skysight-inc/HackerNews huggingface dataset:
We will then have rules based on file hashes. People will obfuscate them, so it'll now be based on function signatures and API calls (get locale, screen size, OS, set cookie? No network requests for you). When that's bypassed, maybe we will see DPI of network requests for patterns.

The arms race is only going to continue if trackers play the game. I think we'll probably see server side analytics instead, with Google and so making Apache/nginx/express modules and middlewear.
Pictures of People Scanning QR-Codes
"The best choice" is a woolly phrase. Best for whom? Stopping all development to totally rewrite the core game engine is best from a technical perspective, but that's not necessarily the optimal solution for player enjoyment -- and would have impact on other things, e.g. the competitive aspect of the game.

Continuing to develop while totally rewriting the core leads to wasted effort and a "running to keep up" effect, though allows for a strong technical foundation, provided you actually finish it. Incrementally rewriting the codebase takes longer, but is easier to do in flight, and easy to test in a modular fashion -- and that's already happening.
It is? iOS has always used ahead-of-time compilation and Android switched semi-recently from the JIT-based Dalvik to the AOT Android Runtime. The only important JIT left is in the browser...
Eight, on the other hand, is extremely lucky.

https://en.wikipedia.org/wiki/Numbers_in_Chinese_culture#Eig...
IMHO direct digitization is the way to go. I'm sure one could find grant funding and train an army of volunteers to perform this over time in a relatively inexpensive manner.
Breakthrough in battery technology: 5x the capacity with lithium-air
Killer -- where's your hackerspace?

LoRa basestation gateways are available off-the-shelf for from Kerlink, Multitech, and Link Labs. The gateways are actually quite simple, they just forward packets to the cloud network server, and back to the clients.
Why Is Silicon Valley Pouring Millions of Dollars into Old Clothes?
And use what language, in your opinion?
I do two things for this. One, I have a separate phone line that I largely ignore, and I give this as my main contact line for people or businesses that I have no dire need to talk to. Best Buy, for instance. If it's important, they'll leave a voicemail. This started as a land line, that was expensive but I needed DSL anyway (this was 10 years ago). It moved to a cell phone with basic service.

Fees sucked, so I started (shameless plug) Phone Janitor[1] to give me better filtering. This allows me to check voicemail anywhere, unlike my cell line (unless I sign up for their service) and just transferred it to my own company. Turns out this helps a lot of other folks with similar privacy desires. Control is a wonderful thing.

Ultimately it's really, really crappy, but the Telecoms and the FCC don't want to be too heavy handed in this, and advertisers are finding new ways of skirting the donotcall rules. They ruined SMS in this regard[2] as well, deliberately.

[1] - https://phonejanitor.com/
[2] - https://en.wikipedia.org/wiki/SMS_spoofing
His source is the same as yours, if you read your own source.
https://news.ycombinator.com/item?id=10474206
For video games you usually have at least Debug, Release, Retail builds. Where Retail turns on Link Time Code Generation (LTCG) which is quite slow but can give a few percent extra perf. If PGO took 10x to compile but gave a 20% perf boost it'd be an absolute no brainer for game development. Keeping in mind that article shared here was a video game.

It's possible that PGO is pretty awesome these days and people just don't realize it. Just because I've heard unimpressive results from other devs doesn't mean it's actually bad!
Things don't have to be new to appear on HN, just interesting.
That is exactly what I am suggesting. There is no urgent necessity to add any new core language features to 2.7. That's what you 3 guys just don't get. I certainly don't need asyncio as much as I need vectorised numerics, and if I needed asyncio, I had at least 5 libraries already. I most definitely will never be type annotating Python. Cloud cuckoo land.

Let me warn you. If you persist with your propaganda on Python3, then GOLANG will be the future of Python. Does that register with you guys?

Nobody who uses Python 2.7 all day every day thinks it has any of these imaginary "worts" you 3.x guys like to pitch incessantly.
This is a lot of info, would appreciate if someone can make a TL;DR gist of the good stuff
What are the most stressful places in Boston? We’re about to find out
thanks for reminding me.
Bold.io – No idea what this is, but try selecting text
Seriously, that's ridiculous.

