skysight-inc/HackerNews huggingface dataset:
> How is viewing content without seeing ads any different?

It's very different, because the MPAA and RIAA do not (and do not claim to) give their content away for free. You can't (claim to) give things away for free and then argue that it was unethical that people didn't quid-pro-quo somehow. To clarify something in my original comment that some people further down the comment chain seem to be misunderstanding, when I said

> If your business model relies on technical tricks whose ethics are in a very dark-grey area, you do not get to play the ethics card when I use a technical trick to protect myself from you.

I am not only referring to the advertising industry. If you are a content publisher and you use any of the vast majority of ad networks to meet your bottom line, then your business model relies on technical tricks whose ethics are in a very dark grey area, and I have no qualms using technical tricks to protect myself from you or those you chose to trust with displaying content on your website.

I respect the opinions of content creators who believe that ad-blockers are unethical, and if you run a site that says "if you use an ad blocker please do not use this site" then I respect that opinion too and will stop using your site. But if you run a website on which you claim to offer your content for free while surreptitiously violating (or allowing others to violate) my security and privacy (especially without even warning me first), then I have no qualms consuming your content for the asking price and not viewing your ads. I have yet to see an argument against this point of view that has any merit, but I am of course willing to change my opinion if and when I do.
It would allow the malware to get around any software firewalls.
Would this be similar to Steve Jobs who served at Pixar and Apple at the same time? Or Elon Musk who simultaneously heads SpaceX and Tesla?
Google chooses artwork for Mountain View self-driving cars
Win32 has an API for shared memory that is straightforward to use. You use CreateFileMapping with an INVALID_HANDLE for the file to create a mapping which is like MAP_ANONYMOUS in mmap (not backed by a file). It is not literally anonymous because you can give the mapping a name (similar to, say, a POSIX semaphore name in sem_open). Other processes can attach to the mapping using the name. To actually instantiate the mapping in the address space, you use the MapViewOfFile function.

MSDN: https://msdn.microsoft.com/en-us/library/windows/desktop/aa3...

Been years since I used this stuff.
It means generating a signature of the binaries being installed, and having this signature be authenticated by Microsoft (using their signing key).

The signature is distributed alongside the binaries.

I'm not certain if the Windows Update system uses the same Autheticode system used for application binaries, but you can start reading here:

https://msdn.microsoft.com/en-us/library/ms537361%28v=vs.85%...
Loved this.
That's not the one I was thinking of, but thank you! It does match my description, so I see my question is probably too vague. I'm not sure if I'm remembering correctly, but if so, I think it was a 4-year college program, seems like it is somewhere on the eastern side of the US, and focused more on the philosophy of CS than on web or tech skills.
"Tough luck if you come from far away for work,"

If you come from far away for work, in Paris, you're using the RER trains.

"if you are old "

If you are old, maybe you should not be driving. Some of us would prefer not to have to dodge geezers driving land yachts.

"or handicapped"

The ban does not apply to mobility scooters.

"if you planned a day in the countryside with your family of four children, etc."

Take the RER. Pas de problem, monsieur.
I don't know if I want the most ethical, privacy-conscious employees of the NSA to be encouraged to leave.
I would compare it to involuntary manslaughter vs first-degree murder. Inaction, negligence, lack of oversight etc that allows bad things to happen, when you were in the position to prevent it, should be punishable.
Thanks for posting, glad we arent attending
The idea would be not to penalize local quantity (votes or downvotes on a topic) but aggregated quantities. Chances are that if I downvote 10 times per day (with say an avg number of down votes of 2 per day) that I am doing something wrong or I five times as much as the average user. In both cases it's food for thought.

Ratios of vote/downvote per user would probably also mean something.

Finally, I'd prefer to have these statistics private for each user, so there is no way groupthink could get a hold.
You're falsely equating "broken updates" and "security exploits" and I'm not sure why. I thought I was clear that I was comparing the two as separate negative occurrences with one happening more frequently than the other. Not that one would cause the other...

