skysight-inc/HackerNews huggingface dataset:
The nice thing is that they're doing for "security", although they're absolutely fine pulling insane amounts of crap into their browser to improve the "web experience" and incidentally increasing the attack surface [which is how you get most of the malware actually].
The beauty of WeChat is not it has tons of features, it's the tons of features are well hidden. As another user said, it's very natural to have used WeChat for quite some time and doesn't know all these existed. People always say it's not just a chat app, but if you use it just for chat then it's a pretty good one with good voice and video chat quality, supports group chat well and has a clean UI. All the other features are opt-in, hidden in several level of menus. There are no flashy confusing buttons, no daily reminder asking you to try some new feature, no distraction. For me and my friends who has long abandoned the bloated and flashy QQ for simple gtalk (before google got banned), WeChat is a breath of fresh air.
Openhub.net now requires you to give them your ceel phone # to do any edit
Wow, she's the Chief Security Officer. I got the impression she was just a hired writer (she prefers writing murder mysteries?). This is looking really bad now, for Oracle's head of security to feel this way.
There is no equivalent of a European left in mainstream US politics. You see bits and pieces in some small-time candidates like Bernie Sanders, but nothing serious. The red scare did its job.
Thanks, I'll definitely give Selenium a try!
Enough.

I have no idea what do you want to take from answers. It's not like you live
where I do, so you have no comparison with other wages and prices here.
It does help this use case, as you can restrict which role's a user/connection can have. i.e. you can't set role to anything you want if you are not a superuser.
Between that and e10s being on by default, FF42 is going to go over like a lead balloon.

I hope 41 is an ESR

update, nope: only 38 and 45 are ESR

https://mozorg.cdn.mozilla.net/media/img/firefox/organizatio...
Mobile IM is the new browser.
WikiLeaks: €100,000 Reward for Transatlantic Trade and Investment Partnership
China has an educated urban population about equivalent in size to the entire population of the US, and they're all using WeChat. My wife is a Nurse, has a 2:1 degree and although born in China has lived and worked in the UK since 2000 and she uses WeChat all the time, as do our kids. Educated non-techies don't want diversity, they want functionality and community.
When I read the spec the push support was ungood.

What it should do: Tell the server an XMPP or HTTP endpoint to which the server should push a specificed opaque blob when new mail arrives, and possibly other opaque blobs corresponding to other changes, and a (non-binding) rate limit.

With that, it would be easy to write a low-overhead server to support a particular mobile client. Accepts opaque blobs, decodes a little, sends blob to phone via giantmobilevendor.com (which also uses XMPP/HTTP), needs to store no state.
What QoS are you referring to?
I don't understand why everybody is mad about this post, oracle has proprietary software that is bound with a license.

In that sense I don't see why people do not moan about having to pay a rent because your tenancy contract that you signed says so...

Long story short, its a right of a SOFTWARE mostly company to protect its software, open source is not always the solution and reverse engineering something, consumes way more energy for the problems it actually solves.
I don't understand why everybody is mad about this post, oracle has proprietary software that is bound with a license.

In that sense I don't see why people do not moan about having to pay a rent because your tenancy contract that you signed says so...

Long story short, its a right of a SOFTWARE mostly company to protect its software, open source is not always the solution and reverse engineering something consumed way more energy for the problems it actually solves.
They should provide Linux support on these..
Oh no. Here's how an attack might go. I'm a shop assistant and show you a QR code to scan to make a purchase. Unknown to you, I'm not actually showing you the real app, but a fake app with fake QR code that will redirect you to a malicious website, which in it's turn will load the proper URL after having executed an unpatched zero-day on your device. You are sad because your device has just been pwned.

You are at the mercy of the source of the QR code, with no real way of being able to validate it before scanning.
Aren't those workloads better fit for a desktop?
Why China's currency has two names
But it doesn't! As long as downloading anything is allowed, signing requirements on extensions will not prevent anything.

And by experience supporting users, this is not how bad extensions get installed on the system: they're pulled in by malware which gets installed by other means.

