakers can see their families but they can't. Will you mock them too?
Some kind of pandoc-based extra input method would be a brilliant feature for other formats though. I'm an editor for a journal where we currently convert all our docx's into tex via our WordPress admin panel (which pre and post processes them using sed) and then drop them into Overleaf. If it could all be integrated into Overleaf that would be another killer feature.
that has nothing to do with shallowness, if someone has spent a few months at X previous jobs before you, this is definitely something to be addressed in the interview.

Had an acquaintance recently that hired a guy that didn't pass the probation period at 2 out of 3 jobs he had. My acquaintance didn't address this at all and hired him anyway. In a few short he managed to transform in the whole office to a hard to believe toxicity and had to be let go. He made a huge scandal, tried to involve lawyers etc. Now he didn't pass probation at 3 out of 4 jobs.
Just remember: It’s “key/value” store.
It also makes sense since it's the same as frequency, and historically with baud rates in the 10s and 100s it makes sense to not divide it by 8.
Hmmmm... selection bias maybe? I think that’s in line enough with what you’re describing.
Interesting points indeed. On the other hand, India had a hard lockdown for 6-8 weeks, and yet the numbers zoomed up weeks after that. And now, the numbers are magically going down despite absolute carelessness widespread. Inexplicable
Movies give a very unrealistic example of chance of survival after heart attacks or cardiac arrest.

People are likely to survive one, but not the other. You wouldn't know that from film where almost everyone survives.
Julian Assange: Imminent Freedom – Craig Murray
But the whole point of the article is to claim that its example are possible, and yet it fails to demonstrate that. We can posit a world in which God declares that logical positivists may not enter heaven, and in such a world logical positivism would be a poor choice, but there's no evidence that that's actually the world we live in.
Absolutely! I have been dreaming about the mirror since I first saw it! I have found this brilliant website [0] that has many of the ideas I know of. Mainly the LEDs behind the mirror [1], on the stairs [2], on the kitchen [3], and the ceiling [4]. The ceiling ones are pretty cool because they can lit up the room more homogeneously and it makes it way more relaxing and comfy. Some of these ideas help to better simulate sunlight which I find pretty stimulating.

I know of a few more that are not on the website tho! I have seen led strips on closets (ala fridge style) that light up when you open them (With something like [5]). I have also seen the opposite of the LEDs on the ceiling, on the floor. Something like [6] but in the hall is pretty cool. When you finish watching that movie/tv show and go to sleep you no longer have to choose between finding your way in the dark and getting light at your eyes.

When I get my own place, I will certainly try out all of these ideas. I find them light (hehe) years better than LEDs on computers.

[0]: https://www.lightstec.com/led-strip-light-ideas/

[1]: https://www.lightstec.com/wp-content/uploads/2018/09/led-str...

[2]: https://www.lightstec.com/wp-content/uploads/2018/09/Led-str...

[3]: https://www.lightstec.com/wp-content/uploads/2018/09/Led-str...

[4]: https://www.lightstec.com/wp-content/uploads/2019/07/strip-l...

[5]: https://www.amazon.com/Cabinet-Wardrobe-Switches-Drawers-App...

[6]: https://www.instyleled.co.uk/wp-content/uploads/2017/05/pure...
Spot on insights for anyone trying to pursue a career in tech
Perhaps it has something to do with various resources not loading?

https://sourcemaps.squarespace.net/universal/scripts-compressed/cldr-resource-pack-3e6d18ccbc01a401a2e61-min.en-US.js.map

and a couple of others... (reason: doesn't resolve for me)
What Is the Peace CBD Oil?
As mentioned, Peace CBD Oil has been for quite some time been the attention of scientific researchers and media. It has numerous health benefits to provide, which means many people appreciate CBD Oil for the vital benefits. CBD oil has shown amazing results in improving one’s health because it addresses many different body and mind problems, starting with relieving chronic pain and ending with reducing insomnia or decreasing blood sugar levels. Cannabis contains more than 400 phytocannabinoids, but CBD is the only one that can make a person feel healthy again.Click Here https://apnews.com/press-release/newmediawire/lifestyle-busi...

https://sites.google.com/view/peace-cbd-oil-benefits/

https://zenodo.org/record/4418346#.X_PzNSPhXIV

https://wiseintro.co/mysite4949137
Love this! Great learnings
Well, I tried to set it up ob my parents iPad and it demanded that they also own a smartphone with the same phonenumber.

