skysight-inc/HackerNews huggingface dataset:
Advice: Link your actual app store/list somewhere. On an app-based platform, most people's first question is "what apps can I run on it?"

I think I saw your thing before at an earlier stage because I'm heavily interested in/messing with Sandstorm.io. There's a lot of stuff you can currently run on this that would not work (yet) on Sandstorm, which is cool. Particularly a game server like Minecraft.

My question is what kind of security is employed to ensure apps are frequently updated, apps cannot interfere with other apps, etc.?

You may want to fix how your Terms of Service is presented. On Firefox, it does not word wrap, and scrolls horizontally... pretty much indefinitely inside that box.
People always say this...

But imagine that you have a family, youre established have kids - they have school you have you network of family and friends etc...

I think that the only people who actually ever make this argument are young singles with no kids that think "duh, its so easy to just commute farther!"

The rent difference in say Pittsburg CA to Oakland/SF is NOT that much different -- but the commute costs (time & money) are enormous.

What you may save in rent, you lose in every other aspect of daily life.

To make the argument of "just commute farther" is just too simplistic a view.

It reminds me of Bush saying how industrious and admirable it was for a single mother to have to work three jobs to support herself.
One of the many problems here is that the public has little sympathy for defendants, and most talk about the 'justice system' is basically a competition to see who can rail agaist criminals the most. The facts that the false conviction rate is quite high, and that the vast majority of cases (>90%) do not go to trial at all are completely missed by the citizenry who simply do not care to learn about the system they are upholding.
Chelsea Manning could face solitary confinement over Jenner magazine: Lawyer
This is probably due to their agreements with local affiliate broadcasters. Which is sort of ironic.

(A lot of the consideration in the affiliate agreements is in the form of local advertising slots in national programming; the national stream can't compete with the local affiliates)
How much cheaper (in time, code, effort, complexity) would it be if:

- Their language runtime supported thread-based concurrency, which would drastically reduce implementation complexity and actual per-task overhead, thus improving machine usage efficiency AND eliminating the concerns about managing process trees that introduces a requirement for things like Docker.

- Their language runtime was AOT or JIT compiled, simply making everything faster to a degree that test execution could be reasonably performed on one (potentially large) machine.

- They used a language with a decent type system, significantly reducing the number of tests that had to be both written and run?
This is so accurate:

>> They are convinced that the American economy is at least in part fueled by this hobby and believe emphasis of electronics in education is immensely valuable.

>> This is not a new passion, in fact most began by taking things apart at a young age and have spent 35 years or more pursuing their avocation. While they haven’t always had a lot of time to pursue electronics as a hobby, they expect that it will become a larger part of their lives in the near future.

>> Hobbyists believe that this is first and foremost a hobby about creativity that transforms from an idea into something tangible. New technology and renewed devotions have given electronics hobbyists the ability to create almost anything they can dream up and yet at the end of the day there is a childish affection that succumbs to goofing around and playing with fun, blinking lights.

>> This is an old-boys club very much split between those that make their living with electronics during the day and then use it to play and those that pursue it as a pure pastime. For those who see it as a pure hobby, a large percentage are self-taught but are no less skilled nor passionate than those who have dedicated all aspects of their life to electronics.
Cool. Are you planning to also integrate Xing as another option to LinkedIn? As far as I know Xing is more widespread in Germany.
"""
Tomlin broke off to go inside the store and buy a soda. The clerk wrapped it in a paper bag and handed him a straw. Back outside, as the conversation wound down, one of the officers called the men over. He asked one of Tomlin’s friends if he was carrying anything he shouldn’t; he frisked him. Then he turned to Tomlin, who was holding his bagged soda and straw. ‘‘He thought it was a beer,’’ Tomlin guesses. ‘‘He opens the bag up, it was a soda. He says, ‘What you got in the other hand?’ I says, ‘I got a straw that I’m about to use for the soda.’ ’’ The officer asked Tomlin if he had anything on him that he shouldn’t. ‘‘I says, ‘No, you can check me, I don’t have nothing on me.’ He checks me. He’s going all through my socks and everything.’’ The next thing Tomlin knew, he says, he was getting handcuffed. ‘‘I said, ‘Officer, what am I getting locked up for?’ He says, ‘Drug paraphernalia.’ I says, ‘Drug paraphernalia?’ He opens up his hand and shows me the straw.’’
"""