This is only going to irate legitimate extension developers, which already have to wait weeks for AMO to review even the most basic change. I've been distributing extensions separately precisely for this reason.
I couldn't agree more. We see more and more startups end up with the wrong name for their business. That's why we created and launched the "Unused Domains" index a couple of weeks ago.

We index all(+50M so far) domains that are unused and give you access to them here: undeveloped.com/search

At least now you know which options you have and which alternatives are out there. The search and acquisition of the right name for your startup doesn't have to be that painful anymore.

PS: we help/advice/consult startups for free with finding and picking the right name in the right extension. So feel free to reach out to us if you're struggling with your name.
How do you define an edit distance (the number of operations required to transform one string to the other) if you don't allow substitutions?

Eg. what's the edit distance between these two strings?

AAAA
BBBB

Traditionally, it would be 4, but it's unclear if you allow only inserts and deletions.
This is getting increasingly disturbing with each new generation of hardware.

You no longer have the right to own the hardware you buy. Now it has become a service subject to their terms.

That Windows Platform Binary Table sounds disturbing and is ripe for being exploited.

Interesting info found [1]:

> Lenovo Service Engine (LSE) is a utility in the BIOS for certain Lenovo desktop systems. It automatically sends non-personally identifiable system data to a Lenovo server one time when the system is first connected to the internet and then does not send any additional data.

> The system data that LSE collected includes machine type and model, system UUID, region and date. No personally identifiable information is collected.

> Once this data is sent, the service is disabled automatically.

> LSE uses the Microsoft Windows Platform Binary Table (WPBT) capability. Microsoft has recently released updated security guidelines on how to best implement this feature. Lenovo’s use of LSE is not consistent with these guidelines and so Lenovo has stopped shipping desktop models with this utility and recommends customers with this utility enabled run a “clean up” utility that removes the LSE files from the desktop. Instructions on how to download and run this program are below.

> The LSE functionality has been removed from newly manufactured systems.

When some people insist on having a Libreboot/Coreboot supported laptop, they call them crazy and idealistic. Now this is what happens.

It's just a shame that with Intel ME the Libreboot/Coreboot devs have given up on Intel machines. I'm very interested in the Purism Librem laptop but I have low hopes. Maybe the future will be ARM.

[1] https://support.lenovo.com/nz/en/product_security/lse_bios_d...
> Generally, our code is shipped in compiled (executable) form (yes, I know that some code is interpreted). Customers get code that runs, not the code “as written.” That is for multiple reasons such as users generally only need to run code, not understand how it all gets put together, and the fact that our source code is highly valuable intellectual property (which is why we have a lot of restrictions on who accesses it and protections around it).

Your JDBC driver IP isn't that valuable, just give me the damned source code so I can figure out why my Postgres copy out stream is blocking when I insert it into your copy in stream.

/rant
How to localize social media campaigns
Yes, for you. For me, definitely not. I am getting close to RSI when using any chiclet keyboard besides MBP that somehow made it fairly acceptable but still inferior to original ThinkPad. The rest, like newer ThinkPads, ASUS, Dell, Toshiba etc. are just plain awful, I feel pain in my wrists after ~20 minutes of using them. And a lot of touch typists complain about chiclet keyboards as well. Flatness everywhere is getting absurd recently. Yes, chiclet keyboards look often better (well, it's the opposite with ThinkPad actually, they IMO look much worse than their original keyboard) but I prefer ergonomy to aesthetics when creating algorithms - the last thing I want is to feel pain in my wrists during a creative phase of coding when I need to write, delete, rewrite and refactor a lot of code, seriously.

Also, as a pianist I can notice subtle differences in the quality of keyboards. There is also one rule when playing on a piano - once you feel pain, you stop, you do something wrong or the instrument is not suitable for you and you'll injure yourself unless something is changed.
> Is there a reason for this?

People caring about DPI are less likely to want to smudge the screen by touching it.
Yes, via the Authorization: header with a negotiated access token.

