skysight-inc/HackerNews huggingface dataset:
China is a somewhat unique example as they are operating at a scale that no other country has to deal with. So solutions that work at the 300 million people scale, simply don't work at 2 billion people scale.

While this doesn't justify China's actions, it does provide an explanation for them.
Franky, I'm a fan of how those advertisements are tied into the site. Not flashy or obstructive, classy, embedded into the tile grid. No garbage tracking scripts loading, no plugins, just a simple colour image (from the same domain!!). If all ads were like that, I'd throw away my uMatrix and Adblock.
It's really good at generating hype...

Like PHP, it lowers the barriers for entry, so you get a lot of new users that aren't aware of any CS prior to 2005 or so. But they like to write blogs and you like to hang out on blog aggregator websites.
> Seeing trees in VR is absolutely not going to make more than a tiny difference to people's political beliefs on the importance of rainforests and their willingness to spend money on them.

If you think that, then I think you have to also think that seeing it in person is not going to have much of a difference, either. I fundamentally disagree.
Introducing GoQuic – A quick way to use QUIC
Heh. That's an area where quality input devices become even more essential, no?
Meshtag: Hand-drawn, scannable web links – now available on Android and iOS
While the paranoia about this has been rampant for a while, this article (from last year) points out that manufacturers ARE working on this and have been for some time:

http://money.cnn.com/2014/06/01/technology/security/car-hack...

Continental, one of the world's three major auto parts suppliers, is partnering with IBM (IBM) and Cisco (CSCO) to make firewalls that control the information flow between the car's devices. Until it gets security all figured out, the German company is holding back from adding full Internet connectivity features, such as real-time information from the engine that alerts the local car shop ahead of time.

Ford (F) hardware has built-in firewalls to prevent malicious tampering, and the company has a team of noble hackers constantly probing for weaknesses.

Toyota (TM) does all that too, plus it embeds security chips in the tiny computers throughout the car, narrowing how they communicate and lessening the chance of outsider interference. The company even has forward-thinking plans this year to visit the world's largest hacker conference, Black Hat.

It should be no surprise that Tesla (TSLA) is ahead of the pack. The Model S is the most advanced and connected car currently available. It's worth noting the company's mature approach to addressing vulnerabilities. Instead of hunting down hackers who spot weaknesses, they reward them with an "Information Security" badge that works like a Willy Wonka golden ticket, granting exclusive access to Tesla's factory in Fremont, Calif. The company recently sent one to a British hacker who goes by Jon of Bitquark.

But of course the government isn't helping much either. . .

...federal regulators will soon demand that cars automatically relay information wirelessly to one another as part of the U.S. government's vehicle-to-vehicle communication program. Those car-to-car messages will one day be able to engage brakes -- or your steering wheel.
Well of course there's not much to do with it now (other than develop for it), since no good VR sets have come to market yet (this was a developer kit you're talking about), and no games have shipped for them. It's like saying "yeah I've got a PlayStation5 developer kit the other day.. there's not much to do with it".
I'm torn between an artist trying to make an honest dollar on something he knows and revealing the secrets of the craft. For the same reason I never liked the "behind the scenes" of movie making and special effects. It takes the magic out of everything and removes illusion from the imagination much like spoilers do.
If this kind of exploit could be exploited en masse it could wreak huge economic havoc in addition to the life safety issues. Even if the attackers were warm and fuzzy types and they only took control of cars that were stationary. Forgetting about the safety problems for a moment it's kind of amusing to imagine thousands of logo-turtle-cars ambling around parking lots, clogging up traffic, making unprotected left-turns, etc.
Because your quip shows an astonishing amount of deference to an often incompetent and power hungry government. At least I can choose my vehicle.
Erle-Spider Is a Six-Legged Drone Powered by Snappy Ubuntu Core
Ah! Thank you for that datapoint, I don't use Chrome but I really should have tested that too.
You make it seem as if the reason for your DDG preference is self evident. What is the big difference to you? Is it that the first result's info box is so far to the right?
Unfortunately, this is not set in law. And really, that's the level where this should be enforced. You can count on firms to pursue their own self interest to the extent allowed by the law. I'm not saying that's good, I'm saying that's what happens BTW (don't shoot the messenger ;).
Here, cellular operators are seeing all this "free" spectrum, and cellular equipment makers are building a path to enable them to use it in a practical way for them, and sell their wares in the process. All legally, as the law is today.

