skysight-inc/HackerNews huggingface dataset:
So, ok. Don't copy and paste from a website to a terminal, I get it and I got it the last time that this kind of thing was posted. But if I look around I put so incredibly much trust in total strangers all the time that compared to say ordering a pizza (where the cook could put anything in the food they wanted), driving on the highway (where anybody could swerve any moment if they wanted) and simply walking down the street (where that old lady on the left of me could pull a knife and stab me any time they wanted) that you have to wonder if the downsides weigh up against the upsides of simply trusting the website you get the information from and getting on with your life (besides the fact that it is the browser acting in an un-expected way here, the bit selected does not mirror the visual feedback given to the user, this might even simply qualify as a bug).

What is the actual risk here, how many people have been bitten by this sort of thing and what was the resulting damage? I'm not saying there isn't any risk, clearly there is a possibility for exploitation here so chances are this is an actual risk. But I find it hard to make the case that we should all now start re-typing all the text in how-to's and scripts. It's one thing to run wget | curl, quite another to distrust each and every snippet of code on the web. I don't see much difference compared to say installing Ubuntu from a website whose contents I haven't inspected and that may have been built with a bunch of malicious stuff in it, I did not actually inspect all the source code this machine was built up with and I would be busy for half a lifetime if I did, so I outsourced the trust and verify that trust by looking at some checksum but that's about the extent of it.

Is there anybody that can quantify this risk somehow?

Has anybody been personally burned by this?
No, he said that you shouldn't worry about paying them for the first three years - presumably because this is the period of time for which all student loans can be deferred due to unemployment in the United States.

https://studentaid.ed.gov/sa/repay-loans/deferment-forbearan...
The corona effect is a real surprise the first time you see it.
These Mobile Innovations Are Quietly Changing the World
I'm not so sure we're really capable of distinguishing between "random executable" and everything else. What do you have to go on in making the distinction? Let's say you're installing a new version of Sublime, or curl, or Chrome. These aren't 'random executables' - or are they? If someone poisons DNS, they could be. If someone MITMs them, they could be.

What about stack overflow? Surely they are trustworthy. But if someone hacks them, and inserts an attack like the OP's, then you are in trouble.

There are two problems. First, the hardware we own is almost comically powerful, both in compute and network bandwidth. Second, that same hardware mediates between us and everything that is important to us: our lovers, friends, business partners, banks, and so forth. A subtle enough hacker might get into our system and we might not know it, ever. (Indeed, if the hardware manufacturer put some secret code into their stuff then such a hack might be very subtle and very universal indeed.)

I'm not throwing my hands up and saying it's all pointless. But consider that your typical gigabyte program has a tremendous amount of surface area to check. And no, you can't discount "dumb" resources like images and videos because they aren't executable. A smart attacker will encode instructions in, say, a viral YouTube video that will trigger those hidden CPU instructions that will load a steganographically encoded program. For now we have to be practical, and not freak out. For the future, we have to move toward smaller, more efficient software that makes unexpected computation and resource usage obvious from an outside observer. This means small code, short call-chains, and minimal screen, network or disk interaction.

(I'm particularly worried by the trend for basically all software to be constantly connected to multiple unknown external hosts, any of which could be controlling code on my machine at the same level as the program I installed!)
The point of this project/company is that the agents are spatially embedded. Markets are almost abstracted from their physical layout (with the exception of high-frequency stuff where the speed of light breaks the abstraction).
Can't remember which oh-my-zsh plugin it is but you can prevent pasting-and-executing in the terminal. What it does is that you still have to hit enter when you paste something, even if there are breaklines in it. That way you can read what you will execute.
Flashback is useless if there are schema changes.
There's a substitution rule that's discussed in oral argument, but it's a bit complex.
Do things you are interested in, and that you can commit yourself to spending time on consistently. Dropping things you've started without making the conscious decision to do so will foster a sense of underachievement. Accept that Rome wasn't built in a day and start small. Build yourself up gradually. Use your small successes to build momentum. Accept that you cannot change the past, instead try to guide the future. Invest the time in doing a personal development plan. Even if you don't use it, the simple act of doing it will help to give you some direction and make you appreciate what it is you really want. You can then set about making steps in that direction. Be wary of sacrifices you choose to make, particularly concerning people. Choosing to learn language X instead of language Y is easy to solve when you change your mind, but convincing the person you love to take you back after you chose your career over them is likely to be much much harder.
There are over 400,000 emergency room visits per year from marijuana. THC has biphasic activity. At low doses it can create the desired effects but at higher doses it has the opposite effects. These effects include irritability and even psychosis.

