skysight-inc/HackerNews huggingface dataset:
> you have to use it in your existing email client, and then you have to download keys, and then there’s this whole third issue of making sure they’re the right keys.

If you use Thunderbird as your email client, then it will download the right keys for you automatically.[0]

Actually it's two clicks to use the WKD support to download the key (assuming your correspondent's email provider supports that, as ProtonMail does[1]) or the keys are already downloaded if they are included as an attachment or as a header (which is the case if your correspondent is using a client that supports Autocrypt[2]).

As with other E2E encrypted systems, you should check these keys(' fingerprints) out of band, otherwise your security only follows the TOFU model, but this is still a huge improvement over non-PGP email and doesn't require any special understanding of cryptography.

[0] https://support.mozilla.org/en-US/kb/openpgp-thunderbird-how...

[1] https://protonmail.com/blog/security-updates-2019/

[2] https://autocrypt.org/
> one can pop in after 20 years and nothing has changed

20 years ago Clojure didn't exist and Ruby was practically unknown outside of Japan
Speech Analytics, Business Intelligence on AWS
That's a bad thing. PGP has some really awful usability problems which have never been addressed. The paper "Why Johnny Can't Encrypt" described some of these issues in 1999, and a series of followups ("Why Johnny Still Can't Encrypt", "Why Johnny Still, Still Can't Encrypt"...) have come out over the years confirming that it still hasn't improved.
it's easy to get caught up in the tech grind, where you are expected to "hustle" or build a world-changing product 24/7.

I used to get anxious in my free time- like why spend my weekend washing my car when I could work and earn enough per hour to hire someone that could do it instead? but truth is I like doing the mundane tasks as it relaxes me and it's the simple things in life that makes it.
My maths/physics undergrad was mostly spent trying to solve a lot of problems and exercices. I don't think I've had to actively memorize things. I still remember a lot of things.

On the other hands, there are subjects that I've been trying to learn just by reading or watching youtube videos and my knowledge stays very superficial.
Trademarks. Also, manufacturers might get money from parts makers (the big three mostly) for marketing using their trademarks, which means they need to meet the parts maker's conditions to get "free money".
IIRC in an interview Gibson tells how one of his early artistic experiences was in a high-school draft class where they had to make meticulous drawings of everyday objects like pencils, including as much detail as possible.
Monorepos can be really powerful, but in choosing one (or frankly polyrepo) you need to admit your application is no longer simple. Now you have dependencies and multiple artifacts to deal with.
I’ve found yarn berry (the typescript rewrite that is v2 and v3) really great for js centric monorepos. With pnp the node_modules problem goes away. And the plug-in architecture of yarn berry is really powerful.
This is important because monorepos always need tooling specific to the problem to work well. Bazel, Buck and Pants are great in the Java/C world - but way to heavy for JS.
I’ve shared this plugin before, but in case you missed it - I wrote yarn.build [0] as a lightweight replacement for Bazel et al for yarn.
In yarn 3, this installs and vendors it into your repo:

yarn plugin import https://yarn.build/latest

It’s really powerful when you use many local workspaces (packages), that have dependencies on each other. Provided they’re not circular. Theres a build command that runs in the right topological order calling build in your package.json. And caching the status of builds, so it only rebuilds with changes.
After that I added a yarn test command, to do the same thing but run test.
This has been really powerful for me. As it’s meant I can treat each workspace as if it was coming from NPM. As such, boundaries are hard, and defined.
I often need to ship a nodejs lambda, so I added a bundle command. That works similar to how Bazel does a build. It copies your repo to a temporary directory. Then removes everything you don’t need (local workspaces that aren’t dependencies of the workspace to bundle). And drops an entrypoint.js in the root dir, that reexports your main script (as defined in package.json). Finally it zips it up, ready for lambda or any other nodejs environment.
And finally, because yarn.build just calls the build script, it can build anything. So I’ve used I with go quite a bit. You just call go build in the package.json build script (add a test script and test it along with the other workspaces).
But some go devs aren’t big fans of a package.json hanging around. So I wrote this other neat (and kinda wild) plug-in [1], that allows package.json to be written as package.yaml (with comments!). Like actual yaml.

yarn plugin import https://yarn.build/yaml

The yaml plug-in sits in between the file system. It works much better than I expected, though I mostly use it on non-node stuff. As node expects package.json on disk for some stuff. Thankfully the plug-in is opt in per workspace, so it happily falls back to json if that’s there. And only uses yaml if there’s a package.yaml and no package.json.

