jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
As much as I loathe Google I do have a fairly high expectation that the HSM rooted key pinning infra of Google Play itself is less vulnerable to MITM than the standalone signing key embedded in an APK hosted on a CDN somewhere.

You also can directly download APKs from Google Play using Aurora Store and compare them to the standalone APK in theory, though both points of verification are against the same entity so it only rules out MITM on a CDN etc.

Problem is, who has time to do this for every single update? How many would even do it for the initial install? Most technical sysadmins don't even verify ssh host fingerprints unless automated CA infra does it for them.

Even if someone does do this religiously, in practice I suspect they will put off valuable security patches until they can manually verify every new binary corresponds with the published source code to rule out supply chain attacks etc.

If two totally independent entities compiled and published signed binaries and their hashes matched (when signatures are stripped) then there is some automated consensus there are currently no obvious supply chain attacks in play to protect users at large who don't have the time or experience to compile and verify against the published apk by hand or manually compare fingerprints. F-droid could keep the Signal Foundation honest if they let them but instead they say "trust us, or compile your own binaries" as if no middle ground exists.

Meanwhile I can hand my wife a phone with F-Droid and Matrix and know she can update reasonably safely without any manual key verification steps by me or her. Even when the signing key of matrix.org on Google Play gets compromised the blast radius does not extend to F-droid.

The more reputable independent package managers building, signing, and distributing protocol compatible binaries the better. Makes it impractical for even a sophisticated adversary to gain control. Also lets users to have the freedom to choose an easy automated install)update path for apps that respects their privacy by not requiring proprietary Google services.
I’m pretty fricken sure they would have worked around not having that specific punch card tech - it’s like saying 9/11 wouldn’t have happened if Linux didn’t exist because the taliban used Linux systems
Location: Berlin, Germany

Remote: Yes

Willing to relocate: No

Technologies: Ruby on Rails, Javascript, HTML/CSS, React, SQL

Résumé/CV: http://www.novatogatorop.xyz

Github: https://github.com/novatogatorop

-

I consider myself as a Product minded Engineer. I would like to think and sketch the product ideas before implementing code. I’m also emphatic about how the product makes users feel and how those users benefit from using the product itself.
There's an algorithm they use to determine it:

```
func BanTrump() bool {
return false
}
```
I have a (maybe stupid) question about this. If we have the mitigations in place and compare two otherwise rather similar processors where one has hyperthreading and the other one doesn't (for example the Intel i7 7700 and the i5 7600), would there still be a significant difference in performance between them?
On how it's being used:

"We're not about to drop PostgreSQL as our primary data storage layer, but Riak seems to make a great complimentary datastore . . . "
This article seems to be more about the limitations of the standard Ruby interpreter, than about Rails.

Switching to JRuby would be an easy solution to these woes. Most gems are compatible these days, and there's even experimental support for C extensions as a temporary solution during migration.
I don't think it is appropriate at all to change the title or imply meaning on the original article. Further, assume stupidity not malice.
If I understand you correctly, what you are suggesting is that one way to improve deadcode analysis would be to start with known dead code and compare the results the deadcode analysis algorithm to the results achieved by "cheating."

Given that SunSpyder is a known example of deadcode and that using it is easier than writing a new deadcode benchmark, your explanation seems somewhat plausible (assuming I am understanding you correctly).

Edit: As a general case, there would seem to be a legitimate rationale for recognizing standard javascript snippets and loading pre-compliled routines to improve execution.
single page link: http://www.technologyreview.com/printer_friendly_article.asp...
The Cyc project, while fascinating, is basically a serious attempt at a general purpose semantic graph. It's been in the works since the early 80's.

And you know what? It should act as a warning to anybody thinking seriously about building large-scale semantic systems like the semantic web.

Cyc is pretty much useless (or at least the utility it provides is not exactly setting the world on fire). Until somebody can figure out how to employ an already very mature semantic graph like Cyc and do something(s) truly useful with it, don't waste anybody's time advocating the semantic web.

