skysight-inc/HackerNews huggingface dataset:
Here are dirt cheap earplugs for you, Home Depot sells many similar variations by 3M:

http://www.homedepot.com/p/3M-Orange-Disposable-Earplugs-7-P...

You can take a pair of scissors and slightly trim from the big (non-rounded) end, so that they aren't long enough to interfere with side sleeping, but they are still long enough that you can easily pull them out in the morning.

I haven't tried custom silicone earplugs, but these disposable ones are very soft and comfortable. You twirl them into a smaller thickness and they gently expand once you insert them.

I started using them a number of years ago when the guy in the house next door got a very loud dog that he insisted stay outside at night and/or early morning. So of course the dog did nothing but whine and bark! Fortunately he finally got rid of the dog.

A single "disposable" pair of plugs can last a week, or even a month if you want. The sound effectiveness decreases slightly over multiple uses. But that's OK. They start out really quiet, they claim something close to 30 dB. So if they're only 15 dB after multiple uses, that's OK. You probably don't want total isolation anyway.
I thought I was reading a satire article. That was the first source I found when looking through the site. I still wasn't sure if it was satire or not.
Ask HN: What is known about recent Telegram security claims?
Does anyone have more information concerning the claim that Telegram stores "EVERY MESSAGE" in plaintext? [1] Specifically is this true in any way for their end-to-end "Secret Chat"? I've been unable to find any proof to claims Moxie and Ptacek have been making on twitter. Considering Moxie makes a competitive messaging app, making these claims without clearer proof seems a bit reckless. So I would like to know if there is some proof out there that we have missed.

So far the responses Moxie and Ptacek have given to multiple requests are:

* API shows a string message object stored on server [2]. No clear indication that this is itself not a string representation of an end-to-end encrypted object.

* iOS devices receive push notifications indicating Telegram servers must be able to decrypt in order to send plaintext to Apple [3]. Not clear if this is true also for end-to-end encrypted secret chats.

1. "By default Telegram stores the PLAINTEXT of EVERY MESSAGE every user has ever sent or received on THEIR SERVER."
https://twitter.com/tqbf/status/678065993587945472

2. "It's just how Telegram works and is self-documented to work: https://core.telegram.org/method/messages.getMessages Only their marketing copy suggests otherwise."
https://twitter.com/moxie/status/678219238394298372

3. "@stefannnooo If you're on an iPhone, they also send a plaintext copy of every msg you receive to Apple's servers. So not even in transit."
https://twitter.com/moxie/status/678277776391077888
Can you show what model are you talking about? I am curious
Mystery Shopping Company
So what? Is that your rationalization for banning it? If so, that is moronic.
React-Refetch – simple, declarative, and composable way to fetch data with React
Would be nice if MIT Press did something like Manning's "early access" progress and started selling the book even though it is not yet finished. I would be happy to pay €€€ to get access to the evolving PDF version.
and how well that prevents people from critical thinking.
Doing that would be implicitly admitting they'd made America less safe, which might lead to them having less power.

If I was the NSA I'd blame those sneaky commies, because that might lead to me getting more power. I'd say "this Chinese attack wouldn't have gone undetected for so long if the NSA had access to Juniper's source code repos, and monitored on all their employees, to check for sleeper agents"
Yep, I remember seeing Titanic and obviously knowing how it would end. But strangely enough I forgot about all that once it started and was genuinely surprised when they hit the iceberg. :/
It's a fun group game... glad to see another addition to the growing list of Slack games...
You won't find that many pen testers making 600K a year, I don't think you find a single one that's paid that much for actual technical delivery.
Pen-testers are also not the people that should be doing code reviews necessarily as they most likely lack experience in that regard.

Money doesn't solve everything, you can bring out 200 people and they'll still won't find everything and being able to figure out how everything works.

The hardcoded password backdoor was well obfuscated but at least something still "easily" detectable the Dual-EC vuln where some one replaced the values with their own pre-computed pair I don't even want to know how they found that out other than by chance.

