jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
There had been articles for a decade about the NSA and ECHELON, like [1]. I remember reading about the system in '99, in an (independent) Spanish hacking magazine.

I'm frankly still amazed at how many people here were just so flabbergasted. I thought it was public knowledge in this community.

It wasn't even an underground thing: the European Parliament had a report on it published in June 2001 [2].

[1] http://www.duncancampbell.org/menu/journalism/newstatesman/n...

[2] http://www.europarl.europa.eu/sides/getDoc.do?pubRef=-//EP//...
Interesting about the revenue. Arrington pegged them at $30 million a month earlier this year. Somebody may be off.

http://techcrunch.com/2010/04/15/the-rest-of-the-details-on-...
You could also have clients and servers implement http://xmpp.org/extensions/xep-0357.html .
I've heard from people who have tried to implement it: SIMPLE (3428) is anything but simple. It is a very good example of "enterprise design." In addition, as soon as you start extending the protocol there is a very good chance that your implementation will no longer be interoperable. Take Lync (Microsoft's implementation of SIMPLE) as an example: due to the presence of custom extensions, clients have to implement specific support for it - the protocol doesn't gracefully degrade like XMPP does.

Basically, XMPP came first (first foot in the door) and is a significantly superior protocol due to its simplicity.
Could someone explain how these passwords are secure? Given that some phrases are all lower-case letters with a single punctuation character, aren't they vulnerable to brute-force attacks? My understanding has been that stronger passwords use a wide range of character options: lower-case, upper-case, punctuation, special chars. So, #RedBum72! would be more secure than abigredbum despite each having 11 chars.

Is it simply the length of these passwords that makes them secure?
I completely understand most people's complains about Go. I think most programmers that have used Go understand that it doesn't offer anything new, besides very easy concurrency and a few other things. Still, I think it has a place, and it seems a few large companies are using it with success, and, at the end of the day, if people find it practical, then way to go.
Mmm.... a lot of those are basically the exact same, and almost all of them focus on the new page elements like "header", "nav", "footer", etc - which are by far the least interesting aspects of HTML5. Sorry, I just didn't find any of them that informative.
Core difference: the request processing model. Nginx uses the "hot new" event-loop model. It's a good model, but I find that most people overstate the performance difference and resource usage.

The bigger problem is that Apache comes configured "out of the box" on most distros with a whole slew of options that you probably don't need. Even having said that, most people think that Apache is using more resources than it is. They see all these processes floating around in `top` and they freak out. See my post in the other thread (linked in parent) for more info on that.

Most of the concern is driven by ignorance rather than deep understanding. I can feel the searing burn of Nginx fans' glare, so let me qualify that. YES, Nginx is a fantastic web server. YES, pound-for-pound, it is more resource efficient than Apache. The catch is, if you trim Apache down to do only what you need, the margin between it and Nginx becomes much smaller. If you really know Apache well, then you don't necessarily need to switch to Nginx, just because it's hot and new.

If you don't know Apache well enough to scale it, or if you're really, really tight on resources (you can't afford a 10% bump in VPS RAM), then you should probably learn Nginx straight away, because it's a fantastic web server. Hell, every Apache admin ought to learn Nginx, because you will no doubt learn something in the process.
Nor is "Yellow-carded".
Yep there are definitely positions in that range, but I think they're outliers rather than the norm.
For what it's worth, there's still a huge advantage to using Flash for games. With the current state of the tech, you couldn't do FarmVille in HTML5.
I'm the opposite. I don't dislike my job, and I absolute like the people I work with.

But earning 800$ a month for the amount of work I do is soul crushing. Life in Mexico is cheaper, but not that much cheaper.

At 25, I know I'm still young, but I also know I could be earning much, much more than that but I haven't had any luck with interviews recently.

At this point, the only thing I wish for is being able to rent a place on a relatively safe neighborhood without spending 70% of my salary on it.
San Luis Obispo (California) has SLO Transit.
They're not being downvoted unfairly. Yours was a nuanced and considered opinion (and I upvoted); theirs was absolute and unreasonable.
Nice app. Since you are grouping tweets by username, you can remove that username from each individual tweet.
We definitely don't want to lose control of our app, nor do we want to be locked into any particular partner. Thanks for bringing up the potential pitfalls.
auto-converting links.. didn't occur to me at all. Thanks
to remove re-tweets, I should probably set that as the default option (removed) and yet provide the user a way to turn it on
Ditto for my Finnish keyboard.
How well or poorly does Dropbox handle the TrueCrypt volume-as-file? I've hesitated to put such files on Dropbox out of concern for the burdens they might create (both on Dropbox and on my "bandwidth").
For people who want to get things done instead of becoming architecture astronauts:

https://github.com/hafriedlander/jquery.entwine

(Go ahead, play with it: http://jsfiddle.net/eterps/kKvbC/ )
This is Wikileaks thesis that those who have influence are hiding facts to miss-lead public to a different conclusion..