This isn't even the main point of the article but I think it speaks volumes on its own.
Elasticsearch Scripting: Aggregations, Part 2
I'm pretty sure the niche is that it's a really nice car that happens to be electric. IE people who like electric vehicles and who don't want to drive a refrigerator (and can afford it).
The service provider isn't able to decode the info because the key is part of the URL that isn't sent to them. This decreases liability (and if nobody visits them, they can't be forced to decrypt it).
Here's the problem: It's a DROID Turbo. It's locked down by Verizon/Motorola, and neither root nor bootloader unlock has been achieved. So it's not even an option.

The problem is that the "upgrade path" and the "security fix" path need to be separate things. People should not be forced to have their device changed in an unacceptable manner (I did not buy a device with 'material design' for a reason, and being forced to get it to get a security fix is an unacceptable situation.)
Android QA at Nextdoor
Gradually chiselled away? Where???

In my suburb of Boston, both Verizon Fios and Comcast have been available for a few years now.

Neither one has lowered its prices one cent.

The only positive change was a relatively minor increase in downstream (but not upstream) speeds for the same package price at Comcast.

Duopoly is usually not enough to foster real competition.
The NSA is loving this. Microsoft 10 is their new operating system.
Thanks for the awesome work you have done on test-queue. We have really appreciated it at SchoolKeep.
I think I speak for all the corporate authoritarian shills when I say thank you lord google for protecting me and all others from things which may offend me or anyone else. While we may be against most libertarian ideals, the right of private companies to discriminate for arbitrary moral reasons is important.
Show HN: Streamlined shipping for Big Cartel
Not quite sure what is your point here. The amount of megabytes transferred each month does not have to be any particular fixed number to become a burden for the user, or the ISP. We can see that at least in one case (and probably many more) such a cost can exceed $200. All of this without user's consent.

Microsoft, please get your stuff together. Hire some privacy aware people.
Look at major websites. You can easily reach 50k to 200k+ lines of CSS in a large project.
I created this app to streamline the order fulfillment process of my online store.

It used to take me days to fulfill orders (had to hand-write all addresses, find time to go to the post office and wait in line, etc) but now I get most orders out same day. Hipment pre-fills my shipping labels with the order details from Big Cartel, so I can just confirm everything's correct and purchase/print labels right away.
Just to give everyone a bit of calm, nobody's demonstrated a successful exploit with ASLR bypass.

Meaning that while the vulnerable is technically exploitable, the chance of system compromise is very low on modern android phones (I think post 4.0)
Yeah, I just checked Rogers, it looks even worse and not even updated for if it is completed.

http://communityforums.rogers.com/t5/forums/forumtopicpage/b...
I was downvoted and criticised a few days ago for defending Microsoft on Windows 10. I am starting to change my opinion after looking into the issue more. I watched a recent Richard Stallman talk on youtube and went through the process of making the tightest privacy settings I could on my iPad, Windows 10 laptop, and Android phone. (I left my Mac and Linux laptops as is since I just use those for development.)

I think that Microsoft looked at the Google Now user experience on Android phones and decided to emulate that type of AI assistent in Windows. Google collects all sorts of user context information and Microsoft decided to do the same.

This is a guess but the difference may be that (some) people are willing to have less privacy on their smartphones but care more about privacy on their computers.
Being about year in with street photography this is very insightful. Can you elaborate on any tricks you do in Lightroom in this area ??
I looked it up and the truth is in between. You get "ferritizing" annealing starting at 1300F. Microscopic amounts of that will happen at 500F but nothing significant. Thank you, now I will stop wasting my time with this piece of folklore...
“WAS COSMIC INFLATION THE 'BANG' OF THE BIG BANG?” (1997)
Google released a patch for Stagefright for 4.4.x anyways. So this is not the reason. The problem is that Android is currently flawed in implementation in that it treats security fixes and system upgrades the same way. There's only one "path" to get updates. So by blocking 5.1, I also don't get a Stagefright fix for my 4.4, even though a fix for 4.4 already exists.

