skysight-inc/HackerNews huggingface dataset:
It did the same for me. I had been on Linux for about 6 months (because of some issues with Win7) waiting for the Win10 release. A new laptop was in my future.

A week after the Win10 release (still seeing red because of the privacy issues), picked up an older laptop (wanted something super Linux-friendly) with legacy BIOS and haven't been this happy with an OS in over a decade.

My biggest worry now is that Open Source Software with strong privacy rights policy might be pressured by government/politicians, commercial entities and general public apathy to engage in the same kind of illegal data-mining for so-called "national security" reasons.

At the rate we're going, it's inevitable.
How would the decision to grant one particular patent to Google "help to remove software patents"?
> Google's ideal outcome is that no other browser would have tabs, making them inferior to the point of not being usable. That is literally their desired outcome from filing this patent, and indeed it is the basis for every software patent.

Spoken like someone who has not even looked at the claims, and probably doesn't know what the word "claim" means.
Or even just Redhat and where the majority of their revenue comes from. I'm actually angry I clicked on this link.
What did Apple patent that someone else invented before?
KANYE DROPS YEEZY SEASON 2 AT NYFW AND MISSES THE MARK AS WELL AS THE POINT
Awesome, I like your response. I definitely agree that there are many ways to take this. But, some of the risk factors that you are comparing aren't really on the same level. To go back to a bad metaphor again :), what if I stuck a camera with encrypted feeds in your house that you couldn't remove, but I told you that they weren't attached to anything? and that you could just push this button to turn them off? See, the light goes off. That means it's off. Why are you so distrusting? What if they were in every room? over your bed?

As you move downward into more primitive levels of the system, or outward to edge parts of the system (ie a usb attachment), it becomes harder to see what's going on. For example: let's say that you p0wned the firmware on a non-boot SATA drive. You could see all the bits flying across, but you can't do much about them except tamper with them; they might be encrypted, or you maybe can't get access to the network in order to ship them off elsewhere. There's probably ways around each of those, but it's hard. But what if I took a Raspberry Pi and stuck it on the system bus? that's a different story :)

When you have a multi-megabyte secondary server and processor that's hooked directly into your system bus, watching everything that comes across and able to subtly react, tamper, watch just for keys, or ship data off elsewhere, then (as you point out) the attack vectors multiply compared to a exploiting a device's firmware. And, you can't ever get rid of them. EVER. No amount of flashing will fix it, because you can't flash it anyway. (That's why I posted the libreboot IntelME link).

What if just the hardware RNG (rdrand) watched for a particular sequence of bits to come into some registers, and then started spitting out a predictable sequence for random numbers?

What if this wasn't even a crazy conspiracy theory? (It's not, as we know now, although we don't know the exact mechanism that hardware RNG's are owned by). :(

> The IME just allows your computer to do the bidding of some arbitrary third-party that Intel likes (like DRM companies), instead of the code needing to be written by Intel themselves, embedded deep in the CPU's internals.

Yes, agreed - that's a radically different level of surface area.

Any firmware can be reflashed, but this isn't just any firmware; this is firmware that connects everything together. This is literally the heart of the system. And it's completely locked off from our even viewing it, let alone choosing not to using it.

> If you're an end-user and own your computer, you can disable AMT, and verify that it's disabled—the computer will no longer reply to probes on that port

Agreed, but you originally said you can disable IME, and that's all I was really taking issue with :)

Disabling AMT still leaves IME: what is it doing? You don't know, and we'll never tell you ;)

> Everything else is just a dozen new vectors for motivated attackers to do things motivated attackers have always been able to do.

Agreed. :(

Thank you for the interesting discussion! It'd be fun to relax and argue about it sometime in person. :)
Features like: answering phone through the watch, drawing, playing tic tac toe or other games (pebble also has some games, but it is quite silly to play games on watch), sending heart beats to someone else, or emoji.

