skysight-inc/HackerNews huggingface dataset:
As well as being a lot faster than apt, the biggest advantage of openSUSE package management stack to me is that it plays nicely with third party vendors.

Packages have sticky-vendors, so you only get updates from the same vendor unless you choose to switch. Even if another the update is in a different package repository. This means you don't get flip-flopping package vendors when the same package is available from two vendors and they release updates one after each other.

Another example is the tooling around package/repository signing - Letting the user decide whom to trust without making them jump through hoops to manually import keys.

There's also a lot of things in the packaging itself designed to help support third party vendors. Dependencies tend to be configured with capabilities rather than package names. e.g. The kernel provides information about the binary api version which third party drivers can depend on. Third party kernel modules can also supplement/enhance (soft dependencies - inverse recommends/suggests) specific PCI ids so the solver will suggest installing them if available and compatible with your hardware.

In my view debian package management "just works" because the set of packages is carefully curated and tested, there's a high standard of package quality, and everything is available in one place. PPAs can present problems.

The rpm distro ecosystem philosophy is somewhat different. It's impractical to expect a single organisation to package all the software you will ever need, so let's provide tools to help software from multiple vendors to get along.
Show HN: FeedbackPlease – Gather feedback on your drafts
> Also, "dnf" is not at all awesome to say out loud, while "yum" is among the most awesome commands to say out loud.

Indeed, to me, saying "dnf" out loud suggests "did not finish," which is the opposite of what you want from a package repository tool!
I'm sure you do call it that. How many people listen to you when you do?

A one-sentence summary has grabbed people better than pages and pages for as long as people have been people, and that's not going to change because you want it to.
No, the vote makes perfect sense: Scotland wants political autonomy hence voting SNP in this election, but would like to keep the English money tap flowing, hence voting to stay in the UK in the referendum. It remains to be seen how long this will be possible. Certainly if it were up to the English taxpayer-voter, Scotland would be fiscally autonomous faster than you can toss a caber.
Because it's motherfucking satire and they wanted to have some fun with that shit, asshole.
Exactly how is a "warranty" going to protect the data on your drives? Drives fail. If you aren't mitigating that fact, e.g. by using RAID and doing backups, then a warranty isn't going to bail you out.
Suicide is the biggest killer of men aged between 20-34, and 35 to 49, in the UK.

Rates are similarly high in the US - in 2013 one person died by suicide every 12 minutes.

I'm not sure that entrepreneurs have higher rates of depression or suicidality. I think that depression and suicide are just very very common.
Show HN: PYNAB, a read-only API for accessing YNAB data
So if,

The government defines extremism as 'the vocal or active opposition to fundamental British values, including democracy, the rule of law, individual liberty and the mutual respect and tolerance of different faiths and beliefs'.

then surely

For too long, we have been a passively tolerant society, saying to our citizens 'as long as you obey the law, we will leave you alone'.

is by their own definition extremism.
Software doesn't need to be proprietary to save lives.
For the record, apt doesn't always imply deb: apt-rpm exists, and it's used by a few distros, including PCLinuxOS.
Everyone who downvoted my comment needs to pick up and read a copy of Comer's "Internetworking with TCP/IP". That and Stevens' TCP/IP Illustrated are the best sources for networking out there. You won't find the info on any blog. It won't be in something on ServerFault or StackOverflow and definitely not HN. Buy, read, learn.

Yes, I know the US publisher has messed with the pricing for current versions but you can find the previous ones used pretty cheap. Other than dropping the IPng chapter, I doubt much has changed.
You shouldn't be surprised to see blatant lies from Mircea Popescu, who also claims that he's a billionare, that English literature literally does not exist, that bitcoin literally makes states and laws obsolete, and that nuclear weapons are ineffective.
somewhat out of context

Well consider that Thatcher's "no such thing as society" quote was actually in the context of calling on people to take positive action to look after their neighbours and their community rather than waiting for someone else e.g. society to do it for them. Yet her opponents twisted it to imply the exact opposite.
Ahem. For the first key they mention, there are more factors there!

The key is probably corrupted or generated improperly.

