skysight-inc/HackerNews huggingface dataset:
I don't think that's a necessity for all workflows. Just think about it, that would require all of us buying enterprise 520 or 528 byte sector drives to store the extra checksum information, and a whole new API up to the application level to confirm, point to point, that the data in the app is the data on the drive on writes, and the data on the drive is the data in the app on reads. It's not like T10/PI comes for free just by doing any one thing, it implies changes throughout the chain.
(The article is almost a year old, but the issues remain)

The AV MITM certs are not exactly Dell- or Lenovo-bad, as they are all uniquely generated in each installation, so you can only fake traffic on computers you have Admin access - and then you don't need Avast for that.

However, the real issue is if these MITM-proxies render compromised, expired or otherwise insecure TLS-connections "secure".

The bare minimum should be to respect the cert storage of the computer, although that will fail with any application with its own storage, like Firefox. To me this feels like it has too many points of failure to increase security instead of lowering it, so you really would focus on detecting malicious content based on other things, like the host reputation, files that land on disk, or maybe having a browser plugin that would see at least some of the decrypted HTTPS content.
The link is to an advert offering bitcoin payments for linking and not the actual article titled.

Looks like this is one for the mods to check.
That question isn't specific enough. It's "Millenium Falcon vs. The Enterprise: who would win?"
Awesome! I personally use our platform for things like expanding my multiplication table chops (out to 20) or learning about cooking temperatures http://www.memorangapp.com/flashcards/16309/Roast+-+Steak+Co...

Happy to help you design something for your coursework, we are actively looking to build an educator service allowing you to share course materials with students. Stay tuned for updates on this in the near future.
Yes indeed, particularly considering that such a subsidy should in net (though with significant latency) lead to higher tax revenues, more investment in the economy, more innovation in the economy, all that good stuff which a Government with a long-term view should be very interested in. In fact an effectively zero-interest loan is the very bottom end of what should be offered by the government by that line of reasoning, the top end being completely free tuition.

Having a student loan with 'real' interest seems to be a policy drawn from looking at the investment->return (financial and otherwise) of a university education from the perspective of each individual (you want the gains, you shoulder the pain), rather than from the perspective of the society at large (all boats are eventually raised, therefore it's advantageous to invest our common resources in this).

My impression is that sadly, over the past 50 years in most western countries, this has been the trend for higher-education funding policy. I'm from the UK, and that is certainly the case there.

A side-effect of this focus on the purely personal financial investment aspect of higher education seems to be the newer Peter-Theil style attitude that in fact, university might not be as good an 'investment' as simply going out on one's own as an entrepreneur, once school is over. Whether this is right or wrong for any given individual is not an answerable question, but it seems very sad that this functional, financial aspect of things seems to be treated with more importance than the other benefits of a university education and experience, to the extent that it's now more and more being discussed as the primary (the only?) factor in the value equation of the whole endeavour.

I find this line of thinking sad both on the level of individual, and society as a whole. But I'm not saying it's a irrational way to begin thinking about it, given the way policy is going and given the way society is adapting its attitude towards the value of university education.
The safe deposit box company website[1] looks like it's from the year 2000, complete with a clock in the header of the page. I guess this business was more likely to get customers through word of mouth than their website, so it didn't matter too much.

[1] http://www.hattongardensafe.co.uk/index.html
VR would make it easier to move the viewport around (just move your head) when looking at the isometric view of a model, but it does nothing really for building a model.
GOLD+Faces+Recovery+Risk+With+Eyes+On+1088+Zone
tsocks is also handy for running applications over Tor that don't support it.
A lot of the people were uninsured with tens of thousands of dollars in assets, if not more. I'm guessing that it's because they didn't want to report the assets to the government. Is that fair speculation?
I use Firefox with FoxyProxy extension for years (both on Windows and Linux) with more than 20 different SOCKS 5 via ssh proxies simultaneously (with configured IP rules for each), had no problems whatsoever.
Elm has neat ideas, but there's really no need for an entirely new programming language just for functional reactive stuff, and I'm just not into languages that don't support dynamic and iterative development at the REPL. Hot swapping code is a poor replacement for a real REPL.
I love the quiet of the night :). I will spend some time every few months reverting to an entirely nocturnal pattern, just to be able to enjoy the peace of the night and not have to fight against myself at all :).

Melatonin has helped me to keep a bit of a balance though (not that you need one, it depends on your life :)), living half in this real world and half in mine has helped me order life a bit and i'm no longer constantly cycling around my sleeping. It's well recommended for circadium disorders.

But I'm lucky to have a job I can start at 11am, even if that's tricky. But with the use of melatonin and loads of other things I don't have to fight myself as much as I used to and can generally get to sleep before 2am(sorry not 1am as above, that would be a miracle). Acceptance definitely helps :).