That's I think all Apple Watch offers that pebble doesn't. I did not mention measuring pulse, because it is useful if you use watch for fitness tracking.
> This is one of those features that has to be 100% perfect for it to work in this form factor

As an Apple Watch owner, I can state that this is not the case for me, and thus it clearly doesn't have to be 100% perfect. Might it frustrate some people? Sure.

The tradeoff is that my watch can do many more useful things than the Pebble. The additional features are significantly more valuable to me than multiple day battery life and an always-on screen.

> This is a small feature but saying its not actually useful is absolutely ridiculous in my opinion.

I think we have different definitions of "absolutely ridiculous".
Clang plugins are pretty cool. The LibreOffice project uses them reasonably extensively.
The D is silent.
It doesn't annoy me, but I have to say that I think you are wrong ;-). My google-fu gave me the following definition for communism:

"a theory or system of social organization in which all property is owned by the community and each person contributes and receives according to their ability and needs."

I suppose there is some superficial resemblance, but I consider communism a means of doling out limited resources in an equitable fashion. So instead of having individual ownership, the community owns it and manages it based on need. Instead of being free to act in your own best interest, you are obliged to contribute to the level of your ability.

With FLOSS, we are simply removing the concept that a piece of software is a limited resource. There is no group ownership -- individuals still own their copyright. It's just that under the rules of the licensing, ownership is irrelevant.

For example, I no longer sign inventions agreements at work. Instead, I tell my employers that all outside work I do will be under the GPL (or AGPL). I will even assign copyright over to them as long as the code is licensed as GPL. They can own it. I don't care because it makes no difference who owns it.

In a communist society, ownership is still quite important. It dictates who will decide what I need. If I owned the resource, I could take as much as I wanted (or give away or sell it if I wanted). With community ownership, the community decides. With FLOSS, if I have a copy of the software, it just doesn't matter who owns the copyright. I have the same rights and obligations either way.

Another big difference is the reception of the item. In a communist society, I have a right to the things I need and an obligation to contribute to my ability. With FLOSS, nobody must give me anything. If they do happen to give something to me, then I can do what I want with it (up to the limit of impinging other people's freedoms in some cases). But I don't have to do anything.

This is often a big misunderstanding the neophytes to free software have. They often demand bug fixes, or they demand to be given software for free. You just don't have that right, even if it is something you need. Similarly, if I make a change to any software, I needn't give that change to anyone. I am free to do so, but I have no obligation.

In summation, I don't think this is communism at all. It is simply leveraging the fact that existing software is not a limited resource. It establishes a set of community rules that optimises the freedom of the members of the community, not the satisfaction of their needs. Importantly, it does not establish any rights or obligations.

The last bit is tricky as you have obligations to offer source code if you choose to distribute, but the "if" part is important. Similarly, advocates feel that there is a moral imperative to act in a way that preserves software freedom for downstream users, but nobody says that those users have a "right" to the software (in the way that a person has a right to a food in communist society).
> So every country except the US is involved in this hypothetical war? Really?

Happened twice in the last century. Even South America was the least affected, but it wasn't unaffected, and it's not like they'd generate a huge amount of trade (compared to EU/Asia who would definitely be involved).

> If China attacks Japan, even assuming that drags in Vietnam, the Philippines, Korea, and Indonesia that still leaves a whole lot of countries for us to trade with. The idea the S&P would drop by 99% is just daft.

Out of the 10 worst stock market crashes, 8 happened during WW2, 7 during the period where the US wasn't actively involved in the war. Depending on the date range you pick you could say it dropped 50% in absolute value, or you could say it stayed about constant. This was during a period with >10% average inflation ratio, so that's pretty fucking bad. "Real value" of the S&P500 (meaning "how many big macs you could buy" for index shares 1935 to 1950) dropped ~74%. And that's still ignoring the fact that many products simply became unavailable, because there was no way to safely acquire them from US soil, at which point price becomes a moot point.