They owned feature phones so they've been blocked. Telegram paired just fine and works on any number of devices without linking them together and worrying about connectivity/battery for the main device.
Are you a fundamentalist Christian? You kindof sound like one.
The Future Is Here: Top Blockchain Use Cases
If I've understood it correctly, China isn't persecuting Muslims, but Uyghurs, and their main justification for it is the East Turkestan independence movement. There are plenty of Muslims in other parts of China living normal lives.
Well, same pitfall: if someone is nearby is determined by the client and can be spoofed. Technically you could check a GeoIP database and also usecell phone + wifi information to make it harder. All of which can be chosen by the client (apart from the IP, but thats also not a big deterrent)
The Lie of “It’s Just Math”
IPinfo.io | Various Roles | Remote | Fulltime / Parttime / Contract | https://ipinfo.io & https://host.io

IPinfo is an IP address information API and data provider. Our industry leading IP geolocation API handles over 40 billion API requests a month. We're bootstrapped, profitable, and growing. We have a small fully distributed team spread across the globe, we’re working on lots of exciting things, and we've got big ambitions!

We had an amazing 2020, dramatically improving the data accuracy of our geolocation data, and closing lots of great deals and partnerships (many excited ones to be announced soon), and launched our new domain data product & API at https://host.io.

We're looking for exceptional and ambitious people to join our team - we've got various senior roles we're looking to hire for:

- VP / Director of Operations
- Backend Eng / DevOps / Site Reliability
- Sales Engineer
- Developer Relations / Evangelist
- UI/UX Designer
- Product Manager

We'll be posting more detailed job descriptions in the next few weeks, but if you think working at IPinfo sounds interesting and you've got the skill set to match then reach out to me at ben@ipinfo.io and let's get the conversation started!
Google has really turned "bad" over the last years. Whenever I search for anything I immediately get thrown a ton of shopping websites in my face as if my default mindset is "buy more crap". Google has more and more turned into "where to buy" instead of "where to find information".
Searching for information on "Vienna"? Here are 200+ hotels you can book! It's like a game how to formulate your queries to avoid the most annoying results.

Pinterest is a cancer in the Google search results. I hate having to surgically add 10 different pinterest exclusion terms (from various countries) to my search query.

I wonder when a hybrid "wikipedia-of-search" solution arises.

I'm envisioning distributed clusters of specialized indexes for various topics. For example some enthusiasts crawl and curate tonnes of cooking websites, others technical and what have you not. Anyone with somewhat beefy servers can then make a search engine by subscribing to these indexes (bittorrent-like manner?) and pick and choose what they want included.
A whole ecosystem of information indexing would pop up and we'd see blocklists (AdBlock of search) and craplists. I'm sure Pinterest would end up on one or two of those lists.
I still haven't understood why people keep saying that there is randomness in QM.

The so-called "wave function collapse" isn't really part of QM, it's duct tape that we have applied to stick together the QM with "Classical Physics" and our pre-existing assumptions about human consciousness. I don't think we should consider it "real" or "true".

Without the wave function collapse, there is no randomness in QM.
I‘m guessing players like Medium work around the rules by allowing X number of free (as in not logged-in) views. So it works if you open the link in private mode. But search engines could have the bot retry requests to check the website‘s honesty.
The most famous North Korean on YouTube
Typically consultancy companies declining work will give a reason that maintains the relationship, which often isn’t the real reason.

If you hate the people, that’s not the reason you tell them. You tell them you don’t have sufficient resource to provide the level of support you would want to put on the project, or that you don’t feel you can be price/quality competitive because of some factor and don’t think you are a good fit compared to your competitors.