An upgrade provided by the company that is completely legitimate that completely renders the program unusable or destroys my workflow has happened far more often than my system being compromised has ever negatively affected me. I could count on a stub the number of times I've known my system to be compromised. I'd have to count on my hands using a binary method to count the number of times a legitimate update was botched.

I still update my programs. I just don't let them do it automatically. Leaving an extra few attack vectors up for a few days/a week to let the patch mature or for an emergency-fix patch (i.e. 30-->30.0.2 "Super major security exploit was live for 3 hours but we fixed it") to be released has always worked to my benefit. I've never had a negative outcome for waiting a few days to patch. I don't have to deal with botched releases or newly opened attack vectors. Instead I get to listen to the canaries in the mine.

Also what happens when an auto-updater gets compromised? I get to listen to the canaries. You get to be one of the canaries. So for that, I thank you.
The Clean Power Plan
So much great code being checked in.
I am confused by the fancy doors. The driver door seems to open as usual, no? Doesn't that mean that in a tight space I am no better off than with a regular door ?
Well said. So perhaps it would be better codified as:

Idleness is not a problem to be solved. It's the last privilege of a free mind.

I have a 14 yr old and I rarely see him idle. I've had long conversations about this, but the lure of electronic devices is just so strong. I'm actively working to change his behavior, though.
And? If you drive a car for 100,000 miles and it gets 30mpg the whole time, that produces about 65 tons of CO2.

If the EV car gets its power somewhere clean, that ends up being about 13 tons total. For now we get some mix of dirty and clean energy, but that mix can at least be improved. Burning the gallon of gas will always produce 20 pounds of CO2[1].

[1]http://www.eia.gov/tools/faqs/faq.cfm?id=307&t=11
"I agree that on a usual day, there are massive traffic jams everywhere."

So, how much of Paris should be leveled to widen roadways?

Do you want to see what a city looks like where there aren't massive traffic jams everywhere? Visit Pensacola or Tampa Bay in Florida. Driving is easy. Nothing else is.
That's fine, but it's not useful to use obtuse terminology. Not once have I heard anyone use the term base-52 before today. I understood the term, but it's not common (because base-52 encoding is not common). It's so not common that it doesn't merit a page on Wikipedia, nor a reference from the page for the number 52, nor even a reference from the page for base-64. It's obtuse.

It's also so specific as to be inaccurate. These strings could be interpreted as "base-52", but also as base-64 or any other base greater than 52. Calling them "encoded" also implies a belief about how these were derived that isn't justified. "Encoded" means that there is some original source that can be recreated by decoding. It's possible that these were actually created by generating random numbers and then encoding that data in base-52. I think that's pretty unlikely, though.

So no, I don't think this sheds any light or additional detail. It's inaccurate and misleading and if we're so specific we're making up terminology, then we should also be specific enough to say things like "assumed pseudorandom" rather than "random" when we don't know. Otherwise we're just being obtuse.
I'd say very much so. One refers to a comment, another to a person.
Elon Musk is the CEO of a public company (Tesla) and also the CEO of a private company (SpaceX)
Do you accelerate at 100% each time though? I dont think I ever floor my car "off the line", I think I only use maximum power to go from 60-80 on the motorway.
So now I incur network latency for a method call that I could have made locally?
And just what is so great about MIDL, an MSRPC-derived product, over any other RPC system based on generating client-server stubs, such as MIG or SunRPC? The idea is ancient and actually the classic RPC model is starting to show its age, being quite eloquently critiqued by Andrew S. Tanenbaum as far back as 1988 [1].

WinRT is an application framework out of many historical ones, some impressive and others less so, you're well aware of that.

By driver validation, you mean the Driver Verifier tool, kernel-level signed drivers, or...? Those seem incremental, if useful.