This agrees with anecdotal evidence I heard from my grandfather : the beginning of WW2 (I think he means 1938-1939 onwards, when you could still delude yourself there was peace), there was no violence, there was simply a hell of a lot of people going unemployed very fast, shortages of all sorts of stuff, and a lot of rich people suddenly looking for jobs.

> Beyond that it's not like we can't get involved in a war once it starts if we decide it's in our interest to do so. War isn't like a comedy club where they shut the door once the act starts.

True, but at that point the consequences are a "fait accompli", history, and unchangeable. You don't ever want to get to that point if you can avoid it at all.
Immediately after the Kickstarter ends, so early October. :)
Jesus and Socrates
Anything you can do in nginScript, you can do in Lua. Except that Lua was lightweight to begin with. This isn't JS (as we know it), this doesn't get access to the Node/npm/bower/whatever ecosystems.

The antipathy is a symptom of our JavaScript disease. We have grown tired of this affliction. We understand now what makes it less great than we once thought. The churn of rapidly growing and devolving JS frameworks, the slog of awful design-by-committee processes putting the language together... it is nothing compared to Lua's simplicity.

And some clever fellows understood this long ago, on a site much like this one. Feel free to take a look. https://news.ycombinator.com/item?id=7890685
Learning to mate involves determining how "trapped" the King is, and examining how to control the trap (protect the attacking pieces, controlling escape hatches, watch for in-between moves and checks from the opponent, etc.).

But after Rf4, the King is has no moves, attacking pieces are protected and Black is not vulnerable to checks. All you need is a piece that attacks black squares, and the Bishop move becomes obvious. This problem more shows most players don't use a disciplined assessment method in tactical situations, but quickly generate move trees and obvious tactical themes, then start combining themes and moves.

GMs were famously shown to spend much more time on assessment than on move trees than top club players. Yes, much weaker players analyzed more...but assessed less.
Trucks in Palo Alto kill pedestrians http://sfbay.ca/2015/04/19/bcn57palo-alto-pedestrian-dies-in...

Drivers in Palo Alto kill pedestrians http://abc7news.com/news/driver-arrested-on-suspicion-of-fat...
The last major war was WWII and no war since is comparable in terms of loss of life, cost adjusted to inflation or number of men at arms.

Stability as absence of conflict is a utopian measure. Stability as the truncation, resolution and containment of confict is a realistic measure attribuatable largely to the United States. Recent events and the US economic situation suggest the US cannot continue to play the same constructive role, and as such I fear greater instability is a certainty.
> less CO2 .... what does that do to the calculations?

Nothing at all.

First CO2 does not cause any deaths, unlike pollution.

Second the amount of CO2 is very small compared to global emissions, so it's quite irrelevant.
"Spies are going to be so much a thing of the past ..."

Why do you think we've got spy kids?

http://www.imdb.com/title/tt0227538/
To some degree, yes.

Still, there were cell phones in the 90s. Are the current smartphones that much more valuable than those early mobiles? Remember we are talking about 2 orders of magnitude here.

There were also PCs, and with Word Perfect and Lotus 123 you could do almost everything you do today with the latest office suite. At least almost everything of what the average user knows how to do.
Only if you value productivity over pleasure, why should we?
Someone must put his authority and prestige under test when reviewing a paper. Good editors will prefer delay over errors. As such, people will sometimes put some papers under microscope before signing them on.
How Useful Is the Theory of Disruptive Innovation?
It's a joke. Like haha, but serious, because some people actually believe this.
Docker is a rootkit over HTTP.
Some devices yes. Other devices? Not so much:

"HTC stored user fingerprints as image file in unencrypted folder"

http://www.theguardian.com/technology/2015/aug/10/htc-finger...
At least you weren't berated for using PHP
So does 3 rounds of private equity "investment" mean they're now a private company?
> They're not designed to allow running isolated arbitrary code in some sort of multi-tenancy setup

You mean Linux containers are not designed for this, nor are they designed to be secure. What a sad design failure.