Alphabet's Nest, for instance, would make sense - it's not a household name.
I hope you're right. That's what excited me when reading this too.

If the joints are stronger than both materials, we can make layered metals that are crazy strong, and selectively apply more layers only when needed (like carbon fiber).
"They can't be reconciled philosophically"

So in other words taking things out of context is how you came to that conclusion. Well done. Thats not the meaning of what I said. I was talking about the CURRENT state as most talk about it. I made no claims about universal impossibility simply that this is the current positions.

Which is funny enough why the Rons talk tries to debunk some of that mysticism ironically only to turn into one himself.

A quick search on Rons name show plenty of debunking I can't even be bothered as I have seen this before whether this or electrical universe theory etc.

http://motls.blogspot.com/2012/10/evading-quantum-mechanics-...

In this discussion you are the climate sceptic and the creationist not me.
Friction Welding of Wood
Android has much better brand appeal than ChromeOS
Please excuse the stealthiness for a moment to appreciate the design.

> If you work at a company or on a team, you should visit http://bold.io . More details to follow in the coming weeks. cc: @bold

Source: https://twitter.com/davidbyttow/status/659796721841520640

Found via a tweet from founder, David Byttow. https://twitter.com/davidbyttow/status/659840646715338753
Another term for these profiling charts in Chrome is flame charts, you might be able to find even more tools by it.
Please show us some of these promised optimizations. I don't think they actually exist. Most of the larger code / algorithm tweaks require subtle changes to the behaviour. The compiler can't choose to do that by itself, as it could break the program. Programmers need to make these choices for themselves.

Besides which, compilers can already select slow or fast optimizations on the command line, so users can minimize compile time if they wish. There are plenty of people who would give anything for faster code, no matter what the compile time is.

Please prove me wrong and explain a few of these supposed too-slow optimizations.
Yeah, the best thing they could possibly do right now is to fork Python and make yet another flavour. We already have this 2/3 mess so let's throw another version into the mix just as Py2 seems to be dying.

I don't get this hate for Python 3. Yeah some things changed, yeah having a big codebase in Py2 sucks if you don't have the time/resources to switch, but starting new projects in Py3 by default is awesome. Asyncio and async/await are fantastic and worth the switch alone.
>I can request a book available in a different library to be fetched and held for me at the library of my choice -- for free!

I know what you mean by 'free,' but I think it's important to remember that the services are not actually free, they depend on our tax dollars. This is why it's important, if you love your library, to fight for its funding and to make sure your local representatives know what a value the library is to your community.
I suggested this the last time this issue came up [1]. In the case of ads, some people are saying that it becomes a problem for advertising networks to actually verify the traffic if the connection is proxied, though I think there can be solutions developed for this given the enormous amount of money being lost. As far as analytics, this shouldn't be an issue because the primary recipient of the data is the site itself, and cheating on their own analytics would only make sense for a couple of applications (trying to sell the site based upon fraudulent analytics etc).

[1] https://news.ycombinator.com/item?id=10185256
Thank you very much.

Excerpt from [1]:

Are all these accolades enough to guarantee that the company will deliver the promised goods in healthcare? The answer is no. History teaches us that there are numerous examples of seemingly disruptive technologies in healthcare (and especially in diagnostics), developed by high-profile scientists, including Nobel Laureates, which later collapsed, due to their inability to deliver the promised goods.

I feel like my sanity is partially restored, and I haven't even finished the first article.
Show HN: AWS IOT embedded client ported to ios which can run on ipad/iphone
In checklist mode, yellow text on white background is hard to read.
You had to have seen Star Trek: The Motion Picture (1979).
It'd like to see them do a story about Alphabet's Google's YouTube.
A Marriage proposal via GitHub
What? Is there a "Living Wage Foundation" that says you better not hire anyone than to hire someone paying less than what they call a living wage?
Upcoming Daylight Saving Time Clock Changes
What worries me is the number of non-government nodes discovered that are out there, running simple setups.

e.g.: http://securityaffairs.co/wordpress/41513/hacking/low-cost-i...