.NET Native is just another entry in the currently popular line of optimizing language runtimes and VMs, I don't see why it's singled out as particularly impressive.

My point is you're overinflating things outside Unixland (and even inside, in the case of Apple - so it's more like free-Unixland) and selectively ignoring the lower profile work going on in free Unixes, even though in general I'd like to see an evolution beyond its paradigms myself.

[1] https://www.cs.vu.nl/~ast/publications/euteco-1988.pdf
"The dropwizard-views-mustache & dropwizard-views-freemarker modules provides you with simple, fast HTML views using either FreeMarker or Mustache":

https://dropwizard.github.io/dropwizard/manual/views.html

"The dropwizard-forms module provides you with a support for multi-part forms via Jersey":

https://dropwizard.github.io/dropwizard/manual/forms.html

If you can render HTML in responses and accept multipart/form-data in requests, does Jersey become an adequate MVC framework? If not, what is it missing?
That's also possible, maybe with increasing costs, but the problem is that it introduces state (so it's not as easy as a statistic to calculate). Constant costs could discourage downvoting and AFAIR, PG wanted to have his numbers being integers (so no rational costs either).
You show multiple ads to a small selection of the facebook world, and then compare the performance of the various ads and select the best one for publication.
Such a great idea with a huge potential. Me feels like a vintage man.
A lot of them do already, I know Squaw Valley has had charging for two years.
I believe this falls under the "Louis Armstrong Rule".

If you have to take a class on ethics, you don't have them.

(Q: What's the "Louis Armstrong Rule"? A: Man, if you have to ask, you'll never know.)
I'm sorry I didn't see this sooner. We might have changed it back. It's often non-obvious what the right call is.
i have a 2010 4runner and it was sold as 22mph, i get 16.5. i mean i knew those numbers were bad, but thats quite a bit off, if you ask me.
I assume he's been to the future, that's the only way one could know.
> The fact that tax money is spent on various social protection things, like health care, allows to legally limit one's apparently personal choices, like smoking, that increase the tax money spending due to those choices. Such is the nature of most, if not any, tax-funded welfare features.

This is a logical fallacy - smokers cost much less in terms of healthcare than healthy people. Mostly they die relatively young. Elder and end-of-life care is drastically reduced, and that is the biggest healthcare cost in most people's lives. If you lived to be 80 as a non-smoker, you would probably cost factors more than a smoker who died at 60-70, even with only a few years of end-of-life care.
Nor mine, FWIW.
Oh, their CodePlex site makes it look like a license change with no mention of the original license, which they might be violating, as the original license had numerous problems:

http://lists.freedesktop.org/archives/distributions/2008-Oct...
Note this is Windows 7.

I uninstalled each of those KBs manually from the "Installed Updates" screen, then changed the update policy. I used to use "download and install manually" but now I'd prefer only being notified, and THEN deciding whether or not I want to download whatever is offered. I then re-ran the check for updates, and hid the offending KBs.

That was earlier this month. After reading this article, I decided to have a look and see if there was anything fishy in my update history (beyond the listed KBs that I don't want). Nothing there, at least, but my hidden updates were un-hidden (along with Silverlight and Skype, two more "do not want" things that I always hide).
Serious question: How can someone find the time to be CEO of two companies? I can't imagine even being a full-time engineer at two companies.
Why Aren’t America’s Shipping Ports Automated?
This tweet desperately needs some context:

https://en.wikipedia.org/wiki/Richard_Glossip
We used to just mess with crappy computers all day while doing the equivalent of memorizing phonebooks. suuuuper boring stuff.
https://twitter.com/stealthmountain
Because its not a hack most likely, its just MS screwing up. As someone who has managed/been tortured by WSUS for years, nothing surprises me about how MS handles its update infrastructure. WU is something of a pig and errors come up now and again, both on the client and server-side. In 24 hours this will be forgotten and yet another example of web hysteria.

