skysight-inc/HackerNews huggingface dataset:
I can't find a good page from Microsoft listing acceptable CAs for regular certificates, but the driver signing page has a list for EV certificates:

https://docs.microsoft.com/en-us/windows-hardware/drivers/da...

I would buy a non-EV code signing cert from any of those. Look for discount codes, I know DigiCert used to have a pretty nice discount code, although it still cost a bunch of money; OTOH, DigiCert was very flexible in my experience, even when I was just a small customer; I think we had a maximum of 5 wildcard certificates at once, plus one code signing certificate, but they would issue all sorts of 'custom duplicates' and let me 'rename' a wildcard to a totally different domain to avoid buying a new wildcard, and were helpful with adjusting expirations for the sha-1 cert sunset. If the price isn't a huge barrier, I think they're cool; but I also understand if the price is a barrier.
Reading all this I see a new product opportunity:

Invent "a better piss bottle" for drivers. Extra points for accommodating female drivers.
I checked out Quickstrom, and I thought "Wow, this looks amazing!"

Then I noticed who wrote it and thought "Ah. Well that makes sense."
That's the point. No one uses it because it sucks.

Meanwhile, my linux box has a dedicated macro to opening and closing SpeedCrunch, I also have br from the command line. Along with a numberpad input, there is literally no difference here from a desk calculator (which I still have, of course)
What happens to a liquid lens at -60 F / -51 C?
Every time someone argues that people can avoid the privacy problems of Facebook by simply not using it, I point out this issue (plus the shadow accounts).
It could be! There is one that's hostile, but I can't remember which. I know for sure because my colleague switched back to a Mac and it's complaining about it
Sure, if Amazon didn’t have any resources to help mitigate the problem, didn’t have control over the schedule pressure they put on drivers, and didn’t tweet dishonestly about the problem then I could see letting them off the hook.

But, they’re a massive company with the resources such that they could address this problem. They could also reduce the schedule pressure on driver’s and allow them to take breaks long enough to use a restroom. And they tweeted dishonestly saying it wasn’t a problem. So, I’m not really ready to just let them off the hook. Amazon has agency, and could fix or seriously mitigate this problem if they wanted to. Instead, they chose to ignore it and equivocate about it until it turned into a PR black eye.

When I was in high school, I did bread deliveries for a bakery. There weren’t really restrooms I could use when I was on my route in the mornings, but I was told if I ever needed to use the restroom and had no other options I could always return to the bakery and use our restrooms. I never peed in a bottle doing that job. I also never got in trouble for being 20 minutes late for having had to use the restroom.
It’s amazing to me how Docker became the devops tool of choice, when its experience on Mac and Windows was just so horrible for so long.

Linux users have more power than they realize, in certain sectors.
> For all practical purposes, the window and the application are the same thing

Not at all. That's a very unique thing about the Mac that trips Windows people. It's a subtle but crucial difference, unless you grasp it, you'll always be a bit lost on the Mac, as I am when I use Windows.

On the Mac, for instance, Photoshop can be frontmost and have no windows, panels, while you're seeing your whole desktop. The only hint you have is the menu on the top left. Photoshop on Windows covers your whole screen all the time when it's frontmost. If you think that's tomato tomato, you haven't understood the difference.
> If you're complaining about Linux drivers please do so after using a Laptop that supports Linux (Thinkpads for example)

I bought a Lenovo specifically since they mentioned all their laptops will support Linux in the future.

Note that historically Lenovo didn't really "support" Linux. Remember the Windows tax and how most Thinkpads came with Windows and most still do? Thinkpads supported Linux in spite of Lenovo / IBM.

Anyhoo, my new Lenovo had to wait a few months until the trackpad worked! Turns out Lenovo only meant that business laptops (or some other sub-category) will support Linux out of the box. Silly me.
A (nice) hotel I stayed at recently marked their lobby restrooms as closed, even to customers. It get odd as the hotel wasn’t somewhere you’d walk to, so it would be paying customers anyways
Not really an answer to your question, but one partial solution to the problem of having your number leaked or sold is to setup a service like Twilio to act like a phone proxy. You can have Twilio forward calls it receives on a different number ("spam number") to your actual phone number ("real number"). You provide spam number to anyone who isn't a business or personal contact. Every few months, you rotate spam number. If your spam number is leaked, you don't care because its only a transient number which isn't more permanently associated with you.