In[2]:= k =
81702302396037694663397550711015464924940759880679873041484988446177\
6172171921668594148071323527016137506405823108520062504849249423700259\
4069053132814039014100827620971595602214630489243361923840267775021772\
6273104520032220014977312750288854523497313948088764458519260063105896\
2876114156934248895171959246969597637127280010272143593885240940877456\
2346621961304914007384387318325143353538246979304530784267221911051575\
6839282687004365570800854541114336776383656601174049938345659212966258\
5004880376777597714978023542434421914201119537685489173509942329090631\
6620146500331426421109143608494218561796112264508065622355348025160815\
9525991476849744470271874940233007048802875107373034946075277191548484\
7399385631524708487646079936572410398967582895983187640798072309362094\
7276541676286201059814590215482904158000967692144374256909343720156287\
9602749821990244128818939838635984666162324349353489741141768543542401\
0451956954083531228374002591372549525280610594684910812811287436481207\
0897631254242477930440433097372694687097106798722692728553899453853864\
6776550988064892974349821432957828887498719376843935338230526010842568\
8024147656806932474058888992099083804597481699305852902662863062054067\
183925164590726103552998367994727700722491707;

In[3]:= Mod[k, 231]
Out[3]= 0

In[4]:= PrimeQ[k/231]
Out[4]= False

In[5]:= k/231
Out[5]= 35368962076206794226579026281824876590883445835792152831811683\
3100336005269230159564566264642219487505414028494852173187231536471611\
9914542887035988231185720389968667087270823469537008330459707290159209\
9661353364980311702259746743425433025478148700135908263534397627385308\
7038512067581886118722465442406600419739236851636368083179044971965775\
2716260756113403162300436097137367240321798068505185846117222626502991\
7972189107914583118772974372664303512699903196388139036385254695090568\
3836616885229600336622387436373827893689140346804994669042932255386289\
6496240961102381095855593553741821858969074370611369916911524829154989\
2471064729866440194694575875270536897405648832413466395253223409210905\
4322444761638801525847830149818154360350822063888699559821489522975025\
6978765054779946444242883036619140901690111688730602659902275718330614\
7862718442748840688417371783090839236356998338668549503675212615484217\
9837233961886127308887977651083372888549578043554369993467884333890665\
1433796925381495343064039151702639555279085323422856589910272101255174\
8285128474697397430689599285636983964428089826285444521184129104123814\
2175622521276041907762975783068827748521127531377359006862728425481845\
0450507289719327232580534861464796513972730400397
Thanks.

The first paper mentions some 157 PGP keys and some "probably copy-paste errors." Maybe somebody can tell more about it, I wasn't able to evaluate the effects.

The second didn't analyze PGP keys, but otherwise was certainly impressive.
Sorry, I was looking at the other one. But something is still very, very odd. (1) Two of the subkeys agree with one another for hundreds of digits and then disagree. (2) I did gpg --recv-key 51221121 and I got a key back from the keyserver with fingerprint 7EAA C969 3E7D 2205 46BE 576C BDA0 6085 493B ACE4 (only, no other keys) -- which doesn't match the key ID that it should, and is seemingly missing the vulnerable subkey entirely.
$ gpg --export -a $$KEYID$$ >keyfile.asc
$ gpg --list-packets --debug=0x02 keyfile.asc

...but I don't know if the pkey[] values are directly usable, or have some substructure.
Also, shouldn't it only have 2 prime factors?
Show HN: Simple React webpack starter repo
What judge is going to preside over a trial indicting a bunch of non-citizen nonresidents?
Can you post the ASCII-armored key that you have? I am getting a radically different key from the keyservers, and I wonder if there could be some kind of keyserver attack or misbehavior involved here too.
It's a matter of money and career perspective. Being a good software developer requires a lot of learning. The job can be quite stressful and your knowledge devalues continuously because of tech change.
In the long run other professions probably are more attractive, don't require permanent re-learning and at least provide an option to climb up a career+$ ladder.
Provide better pay & conditions and you'll see more engineers.
Most web pages "guilty" of this are owned and operated by corporations and they're doing it for a reason: visitors apparently trust websites more if they look professionally styled, so they prefer those over simpler looking competitors at first sight. Market pressure forces websites to polish their UI so it becomes attractive, usability is only an optimization (if you don't have a significant number of users due to the website's initial impression, it's not as important to optimize for maximum profit).

