skysight-inc/HackerNews huggingface dataset:
I decided an alternative route: copied the text and pasted it into a text editor first. Shows the attack. So, I think the lesson is to do two things:

1. Copy in a harmless way first to be sure WYSIWYG.

2. Compare the commands against the man page or local docs to make sure they look right.

This is the method I created after someone posted this in response to me using an online cheat sheet for console app. I appreciated that person bringing it to my attention. However, this should knock out most risk in that area.

Other objections were essentially about how one shouldn't use commands from sources they couldn't totally trust. That's a BS double standard easily countered by, "Oh and I guess you don't run any code/binary you get from proprietary vendors or FOSS repositories unless you inspect every line to be sure it's safe?" Hell will both be empirically proven to exist and freeze over before those people's preaching and practices are consistent.
no, they have updated this link with an updated version
My solution is simpler. I just don't have Facebook.
Is Google's End-to-End extension still progressing? Or are they hoping we forgot about it?
Good point. It is important to realize that being too obsessive about security is possible, and to know a reasonable point at which to draw the line.

But there is a difference between the two types of attack you describe that seems to change the rules on the web at least somewhat.

The difference is risk to the attacker. If I start punching someone on the bus, getting thrown off is the optimistic outcome. I could reasonably expect to be arrested, or assaulted in return, possibly fatally.

But if I post malware on the web, the worst I could reasonably expect is that the offending content is taken down, my account with that host rescinded, and assuming I do nothing to conceal my identity, I may become known as the type of scumbag who does such things. I grant that much worse results are possible, but it just doesn't seem realistic to expect much worse punishment, so long as a government or large corporation wasn't a serious victim.

Or so it seems to me. Thoughts?
I am not sure what you mean by 'supposed to' agree to the license. You are correct in that the license doesn't self-enforce, but legally you have agreed to follow the license when you download the code. So, Apple can take legal action to enforce compliance with the license, which is what they did whey they sent a C&D notice to f.lux.

A license can restrict non-commercial purposes, too (as long as they aren't purposes protected by law, e.g. fair use). While it is true that most companies only go after license violators who are using the software for commercial purposes, that is only for practical reasons, not legal.
This the updated and full list:

http://fortune.com/2015/11/12/fidelity-marks-down-tech-unico...
Justin Bieber, Susan Boyle, Carly Rae Jepson
True, but I can understand Apple's position.

Commercial software is unlikely to be a trojan. You have much higher value as a paying customer than as a victim.

Open source software is similarly unlikely to be a trojan, especially if compiled from source.

Closed-source freeware is the perfect attack vector. Opaque and widely disseminated. Who knows what's going on inside? Freeware is responsible for a gigantic amount of malware.
Inside Job Transcript – Final Version – 9.30.10 – Insidejob_screenplay.pdf
> I'm assuming the learner is coming from an imperative language background.

Well, Emacs Lisp is pretty imperative: it doesn't optimise tail calls, so loops are often needed; its distinct namespaces/special-forms for functions and "values" (which includes anonymous functions) makes functional style less attractive in some situations; many tasks are achieved through destructive update of (often temporary) buffers; Emacs itself is controlled by mutating dynamic or global variables; etc.

I would say Emacs Lisp is much closer to imperative languages like Python, than it is to syntactically-similar languages like Scheme, for example.
Any downvoters want to explain?
I agree; it comes down to trusting your source. I trust, say, github and bitbucket, and will gladly copy-paste their commands into my terminal. I'm already trusting them with much more.
Many people in communities can't contribute much work besides moderation or testing.

If you have something that isn't really interesting for hundreds of people, you will struggle to get a handful of working bees. Even less people who will pay anyone to do the work.

I simply can't imagine that there is any real money in "that business" :\
The Story of the Naval Tactical Data System
That was part of his point, right? That bootstrapping and taking funding are not mutually exclusive - you can (and often should) seek customers before funding, and then if you ever want to accelerate your growth, you can always take funding later.
Well that's disturbing (but not surprising) if true (if you haven't opted in).
Glass blowing is a hundred-billion dollar market.
Why Facebook's version of Siri isn't a man or a woman
Wasn't clear - is this feature for Android only? Surprised, as usually FB releases stuff on iOS first...
I'd be interested in whether my script[0] works on Windows, aside from the obvious fact most Windows servers don't have Ruby.

You could also just put a gets on line 43 to pause it before the verify, and copy the generated verify files onto said Windows server from any Linux box anywhere.

[0] https://lolware.net/2015/10/27/letsencrypt_go_live.html
I want a diamond saw.
Are offices of other startups equally "well-spaced"? Seriously, you can't cramp more people on less space or it begins to look like a Chinese sweatshop. I tried to google other startup's offices but I found only pictures of shiny conference rooms. Are they usually similar to this?
> I think we need to be careful about how we define creative contribution; there's a line to be drawn somewhere in there between a creative contribution for the sake of the software (i.e., speeding up execution time by 4x for a simulation running on a cluster) versus a creative contribution that enables the research (i.e., a novel real-time optimization algorithm for electrostimulation). The latter certainly warrants authorship, but I don't think the former does.