You can also have more permanent proxy numbers for services or people that may need to get in touch with you long term.
No, Chrome is the new IE6. Safari is... still safari.
FatCow Hosting Review
Just like Kelly Loeffler didn't share any info with her portfolio manager
Yeah. I tend not to pick up calls that are in the "Who would be calling me from Texas?" vein. But while it's annoying to have to look at my phone when it rings, I do get calls from locations that seem plausible and they usually are legit. I'm not really willing to make myself harder to reach for legitimate and even important reasons because of the occasional junk call.
If you know about brew you can also find a bunch of extra quicklook plugins: https://github.com/sindresorhus/quick-look-plugins

Works on and off for some things (video previews for example) but overall worth a quick "brew install" in my opinion.
It claims not to, which isn't a guarantee. After all, they also claimed not to use phone numbers given to them for 2FA for anything else, and yet ended up using them for ad targeting.
"The Sad Truth" is that you have to be a little bit cautious/knowledgable in order to take advantage of a potential optmization?
Very interesting project to have a look is CudaText an open source Sublime alternative made with Lazarus/Freepascal

http://uvviewsoft.com/cudatext
How can I vouch for the child comment to your comment that is dead? Does any one know? I would like to know if their comment is wrong or not.

I’ve been able to vouch for comments once or twice before.
What machine? I've got a 16GB i7 SurfacePro, seems to take minutes compared to other computers I use.

Windows updates still take hours and still sometimes need multiple reboots vs Kubuntu which updates whilst in use and barely ever needs rebooting.

Having come back to MS Win (for work) after a decade+ away, and with an MS produced computer I was expecting to be blown away by the speed.

Aside: have you tried systemd-analyze blamw, very useful for diagnosing boot slowdowns; https://www.commandlinux.com/man-page/man1/systemd-analyze.1...
Even proer tip: https://github.com/lcn2/calc

Can't live without that one in $PATH.
> MP3s require floating point unless you hand code fixed point version of the decoder.

This is a weird statement. "MP3 encode/decode requires floating point unless you implement in fixed point such that you don't need floating point." It's perfectly possible to write fixed point MP3 decoders.

Sure, MMX wasn't that great, but it was Intel's first SIMD extension, was definitely intended to help with "things like MP3 decoding," and was followed by a ton of improved extensions with similar goals.
Thanks Kenton.

> Firecracker runs attacker-provided native code directly on hardware, which means that hardware itself becomes an attack surface, one that is quite wide, not fully documented, and very hard to patch if problems arise. It's much easier to work around hardware bugs...

I see your point. I mean, Google wouldn't put as much effort as they are on gVisor if KVMs were the best possible answer.
The issue is letting untrusted or badly behaved devices on the network. UPnP works great, if you control which devices get on your network.

Static port forwarding combined with DHCP gets annoying quickly, you end up having to set up static assignments for every device that may need a port forwarded, which can be a lot, with modern multiplayer gaming and p2p.

And for applications that select a random port on startup, such as some bittorrent clients, you either have to manually forward the port every time or select a static port.

UPnP serves a purpose and is extremely convenient, as long as you trust the devices on your network.
How to buy the leaked data? Please share telegram bot link or raid website link
I hope so. I believe it's this:

https://en.wikipedia.org/wiki/STIR/SHAKEN
>Unfortunately, I'm not sure the market for strictly native/browser-agnostic services is large enough to support most uses.

