skysight-inc/HackerNews huggingface dataset:
I am also one of the novelty-seekers.

As you mentioned I do really have 'ton of tech debt'. I hope I could change my behavior and reduce my tech debt.
You shouldn't consider government inefficiency a flaw. That's by design. If you have a government or a brain that makes decisions quickly, you might not have time to backpedal on seemingly good ideas that turn out bad.
Great big slabs of Google Cloud Platform are opened-up versions of formerly-internal Google tech: BigQuery, BigTable, Cloud Storage, Datastore, etc.
If you issue cookies to www.example.com your browser will not send them to cdn.example.com unless it's very poorly written.

Each cookie has a path set to it and browsers will obey it, this includes inter-domain paths and restrictions.
If you want you can go even further and assign a cookie to a specific URI path so the cookie will only be issues to pages that fall under www.example.com/private/ for example if that's what the path is set too.
The only thing that prevents manufacturers from offering software updates for 10+ years for computing devices (they could even make it automatic!) is a lousy business model that depends on planned obsolescence.
Get rid of the need to turn your head (e.g. turn it into an extended map with the active screen still centered), and you could do some interesting things with this and adventure games like Metroid or Zelda. Imagine playing the original Metroid but being able to zoom in or out Google Maps style to show more or less of the world around the current room.
Maybe he thought your comment was under the WTFPL? Hooray Anarchy!
Microsoft could fix the root problem for classic Windows applications (majority are WinAPI based applications). All apps should run by default in a sandbox container, then no Antivirus product would be needed (see Android, iOS, OSX). Windows would need more fine control permissions UI to like iOS9/Android6 so that only certain applications can access e.g. your picture folder. Windows already supports shims and shadow path/registry retranslation (used in IE and in the backward compatibility layer) - all what is missing is basically an end user GUI. Also executing applications under a different user should get easier, a common Unix security measure that is near impossible for normal users using Windows (except for whitelisted Microsoft Office applications).
Automatic (YC S11) Is Hiring a Principal Server Engineer
Best explanation till now...
Jon Stewart wasn't worth it

This is the key takeaway here
ReadTheOrg, Read the Docs Style Formatting with Emacs Org Mode
I don't know about that specific picture (just searched for "IE view certificate" and looked for one that I recognised) but it was there in 5 and 6; I haven't used the newer versions of IE enough to encounter any certificate errors, but a quick search shows that MS did break this functionality:

https://social.technet.microsoft.com/Forums/ie/en-US/e0ec441...

http://www.dslreports.com/forum/r24594731-IE-How-do-I-view-c...
I won't be surprised when human level performance is surpassed, but isn't that paper based on work that has the advantage of knowing the full test dataset in advance? You can say "yes but they only trained on the training data" but that doesn't rule out tweaking across several experiments and measuring them against the known test data, then cherry picking the experiment that was best overfit to that data, right? I'm not saying there are shenanigans here, just wondering how you know there are not.
Internet pioneer Vint Cerf on the future of technology
There are many high profile websites that use the cookieless domain approach: Google, Facebook, and Reddit off the top of my head. I wouldn't say they are poorly written - it's more of a design decision to have cookies in the top-level domain.
Like Spark? http://sparkjava.com
They have a example site, if you scroll to bottom or visit
http://uloga.github.io/socialicons/
you can see examples.
Firewalls usually inspect IPs, ports, and processes when deciding to allow or block, but not packet contents.
Twitter warns some users of possible state-sponsored cyber attack
Can someone familiar with this kind of stuff lay out a few benefits of learning this material for a practicing programmer? I'm quite interested (since I've heard a lot about Coq and Pierce) but since there are so many things to learn, I want to prioritize appropriately.
That's not going to work if everything runs via https.

How exactly do most ad-blockers work? Are they searching the DOM and blocking elements from showing? Or can they see that there are asychronous requests being made from JavaScript to known ad networks?

