skysight-inc/HackerNews huggingface dataset:
With Marshmallow Android is moving towards a runtime-permission-prompt model similar to Chrome. They've also done a lot of work on sandboxing using SELinux. Also, after stagefright they started doing monthly security patches and have gotten buy-in from the OEMs to push those patches. Android's biggest security challenge has been getting the manufacturers and carriers to update their software but there has been a lot of work towards changing that, from moving big parts of the OS to userland so they can be updated independently of the core system, to applying business pressure. Presumably updates will be easier on Chromebooks than on phones.
Bitcoin Now Kosher, Card Network Partnerships Suggest
> (legitimate visits, obviously)

That's an important point; I'm seeing referral spam in my GA reports which I never noticed before 2015. I manually discount it when compiling reports, and my understanding is that these spammers hit GA UAs at random without even loading your website.
Actually if Google going to push coreboot into Android/ARM market more aggressively it's going to help quite a lot with running GNU/Linux distributions there.
Europe's Parliament Just Voted to Grant Asylum to Edward Snowden
Optimizing Chicago's Services with Analytics
Rust is exciting, no doubt, and I have high hopes for its adoption, but I've personally not seen/heard of any visible OSS big data style projects using it. I see Frank McSherry's stuff has been mentioned, but I think that's still his pet project (hopefully not putting words in his mouth).

But really I was using C++ as an example of something more fit for these types of projects than Java, it doesn't have to be only C++ of course.
> There have been bad operating systems in the past (pre come-to-Jesus Microsoft, like 98 and XP...)

Desktop OSes are generally pretty bad. Unsandboxed Windows and OS X apps can do an awful lot with your computer.
Somewhat related, and I know this is so quixotic that it tips over into absurdity, but I somehow managed to register the jschema.org domain in 2011, and I've been working on an extremely simple schema format for JSON docs:

http://jschema.org/

I've got some resources to dedicate to building some tools around this, and if anyone is interested in participating please ping me.
iDNA traces are huge though, and recording them adds a ton of overhead. rr is way more lightweight.
I was mostly getting a comparison between cpython and pypy, less concerned with numpy vs cpython.
Flash and Java are still shipping...
Just curious – why is range limited by a protocol? Why couldn't you send Bluetooth over hundreds of miles with a big enough antenna, for example?
Africa and India to play ball. The wealthy West limiting its procreation doesn't buy much for the Earth when somewhere else, poor families are pumping out children by the dozens.
So what does this mean for security?

Since its inception, Chrome OS has made security a focus and put a large amount of work into it, everything from bootloaders to Linux kernel features such as seccomp-BPF and KASLR, to complement the existing high security of Chrome itself. It also borrows Chrome's silent and fast update mechanism, allowing for frequent security updates. Its sandbox may feel somewhat limiting, but for those who do manage to stay within it, Chrome OS is probably the most secure desktop platform in common use.

Meanwhile, even if Android's update issues were somehow solved, it has a pretty bad security reputation even apart from that, with a long list of historical vulnerabilities which could be basically said to stem from a lack of priority given to it (e.g. from designs which, while not inherently insecure, unnecessarily open up attack surface that could be eliminated with a better design, such as in the case of the "master key" vulnerabilities; or just from crappy code, such as binder - whether caused by lack of auditing or just lack of security awareness among its authors I don't know, but both can be considered part of making security a priority). Maybe things have gotten better, and I don't have that much experience with Android, but there is simply no comparison between the general Android app sandbox (which allows native code) and what you get under Chrome with NaCl and such. The latter isn't perfect (as I know, because I've exploited it repeatedly), but the attack surface to examine for bugs is just much smaller than on other systems. I'm not really giving it any justice with this brief description.

I guess that if you're especially worried about security you could just only use Chrome on Android, and not install or use any other apps, and that would get you most of the way there. Indeed, if you do so, you can still have access to the Chrome Web Store's paltry selection of apps - it's cross-platform, you don't have to go for the OS designed around it...