[0] https://yarn.build

[1] https://github.com/ojkelly/yarn.build#plugin-package-yaml
> But cars are only responsible for a tiny fraction of CO2

Road vehicles account for 5% of global CO2 emissions.

That's not a tiny fraction IMO. It's not huge, but road transportation alone (not counting shipping) account for 5X as much CO2 aviation.

https://ourworldindata.org/co2-emissions-from-transport
If you haven't read the book: "Mindset" by Carol Dweck, do yourself a huge favor and read/listen to that book. It completely changed my perspective in life.
Senior Fullstack Engineer & Senior Unity Engineer opportunities at Pixelberry Studios. Remote hiring available from CA, OR, NV, WA, and CO. We are a mobile gaming company that looks to make a difference in the lives of its game players for the better with a bigger purpose, this is it!

https://www.pixelberrystudios.com/careers
> To add to what you said, I suspect that Docker containers are much easier to configure than OS packages because they are all to some extent Twelve Factor compliant, which means that configuration and operations are simplified.

Yeah, I think that's got something to do with it. At the very least, you practically have to document right up front where all the config affecting the container lives, both files and env vars. It's also tempting to put the most commonly-used config items in env vars, if they weren't already. Consequently, dockerized Samba, for example, is the easiest config of that daemon that I've ever performed, for any of my never-unusual-or-complex use cases, including with GUI tools, over a couple decades of using it.
Some popular music production software are skeumorphic aberrations with practical but dated UI. They are very reliable but clunky. It is a shame that FLOSS has very a weak tradition with regard to UI.

Music production software looks right now like an unexplored avenue needing new residents.
I'm honestly relieved that the adults are back in charge at the Justice Department. We finally have rule of law again. :)
And potentially Magic Leap?

https://www.google.com/amp/s/fortune.com/2020/09/26/magic-le...
>I really should upstream the sleep changes

Please do!
We should just be assigned numbers and allowed one pre proposed sentence by HN topic. Here "Science is great, keep up the good work".

I live in China, where we do that. You re welcome to join, something tells me you'll like it here.
Much as I dislike Twitter as a concept and a company, I think this is a good idea. It's high time the tech majors started to move towards alternative revenue streams from advertisement, and encouraging users to pay producers directly for content with the platform taking a cut seems like a good way to do that.

I don't know offhand who will charge for their tweets or what kind of content they'll be charging for, but I'm confident that the market is far more creative than any of us are at finding ways to use features like this.
> Branson did put his life on the line to achieve that accolade though, which was a gutsy move.

I’m more concerned that he also puts other people’s lives on the line.
I like marcosdumay’s point very much. In itself asking people to boast is a recipe for disaster.

I make the parralel with your “A is confident about their competency”: have they more to say about their confidence ? what did they actually do and do you have trust they did it well ?

Digging further, if you end up at a point where both A and B did roughly the same things at the same level but B shows critical sense about what they did and trusts you enough to talk about it, B is to me the obvious choice. When shit hits the fan, you don’t want people who’s first principles are to cover themselves.

But this is all based on you going past confidence displays and caring enough to dig further. Which concede is not something we’ll do all the time; if I need to buy some coffee I actually don’t care much if it’s from A or B, and could easily go with A (or choose B by pure curiosity or any other reason, who knows)
Sony: Weighing the Bull and Bear Cases
So change the business model. In the words of Robert Heinlein:

"There has grown up in the minds of certain groups in this country the notion that because a man or a corporation has made a profit out of the public for a number of years, the government and the courts are charged with the duty of guaranteeing such profit in the future, even in the face of changing circumstances and contrary public interest. This strange doctrine is not supported by statute nor common law. Neither individuals nor corporations have any right to come into court and ask that the clock of history be stopped, or turned back, for their private benefit."

http://homepage.eircom.net/~odyssey/Quotes/Popular/SciFi/Hei...
We used to have smart guys in competition. Edison vs. Tesla.