And when you'll start going deeper It's just gets more complicated It won't be easy to find a 100 people that will be able to do code review on say the kernel of ScreenOS world wide, heck considering the specific skill set that they'll need to have: being able to understand the source code, assembly, being able to figure out how if it can be leveraged in any way which will affect the security of product on a software or hardware level (we are dealing with mother of all registers here after all) and being available for hire that's not something that trivial.

And lastly this might not be solvable with money at all identifying backdoors in unknown code is very difficult the technology that can do so is very limited and the manual approach is prone to human errors and oversight. Even if you get a team of a 100 leading code review, malware and security experts in the world I would not bet money that they'll be able to scrub anything within a year.
And I would not even attempt to hire a 100 of them, the time it will take to bring them up to speed would be pretty exhaustive, a safer bet would be to have your own developers which worked on the products from year to go over small parts of the code and flag something unusual.

If Juniper is smart they'll crowd source that internally and have various code snippets pop up on the screens of randomly selected developers and have them being evaluated, when a snippet gets enough flags forward it to an expert and have them review it.
But that again only works if a) the backdoor is localized and not staged across various steps in the logic flaw it self, and b) the backdoor is in the actual source code and not only present in the binaries because the tool chain itself was compromised.

Life isn't simple.
Point taken. I meant FVWM with a really bad launcher and gkrellm everywhere rather than a classy XFCE setup.
Didn't help.

>To Read the Full Story, Subscribe or Sign In
Nintendo tends to sue people using the Mario name or any likeness of the character. This is an interesting project, but you are going to get a DMCA pretty quickly.
They certainly appear to have been working on it, judging from the updates being released. I feel they have a long way to go, though.
That's not adding anything new. The very idea of the thought experiment is that we reach a contradiction and that we therefore should reject the assumption.

The problem, and the whole point of the thought experiment, is that the assumption is tied to Achilles being able to make the distance, so we should ditch that too.
JS Animation looping
Strange. Worked for me after I was blocked, same browser. I wonder if you're using Tor, or if they're geotargeting the way they handle google referrers. Or perhaps you're coming from a google.co.XX domain instead of google.com?
I think the mismatch theory is catching on because

1) It simply makes intuitive sense
2) There is simply lack of hard data that would disprove it

Ie when you place a group of students whose SAT scores are 250 points below the average, in a competitive environment, they will struggle because there is no AA once inside the university. So this is the default 'makes sense' theory.

If it is actually not true - you have to bring data to bear.
There's lots of different styles of meditation. Tibetan monks I've spoken to have commented on this if it helps : posture is important, of you don't have a good, alert, posture it can make an individual sleepy. Secondly you can meditate with your eyes very slightly open.

Also, you can meditate with candles and other things and focus your eyes on the light of those.
If the Windows VMs on Azure are just as slow then that's the textbook definition of "first-class citizen." Your point would only stand if Azure ran Windows VMs as-far-as or faster than their competition, but ran Linux VMs much slower.
It might not be complete, as there were dozens of plans, e.g. the Madagascar Plan[1]. The Evian conference was a conference organized by the United States without Germany[2], so it could not be a argument for a plan of Germany.

[1] https://en.wikipedia.org/wiki/Madagascar_Plan
[2] https://en.wikipedia.org/wiki/Évian_Conference
So?

Why should people who didn't pass these tests be allowed to fly people around commercially?

Also, why couldn't that company provide the certificate?
I'm not anti-disney really, we let ours watch Mary Poppins and Frozen a few times. But it isn't really hard, you just get rid of the TV (best thing you can do, commercials are a cancer) and focus instead on books and (real) music in the evenings.

The Peanuts Christmas album (vince guaraldi trio) is wonderful this time of year.
a (so far) in-house built service that manages DNS srv records.
>doesn't quantum mechanics mean everything has a lowest resolution of discrete steps, ie. Plank-time and Plank-length. In that sense, calculus over finite terms is enough.