More imporantly, Cyc is a highly controlled semantic graph, with all of its information carefully curated. Imagine how terrible the results of semantic inference engines will be in the wild-west of the web!
Programming Java and C#, database development etc. It usually is not for more than some months, people would usually negotiate a lower price if the duration of the project/work is longer.
This is really more of a practical demonstration of using the thermal channel for transmission than any sort of security news.
Count me also in the camp of someone who has never heard a person choose Intellij over VS with Resharper who has used both for any significant time.

As for .NET, if it were a viable Linux server side VM, C# would be a very compelling language in comparison to any of the JVM languages. It blows Java out of the water, and even as a full time Scala developer, I'd have a hard time arguing against it vs Scala because the things I love about Scala come with so many things I hate.
You seem to be correct in that law enforcement uses 'persons' over 'people' more often. [1] I'm not entirely sure where the distinction comes from, but language can be such a funny thing.

[1] http://grammarist.com/usage/people-persons/
> No, but they are required for sending email to Gmail

Unless the user is using a web-based email application, like Yahoo Mail, who can route their mail however they want. This would seem to hurt Chinese email providers more than anyone else.
Interestingly, this is still relevant today when doing large data transfers between hosts with long RTTs using TCP: the typical TCP congestion control implementations (i.e. bic (http://en.wikipedia.org/wiki/BIC_TCP)) use ACKs to update their window size (which come back one RTT later) and hence their windows grow much slower than two hosts with the same capacity but a smaller RTT.

Cubic (http://en.wikipedia.org/wiki/CUBIC_TCP) and htcp (http://smakd.potaroo.net/ietf/all-ids/draft-leith-tcp-htcp-0...) are two congestion control methods which avoid this by not increasing the congestion window size by a function of the RTT (and are recommended if doing large data transfers across high capacity links with high RTT). In linux you can typically check your TCP congestion control algorithm by: "sysctl net.ipv4.tcp_congestion_control".
I'd like to know this too... I assume that now the keys have been discovered, PS3 should be fully retaskable?
I would speculate that this will not help Accenture to acquire new development talent. After all, who would want to work with an expired technology?
cool. wish it worked with 10.5.8.
I have the same desk, a Steelcase Please they work out quite nice.
You can use Ubuntu like you can use Windows or MacOS, only using the GUI (Graphic User Interface). You can learn to use CLI (Command Line Interface) too, in either OS you are using... Windows has what used to be called MS-DOS, and MacOS has a Unix CLI under the hood, which is very similar to a Linux CLI. It is a well known fact that CLI is much more powerful than GUI and allows to do many more things, but it has a steeper learning curve. If you are willing to learn CLI commands, you should loose your fears, and start by the basics, step by step, read a lot and ask in the apropiate forums when you get stuck. There's a handy command called 'man' (without the quotes), for manual, and that will give you additional reference to most commands. First you must understand linux file system, file permissions, and user roles. You might already know that there is a user called root which has permission to do anything on a linux/unix system. It is usually denoted in the prompt as #, while a regular user is denoted as $. Good luck!
What kind of elo do you have on tinder anyway?
Not to doubt these stories, but I know a mom just got an iPad, and she's not comfortable using the thing at all (she uses Macs for her day-to-day computing). She's not remotely dim--she doesn't doesn't naturally work the way an iPad works.

So that's another mom's experience.
It will also be the slowest only 1/3 of the time, so in fact this isn't an explanation why "the other lines" seem to be faster.
> Or consider using newLisp (newLisp.org) --
> easy to use and it has a very nice IDE. It's FREE too.

You may add sucking as a Lisp to that list of virtues.
Thanks man!