But essentially nobody will do that. And even if they did, the recent Stagefright vulnerabilities demonstrate the difficulty of accounting for every potential attack surface on an OS, and thus the benefit of having the OS engineers design the lockdown rather than the user coming up with something ad-hoc. (Plus, today at least, even under Chrome's sandbox, Android's version of the Linux kernel is not as secure as Chrome OS's. And again, this is all assuming Android slow update problem is solved, which is a pretty big assumption considering how long it's been around; if it isn't, that's already enough to basically doom platform security.)

So if Chrome OS is really folded into Android, the end result, I think, will be the destruction in practice of something that was really quite unique in the security world. Maybe I shouldn't be so pessimistic - after all, those same security engineers could now work on Android. But I am, because even if work is done on it, the platform just comes from such a different place that it would be hard to make the same.
Excuse the poor pun but.. are you serious?

Facebook excluded several of your friends based on their terrible name policy. They run their walled garden however they want to. Your participation in it makes you (in your own words) a "peasant".

Yet, you're not trying to go all RMS about it and you continue to use it daily to give them more money/power?

Do you see anything wrong with this picture?

Say what you want about RMS, but at least he's principled and does/says what he thinks instead of conforming to social norms.
Yes, I agree that Python 3 is not that bad to start a new project in. But that's not the problem. The problem is that many of us have a huge investment in Python, and the project is meandering around, borderline-insulting its historic users who still like 2.7, while simultaneously failing to deliver on REAL needs such as performance and GPU support. Instead we get these little tweaks here and there, downright embarrassing PEPs like type annotations, and all this frankly distasteful pressure to move to 3.x using threats of the end-of-the-line for 2....

Basically 3 gives us lots of headaches, very marginal improvements, an ivory-tower sense of "we know best" (message to Guido - no you don't), and a real concern that the powers that be have no clue what's going on at Golang Towers, Fort Javascript, not to mention Clojure, Julia, or even Elixir.
You're absolutely right, I chose a simple example because it's one I expect most people have seen in one language or another. A better one would be rewriting a combinator based parser (e.g. one written in Parsec) into an imperative one.
I mean, it's not like the guy was involved in that site :) But in any case the hiring tips in it seem applicable to a good range of companies to me.
Will GM's Battery Supplier Beat Tesla to the First Gigafactory?
Many components are shared between the two. They seem to have a single mobile OS with different variants (iOS, watchOS, tvOS). Some day OS X will be one of those variants.
Yeah, but they've been getting better over time. It's monotonically non-decreasing security, at least, and the desktop->mobile transition has been amazing from a security perspective. This is a step backward. The only question is how big is that step.
A Quick Guide to the Cybersecurity Bill Passed by the U.S. Senate
I don't think anyone cares whether it has a future. It's not like there's significant investment in your Uber driving skills. You can already drive.
That is, if the population growth doesn't destabilize the economies and make us revert back to the old times. That's the crux of the issue. The rising tide is lifting all the boats, but we need to make sure the tide keeps rising.
Pixelated plants shed light on cell size control
Oh, thank goodness.

Both operating systems have their merits, but require Google to split their focus. And yes, this is in contrast to iOS/Mac Os/watchOS/tvOS, which is a common OS divided by UI
Damning Evidence of Australian Officials' Involvement in Transnational Crime
Because it's easy to get past the paywall:

https://h4labs.wordpress.com/2015/09/14/hacker-news-faq-1-ho...
In Java:

Alphabet.getGoogle().use(Alphabet.getGoogle().getGooglePlus().
getCommentFactory(), Alphabet.getGoogle().getYouTube().
getVideos(com.alphabet.google.youtube.RED))

In python:

import alphabet.google as google
google.apply(google.google_plus.comments,
google.youtube.videos(google.youtube.RED))

Am i doing it right?

(edited for javaness!)
I agree with you, generally speaking. That said, facebook wields a tremendous amount of power, and they often wield that power in ways I am uncomfortable with. I think it's valid to express that discomfort, especially in places where the people who may be building the "next facebook" (whatever that looks like) happen to be hanging out.