That's one solution yes, but whether the universe is continuous or discreet is not a "solved" problem in physics in general. The lowest resolution could just be a "sampling restriction" (or quantum laws etc) and not the actual reality. There have been some experiments to discern between the two cases, but nothing conclusive IIRC.

>The paradox is illogical anyhow, it fails to equate simple vt=s.*

That's not being illogical. vt=s is not logic, is just a formula that we deduced and which matches what we see in everyday life (and in fact it's not absolute, e.g. when it comes close to the speed of light etc).

The paradox just checks whether vt=s is compatible with certain descriptions of the chain of events that look intuitive at first.
Use these meta tags for pretty Rich Previews
On a related note, what people's take on using "read more" style links on blogs (especially ones publishing longer form content)? Meaning, the main list of articles on a blog shows the first few paragraphs of the posts, and then have a "read more, or "continue reading" link for the full article.

Does this make the blog's information more manageable, or is it also crappy design?
Lower Time to Market Eating Away Your Market Share? Let’s Peek in Together
If you think about it a bit longer you'll realize it can not be a single name. Yes, someone wrote this code. But then someone else reviewed it and then a third person signed off on shipping the end result. It takes (or really, it should take) more than one person at a company like Juniper to get away with a trick like this. Unless their processes are completely broken, let's for the moment assume that they are not otherwise all bets are off. Juniper is going to be scratched from a lot of POs because of this story, if it turns out they don't have a process in place to protect against stuff like this and it does not involve two people or more operating in concert to circumvent that process then they're pretty much dead.
Aside from this being a dupe of https://news.ycombinator.com/item?id=10728646
...

Oh, brother. UK's Independent had a similar spin.
What neither article mentioned, which is right in the quoted source articles, is that "Three other solar farms had previously been accepted by the town council, with one of the now putting solar panels up."
The solar company wanted additional parcels rezoned to allow their expansion into a residential area; that is what was opposed at this meeting.
Both articles took objections stated by a grand total of one couple and generalized them into a farce that depicted a town full of Luddites...
... a town that has already approved three solar farms for this company alone.
Now, I gotta wonder what else on Ars Technica is bogus.

Anyway, as detaro mentions here, the Vox piece gives some actual non-clickbait balance to the story.
With spectrum auction looming, a college questions the value of its TV station
Sadly they care less about content theft - http://youtu.be/IrD96dNfHxk
It would be really hilarious if they decide to move their operations in other countries. Slowly but surely influencing countries one at a time until its time to go back and try again in US. Would that strategy work?
What were you doing wrong/differently in C++ that required much more code?

Would you write it in C++ differently if you did it again?
WebDav dates back to 1996. You've just got a list of the latest rfcs.

https://tools.ietf.org/html/rfc2518
> I disagree, but am happy to agree to disagree.

Just to be clear, you disagree with a fact that follows from very simple assumptions just by applying a few very simple steps of logical reasoning, yet you accept as dogmatic (i.e. authorative) truth a historical (i.e. unrepeatable and illogical) fact that you never witnessed yourself and that many people claim is false? Interesting.

Edit: Or, maybe you don't disagree that evolution is happening, just that it happened (i.e. that the current species were created by evolution)? I guess that's the other option, which would be less inconsistent with logic.

> Regardless of whom of us is correct on that count, there remains the fact that denial of the theory of evolution is unlikely to successfully radicalize an appreciable amount of people.

Well, given that holocaust denial is legal in the US, I think it's pretty safe to say that it's a fact that it's unlikely to successfully radicalize an appreciable amount of people.

> Yes, which paragraph of law forbids discussion of denial of holocaust?

I don't know, but why don't you check Wikipedia (a more raliable source) instead of relying on me (a completely unreliable, potentially lying, source)?
It seems possible that there wasn't much initial due diligence nor a working product at the beginning:

> Tim Draper, the venture capitalist, said Holmes, who was friends with his daughter growing up, is the first entrepreneur he knows who kept quiet about her business

From what I understand, Tim Draper, of DFJ Venture invested in Holmes when she was a Stanford student.