Considering MS's typical QA with updates, this shouldn't be terribly surprising. I'm going to guess that this was a test patch that got loose. Big companies aren't fault immune, if anything they are fault prone.
Do people actually go off road with SUVs? You just need to stand near any speed bump, pot hole filled road or construction zone for five minutes to realise that the cars that slow down the most are usually SUVs.

People with SUVs want a smooth and "safe" ride, not to throw themselves down a mountain and conquer nature like in TV ads.
> The developer unit we disassembled was sent to us by Apple. Evidently, they didn’t intend for us to take it apart.

They won an Apple TV in a prerelease developer lottery, rather than being sent a demo unit by Apple like they do with the press.

> Unfortunately, iFixit’s app was tied to that same account, so Apple pulled the app as well.

This doesn't seem like a coincidence: _because_ they are iOS developers, they were able to receive an Apple TV unit.
Here are the commits that fixes the issues in VeraCrypt (a fork of TrueCrypt): https://veracrypt.codeplex.com/SourceControl/changeset/cf479... and https://veracrypt.codeplex.com/SourceControl/changeset/0d923...

They are lot shorter that I expected
Uber's technology is reportedly “hanging by a thread”
Background:

http://www.latimes.com/nation/nationnow/la-na-nn-richard-glo...
iFixit is surprised their actions have consequences. I mean really you tore apart a developer unit so you can get page hits and now want to complain?
IFTTT Do it deployment button for Snap CI
The documentation is a bit coy about this, but the usual purpose for this sort of library is so you can modify the copied text before it hits the user's clipboard, to insert an advertisement or copyright notice. (See the 'data-clipboard-text' attribute.)

So, for evil. Safari not supporting execCommand copy and paste is a good thing for users.

(This claims to work in all major browsers except Safari, but I'm see the same fallback when I try it in Firefox, on OS X at least -- it shows the key combination in a popup instead of actually copying or cutting the text as it does in Chrome.)
My emphasis:

> The IAB's new group working on the problem will convene its first meeting next week, aiming to study and experiment with responses including a more clutter-free web experience, strict guidelines for the data that ads traffic in...

Even were the IAB to strictly prohibit trafficking in all tracking data, I would never trust any policy that says, in effect, "trust us, we're IAB and we won't track you, wink, wink". First, only a small subset of all Internet advertisers will hold themselves to IAB's standards (and like any cartel or wannabe cartel, members will defect). More importantly, advertisers and ad networks have proven themselves to be completely untrustworthy.

The Internet is a wild place, and ad networks carry the most dangerous threats the average user will encounter. Ad blocking is, most importantly, a means to protect ourselves. The superior user experience is a nice side effect.
Well, it was new to me :) Maybe add the link to further reading into the article, then?
The typical solution leads to a combinatorial explosion of complexity, which is no less worrying.
No, we've been trained by centuries of experience that the concentration of power invites abuse.

Before we give the government the tools to monitor and control the populace, we need to make sure the populace has the tools to monitor and control the government. (I originally wrote "any organization", but any organization with such compulsory power becomes the de facto government...)

A recent sci-fi with a positive view of hyper-tech civilization is "The Culture" (Iain Banks). However, the interesting stories there all occur on the borders, with the interaction of the Culture with non-Culture civilizations. "Player of Games" is a good starting point.
Rear mounting is not going to work very well for people who don't like road grime getting all over their gear. I'd much rather have a roof box. The model X is really appealing to me other than that detail.
Either this or its a way for these orgs to identify individuals who may be at risk. Thats what I would do if I was NSA.
The effect is too slight. No matter how big you make the runs, once in a while you get an unfortunate grouping and you lose. Most of the time you win. Run the gist several times with different parameters.
Related to App Store removals: http://www.theguardian.com/technology/2015/sep/30/apple-remo...
I want to write a browser extension that automatically clicks all ads seen, loads the page in a hidden tab, and closes it.