The way things currently are anyone with a cheap setup can start intercepting your calls using a MITM attack.

Related: https://www.schneier.com/blog/archives/2015/04/the_further_d...
Cool. They actually vaporize the foil at 5m18s for those in a hurry. It looks like you could use it in similar places to where spot welding it used in cars but to bond say steel-aluminium rather than steel-steel.
Could it be used in a tac weld situation. Basically they have some long armed machine that lets them tac an aluminium sheet down to a steal frame.
Haha, solved?

Put in the time windows, put the capacity limits, put the pickup and delivery (this isn't same as just delivery).

It's far from solved, and far from efficient. Field isn't even mature as theoretical computer science, not even rigorous enough :D

You have papers talking about their newest hybrid genetic memetic evolutionary deep simulated annealing bullcrap algorithm getting hundreds of citations.

You have services like Routific, Routyn, Viamente, WorkWave, and others struggling with it. No one in this world has the technology powerful enough to optimize at scale.
Example. WorkWave is talking about exploiting 45Billion dollar market of optimizing thousands of technicians and their routes, but they can't even scale that on a daily basis for large number of delivery points, given how slow their optimization engine is. Same goes for every service mentioned above. Oh yeah, WorkWave bought Viamente for $4M, that's how much their tech was worth. Seems a little bit low for something that could attack the 45Billion market.

I have not stumbled upon a single one in the last 10 years that has any potential. All are leeching or would like to leech the big companies that can afford a 1 day waiting time for optimization. UPS seems to be all happy about its routing engine, but they too are being weird about it, if it's good then show it.

Someone who solves this for Uber will definitely get its first billion.

This would be a huge engineering effort since the problem is NP-hard :D
Paramount just released a big chunk of their back catalog for free on YouTube: http://nofilmschool.com/2015/10/paramount-vault-free-movies-...
> Nobody who uses Python 2.7 all day every day thinks it has any of these imaginary "worts" you 3.x guys like to pitch all day.

Maybe people who use 2.7 all day don't see the warts as much as someone who has been rid of them?
I think with a certain definition of training the argument works, but it's not clear if this is actually the definition they had in mind.

If you have the choice between hiring two people for an engineering position, one of whom can write code and one who can't, you'll probably want to pick the one who can rather than training up the one who can't. If your hiring efforts are lackluster, perhaps you can only attract the latter category of people, so you spend a lot on training people to simply do the jobs they're hired for. It's a bit like the Silicon Valley "senior engineers are impossible to find" argument right now. Nobody wants to take the burden of training a junior engineer into a senior engineer if they can hire someone who's already made their mistakes somewhere else. (Not a mindset I particularly agree with, since it implies a failure-intolerant atmosphere, but you get the gist.)

On the flip side, once someone is in a position that they are qualified to do, training for growth and development is a must-have -- 31 hours seems low to me. I definitely spent more than that in learning/development programs at Google, and I don't think that culturally they have an anti-training mindset, but I could be being too generous -- the quote on the site certainly reads exactly like your interpretation.
First of all, this has nothing to do with passwords.

Indeed, this may be a higher bar to cross, but higher bars are usually being crossed. For years we known that RC4 had biases, but it was considered okay until we discovered that it was not okay after all. MD5 collisions led to rogue certificates.

It's not correct that SHA-2 is not enough to fix the issue. While they share some design structure, SHA-2 is not broken, while SHA-1 is. Also, the proposal for multiple hash functions isn't particularly good: collision resistance of many cascaded hash functions is not much better than the maximal resistance of one hash function used in the cascade.

It doesn't make sense to use a broken cryptographic hash function in a new project that does need cryptography. There are faster modern cryptographic hashes than SHA-1. And it doesn't make sense to use a broken cryptographic hash function in a new project that doesn't need cryptography. There are faster modern non-cryptographic hashes than SHA-1.