I would never tell a client that their website “doesn’t meet our quality bar” - that’s basically saying “we are too good for you” and I would personally think it’s incredibly condescending - just look at Berkshire Hathaways website!
The fallout between China and Australia is because of Australia's incredibly aggressive Covid strategy and rhetoric.
Related question: what is Pinterest for, exactly? As in, why does it exist? I created an account there long ago when the site was new and tried to figure out what problem it was supposed to solve but failed. I remember trying for a short while to use it to collect news clippings on different subjects but that was really frustrating so that can't be it. Wikipedia says it's for "image sharing [...] in the form of pinboards", that it's "a catalogue for ideas" and that it "inspires users to 'go out and do that thing'". What does that even mean?
https://www.descript.com/security

We don't use your Project Information for anything other than providing the service we offer — e.g. we don’t sell it; we don’t use it for marketing; we don’t use it for advertising.

This is a strong statement, which is nice. Only covers the projects themselves, though.

Under what's shared:

Google Cloud Speech-to-Text to provide automatic transcription

Google only accesses or uses your data to complete the automatic transcription service. Shortly after completing the service, Google deletes your data from its servers.

As the only HIPAA-compliant automatic transcription service, Google is an extremely privacy-friendly transcription service.

3 second search:

https://edition.cnn.com/2019/07/22/tech/google-street-view-p...

https://www.reuters.com/article/us-alphabet-google-privacy-l...

https://www.forbes.com/sites/daveywinder/2019/06/23/google-c...

And then there's a bunch of other integrations with Google/AWS/others.

I understand some of the issues were fixed bugs, but I don't know if selling Google integration as a privacy choice is honest, given Google's business model.
Motorway | Senior Developers (backend, frontend, UI), Director of Engineering, IT Support Engineer | London, or Remote (depends on position) | Full-time | https://careers.motorway.co.uk

All details about Motorway in the link above. We use React, NodeJS, Postgres, Redis, NextJS, among others technologies. I can confirm it's a great place to work. Feel free to email me at my username at gmail.com if you have questions.
Why would you? There's almost no cases where you would need oxygen to every room...
Because it's cumbersome enough to use cash. My main problem with cryptocurrencies isn't that it's used by organized crime, but that it risks eroding public trust in the tax system. In high tax/high trust systems, that can be disastrous.
Hard limits to cash transactions exist in most countries around the world. For example, in France, as a business, you can't accept payment in cash above 1000€. Between consumers, you need to produce an invoice.

I personally deeply disagree with the EFF regarding FinCEN. From my point of view, the obligation imposed by the regulation strikes a good balance between protecting private life and fighting tax dodging and money laundering. Records only start at $3000 and reporting at $10000. This puts most transactions between individuals in the no reporting zone.
This is exactly right, and it's something that i've been trying to explain to anti-crypto people since forever. Crypto democratizes trust. It's true that anything you can do on Ethereum you can do inside of JPMorgan. JPMorgan can execute financial contracts for you easily. However, in order for you to trust JPMorgan do execute them faithfully, it has to be huge in size, and heavily regulated. Ethereum allows anyone to be as trustworthy (more, actually) as JPMorgan, without any massive upfront capital investment, or centuries of continuous operation. If you can't see the value in that, I don't know what to tell you.
No, a touch over 100 years ago Einstein came up with a new set of equations that more precisely describes the movement of objects. Newtonian physics is still valid and still taught at schools since it adequately explains the movement of objects at an approximate level that is good enough for most people most of the time. But when dealing with equations at an astronomical scale, Newtonian physics start to break down.

Likewise quantum mechanics doesn’t replace General Relativity. It compliments it.
Their TTS alone is very convincing. Seems to be better than what Google and Amazon have to offer https://www.descript.com/overdub
Just to add to your point.

