skysight-inc/HackerNews huggingface dataset:
The problem I have with the current settings in Windows 10 is how they seem to lump together vital security update functionality with Cortana and other datamining features. They shouldn't be part of the same 'module' as it were. But someone at MS HQ thought it was a good idea for some odd reason. I can't see this as anything but a way to sweeten the medicine they feel we need to take. IMO, if they were up front about what each feature does and how to enable/disable it wouldn't get anything close to the pushback it's getting now.

It just seems the suits on high think they know better than the rest of us and that's a troubling attitude. What if they think that end-to-end encryption isn't a good thing and that they need to force us "naughty children" to not use it? Well there goes your enterprise customers who have to use said encryption to secure work stations from industrial espionage.
It's one of the first good windows releases since... 95? Even the terminal got a facelift.
Microsoft has had the ability to push updates without user consent since XP!

http://www.informationweek.com/microsoft-updates-windows-wit...
I can't help but feel like some of this is fear mongering. There are some good features in there that are being disabled for the sake of "privacy" like sharing of Windows updates with other computers to speed up downloads. And how do we expect things like Windows Defender or Microsoft's handwriting and voice recognition to improve if we refuse to share back any anonymized information with Microsoft?
In my opinion, if those privacy issues bother you, the first step should be an overview of non-Microsoft operating systems.
Deadlifts, as mentioned elsewhere in the thread.
Your phone is always reporting its position. Someone, somewhere has the capability to type your cell phone number or IMEI in to a console and find out what tower you're currently connected to. Furthermore it only takes 3 towers to trilaterate your location, and someone, somewhere has telemetry from all the towers in your neighbourhood at their fingertips.

Hell, failing that, it's been demonstrated publicly that anybody can simply purchase access to SS7 and query this sort of information to locate you, in real time, from the other side of the globe, without your knowledge. If you post your cell phone number online, many people can find you right now.

As for it not always recording, true, but you have no idea when and if it is enabled. The SIM and baseband processor are black boxes capable of running unfettered by iOS and Android. Your app preferences are simply irrelevant, and you cannot easily see or inspect the traffic going over the cellular network.

Oh, and you likely can't remove your battery.

Cell phones are an Orwellian wet dream. If you're ever doing anything you never want anyone to ever know about, whether it's illegal or just deeply private, do not take your cell phone with you.
Probably not much point in disabling that. Disabling downloads from other machines on the web makes more sense if you have a data cap or are charged per MB, which is common in some countries. It's not really a privacy-related change as far as I can see.
> Purchased by myself with permissions to use those features toggled on/off for various apps.

You have to love the beauty of such a scheme.
"airbnb" results in

“ayr”
Arabic: penis

The only one I could find, so just bad luck :)
A monarchy is fine so long as you end up on the throne, I guess...
In theory they could charge money for their services instead and not capitalize on user data. I would pay them for this if I was given the option and already do so where possible, but it would seem that I am by no means representative.
I like the "with". Python has that construct. It's not annoying and easy to remember.
But our population can't increase steadily forever. That trend HAS to end or even reverse at some point.

I understand increases in productivity enable support for a larger population- but that's not a bottomless well. There are insurmountable practical limitations.
"I really don’t like criticising colleagues, a tendency I’m guessing we all share in science."

This. This is everything that's wrong about modern science.
Deadlifts and squats are great workouts for targeting a wide array of muscle groups, including back.
If I understand the paper correctly, the architecture is very odd. As far as I can tell, it's equivalent to a deep CNN, with the facts being fed into every couple layers. Why did they break it up into parallel invocations of DNNs, and several layers of DNNs? Very strange.

I imagine a simplified architecture of RNN->Highway CNN->Answerer would achieve better results while being more homogeneous.
I think this should also do a phoneme based comparison, for example the photo sharing website Flickr is pronounced like this word (as a slang word it is well known) https://en.wiktionary.org/wiki/flikker
How We Designed the New Salesforce at Scale
Absolutely, but at the same time, sacrificing client side rendering performance isn't the answer, and some of his suggestions about how he wishes React worked would involve doing just that. The author's complaint isn't that server-side rendering is harmfully impacted, it's that JSX has some expressively awkward bits. But it has some of those awkward bits because it more or less has to if React is going to work as well as it does on the client side. JSX was designed the way that it was to enable client-side functionality, and the author doesn't seem to acknowledge that, so it seems like he's criticizing without fully understanding.
The number of options related to easing network access and location awareness demonstrates that Win10 is more aimed at laptops and tablets than desktops etc.
Which makes me wonder: how would one prevent such a scenario, where you cannot simply encrypt with a shared key given github's auth model ?
Interesting, hadn't seen that.

Flash version runs a lot smoother (as expected)... Firefox, desktop. Sound didn't work in the HTML version at all, and frame-rate was slower.
The court's order suppressing the search has more detail on the situation and the government's arguments: https://www.unitedstatescourts.org/federal/dcd/159072/42-0.h...