I agree, and the distinction you have made is a big part of why I consider the notion of an academic research programmer to be an intriguing idea. I think you've identified exactly the kind of innovation that isn't really recognized or rewarded through the current academic system. Your "former" example, for example, might still require a high level of innovation (perhaps a novel way of splitting up a calculation so that it can be solved in parallel on a cluster), but this innovation isn't really part of the study itself. How do you recognize this as creative work? And even if it isn't part of the study itself, what if this "solution in parallel" was an essential part of the study (i.e.., solution times without would have been so long that it wouldn't have been possible to refine the model to the point of having usable results?)
Good. As a professional photo retoucher, I hate that app.
After raising $125M at my last company, I'm going around talking about how I am bootstrapping this one, no doubt to raise attention and create interest and demand for the business -- it must, after all, be hot.

Whatevah.
I did the same thing for three years, and really didn't regret it. I reactivated Facebook after I realized I had lost touch with a few people. After reactivating, I think I have a much healthier attitude about Facebook and genuinely enjoy using it in a limited, high-utility way.

I wish the News Feed could be modified significantly, though. It's terrible - so terrible.
Unfollow those people and engage more closely with those who enrich your life.
If the source of the freeware is authenticated by HTTPS, users can make their own informed decisions, e.g. to enter a risk pool with millions of other users whose health has been improved, courtesy of a known developer with no track record of shipping malware.

There are no zero-risk activities, only risk signals. Some people choose to trust a corporation with lawyers and endless pages of EULA, some people choose to trust one authenticated developer with a proven track record of service to the community. At the moment, we are still free to make our own informed choices.
To a large extent, yes, but social media has made faking a lifestyle you don't lead even easier. Anybody with a smartphone and a desire to portray themselves in a particular light can do so pretty effectively with very limited intelligence and skill required.
Towards a Climate History of the Solar System
Could you please clarify if the face recognition is done on-device or if the photo (or some subset of data) is uploaded to Facebook's servers in order to analyse the photos?

Thanks.
What does bootstrapping mean?
Facebook constantly reminds me of Johnny Knoxville on the golf course. [1]

"You said we could come on the golf course, you didn't say anything about air horns, though!"

That is to say, you get permission/consent for one ostensible purpose, and then abuse that consent for something that is technically okay by the letter of the law, but goes way beyond what the user would agree to if they knew why you were asking for permission.

I don't trust that you'll keep this opt-in, as I have no reason to believe it.

--

[1] https://www.youtube.com/watch?v=7C1Pr4AU2wc
The thing is, if you came to me and said "I know everything in this book", I'd say "so let's save money and buy the book instead of hiring you."

Interview questions are an opportunity for you to show what you are worth. If you're worth less than a book, it's not a good sign.
Xen virtualization disables P2P copies ergo GPUs have what we call a "failure to communicate and some GPUs you just can't reach (without going through the CPU that is)."
Yeah, different values lead to different conclusions.

If married to proper waste management, a chicken factory -- with chickens packed into tiny little boxes, egg production per calorie maximized, chickens discarded the moment their egg production drops, bred to mature as rapidly as possible -- is probably to most environmentally friendly way to produce eggs. You minimize land and energy use and human labor as well (humans have environmental costs, after all).

On the other hand, if you care about animals more than the environment, it's probably the worst possible way to raise chickens for egg production. Instead you want to maximize chicken happiness, you probably want small flocks free-ranging in a safe pasture-land, with chickens allowed to live out their dotage after the egg production has waned. This, of course, will require far more land and other inputs. You'll even have higher transportation costs, since you'll need to accumulate eggs over a larger area.

So would you rather have a chicken factory, a hundred acres of corn, and a thousand acres of wilderness, or 1100 acres of happy chicken pastures?
Others here have asked whether enabling this feature would mean that non-shared photos are uploaded to Facebook's server, when they haven't been shared and wouldn't otherwise be uploaded. Does it do that?
Responding to your edit, "We certainly won't win this battle by trying to teach them information theory (good luck! :) )":

I think your goalposts are shifting here. A simple example that is easy to spread and easy to demonstrate sounds at least plausible. It certainly doesn't sound to me like teaching them information theory, it sounds more like a challenge: "How will your laws prevent me doing this?" Perhaps they'll block Twitter too?
Ditto. I never installed the messenger app. I would use the facebook app for browsing, and logged into the web app for messages. But then I realized I can do all the stuff in one place, the web app. So I uninstalled the main app as well.
WKWebView != Safari. Safari is built on top of WKWebView. Likewise, Firefox is build on top of WKWebView. Firefox is not built on top of Safari, so your Safari skin statement is incorrect. Its called mobile app development, you work with the APIs provided to you by the OS. Attempting to write your own low level networking and rendering libraries that bypass those provided by OS will simply mean your app is not released on the app store. Should Mozilla not release a browser on mobile cause as its not 'true' to your definition?
Long One Shoulder Dress
We didn't have a cliff so it was only 3 or 4 months of work.
So according to that (or a quick skim thereof), it's not the overall colour temperature, but the intensity of absorbed light in the ~480nm range.