I'm musing out loud here, but take for instance the Sydney Morning Herald - the sheer number of trackers is extraordinary. The full load of just the main page, and images are reasonably light, is about 8MB... and there are literally dozens of trackers.

How do ad-blockers prevent these from appearing?
> Also executing applications under a different user should get easier

I'm curious - are you looking for something more command-line oriented or GUI-driven? I have no idea how to do it via command-line, but shift-right-click on an icon will give you the Run As Different User option. This may also not satisfy your needs - it only works for some users (i.e. you can't do Run As DefApps)
A Chinese favela. There are still places that are like Kowloon, in many ways. (http://www.pulsamerica.co.uk/wp-content/uploads/2014/03/fave...)
> Who actually believes these things anymore?

I find them useful. You can often filter for people trying to rig them. For example have a look at the reviews for the film in question http://www.amazon.com/product-reviews/B017V4J3NC/ref=acr_sea...

You can tell a) the films good b) it's now biased positively (5/5) as the negative ones have been deleted and everyone is voting 5 to stick up for it. It's probably really a 4.5/5 I'd guess.
>but I could be wrong

You aren't. Concurrency is a code-design/code-meaning issue. It has nothing to do with runtime execution. For example nice concurrency primitives lets you avoid callback hell.
Not quite. Apple's Irish entity owns the IP for non-US sales only. US sales fall under Apple Inc and are not subject to IP transfer, royalty or licensing and therefore attract the full tax rate. Minus whatever incentives apply of course.

What's actually happening is that Apple (and other companies using this system) are paying significantly less tax in countries outside the US where they operate.

This arrangement arguably benefits the US government, as it makes US-based companies stronger at the expense of the rest of the world's tax revenues.
I didn't say the sites would be poorly written, the browsers would be if they do not obey the cookie set domain and set path restrictions.

And the fact that big sites use it doesn't mean that they were "well written", Google mostly issues only tracking cookies for wildcard domains like .google.com as far as private cookies go they usually would be issued for each domain individually (play.google.com etc.).
Issuing authentication cookies to wildcard domains and root paths isn't advisable even if some big sites do it doesn't mean you should take it as an example :)

P.S.
I really hate "Google and Facebook are doing it" as an example, even if they are you most likely aren't either of them, not even close they have quite different considerations than you.
Even when they do things which aren't best practice or common sense it doesn't mean that you should decide to take the same path, both Google and Facebook have plethora of ways to ensure account security including quite decent activity heuristics, they have many ways of detecting attacks such as XSS, and they have most likely a much better process of ensuring that vulnerable pages do not go live or do so quite rarely.
Unless you can say the same then do not use them as an excuse, you do not need to issue cookies to wildcard domains and you can restrict them to certain paths, and you better do so because you do not have many other mitigating controls in place as the big players do.
China Technology Innovation Comes of Age
Awesome for 83% saving
Haha... I have that _exact_ pedal on my board. Overall, not bad if you want something cheap... Couple of complaints: Things get muddy fast, you really have to pair it with a compressor to control your input volume for things to be any good. Next, there's a massive volume difference between the hot and warm modes. You can't flip between them without need to adjust the volume knob. Finally, there's a distinct lack of bass in the "hot" mode. Other than that, it's not terrible, just don't expect a ton and it's not too bad!
I think we'd all accept the odd ad. But that's not what is happening. We are being systematically tracked as we browse content, and the amount of advertising and tracking we don't even see if mind-blowing.

I'm not at all surprised that most people want to opt-out of being stalked :-)
You can use the runas command to run something as a different user. Or one of the sysinternals utilities.