[1]New England Journal of Medicine (2014): Adverse Health Effects of Marijuana Use:
http://dfaf.org/assets/docs/Adverse%20health%20effects.pdf

[2]
http://www.menshealth.com/medical-marijuana/
My main concern is that the immense bureaucratic delay is still in place. "Level of service" for cars may no longer trigger it, but that just means something else will instead. We can't go on being a nation that takes decades to build minor transit improvements due to walls of paper.

Well, we can, it'll just suck.
You need to present your full certificate chain and not only your public cert.

I'm running a certificate generated with Let's Encrypt on one of my sites and I've got an A+ result: https://www.ssllabs.com/ssltest/analyze.html?d=datasnitch.co...
Hotel Wi-Fi Netowrks a serious threat to privacy and security
I don't know how much they import from China (probably a lot, as you say, they have poor relations with very few other nations), but I do know some charities operate in North Korea and often come in through China. A twist is that many of these charities are operated by churches, which often leads to their running afoul of authorities in both countries (but mainly North Korea).
That's a good thing. Because the same applies to just about anything else. Where your servers are, who announces your IP space. Or outside the internet, where you are living, where your company is registered, where you do business.

The current CA system is the odd one out. Any CA in any country can create a cert for your domain that is recognized everywhere.
Another one. DDL changes are not transactional.
The biggest risk of sortition is moving the balance of power from representatives to the appointed/hired bureaucracy. I suspect that non-politicians are much easier to "manage up" against - I fear having it wind up as political lottery winners getting "advised" into going a certain direction.
It's so difficult to keep latitude/longitude straight; which is both the reason for the correction and why I looked it up to be sure. Longitude is the measurement of east-west relative to another point of reference (the prime meridian). Latitude is the measure of angular distance from the equator.

Even though the Earth isn't a perfect sphere, at this scale it's effective enough to consider it one. Latitude lines will be parallel with each other. Longitude lines converge, more closely on the greater latitude parallel.
FCC: We aren’t banning DD-WRT on Wi-Fi routers
I feel as though we've gone off topic here.

You said that twitter doesnt provide value "because they stare at the feed only to find something that then lives somewhere else."

When you search Google you're finding things that live somewhere else. I'm simply pointing out that you don't need to host the content the user is looking for to provide value.

I'm not saying the companies are the same. I'm not saying Twitter can be successful the same way Google has. I'm agreeing with all your points besides the fact that you need to host content to provide value.
Ha. I beg to disagree -- that number is gamed. See #6:

http://norml.org/library/item/your-government-is-lying-to-yo...
It's because for the browser the visual selection is not the same as the textual selection. I'd say this qualifies as a browser bug rather than a user failure. What you see is not what you get.
That's ancient history by demographic standards. Modern wars don't create baby booms. People en masse don't want more than 2 children. Dead people want nothing.
"The City" being Manhattan or perhaps Chicago, the only place sin America where we have usable public transportation.
The commandline client: sqlplus is very convenient. It doesn't even have history. But you can fix it with rlwrap.
I can't tell if this is parody or a serious encouragement to conform to a specific lifestyle and thus remove all life's problems.
The cost for ignoring the city is punishing: a 5 percent penalty on "taxes owed" after one month, 20 percent after four months and, upon failure to remit, collection fees up to 39 percent

What if we replaced "the city" with "loan shark"?
Yeah. This seems like a calculated way for Volkswagen to make sure that nobody comes forward with anything, to "prove" that nothing else is happening.

