skysight-inc/HackerNews huggingface dataset:
If we were going to rank our priorities, they would be in this order:

1) Make mass surveillance impossible.

2) Stop targeted attacks against crypto nerds.

It's not that we don't find #2 laudable, but optimizing for #1 takes precedence when we're making decisions.

If you don't want to use your phone number, don't use it. You can register with any GV, Twilio, Voicepulse, or other throwaway VoIP number.

If you don't want to run Chrome, use Chromium instead.

If you don't want to use Google Play Services, use GcmCore.

The world you want this software for is not the world that everyone else lives in. You can certainly make it work in that world with a little effort, but because of how we've prioritized our objectives, that's not the default experience.
Thank you for the additional information!

My guess is that they would not fall under the 2. category if the spouse continues working, so that they may not be eligible for it then.
The 1. category would not be an option for them, as they are all Korean/Korean couples. However, I will pass this on to my friends just in case they weren't aware of the 2. category already, as the high day care costs topic has come up quite often.
The first letter of the newspaper is clearly an upper-case eth, not a d.. Weird mistake for a researcher to make!
Wow, that looks fantastic! I was looking like something like this for ages.

Some feedback though:

- As an independent developer, pricing is important to me. It was very difficult to find pricing for the Watson APIs (apparently it was in Bluemix?) and if I wasn't a little more determined (thanks to the ability to train my own classifier), I wouldn't have persevered.

- If I already have a wealth of labelled data (I do), it seems difficult to train a new classifier for the Visual Recognition service. If I have 200 000 images each with an average of 20 labels (from a set of ~2000 labels) for example, the positive + negative sample per label is very time and bandwidth consuming, as I have to train 2000 classifiers using ~ 5000 images per classifier (for plenty of training data), for a total of ~10 000 000 uploads. It'd be far nicer to be able to upload a folder of JPEGs with a JSON blob per file containing labels (or a classifier name) and have Watson derive positive and negative samples from it.
Funny bug in Android granting dangerous permissions
finally a reasonable response. why change things when we can not
The android app already requires Google content manager to be installed, which is probably why the beta is android only. so its no different from the mobile app really.
> Why are all these encrypted chat programs (Signal, Telegram, &c.) still centralized and not TOR-style onion-routed?

https://blog.torproject.org/blog/tor-messenger-beta-chat-ove...

> Tor Messenger builds on the networks you are familiar with, so that you can continue communicating in a way your contacts are willing and able to do. This has traditionally been in a client-server model, meaning that your metadata (specifically the relationships between contacts) can be logged by the server. However, your route to the server will be hidden because you are communicating over Tor.

That is essentially what happens with Signal and every other service as well.

No metadata, truly anonymous communication between trusted parties is an unsolved research problem.
Kudos for this great, yet simple and lean toolchain!

Anyone familiar with command line tools and a corresponding aversion for bloated WYSIWYG apps will second the underlying idea that MS Word (and the likes) “should die” in favor of plain text workflows.

Yet, with the help of Pandoc (which does the heavy lifting in these boilerplates), nothing prevents you to keep using Word as a front-end and plug it in this exact same workflow. Word may not be the best-of-bread typesetting engine or layouting tool, but to many it still is useful as a quite decent word processor.

For those interested, I did a (long-read) write-up on how one could go from Word over Markdown to even InDesign (as an alternative templating/typesetting engine, instead of LaTeX/XeTeX): http://rhythmus.be/md2indd/
They can pivot to selling their technology to company that doesn't want to the expose their data to public cloud providers, or become more like a consulting company for customized vision technology though.
Isn't Chrome app a standalone app which doesn't run inside Chrome browser, but instead only uses its engine? I don't know anything about security or privacy implications of using this tech though, anyone care to comment?
> The ethos of PHP is to just get stuff done

I never understood this standpoint. I hear this from the Go community sometimes too. Wouldn't having some sane organization of functions make it easier to "just get stuff done"? Just like in Go, wouldn't generics make it easier to get stuff done?
Spreedly for classic applications
Thanks for the advice!
See comments on https://news.ycombinator.com/item?id=10665113 as well.
Ah, yeah, I hadn't considered the normal usage.

