skysight-inc/HackerNews huggingface dataset:
The fourth estate is an essential component of our system of governance. This really is without debate as you couldn't possibly have a system of democracy without a way to inform the voting public as to who is running and what promises they are making.

The problem with your line of thinking is that you're trying to say that the news media is just like anything else that is competing for resources and attention. You're only describing the world through private interests.

With your critique you're placing "journalism" in an interchangeable roll with "Call of Duty", cynically denying its public roll in our society.

We absolutely need to address the broader societal changes brought about by technological changes. An economic approach is not enough. Our systems of law and order are incredibly complex. Governance is an ever evolving call-and-response that attempts to balance individual rights with the needs of the greater good.

We need to hold ourselves and the rest of the citizens of the world to these high standards, as our forebears have done for generations, or we may lose the wondrous liberties they fought so hard to maintain.
A good terminal should show you the full pasted text in a confirmation popup before executing it. Also should never accept new lines from a paste. Or rather; if and when the paste contains new lines, it should show a confirmation popup so you know what the hell you're executing.
Today, this happened to me, too. Very weird and very annoying indeed.

Authenticating to a service such as the App Store via password without using a password manager feels very anachronistic and insecure.

This always makes me think that there has to be a better solution than passwords for authentication. Password managers such as 1Password are great but they still are a work-around for an essentially broken system. Plus as long as there's no close OS integration we'll always run into situations like this.
This is the OP, sorry if my tone offended you.

The review board process there is not to the satisfaction of some people. For example, if you create an application and another people want your application but the review board for any reason (real or not) doesn't like it, then you can't distribute it. For example, for some time Apple disallowed applications that duplicated functionality from core apps. So you could not ship a new mail client or a new music player. Yes, those restrictions are gone but for a while they were real. For some months they also restricted the app store for applications developed with their own SDK, if the app was not Obj-C/Cocoa then it could not be accepted. This is also gone but for at least three or four months lots of developers were stranded.

Why am I telling you that? Because this is just to prove that sometimes Apple makes mistakes. Sometimes, their rules are not in the interest of the user. Sometimes, they backpedal and make it right, sometimes they don't. Since you don't have a way to distribute content outside their walled store, you're left without any recourse. The phone is not yours, its theirs.

Now, back to the topic. Browser add-ons also pass through a rigorous review process. Currently, Firefox extensions need to be reviewed and signed before they can be installed on Firefox Stable.

Apple could allow new rendering engines and new javascript engines. Microsoft was sued for similar reasons. Some people are so displeased with Apple WebKit that they are claiming it to be the new IE as can be seen in http://arstechnica.com/information-technology/2015/06/op-ed-...

Having more rendering engines and JS engines would not make iOS less secure. Having add-ons in Browsers would not make iOS less secure since all iOS apps run sandboxed anyway. Also both Chrome and Mozilla have add-on review processess. At Mozilla any open web app or add-on that touches sensitive APIs is reviewed very rigorously. This would not lead to a less secure system but it would probably lead towards more usage of mobile web instead of apps and this goes against Apple strategy and shareholder interest.

The fact they do not allow competition is not good. You should be able to choose what you want to install and from whom.
Wow, textbook application of forum sliding. +1

<pragmatic comment: I doubt the establishment really cares what is said on Internet forums>
These certs are to verify you control the domain name, not that you are who you say you are. Those certificates are much more complicated and expensive.
See https://letsencrypt.org/2015/10/29/phishing-and-malware.html for more information
MIT team invents efficient shockwave-based process for desalination of water
None of those commands are so long that you shouldn't just be retyping them by hand. It's obviously not an ideal way to install anything, but it's much safer than copy and pasting.
Imagine the lovely conversations these companies' VC backers will be forced to have with their fund investors (who will surely ask about Fidelity writing down the valuations) and with fund auditors (who will surely ask about lowering the carrying value of those investments to reflect recent market developments): "Why is your VC fund carrying company X at that much per share? Fidelity just wrote it down to this much. Please explain."

An immediate consequence of these very public write-downs by Fidelity will be that every other late-stage pre-IPO investor holding stock in these companies will likely write them down too. Further consequences are more difficult to predict. One potential outcome is lower valuations across all investment stages. Another could be less excitement and slower deal cycles. It could get harder to raise capital.
Show HN: Orator – An ActiveRecord ORM for Python
You and the author of the title are confusing cache layers and "battery protection." A RAID BBU will only protect the RAID controller's write cache; the thing that your write IO sits in until the controller flushes to the disk set. That's either 4-5 seconds depending on Dell/LSI model or until it gets pushed out for cache capacity.

The above has absolutely zero to do with the drive write cache and power protection. The drive write cache is used to cache the write on the drive after the RAID controller. Spinning metal drives have caches. SSD's have caches. Whether you use the cache is up to you and your OS. The safest setting is off. You can usually get more performance by leaving it on. This is why Windows would throw warnings all over the place when enabling write caching without a connected UPS. I'm not sure exactly what the logic is on Linux for sd/sg devices.