The spec includes a discovery and authentication mechanism that a client can use to get an access token and can work fine with passwords, OAuth, etc. We don't actually have a lot of experience with this part of the protocol though. We expect that vendors may want to provide an alternate method to obtain access tokens (maybe using OAuth tokens directly). We're expecting to learn more about these use cases as more implementations appear.
The Next Great GMO Debate – RNA Interferece Sprays
If you love over-powered mobile solutions, have you by chance heard of Eurocom?
They make a portable server called Panther, and you can configure it with 12-core/24-thread Xeon, 32GB of ram, 4x1TB SSD in RAID 5 config and dual Quattro cards. In that config you have to use two(!!!) 300W power supplies though.

http://www.eurocom.com/ec/configure(1,234,0)ec
Sometimes there's a reason the villages were abandoned, like a water source that dried up.
"I wanted to update/install my nvidia drivers, so I opened the dash and typed "drivers". IT DISPLAYED GOLF CLUBS on sale at Amazon!"

https://groups.google.com/forum/#!msg/bikeshed/vtXkVdALoJ8/N...
Today, Mozilla doesn't get demands to take down extensions because sending demands would be pointless. If EvilCorp tried to force Mozilla to take down uBlock and friends from addons.mozilla.org they would just get hosted elsewhere and EvilCorp would look like assholes. It's all downside, no upside, so EvilCorp don't even bother to ask.

If tomorrow Mozilla can shut down any extension, the calculus changes. Forcing Mozilla to kill ad blockers still makes EvilCorp look like assholes, but it might be successful. There's a big upside now, so much more reason to try and force Mozilla's hand.
TypeScript and webpack
I work for a games development studio and for our demo booth at recent E3 we ran all servers off a super powerful laptop - in fact, the servers very barely fit in 32GB of ram. I have 64GB ram in my desktop PC and I do hit swap occasionally.
Wow… first Superfish and now this? My next computer certainly won’t be a Lenovo. Thanks for the heads-up.
That's pretty much exactly what it does. Client supplies a HTTP endpoint, that gets called with new state strings. That endpoint arranges for that information to be shipped to the client and then the client issues calls to update methods to get its view of the world up to date.

Its easy to extend to a custom (non-URL) method type if you like, and works well with mobile push channels. This is what we do with our mobile apps at FastMail to push through GCM, APNS, ADM and Pushy.
I use more than 32 GB of RAM all the time for ad hoc data processing, analysis and transformation and personally I'd like to be able to do the same work on my laptop that I do on my workstation. Especially since I often divide my time between a couple of different offices.
> Why is Oracle even allowing this person to be a voice for their brand?

Because her text will probably only infuriate people that will arguably never be Oracle customers?
I'm very excited about ECC in laptops, and want to buy one as soon as possible, but...

Shame it's released by a company which cannot be trusted anymore. I know the bigger blunder (SuperFish) happened in consumer laptop, but all things considered, I can't trust Lenovo any more. That means I won't buy anything they make. I miss old Thinkpads.

Is there any serious laptop manufacturer left at all? A company that builds good hardware, allows user replaceable battery / memory / disk, and doesn't include any crapware, or things you can't disable (like secure boot, Lenovo style hard disk file replacement, etc.).
Apart from the legal stuff and a lot off egocentric 'we can do it better', she has one point. There are many companies giving a lot of money for security, manually scrubbing all exploits that come out, create their own patches. While some lack the basic security guidelines. I think this money can be better spend upstream, to create tools so they can test patches for exploits better and create a faster security update release pipeline, so that all downstream and customers can rely on the security releases and that it can be released quicker to everyone. (Controversial: Maybe even adding automatic security updates to the package itself, like wordpress did, so that customer cannot be on a release with exploits)

Though saying to your client that they cannot reverse engineer to look for security problems, is totally not done! What is next? "Exploits will not be fixed, because the users has signed an agreement that they will not hack?"
Well that is for your account, I meant overall for the system and the trending report does that...
If your extension has been fully reviewed by AMO, you can upload beta versions that only have to pass the automated signing review to be posted to AMO.
Yes, but what's there to upvote like so?
For me the biggest issue is the lack of discrete buttons for the touchpad. I felt betrayed when Lenovo finally went the way of the "clickpad", which is the only name I have heard for the style of touchpad where the whole pad's plane depresses to click. I can't be the only one who:

1. Doesn't like tap-to-click on touchpads.

2. Prefers two discrete, easy-to-feel buttons over awkward clickable regions in the bottom corners.
Very interesting, thanks for that link.