Most people don't realize how much these vulnerabilities have in common, in the abstract, until you frame it like that.
Anecdotally (~4 years), the vast majority of Koreans I've met detest the work culture here. Whether it works best or not will not be the deciding factor, I'd think.

Many of the strict changes will likely be from the start-up world that make their way up as they are doing now. However, you're probably right particularly regarding vacation time and time worked. I've worked and have friends working at start-ups that, while are relaxed about other parts of company culture, still remain fairly antiquated when it comes to those topics.
> I tend to repeat the 'central server' and 'a phone number is not an address and not public information, it certainly is no identity' criticism.

Your phone number is not your identity in Signal. If you change SIM cards then your friends won't notice and the app works as before.

Signal is based on asym encryption - your private key effectively encodes your identity in combination with your public key.

> And only if the first client is Android?

There is no point in dwelling on that. Android and its syblings are the only potentially secure popular smartphone OSs. Apple and Microsoft OSs are fundamentally flawed in that regard.
Man, that example CV is beautifully simple. It's so weird to see a CV that's not peppered with acronyms.
If someone was able to come up with a native equivalent, would you support that level of access or is that something you'd oppose?

It seems to me, at least, it might be possible to do so if the API was consistently exposed and versioned.
Signal's objective is to make mass surveillance impossible. Telegram stores the entire plaintext transcript of every user's entire conversation history server side by default, so if that's the objective, Telegram is definitely not "good enough." Just the opposite, there's nothing worse.
Simple, customizable and distraction-free writing webapp, runs offline
Thanks for answering! That seems to be the common consensus
I'm not drawing an equivalence at all (not saying that Telegram and Signal are equivalently insecure or flawed, etc.) -- I was only asking why would Signal make any compromise on security if that is their main selling point (and probably the only one). I don't think that releasing a Chrome app is a good strategy considering the audience (but I don't know for sure, they probably have a better overview of their user base).

I could have compared it to Threema as well, actually.
Hackers hit three Greek banks with ransom demands-sources
You say a lot of good would come but I think it would just make them more likely to use aggressive adblock countermeasures so deflating their numbers is probably more in line with the best interest of adblock users.
اسماء الفائزين بقرعة اراضي السادات – القرعة السادسة للإسكان – تراخيص
Comments moved to https://news.ycombinator.com/item?id=10665113.
My #1 recommendation is to play along with a youtube "let's play". Otherwise you get lost pretty fast.
I totally disagree. Jerk developer is always a jerk developer. Something more ... I think jerk developers are bad persons. Those are the racists guys/girls, the hotshots, the abusing coworkers people. The problem is in them ... It's not in the OP.

There is no reason for anyone in this world to tell somebody is wrong in a non-polite way . Period.

If you wanna "get back to them" you already failed. The best way that you can solve this is to find a place that doesn't allow people like this to be involved in the business.
Also submitted here:

https://news.ycombinator.com/item?id=10665306

https://news.ycombinator.com/item?id=10665034

Should probably be merged, and themacro.com might benefit from redirecting to the canonical URL :-)
"SSL Added and Removed Here"

Kazakhstan?!
1) The only TLS connections that are let through are all MITM'd.

2) Every other TCP/UDP flow is checked for conformance with plain-text protocols (like HTTP), or far worse, simply for the level of entropy in the data.

3) A threat of legal action is made against anyone caught using secure crypto.

Good luck beating that. The key here is that the "entropy detector" doesn't "really" need to work. It only needs to work well enough to scare people into submission.
Thanks for posting this, I was second guessing that a simple nmap/fing and SSH would do the trick. From there you can set up a VNC and be able to tackle most tasks. Thats what I did on my Pi 2, not sure why it would be different on a zero.
How to Build a $45M Dollar Company in 8 Months (PODCAST)
Yeah I just thought it was worth hammering it home, especially because of some literature's use of "test set" to mean "validation set" which can really throw off a beginner like myself.
The end to end encryption is open source.
dave who again?
I would use node given that your plan sounds like it will involve several distinct JS clients.