Some early movers got away with crappy visual aesthetics for a long time (like my former company), but today an 'RMS-style' (or old craigslist style) website would not stand a chance upon entering a competitive market.

This works a bit like we judge other humans, perhaps: based on appearance, before they even open their mouths (and maybe that's the reason why we have better haircuts now but whether we are better characters than a few generations ago, is debatable).
I intake a lot of caffeine, but I also do something novel - there are days where I consume no (or very little) caffeine. Caffeine is useful, but I don't like to rely on it.
Redshift is a columnar engine
Being able to engage politically is a skill; it generally must be learned.

Your city councilperson isn't going to care about internet security; what could they do about it even if they did? They are going to care about that boring, mundane shit involved in supporting the wide variety of businesses and citizens in a city. Hair salons are important to a lot of people, even if they're not important to you.

Your state rep might have more to say about internet security or privacy or something, but if they're not actively involved, then you can't just go in and say "This is important, do this." Look for other politicians who are pushing privacy regulations for your state, and bring that to the attention of the politicians.

Also, phone, don't email. They've all got a staff of one to several people responding to emails for them, and those people are all so busy that, if you want to build a rapport with them (to eventually be able to set up a 5-minute meeting with the representative in question!), the phone is the way to go.

And remember: what's in it for them, if they're meeting with you? Are you informing them about one person's opinion? Do you represent 150 of your colleagues in NYC tech? Are you speaking on behalf of a trade organization, and these views are important to many voters, not just you?

Yes, this all takes time. If you want to have an impact with the political route, you may have to reprioritize how you spend your free time.
It might not be a good idea for other reasons to have them on your screen, where other locally-installed software could view them, they would be (more strongly) broadcast in the RF spectrum, someone might see them over your shoulder, etc.
There is a flag link for comments. Click on a comment's timestamp to go to its item page, and (assuming you have a small amount of karma, I think 30) you'll see it.
Update: some more factors for the key.

In[8]:= primes = Table[Prime[i], {i, 1, 10000000}];

In[9]:= r = k/231;
Select[primes, Mod[r, #] == 0 &]

Out[10]= {19, 7704959}

In[11]:= PrimeQ[k/231/19/7704959]

Out[11]= False

In[13]:= r/19/7704959

Out[13]= 2416008079731972085604323566968184938863361678449872200338542\
2782524728573078725530058065928860640441907473143687288939310762579324\
2201448845923773741805403670269789344162077509161854710812642480618084\
6418886532753250669796572553463393409872248215326471682480854051430439\
2318772751800215263874553179418646615820937142842296219000273581288825\
2789449984922109948745889094702540699357374091188011161049671668836093\
7278541145959209900694985382835863685677859045842263065588173367519102\
3000601703070615085046450531430050636608745665363730079826233868575064\
1515845148088351185382897973393486745557331417516226266671518736327371\
0952774886507742692568074519503781293211406810410464658659799378912020\
4022428232439503300191599103479511965185485160912786274522509295156878\
2006686251281732387799849219226976241206277650039929011945237627811183\
5293192238971567100891050322477609224503267676028587870533168970890197\
7752061262164585534348926085756033558766611288812716862195529175560192\
7171277951291635708971328803457524430235472568512308733137100548610807\
1730859408357205400252076841587686986935644804331821576562378722868016\
3691408455343059061584335066277570324891522017892861973483415607333423\
704276600438478560110515119729110048093857
Coursera would be a good start ... or just borrow a book on C++ from the library and follow the instructions. If you have any questions, post them on StackOverflow
I've built debs by hand before. It's not hard, and it's trivial to automate with shell scripts.

And once you've built a deb, you can use alien to convert to RPM (the only gotcha is that RPM runs preinst/postinst scripts with an empty environment and dpkg doesn't).