Haha, I used to do the same with working! I remember once after about 2 weeks straight working 24-40 hour stints I turned to my friend and said "I think i've forgotten how to sleep.". I realised then that sleep takes concentration and if I was overtired I don't have the concentration to get to sleep.
"lack of good quality material"

You definitely are correct and I agree with you 100%. The problem is that you can't just throw a tool at people and expect it to stick - ultimately people need good content to study. For us at https://www.memorangapp.com it comes down to two things: (1) Better collaboration and (2) Pre-made expert content. The latter takes a lot of money and time as we've effectively split the tool into a publishing platform and technology platform in parallel. (You can see an example of the expert marketplace of content at https://www.memorangapp.com/premium).

You can check it out at the website and there's another discussion in this thread. We have a web-based UI and Android/iOS apps currently. Brand new versions of these are being released next month as part of a 2.0 launch.
Exactly. It wouldn't surprise me if the growth in revenue was just more of the remaining holdouts from CS6 (and earlier) finally agreeing to the price increase (by upgrading).

CS6 (the last version you could purchase) is nearly 4 years old now. I didn't upgrade from CS3 (or 4?) until last year.
> Suppose, for example, that you go to the Bank of America site to transfer some funds or pay a bill. As with Google, and as would happen with any other secure site, it turns out their certificate gets replaced with the Avast certificate. I doubt anyone needs me to lecture them on the potential security issues involved in having a third-party watching their banking transactions without permission!

Antivirus software runs with the highest level of privileges, divert system calls...

They could theoretically log everything you type on the keyboard, no need to MITM SSL connections

> Avast is replacing certificates with its own without bothering to check the validity of those certificates!

This is a far bigger issue
Why on earth didn’t you think of this? Strings individually capo-d
Show HN: Performance Audit of MaterialUp.com
Microsoft has introduced Antimalware Scan Interface in Windows 10 which tries to accomplish this, idea being that applications with possibly malicious content can feed buffers to be scanned by whichever antivirus programs that have registered themselves as ready to handle such calls. This also means that e.g. a JS engine could feed strings fed to eval() to be scanned.

https://msdn.microsoft.com/en-us/library/windows/desktop/dn8...
Yeah btrfs 'ssd' mount option does less for the same reasoning, but still does include checksums for metadata and data because SSDs have at least as much likelihood of non-deterministically returning your data as spinning rust. So even if it doesn't fix the corruptions (which requires additional copies or parity), at least there's an independent way of being informed of problems.
https://news.ycombinator.com/item?id=10724341
The user has only submitted links from the URL shortener so it is likely related.
Not a brag, just a point: I learnt that many characters in a year too, without Anki. I also devoted an hour a day to learning.

My point is: devote an hour a day to any endeavor and you'll go far.
> For example, a BNF grammar can be described by a state machine whose states are sequences of terminals and/or non-terminals.

Eh... for BNF grammars, you'd need a stack. Or an infinite state machine.
Is it open source? Can I store and access the data locally?

I have a very large Anki deck that I've spent years building and curating, I'm not interested in surrendering all that labor to a closed ecosystem that may or may not be around in the future....
At those numbers, it could easily be seen as a price cut.

($1500/$30) = 50 months / 12 ~= 4.16 years. More than 4 years to break even, not including time-value of money.

---

Edit:
The actual prices are probably closer to the actual turnover for people upgrading Photoshop.

($1500/$50) = 30 months / 12 = 2.5 years.

($1500/$75) = 20 months / 12 ~= 1.67 years.
I've seen a lot of FUD about Telegram recently, and plenty of shady stuff that reeks of government pressure, including Facebook banning Telegram links from Whatsapp and banning its "official" FB page. This article rings a couple of alarm bells for me -- the subtext seems to imply both that Telegram is not to be trusted (stay away, vulnerable users!) and that they aren't doing enough to stop illegal usage (ban it!).

The crypto concerns are valid, though. Telegram needs a professional audit.
Avast is not the only antivirus program that does that these days; ESET does it, and Symantec's Norton products do as well IIRC. As everything moves toward TLS, this is pretty much a required step on the client for "Internet Security", and the average person doesn't know or doesn't care.

Largely, you probably should not either if you are trusting the AV client with the rest of your computer. Yes, it can be fucked up and break TLS, but there are a thousand other ways a privileged executable like an AV program could fuck up a lot more of your system. For example, a bunch of CVEs were found in Kaspersky's product by Tavis Ormandy in September, and it appears that a few found in Avast have been made public within the past few days. [1]

[1] https://code.google.com/p/google-security-research/issues/de...
Yes and no. According to Amazon, "EC2 is a web service that provides resizable compute capacity in the cloud." Really, an EC2 instance is just a virtual computer. You can, with the click of a mouse, create a new EC2 instance and load a pre-defined system image onto it. This allows you to, rather quickly, manually increase or decrease the number of EC2 instances based on load. Automatic scaling of EC2 instances can also be done, although it would be provided at a higher layer.