I guess "strictly" is debatable, but the point here is that the market for at least somewhat browser agnostic services includes, well, the entirety of iOS at the least. Precisely because there is no "choice", which means big services/developers can't force a choice on us either. If I browse somewhere on my iPhone, I won't be told "go install Chrome" because a I can't (or rather, it'd make no difference because an iOS browser is still the same engine so like "iOS Firefox", "iOS Chrome" is mainly a skin). Sometimes I may see a "better in the app" which I don't mind if it's dismissible because if it's somewhere I actually like, well, maybe I really will try their app. And while iOS users aren't remotely the majority of the global market by user count, they tend to punch above their weight in spending; they aren't a random sample of the population. It's a not insignificant market to entirely forego.

Different people will have different services they depend on and different views of the web in turn, so YMMV, but at least for me that seems to have been enough. I completely uninstalled both Chrome and Chromium, and between Safari and Firefox on Mac and FF on FreeBSD or Ubuntu I haven't encountered anything critical that was non-functional. Apple has effective collectivized the buying power of a picky subset of people. That's definitely not always good, but nor is it always bad. I think at this point a lot of us are making a conscious choice to join that ecosystem, and those of us unhappy with some of it handle it by keeping our main computing environment mixed up.
They also care because in practice such use is often done by attackers unbeknownst to the person paying for the resources. That would much rather make the person paying aware ASAP of such usage, rather than have them be on the hook for a large bill at the end of the month. Google does have a complicated process to allow cryptomining on their infrastructure. They also flag all kinds of other suspicious activity, eg once somebody was launching DOS attack from cocalc on “the country of Turkey” and that got some of cocalc shutoff immediately.
The only ingredient is potassium bicarbonate -

https://mynews4.com/news/local/gallery/fda-alkaline-water-un...

This feels like the vaping BS all over again.

Alkaline water doesn't give you non-viral hepatitis.

There must be some guesses on the possible contaminants. If covid has messed with potassium bicarbonate's supply chain other companies probably need to know.

Or it's not "Real Water" and something else at a shared store which people wash down with "Real Water". Or someone is making their own 'Real Water" with a cheap chemical.
> "We know that drivers can and do have trouble finding restrooms because of traffic or sometimes rural routes, and this has been especially the case during Covid when many public restrooms have been closed."

"We are sorry that everything except our impossible scheduling algo enforced by AI-backed driver surveillance causes employees to pee in bottles."
I don't know about you, but I've been embedding data into images and sharing them for nearly 20 years. My target audience knows how to correctly consume these files.

Don't coddle the user.
Illiterality gets me nowhere.
SMB is more understandable though, since you have more trust for things on your local network, and an attacker usually won't have control over those resources. And it's a fairly common and reasonable expectation in a business environment that network drives appear as part of the filesystem.

Whereas a domain name over the open internet is an entirely different story.
>"The Linux userland relies relatively heavily on these semantics. It was a major obstacle to getting an SSH server running on cisco IOS, for example."

Can you elaborate on this? Hasn't Cisco IOS at various times run on MIPS and X86 processors?
I have ZeroTier running behind a variety of different NATs and haven't had any issues at all. It also seems to do a good job of having hosts on the same network talk directly over their private IPs.
I always thought it was stupid to have a whole office unoccupied on Fridays when there are so many people working in cafes
Doesn't TrueNAS (was FreeNAS) connect to iXsystem servers from the NAS and from the NAS web interface?
That's why there's a need for public bathrooms. We are de facto privatizing bathrooms in a way that ends up being an anti homeless policy.

Merchants understandably don't want to provide free bathrooms to the general public even where homelessness is not the driving concern. It costs them money while not making any money, so they limit bathroom access to paying customers if they provide bathroom facilities at all.
I interviewed with an engineer from alltrails. He was very condescending and doesn't even spend much time outdoors. I expected a different culture from this company.
I'm probably misremembering.

How to delete word (back and forward?), maybe it's that one.
I wonder if you can get a VoIP number from a different country (where good regulation means spam is less prevalent) and use that for work calls?
Some things not mentioned in this article:

The Pantheon desktop environment (default in elementaryOS, a Linux distro) is the most similar to macOS, in case that's what you are looking for.

Kupfer is an alternative to Alfred. Tilix is an alternative to iTerm2. Instead of using Crossover, just use SoftMaker FreeOffice.

I would use Xournal++ rather than Xournal.