Haven't used it much personally though.
That is pretty cool. I suppose the "8-player" does not mean simultanioues 8-players but probably 4-player max what the NES can do and there is some multiplexing going on (using an Arduino) so you can have more people round the table for crowd control. Ah, yes, found the setup diagram:

http://cdn.arstechnica.net/wp-content/uploads/sites/3/2015/1...
Your information portal for remote work
Awesome news and must read it...
<a href="http://www.hcndaytonnews.com/"> HCN Dayton News </a>
A thousand times this; I've been working on compiler-y things in C++ for the past couple years, and I am firmly convinced that the visitor pattern is a truly inadequate way to attempt to compensate for the lack of a proper destructuring pattern-matching construct in a language.
How about this instead? Plugs into U-Block Origin: https://github.com/reek/anti-adblock-killer#instruction
Physical explanation of Dijkstra's algorithm (2011) [video]
Top Google search in CA with the word “Muslims” was “kill Muslims.”
I couldn't stop myself from reading the GNU GPL section in Richard Stillman's slow paced voice.
A lot of technologists here have certain dreams or aspirations they want to see materialized in their lifetimes. AGI, transhumanism, space colonization, etc.

My dream is that I hope to see the emergence of a viable minarchist or anarchist society (beyond Mennonite and kibbutzim arrangements). Thus far the closest was a brief period of Catalonian history amidst a civil war.
There are many reasons. One old reason is because your browser will only make so many concurrent Connections to one domain, so this spreads the load. I'm not sure how many concurrent resources they will download nowadays though.

Another big one is security of cookies and data, like you mentioned. Most of the time CDNs will return an access allow origin * header. This is literally the worst thing you can do for security of your users if they have a secret cookie. A different domain minimizes the risk of making a mistake to zero since it is completely separate, and is easier since you don't need any nginx funny business proxy passing to a server with static assets with a location directive.

The allow access origin * is a death sentence that breaks same origin policy if you make a mistake.
The biggest unanswered question is how does it sound?

You should resize the pictures before uploading - I was wondering why they took so long to download, and realised each one was >4MB! The full-resolution version is not that much clearer, they are 15MP but look as though there was a watercolour-like effect applied to them.
>0.6GH/W

3.65 GH/W: https://bitmaintech.com/productDetail.htm?pid=00020151117034...

There are some others at ~1.6 GH/W, which is the inverse of 0.6 W/GH, so I'm assuming you just got the units backwards.

This is a next generation facility so it's probably closer to 3.65 than 1.6 (if not >4), but even 1.6 would put it at 64 M GH/s, which would be a ~10% increase. 3.65 is 22%
I began reading this article hoping for some speculation on the spectrum, and in his words, "the politics of light". I was mildly disappointed that instead of analysis of the ownership, usage and/or pollution of the spectrum, the article built up to an art installation of Fraunhofer lines and redactions of FOIA-requested documents superimposed on a rainbow.
Glad I don't live there anymore (for many reasons).
Baidu also claims innovation is their source of power (or some crap like this).

Even though it's most famous for showing fake hospitals' ads for 1000 Yuan per click.
It is possible. Not sure how, but my school used to block all ads because of the limited bandwidth available. 50Mbps divided among ~1500 people with atleast 100 using it any given point.
They can try to serve me spam/ad content along with the rest of content they provide, but I am not obligated to read it, nor is my browser obligated to display it, any more than I am obligated to read the contents of my spambox (even if some of that spam is coming from companies whose services I use), in the same way that I am not obligated to read every billboard on my way to work.

Companies post ads because because they believe that some people will read them, and that promise is enough to generate money. That valuation is between them and the clients to whom they are selling ad space, and places no obligation on me. If at some point that business model becomes unprofitable, they can pick a different one.
They usually bind to events the browser triggers before a network request is made. This lets them literally block the browser from downloading any content from a source that may register your IP just from the connection (pixel tracking, etc). Searching the DOM and removing elements would still require a network request to obtain the content before realizing that it's a tracked element.

By blocking the request from happening, we can truly say that an Content Blocker on iOS (for instance) speeds up the browsing experience because the request isn't even initiated.
You have a "sign in with google" option. Can we get others? (sign in with Github would be nice, that is the nexus of all my dev related stuff and use it in a bunch of other dev related services.)
The sperm trees of LA
It's funny how things like this seem so ... having trouble finding the word ... "meaningful" ... almost "philosophical" ... to non-parents.