It's a complicated topic, but when you break it down there are billions/trillions of dollars on one side of the equation, and the values of human dignity and privacy and the open web on the other, with very little profit to be made from respecting those values.

I think it's OK to call it out when a company that employs a lot of good people is doing something that is at odds with good values. Maybe they'll think about it, and take the conversation up the chain. Or, maybe they'll laugh at the grumpy old UNIX beard on the Internet for not "getting it". I dunno.
SXSW canceled panels: Here is what happened
It's an expression. Liquid water has mass and takes up space. It's material. It exists in a materialistic universe where the only things that exist are matter an energy.

On the other hand, there's nothing physical about "laws." They lose their law-like properties and become conventions of thought rather than regulators of truth and rationality in a world where only matter and energy exist.
Some of us wish we'd be smarter than free market and have the ability to allocate resources proactively, instead at the last possible minute, when prices finally start to reflect the impending doom. Noticing that Earth has a carrying capacity and that we have to do something about it (either stop growing, lower our footprint or extend that capacity) is expressing the belief that we can do better.
> Let me warn you. If you persist with your propaganda on Python3, then GOLANG will be the future of Python. Does that register with you guys?

This abstract future of Python has already been ceded to something that is not Python, just as once the abstract future of Perl was Python. Ruby once tried to take the mantle but failed. Go is now taking a lot of mindshare (from 2 or 3 more I wonder?) and I agree the Python 3 crowd just makes Go more likely to succeed, which is terrifying since it's probably the worst possible choice. My message is simply despair and accept the inevitable: Python will fade -- by all means keep using it, people still use Perl, scientist will be using it for a long time -- but the rest of the software world will pass you by. If you care about what the rest of the world is doing at all, you can help make sure the future passes to better general purpose high level languages like Nim or Clojure or OCaml, and for specific niches like scientific computing goes to the likes of Julia eventually. Anything but Go.
I am human, and my flaws are many.
> No one has ever made a "concrete finish" device,

Most hand-held plastic devices of the 80s/90s were hair-cell finish, emulating the texture of leather. Engineers knew that smooth plastic will scratch and show scratches. Also the hair-cell feels better to hold.

Think of a Motorola pager for instance.

Hair-cell is kind of a micro-concrete.
So far as I can tell, libsodium works on iOS.

Don't write crypto for watches, is what I think.
I think hardware implementation can have security bugs too and it's a lot harder to upgrade the hardware than the software.
Some people continue to write JavaScript in such a way:
https://github.com/greensock/GreenSock-JS/blob/1.18.0/src/un...
Have you tried Caret? I use it on my Pixel 1 and it seems to be modeled off Sublime/Ace.
Same here. I never really used third party domain software. I used Google Fonts for a while, but I find it pathetic to have some font files and some CSS loaded from a different server than mine. Google Fonts (and every CDN) can be a lot slower than my own server. Sometimes, the site hangs while "waiting for google.com". Silly.

Also, Google Fonts might be Google Analytics in disguise. Who knows.

I use Piwik for tracking, but the self-hosted version. I don't even use newsletter services. I bought a cheap newsletter plugin for Wordpress which I use as an autoresponder email course.

But delivery is all that matters they say. And yet, all Mailchimp and Aweber and whatnot goes 100% to my spam folder automatically. I believe the delivery argument is a myth.

The best part: Decision making is much easier. "So, your product can't be installed on my own server? Bad luck, I won't become your customer."
Before the Snowden stuff... mmm probably yes.

I'd bet that quote comes from an old issue of "Mondo 2000" and is contempory with the Clipper Chip battles about mandated NSA backdoors in all telecoms circa '93/94.
50 people, not 50%, sorry. Still statistically a large fraction of the population.

http://news.nationalpost.com/news/canada/point-roberts-washi...