BTW, there are precedents. In the IoT/M2M space Sigfox uses an unlicensed band around 900 MHz (from memory), and you can't buy their base stations: they make them for their own use, as their business is to be an operator. If you want to compete with them, you need to develop your own equipment based on a different scheme. WiFi and BT are the best known techs working in unlicensed bands, but there are proprietary systems too.

The legal constraints on the unlicensed bands are varying depending on country. But as far as I know the strictest constraints are:

- limited transmission power (LTE-LAA won't be allowed to shout above others at 5 GHz, at least where this constraint exists);

- requirements to do listen-before-talk (LBT), at least in Europe (but not in the US);

- limit on the amount of consecutive time a given device can hold the medium (5 ms max.).

LTE-LAA (not LTE-U) will be able to comply with all of this. In this sense, strictly limited to legal constraints, it will behave as is common in the 5 GHz band. To put more restrictions would need to happen at a legal level. And not surprisingly, there's intense lobbying on this topic happening right now from all parties (Google paper is part of this). To be followed...
Direct link: https://farm1.staticflickr.com/265/19667653813_94a68f5644_o....
Interventionism seems everywhere... wasn't there a time in history where countries would be a lot less contrasted (It seems the 'rich' countries are tempted and invited to put their hands and resources into less wealthy ones... creating problems on the long run) and thus more stable ?
Alexander and the terrible, shitty, no good GitHub support experience
Idaho has 2% of the votes in the Senate, just like every other state. Not 4%.
I agree that hey are useful. However, I do not think "having a warm seat" is worth connecting your car to an unsafe network.
Index Funds May Work a Little Too Well
I posted this on Show HN last week, but I wanted to let people know that the iOS version was out. Sorry for the repost!
Why? It's what they are (well, should be).
How Amazon Deleted Me and All My DRM Without a Second Thought
Ah yes CMD would be better! Thanks!

It was not in the tutorial as well. The tutorial says "Drag with the right mouse button..."
> I'd throw away my uMatrix and Adblock.

Well you should throw one or the other away. Why do you use both at the same time?
Maker Marketplace Tindie Acquired by SupplyFrame, Parent of Hackaday
Most YC startups are simply providing their own small service at the edge, without trying to take over their users' lives and dominate the net: http://yclist.com/

Beware of trying to judge phenomena by their news reporting on mass media, it's often biased towards outliers.
Could be the tabloid culture we have.
Let it play out, China's growth isn't remarkable and people said the same things when other countries where undergoing the same type of growth -- Japan, Brazil, and even the USSR. There are malinvestments. There has not been a significant correction so no one knows what % of their economy is sustainable or waste. What will things look like after a correction is complete, politically or economically?
This article is pure distillation of everything that's wrong with VR -- not the tech, but the people who are thinking about it and trying to build it. Specifically youngish white male gamer nerds.

I want to write about this more at length -- maybe I'll put something on my blog or on Medium or something -- but I also tried VR, and the most interesting aspect of the experience was just how clueless all of the gamer types at the gaming company office I went to were about what other people out there in the world would want from the experience. Here is what I mean.

The most impressive and important part of the otherwise crappy VR demo I sat through was a crudely rendered virtual media room with a big screen TV, where I was placed on a virtual couch to watch some movie clips. Why did this rock my world?

It rocked my world because I happen to know that it would cost me $40K at least to add a media room on to my house, and if I could buy $5K worth of VR gear for my wife and I and get pretty much the same effect, then that would be a major win for us (and a loss for Austin's contractors and architects).