"The search of the laptop began well after Kim had already departed, and it was conducted approximately 150 miles away from the airport. The government engaged in an extensive examination of the entire contents of Kim’s hard drive after it had already been secured, and it accorded itself unlimited time to do so. There was little or no reason to suspect that criminal activity was afoot at the time Kim was about to cross the border, and there was little about this search – neither its location nor its scope and duration – that resembled a routine search at the border. The fundamental inquiry required under the Fourth Amendment is whether the invasion of the defendant’s right to privacy in his papers and effects was reasonable under the totality of the circumstances, and the Court finds that it was not."
Write better Markdown
FYI this doesn't check for words that sound like swear words. For example, it'll detect Fuck but not Fack.
What level of fidelity (e.g. self-made prototype, small batch of manufactured prototypes, etc.) would you recommend before going on kickstarter?
I just googled it, actually.
The top result was [Flashback](https://en.wikipedia.org/wiki/Trojan_BackDoor.Flashback).
Infected 600k at its height, but as of Jan 2014, there were only about 20k infected computers.

It redirected users to a compromised site, which used JS to load a Java applet containing an exploit that was already patched in the official Java, but not in the default version that comes pre-installed on Macs. The applet tricked you into installing "Flash" on your system.

- Adblock would've stopped the JS from executing in the first place
- We'd definitely have the latest Java versions
- I uninstalled Flash ages ago, and use Chrome's built in player instead, and certainly wouldn't install it from a site that isn't Adobe

Apple themselves have learnt from the incident, and have been speeding up Mac releases of pre-installed software since then.

The possible attack vectors against modestly capable Mac users are quite low..I simply don't see it happening. Unless I'm being targeted by institutional/state hackers. In which case I doubt AV would do much good.

Social engineering and poor passwords are likely to be a much bigger threat than malware.
I formatted one of the converted examples for easier reading

http://pastebin.com/SEMHXkd6
Turbulent Stock Markets Will Impact Startup Funding
Fewzion: “Using Stackify we identify and solve app issues earlier and faster”
Krugman: Stupid China Stories
Fair point. I just don't think they've found product-market fit yet. Before, they were giving too little value to the schools, and now they're giving too little to the students.

Maybe if they switched to selling textbooks and bundle the video course with the textbook. I would never go out and buy a $200 textbook to something I have no foundation in, but if I'm getting a video course with it, maybe.
> If you want to be blocked from downloading malware? Guess what? You have to check with a central db first.

Or it could download the db and do the checks locally. There wouldn't be privacy concerns about MS knowing which sites one's browsing.
> As always, it's best to interpret others' comments in the most generous way possible, rather than jumping to the conclusion that the poor person must have been spending too much money to pull himself up by his bootstraps.

Honestly, I didn't jump to any conclusions -- perhaps you're not interpreting my question in the most generous way?
Squats and deadlifts (and similar compound exercises) are best for building back and core strength. Stretches, especially yoga, can help expand tight chest muscles.

Swimming is good for building endurance and working the whole body.
That just says that if you're bad at math, trying to teach it doesn't help.

That's useful "know your limitations" information, but I don't see how it separates nature vs nurture effects.
Facebook 'spam king' faces 3 years in prison
I agree with you. When balancing risk vs reward I'm happy for their to be surveillance cameras everywhere in public.

I might think differently if I was a high profile person as then there's the possibility the government could be watching your moves to use as blackmail or for nefarious purposes. But as an every day citizen I believe it's much more likely that I'm going to get mugged in an alleyway than have big brother mess with my life. I'd rather have that increased safety from everyday criminals than worry about the government.

On the internet I believe the opposite, because there is such a low chance of intelligence services catching anyone trying to harm me. I feel like gathering peoples public unencrypted information will do almost nothing to stop online criminals.
Yes, thanks for the post. Helps to understand the differences quickly. I'm in the process of planning an update to B4 and it will save me lots of time.
> All of these are totally free to join.

This is true, but misleading.

It's true that it costs nothing to join a W3C mailing list. However, if you join such a list and actually try to participate, you rapidly discover that:

1) Making a meaningful contribution requires being able to commit enough time to shepherd that contribution through the twin gauntlets of W3C process and internal committee politics;

2) The only people who can justify committing that kind of time are people for whom doing so is their full-time job;

3) Almost all of the people whose full-time job is participating in a W3C list are browser implementers;

4) Browser implementers, unsurprisingly, tend to see the problems and concerns of browser implementers as being inherently more important than the problems and concerns of other types of stakeholders in the Web (e.g. Web developers, marketers/adtech people, privacy advocates, accessibility advocates, etc.).