I've been there, but accident, when visiting Canada.
so my speculation (and this is pure speculation) is that they're still running something based on the older rhel5-xen on their paravirt guests, on the general "if it's not broken, don't fuck with it" model. I think that the RHEL5 hypervisor is old enough to not be vulnerable to this problem.
I can't think of any other technologies that have waited for the security aspect to be solved, can you?
You can't though. A home isn't a restaurant, and can't be one because it's not in a commercially zoned area, nor is a home kitchen nearly as sanitary as a restaurant kitchen, due to the building materials. Not to mention fire code (commercial kitchens have a proper fire suppression system).

It's considered 'underground' because it's strait up illegal given the various other laws concerning business and food preparation. You can't just scrap every law to accommodate something that's become trendy unless you're prepared for neighbourhoods and apartment buildings to all become commercial zones and allow other forms of home businesses...
Having many children is an economic issue, not access-to-birth-control issue. Poor families in third world countries will continue to mass-produce children because they can't afford not to. For the contraception to be used, we need to raise them out of poverty first.
> To a materialist, mind is simply what the brain does.

You're adorable.

If Charlie holds to different laws of logic than Bill...whose brain is right?

Your view is that laws are just conventions of thought. Those aren't laws, then.

I again assert: rationality is impossible without laws of logic. With conventions of logic, you just have strong opinions.
Nest is actually a name in 100% more households than Google, considering it is nailed to a wall.

One time I tried to nail a Google to my wall. Larry was pissed.
Argentina May Have Figured Out How to Get GMOs Right
Ancestry Mexico Launches with 220M Searchable Mexican Historical Records
Not limited by the protocol per se, but limited by the design requirements of BLE.

BLE; you're talking about power requirements of ~10mA transmit (current consumption), and averages in the <10μA range. That's the whole point of the tech. It's stuff that can run for years on a watch battery.

Now: how LORA is accomplishing such crazy long ranges when supposedly consuming similar amounts of current goes a little beyond my understanding of RF. There are a few people commenting in this thread that seem to have the knowledge, though!
Wow, terrible response.

Unfortunately I believe I'm on that list from when I was in middle or high school, dabbling with PHP. I'm certain that I haven't used that password in nearly 10 years (and of course now use a password manager with random passwords for every site), but it still feels terrible anyway that my email and plaintext password are being sold online.
Estonia is on the verge of destroying something beautiful
Pentagon steps up private-sector cyber exchanges
The processing that wheat goes through to become flour is interesting. Stuff is removed and then stuff is added. Different batches of wheat are blended to obtain a consistent product.

By grinding the grain in the bakery, it avoids the processing.
The baker has to adjust recipes on the fly to adjust for the different gluten/protein levels since that will vary.

That might account for taste difference. Double blind trial would be interesting with different flours.
How to scale thumbnails?
You and me both: http://www.teleport-json.org/ :)
I would suggest toning down the arrogance. Just because you don't personally need some features does not mean that people who want the language to progress and not stagnate are idiots.
Actually each ascii character takes up a byte (8 bits). You can get this down to just 7 bits if you aren't using the extended table, but a byte is very convenient and what most programs use for the size of a char.

That means that with an 11Kbps line you are getting about 1,000 characters per second once you factor in other communication over head (stop bits, parity bits, etc). While this may sound fast it is painfully slow for anything other than typing in single line commands and reading single line responses. The transfer of a blank 4KB text file will take three seconds. The transfer of a plain text file the size of a book would take a few minutes.

With the additional overhead of SSH you will actually see the characters appearing on the screen like a lame 80s hacker movie.
Node.js Version 5.0.0 (Stable)
A classic example is this[0] debacle, wherein a legitimate user struggles with all forms of difficulties because a CA took it upon themselves to police the certificates they issue.

Similarly, I bought a certificate from that same company and because it was for a well known brand I was made to jump through all sorts of verification hoops, despite being a DV certificate.

I won't link it here but I came across a stresser service quite literally selling DDoS tools, advertising that they accept bitcoins for anonymous attacks - who happen to have an EV certificate and give users a big green bar.