Interesting -- that's actually very similar in process to what we're doing. :)
Back in the 90's my son got arrested for getting in the way of a campus cop trying to arrest a Berkeley protester. He was charged with Lynching. So, yes, it's real and used. He was let go because there was no provable case.
I always see people point to 'just round the corner' future Proof of Stake systems when the energy waste topic comes up, but it seems like there are still a lot of big unsolved challenges with that, as well as new problems introduced by it.

As long as there's no actual widespread fully working currency using only PoS, it's a bit like justifying the emissions from flying by pointing to experimental solar powered aircraft, and saying all flights will be solar powered any day now.
Kind of. I don't think arrow - however good it becomes - can really compete with a language where those primitives (like do notation) come with the compiler.
I sincerely believe that Rust is here to stay!
Is transistor density somehow holding back magnetic storage density too or something else?
The one time I remember being spanked as a child was -- many, many years after the fact -- explained to me in passing to be for the exact reason you describe. It seems neigh impossible to me to validate that the spanking was "necessary" in any reasonable interpretation of the word; sure, I was never hit by a car as a kid, but you can't really prove a negative either. I can say, unequivocally, however, that 2-year-old me experienced the spanking as a completely arbitrary and utterly humiliating display of violence with absolutely no rhyme or reason whatsoever.
Westerners are from Saturn, Orientals are from Pluto: Rapsey’s five definitive sociological facts™
SVG can handle this situation. You can define the SVGs somewhere in the HTML document and reference them anywhere you want. https://css-tricks.com/lodge/svg/13-svg-icon-system-use-elem...

The syntax is like this:

<!-- Define the SVGs. I usually put them in an element with `display:none` -->
<svg id='svgID12345'><path d="..."/></svg>

<!-- Use the SVG via `<use xlink>` anywhere you want to see it. -->
<svg><use xlink:href='#svgID12345'></svg>

You can reference external SVGs in external files as well. Just use `<use xlink:href="defs.svg#icon-1"></use>`. https://css-tricks.com/svg-use-with-external-reference-take-...
1. It's not about replacing anybody.

2. Quality > Quantity. (It's fine if you disagree; see 1.)

3. You're looking at the wrong page[1], because the frontpage cycles randomly through different lists, because the frontpage is about discovery rather than popularity, because the whole point of the site is to not rank by popularity, because the site is about quality and not quantity.

[1] Here's the closest hubski has to a 'frontpage': http://hubski.com/global?id=9. Average comment count is more than 2.
In other words, they have permission to make mistakes, because we have lower expectations of them? If that's the case, you're doing us all a disservice by telling us they're not evil after all.
It's not the end of Feb yet so how do you know he isn't right? Also there is still a chance they plan to get rid of a large number but are avoiding the negative PR but staggering it.
Or, we get some really good transparency regarding the affairs of elected officials, and the workings of Congress.
You can only get information about one user at a time that way. Exporting the data can't be done. If you disagree, write the code.
Feel free to point us to where Pence, McConnell, and Murkowski had to flee for safety from rioters who were there at the behest of Pence, McConnell, and Murkowski.
Gutenberg is one example, Hitler another one.

It like people already forgot that followers of the president committed an domestic terror attack right after attending his rally.
It's working fine for me. Perhaps it just needed to be turned off and on again? :)
Obligatory: http://www.gnu.org/fun/jokes/evilmalware.html
Agreed, but I wished he removed the shadows from the body text. It distracts and makes it harder to read (a bit like moving pictures next to the text).
Interesting.
If it's a hoax, it's very well done.
And a good reminder of how the world is going to look with the ACTA in place.
Rodney Zack's "Programming the Z80". Yes, I'm that old :) As a side note, it's still an excellent book to learn the workings of computer hardware.
For quick file uploads (to share or when I'm hopping around campus), I'm surely going to plug my new project, Crate [1] (though I have it better than most, with access to the sexy Crate for Mac app).

[1] http://letscrate.com/register?inv=hn
SVMs may make a lot of intuitive sense due to the intuitive nature of the max-margin method of building a classifier, but that doesn't make them "much, much better" than a neural network.