Here we have 2 of the 4 and possibly 3 of the four being government informants driving a miss-leading conclusion of the media story and using Wired as government mouthpiece..

I submit that wikileaks will not be charged by the US government due to the corrupt miss-handling of both government informants in this case as well las the PR work the government embarked upon...there are simply too many skeletons that no-one wants to see the light of day..

And the US government has history of dropping prosecution if secrets are used as evidence in courts as they do not want them exposed...However, Manning is different case because he will be in the Military court system not the public US court system..which is unfortunate as he should be able to defend himself using whatever evidence Wired has..
Ok... I'll admit, beer is a terrible example.

Though personally I can't tell one IPA from another unless they go really weird (like they have dark IPAs around here). And I vastly prefer stouts.
HVDC is the only reasonable way to transmit power underwater. There's loss due to the conversion, but less than a short underwater run or a long (500+ miles) high tension AC run.
exactly - that is another part of it

one thing is certain, this is going to take forever
Awesome! Thanks for the "kick in the face" :) Fixed as suggested.
There are a lot of subtle details required to make this effective, so it is indeed art.
you're right in that all these things are theoretically possible in a system where the encryption key is not stored client-side. I don't know of many services that advertise every way in which their systems could be compromised. I think you'd be hard pressed to find a company doing this. in the case of google - is there a document explaining all the places your email could end up?

we believe that what we advertise is in our userbase's best interest. in theory, we could generate a lengthy document attempting to explain every possible way dropbox could be compromised. but in practice, discussing these extremely unlikely theoretical vulnerabilities would generate undue fear. as an ironic sidenote: this thread was spawned by an attempt we made to clarify our handling of court orders (see: http://www.businessinsider.com/dropbox-updates-security-term... )

I say "undue fear" for a couple reasons. first and foremost because we are vigilant about making sure that user data is never compromised. our reputation would be permanently damaged if dropbox is compromised. we have a lot of smart, security conscious people making sure data in dropbox is safe.

we're also listening to feedback we've been hearing from the community on things we can do to improve security. a couple concrete examples: we're working on better protecting the authentication token (config.db) so that gaining access to a dropbox account on a compromised machine is much more difficult. similarly we're working on a performant way to transmit file metadata over SSL on the mobile apps.

secondly, we believe that storing data in dropbox is far more safe than the alternatives. we've designed dropbox to protect user data against threats of all kinds, but we've focused the most on helping users avoid the most common threats to their data: not having any backups at all, not having current backups, accidentally deleting files, losing hours of work, leaving files on the wrong computer, losing a USB drive with sensitive info, protecting from curious snoopers on the dorm network, etc.

for all the talk of security issues in the last few weeks, we're not aware of anybody having been affected by these theoretical vulnerabilities. on the flip side, we have (literally) saved thousands of college kids from losing their theses :-).
Unfortunately, "this guy" is dead. I don't think he'll be doing any more reading.
I'm not media-savvy at all, so: is it worth publicly addressing articles (or reporters) like this one, in the form of a counter-interview or something, or is it better to just ignore it and keep on doing what you do?

I'd think that on the one hand, too many articles like this could begin to have a negative impact on the startup industry. Or, that reporters might handle their reporting a little more honestly if they got slapped for going in with a strong, conscious bias to begin with. On the other hand, it might just stir up more trouble and negative attention.
I don't think that is what he is asking for. I took that he said 'Dropbox lied on this point, why should we believe them on others'
I believe most tech users understand that and accept the compromise when they are using an 'encrypted' system
It will be particularly interesting to see if Thync tries to get studies from third parties. It looks like tDCS hasn't been solidly proven or disproven, so it will be exciting if this gets more researchers to look into the effectiveness of tDCS.
My experience with MobX has been the opposite.

I introduced MobX (along with HTML5 UI, React, TypeScript, etc) to a large team and it went swimmingly. Debugging/stepping-through was no more tedious than regular Chrome DevTools debugging.

I recommend using MobX’s strictest setting (where changing reactive objects can only occur in named actions), and restricting reactivity to a monolithic “model” (mdl) object and its children.