The default Dell RAID controller behavior with write caching on drives is based on drive interface. SAS = off. SATA = on. If you run non-power safe SATA drives with a Dell RAID controller, you must disable the write cache if you want data durability.

Then again, you could also run your databases on power-safe, non-consumer SSD's. This whole article was basically a giant warning sign saying "run away they need serious help."
Interesting tidbit, I didn't know setting the position of text off the string would still be copied.
at the bottom of the site is a bunch of logos of the companies they buy from - the in n out logo used to be there
If there's a newline in the pasted contend it's already too late.
Orator is a brand new ORM for Python following the ActiveRecord pattern with a pinch of magic in it.

Its main goal is simplicity. I want it to be really easy to read and write with useful features out of the box (relationships decorators, timestampable models, soft deletes, protection against mass assigment, model events, caching).

I started it as a personal need for simplicity when defining my models which is one of the things I like about Ruby On Rails.

It is inspired by the database part of the Laravel PHP framework, but modified to be more pythonic.
The green padlock that casual users might misinterpret as meaning "to be trusted".
If someone compromised the key they also compromised the system used to automatically generate more keys, so a short expiration is not as helpful as it looks.

It's even worse than that:

A smart attacker will copy the method used to generate keys, and leave the server. Then they can keep generating keys and you will probably never notice.

I feel that automation is a mistake, something security sensitive like this should be on a completely different machine.
The flat rate would have been a guaranteed higher monthly bill that what she was paying at the time, for as you point out potentially higher usage. But if her desired price to pay was $20, and her average monthly bill was n, where n is below $20, why wasn't she already using the service more, at the rate of $20-n?

And, again, the AOL anecdote was an illustration, not evidence. See the truffle study, we know more about this than your response suggests.
Free Canon iP2870 Driver Download
Another thing to consider in regards to Apple allowing third-party web rendering engines on iOS, aside from somebody needing to take responsibility for the litany of vulnerabilities such a thing would introduce is the sheer size of these things. They’re huge. The Mac version of Firefox is 185MB while Chrome is a whopping 250MB.

Apps start getting annoying to download+install at about the 50MB mark… and are people really going to want ~200MB of their device taken up by something as elementary as a web browser? Don’t forget that a large majority of iOS devices in use today are 16GB models.
copying and pasting to notepad or even the address bar reveals the hidden text.
What is interesting about this is that TomTom is probably in a position to form a B2B relationship with Uber than consumer focused map providers such as Google or Apple. Considering that Google's interest in self driving cars (and Apple's purported interest) makes them potential competitors for on-demand local transport, a contract with TomTom makes even more sense.

Even if a big bet on Open Street Map would have warmed my heart.
Marketing and Optimizing Your Online Business
830 points Submission: https://news.ycombinator.com/item?id=5450410

201 points comment: https://news.ycombinator.com/item?id=4073309#up_4073928
Many hosting providers are choosing to integrate LE into their products directly so even if you don't get shell access you will still be able to get a cert. As far as I know both Plesk and cPanel are also working on official plugins for their software.
First he says copy and paste to save for later.... Like in Notepad?

Then switches to running things in the terminal. We already saw your 'trick' in step 1 when viwed in our Snippets Notepad file...
This is a cool idea! My contribution to anti-surveillance trolling is setting the subject of all encrypted mail to, "Your heroin order has shipped."
My own post was taken down before, so I'm pretty sure some form of censorship exists. I don't know if it's enforced by mods or implemented otherwise, but that's a minor point.
summary: if you're a researcher and spend all your time writing software rather than publishing your research career suffers.

I see three solutions:

1) Have the universities band to together to fund a software source for research. Something that would hire software developers who would provide tools for researchers who were with member universities. Pay a market salary for those programmers and release everything under a sharing friendly license, both for recognition and to aid in reproducing results in other labs.

2) Mandate a single source for all software acquisition through some software consulting company and add riders to all research grants that provide some number of "software supplies" for the team.

3) Get rid of the whole publish or perish paradigm and restructure scientific research so that everyone is accorded rank based on the novelty and repeatability of the research done in the lab.
I used to work in DNS security. DNSSEC is a really bad idea. It blocked us from doing really innovative work that would have protected people.

Lots of really smart folks like tptacek and djb oppose it too. But even we can't stand in the way of millions in NSF dollars and a mission statement.
Yep!

https://www.youtube.com/watch?v=z6i1VVikRu0
No, if it includes a line break it will execute.
No, unfortunately not.