Neural networks are "universal" function approximators in the sense that given sufficient number of hidden layer units and training data, they can approximate any Borel measurable function. This makes them theoretically powerful. (There are issues with this "universalness" claim though when doing cognitive modelling. See "Cognition and the computational power of connectionist networks", Hadley at http://www.informaworld.com/smpp/content~db=all?content=10.1...)

In practice, the best handwritten digits classifier is still neural networks. Lecun keeps scores at http://yann.lecun.com/exdb/mnist/.

Are there challenges with training neural networks? Certainly. But for many applications, there are good reasons to use a neural network. For instance, inference in a neural network is fast, and the learnt model is small in size (in feedforward networks, just a few large matrices).

SVMs on the other hand are "easier" to train, but care has to be taken to use the "right" kernel, and the learnt model in practice has to, in many cases, carry around with it up to half or more of the training data set (ie, the support vectors), making the model bigger in size, and inference slower (although there is work in making a sparser set of support vectors. See "An Effective Method of Pruning Support Vector Machine Classifiers", Liang, at http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=5342...).

I know neural network research is kinda old school these days, has been overhyped in the past, and SVM research is kinda "in" nowadays, but that's no reason to think SVM is "much, much better" than ANN.
Using tables is not a bad thing. I don't know how people came to this conclusion.

gmail lists emails using tables. What's wrong with that?
What I meant to say was that a reason why it may not be true. I started typing the response with one thing in mind and ended with another.

Point still applies though. No cases where prosecution has cited intercepted VPN traffic.
It's interesting that you build your models first. This has been the way I've worked, but has felt clumsy so far on this project - hence my asking of this question. I do like the idea of controlling the models entirely from the console before building any UI though; that's definitely interesting to me as I can continue to develop the models to fit use cases that I find (I will be able to speak with a potential customer in the coming week so I'm hoping to glean more insight then) and nothing at all is wasted.

I am also not that visual, I do find it easier to fit the jigsaw together mentally, but I like to get this down somewhere solid where it can be reviewed/altered. Also, my memory isn't so great and in the past I have forgotten realisations that I'd made regarding faults in my design or changes that I should make.

Thanks for your insight; I'm edging towards the idea of modelling directly in Rails migrations.
This. But I should probably thank him, because after reading that I searched and found an editor that suited me better and was Open Source. :)
"make right turn" is apparently hard! Word Lens translates it to "make correct turn" but where "turn" is in the sense of taking turns not in the sense of turning. Google Translate gives "to the right which in turn".
Very sorry about it. Although I have made the necessary corrections. Next time, I will double check the quality of content I submit.
Well... God chose Ultraedit: http://www.ultraedit.com/company/IDM_full_story.html

;)
Yeah, so what's the point?
I recommend paypal also. They answer the phone. They seem to take it seriously. No way I'd go with G on this until they get better customer service. In fact, I'll be looking into advertising options for my next product, because they are too capricious and will not take my issues seriously.
He should just sell out to Youporn or whatever. Pretty sure CR isn't the next the Facebook, worth turning down billion dollar offers for.
Some bad calculations by me, of course the price raise is 250€, not 150€ :) Even worse...
Linode is pretty solid. They have had about 2(?) outages in the past year or so that I can remember. I've been using Linode since 2008 and am happy.
"Cheap" in this instance was clearly meant pejoratively, not descriptively. Replacing it with "inexpensive", "economical" or "low-cost" doesn't really fit. Replacing it with "tacky", "trashy", "bum", "chintzy", "crummy", "punk" or similar from your thesaurus clearly fits the meaning intended.