Not we have rich business savy guys with not much of a science background holding the cards.

I have met very few wealthy men, young or old, who had great ideas. It's almost like the money dulls their brains? And their vanity projects are usually way out of their wheelhouse.

It's the same with Writers. I have read very few wealthy guys shop could write. They certainly have the time to write, but it's dribble. They are only read because they have money.
For anyone that's just getting up to speed on this, John Oliver had a really good video specifically about this issue:
https://www.youtube.com/watch?v=uaCaIhfETsM
Very team dependent and dependent on the scope of your production systems (E.g. is Amazon.com dependent on it or is it some random downstream system). There are countless teams at Amazon that get paged 20+ times a week.
This is a random tangent, but if are visually impaired and you look through a pinhole in your hand, you can see clearly!
What an obvious attack piece. Throwing PGP under the bus for some failures at a higher level. Give me a break.
OnlyFans is a UK-based company and Twitter is US-based. I sometimes wonder how much of stuff like this is just governments trying to capture value with their own companies rather than letting it go to foreign companies. I know we saw virtually this same thing with TikTok/Instagram Reels.

Seems a bit conspiratorial but I don't otherwise know why Twitter would implement this.
ON24 (NYSE: ONTF) | Engineering, Operations, and Security roles | SF/Charlotte/Remote | Full-time

Variety of roles open at ON24 as we continue to scale up post-IPO: http://jobs.jobvite.com/on24/jobs

Security Engineer-- https://jobs.jobvite.com/on24/job/o3uYffwu

Compliance Analyst-- https://jobs.jobvite.com/on24/job/o5uYffww

Linux/Ansible System Administrator-- https://jobs.jobvite.com/on24/job/oHsCffwK

Network Engineer-- https://jobs.jobvite.com/on24/job/oT4ydfws

Sr. Director Program Management-- https://jobs.jobvite.com/on24/job/oDoAgfwB

SRE Manager-- https://jobs.jobvite.com/on24/job/obsAgfwd
I wonder who found this offensive/flamebait enough to flag you, wow.
> This is disgusting. Basically outright admitting that there are a class of people who are above the law. I wish i were surprised.

>Knowingly peddle highly addictive substances, lie about their nature, kill millions, destroy countless lives, and get to keep billions of dollars. it is just hard to fathom.

AFAIK the problem isn't that Sacklers is "above the law", it's that what the Sacklers wasn't (probably couldn't be) convicted under the law. If they actually were convicted of wrongdoing, going after the money would be easy.
It's fine of your goal is to help yourself and only yourself. Hurting others as a strategy is not acceptable. Imagine a sprint where the competitors could kick each other.
Nice article, but not really over engineered.

More, spent money on a bunch of gear and installed PiHole!

I did the same though LOL

However, in the spirit of his comments about Outsourcing to The Experts, I switched from PiHole to AdGuard Home to NextDNS.

Very happy with NDNS, just wish there was a kill switch!

I'm up around 50 devices on my home network, so the standard home router from the ISP, or even the fancy 'gaming routers' that look like alien spiders don't really cut it!

I get terrible internet where I am in Australia, so I have to be creative:

----------
My Setup:
----------

• 3x Unifi UAPs
• 1x USG Pro
• 1x USW 16 POE

• 2x 4G modems
Connected to the USG Pro and load balanced!
You can't LB with a UDM!

•1x M1 Mac mini with 12TB RAID as a TMS and Content Cache!
Serves around ~500GB a month to my network!
RIP thebox.bz
This is neat! I was fairly surprised when a few that were instantly in my mind were actually correct - Back to the Future, and Wizard of Oz, Ghost Busters, Big Lebowski, to name a few.