In other words, gaming is the /least/ interesting thing about VR. VR has the potential to disrupt the architecture and building trades. In the real world, people like to have access to spaces that they can do various non-gaming things in, and they have historically been willing to pay quite a bit of money to have those spaces built. VR will drive the cost of adding those spaces to one's home/office/trailer/pad/etc. down towards zero.

I tried explaining this to the crowd of young white male gamer nerds gathered around the pizza station after the demo, and they sort of chuckled at this boring old guy rambling about building contractors (I'm pretty sure none of them owned a house) and went back to wracking their brains about what, to them, is the single most important thing in the world: how are we going to make a frigging GAME with this?

I know these guys, because prior to my wife + 3 kids + house I was one of them: a young white male gamer nerd. But at this point I've been around the block enough to recognize that the number of people interested in blasting virtual aliens or orcs is a few orders of magnitude lower than the number of people who want to just hang out on the deck of a mega-yacht at sundown, or have coffee once again in an exact replica of a Parisian cafe that they used to frequent in the 60's, or retreat from their kids and life into a virtual media room and watch Game of Thrones on a virtual big-screen TV.

Note that I'm not slamming Jeff Atwood, who for all I know owns a house and who thinks about many things other than leveling up and collecting loot. I'm just saying that he has thoroughly missed the point of VR, and in a super common and troubling way.

I'm not an SJW by any stretch, but VR needs women, and black people, and old people, and in fact it will get them because the market will demand it. That's because VR isn't the next Atari 2600 or Kinect -- it's the next TV, and the next Internet. Are today's Internet addicts hooked on MUDs or MOOs? No, they aren't. And tomorrow's VR junkies won't give a rip about games.
'others do it as well' is a red herring. Let's focus on the core truth in relation to the EU: 'The people creating laws are still unelected'.
Wait! Did they fix that in Windows 10?
Exactly. Pop-culture in the US (and high-school/college kids are drowning in it) is very anti-intellectual in general. And getting worse every year (reality shows, etc).

But a lot of discrimination comes from female peer-pressure, not males. My daughter kept repeating "math is hard" because her female friends kept saying so, until I had none of it. She ended up being very good in math, but chose chem+biology as her major in college :-)
> If Flash doesn't run under NaCl why use the PPAPI? Wouldn't libc be much more convenient, since you don't have to port Flash to the PPAPI?

I think you might have a few misconceptions. Chrome employs an outer process sandbox using OS primitives like seccomp-bpf on Linux and token restrictions on Windows. This process level sandboxing is what we use for running all untrusted content in Chrome. NaCl runs inside this outer sandbox as well, but it also applies an inner sandbox enforcing code flow integrity by verifying binaries against a subset of allowed instructions. PPAPI provides a portability layer that also serves to broker access to resources for any of Chrome's sandboxing mechanisms. So, something like PPAPI is needed for any sandboxed Chrome code, regardless of the sandboxing mechanism.

> Furthermore, I would imagine using the PPAPI directly wouldn't do much to enforce security since Flash can do whatever it likes in it's virtual address space, including jumping past checks and assert instructions in the PPAPI?

PPAPI isn't a security layer. As I mentioned above, it's a portability layer that can be used to broker resource access to sandboxed code. And PPAPI Flash is definitely sandboxed; it's just in a process sandbox that doesn't have the additional restrictions of NaCl's CFI sandbox. To explain a bit more, sandboxing in general isn't a binary state. Rather, there are varying degrees of restrictions that can be employed depending on the content, and in the case of Flash there are certain implementation details and legacy requirements that prevent it from running under the full set of restrictions that Chrome can apply to other content.

> If Flash doesn't run under NaCl, does it run under the same user and privilege as Chrome?

No, as I mentioned above Flash is sandboxed and runs at a severely reduced privilege. However, depending on the platform Flash may run at slightly greater privilege than Chrome runs e.g. Web content. And on all platforms, the Flash sandbox is less restrictive than the NaCl CFI sandbox (mostly due to the absence of CFI, but there are a few other differences as well).