It really does make writing fast, correct & good UI a breeze, in my experience.
Democrats and Republicans only differ on societal issues. Smoke and mirrors pushed by the billionaires to avoid talking about the insanity that is unregulated capitalism, the only issue that actually matters.
Speaking as a once professional Delphi programmer, I can assure you that Delphi programs have lots of textual code in them. The IDE generates empty functions for event handlers, but you have to write textual code to do the actual handling.
https://giphy.com/gifs/mandy-moore-candy-s5h76W8pSJ5W8
Long Covid appears to be fairly common. Mortality isn’t the only relevant metric.
He knew his real name was an open secret. He published at least 1 piece under both names. He thought about starting over with a new pseudonym but decided not to.
I have libreoffice and definitely not a single java binary in my path.
> Where else is the POTUS going to get advisors except from the firms who pay the most money to get the best employees / speakers? The local CPA? Ergo - the wider implication is bunk.

I'm not convinced that everyone who's knowledgeable enough to preside over this hearing has been paid by this specific firm.

Nobody's saying that the advisor on this issue needs to have never given a paid speech or worked for one of the big players. They're saying that the advisor should not have been paid $800,000 by Citadel over the course of multiple speaking arrangements because that's an obvious sign of a preexisting relationship and therefore a conflict of interest.
This really adds nothing to the conversation. Nor does it provide any further insight into my pondering of what if.
Makes sense, networking was never my strong point. To be fair, alot of people will be using their ISP's DNS, but at least this is avoidable, even if you have to specifically take steps.
> These leaks damaged relationships with foreign governments.

If truth hurts it's not a good sign.
or BGP, or auth.
Sorry that you took the remark as arrogant.

Mathematical notation can be difficult to grasp :-(

It would be great if other people joined the discussion!
It's not just international keyboards that are affected by this. I'm a Dvorak user so I run into these issues from time to time.

As the article explains, there is a difference between the physical keyCode and character it corresponds to. Which to use really depends on what it is being used for, and there are situations for both. The article suggests checking the character typed, but this is not always the correct way to do it.

For instance, the most annoying are games which default to WASD based on the letter typed and not the physical keys (I've seen this both in web app and native games). Using WASD based on letters simply does not make sense because the whole purpose is to mimic arrow keys. If you base it off of letters typed, then on Dvorak it's like if you used ,A;H on Qwerty which makes absolutely no sense for directional navigation.

For shortcuts where the letter has a meaning, then you might want to look at the actual character. But beware that even alphanumeric keys are not always in the same place because of layouts such as Dvorak and Colemak.
Containment breach in the AI department, they are currently bombing the site from space, the outages are collateral damage.
Even in jazz, there has always been an interplay between old and new. During the jazz era, jazz was the sound of popular music, meaning that a lot of work for jazz musicians consisted of playing in dance bands that were as locked into a sound as some jazz performances are today. The jazz era didn't end with a bang, but had a very long tail, resulting in me getting hired for the same kind of work within my own lifetime. Everybody recognizes it for what it is, artistically, but on the other hand there's something to be said for making an audience happy.

Today, people approach jazz for different reasons, and of course at different levels of proficiency. Jazz is old enough to have a history and a canon, and the enjoyment of exploring and preserving that history is a good reason for some bands (hopefully not all of them) to exist. Given my stature in the local music scene (not a first-call player), a lot of my work is of that ilk. I approach it respectfully but not with utter obedience. As a bassist, the instrument that I play has undergone steady evolution, even post jazz era, so that what I play on a "traditional" gig is informed by the present as well as the past.
Libgccjit is based on regular gcc, which is a heavyweight compiler. The 'jit' is somewhat of a misnomer; you wouldn't want to actually use that for any of the same cases as a traditional jit (e.g. browsers). (LLVM jit has the same problems.)

I think the main point of libgccjit is actually to provide a cleaner interface than GIMPLE to gcc.
> Please refrain from making condescending, smug comments like this here. They do not in any way contribute to the debate.

HN today (over the course of previous weeks) is very quick with broad-swipe sensationalist statements, at least this is the sentiment I'm getting:

— The law of enough eyeballs is disproved by a decade-old bug!

— Sleep deprivation is used for some depression cases, therefore, let's banish sleep and crank all-nighters!

— SOLID is obsolete and debunked, and moreover, the old boomer Robert Martin defends it, so let's banish SOLID!

Repeat ad nauseam about any "mainstream" viewpoint or paradigm. It's getting old very quickly. Thus my abrasive passage that you quoted.

I'd like to see instead a more elaborate discussion about limitations of this observation (about eyeballs and bugs) which has proved itself quite more than once, rather than a sweeping statement. Right now the thread reads like a call to abolish all Newtonian mechanics and using relativistic calculations for everything, just because Newtonian physics got "debunked".