I don't actually consider node/JS the most ideal choice for developing good backend habits if back end development was your central goal. But it will introduce you to a JS development process that is a lot better structured than you are likely to commit to when working with JS only on the client side. It will also make it easier to restructure with less of a mess if you realize you need to move between thin/online and fat/offline clients.
Approximately zero is the number of software security experts that would agree with that assessment of Android's security versus that of iOS.

There are a lot of totally fine reasons (shakes fist) that OWS would start with Android; they might all have Android phones, they might have ideological problems with app store review, it might have just been an easier platform to build for. But yours isn't one of the valid reasons.
We merged them. Sorry your earlier submission lost out. We're working on an approach to duplicates that will make it less of a lottery.
Are you referring to OS images? Sure, but only if you want to use something Linode do not provide.

See

https://www.linode.com/docs/tools-reference/custom-kernels-d...

You can also take advantage of Linode's image storage:
https://www.linode.com/docs/platform/linode-images
> As it turns out, a single sentence out of a comment is actually not the entire content of the comment

the key to gd1's entire world view
NSA only knows then that somebody with that phone number is using Signal ... so what?

They would find out anyway b/c your packets are sniffed on a regular basis and so they know your phone is communicating with the Signal server and maybe the packets itself are characteristic.

So in my humble opinion this criticism is irrelevant.
Instagram is having problems
So are Lua and Python and Ruby, but they're not "inconsistent".
Swift has a REPL. On an OS X command line, simply type 'swift'.
8 points in 5 minutes?

If you are asking for upvotes, don't.
Those that can justify the $70 need the software. Those that can't didn't need it in the first place, and probably wouldn't pay $1.99. If it saves me an hour, worth $70. YMMV, and it obviously does.
I thought the Telegram client is open-source, it's even on F-droid. The server side being open or closed source is meaningless:

1. In Telegram's threat model the servers are not trusted.

2. You can't verify server side code anyway.
I don't concede that Signal has made any security compromises. That was someone else.

If you care about security, use Signal. If you care about UX, and Threema has a better UX, use Threema. Threema is a closed-source system that apparently relies on Nacl. That is a much better answer than the one Telegram can give, but it still leaves a whole lot of questions unanswered. There's a lot that can go wrong in the layers above Nacl.
It's not only can be done in theory, it's already implemented in both TOR and I2P. You can't MITM traffic when it's encrypted end2end.

Issue is that cryptography won't help when there is some government that decide to enforce censorship country-wide.
Are you suggesting a leaderless society cannot exist or merely that it is hard to achieve?

As for past attempts, they were communist in name only. If I said the air doesn't exist because I can't find unicorns, that's the level of absurdity that calling a dictatorship a communist society exists in.
Huh? Apple and MS have a record of communicating in sharing data with US government - plus as companies providing closed source software they are likely to introduce backdoors ... also something you might have heard of since Snowden.
Forget new services, even a small change in their existing products by Google can destroy lot of companies. Everyone remembers how they ruined email marketing by caching gmail images.
Instagram app login down?
Just went on IG to find that I got logged out with the error "You've been logged out of cheeyoon. This account owner may have changed the password."

I thought my account was compromised but I received texts from other friends saying the same thing happened to them (on iOS).

Third attempt at logging back in, received error "The operation couldn't be completed. (IGFoundationNetworkingErrorDomain error -1011.)

I can log in and access my account on desktop, just not my iPhone. And only some accounts seem to be affected, as I am able to access my company's.