And I don't think its simply because of the likelihood of guessing a popular movie, as many of the titles I've never heard of. Although some are a giveaway by their content and focusing on an obvious subject - Ghost Busters has clear ghosts; Hurt Locker has a bunch of bomb-disposal guys. Others like Edward Sissorhands, have no giveaways but just embody the style; I'd love to see the descriptions provided to the AI
i like the numbers they come up in some of those lawsuits. i have uhh...heard of people that have robbed the entertaintment industry of roughly the world gdp. if you go by their numbers.
Mozilla VPN starts at $9.99/month with month to month pricing.

Mullvad is €5/month, period.

Mozilla pricing starts to align once you pay 12 months at a time.

At least on the surface, Mozilla isn’t providing a benefit to the consumer aside from an account / subscription management approach that is slightly more “normal”, and it’s unclear if that’s actually a good (or bad) thing.
Level 12 | Full Stack Web Developer - Python, React/Vue, SQL | Louisville, KY | REMOTE, SALARY:$95K-145K, https://www.level12.io/careers/

Level 12 is a software consulting and custom development agency. We have mid and senior level positions. Our job descriptions are written by developers for developers.
No HR fluff here, we want you to know what you are really getting into:

https://www.level12.io/careers/

- We have a commitment to transparency and offer a "no surprises experience" throughout the
interview and hiring process. We value candor...as evidenced by the length of our job
description. :)

- Our CEO prefers the title CED, Chief Executive Developer. Engineering and operational concerns
don't take a back seat when potential sales come to the front door.

- You will be working remote with a team that is all working remote and has been for years.
Let's make the best use of our time by not commuting.

- We practice and preach sound development practices. You are likely to learn and grow as a
developer while working here.

- You are committed to automated testing of all the software you write (our apps typically have
92%+ test coverage).

- We have a no-drama office policy. We value and cultivate enjoyable working relationships among
team members. No jerks allowed!

- We emphasize work/life balance and adopt policies that make sure our people don't get burnt out.
For instance, our PTO/Vacation policies are designed so that you actually use them.

- If you apply, we guarantee that we will give you a response, whether "yay" or "nay". No black
holes here!
Vaccines go into muscle, not blood vessels.

It's still much better for everyone involved to not stick air into your muscle, though.
Fuckin A
We are building a society where one or two companies get to decide "I don't like your face" and then you are shut out of communication, commerce, and now mandatory interactions with the government.

The decisions these companies make will be unaccountable, probably with the input from an inscrutable AI, and limited only by the terms of service which you click through without reading.

The dystopian consequences of this trend are so concerning, they deserve to be brought up in every thread on this site.
It might vary by region, but here in Europe I haven't been asked that ever in my 7 years in IT.

I don't even have "Education" paragraph in my resume, just skills and experience.
Do you have the instructions somewhere to follow
I listened to some of this today and it's really great. Lots of similar learnings as has been had from the g3doc team at Google.

More information available here: https://www.youtube.com/watch?v=EnB8GtPuauw
Absolutely this!

I think the question also needs to be is this so mission critical that they need 30 minute response time?

If not a 4 or 8 or 24 hour response time during the week is a much more realistic way for you to cover them or leverage this to bring on the second person.
https://www.bbc.co.uk/news/uk-england-northamptonshire-57954...

I think it's very likely she was, in fact, a "diplomat" in the "they expel one of ours, we expel one of theirs" sense.
I guess you don't realize that he got the vaccine and tests everyone who comes into his studio. He's not dismissive of it. Rather he thinks the government response was not well done. One of his favorite questions is "Why aren't they telling people to exercise and eat better?" because this leads to a healthier immune system. He is frustrated that the government only talks about masks, vaccines, and lockdowns.
I don't want to hand my phone over the the police for any reason, locked or not. It just doesn't make sense to do so.
I also was skeptical though I had a feeling after chatting with some of the team that they would deliver. I didn't expect the level of polish in terms of customer experience--e.g., packaging, instructions, etc. Like you, I am also very impressed with Framework. It's actually amazing given how early in the company life they are.
I wonder if people like Malang Khostay will be eligible for this, given that it's a direct line to funding terrorism.
If internally bad-mouthing the company doesn’t work, what are you left with?
https://www.house.gov/representatives/find-your-representati...

https://www.senate.gov/senators/senators-contact.htm

If you disagree share your opinion. Best place to do that is too your representative.
I've got a settlement for them, and it only cost about $.70 a head. I swear they'll be immune from future legal action.
If you're not cut out for politics, you have two possible moves: Stay or quit. Don't threaten to quit -- but actually quit. Give them the least amount of warning possible to find a replacement before you walk out the door.