Does that make it a legitimate business? SSL vendors what you to think so.

[0] https://forums.comodo.com/ssl-certificate/comodo-rejects-pos...
There was an interesting paper linked on here about automatic optimization of Photostop filters via machine learning. I think the novel part was that it operated on binary code, not source. Can't find the link at the moment, but searching for it yielded a bunch of similar papers about machine learning-aided optimization.
And also Zyklon which would become Zyklon B when the warning eye irritant was removed to make it a better weapon for murdering people. There was a RadioLab[1] episode that talked about how it was eventually used on some of his own relatives.

[1] http://www.radiolab.org/story/180132-how-do-you-solve-proble...
Upthere, a cloud storage service, wants to make file syncing a thing of the past
Nice! Would love to see a benchmark
A Genocide in Colonial Africa Finally Gets Recognition
Atom 1.1 is out
Contrary to the name, Many Worlds is a complete theory. Bell's Theorem does not predict non-locality, rather it says that any local realist theory must satisfy a certain inequality which is violated in practice. An assumption of Bell's Theorem which is so deep of an assumption that people don't even know they're making it is is that there's only one outcome to any measurement.
why someone who preaches counter culture even was on facebook?!

this is akin to complaining that some kid was disappointed to be called Bartolomeo instead of Bart while attending the Sunday church bingo. Really?
Almost, just change the getters to lowercase 'g'et and add a bunch of unnecessary Spring boilerplate on top of it all.
How is the work to (drastically, I hope) improve compilation speed going?
> No, I'm attempting to prove a point. Indulge me.

No thanks. I was asking genuinely.
Hmm, tricky one. In this specific case, maybe it's a reasonable request.

But people who don't have benevolent families would definitely not want to hand control of their online identity to them after death.
Microsoft doesn't need a credible competitor to Android at all. Anything they do in mobile is pure gravy. They're generating $20 billion a year in profit without one, and have seen zero meaningful harm to their profitability over the last five or six year rise of Android. It can easily be argued Microsoft will make a lot more money building software for Android and iOS, rather than competing with them. Office is more valuable than either Windows or Android. Azure is going to be a more valuable business than Android is for Google.
Facebook is a very closed system where it's users have little to no rights. I myself have checked out of most of it and only occasionally use it to chat with a few friends in a private group. I found that once you cut using it you really don't miss much. There are better alternatives in my mind that we should all start shifting towards.
> And Android would be suckey in an inexpensive laptop non-touch form-factor.

Today's Android. Android with ChromeOS folded into it could look just like ChromeOS, except with the ability to install/run Android apps natively.

It could also look just like Android, but with the ability to install/run Chrome Apps.

It could even be configured to look, by default, like existing ChromeOS on desktop platforms and like existing Android and handheld platforms.
or, Android is coming (if it hasn't already) to x86?

how well does a full-fledged Chrome on ARM perform? Does it even exist?
Aren't we a cancer that consumes the worlds?

It gives me an idea for a sci-fi story, where a stable civilization of smart beings faces a threat of the sphere of all-consuming humans expanding at the speed of light.
You can confirm now via the service troy runs: https://haveibeenpwned.com/
For analytics, the HTTP request can be dropped entirely, since the data can be extracted from the web server logs.

No, it can't, at least not in general. That's what others here are trying to explain to you. It can be very useful, and in both the visitors' and the host's interests, for someone operating a site that has a lot of client-side interactivity to see what's really going on, for example.
I agree! For example, vanadium redox flow batteries are looking pretty great for grid storage lately, with estimates of storage costs below $0.20/kWh stored. As I understand it, that's more than the daily price fluctuation in some markets. Far more cycles than lithium ion and a wider range of operating temperatures.

And I think we're just skimming the surface with flow batteries (pun not intended). There's a massive amount of potential for new materials here.
For clarity, as some replies seem to have missed the point: because conforming clients will not send the cookie in the origin server request due to domain name differences.
thanks for the article Tony.
Loved it, really enjoyed the detail you went into.
Look forward to more.