In other words, dimming the screen should be at least somewhat effective.
It's not about "safe places" (a concept that I am not a fan of, btw), but about raising the level of interaction. See: https://en.wikipedia.org/wiki/Paul_Graham_(computer_programm...
That correct. I use the web app as well. It works pretty well.
Just exactly how do a series of market driven consumer decisions lead to a public platform? Republics like the United States and most other liberal democracies are founded on social contracts that have never been dictated by the kind of corporatism that you're describing and in fact have always rallied against it.

Even the traditionally held conservative commentators like Edmund Burke railed against things like the British East Indies Company and warned against "corporate tyranny".

That the State ought to confine itself to what regards the State, or the creatures of the State, namely, the exterior establishment of its religion; its magistracy; its revenue; its military force by sea and land; the corporations that owe their existence to its fiat; in a word, to every thing that is truly and properly public, to the public peace, to the public safety, to the public order, to the public prosperity.

What you're failing to recognize is that we've already given companies like Facebook a public platform through our system of corporate legal structures and more obviously though things like network neutrality.

Facebook, like any corporation or any faction of private interest, will take as much territory as it is possibly allowed. It is up to external checks from a government "of the people by the people for the people" to regulate and contain these factional interests.

Federalist #10 does a much better job with the discussions related to factional interest than I could ever hope to fit in to a comment box, as do the writings of Paine, Jefferson and, I really can't recommend him enough, especially to the economically minded, Edmund Burke.

Also, all of the discussion and legal precedent around the anti-trust laws are very pertinent to any discussions of the limits of corporate power.

And yes, in case it isn't clear, what I am arguing for is a form of conservatism, but a form not predicated on dogma. Think Chesterton's fence.
Why? It even has a feature to turn it off for doing color sensitive work.
I'm pretty disappointed you guys are missing all my jokes. Someone got called out for name calling in a discussion about the problems with political correctness!
Lol. The polynomial hierarchy would collapse if GI was NP-Complete, but all efforts to prove that have failed. If anything, the distance from P to NP is growing.
This is not a programming issue, it is a health issue.

I understand the challenges in the way the policies are set up, but again, this is a health issue that needs to be addressed one way or another.
As someone who is bootstrapping without a lot of personal capital to fuel operations, I have a hard time relating to this post.

I almost want to invent another category for bootstrapped startups that have access to large amounts of personal liquid assets.

Just think of the difference in strategic moves available to you if you have $1MM vs $10k to throw at a problem.

Having said that, I applaud his efforts to try things differently, and even agree with a lot of what is in there.
Looks interesting however the first thing I did after launching it was opening preferences which caused an immediate crash with no error / debugging message or anything.
In fact, this plan's only purpose is average-citizenry monitoring. Terrorists and child pornographers already have such an understanding of how to use crypto (or how not use electronic communications at all, like Osama staying offline most of the time -- this is also what mafia bosses do, btw) that they will be completely unaffected. If that weren't the case, bombs would be going off every day all over Britain, and they just don't.

The Snooper's Charter exists just to keep uppity citizens and low-rent drug dealers under control.
Exactly, it wasn't a research project. An engineer needed to solve a problem. He happened to work in a research institution. Had he been a researcher the web wouldn't have happened.
Nuevo logo oficial de Radio Fiesta 24/7
Ask HN: How do you handle coding tasks for interview
It's that time again and i'm applying for jobs.

First perspective job has a coding exam, foobar! I never seem to do well in these, just ties my brain up in knots.

How do you guys handle programming tasks for interviews, where they should only take a predetermined amount of time?

I'm half way through my time on this task already and I haven't even touched the unit tests.

It seems that anytime I get one of these tests, I spend far too long digesting the problem, far too long planning, far too long coding up first the first half.

That brings me to about half way through my allotted time and then I start to panic.

I feel useless. I mean don't tell me a future job is dependant on the interviewer liking my code or that there is a clock running. I've been able to break out more complicated tasks in less time, it's just when there's this whole judgement thing going on I get fired. Mainly because there is a million ways to do something..

Funny thing is, that any time I go into a new job, it was without prior coding and I exceed their expectations :/
Mac Store Certificate Expiration Causes App Reinstalls
If it still sounds a little creepy to have Facebook looking through all your photos, especially as you take them, you are basically left with two options: You can turn off the send-to-your-friend notifications, and you can turn off Facebook's facial recognition feature.