I mean, they even say you may still face criminal charges for coming forward.
Bracketed paste can save you from accidental damage, but not from malicious pastes. As the fine article says, the end sequence can be inside the text you paste unless your terminal emulator filters out the bracketed paste characters (and last time I checked, at least urxvt didn't).

Besides, teaching shell about bracketed paste could only help for pasting directly to shell; it won't help if you're pasting to vim (think of "^[:q!echo pwned^J") or cat (think of "^Decho pwned^J").
one can target specific editors...

for instance, if I know you are using VI I can create a series of characters that will escape out of insert mode and run a shell command (note: ^[ is ESC (ascii 27))

git status

^[

:!echo foo
Because it's better to disrupt yourself than have someone else do it.
Well they're still doing a better job at it than Opera is and functionality wise it seems fairly close to old Opera releases(Vertical Tab, Sidebar...).
I hate to say it, but crises like these are going to be what pushes North Korea to reach out for help. They are slowly pissing off their closest allies, and it won't be long before they at least have to play by the same rules as (China, Russia, etc) who at least pretend.
I would love to understand more how they deal with postgreSQL writes across a 60ms cross-country connection. Sounds like both datacenters write to postgreSQL in one datacenter and 60ms is not insignificant
But it is an essential part of it and those certificates are provided to you upstream.

Disabling them is discouraged, if you disable them you might start having issues (for example I disabled CA's on my Android phone) then noticed that many of my apps started crashing or had weird issues without providing meaningless messages.

If you disable them chances are that new version of the software will enable them back. You're essentially forced to live with them.
Humanity can really benefit from this. I am waiting to see what becomes of this breakthrough.
As I understand it, safe water was historically a problem, which led to the prevalence of hot tea for drinking. I guess culture in Asia tended towards boiling water, as opposed to Europe's tendency to ferment beverages to make them safer?

I forget the source where I read this, but there were supposedly vendors who only sold hot water. Water is a really cheap commodity, so the currency reflected that. Those lightweight, fractional-cent coins with the holes in them were kept on a string by the water vendors to easily take/dispense for selling hot water.

It's been years since I read this, so I may be totally off base with my recollection. But it makes sense given the problems associated with very dense populations and potable water in pre-industrial times.
Replacing tires on a car is not an emergency unless you happened to blow a tire, and even then that's usually covered under warranty unless you screwed something up and like drove your car over a curb causing the damage.
Interesting all his graphs top out at 1000 threads. Wonder what they would look like if they went to 5000, or 50,000 threads.
Awesome to see your hard work pay off John, the your silent army stands behind you.
Yes, the CDC has even published material identifying the "Diabetes Belt" which covers hundreds of counties that have almost twice the rate of Type 2 Diabetes than the national average. [1]

[1] www.cdc.gov/diabetes/pdfs/data/diabetesbelt.pdf
TiVo is still around and handles OTA just fine, as I understand it. (I use mine with cable and never watch anything live.)
Boston/Cambridge/Brookline, Atlanta, Seattle...
Apple 'to launch peer-to-peer payment app'
I'm sure there are 5 startups already hard at work on packaging up exotic feces and delivering it by bicycle via an on-demand mobile app.
Surely there is also instinct at play here. A cat raised in captivity still can hunt mice and if its released into the wild it could survive and reproduce. And of course there is the famous california condor story where they are now all either raise in captivity or decedents of those.
It's basically a stock Tegra X1 SoC built out into a single-board computer. so it's best to just look and see what has been previously written about the X1.

As such, I don't understand the embargo on performance measurements - barring any major surprises, I think Tegra X1's performance is pretty much known at this point.