It would be pretty painful for the online ad markets, as their effectiveness rates could easily be cut in half with a dozen people on their site that click every ad without viewing the results. So few people interact with ads, that a small cohort of 100% active users would overwhelm data with noise.

But, in the short term, you'd be supporting all the websites you browse until advertisers discover a way to filter out your false clicks.
You have no way of knowing that. All you see are some random-looking strings. These could be numbers (random or not) that were encoded as base52. These could also be numbers encoded as base64, or base88, or any other base52+. Or they could be randomly-generated strings and there is no meaningful number underlying them.
Twitter is planning to remove 140 character limit – AnsMachine.Net
German highways often don't have a speed limit... And when you go over a certain speed, the fuel consumption doesn't have a limit either.
Just to state the obvious, .gov, .edu, and .mil are all restricted TLDs run by the US. What kind of attacker uses domain names in their attack that they can't register?

Unless, of course...

But that would be a wee bit obvious.
Like minded people get together and decide to make them happen, just like any multi-user change.

Do we really need or want central planning like we have now? With tech we could solve many of our problems, instead we sit here calling them "pain points".
In addition to women who can't produce enough: There are preemies who have difficulty latching on. Suckling at mom's breast is far more work for the baby than a bottle is -- again, for preemies or babies with health issues, this is a real problem.

When I had minor issues with breast feeding, I was able to resolve them myself in spite of nurses being zero help. When someone close to me had trouble breastfeeding, I did not know the answer but was able to be emotionally supportive of her and helped her get over any guilt or bullshit social messages about how this should be easy and natural for both her and baby. She also was able to find solutions in spite of the stupid things people around her were saying.

I suspect this is easier for women in cultures where women have more babies on average and breastfeeding is more the norm. It is a situation where you have much better odds of being personally acquainted with someone who had the same issue and can tell you how to fix it. I was appalled by the really crappy attitudes I was surrounded by and the dearth of practical solutions.

Perhaps importing breast milk makes that problem "worse", but you at least are able to feed your baby, which is actually the more important issue.
Hey.. Does Stripe not offer a direct way to integrate with Relay for Shopify shops? Is there a page that describes this process?

Thanks.
you can look at this list of Java awesomeness.

https://github.com/akullpp/awesome-java

Or other awesome stuff at the parent project.

https://github.com/sindresorhus/awesome
Bad Air: Pollution, Sin, and Sci-Fi in “The Doom of the Great City” (1880)
There are so many "click bots" out there already that your extension probably wouldn't change much!
The modern era passed through a cathode ray tube
PSVita:Qwikrazor87 just released ARK Again
If anything, I would expect users of such pages to be more careful about fuel consumption than general population.
That is not how I understand ThinThread. Rather, ThinThread does bulk collection, and then applies "crypto" to the problem of keeping the wrong people from seeing domestic communications.

The premise of ThinThread is, like other NSA programs, that NSA gets carte blanche access to the AT&T and Verizon firehose.
And Chairman of Solarcity. Busy man.
I'm a bit confused myself. I've gone on camping trips with more modern surroundings (some of my relatives versions of camping are a bit... uhm... no creature comfort left behind).
Local machine privilege escalation and "full system compromise" are SOOOOOO vastly not of the same magnitude at all. This click bait title is obnoxious.

I don't even have non privileged users on my windows machine. Most end users don't. This could only really matter in some corporate environments but even my windows machine at work has full admin privileges.
Nerves rattled by highly suspicious Windows Update delivered worldwide
From the article: "Part of the problem is as an industry we have gone a little bit overboard on the advertising," said Rick Jaworski, CEO at JoyOfBaking.com, during a main-stage session with Mr. Rothenberg designed to publicize the plight of publishers. "For myself, when I go to a lot of sites these days, i'm irritated and I want an ad blocker."

So even people who speak at ad exec conferences use ad blockers.
Management is easier and takes less time than programming.