I did a "cat >/dev/null" before pasting so I could see what it was. Clever masked/hidden content, with embedded shell commands and newline to commit the commands.
Is there technical information on this somewhere? How is this different from AWS and from a traditional supercomputer? If I write a shared-memory parallel computation could I just run it on their platform (assuming I've done the work to make sure it can scale), or do I need to use MPI/a special language to make it all work?
So we have two things, X and Y. What happens now is that those get bound together into a single bill, (X, Y), which then gets collectively voted on.

Your proposal seems to be to instead maintain them as separate bills, (X) and (Y), which are still collectively voted on?

If I understood it correctly, that distinction makes little difference since the line-item veto was introduced. It would provide better conceptual separation and to allow multiple bill titles; that's about it. It would basically be the equivalent of introducing modules or namespaces into legislation.
A Boy Who Became a World War II Veteran at 13 Years Old
Spam filters are pretty effective these days, I don't think this is an insurmountable problem.

Maybe something like sending a verification email with a link to a captcha. Not too much of a nuisance to do for one application, but unsustainable for submitting a million applications.

Edit: Alternately, an even lazier idea: Randomly award the grant from the pool of applicants rejected by other institutions.
Won't boxing out competition mean that developers can't trust Apple? Why play if they can change rules whenever?
Anyone notice the theme in the drives that are not power-safe? They all use Sandforce controllers.
Really excited to this Journal come to life. The team at Experiment.com has been working really hard to crowd-fund science and this is definitely a step into the right direction. Science journals are really hard to consume for the general public, and with this, not only can we get small experiments outs of the way for cheap, but we can also get the findings quickly in a format that's friendly to the younger generation. Win-win.
Okay, so why isn't StartupLister sleazy for doing the same thing?
Yeah, I'm really hoping someone offers carrier boards much like SparkFun did with their blocks[1] for the Intel Edison which passed the Hirose DF40 connector through to allow stacking.

[1] https://learn.sparkfun.com/tutorials/general-guide-to-sparkf...
I'm sort of disappointed, I'd somehow hoped for a bunch of places where Chekov was able to correct the rest of the crew.
thats why the process changed and now extensions need to be signed and reviewed.

Firefox stable will not install add-ons from outside the Mozilla add-ons site by default
Discussed a couple of days ago in the "HN now mostly readable on mobile" story. I'm affected by it too, but fortunately dang acknowledged it.

https://news.ycombinator.com/item?id=10536591
Sure, I understand that lack of enforcement is the issue, but technically that is not a loophole.

https://en.wikipedia.org/wiki/Loophole :

"In a loophole, a law addressing a certain issue exists, but the law can be legally circumvented due to a technical defect in the said law"
When I worked at TaskRabbit I made an In-N-Out delivery site (https://news.ycombinator.com/item?id=4306834). It ran for a week or two before In-N-Out got wise and sent a C&D. We found out at the time that they already had a long history of fighting delivery services.

It starts to bring up questions of personal liberty... can I hire someone (TaskRabbit, DoorDash) to do something on my behalf (buy In-N-Out), and act as my agent? And does In-N-Out have any basis for preventing me from doing that?
>> Firstly, I didn't accuse them of cheating. "X-but-not-X", under my understanding of idiomatic English, refers to something that's X in spirit but not technically X, or vice versa. The former was what I was going for. <<

Given your stated understanding, you still accuse them of cheating in spirit.

In ordinary English you equivocate, to have your cake and eat it too.
While I do find it unfortunate that software developers in research are underappreciated, I wonder if making an official title for this will really solve the problem. One issue is that if all you are doing is writing code, you could do the same thing in industry, and there's really no way academia is going to match that kind of salary.

I don't really see the issue with how it appears to work right now though? My understanding is currently if your research requires you to program, then you program it yourself, or collaborate with others. Thus, being a good coder actually helps some people publish more. At least this is what I saw with people in the more practical research topics like systems research, but even in theoretical research.

On the other hand, I suppose this is a problem for people who are not in CS. However, I imagine these people just hire programmers to do the work in the same way they might hire lab assistants. In any case, I'm not really convinced just putting a new title or career track will help.. how is this career track any different from just a normal software development track?

It seems more like the real issue is that you are hiring a postdoc when what you really want is just a software developer, but perhaps they only want to pay post doc salaries?
Interesting way to get DoorDash to negotiate a favorable deal with In-N-Out.
There's more information on the website: http://improbable.io/learn-more
Not a single research believes that CFS is imaginary, even proponents of the cognitive behavioral model of CFS. They say that psychiatric factors influence the illness. Even Wessely himself published a review saying that the immune system was "almost certainly" involved in the etiology of CFS. This "all in your head" accusation is just a strawman.