Also, companies like Microsoft do charge extra for supporting old versions. Specifically, versions OVER TEN YEARS OLD. (Vista security updates are still free!) However, Google does not properly support OS versions released within the last year, which is drastically worse.
It's not just a providers. I've got a couple of el-cheapo $80 Androids just a month ago to use while traveling. They're running 4.4, Android 5 is not at all being offered for them, and probably never will. I guess I can throw them in the trash if I care about owning them myself.

Being el-cheapos, they aren't even supported by cyanogenmod. Anyone has an idea for how to use them (somewhat) securely?
Hard Facts: Challenges of a hardware startup
because somehow magically an iphone is more secure because reasons?

I agree that iphone's patching model is superior to android, but your statement shows a bit of ignorance.
Freaking awesome! So much to learn from the code from these guys... plus easier to use, more trustworthy... and you don't have to wait for the vendor to fix critical bugs when needed.

I'd really like to see all infrastructure SDKs open sourced (obviously a tough sell, but maybe Parse paves the way). In building our core stack, we don't tolerate closed source. But we end up allowing it for things like Crashlytics, MixPanel, Segment, etc - and it's not a free lunch.
> The "forced" you so easily dismiss is entirely the point.

I think it's you that missed my point.

> people choose when (and if) they upgrade, for a variety of complex reasons

If they're running Gentoo, or maybe a small group of other distros, sure. Otherwise, people (on all operating systems) don't really do a lot of choosing at all. If updates are available, they generally run them. The only picking and choosing I've ever seen from the vast majority of people (including technical folks) is if they don't have the bandwidth/time to update a particularly large piece of software at the moment. Of course, they'll update it later when they are able.

> The problem of inspecting the code itself is a separate issue entirely, though at least in the area of Free Software that inspection is possible

Yes, it's possible, but it isn't done in practice, which is why I said it. That's the reason I said it's 'basically the same thing'. Whether you receive updates automatically or choose when to download them, you are still accepting what the distribution method gives you. There are FAR too many software packages out there for the average person to work out the logistics of reading accounts from early adopters of every single point release.

> Now you're simply resorting to either insults (and/or wilful ignorance).

It's not an insult. It's a factual statement. You claimed in your comment that a multi-billion dollar corporation who has a vested interest in keeping the good will of their customers (some of whom are corporate, some government, but the vast majority are consumers who look to them for help) would willfully send compromised software through forced updates in the future. If that isn't a conspiracy theory, I'd love to know what is.
Harvard student loses Facebook gig for app that shows flaws
Help me out here, 2014 Q3 says $21.9m deferred for SuperCharger electricity minus $10.3m as of previous year, so they deferred $11.6m from 2014 sales of ~22,000 cars. That's ~$500/car accounted for the lifetime SuperCharger costs. Tell me where I'm wrong.

At $10 a charge (12 cent kWh) that's 50 charges per car for its lifetime. That seems like a pretty low estimate to me on number of charges, especially as the network expands.

The difference to your $2000 works out to $33m (more for the full year). That seems like a significant amount to me.
Prenda attorney Paul Duffy dies
I'm one of the developers of http://imagefly.io. We are still very much active and doing development on the service. We have paying customers and our own photo products depend heavily on the service.

We clearly need to update the copyright info on the page and make some new blog posts!
Only if the early engineers could write in a language that they were as productive in as Ruby. Getting Stripe launched was the key thing Stripe needed to accomplish. Everything else follows from that.
Samsugn is one of the world's largest distributor in terms of smartphone shipments --- but, it's quarterly profits have been down for the past 5 quarters. So, I wonder where they could focus on to reverse that trend.
Which is sort of ironic, given that Ember.js was originally called Sproutcore 2.0 [1]...But I digress. Props to Tom, Yehuda, and everyone else. I've been dithering over whether to get up to speed on Ember or React, but I feel like the 'Batteries Included' approach that Ember provides and the very aggressive approach to cruft removal is what's right for me.