You generally discover this the first time you have the temerity to offer an opinion, at which point you are bombarded with responses about how you don't really understand the issue because you're not a browser implementer and have no idea how hard it is to be a browser implementer because browser implementers have it harder than anybody else in the world including lepers and orphans and seriously you have no freaking idea how anything in the world even works and bro do you even implement we didn't think so thanks for your useless opinion now go away.

(Full disclosure: I may still be a little bitter from my participation in the HTML5 process.)
As I sit here in my building with 400 others sitting around me writing code on Macbook Pros. Knowing that in this industrial park alone there are other startups with hundreds of employees doing the same thing. (And this is in Utah - not San Francisco) I'd venture to say that 5% may be extremely off base. I'd say, you take every coffee-shop college student and match them against thousands who are writing code as we speak.
I have several issues with your post.

1) Public places /used/ to be private! In practice, anyway, because CCTV wasn't ubiquitous, and constant recording by every passerby wasn't the norm. It's a public space, but 24/7 recording by a dozen private parties at a time is NOT the norm historically.

2) If most of our surveillance online is "by consent" but no one reads the EULA or signs anything, is it really consent? Just because people are ignorant to the problems, or do not feel immediate impact of online surveillance, doesn't make it right or consensual.
An honest account of what it's like to drop out
The whole reason the privacy debate hasn't reached critical mass amongst the general population is because there is no actual impact. It's entire theoretical for almost everyone. 99.99 of people aren't being actually spied on. Despite the fact that the western governments can spy on everything you do. They just don't. They can't spy on all of us.

Sure they can get my info. Or anyone's info. And they could totally reconstruct my life. But they only have the resources of to do this to maybe a couple thousand people. Out of a billion westeRners.

Sure my emails are probably buffered for a little while. But as long as I don't ride a jet into the Sears tower nobody will actually read them.

The people asked themselves: if a tree fell in the woods and nobody heard it, did it make a sound. And our answer is no it didn't.

The fact is the biggest intrusion in our lives is Google, Facebook, Amazon, etc. Google literally exists to spy on you. It's a many many billion dollar industry.

The nsa could potentially read my email or track my location. But Google definitely already does.
Show HN: ObjectiveFS – Shared file system for EC2 and laptop
Pretty much, no, really.

This is why I consider an ad-blocker part of any standard security suite.
As much as it's fun to create kernel modules and experiment with kernel space, I'll have to agree with this. If you can keep things simple and use existing facilities, that should generally be the goal.
How did you get "exes only" from the word "binaries"? Anything can be uploaded to VirusTotal - Office documents, images, zip files, exes, installers...and that's what I do - pretty much anything that isn't a simple text or code file.

The last virus I got was back in the 90's. It was called the New York Boot Virus and I got it by accidentally leaving a floppy disk in my machine as it booted up.
Note: Don't only work your back if you're asking as a beginner.

Deadlifts will work your entire core better than most other exercises. make sure you research correct form beforehand.
Exponential growth cannot continue forever.
Not a startup, but yesterday I was impressed with the font Skolar, which name I mistakenly remembered as Skola, and apparently it's considered close enough to "Chola", which is Hindi for clitoris.

The "level of worriness" does go down (pun intended) when I type the font's correct name.
With the input box I suspect they want the database to be crowdsourced. I wonder if they vet the input, if we all try hard enough might we get hackernews into the swear list?
Note that Spanner always waits out the clock uncertainty on commit, while Cockroach doesn't need to do that - by design there are fewer situations in which the offset really matters. We can still benefit from a good bound in some situations, in particular you get global linearizability between causally unrelated transactions by waiting out the maximum clock offset (so just what Spanner does).
BTW, I'm not sure when you would ever need the above guarantee, but it's cool! (disclaimer: actually working on the project).
Why a “universal” flu vaccine may soon be a reality
Well, I'm not an expert on UI stuff, but the author did go right into Defender's settings and choose to disable the cloud definitions. How is that misleading? MS didn't hide that setting. Its in a logical place. Its obvious the author didn't bother to understand what cloud definitions are, just saw the word "cloud," and put on his Mr. Privacy Expert hat and told everyone to turn it off.

I do agree that Smartscreen is in a silly place, but because MS now uses it for not only sites but MS Store links, it kinda makes sense to move it out of the browser and into a more general place. Sadly, links like these guides get everywhere on the internet. Lots of people are now going to be at risk at easily avoided malware and phishing attempts because of his laziness and stupidity.