> DFJ, formerly known as Draper Fisher Jurvetson, became one of Theranos’ first investors. The firm doesn’t have a seat on the Theranos board, Jurvetson said.
“We wrote a $500,000 check before anyone else, but she’s been somewhat independent and has been going at it all on her own, so I don’t have the answer to your question,” Jurvetson said when asked whether DFJ would invest again.

It seems most likely to me that this investment was based on her personality and/or personal connection, rather than due to a technology breakthrough she had made at the time. If she had something at the time, then it's taken 11 years to get where they are now, which is not having any publishable research demonstrating the results. My guess based on the situation is that she was charismatic and asked for money to go start solving the problem, from scratch, and people gave her money because of her charisma and because they judged the problem sufficiently tractable. It seems unlikely that she had more than an idea while still in university.

It looks like DFJ has not participated in the most recent investing rounds (?)

http://www.mercurynews.com/michelle-quinn/ci_26147649/quinn-...

http://www.bloomberg.com/news/articles/2015-10-19/early-ther...
I don't think I've ever had a conversion about the story. It's very well thought out.

The problems with the prequels is the casting. If it wasn't for Portman and McGregor the films would have killed the franchise.

The new film has corrected the casting mistake, which is amazing since they picked unknowns.
FamilySearch could be one example https://familysearch.org/developers/docs/guides
Genocide denial is extremely insulting to the victims and the survivors.

Jews have been murdered in europe for centuries as a vent for fear and political impotence.

We've had enough. The fact that the germany that produced so much culture and science was the culprit of the last genocide in western europe is an absolute horror on so many scales.

Yes, the horrors went on elsewhere but the only way for us as a species to move ahead of our bloodspattered history is to take a stand against fear and brutalism. whitewashing history is a dangerous thing because it gives the signal that political leadership could have a way to escape history's judgement.

In essence, it's a matter of accountability that we must uphold vigorously.
Small nitpick: That screenshot shows a situation which shouldn't occur in the game. If there's only 1 player left, he's the winner. So I wonder: Is there a winning condition built in?
We're a team of developers and build online tools for programmers. While sharing our URL's in chat apps, we found out that often a text was shown instead of the website preview image.

This article summarizes all the meta tags you need for a pretty website preview and gives examples for each tag on how to implement
Yes, for the most part. Many of them spew messages to the console log for bad font handling etc. but for the most part they look native.

wxWidgets is different because the code is native - it is a C++ wrapper around the Cocoa code, so you make calls in C++ and it actually calls Obj-C code behind the scenes (plenty of .mm files in wxWidgets). I do not know if Qt does this or whether they do their own drawing of controls in some instances. (wxWidgets does draw some of its own controls, eg. toggle button on platforms older than Yosemite/El Capitan I think)
Wouldn't an ePub be the obvious choice? It's basically HTML and it's the native format of kindle
I worked for a long time in the publishing industry and experienced first hand that their culture is their major obstacle in adapting their business to the 21st century. Good to read that at least one company is trying to transform. And very interesting to see how they accomplished this. It started by putting senior managers in "student mode". Interesting.
There's also the fact that entire antagonist team seems desperate to be bigger and badder than what came before (with the possible exception of Snoke who is somewhat mysterious). I took the new super-weapon to be a symptom of this. A healthy number of tropes were both subverted and upheld by the film, a pattern I hope continues.
I remember hitting a few of these back in my youth when I was trying to "backup" game floppy disks. Some were easy to work around (eg 1.1.1 could just be replaced with NOP commands to allow further debugging), others were much more difficult to deal with (eg 2.2.2 resulted in single stepping through huge chunks of code, taking notes as I went, and rebooting/restarting the session each time I made a mistake - very time consuming).

I liked encountering a form of protection I hadn't seen before, it gave me a new challenge to solve and a chance to learn something new. I came to realise I didn't even care about the games themselves, bypassing the protection WAS the game for me.