Rustls is excellent, but has a Rust API and does not do I/O. Its a great alternative for Rust applications but, for C/C++ applications, the API wrappers are needed [1][2]

[1] https://github.com/stepancheg/rust-tls-api

[2] https://mesalink.io/
That's why good regression tests and CI are so important; in an ideal world (which we were close to in one of my projects), every change is pending in a pull request; the CI rebases the change on top of its upstream (e.g. master/main), simulating the state the codebase will be in once merged, and runs the full suite of tests. The build is invalidated and has to be re-run if either the branch or upstream is changed.

Now, caveats etc, this was a collection of single applications in a big microservices architecture, and as the project grows it becomes more and more difficult to manage something like this, especially if you get more pull requests in the time it takes to do a build. But it is the way to go, I think.

Anyway, since tests and CI are not definitive, you also need a gradual rollout - 1%, 5%, etc - AND you need a similar process for any infrastructure change, which gets more and more tricky as you go down to the hardware level.
It’s actually a neat idea.

It’s a visual bookmarking tool. You bookmark various sites and they are shown as images from those sites.

It’s like creating a collection of ideas.

I assume that’s why it appears on search often: you’re basically finding the collections relevant to your search, and created by users.

However, like Medium, the spammy/forced login ruins it for passionate “leave me alone and let me consume your content for tree” users.
Ignoring them is still the best way. There are some rules to group behavior. For example, this suggestion alone will make some people quite angry.

I don't believe it is only the common social dynamic of people reinforcing their positions in the face of antagonism at play here. It is probably also the conduct of their most irrational detractors that empower their standpoint.

If you ignore them, the vast majority of people would just come around eventually.

You talk about brain hacking here, so they just need to look at you to find evidence for their exotic believes.

Exaggerated of course, but they would just pick the most irrational critic they can find to fortify their views.
What does XP mean in this context?
Not sure about Irish/UK rules regarding this, and it might not be possible everywhere, but if anyone else happens to be in that situation in the future then I can wholeheartedly recommend transferring the old number to a prepaid card, and then simply bringing that along.

That way, you can keep your old number for as long as you keep the SIM topped up (once per year where I lived).
The Effect of a One-Time Gift
OCC Greenlights the Use of Stablecoin by Federal Banks
Bitcoin has a public transaction record but the parties are nameless. All you see is times and amounts. And cryptocurrency mixers make those not very easy to trace.

Also, "solving" it by doing anything that would only cause criminals to switch to something else that already exists doesn't really solve anything, does it?
Good article. It brings up the biggest challenges with load testing. I think the "Maybe don't load test everything?" idea is the solution.

We have to realise that there is no silver bullet. You can spend 101% of your hours on load testing only, and still not achieve a realistic load test scenario. The trick is to determine how much effort to spend creating (and maintaining) your tests, and/or what parts of your app to focus on. Limit the scope. The 80/20 rule applies here, like in many other situations; you get 80% of the positive results (i.e. insights into the performance of your app) by spending 20% of the effort. Simple, unrealistic load tests are a million times better than no load tests at all.
So do you think Telegram owners should subsidise its maintenance which costs tens or hundreds millions $ per year?
Do you think other companies suddenly see a profit motive because Apple does something? I think it's an insult to other vendors if you think they can't come up with an idea like "don't include a charger". Obviously everyone has the idea.

You need to understand Apple's position in the market vs. everyone else to know why Apple goes first. Apple's retention is off the charts. If you are Xiaomi, you can't give your user any reason to buy an iPhone or you've lost them forever. It would be suicide for other vendors to take these kinds of ticky tack steps first.
Oh, sweet summer child
> I cannot remember my password from 10 years ago

> Another thing they offered was for me to fill out the answers to the security questions, but I absolutely hate these and always fill in random characters by mashing my keyboard, so no go here.

This should go as a cautionary tale to always use a password manager. I, too, hate insecurity questions. But instead of mashing keys, I generate unique passwords for them and use the question as a username. Then save them in there as well.
Highly interested in SW/CV roles. Are you open to remote (EU)?