However, a more critical factor is whether the architects designed their systems and software to scale effectively when the number of EC2 instances is adjusted. If there is a bottleneck that is not properly addressed by adding EC2 instances, then adding EC2 instances will be pointless.
here's some summary slides of what you're missing: http://community.netapp.com/fukiw75442/attachments/fukiw7544...

Or you can read the patent itself: https://www.google.com/patents/US5819292
I've been happy with it. I'm not sure how I follow it being a price increase. I'm paying $9.99/mo with all updates included. Wasn't CS6 $699 when it was released? I don't understand why people are so outraged that a company wants to make money off of software they created.
I remember magazines in the 80s (e.g. - "Keyboard" magazine) putting in flippy little inserts that played.
less than that. $30/month is old pricing. It's now $50/month with a year contract or $75/month month-to-month.

https://creative.adobe.com/plans?promoid=NV3KR7S1&mv=other
hi! i'm sorry that you feel that way.
we're aware of the guidelines and thought about it. we decided to go with "Show HN:" for 2 reasons:

1- The API can be tried, the curl examples can be pasted and they work

2- looking at past examples (such as EasyPost), they seem to follow our pattern

for these reasons we didn't see a problem with using the "Show HN" tag :)
I spent using Anki, and all I have to say is that my graphs actually dovetail neatly.

Space repetition just works.
Metformin in Longevity Study (MILES)
me: I'm here for the engineering manager position

them: great, can you come in for a front-end developer interview at 2?

me: I'm here for the engineering manager position

them: here's an offer for a front-end position making below-average $

me: thanks for your time

them: ???????

CEO: Why won't anyone work for us?

them: we offered them a job!
We detached this subthread from https://news.ycombinator.com/item?id=10714844 and marked it off-topic.
All roofs and buildings leak. There are probably more wooden timber roofs built during the 13-15th centuries (and earlier) that are still around than you might expect.
That $750k fact sounds fishy to me. People who self-select into advanced degrees generally possess qualities that are correlated with earnings (intelligence, ambition, rich parents, etc). Does the $750k figure compare that group against similarly ambitious and intelligent people who went another route in life? I have no idea how you'd create a fair control group to make such a comparison.
Powershell is very capable tool but unfortunately not very interoperable.
> as ARM shows above, the imprint and deposition transistor world is following a shrinking path that looks like Moore’s Law, or in our view it is somewhat linear.

Red flag when a guy writing about bleeding edge transistor technology doesn't understand the main point of Moore's law - exponential growth in density, which is usually converted to a log scale making it appear linear in nature.
How it is the $9.99/month a price increase?
Wooden houses and roofs have been built for long time. I'd be more worried about leaking plumbing.

If you bring piece of wood indoors and let it dry, it's water content will drop to about ~17%. If you take it outside and hang it somewhere so that it catches rain and then dries, it's moisture content will average about ~20% in most places on earth. Wood has evolved to do capillary action. This means it's very good at drying, but it's also very good at staying wet if there is moisture around.

https://en.wikipedia.org/wiki/Capillary_action

Most wood eating fungi need moisture content of at least 30%. And this has to be long term, wet week doesn't do anything. But there is fungus called dry rot, that can cope with 20%. This leaves you practically no buffer, as the indoors natural is 17%. The catch here is that dry rot needs certain minerals to ever start growing. Cement and mortar have these minerals. If you build effective barrier between cement and wood structures and keep the moisture below 30%, you don't have to worry about rot ever.

Insects are another problem. But it's rare that you get insects if you didn't get rot first. In those rare occasions, there has been some visible defect in the surface of the wood. Or alternatively some very infested thing nearby. Regular paint goes long way.

UK has traditionally had lots of problems in build quality. Mostly because they didn't take into account dry rot.

Source: Deterioration and preservation of timber in buildings. G. A. Scott 1968. And no, this info has not dated since 60's.
> While the vinyl sheets used to print x-rays were much flimsier than records

I doubt the Soviets were making X-rays on vinyl. They would be using acetate like the rest of the world. The record industry was also still using shellac based media in the 50's. Vinyl was not a "thing" back then.
We're not an open source tool so unfortunately no. I should say that we reached profitability only a few months after launch and our team has experience in 4 other startups before this one (if that helps in gaining your vote of confidence).

I would love to have you be a member, email me and we can work something out.
US Censorship of foreign music would be an interesting follow up to this article. I don't know anything about it, but that doesn't mean it didn't happen...
The implication is that they didn't need or even have the budget for an intern. And they hired an intern anyway, which just happened to be young and attractive.

This should be enough as an illustration of "bullshit experiences".
Problems are not just limited to startups. Here's some of the shenanigans which went on in the last company I worked for:

Company is constantly on credit hold. Engineers receive calls from suppliers stating that they haven't been paid and no one in accounts payable is returning their calls.