Couldn't find any report as of writing this post. Anyone have details?
Announcing SystemModeler 4.2: Usability, Performance and Integration
Not Function – self description
The whole thing has smelled like a manufactured controversy for a long time. But then again, most major controversies these days that hit this kind of pop culture attention are manufactured. You could probably dig into this a little and find a media or PR company.
6 acres? A town? Well that's just ridiculous. Just to convey the size, that picture covers well over 6 acres. The white buildings would be the far edge. Not to mention you would need to haul the trashy buildings off to do anything with it. Must be a slow news day..
Indeed, I agree with the policy that if someone can control what's installed locally, they've already won.
> I think everyone intuitively knows.

Confusing intuition with the truth there.
It's similar on Linux. Every time I'm trying to get some outside-written Python software to work, there are many, many troubles.

Python works fine, in your own virtualenv. Outside of it... not so much.
The text could include more info on vesting schedules and some examples. It's surprising how many professionals still never heard of vesting schedules when joining a startup (specially outside the US), and as influential as YC is, I bet a good explanation there would be very helpful. "Vesting or no company at all :)"
Dump the word founder. If it takes seven years to build a company, then after seven years any employee is also a founder and should have equal share.

Please use the reply link, oh, wandering downmodders.
They can focus on selling their product to EU companies, with the guarantee that the data never gets into the hands of NSA, GCHQ, etc?
Same! I also panicked haha!
I'm making an engineering point, and you're making a conspiracy-theoretic point.
Ask HN: Best big group [board] games
Hello,

Partner and I recently decided to get married, and that the wedding will simply be a large group game and a non-ceremonial "Signing of the Documents". Most of our friends are geeks and board-gamers, so complexity is a plus. I'm having a hard time finding a site devoted to such an activity, mostly games for campers and the like....

All recommendations are appreciated, thank you :).
AKA, killing SEO by using Angular wrong.

We are using react, but the problem is the same. Thank to server-side rendering, we are perfectly comfortable with our microdata implementation, and have push 15+ million pages into Google search map.
Which is why the data from ReCaptcha and NoCaptcha should be public domain – it was created by society, it should be usable by society.
Agreed, this is my preferred way of learning.
If you fall asleep almost immediately after going to bed, it's a sign that you need to sleep more. According to a lecture by a professor in sleep I watched many years ago when Google Video was still alive.
Your lawyer is going to set up your vesting schedule for you, so all you really need to know is "four year vesting, one year cliff, vesting monthly after the cliff".
I would say so, yes. I'm sure the ratio could be higher but women are well-represented nonetheless.
Impressive musical presentation of what would otherwise be random noise. If the duration of the notes was constant and the chords were left off this wouldn't sound like anything remarkable.

This reminds me of the article on recurrent neural network composers I saw on here awhile back. They were able to produce music that sounded quite good in short sections. Over the longer term, though, it was easy to see that they lacked what makes any sort of music interesting and artful: recurring themes and movements. The music superficially sounded pleasant, but was ultimately not that exciting to listen to because it lacked emotion.

Being able to make note transitions sound nice is one thing. Finding classical music in an irrational number is another. We'll sooner find lizard men in the rocks on Mars.
How to Use SSL with Your Domain on Shopify
gd1 posted the actual empirical sea level data which shows clearly that sea level is not rising as significantly in this region as is claimed. You then called him a crackpot, an ad hominem response. Your denialism in the face of actual scientific factual data is more likely to be the crackpot science-denialist position.
Show HN: Create collaborative radios and let people choose what will play next
As far as I'm concerned, the discussion I'm referring to started with this comment from realharo: "Usually if you need a bunch of differently-typed objects to fulfill the same contract, you can just make them implement an interface".

The way I understood that is, if you have a f(a: A), and need to pass it a B and C, neither of which are subtypes of A, you can just create a new type D, have A, B and C extend D, and modify f to expect a D. My point was that it's not always practical nor even possible to do so.

A type class would be a good way to abstract over the type itself and simply require a specific behaviour, but by the time you have f(a: A) where A is a concrete type, and you can't modify f (because it comes from an external library, say), it's too late to retrofit type classes into it.