Have a kid. Then you get what you can take what you can get of the hours, minutes, seconds you can find (and/or create) of the hours, minutes, seconds of the day, and you just deal with it.
The test labels are not known to them. The test labels are held by a different team that tells them their test error rate. Furthermore, multiple, separate teams have surpassed human performance.

FWIW, "human performance" is not as meaningful as most people make it out to be, because this is such a narrow task.
Was it http://www.privoxy.org/ ?
e.g. http://www.privoxy.org/user-manual/quickstart.html
It's worth pointing out that Apple's overall operation in Ireland is significantly more than a PO Box. Like European headquarters with 4000 employees (expanding soon to 5000) kind of significant.
I have Ghostery and ublock origin installed, after adding this to my custom blockers it still tags me as "adblock enabled"
Cookies should be secured using the domain and path attributes.

You share quite a bit of things with your CDN quite often various API keys, as well as SSL certificates unless you do not serve your main content over SSL in the first place.

Most (I'm pretty sure all) CDN's give you the ability to set your own CORS policy if you see a CDN on cdn.example.com returns allow origin * then it means it's user did not set the CORS headers properly.
Also the CDN can return allow allow and it still will not make a difference if you issue your cookies to the proper domain and path e.g. www.example.com/account if that's the domain and path there is no way a modern browser will attach that request to anything which doesn't sit on www.example.com and is located under /account.

If you issue your auth cookies to .example.com and the / path don't be surprised why ever XSS and other client side attacks end up compromising your users, you can have 100 XSS's in your site, you can have a shitty CORS policy and if your cookies are issued and restricted properly it's more likely than not that those vuln's could not be leveraged to compromised your users' sessions (not through a classic session theft that is).
Mackup – Keep your application settings in sync
That's why it's a Show HN. I wanted feedback and BOOM! Now you gave me great feedback ;)

Will add that soon. That will make it much better!
Though you haven't yet been called out for it, in your posts you repeatedly create a false dichotomy: either the boss is honest and must say "fuck you, you are a stupid fucking chef" or the only other choice is to be dishonest and patronise. That is not true. In this post, I am providing you direct feedback about how you are wrong, without calling you an idiot or saying something like "what the fuck do you think this is, reddit?" despite your basic errors in argumentation. Speaking these words would not be verbal abuse.

I'm pretty sure verbal abuse has a specific definition (not related to morality), and is not the same thing as "offensive to me", so you can't just redefine it as you did above.
Learning About Tay-Sachs Disease
Looks cleaner than other alternatives.
Considering they just arrested someone rumored to be Satoshi, I thought this was going to be about why he was arrested.

Good post though, well explained.
Or functionally: https://github.com/0a-/FuckFuckAdblockFunctionally

var _ = function(){};
var fuck = function(fn,fns){
fns.push(fn); //side effect here since this is OO. Otherwise could have written: fns = fns.concat(fn)
var partiallyFuck = function(fn){ return fuck(fn,fns)};
var thunk = function(){ fns.map(function(a){a();
window.fuckAdBlock = fuck(_,[]); //forced to do side effect here due to OO
window.blockAdBlock = fuck(_,[]); //forced to do side effect here due to OO
}); return true};
return {
onDetected: partiallyFuck,
onNotDetected: partiallyFuck,
check: thunk,
emitEvent: thunk
}
window.fuckAdBlock = fuck(_,[]);
window.blockAdBlock = fuck(_,[]);
What is a bitcoin if not a certificate that you've increased entropy?
ie: a bitcoin is proof that you converted a bunch of energy into heat via meaningless calculations.