Frankly if they're not investing in you doing your job, then you shouldn't feel invested in staying.

That said, people have debts, and can't leave a job for whatever reason, so both moves are completely respectable decisions.
>Let's ditch open protocol X that has worked well for decades

To be fair, I really can't put PGP in the category of "open protocol X that has worked well for decades"[1]. I'd welcome a closed protocol that actually works over an "open" one that's been functionally broken for years.

[1] https://latacora.micro.blog/2019/07/16/the-pgp-problem.html
> No, if you study how GPT-3 works, it becomes pretty clear that that model can't really produce "understanding", even if we can't clearly define what that is very well.

But the quote doesn't say that GPT-3 can't produce understanding because of the specifics of how it works, but "because understanding cannot occur in an isolated computation or behavior, no matter how clever", which is a more general claim.
If they are not paying six figures, they can’t or won’t afford a 30 min response time and are probably trying to see how far they can push you.
This seems to be an argument that humans are incapable of using tools without breaking the law. We make this assumption for tools like cars and guns by requiring licensing. Should internet access also require a license?
Be interested in various easy alternatives for encrypted messaging that non tech people will use. I've never had much luck with getting other people to use PGP, so many clients I have dealt with in the past have been all too quick to send sensitive information in plain text emails. The problem is, this info is often not super critical but not something you'd share with people, and generally the attitude is "No ones going to hack this, why would they? it will be fine ". Then people become super sloppy, they send this kind of info into support desk systems, "group" emails, etc. Mostly these days I try to force sensitive information exchanges to phone calls / 7z with passwords exchanged on a call. Hard to get people to care about this.
> Users have a public key and a private key – senders use the former to encrypt messages, which can only be decoded by someone who has access to the latter.

Kind of nitpicky, but I'll be cautious taking clickbaity claims like "PGP is dead" from someone who makes such a mistake in their first paragraph.
America's Aerospace Industry Is Regenerating
I feel weird saying this, but probably they do this in response to common market forces and trends
It's a nub of the problem.

The problem has numerous nubs.

But to the extent that socially harmful discriminatory practices of common carriers have profound influences, then yes, I agree with you. And yes, the problem is inherently political, as what it concerns is social power.

Money-as-political-speech is profoundly problematic. The US has much very bad case law here.
How Many Hours Do Americans Lose to Traffic Congestion?
For the record, I was joking – if the sentences were served sequentially the article implies that the person extradited would be on the hook for a 30 year sentence. My perhaps unfair "joke" was supposed to be hinted at the ~floating point overflow fine at the same time. (For the record, I think this is utterly disproportionate to the crime – they certainly did not cause Hollywood multi-million losses.)

The reason behind my perhaps slightly uncouth reference to the Death of Harry Dunn [1] was because 30 years is nearly double that faced by the US citizen who killed him, refusing to return to the UK as "the potential 14-year sentence [is] not proportionate" as it "would not usually result in a prison sentence in the US" [her lawyer, also 1]. I find it very interesting (as a commentary on the role of media, technology, and incentives in society) that using DeCSS and creating a torrent is apparently punishable by a long gaol sentence, yet negligently killing someone is apparently not.

Anyway, another poster has subsequently pointed out that I am wrong to draw this conclusion as a different treaty was used -- and, I should probably not overly politicise HN either -- my apologies for both.

[1] https://en.wikipedia.org/wiki/Death_of_Harry_Dunn
We just got our asses kicked by Syria and, more recently, the Taliban. Even our idiot generals aren't eager for more of that. They'll be able to justify several trillion dollars more in "defense" spending before needing to incite another war. Expect the next freedom-haters to be a somewhat smaller nation, like Grenada.