I think a lot of militant patients incorrectly believe that there is some arbitrary division between mind and body, and that the mind cannot cause physical symptoms (which is, of course, demonstrably false). I think this is caused by a general prejudice against mental illness, as well as a general misunderstanding of how the body works in terms of psychosomatic interactions between mind and body.
Americans in a million homes could be banned from smoking
Turbo Pascal was common before Turbo 'C' in the US as well. I personally was rather relieved to change from Pascal to 'C'. It's possible that that transition helped me to understand how to use 'C' safely.

With Pascal, I recall having to use more assembler.
A tale from Brazil...

A couple years ago we had absolutely no credit here, so the Government created an almost free credit line (from R$160k to R$300k) to be used to buy homes. This is a major problem here and was kind of a good move.

As a consequence of that now every place is very expensive, because everybody has at least R$160k (except people like me that hate to borrow money) so places that went for R$50k (not nice ones) are now around R$250k, nice places that where on the range of R$300k are now around R$700k to a million.

If you saved money before the credit line you are in a bad position now, back in 2007 It was possible for a graduate student to work, save and in a couple years buy a small apartment for R$50k in a low middle class neighborhood, nowadays you can't find anything for that amount of money not even in the really bad places, I am not sure it is the right solution, we just inflated prices and people still can't buy homes or they do and will have a debt for live.

So I like that people have credit to buy their places but I hate seeing prices rise like that for no reason besides "But you can get a loan..."
Also of interest is this table showing prior siezures (by law enforcement and government security agencies, I assume) of nuclear material, including over a dozen instances of highly enriched uranium (!)

http://www.publicintegrity.org/2015/11/12/18849/previous-sei...
Also, just to clarify, you don't have to submit to a bunch of sites all at once, you create a custom list and submit a few at a time.

And most sites are nofollow anyway (or they obfuscate their URLs) so what difference does it make?
A better example could be more vacation should lower stress induced health problems, which could mean lower premiums and less money going into the black hole that is the US healthcare system.
but they are not downloading the JS from the net right? You can interpret python, JS, whatever as long as all the source for these scripts is present in the bundle at build time...
That they fell victim to their own monopolistic goal and its pursuit through secrecy is ironic, given that they initially benefitted greatly from information given freely by others working on the problem.
I hear this a lot too and it blows my mind. How is it a nice thing about DNSSEC that your choice of domain names will have a major impact on your security? That seems like a straightforwardly bad thing.
My idea to significantly speed up web browsers with a HTML “checksum” attribute
https://code.google.com/p/chromium/issues/detail?id=554981&thanks=554981&ts=1447349693

Downloading numerous file dependencies can slow down the web browsing experience. These include frameworks such as Polymer, Angular, jQuery, jQueryUI which are often huge, comprise tens of separate HTML, JS, and CSS files, but are however duplicated across multiple servers, often out of necessity.

CDNs partially solve this problem but there are still numerous competing CDNs, as well as places (e.g. China) where ones' choice of CDN may not work well.

I propose an HTML attribute "checksum" where one can specify the checksum of a file, e.g.

<link rel="import" src="/js/polymer/polymer.html" checksum="44194508fca6f3187c5db3602c72fb03bb6055b8">

<script src="/js/jquery.min.js" checksum="43dc554608df885a59ddeece1598c6ace434d747"></script>

<img src="/images/some_huge_image.jpg" checksum="cb3c80c5d6f14bcd5a134399253c0566951af38e">

Web browsers should then keep track of the SHA1 checksums of all cached files, and if a file with a matching SHA1 checksum is found, REGARDLESS OF ITS ORIGIN, the file is not requested again from another server.

This would further speed up the web experience as we move forward with things like Angular, Polymer, Webcomponents, and other things that are going to have a huge, huge number of file dependencies.
I agree. Software and electronics innovation moves at a faster pace and because of the long validity of patents we have the patent trolls. However for things like medicines, etc the turnaround cycle is longer so its ok to have longer validity.

Maybe the stakeholders should start a discussion about bifurcation of patent laws based on the field, because the one-size-fits all clearly isn't working.
In Our Time (BBC R4) did a recent episode called "P vs NP" [1] which talked about graph isomorphism, and might serve as an introduction to this.

There's an MP3 download at the link. I don't think it's UK only.

[1]: http://www.bbc.co.uk/programmes/b06mtms8
I think some kind of BI is inevitable. But like the gov't has stipulations when it sends federal monies to states, I think BI will also bring with it the danger of proscribing behavior. Ie you lose your BI for violations --whatever those may be, political, behavioral, etc.
surprised to see Zenefits on this list. I thought it was a highflyer.
> are people really going to want ~200MB of their device taken up by something as elementary as a web browser?

s/elementary/fundamental/?

A browser isn't like most other apps -- it's a window into all the things. And don't the stats say that people spend tons of time in their mobile browsers?

Anyway normally this is the kind of trade-off that people get to weigh for themselves. There's nothing wrong with your deciding that it's not worth the 200mb or whatever, but surely you (and Apple) can't speak for everyone who owns an iOS device.