The X1 has actually got 4xA53 and 4xA57 cores in a big.LITTLE style arrangement.
Benchmarking Postgres-XL
I have a little experience in GPU programming so I can address your first question.
;TLDR It is mostly due to momentum.

The difference in momentum stems from a difference in design paradigms. OpenCL is just a library that you can link to can compile using GCC. Because the code you're writing is C++ syntactically you're often jumping through a lot more hoops. Nvidia uses their own compiler, so when you're writing cuda programs you have something that looks a lot like C++, however they have the freedom to extend the syntax to ease development.
The marketing arm of Nvidia, combined with the ease of use helped get Cuda the defacto research platform. Once that ball was rolling, it becomes easier to find cuda teachers and cuda examples so it's naturally become more prolific.
No I said their problem with monetization for twitter was that people don't spend enough time on twitter but instead on the places that tweets lead to.

In other words they provide plenty of value they are just not able to make a living from it.

Instead they should get more people to stay on their own platform by allowing more content to be created there just like Facebook is.
Duh, everyone knows you should pipe curl into bash instead.
I would imagine that shared hosting providers will just request the certificate for you in the future. Remember: This is about domain validated certs, so there's zero difference whether you request the certificate or whether your hoster does it for you.
I agree that he was thinking a 401k loan but the biggest downside of 401k loans is that if you leave your current employer (are fired or choose to leave) the full amount of the loan is due immediately. This is a huge set of handcuffs to your employer that make it more difficult to jump ship for more money.
Cool - let us know if we can help in any way :)
Storing, transporting, and selling food to customers is fairly regulated and requires inspection and permits. Does DoorDash have these?

The question is, do the folks who actually perform the deliveries?

DD is using the same trick Uber uses: they hire drivers but classify them as "contractors", which conveniently abstracts all the risk away from DD. So, just like Uber, if there are issues with transport and so forth, it's the driver's problem.

Of course, as with Uber, this is probably an illegal violation of federal labor regulations, as the employees are misclassified, and so they're likely to get nailed in a class action lawsuit, but...

the places DoorDash is getting food from are themselves in the retail food trade but not generally in the wholesale trade

See above. I'm not sure your characterization, here, actually represents how DD legally does business.
Doesn't that presuppose that tablets will disrupt PC sales.. if iPad 2010-2015 hasn't done it, what makes people think 2016 is the year?
San Francisco is very bikeable/longboardable/electricgizmoable.

Source: I don't have a car, but I do have a motorized longboard.
Do they not have a source repository with commit history and code reviews with names attached? Is that something unreasonable to expect from a multi-billion dollar company?
Super excited to see this released - perfect timing as I've been working on JS heavily as of late and have been searching for a good memory debugging tool and I'm not too big on chrome's option. This looks easier to read and use overall.
And Apple doesn't have a monopoly on iOS?
Paste into a text buffer first, which is generally a good idea anyway to deal with formatting issues.
It's a pretty simplistic view of things, Chrome on iOS isn't that great, even if you use Chrome on all other devices the account sync and all the other Google features might not be worth the performance issues compared to Safari.
FF Account Sync isn't as robust as Google's (not saying it's bad, it's not intended to be as universal and or invasive) so you will get for the most part even less out of it.

FF on Android is a true FF build, you can run most addons on it and it uses Gecko as their rendering engine.

The problem with iOS is that we are going back to a single eco-system when it comes to rendering engines this means that everyone needs to get inline with how Apple thinks that the web should work which we had to suffer through before when Microsoft polluted the web with their own interpretations and "proprietary" standards.

Also from a security POV this is pretty damn awful if there is a vulnerability in WebKit/iOS Webview or however Apple wants to call it, there's a good chance that every browser will be vulnerable this means that until Apple can patch it out there is no alternative non-vulnerable browser for the iOS ecosystem.

This pretty much reminds me of the late 90's early 2000's where there were a billion "alternative" browsers like NeoBrowser and the like that were nothing more than a reskin of Internet Explorer, the fact that you can't push out your own low-level components to one of the most popular mobile platforms in the western world is pretty god damn sad.