As for your other point - type classes being awkward when you have multiple possible instances for a given type - I agree, but must say that I'm spoiled: my primary use of type classes is with Scala, where they're just, when you come down to it, parameters to functions. You can let the compiler infer them when there is no ambiguity, but when you need to pass an int to a function that expects "A with a monoid", you always have the option of being explicit about which monoid instance to use. I believe Haskell treats them as implicit parameters as well but without the option to pass them explicitly.

Finally, I'm afraid you've lost me with your last bit - reifying the instance we care about and passing the dictionary as a record. I wish I had something smart to answer, but I'm not sure I actually understand what it means. I know enough Haskell to be able to be able to read it (a necessary skill if you have even the slightest interest in FP), but not much more than that. Maybe if I knew more I'd have a clearer understanding of what you mean?
Because they are no longer 'client-side' frameworks, in the strictest sense of the term. Server-side render is kind of de rigueur these days.
That's a fair point, but there's nothing stopping you from wiping the OS and installing Linux, either. I'm limited to Windows for work reasons, otherwise I'd have gone that route myself.
Two potentially helpful resources to share that might help explain Vesting Schedules to folks:

https://capyx.com/cap-table-guide#vesting

https://capyx.com/vesting-calculator

Full Disclosure - I am a co-founder of Capyx.
(I'm the author.)

I don't disagree that the amount you learn and how well you understand it might accelerate as you advance along the learning curve. My post was more about the "practical" side of knowledge: often knowing 1% or 5% of what an expert knows gets you 30% or 50% or 80% of the practical benefit. The specific numbers don't matter -- only the order of magnitude difference between time invested and value extracted.

As an extreme hypothetical, consider three sales people, one with 500 hours of experience, one with 5k hours, and one with 50k hours. Each order of magnitude in experience might represent an order of magnitude more knowledge/learnings. Or maybe even more! But I doubt that the person with 50k hours of experience closes 10x more sales than the "5000 hour" salesperson, and 100x more than the "500 hour" sales person. It's probably more like 2x and 1.1x, respectively. (Or maybe 5x and 3x... but nowhere near 100x/10x.)

You're right about my 30% estimate though -- it's just an estimate, and quite possibly a sign of naivete/overconfidence. But I do think knowing some of the basics -- even if the knowledge is just through books and shadowing a few sales calls -- would put me ahead of the average person who never learned anything about sales.
At the risk of repeating myself, North Korea isn't communist. You can't have a communist society if you have leaders. There is practically nothing that resembles communism in North Korea.

Let me put it to you like this, any society that doesn't put shared ownership of the means of production at the top of its agenda is not and can never be communist.
Ask HN: Client wants contract enforcement in their state. Red flag?
Hi guys,

I'm in the negotiation stages with a freelance client for a sizable job. I presented a contract to them in which one of the terms is that the agreement shall be interpreted and enforced in accordance with the laws of the State of California (my state). They asked me to make a few changes in the contract, one of them being changing the state where the agreement is enforced to Florida, which is the state where they are and their new company is incorporated. I'm not a lawyer and don't think it's worth paying one to figure this out (I'd rather walk away at this point). Do you think this is a red flag? Or is it customary to ask for this? Do I have to go to Florida if there's any sort of dispute?

Thanks!
6 Digital Tools You Need Now
Ok great, and no worries :-)
Scientists in Japan create touchable holograms
The really crazy thing is just how much more massive the scale of the war on the eastern front was. Some of the Luftwaffe fighter aces racked up 100 or 200+ confirmed kills, primarily against the Soviets. Other pilots who flew close air support on the Eastern Front flew thousands of combat missions, destroying hundreds or thousands of tanks, artillery pieces, and other vehicles.
No, you're likely thinking of Electron[0]. A Chrome App[1] is a browser extension that tries to act more like a native app.

[0]: http://electron.atom.io/
[1]: https://developer.chrome.com/apps/about_apps