"If LSE is not enabled, it will not be shown under the “Security” tab in the system BIOS and the user is not affected"

FYI, This was not true for me - there was no option in the BIOS regarding this. So I'd say, the lack of this in your BIOS setup screen does NOT mean it is not there!
Lessig 2016 – Referendum for Citizen Equality
Новый+трейлер+о+2+сезоне+шоу+Главная+сцена.+»
a tale of mobile/WiFi in two developing countries, Haiti and Cuba
I am curious how you think Spotlight web suggestions would work without sending data to Apple.

Do you expect your laptop to be crawling the internet ?
Correct, both are true actually. Normally I have my servers that do the stuff I need, but that's why I have a laptop with me, to be able to work anytime, even without internet connectivity (which is a pretty common occurrence).
Would be nice to know a little about why you want to know this and perhaps even your own pay as an act of good-will.
Debunking Myths of Implementing ERP
_She_ has that point (Mary Ann).
The -signed label was a one time effect to update existing extensions to signed versions (since AMO didn't want to arbitrarily bump the version numbers of all its hosted extensions). Future updates do not have this label.
I'm less curious about infrastructure that be commoditized and more about things like shared source code and access to subject-matter experts working on various teams at Google.
I guess by using this app, you basically give up all your info to chinese authorities. I would never used that
You can write in functional style in pretty much any language. It might not look quite so pretty but it can come close. And it can often be usably efficient too.
App Search Engine – Nepali App Directory – AppKosh
Not quite. There is a cost to building the system. The surrounding code could be massive. Also throw in accounting, reporting, regulatory requirements, etc and you are down quite a bit of overhead costs. Without the profit sharing, even charging a 2% expense would not cover all these -- especially your time value given someone with such skills can easily be making 200k on simple salary.
Google to Become Alphabet Inc in Shakeup – Mpelembe Media
Call me cynical but I'm of the opinion that this will help them continue operating the non-Internet businesses in places where the Internet businesses are facing regulation and/or sanctions.
Don't worry, if you won't let your paying customers check for security holes, there are plenty of people in China who are going to do it for you instead.
Ridiculous game plays/commentaries
The Coddling of the American Mind
The JPY is down against pretty much everything else due to some of the most aggressive QE ever seen though.
Codesign.io is now #1 on ProductHunt
Get all your favorite news in one place
The Dutch Republic traded New Amsterdam (modern day New York) to England in exchange for Suriname. But after England had demonstrated that they could take New Amsterdam whenever they wanted, so getting something in exchange was certainly better than nothing.
معلم جبس بورد الكويت 55973501 تركيب ورق جدران
57 percent? It's almost as reliable as a coin flip.
The one thing that frustrated me the most about Android was being confused about what the icons meant, especially when trying to copy text[1].

Select text > Think for a few seconds about which one of these similar looking icons means "copy" > press buttons until I figure it out.

[1] http://www.droid-life.com/wp-content/uploads/2015/02/cut-cop...
AFAIK portions of EULAs can be nullified by local law. For example, imagine if I made some incredibly useful piece of software and placed assassination requests in the EULA.

Source: by logical extension of: the "no refund" portion of game EULAs is nullified in EU. I'm no lawyer, though.

It doesn't matter though. Even if Oracle can legally stop customers and researchers from reverse-engineering their software world-wide, they can't stop malicious elements because the malicious elements never disclose that they have done it: Oracle only find out after they have been pwnd. I would say "serves them right," but the sad truth is that their customers are going to get hurt the most.

Edit to add: I don't think this[1] warrants an entirely new post.