(and I say this as a diehard Arch user who came from Gentoo)
Tux aggregates and analyzes user data from your Twitter following
'Rise of the Robots' and 'Shadow Work'
Russian court unlock Bitcoin sites
Head over to https://reddit.com/r/investing
It is possible, I'm sure there's other examples - here's one:

http://www.juce.com/buy

If you think of kickstarter etc for free software projects, that is like selling one copy.
The media doesn't need to parrot he administration without any supporting evidence, but they do.
> methylone (also known as "molly")

I don't think that is generally true.
This is one of the rare cases that Godwin's Law does not apply, because the magnitude of the atrocity of mortality is if anything larger, and ongoing. And if it is less lacking in malicious intent, it is certainly not lacking for the casual malice of indifference.
A look at the PGP ecosystem through the key
server data

https://eprint.iacr.org/2015/262.pdf
[Disclaimer: this is advice from the internet]

What is the takeaway from this as a first impression?

I have two premises in regard to business deals:

1. People whose first preference is to screw me will implicitly but probably not explicitly notify me of the fact before hand. My belief is that most everyone tries to find a way to rationalize their future actions in order that they can live with themselves. Imagining that I was given caveat emptor then excuses the future action.

2. What makes a good business deal is that both sides desire the prosperity of the other...or the person calls you up to make you rich.

In regard to the outlined facts:

The principals tried to take advantage of your potentially dire circumstances. The reason they did not succeed is that you had the option of turning down their offer. As I've said before, the value of non-controlling non-preferred stock in a privately held company is whatever goodwill the controlling interests assign to it. If and when there's serious money on the table, you've had your caveat emptor and you won't have any say in how things go down.

So let's treat it as straight up employment not a business deal.

1. A 1% stock offering means the hire is being made for the position rather than for you as an individual. That's normal, and ok if you're ok with it. Don't kid yourself that this is about owning a piece of the company. It's a straight compensation deal.

2. The stock option is to their advantage in hopes of convincing you that your interests align with theirs. They do, but only under employment semantics.

3. The worst thing an employer can do is fuck around with someone's paycheck and livelihood. It's not a joke, now; never has been; never will be.

[Please see disclaimer]

If you need the job and can stomach it, take it. Keep searching for something better. Quit the moment a check bounces. Treat it as a job. Forget about the equity. If you have something better in the works as a job, walk away. Remember that a good deal is one where the person isn't actively trying to prevent you from becoming rich.

There are many red flags. Find something else if you can.

Good luck.
Compare:
http://en.wikipedia.org/wiki/Lincoln%E2%80%93Douglas_debates
http://en.wikipedia.org/wiki/United_States_presidential_elec...

So - it as a matter of fact has changed and that you think that this is okay (as I'm sure many people do) is obviously telling of something.

But hey, maybe you'd prefer the 2020 election-debate winner be decided by who can keep a reddit-pun thread going longer.
It does for me. Maybe it's a default setting for you? Anyway, uBlock does show it.
I guess the real question is why don't we, would-be "hackers" do our own tests of our own keys (and of our communication partners) at least for such obvious problems?

Why should we wait for somebody else to run a few obvious algorithms on our own keys?

Anybody knows what to use and has a good recipe?

The goal should be, don't trust the program which generated the keys, extract them and run the independent tests. I guess a lot of people would gladly use some time for that.
i thought the movie was excellent. random code isn't the point at all. its just an easter egg.
There are lots of people who have survived for decades in afghanistan. UBL could have hidden with any of them.
Http2 akamai test site
Should. Obviously something went very wrong and the "primes" weren't properly checked to actually be primes.
I have a lot of empathy for my bees.
"Eval" boards and systems like this have been available in the era before the raspberry-pi revolution, but rPi got a lot of hype for itself by actually shipping in large numbers.

These little systems are quite capable indeed! I remember compiling the Linux kernel on a 1ghz machine with 32Megs of RAM, back in the day .. and here we are with these little machines in our pockets. Fantastic stuff to be teaching kids to use ..
I'll raise you my law of circular credulity.

When I was young and naive, I believed a lot more silly and bizarre things. Then I got older and wiser and more cynical and learned to dismiss them as nutty, jokes, satire, etc.

But...