[1] http://yehudakatz.com/2011/12/12/amber-js-formerly-sproutcor...
Thanks Andrew! Transparency and community involvement is our top priority here.

Also, we're doing a series of blog posts that will cover each part of the SDK stack. Lots of learnings to share from our kick ass SDK team.

Here's the first: http://blog.parse.com/learn/the-parse-sdk-whats-inside/
Tails 1.5 is out
It's likely from the automatic _sharing_ of automatic updates.
Ok, let me make a start. This is what I use:

Debian
Apache
MySql
PHP
VIM
99designs
Upwork
GitHub
webpagetest.org
Google PagespeedInsights
Google Analytics
I wonder how this will compare to Intels 3D NAND flash chips (http://www.ipwatchdog.com/2015/08/12/intel-micron-develop-3d...). Some competition on similar technologies is never wrong!
> There's a school of photography that basically lives and dies by over-saturating images (e.g. http://kenrockwell.com ) and they'd likely have a cow over the headline, but understand and be totally onboard for the actual goal.

Actually, I suspect that even that crowd, after the initial shock would be absolutely on board. This would mean that no longer would the sensor control how the high-end clipping happens, but now that could be tailored specifically via a post-processing filter. E.g. to exactly match a long-gone film emulsion's behavior, "enhance" a classic, or to simply to create new clipping functions.

This is a bit analogous to the flexibility that black and white shooters gain by working with modern color sensors. When shooting B&W film, the tonal result was controlled via a combination of the film's spectral response and any colored lens filters applied, the latter used to manipulate tonal contrast between different colored subject matter (e.g. sky, plants, skin tones, etc.). Now a skilled photographer can shoot color RAW w/ B&W preview (for a preview of the image luminosity) then adjust in post to nail the image effect without having to mess even thinking about what colored lens filter(s) to have used.
Actually I have two kids. As I suspect many of the people on the 534 bus in LA did.

"What you may save in rent, you lose in every other aspect of daily life."

What you're suggesting is that you might value the other aspects in life over the money saved on rent. I agree with you there. I love spending time with my kids. But know that other people are also trying to place that same value themselves. When a majority of the people are reaching the same conclusion then the housing prices will go in the direction demanded by the majority based on supply and demand.

If the majority of people decided that commuting farther was worth the trade off then housing prices would ease up. And then more people could afford them. Eventually a market price would be established.

I feel like bringing Bush into the conversation is a red herring as many people will have a strong reaction to that in one way or another and lose sight of the conversation we are having.
It's not an apples-to-apples comparison, but Android has been around since 2007, and they're up to API level 22 right now. In that same time period, Microsoft has had the following releases of Windows (excluding Mobile/Phone and Server):

Vista, which actually came out in 2006 in the OEM edition
Windows 7
Windows 8
Windows 8.1
Windows 10

Windows has had a much slower release cadence than Android. It's a much, much bigger burden on Google to continue to support older Android versions with bugfixes and security patches than it is Windows. Now, you can counter that Google decided on this release cadence, but still, I don't think it's reasonable to expect Google to support Android versions as long as Microsoft does Windows versions, as some here are stumping for.

(That said, every time I read an article about Android these days I get the urge to buy a Windows Phone.)
> Some apps in iOS have this affordance where you can go back if you swipe
> from the left edge of the screen inward, but frustratingly some don't.

Interesting example. If the phone is set to a RTL language, do you swipe from the right to go back? Or is the answer some do, some don't?
The isolation seems mostly defined by this SELinux policy: https://github.com/android/platform_system_core/blob/lollipo...

service media /system/bin/mediaserver
class main
user media
group audio camera inet net_bt net_bt_admin net_bw_acct drmrpc mediadrm
ioprio rt 4

You'd need another exploit to elevate from SELinux (and I think send MSSes for a self-propagating worm). Though given Android's abysmal patching, most Android kernels are also terribly outdated...
Good post explaining table stakes for reasoning about whether your site search works (and measuring whether changes make it work better).