Or, you know, ditch Facebook, since this is far from the total extent of their creepiness.
Nice press release but effectively meaningless most likely. The US doesn't even need to go to the courts at all to access the data now..

http://www.spiegel.de/international/world/snowden-documents-...
Can you give details? If it's with the open driver stack, I may be able to help. Contact me at username at gmail if you like.
But STARTTLS is a step backwards because a MITM can disable crypto by not advertising STARTTLS
Google Self-Driving Car Pulled Over for Going Too Slow
Here ya go: http://getrather.com/
I usually don't get annoyed at fans wearing rose-tinted glasses (aka fanboyism), but I feel that people sticking up for Apple here is some variant of the Stockholm syndrome. We're heading for a world where advanced users might not be allowed to interact with their devices because They (et al.) Know Best. Protecting knowledgeable users from running arbitrary code is generally a pretty solved problem. There are layers of trust in the system, and human connections that keep the system alive. This delegation of critical thinking to Apple is an unfortunate path.

P.S. I say all of this as someone who has recently converted to iOS from Android after many years of loving Google Nexus devices, and wanted to see what the integrated design of the iPhone 6s Plus was like. I absolutely don't support ANY of the major technology companies as people who won't do the wrong thing so that they can make more money. They're all self-interested actors! We should never forget that. They can be just as evil as big oil or the textile industry.

EDIT: to fix phrasing and the omission of a couple words
What would happen to USDS federal government employees with a two year contract?
Having worked as a SWE at both pure academia (as the engineer implementing for researcher-driven projects at a university) and in a similar position at a bigCO, there is certainly more "software chops" at the latter, but the general sentiment of the research types being far more competent at research than at code is not necessarily unfair. However, the "developer presence" in these groups is much higher, (and what is expected of even the pure research folks) so it's not quite as stark as outside industry. Still a different world from the pure SWE teams, however. The intesting thought I'd add to this is that the problems don't always manifest as "bad code". Things like measuring tradeoffs and compromises are not always as well thought out in the research teams. (I'd mete this statement slightly, to say that researchers have very different mental models for what tradeoffs to make in development from someone with a pure developer background, and this is not always bad, just evident.)
It would be ridiculous for a bad swimmer to blame the creator of his or her swimwear.

On the other hand, a bad swimmer might be pretty upset with the creators of his or her boat, if hypothetically the goal is to stay out of the water.

It's just possible that it depends on what you expect from the device when you buy it.
More comments on earlier-posted version:
https://news.ycombinator.com/item?id=10553025
-Enrique Diamonds -
MBrace: .NET engine for large-scale data processing
Why don’t more women work in cybersecurity?
He's more interested in being exciting and controversial than being accurate. However, it's not a bad broad-brush picture if you don't look to hard at the details.

The thing is, it really is hard to predict the future. For example, when the microprocessor appeared, we all said Wow, we can all have a PC! And the mainframe is dead.

I don't think anybody said we'd be papering the world with giant server farms based on microprocessors, or that most of the Fortune 500 would still be running on mainframes 40 years later.
Outlawed? Just because one vendor sells a non-general-purpose computer, you feel like general-purpose computers have been outlawed? I don't understand.
As it should be. The whole system is underpinned by the assumption that no one can cheat. Everyone knows tons of people cheat, but any university who has a "n-strike" policy for academic dishonesty (aka fraud), is purely in it for the money. To students who busted their asses to graduate legitimately, it's a hard slap in the face.
Someone building a web browser for 4 years has definitely come across some negative criticism by now. The best criticism we can offer him is that which is constructive.
> Should we outlaws sugar and high fructose corn syrup ?

Did you just compare diabetes (which is a real illness) to marijuana induced problems? One is not your fault. The other is.

> other drugs and alcohol would obviously fill the void:

RIGHT! The bttr reason to legalize another drug because illegal drugs would fill the void.

> alcohol

Nobody thinks alcohol is not a serious problem in this country. And you mister high flying pot smoking moron would like to introduce another problem. Way to go!
Ah, I see. My sarcasm detector wasn't calibrated well enough.

But HN does have guidelines against name-calling. None against any particular ideas, though. HN "censors" harsh attitudes and personal attacks, not ideas that are "unacceptable". So it's not particularly like political correctness.
Isn't their OSX app signed with a Developer ID certificate? If a relevant person at Apple has their feelings sufficiently hurt by f.lux for iOS, they could revoke said certificate.
Do you wear the blue blockers while you sleep, or during the day?
Almost everyone assumed you were talking about the object of your objections: DuckDuckGo.
That's the default header created by Xcode when making a new file, I didn't add that on purpose. I suppose I should go through and get rid of those lines.