To be fair, I don't know why we even have a discussion about this if cryptographers say that SHA-1 shouldn't be used, and you're trying to defend this choice for exactly what reason?
Creative foot-shooting with Go RWMutex
AWS buttons / AWS IoT contest
Windows had support for mounting FTP, and WebDAV(HTTP/HTTPS) natively since Windows XP.

The "blob" storage support however was pretty damn needed especially considering that you had to usually install dedicated software for each service you use to get that ability before, and the few universal projects that existed have so far been mostly abandoned.
Maybe -- throughput depends on which radio tech we're talking about, and the networks need to get built with density appropriate for the task.

LoRa radios that are close to a gateway can dynamically shift to a 300 Kbps mode, or down to a long-range mode that's ~10Kbps (but yes could also be degraded further by error rate if at edge-of-range).
If you tell HN how they looked and the company name, we can go on a witch-hunt :p.

But in all seriousness, sorry you had to go through something that terrible. Like someone mentioned already in this thread, you should have left the place when you heard the linux comment. Come to think of it, I'm happy for you for not getting stuck in an obviously poisonous environment.
I did not read the article, so I don't know if it was mentioned, but Warner actually has such a program: http://instant.warnerarchive.com/

Lots of non-restored films (mostly from VHS/TV captures) are also circulating on BitTorrent, there are a few invite-only places that specialize in that kind of thing.
I believe at that time, for the office, he didn't have much choice :)
What is the best first-party web analytics product?
We're dropping all third party domains at Userify [1] (plug: SSH key management software for EC2), but for reasons of both security and privacy.

What would happen to your website (or millions of websites) if one of the CDN's that you rely on started quietly issuing evil code to a few, targeted users? Would you notice? Would your users?

I don't think that it'd be too hard for us to add a simple API call that pokes data about screen resolution, browser agent string, language, etc upon load or login, and it'll be far more efficient and private than us sending random data off to GA or similar where they frequently don't even provide us IP addresses of our own site visitors so that we can correlate the data against our own logs.

The data that GA gathers is highly valuable... to Google. They only provide you visibility of the tippy tip of the iceberg.. but ultimately it's your customers' and your data, not theirs.

Don't compromise your users with third-party includes, even Google Fonts (which is still our last holdout on the website.. hm, someone should make a simple web app that gathers names and styles of fonts and provides a zip w/ pre-generated CSS.)

CDN's sound great but they're a huge privacy hole. Ask yourself; what's the profit model? Are they really just an opportunity to gather valuable data on other people's websites and browsing habits? (yes).

Please don't leak your customers' data.

1. https://Userify.com
I wish that were true, but I'd estimate that less than half of the bot hits on my website properly identify themselves as bots. Most of the crawlers running on DigitalOcean/AWS/etc. seem to use a user-agent string lifted from one of the common browsers.
> The thing is that true patriot and authoritarian government for a decade can fix many problems that democracy cant handle. Once again - not everywhere though.

Exactly this. And isn't it the reason so many people here are into startups? Technology is inherently undemocratic, and so are tech startups that succeed - but we don't call it that because this is "private land", not "politics land". And even ignoring the profit motive, that's why technology is appealing - a few smart people (backed by enough money) with one good design can force a change on the entire world that would never fly if you've asked people themselves.

And frankly, this might be something that we desperately need for the coming decades. Democratic countries have proven themselves unable to tackle the serious issuses of energy and climate change. They don't even bother making token gestures. On the other hand, if a decade ago they'd just said "fuck it, we're building those nuclear power plants whether you like them or not", we'd all be running on green energy now.
Back in 2004, I worked for a SaaS startup that sold reverse auctioning services for low-cost suppliers (e.g. China) to huge US manufacturers. The biggest problem that we faced was that the final auction price would end up ridiculously low. The manufacturers were super happy until they found out much later that the supplier couldn't deliver.

Then, we came up with a new scheme to do certification and auditing on low-cost suppliers. We even had a large team of scouts combing through these countries and conducting reviews. That way the manufacturers could limit their auctions to only suppliers that passed certain filters.