>> Several reports on Twitter suggested the exploit could be used to bypass Google Chrome‘s protective “sandbox” technology

> It's frustrating that there is no source. However, the above quote would suggest that Flash runs inside NaCl. Is this factually incorrect?

The Hacking Team leaks included a Windows kernel escalation exploit against font parsing code exposed by Windows GDI. The vulnerability has since been fixed by Microsoft, but it was previously exposed to any process that could access GDI, which includes Flash in Chrome (and every other browser for that matter).

This also highlights the point I made earlier about varying degrees of sandboxing on different platforms, because Chrome doesn't expose GDI to Web content. Rather, Chrome uses a capability present in Windows 8 and above to disconnect the win32k subsystem from sandboxed Web processes, shutting off GDI and all other Win32 attack surface entirely. However, the same approach is not viable for Flash because the Windows version of Flash is coupled very tightly with GDI.
> That document would then be sent out to various parties that might have an interest in using this protocol who then would supply their feedback and as a result of that a more complete version of the original document would be released. And so on until the resulting protocol was considered mature enough for implementation.

Is that so? The early IETF process was, "Rough consensus and running code."

Protocols were implemented first, then revised and described in RFCs later, weren't they?
You lost my interest when I saw an ad manager in your HTML source: adannonce.com. I'll stick with DuckDuckGo thanks. You can't be privacy focused when you're already giving away data to a 3rd party.

I see a "Clear my activity" link, why would it keep my activity at all? https://hulbee.com/Utils/ClearSettings?returnUrl=%2F%3Fquery...

Surly you could have afforded a better certificate than a C+ graded GoDaddy one? Sure, its 2048 bit SSL, but that is quite the SSL chain for being privacy focused.

https://www.ssllabs.com/ssltest/analyze.html?d=hulbee.com -vs-
https://www.ssllabs.com/ssltest/analyze.html?d=duckduckgo.co...

Offering advertising on a privacy focused search engine? Could work, but when you're marketing to privacy focused individuals, you've just lost them.

In the end, I'm from Canada, my connection routes through New York (like most North American connections). My privacy is still being abused by greater forces whom likely have at least one of the private keys for one of the many certificates that make up that GoDaddy certificate, so I'll likely just stick with Google, or perhaps even DuckDuckGo.
> Or chatting without avatar support.

What? What is avatar support and why is it so critical?

Also, as a sibling said, those seem like problems clients can work to solve, not the protocol.
Show HN: Docker-compose-ui – a web interface for Docker Compose
From the article:

> The input to our algorithm is a set of images taken by the user while slightly scanning the scene with a camera/phone [...]

As mrb noticed, this has the side effect that the algorithm removes moving object from the scene, for example cars.
I'd call that 'processors'. Something like 'load image' could be called 'source' and 'save image' a 'sink'. Of course I'm biased since I have been using such naming schemes for years in signal processing software
Add to that the fact that some cars, like a Mercedes C-Class I rented recently, allow you to change the 'agility' setting from the entertainment screen (changing throttle response, steering and suspension).
Step-by-Step: Creating amazing GIFs to announce new features
Cool project--I just stuck mine in a Pelican case with a few holes/grommets for the wiring.
Hackaday and Tindie =  Awesome
I have not seen a car where I can lock my key inside in... idk 10 years maybe ?

edit : I meant keys inside the car but no one inside.
Yes. That is sane and important advice when talking about any optimization in any language.

Unless it's an execution hotspot in your code, value clarity and maintainability over performance.

Most of the speedups in these optimizations are very small in absolute terms (only a few milliseconds each) so they will only provide a real-world benefit if they're being called in a loop or something.

That all said:

1. A lot of these optimizations are also a win when it comes to clarity (Array#sample is faster and clearer than Array#shuffle.first)

2. Knowing that the "bang" version of a method is always destructive and nearly always faster is a good thing to remember in general for Ruby
Are you sure it isn't also the fact that it's historically had a tiny community of open source hackers and TypeScript has all the momentum of MS behind it?
A bit of both. He was a great guy who loved people, selling stuff to them was just a thing you did to keep the conversation going. But, he wasn't unique in doing this... plenty of business owners, especially smaller businesses, pay for better employees. Ever go to a hardware store where the clerk has worked there for 20 years? She doesn't make minimum wage.