In a couple months we'll have articles about "Why is Windows 10 getting so much malware?" Gee maybe because everyone disabled the security features in an angry privacy fit without considering the consequences or thinking through the problem? The same way geeks freaked out when the UAC in Vista was revealed and disabled it, along with the security layer it provides.
Wow, #1 isn't at all offensive... "Your employees are talking to each other and wasting your valuable time! Nip that in the bud right now!"
The issue is that both SmartScreen and Defender 'cloud' protection upload or otherwise inform Microsoft about what you are downloading. For example, it could conceivably track and prevent you from downloading and using Tor. For most Western countries that's not a problem, but is the data sent encrypted? Could an adversary (nation-state) MITM your connection (e.g. GFoC) and immediately be informed about who downloaded Tor, even if they had been using a VPN or other circumvention mechanism? (Windows Defender scans files as soon as you open the directory, not just the first time)

Also, I don't think Defender's cloud-based protection has anything to do with updates. These are delivered via WU; I think it's more to do with informing Microsoft about detection or suspicious files so they can be analysed.

(Not voted either way)

Edit:
I really wish people would say why they downvote. Otherwise I have no idea what you disagree with or whether you think what I've written is factually incorrect.
I find myself reminded of how people oh and ah over Google Now being helpful, while i am sitting here wondering how much Google must know about each person to produce those results.

I am sure the technologists at both Google and Microsoft has the best of intentions with their creations, the question is what happens when a TLA or similar comes knocking.
Is a start. How about death and failure type words? Muerta doesn't elicit any warning. And 'Nova' is famous for its Spanish meaning (apocryphal?) - words like that might be hard to catch.
You're going to get muscle twinges as you get stronger. If it's disks, though, you either have an underlying issue or you're doing it wrong.
Let's clarify: disabling smartscreen for privacy reasons is different that keeping it enabled for security reasons. Smartscreen sends urls you visit to Msoft, and since Win8, it sends filenames of downloaded files to Msoft too.

As for the security argument, smartscreen only works in IE, so for those of use who don't want any of that turned on, and use FF (instead of chrome), where we download the blacklist instead of sending it outside our network, we can still maintain the same level of security while adding a layer to our privacy.

The same for cloud based Defender. There is no reason I shouldn't be able to turn it off if I have an approriate replacement that protects my privacy.

Which also means you are wrong when you say "if you run any AV or use any browser, you're already doing this". Nope, not at all, and either you are unaware of what you speak of or you are being disingenuous.
Not much, but for your example I'd draw two circles (or bars), fill 1/3 of one, 1/2 of the other, and ask the child to sum those. Then, add the missing divisions to the circles, so that both are divided in 6, and ask the child to sum.

I don't know how to draw a multiplication (and I think I'm not alone), but get some physical tokens that you can divide in 2 or 3 (like matches), and you can do all kinds of fraction multiplication and division with them.
But then you would have download definitions, and send new stuff onto the central db anyway.
Italian one needs work. It did not have 'minchia' in it, which is no longer even all that regional, AFAIK. Didn't have 'mona' either, although that could be foregiven as it's dialect in the Veneto.
> like sharing of Windows updates with other computers to speed up downloads

American internet speeds suck enough without Microsoft grabbing some for itself.

> Windows Defender

They seemed to be able to improve their services before. In fact, I think that's what a Security Researchers job is. MS has several of them.

> handwriting and voice recognition

Neither of which apply to my desktop, so why do I have to give them any information.

Microsoft could have saved a lot of face simply by making all this opt in and off by default.
Wikipedia was the closest I found, not really a start up though.
UK Banks charge fees for handling cash.
> For now... QE 4 is coming, there is no doubt.

Actually, I doubt that.

But if you're going to classify even tax breaks as QE4, then, sure, sooner or later there's going to be some tax breaks to somebody for something. Big enough to really classify as QE4? I doubt it.
Powershell commands compared to Linux, OS X, OpenBSD, FreeBSD and SmartOS
We built a shared file system with an S3 backend. We've been running our own servers for many years, and wanted something low maintenance, reliable, scalable and secure. So, we built this POSIX-compliant shared filesystem for Linux and Mac.

We love to hear your feedback. Feel free to try it out. We will also be here to answer questions.
Because subluxation is not based in science.
> (don't like volatility)

Antifragility is not liking volatility; it is dislike but acceptance of it.

This is what he said:

“(4) Build in redundancy and overcompensation

“Redundancy in systems is a key to antifragility. As Taleb suggests, nature loves to over-insure itself, whether in the case of providing each of us with two kidneys or excess capacity in our neural system or arterial apparatus. Overcompensation is a form of redundancy and it can help systems to opportunistically respond to unanticipated events. What seems like inefficiency or wasted resources like extra cash in the bank or stockpiles of food can actually prove to be enormously helpful, not just to survive unexpected stress, but to provide the resources required to address windows of opportunity that often arise in times of turmoil. This perspective helps to put into context the praise of inefficiency in Bill Janeway’s important new book, Doing Capitalism in the Innovation Economy."

Well, to build in redundancy you need market manipulation (FDIC for example), otherwise markets will tend to overfitness. If you are claiming that "antifragility" = laissez-faire you are completely wrong; who will enforce the redundancy?