It's the opposite of a carbon tax.
Do you have a link that support your third assertion? How does writing to the GAE datastore also put the entity into the edge cache?
I guess you could have something that makes it still successfully retrieve a working image, just not the actual ad maybe?
I guess then an ad-versary could check if the images are signed or w/e?
The formatting on this is awful on iOS. Luckily this is the same story that gets posted every couple months.
Calendar recurrence in Python
Despite not understanding some 90% of the technical language these were all still great reads!
Here is my new turn around plan. Fire everyone, sell everything.
A pretty good way to do this is to put something like http://someonewhocares.org/hosts/zero/ in your router's host file and enable DNS intercepting. It won't catch sneaky same-domain ads but it's great in that it consumes no extra resources on the end device and also works on iOS devices.
Basically twitter, I mainly follow a few news outlets that I consider reasonably accurate and that don't spam there feeds with irrelevant stuff.
It's censorship resistant data persistence. It's not that hard to understand ...
And the best way to reduce premiums is by encouraging more people to get Cadillac policies.

Which is the opposite of what they are doing.

Those Cadillac policies subsidize all the other premiums both directly at the insurer, and indirectly at the hospital which can then afford to receive below market rates for everyone else.

For example when the Check 21 Act passed banks responded by eliminating free checking accounts, making things worse for exactly those people the law was supposed to help.
I tend to like it. I'm competitive by nature so seeing what everyone else is doing gives me motivation to keep striving and seeing my goals higher. I may not ever catch up and be in the talking edge, but it at least keeps me on my toes and prevents stagnation.
Drupal 8 is a lot different from all previous versions. It still has issues but some of the points you made have been "fixed".
Bitfury is not a dumb company. And the power consumption per square foot of their equipment is drastically higher than almost any high performance computing project that preceded it
I'm running Tomato firmware on my router(ASUS RT-AC68P) using an adblocking script. It will resolve known ad servers IP's to itself and serve a 1x1 transparent png instead of the ad. It's a combination of a DNS blacklist and pixelserv. All the devices on my network are ad free.
"The ability to create densely packed circuit boards paired with high-performance during overclocking made 2PIC a natural fit for Blockchain transaction processing, an industry with a need for processing power that is growing at unprecedented rates."

Er, no. "Blockchain transaction processing" for Bitcoin requires a low-end laptop with a modest database to handle the 7 TPS transaction rate. If some group of banks sets up a blockchain to track bond transfers, the compute power required will be modest. They don't need to "mine", just limit membership to a finite set of organizations. Remember, if anybody fakes a transaction, everybody knows about it immediately. The purpose of mining is to provide enforcement in an environment where you can't sue anybody because you're not sure who they are.

Also, Bitcoin mining systems aren't really "data centers". There's very little data flowing around. Once you start up a miner, you don't need to talk to it again unless it finds a hit, or a new block comes along and you have to restart all the miners from a new starting point. Some of the earlier Bitcoin mining operations had tons of cabling, with a cable connecting each miners to some master machine, but the newer ones seem to have the cabling problem under control.[1] This makes liquid cooling easier, because there's not a lot of wiring coming out of the liquid cooled components.

[1] https://bitcointalk.org/index.php?topic=1072474.0
I don't really buy into this argument. Regulating the sale digital goods works. Companies that wish to remain legal will refrain from the sale of digital goods in an illegal manner; mandatory company audits will be a vector governments use to enforce that.

The article and others in the thread have given arguments that digital goods are not victimless. Most societies acknowledge that gambling is harmful; digital gambling with fake money or with time spent in-game is presumably harmful as well.
Certainly. A bank is just a collection of ideas. It's a bunch of magnetic domains on hard disks that get reconfigured based on a set of rules.

It certainly isn't a natural resource like oil or iron ore.

What would you call it?
This is an extremely outdated view of WP.
One minor error, but the implementation of difficulty in proof-of-work is not based on the number of leading zeroes, rather whether an integer is below or above a target.
"This works perfectly well for communication between researchers in the same field, but may be an obstacle
for communication between researchers from different fields or for newcomers such as students"

It appears you did not read the abstract after all.