Gimp has a lot of annoyances right now, notably: uses GTK 2 which doesn't support HiDPI. Gimp 2.99.2 (development version) adds support for GTK 3 but it's unstable and crashes often. Hopefully Gimp 3 is released soon. For now, I use Krita.
I see, best of luck with your venture!
People throw all kinds of garbage into toilets and fixing them becomes a weekly chore.

Anyway, if people can start a successful business around overpriced coffee, then I'm curious if it's possible to start a profitable chain of public restrooms.
It was also forked as “Strawberry” a couple years ago: https://www.strawberrymusicplayer.org/
At this point i don't see why only facebook and the thieves should have access to this data. If the data is public it loses its value
> System 76 is not cheap.

I acknowledged as much. However, the OP's comparison is with a Mac so I don't think discussing the cheapest approach is in the scope of the discussion.
Have you tried PCem?
people should start peeing on the streets
Also RON: https://github.com/ron-rs/ron

A bit like JSON5, but I believe even more advanced.
Hi, how do you know? It is of personal interest to me as I don’t use FB but do use WhatsApp. It may also reduce the piling of downvoters.
You mean "enable them all over again for every new DHCP assignment, unless you insist on static IP assignments".
Ask HN: Which online forums do you use for in-depth non-IT industry discussion?
I love HN for the tech news, but for my a few industries I work in, I find it difficult to find really nitty-gritty details about what's going on in the industry.

I figure other people are having similar problems.

Maybe we can all list out the niche forums we use for our non-IT industry chat?
Facebook annual revenue is 86 billion. I'd be happy to see an end-fine anywhere over $1b
Yep, it was an aftermarket HD. The original was about half the size.
Being able to pee anywhere is the one app that is missing from my iPhone.
I love the idea of these electro-optic (or in this case electo-thermal) configurable lenses. and fourier optics in general.

What range of optical wavelengths did this lens operate well over, or could a similarly constructed system operate. My experience with electron beam exposed PMMA grating/lenses was that they were OK over the optical range, but did show noticeable dispersion, while for filtered (or laser) optics they worked extremely well to replace much thicker/heavier system solutions.
Not Growing a Language
UI tip: In any window, double-click on the icon at the top left to close the window.

This has existed since Windows 3 and persisted through 95, XP, 10, etc., but not many people know about it.

App windows that have custom chrome like Chrome, Firefox, etc. cannot use this trick, however.
The root of the problem is not the privacy policy or the system security. The root of the problem is the collection itself. All large businesses, health care providers, and governments maintain databases. Every one of them will eventually be leaked. All it takes is a corruptible trusted insider.
Am I the only one who doesn't see a rosy picture in the Twitter thread? The tone is definitely positive compared to huyenchip but it isn't idealized to the point of being disingenuous. I'd say it even paints an accurate depiction of a start-up's struggles.

Her first point is even "Play the long game". It's not an overnight success. "Wealth creation doesn't happen in one go, make it a long game, with regular payouts, that then get invested in some form again & grow more & more".

The Twitter thread and the blog post aren't contrasting experiences. Yes you had to do lots of something you didn't want to do but that something was you, an engineer, had to do market studies for a feature you would later build. Yes most startups won't offer a clear career trajectory because, quoting the thread, "Will you be a brilliant full stack engineer or do you have potential to start as a good one but can pickup quickly & grow into a data engineering role".

Yeah start-ups could overhype the experience the way they oversell their product. But I don't see the that in the thread.
Try DSub and your own airsonic music server. Optionally open up cached files in foobar2k instead.
Bayer and the Holocaust
Personally, I always use ipython. I have ipython aliased to "I" in every OS and my preamble/startup environment contains

from numpy import *
from numpy import array as c
from math import *
import numpy as np
import pandas as pd
import matplotlib.pyplot as plt

Previously I used to use R, which also has a very fast REPL with self-documentation similara to ipython's '?' magic.
When I was in LA for a work trip a few months ago, alkaline water was being pushed everywhere- fancy restaurants, even gas stations had "We Sell Alkaline Water!!" signs out front.
See my other comments on this thread about Facebook's situation with the GDPR: https://news.ycombinator.com/item?id=26682200