I think the discussion here is a demonstration of how bean counters have conquered the world.
The difference is one of degree only. Sometimes differences of degree can be big enough that they are effectively differences in type (e.g., jumping off a stool vs. jumping off a building; popping one pill vs taking the whole bottle). In this case, I wonder if there is anything fundamentally different about the US or US people that would resist a deployment of the security state to the degree that China has deployed. Or, given similar large-scale social unrest, would we also go along with the program? Is there an equilibrium here with J. Edgar Hoover on one end, and Thomas Jefferson on the other? Or, are we sliding down a one-way slope toward a totalitarian state?
But what happens when my home internet connection goes out, or I don't have an always-on desktop machine?

The content can get distributed and hosted right after you publish it, ensuring access even if your machine goes offline. See Freenet, Bittorrent, etc.
I use both in conjunction because AdBlock removes ads while simultaneously fixing the flow of the site, while uMatrix leaves gaps and holes in the site. But I need uMatrix to be safe from XSS (unfortunately, most websites include jQuery from a different domain, what a stupid practice). Also, uMatrix breaks a lot of sites (especially sites using content delivery networks on multiple domains) so if I really want to access the content, I open it in an incognito window and disable uMatrix temporarily on that site (it's tedious to figure out what exact request broke the site. I only do those manual exceptions for my most favourite sites). Like that, the site works but most of the tracking and the ads are still blocked ;)

Yes, it is sad that the state of the internet has degraded so much that this is necessary.
Unit Tests via CSS – Visually catch typos, nesting and similar errors
Emacs is a great operating system, lacking only a decent editor :-P
1/7 = 0.14+0.0028+0.000056+0.00000112+0.0000000224+...

14=2(7)
28=4(7)
56=8(7)
112=16(7)
224=32(7)
They didn't keep their costs low (too many employee perks/parties and stuff), the operation was wholly dependent on investors, and to start with, the idea wasn't all that scalable anyway (1-on-1 hiring is tricky, to say that you'll find the best talent for a company is an over-statement.)
I started out using Haxe and eventually switched to Typescript because:

- it didn't easily integrate with existing JS code/libraries

- small community

- low resources (compiler bugs existed and weren't quickly fixed)

The community was a dealbreaker really. Lots of JS libraries already have TS type definitions so it's easy to get started, and TS keeps up-to-date with new JS features.

I prefered the Haxe typesystem, but it didn't really make business sense to keep using it.
CSSfmt: Format CSS source code automatically, inspired by Gofmt
For the open facebook alternative, I believe I was thinking about Diaspora (apparently it's still alive and kicking).

https://diasporafoundation.org/

Maybe its worth investigating.

As for the "failed because it was open" comment. Sorry, I didn't mean to suggest that it failed because it was open. Merely that it was open and failed (apparently maybe not so much failed).

I had thought it failed for the obvious reason: not attaining the necessary critical mass that a social network needs. One of its primary propositions was an open data policy. Apparently this might not have been sufficient to launch it into success. Again, there's still something there so maybe its still rumbling on.
You are missing the point. As far as digital surveillance goes, the US already does much more than China.
BBC technology coverage is almost universally terrible. They hardly ever provide links to further information, which is appalling for an online news site.
> Women just don't want to be in a high-profile, financially rewarding career with tons of growth potential, because ____.

a) It is not high profile. Outside of a few tech hubs the work is neither cool nor well respected.

b) It is no more financially rewarding than many other careers. In my city the average software developer earns about the same as a nurse. There are plenty of good developers in the US who are on less than 6 figures.

c) Unlike nursing etc, there is an incredible amount of churn and knowledge quickly devalues. This concerns anybody who wants the option of taking a few years off work.

d) Despite c) we rarely allocate any work time for L&D. So if you don't want to fall behind then you need to spend a significant chunk of your own time on L&D. Great if you are looking for more work-life balance!