If anyone is interested in having this but not rolling their own, www.switfype.com (ycombinator 2012) provide a pretty powerful site (and mobile app, etc) search solution, which includes these kinds of analytics and more (disclaimer: the founders were my roommates :-)).
Are you at Brooklyn Roasting Co?
Looks awesome. I'll certainly be putting this to some use :)

That said.

> Anyway, they all require Node.js, a huge dependency for this simple problem, in my opinion.

While I personally agree with this opinion, isn't it typically the case that a frontend dev's workflow already heavily relies on Node? It's probably already installed for all that Wangular.js nonsense, so it being tacked on to one of the heavier CSS preprocessors probably doesn't make much of a difference, no?
I wish HN was more inclined to vote up articles like this and figure out how the tech community can effect change. Most of us will never be subject to this injustice, so it is ever so easy to avert our eyes and focus on topics such a Apples Products are Getting Harder to Use and the 1983 version of Unix System V Release 1 Programming Guide, both of which are ranked higher and have more comments despite being posted 9 hours earlier.
Yeah. I wish we'd restrict the definition of drug paraphernalia. And ya know, end the drug war.
Any reason why a financial infrastructure provider like Stripe would run CI tests on someone elses infrastructure? Isn't that a no go from a security point of view? Or - how do you trust the hosted CI company not to look at your code?
This is awesome. Huge fan of what you guys are doing at Parse!
YES! It's so important to be able to look under the hood with these things.

When I was working at MoPub, our open source SDK was one of our major selling points.
Right. Investigations. But most of them are settled with a rather small fee for the corporations or with some small changes in the behavior (like the browser selection screen, that already was changed again in Windows 10, as much I heard).

That are the cosmetic changes I mentioned. I know nobody in the EU, that really wants to mess to much with the big corporations (I mean, the really big ones). And privacy concerns are mostly laughed at -- in Germany, the government itself even forces new privacy troubles without need on the people (like the "smart meter" or the "health card").
It would be excellent to have a non-LinkedIn login method for applicants.
OK - so I just had two experiences with a bay area law enforcement agency, and I am beside myself with disgust and anger:

I was accused of doing something I did not. I was taken to jail and they held me on bail - and set my court date for about three weeks from the time I was booked, but an arraignment in about 5 days.

I had just accepted a new job - but still had a week on my current.

I HAD to post bail (and I didn't really have the money for it) so I had to get a bail bond. so I could get out and go to work!! This cost my $3,000 out of pocket.

So I did, and then went to my arraignment: Guess what "no charges filed and case rejected for lack of any evidence at all"

But now - I am out $3,000 and I have an arrest on my record for something that was simply a false accusation! Further, WHile I was in jail over night, the guards and police are absolute douchebags. They treat EVERYONE like crap.

I now hate all cops. ALL of them.
Good choice: I can second this opinion, since I was too under the impression that OTR was used.
This makes me wonder whether a possible solution path could be to bring a case about this to the Supreme Court.
Would it be cheap enough to encourage a re-write, re-engineer the server stack, and re-train employees? I doubt it.

I think it is an interesting question but a bad one most of the time unless you take into account all the other external factors that don't include the language it self.
"Slumlord" is sometimes used to refer to any profiteering landlord, regardless of the property
Yes, I notice a sharp rise in productivity and progress on all important projects. I don't schedule individual todos but set out todos on a project in that time.

I use iCal at work but I'd love something similar for home, where I use Ubuntu. I dislike Google Calendar, it didn't work so well. A desktop app seems to work best for me.

I'd be interested in hearing more about your project!
How do you think jailbreaking is accomplished?
You want to see the system change? Get the police to start arresting middle-class white people who can afford bail and lawyers on these trivial charges. If it started impacting people who weren't already poor, there'd be change, pronto.
You (probably) don't want an Android console