Long story short, regulators already have more than enough evidence about Facebook's lack of GDPR compliance so they could've already imposed large fines if they wanted to. The fact that it hasn't happened yet shows there's no motivation to actually enforce the regulation.
European here. What are these bot calls exactly? Never had one as I guess it’s forbidden where I live.
I don't think this problem is solvable. The server must be able to generate signed JWTs, so if you have access to the server, you'll be able to do that. The cryptographic details don't matter.
9091 might be for the transmission web UI
I use a lot of software/devices which I think is using UPnP (airplay, airdrop, pioneer dj pro link, maybe the printer etc.). There's talk here about disabling UPnP but does that mean that the devices wouldn't be able to find each other? I don't want to babysit my router.

Or aren't they using UPnP? Quick googling wasn't successful. I thought most of those autodiscover-services use UPnP.
Why would a cop have to be “crooked” to arrest you if you are breaking the law in your jurisdiction by possessing thieves tools?
This is another good argument against weak types in general. Strong types are better, and explicit is better than implict.
OPNsense or pfSense
Why wouldn't I use static dhcp?
That doesn't seem to be correct, although what does 'phone numbers' mean in this context?

Quote: "WhatsApp, which was acquired by Facebook in 2014, does share some limited data with Facebook, including phone numbers. However, the firm has reassured users that messages will always be protected by end-t0-end encryption, which means neither WhatsApp or Facebook can see these private conversations"

Source:
https://www.forbes.com/sites/carlypage/2021/01/15/whatsapp-d...
Don't know if it's true for this model, but at least some Terramaster NAS's are just x86 computers [EDIT: I see the model in the article is an ARM box, but also that it's already running a Terramaster specific Linux distro, so just nuking most of the Terramaster specific stuff might be easier than trying to find a way to do a clean reinstall].

For at least some of the x86 ones, you just need the right cable to connect to a suitable monitor, and it can boot from a USB drive. You don't need the VGA cable to replace the OS, but it helps a lot. You may have to dismantle the whole thing to get at the boot drive, but they're pretty easy to take apart.

First I did with mine was to install Open Media Vault.
> Every one of them will eventually be leaked.

[X] Doubt
That kinda sad, because that is what’s going to happen and then we’ll nothing more.

At this point I’m not really sure what it will take for companies, like Facebook, to understand that you need to not fuck around with peoples private data.
Remote Inning | Python/Django Developer | Full Stack Developer (Django + React/Vue) | Remote (India) | Full-time or Part-time | https://www.remoteinning.com

Remote Inning is looking for Django Web Developer. We are looking for developers with qualities like consistency, reliability, working independently and communication skills especially written skills apart from tech skills.

As we are a remote-first company, you can work from a place of your choice. The position is open to candidates based in India only. Full-time salary is 15-25 LPA and hourly rate is $20-$25.

Why work for us?

- International projects

- Great pay

- Write blog posts for the company blog

Job description: Worked on complex Django projects and React/Vue experience is a plus. https://drive.google.com/file/d/1o7YRPQAwJIX3mQ92JNzAzdmXdtX...

Email us at hello@remoteinning.com with Resume. Mention your development experience, motivation for applying to us and links to relevant projects.
I usually prefer FOSS too, and your paranoia for advertising is healthy imo, but I was looking for a PowerAmp equivalent that I could sideload to an old offline KitKat phone for a car trip this weekend without cracking. I did find Vinyl and the others but didn’t care for their UI. This was what I ended up going with and liked it enough to share :)
Miss a payment? Good luck moving that car (2014)
You need to do a bit more than that; a one-way transform with no secrets isn't good enough for easily brute-forceable data like phone numbers, SSNs, passport numbers, credit card numbers etc. There's just not enough entropy in the data.

There are ways to do these things though so the spirit of your comment is correct.
I wish I were Irish. Imagine 3 billion dollars extra taxes! It's like a second COVID-19 relief package.