Again, the manufacturers were happy. The lowest bid price would always go really low. They were happy, that is, until the suppliers started to quickly game the system. They'd pass the review criteria but they'd use other tricks - outsourcing to other companies, degrading other parts of their service offering, etc.

Then, it just ended up being an 'arms race': we'd enhance our criteria and they'd find somewhere else to cut corners.

Needless to say, our company was sold for a loss (mainly for our patent portfolio) and absorbed into our investor's other companies)
What's UpThere?
That works. We already have some things like that, like “__attribute__((always_inline))”. Of course, forcing some optimisations could implicitly prevent others, but that’d also be true if you did it manually.

With expressive enough metaprogramming, you could also do some of these explicit optimisations in user code.
^ Agreed. Damn near impossible if you are old and have eyesight issues.

Related: The link on the landing page above to "checklist" in the sentence saying you can check out the checklist version does not show as a link. I had to move my cursor across it and look for the hover mode to appear indicating something was clickable.
While it looks odd in a technology context, for investors it makes sense because Google is listed officially listed as Alphabet. Therefore, the association between the two concerns is useful for less technically savvy business and investment readers which represent WSJ's primary audience.
Stock photos of women of color in tech, now free to use
If integrity of deltas is not important, why use SHA-1? Why not MD5? ;)

There are modern cryptographic hash functions, such as BLAKE2, that are faster than it, and I'm not even talking about non-cryptographic functions, which are many times faster.
Yes, but you can't then "connect" this information using a cookie from another domain, like e.g. Facebook is doing with their embedded like-buttons.
Assembly of course...
Built off Jetty the JAVA Applet Server. That's interesting. Haven't seen Java being used for new projects too recently... Looks like it's more than just an editor replacement which the intro screen somewhat implies.
If I may, I'd like to also direct attention to the last paragraph in the "Costs" section. Certainly this perspective is under active debate, but even if Theranos is able to deliver on their promises (and they could), their fundamental hypothesis may be flawed.
Tried to add Vim to the HTML editors but couldn't. Something was wrong with my inputs. Also: why such an enourmous form to add something? It gets filled automatically with bizarre values (try vim.org). "vim" as a title is apparently too short.
As for the great film that has been restored, I'll repost what @sotojuan posted a few days ago:

"About film: If you have Hulu, watch the Criterion Collection films on it. Criterion is a company that releases and remasters some of the best films of all time (from all countries!), and about 600 of them are on Hulu."

https://www.criterion.com/library/expanded_view?m=hulu&p=1
Or one about Alphabet's Google's use of Alphabet's Google's Google+ for comments on Alphabet's Google's YouTube Red videos.
I don't understand why you replied to me.
A Module System for a General-Purpose Blocks Language [pdf]
Keep track of your little goblins and ghouls with Glympse’s app this Halloween
A Portrait of Modern Racism
It is good enough. When converted to the local timezone, the library would know to offset the date properly - it just has to be told to do it. I don't see the problem.
Yes, on the Continent, at least! I'm not sure about the UK.

Both LoRa and Sigfox came out of French companies, and several wireless carriers have announced plans to build networks. Also check out The Things Network guys in Amsterdam who are trying to crowdsource a network, very cool stuff.
How is the ceylon integration going? I've been waiting for that before diving into vert.x 3.
Yes! Hello :-D
They are already willing to take money to work on Python 2.7 stuff, how does refusing to take money for Python 3 stuff lead to them making more money?
No. This is a subtle vulnerability that involves the flags in the x86 page table not matching the hypervisor's view of them - not a mere buffer overflow. Ordinary static analysis couldn't have fixed this. Safe languages couldn't have fixed this. Even a complete formal proof would have missed this without a good model.
There's a funny chrome extension to be made here. I'll let someone else take the initiative.
> Needless to say, we were slightly irritated at the fact that a valuable feature for our merchants, totally unrelated to online privacy issues, was blocked by the software.

Why would the author think tracking/analytics is "totally unrelated to online privacy issues"? Baffling