Company does layoffs on a recurring basis, and then hires different people for a new project. In one case they hired back the same people they laid off a year ago and paid them signing bonuses.

CEO shows gross indifference when someone leaves the company. Just shrugs it off.

CEO walks into VP of HR's office with someone and states that you're fired, and this is your replacement.

CEO constantly worrying about getting delisted from NASDAQ.

CEO and VP Engineering "chum" thinking they know the price of components and stating that that should cost $5, when everyone supplying stated item is asking $15.
Input validation using Haskell
How is it determined which sensory information is irrelevant?
>But are Universities today orders of magnitude better at educating people?

And this is where people start to see the clothes on the emperor for what they are.
I never understood the concept of working for one tenth of an hourly rate in pizzas. I hear that and wonder how people can be trusted writing a program that uses division when they don't understand the fundamentals of maths.
You're attempting to own the user's learning experience. Rather than attempting to build something which puts the user first, your product puts you, the owners, first. And when you say words that don't mean anything like, "it's not that we don't support or respect privacy" when you just made it very clear that you do not, it just insults the people who were listening and trying to give you the benefit of the doubt in the first place. You should have just owned up to the fact that you do not believe in user privacy rather than try to patronize those who are taking the time to read your posts.
An alternative approach is to use my own tun2socks program [1][2], instead of tsocks. This utilizes an integrated lwIP stack to transparently expose the proxy to the entire OS. It's a little tricky to set up the network interface and routing, but then works with pretty much everything.

Note, tun2socks is used internally in the Android versions of Psiphon3, ShadowSocks and Tor's Guardian/Orbot.

[1] https://code.google.com/p/badvpn/wiki/tun2socks

[2] https://github.com/ambrop72/badvpn
tomasien "SPECIFICALLY billing itself as a University"

Draper University -
Silicon Valley's top entrepreneurship program and accelerator founded by Tim Draper. Startup bootcamp and crash course in business and entrepreneurship.

Is Draper University of Heroes a scam?
https://www.quora.com/Is-Draper-University-of-Heroes-a-scam
Seems the driver solved it for him, he takes the same route now and makes it to work more quickly.
LinkedList vs. ArrayList with cute animation :)
One of the things I realized after using Anki for a while is that school education isn't really even designed for retention - it seems built for cramming and forgetting.

I'm just concluding that off of basic scale. After using Anki for a couple of coursera courses and being overwhelmed with cards for months until it calmed down, I realized there was no way I would have been able to keep up with retaining all learned knowledge in college, several classes per semester. The Anki review burden just would have been too great.
The $10/month is a good deal.. but if you want any other app, it's $240/year; or $600/year for the suite.

But (previously) virtually no one upgraded every year. The product was good enough years ago, and the features added were rarely more than minor improvements. People would buy the suite, and then use it for 3-5+ years.

With the new pricing, it's like you're forced to upgrade every 2-3 years.. so it's an accelerated upgrade cycle. And that's why everyone thinks of it as a price increase.
Yup. Each window belongs to a profile.
There are, but it's a market for lemons. The founders who can build things & get users are off doing that. You mostly don't see them in the startup "scene", because they've found the majority of people are bullshit artists who just want to waste their time.

The developers who understand product and can build it successfully are off doing that. You mostly don't see them in the startup "scene", because they've hitched their wagon to a founder who knows where he's going, has a realistic plan for getting there, and treats all the people with him well. When they do appear on the open market, they get snatched up really quickly.

What's left are the folks who have impressive-sounding but unattainable dreams, the folks who would rather talk about programming than program, and the folks who believe that everyone exists just to serve them without them needing to bring anything to the table.
Social convention! How can you disrupt industries by following social convention!

Always remember: nothing is impossible when you're an asshole.

/s
Excuse my total ignorance but I don't live in the command line, so what is this sorcery you speak of useful for us mere mortals?

I really want to learn not to feel left behind.
> Why do you believe this? I have some familiarity with natural language processing and think that generating passable computer poetry is a fairly rudimentary task. Tell your model about meter, tell it about rhyme, learn word associations. Pick a language, give it every line of poetry you can find and hit go. What makes you think you could distinguish computational verse from something written by human hands?

See, people always say that the trouble is getting your ML model to have some semantics to what it produces, to produce texts which somehow manage to genuinely correspond to the real world rather than just to the use of language. With poetry they might say, we don't just want something that fits the forms, but something with content, with soul.

I say, yes, that's all true, and have you ever tried getting a randomly sampled human being to produce prose or poetry with meaningful content and soul? Untrained, we're possibly even worse than the neural nets!
Yup, it's got first class UI in Chrome. They even recently added an "open link in <profile>" item in the right click menu for each profile you have.