I'd argue that maybe a codebase can grow so much that no number of human eyeballs, even using eyeball enhancers like fuzzing and analysis tools similar to Coverity or PVS Studio, will ever bring all the bugs to the surface (and of course there can be design flaws undetectable with tools). And maybe realizing this should alter the way we design complex systems that should be as bug-free as it gets.
Clojure. I've found my code in other languages looking more and more like Lispy as time goes on, and my shame at not actually having learnt to use one well has grown too strong.
Wao thanks for posting this. Soon the day of his death.

RIP Aldous Huxley and thanks for having written Brave New World. It changed my life.
"But what about the cows!"

https://duckduckgo.com/?q=cows+milk+daylight+saving+time&t=f...
how many of these applications care about network transparency, which was one of the original headline features of X? How many of them care about ICCCM compliance? How many of them care about X at all? The answer to all of those questions, of course, is "very few"

What an odd, contrived, series of questions. With X anybody can use pretty much any app over the network by default. This one in particular is very odd:

how many of these applications care about network transparency

How many _applications_ care? Who knows! I care about network transparency. I want to run my app where my data is. That's pretty much the killer feature of X.
Nearly every major study I've seen going back decades has Chicago having lower comp numbers for tech than SV. But usually its on the order of 3-10%. How that compares in cost of living adjusted terms I don't know.

The 60-90k number sounds absurd to me. Having worked in Chicago for quite some time, 60k is what a new graduate could have earned 10 or 12 years ago in the middle of the last bubble burst. 90k seems like a plausible starting point now for an entry level Java developer.

The last time I worked in a .NET shop, we would not have been able to hire any of our targeted developers for anywhere near those numbers and that was 5 or so years ago.
It's probably the case that he could've stuck with being an individual contributor. I don't know about Google but the tech shop I work for has paths explicitly for the introverted engineer types who don't care for the drudgery of managing people. This is invariably a lot harder in academia, as getting to tenure pretty much requires one to act as a startup founder-- do all the business dealing, run a team, get funding, etc.

Given that Matt did get tenure he clearly is really good at such managerial roles, and probably couldn't help but step up. I bet Google leadership try very hard to get people to do management--it's not easy, on the contrary engineers don't like it and it's a fight to get the good ones to step up. I would bet too that the managerial type things at Google are a lot more fun than the academic ones.
Instead, they provide a reliable service. All the discounts in the world are useless when it's raining and the ramp is stuck, but "no worries, we'll send someone to you in 30 minutes."

I have a lot of strong opinions about why Uber is a godsend for people with disabilities that still let them get into a car. It grates on me when people bring up "the disabled" in support of any sort of public transit, when my experience has always been that it may work, or be half assed, and the perspective of the agencies when you ask for change (like, say, design a bus such that everyone gets on the same way, or a train station that only uses elevators (with hidden away backup stairs) such that if they are broken people will care) is to be grateful to have been invited to the party at all.
That 'analyis', i.e., “Box Will Hit $1 Billion In Revenues Before You Know It”, is the type of wild claim that people will look back years from now as a great example of the irrational exuberance of this age.
Dumb question- is the SF alum center open to non-CoE folks?

I was a math major that took a handful of CS classes... and am in desperate need of employment, but no one seems interested in giving entry-level dev work.
If it's anything like the US system, the time to stop an amendment is before it becomes part of a Christmas-tree bill, rather than after. So I don't think this is burying the truth at all.

https://en.wikipedia.org/wiki/Christmas_tree_bill
No. Google will only use ContentId to handle monetization. And only on their lopsided terms, which the artist isn't very keen on. She'd have to file DMCA requests for every single video it showed up in herself.
The disclosure window is typically for fixes released to end-users, not just fixed by vendors. This is also what was enforced with MS last round, where they had a fix ready but couldn't get it to pass QA and being released before the 90-days window expired.
You aren't serving ads, and provide free accounts. What's your model?
I'm in the same boat. Right now I drink diet soda with aspartame (max 2 cans per day) but I'm not convinced it is without risk. I try to avoid HFCS as well as limit my sugar intake.

I've done a bit of research on various sweeteners and have been trying to find the "perfect drink" but so far, no luck. I want something fizzy and sweet with caffeine but not sweetened using HFCS, sucralose, aspartame, etc.

I use powdered stevia on my cereal and in my tea. There is a soda out there sweetened with stevia but the cost is prohibitive. I have mostly replaced coffee with hot tea and will drink iced tea once in a while but the hassle is usually not worth it to me. Same with the carbonated water mixed with syrup route. Sparkling water does not taste good on its own.

For now, I guess I'll stick with Diet Sunkist until something better comes along.
I think I may be the exception but i have never even used the speed dial search. I only use the main url bar.

g searchstring and i search google.
y searchstring and i search yahoo.
i have also made some for other sites such as stackoverflow
s searchstring and i search SO.

so imo its not a big deal who the default is, with the exception of the main url bar default search.