I for one would have actually loved it if Mozilla and Google would've make a stand against Apple and say if you don't allow us to build our browsers like we want too we're not going to be on your system. But sadly because Apple users are the more "important" (as they have more money to spend) than alternative platforms it doesn't seem likely to happen.
Using SQL to Drive Growth
I am forced to use Mac hardware at work but run Linux as the OS on my Macbook Pro :) Not all of us are hardcore Mac peeps!
Awesome, thanks a lot.
What if he wanted to work 3 times harder so that he can afford luxuries? Not everyone is satisfied working just enough to survive and no more.
Gotta love the Facebook and Twitter buttons at the bottom of the article :)
> physically counterintuitive

Not entirely sure about that; my first intuition here was "temperature and pressure do pretty similar things to chromodynamic interactions—so if materials become more conductive [or even superconductive] at low temperature, then gas media probably become more conductive [or even superconductive] at low pressures, too."
I never understand these articles. No they're not. You're not required to use these two (out of billions of) websites.

Vote with your time and attention. For better or worse, the majority of people vote for these sites.
Isn't cabbage actually pretty inefficient food anyway?

As far as I remember it takes a lot of energy to digest it, barely leaving a positive balance.
Genuine question - why is the final file size almost 1/3+ that of Firefox?
It comes down to performance per $ and quality. I'm not certain about AMD's perf/$ but Intel's Xeon Phi perf/$ is terrible.

AMD's software quality is not so great compared to Nvidia. Rich Geldreich's post, http://richg42.blogspot.com/2014/05/the-truth-on-opengl-driv..., is revealing.
vimperator (firefox add-on) ftw:

it says "Yank git clone dev/null..."

(and changes the whole FF, not recommended as a remedy for this issue :)
Does Google still penalize short-term / soon-expiring SSL certs in search rankings?

Edit: this does not appear to be a thing that happens.
Depending on lifestyle and place of employment, being carless without a lot of sacrifices isn't necessarily limited to New York and Chicago. I know people in Boston and San Francisco without cars who use some combination of public transportation, Uber/taxis, Zipcar, and conventional rentals. That said, it's somewhere between inconvenient and very difficult in many places--including urban ones.
This is a great point, and something I often wonder about as well. I think it's reasonable to think that only a compromised site or site run by someone with ill-intent would pose any real risk. And in such a scenario, it's going to get out pretty quickly that the site is compromised/dangerous.

While this doesn't help that theoretical set of initial victims, it just doesn't feel like a credible risk worthy of too much worry, especially for information from higher profile sites with reputable backing.

Perhaps the solution here is better mechanisms for validating what a script can do - "script is attempting to access xyz, allow? y/n".
I'm disappointed too - the Jetson TK1 was marketed at $192, so this is more than triple the price. Dev kit or no, their costs didn't increase that much.

Unfortunately they're pretty much the only game in town for this kind of hardware. There's a few alternatives (Parallella, FPGAs, etc) but nothing with the kind of ecosystem that CUDA provides.
Couldn't you just open incognito window (in Chrome) and go to duckduckgo.com to search?

Regardless of browser or platform that would solve your search engine problem.
Fermenting it improves digestibility. As does cooking it.
Engineered bat virus stirs debate over risky research
Chrome has had that for at least 2 years now. Sure, Firefox has some additions, but how is Firefox doing some breakthrough?

https://developer.chrome.com/devtools/docs/javascript-memory...
It was also advice for Millenials. I don't know who seibelj is, so I have no ability to judge whether a house is or is not a good idea.

I own mine. It is, for me, where I am physically and personally and professionally, a better move than renting. But then, I'm not really a Millenial. (Born 1978, some stretch "Millenial" back to the 1980s, but in life trajectory I'm more "X" than "Millenial". Though frankly I identify with neither.)
TIL
The combined "valuation" of total US unicorns is $486 billion. Their combined profit? $0.
Portland.