Some [1] container technology was developed with security as a first principle.

[1]: http://us-east.manta.joyent.com/jmc/public/opensolaris/ARChi...
Male valets wear fake bellies in pregnancy sensitivity training in China
Whats happening is that people are publishing large bundles of e-books in a single torrent. Or like music, every book from a particular author.

I think fiction published need to look at what is happening in Free to Play games and Kickstarter if they want the industry to survive.

Oh oh.. thats my Startup idea. Nobody steal it. Kickstarter for fiction. You go and read the first chapter and pay to get the rest of the book written. A good author should be able to raise 50-100k which should be enough to get a good story pumped out.
The thing that concerns me is the possible implications this may have on the ability of US based companies to operate saas services for customers in Europe. Following this to its logical conclusion, it could create two seperate internets, where one services the US and the other Europe stifling innovation and limiting adoption of new technologies.

We already have to deal with the walled garden of China, are we seeing the beginnings of something similar with Europe?
Arranged marriages losing respect in India?
I should clarify I mean Docker containers specifically, good point.
The BMWs also use a urea based system that separates the NOx into Nitrogen and Oxygen and does it very well. However, those systems are expensive and add a lot of costs to the car. VW wouldn't be able to sell their TDI cars as cheaply if they had to incur this cost. That's why they pass and why they have passed alternative tests.

I just bought a new GTI about a month ago...not sure if their gas cars will take a valuation hit or not due to VWs reputation hit. At least it wasn't a TDI Golf or I'd be extremely pissed.
They are ads for Mr. Robot: https://www.google.com/search?q=privacy+is+a+myth+mr+robot&t...
Tcl fiber package based on Erlang process model
Why I Hate HATEOAS
Some people don't understand that they don't need to spend 3000$ in the bike they use to commute. Mine costed me 10.000yen (100$). It works quite OK, and if one day it is stolen or broken, I will not be really sad.

Ah, it also has a basket that is quite convenient when I go to the supermarket.
/fit/ here, haven't interacted with /b/ once.
I used to use Django a lot. This news caused me to go back and check the release notes going back to 1.5. It seems like between every major point release theirs about a ~6 month gap. Furthermore the features in each release (bar migrations in 1.7, which IMO should've been in a loooong time ago) are relatively minor. Django also is fairly quick to deprecate older versions (including python versions) which is fine I guess since they're pretty on top of security and provide clear upgrade paths.

However the fact remains, as I assessed about two years ago, that the momentum behind the Django ecosystem is as stagnant as ever. Many third-party libraries are deprecated or ill-maintained. This is as much symptomatic of Python as a whole as Django, but regardless it exasperates the slow release cycles when compared to other languages and frameworks.

My money is still on JS/Clojure/Erlang/Go/etc. to carry us into the future of web development. No doubt Django will fight to the bitter end with its strong enterprise support and mature codebase. I'm ok with that, it's just not for me anymore.
A simple and powerful web framework
When a submission evokes a strong negative reaction or doesn't seem to contribute to HN, it may be best to just flag it.
Reddit has subreddits dedicated to the foulest stuff that you'll ever occasionally see on 4chan. That has historically included borderline illegal content, with literally illegal content mixed in.

Reddit's reputation of being better than 4chan is entirely undeserved.
The DateTime field lookup changes are the most exciting. No more start_date and end_date calculations in the code.
Whoever told you it has to do with IO and functional purity vastly oversimplified things. That is just one use case.

Monads take care of a very common computation pattern: wrapping and unwrapping data from a container to do stuff with it. This process is error-prone and leads to code bloat if done by hand whenever needed.

I mean, how often have you had to apply a function to every element in a vector of values? fmap takes care of that without having to go into the list, take a value one at a time, and apply the function you want to use.