As an aside, overall I noticed a positive correlation between the quality of the game and the quality of the protection (if any) it used.
Busy learning Elixir myself and this was a great read, explains a lot of concepts simply and clearly.
> The Bayesian approach is to assign a prior distribution to various theories of this nature. Because there are infinitely many possible priors, most exceedingly complicated (because the set of priors of complexity < C is finite or at least compact), we'll need to (eventually) assign low probabilities to high complexity ones. This gives a natural derivation of occams razor as well, at least as an asymptotic law.

Is the asymptotic relevant though? Physical theories are finite and generically quite small, and we have no a priori way to fix C.
Makes me think of what this would look like generalised... drawing with lines and shapes that have their own programmable constraints.

See Sutherland's Sketchpad demo (1962!) https://www.youtube.com/watch?v=495nCzxM9PI

Really this is when drawing goes beyond the physical world, and we get to start treating the computer as a co-worker. Snap-to-shape is the first step.
Considering that multiple complaints from multiple neighbors couldn't stop one guy from blasting music, I think current laws (at least in SF) err too much on the side of non-punishment.

> I'd rather make it illegal to build paper-thin walls.

Let's say you manage to pass a law forcing all new construction to have excellent soundproofing. That won't fix the problem for a century. Buildings last a really long time. Heck, tons of old buildings still have asbestos or lead paint. I seriously doubt their soundproofing is going to be fixed before those. Punishing noisy people is the only solution that works with our existing infrastructure.
"Apples do not cost the same as oranges, therefore oranges are being price-fixed" is not a convincing line of reasoning. The two technologies are very different and NAND storage is much newer, and has always been much more expensive than disk storage.

The correct thing to compare NAND prices to is other chips that are being fabbed at the same process node, by die area.
There's gotta be a way to isolate the subwoofer from the floor to at least reduce it. My dream apartment would have 60dB+ of isolation above 60Hz, but that would probably be prohibitively expensive and bulky if the walls weren't already concrete.
I wonder if they know about this bug:

https://code.google.com/p/chromium/issues/detail?id=460709

It's been around for nearly a year, and Chromium eventually says they're following the spec and it's Facebook's fault.
> RAID [...] it's about not losing data

It's a pretty ineffective way to guard against data loss, you need backups.

RAID [1-6] is an availability solution, saving the downtime of restoring from backup in the case of the most predictable disk failures. It doesn't help with all the other cases of data loss.
Sadly not much discussion in any of those threads, though. Would be nice to get something going here.
No. :)
I think it's extremely, vanishingly unlikely that the code contains a line like this:

if (strcmp(login_password, "<<< %s(un='%s') = %u") == 0) ...

This feels much more like a "reflections on trusting trust"-style toolchain compromise.
Snoring Advice for the festive season
It's expected that they can track you, when before they blocked the images to prevent that?
2004 Mercedes CL500 for Sale
And the first google.com hit for this query is... Wikipedia article on Sun Tzu, the Chinese philosopher who wrote The Art of War.

Does the Web know something we don't?
Actually, it's very likely the string was used for some other (valid) purpose and the pointer is being hijacked afterward -- it's VERY unlikely to appear as a singleton string constant anywhere.

The password looks like what someone would put at the start of a function to trace stuff; and, there's very likely a macro that does that all over the software.

Lets imagine what that might look like:

#define TRACE(__f, ...) \
const char *tok="<<< " __f;\
printf(tok, __func__, __VA_ARGS__);

u32 check_pass(const char *un, const char *tock) {
u32 res = valid(un, tock);
TRACE("(un='%s') = %u", __func__, un, tock);
res += valid(un, tok); /* could look like a cut/paste blip... */
return res;
}
A few Gbit/s is peanuts for modern machines. Even a low-power fanless machine can saturate that without breaking a sweat.
Now also in a movie format - https://www.youtube.com/watch?v=DDpSwl-fJcU
Pope Says This May Be Our Last Christmas: Your News Wire – #YoNews
But you can still see: is the source of this code something the user has written in a .c file, or something that came from a header file or from macro expansion, and only warn about the former. Granted this is difficult, because LLVM is multi-layered, but it's not impossible in the general case.