And that's all premised on the fact that this plastic casing is even cheap, which we clearly don't actually know. How do we know they didn't try and get fancy with their material selection or manufacturing (like Apple often does) and then blow it (like Apple often does). Did the plastic in the G4 cube have cracks because it was "cheap"? Did the white MacBook suffer discoloration because the plastic was "cheap"? No, someone or something messed up and even with fancy engineers and fancy plastics it wasn't caught in time. Assuming the Droid even has such issues, I'd guess the same cause.
Try rackspacecloud servers (http://www.rackspacecloud.com) - uses pretty much the same backend as slicehost (slicehost owned by rackspace). I find them cheaper as it's not a fixed cost, but pay as you go.
Did you propose another game? If you did, what happened?
Take a look into pipewire.
It's pretty cool to see a demonstrable example of how a solid testing framework can significantly boost development times. Especially one that includes end-to-end tests as well.

I've been involved in a lot of projects that rely entirely on unit tests and skimp on integration tests. Invariably the devs make up for this by doing a lot of manual testing, even though it is very time and labor intensive. People significantly underestimate the safety and velocity benefits of a solid suite of integration tests
That's not at all an accurate summary. I'd cover why but really the article is apt and to the point on doing so without summarization IMO.
As a one man army indie game developer I basically can no longer maintain my code-base without going crazy because it's grown to the point where it's no longer a one man job. I knew this would be a problem, so keeping code complexity to a minimum has always been a priority, but it's no longer possible to keep up. Thankfully it's reached maturity as a product and is a fun and profitable game. Many people think i'm 'brilliant' when they see the product and they hear i'm the only the developer and it's a custom 3d engine. But truth of the matter is much of my brilliance was stubbornness and cleverness in keeping things simple and code complexity to a minimum. The problem is you run out of memory in your brain. You forget how systems work. You have to trace back through the code and "reload things". When you have to make a modification.

When I hit my human ram capacity so to speak, i was extremely frustrated that I couldn't make the boundlessly quick progress that I used to. But then you get used to it, and just accept that it will take time when you switch from one subsystem to the other, to load up the relevant parts of the code into your human ram in order to do be able to do the work you want to do.

The simpler and more straightforward the program architecture, the easier it is to jump into and out of and write new code. Of course understanding what your product is and is going to be helps tremendously in making sure you can design your program in a sensible way.... I've been lucky enough to have a firm intuitive understanding of future the design of the game and it's features as it was being formed. (not being at the mercy of clients or bad managers is a wonderful thing)

What i've noticed is a big difference from me and friends with small development studios that accomplish less with a lot more sweat. Is that I don't develop fully featured flexible systems when simple ones will do, I don't roll my own code when good/simple libraries or apis exist. I'm trying to make my product a work of art, and the code is functional and simple. Where often I see other good engineers try to make their code the work of art. Which leads to lots unnecessary code complexity because they engineer systems designed to be future proof for everything, instead of of what realistically will be necessary for the future of the project or projects. A system with 30 components is easier to understand and easier to maintain than a system with 100. More functions, more objects, and more abstractions. Often mean more components and code complexity. Which ultimately means it's going to take more brainpower to get anything done. Which is why it takes teams of 100s to maintain large enterprise software projects where the incremental updates change very little even though the engineers working on it are educated well trained people. shrug
yes you are correct

thats why i fucking ignore if someone contacts me on linked and he's a recruiter.

I tell fuck you. here, buy my software instead.
from kolkata most of the sites are accessible .
Honestly, I am surprised Snapchat is still around. I never receive or send Snapchats to my friends any more. About one year ago me and my friends used the app on a daily basis, it was fun and you could send funny things, now it is mostly dead whenever I do check it.

It was only ever a trend. They should have sold it when they had the chance to sell to Facebook, because if the numbers are to be believed, they're not doing that well. Eventually we will see Snapchat either pivot or die.
It seems airtel hasn't yet enforced the block. I am using Google DNS and yet most of the websites mentioned are blocked
This is what I was thinking. And they wanted even more than that! I can't fathom what $900 million would buy, but it seems like at a certain point, it'd be in their interests to stop giving away equity, no? $900 million is a big chunk of a company pretty much regardless of valuation.