Rather than have to unwrap your container to use functions, a monad offers the means to transform functions to use a monadic container as input instead. No wrapping or unwrapping by hand required; using bind, fmap, or ap(ply), you transform lots of functions to use the monadic container and build a seamless pipeline for data to traverse.

How often have you had to deal with a value that might or might not exist--e.g. searching a string for a substring's position? If you had that problem, you might say, well, I'm going to return an integer, but a negative number means no match. And then in all code thereafter, I have to check if the integer is negative and do different stuff. A simple Maybe/Optional monad would take care of all that for you.

How often have you had to write verbose output alongside a computation? You could pepper your code with print statements, but maybe you want that output controlled by some runtime parameter. Would you want to check at every print statement whether that parameter is true? Or you could use a Writer monad, pass along the verbose output through the computation, with an easy means to transform regular functions into using Writers, and then decide what to do with the output at the end.

Sure, it's not convenient to try to use monads if the language doesn't offer it, or if there's not a library to facilitate it (trust me, I know this; I implemented a slew of templates to use monads in C++).

But programmers do this stuff all the time: unwrap data, do stuff with it, pack it back up. They do this over and over, repeating themselves, and such repetitive code is a maintenance trap waiting to happen.

Monads help you avoid that trap, and they help you take your program and reduce it to "one thing in, one thing out." Now maybe those "one things" are containers, but linearizing the flow of data this way only helps make the program's concept easier to understand.
Although the parent to your response has been deleted, your response is one of the most idlewords-ish shutdowns of a heckler I could ever hope to see. Bugs Bunny couldn't've said it better!

Wait, maybe he could've!

https://www.youtube.com/watch?v=pyxJ7GKGFG0
The comment syntax is really what gets me.
If your VMs are single-purpose, you don't necessarily need VMs. Containers are single-process things - they're not running syslog or cron or any of that overhead, for example. Docker is also big on ensuring you are using the literal same artifact in dev as on prod (assuming you change your team's workflow, of course).

Which is the right thing to use is entirely dependent on your use case.
I loved Django when I started using it about 4 years ago. Lately, I've switched to Flask and replaced the templating with React. I love the new way, but I still have a place in my heart for Django. Does anyone on HN still start new projects with Django or have you moved on as well?
Apart from being used by everybody, do they have any other reason for using JS? In general, I'm curious why JS is picking up so much for backend development? Is it just that people like using one language?
The purpose here is not to secure your data against an attacker (that's what TLS is for), or even against errors in transmission (as others have noted, TLS has you covered there as well) - you need something simple and inexpensive to secure against errors in hardware/memory before/after it enters that pipeline. While you shouldn't under-solve a problem, there are real costs to over-solving the problem as well.
And you can run Docker containers on SmartOS, using "LX-branded zones", which do Linux syscall emulation:

https://www.joyent.com/blog/triton-docker-and-the-best-of-al...

I'd be curious if the Joyent folks believe Triton to have the security properties that everyone seems to want out of Docker. It doesn't involve the standard Docker daemon, so it might.
Well, "naive" is a term of the trade. So "holes" are a potential problem for nominalists, philosophers who want to claim that only specific objects - that chair - exist. Calling a position that is not influenced by the last three thousand years of meta-physics 'naive' seems to be entirely justified, just as there are naive accounts of physics and computer science.
Five Rules of Indie Game Dev from Crossy Road Creator
> being unable to bond empathetically with your future self

Late one Sunday evening drinking session, a bloke I know ordered another round of spirits. "Don't you have a big day at work tomorrow? You're going to be ruined" -> "That's 'Tomorrow Tom's' problem. Tomorrow Tom hates Today Tom. Tomorrow Tom thinks he's an arsehole"...
Moraga is rural? In what sense?
A VM context could be cheap to create and include an amount of memory above what that script uses for its lifetime. Meaning a single allocation and then the whole thing gets free'd at the end of execution. Analogous to how CGIs execute.