> Oracle has told people to stop using @Veracode to test their AppSec. They already got AppSec covered [picture of JS injection attack in the blog post]

[1]: https://twitter.com/thegrugq/status/631056841670135808
NASA has explored inflatable modules; they used a series of outer layers to reduce the energy of the debris, plus an inner layer made out of Kevlar.

http://spaceflight.nasa.gov/history/station/transhab/
I agree. The societies who haven't adopted the "guilt ridden opposite of nationalism" will be fine.
But politically, that would be relinquishing a degree of control, something they've been loath to do in general, especially in areas that are of strategic importance.
It's not unclear, any substitution can be replicated by a deletion and insertion. I have no idea if that leads to a simpler case of the edit distance algorithm.
Difficult how? Even though Mozilla is going to providing builds of just such a fork themselves? Is it particularly hard to build firefox?
I stopped using desktops around 15 years ago. Being able to carry state around me is a huge plus. And since I want to minimize the state, I want to carry only one laptop, so it better be performant enough.

I have powerful servers where I run what I need, but sometimes (too often actually), I can't depend on internet connectivity, and have to run everything on my laptop.
Not really, I think we can say goodbye to user-replaceable hardware with the rise of the Ultrabook form-factor.
A couple of months ago I was looking for a laptop to buy and I wasn't in a hurry so I checked out literally every manufacturer I could find. In the end I defaulted to Macbook Pros. The hardware is great and OS X doesn't really get in my way.
If you want customization and prefer matte screens, System76 is pretty neat but they weren't available with the keyboard layout of my choice.
A lot of Swiss watches (even from the most high end brands) use quartz movements.
So iTunes sales slowed down when music streaming started to get traction. Apple did away with DRM when the majority of the record companies agreed to. I don't doubt for a second that Universal might have sold music without DRM elsewhere, why denying iTunes the same. The record industry were always afraid of the monopoly situation iTunes was becoming.
> nobody else has copied google yet

Why would they ?

Almost nobody is operating at Google's scale and interconnects like Infiniband are rarely saturated to the point that exotic solutions are needed. Fast RPC is nice and all but (a) not that many companies are using microservices and (b) not that many are scaling out to the billions of requests/second.

And the 20 or so companies who are operating at Google's scale are hardly floundering around blind. Facebook has done very interesting work in the infrastructure space, LinkedIn is amazing on the core software side and Netflix has pioneered the use of the cloud.
Old graph paper
What's the SI unit of pedantry?
Some parts of Google definitely, but others not so much. If anything they were late on social networks and they still haven't really caught up.
There is Jolla's Sailfish OS that has been built on Redhat Linux. However, the phone isn't exactly great hardware-wise. A better phone with the same OS is about to be released later this year by an Indian company (Intex) but I don't know whether it will be available globally.
Schlep Blindness vs. The Sunk Cost Fallacy
Apple was clear when announcing this that their goal was NOT to block ads. It was to block stuff that a) tracked you and b) caused your surfing to slow down. This is what they're aiming for.
Stelarc grows ear on his arm, plans to connect it to Internet
Codesign.io is a minimal project management tool for visual projects such as web-sites, logos, presentations, photos or anything else that can be viewed as an image. Codesign is a great tool for studios and agencies collaborating with their clients. Codesign makes this collaboration clean, simple and well-organized.
I think they want to encourage wider adoption of the Beta version, so they treat it similarly to the Release. The logic seems pretty questionable to me though. If you can install a Beta version of Firefox, you should be able to avoid consenting to allow malware to run on your computer (this change is primarily targeted at extensions installed by some user action -- like something silently side-loaded by an application installer).
seems like a great app! will try
n^100 is perfectly good for crypto.

n^2 is insufficient, but 'polynomial' as a category is not necessarily bad.

P=NP is not the end of the world, by itself.
And the hut by the fjord will have pretty good connectivity too.
is it also useful for people not in Nepal?
Assange, the law of limitation, and the next eight days
Only because laptops have often been too under-powered.

While I use desktops both at work and at home, I'd definitely switch to laptops if you could get the same power at roughly the same price point.