As I got older still, I accumulated so many bizarre experiences with the real world that I wrapped back around. I now have trouble again picking up on satire or easily debunking wacko theories, since I learned from experience that the world actually is that crazy. I've seen many things and met numerous characters that a fiction editor would reject for sheer implausibility.
i think you misunderstand.

clearly, it is C++, not C.

instead of a simple malloc and free, you will invariably end down the rabbit hole learning about rvalues. perfect forwarding, move semantics, lvalues - the list goes on - these topics arise from the simple concept of RAII.

which i find worse than malloc and free.
We've gained some benefit from his life, though most of it has already been extracted.

I'm interested in how you measure future benefits of someone else's life.
That doesn't protect against the possibility that one of the factors is itself composite.
When I try to import HPA's key from the public key servers, I get an "invalid subkey binding" error and the weak sub key isn't imported. That error means that the sub key isn't properly signed by HPA's master key, so there is no cryptographic proof that this weak sub key actually belongs to HPA. This looks more like a fake sub key that someone tried to pollute the public key servers with, which isn't really an issue because PGP implementations will just ignore it.

gpg --verbose --keyserver hkp://hkps.pool.sks-keyservers.net --recv-key 0xbda06085493bace4
gpg: requesting key 0xBDA06085493BACE4 from hkp server hkps.pool.sks-keyservers.net
gpg: armor header: Version: SKS 1.1.5
gpg: armor header: Comment: Hostname: keyserver.witopia.net
gpg: pub 4096R/0xBDA06085493BACE4 2011-09-22 H. Peter Anvin <hpa@infradead.org>
gpg: key 0xBDA06085493BACE4: invalid subkey binding
gpg: key 0xBDA06085493BACE4: skipped subkey
gpg: key 0xBDA06085493BACE4: "H. Peter Anvin (hpa) <hpa@zytor.com>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
Google [yellow journalism]

This is not a new development. What's new is he availability of no -mainstream reporting.
which is how the web worked originally, how it was intended to be. in some ways the ecosystem has gotten better than the 90's, in others its been getting worse. too many sites are getting too cluttered, too slow, with too many moving parts and unnecessary optional tangential things forced into your face at the expense of the main dish. Text, images, forms and links -- you can move mountains with those alone. We should bias to them wherever we can, keep things as simple as we can.
Can anyone who was involved in this please post the ASCII-armored key in question?

When I try to download any of the three stated fingerprints from keys.gnupg.net, I receive a key which is missing the vulnerable subkey (containing only the two non-vulnerable ones). That makes me worry that there may be an element of keyserver misbehavior in this story, though I don't understand the nature of the misbehavior.

Edit: agwa's post shows that my gpg is receiving the same thing from the keyservers that these folks had, but it's rejected it as invalid because it's missing a valid signature.
Sorry, but there's no obligation for the world to keep your business model
viable. If you hold on to it no matter what, it's your problem, not mine. I'm
not required to feed you while you pursue your whims about lifestyle. On the
other hand, you could try doing something of actual use, like carpentry.
It gets so incredibly slow when you have aptitiude around apt around dpkg. Its a minor complaint, but when pacman does everything I want and is probably a tenth the codebase of either yum, zypper, dnf, or apt, then I'm content.
This is one of the most annoyingly designed sites I've ever seen.

The float-to-the right-to-see-the-background effect, reminds of the awfulness of MySpace when DHTML was a thing. Only it's worse.

Also, the article loses a lot of credibility when it responds to anyone calling the ad-infested web horrible, with this:

""" No, it really wasn’t – it was perfectly fine, you’re just being a snob. The Web works well for me with the ads displayed. """

Yes, it's perfectly fine... If you want to punch-the-monkey, a dozen popups beneath your window, moving images that can cause photo-epilepsy all over the place and of course the latest trend:
"Oh, you scrolled a couple of times? Let me show you a huge overlay ad with a very dark backdrop(that isn't always click-to-dismiss) and a very obscure close button."

Truth is that people are naturally becoming more resistant to ads, which leads to making them more intrusive. And this in turn leads anyone that can, to seek ways to get rid of them.

This may continue for a few years, but I think that publishers should begin preparing for alternate sources of income, instead of hoping to go back in time.

Disclaimer: I've used ads, made even some(little) money of them. And I use AdBlock because the web is truly awful without it.