skysight-inc/HackerNews huggingface dataset:
I would dismiss a lot of stuff on that list, but not the e-frying pan. Automating cooking could be a huge labor-saver, and really help with women's rights, like the washing machine in the last century.
I get frustrated very often with DDG

I get frustrated with Google (I don't use DDG much, so I'm not that familiar with the limitations). Google has repeatedly crippled search, made it worse than it was.

E.g. you used to be able to say +yesIwantthis and your results definitely included that word. Now, not so much. It's now something to do with Google+. Now, you can't force Google to truly include particular words. You can try, but I don't think it always works. E.g. you can say "yes" "search" "all" "these" "words", and maybe it will and maybe it won't.

Advanced search has definitely gotten worse. Frankly its at the point that I'd be willing to pay someone $10/mo to get a search engine that's a) good and b) truly gives me control.

Meet the new Google, worse than the old Google.
> I once had a roommate who literally could not drive 2 miles to work every day without her GPS. She turned it on every day and had been working there for over a year.

You might be confusing correlation and causation here. Did she have no sense of direction because of the GPS, or did she use the GPS as a self-correction for having no sense of direction?
Nope, I really meant Ubuntu compared to other Operating systems / Distributions.
> his account on our portal mentions Synack as his affiliation

Can someone clarify exactly what portal is referred to here? Is it something besides https://www.facebook.com/whitehat/report/ ?

If not, this is a totally bogus excuse.
OFDM 802.11 rates already have a significant amount of Forward Error Correction. 802.11g uses a convolution encoder and Viterbi Decoder [1], and 802.11 HT rates (n, ac, ad) can also use Low Density Parity Codes (LDPC) [2]. The problem with Forward Error Correction is that it can't deal with too many sequential errors, so many modems use something known as an interleaver. An reorders bits as they are sent over the air, so instead of sending LSB to MSB or vice versa you are sending bits in a random yet mutually known order. This causes link quality issues such as interference to not interfere with continuous bits (to the benefit of the FEC decoder). The problem with an interleaver is that it causes latency to go up. If you interleave based on 256 bits of 2048bits, you can't decode blocks of data until you've received all of this bits. So the 288 bit interleaver that 802.11 uses won't cause many problems if you're streaming but if you are interleaving data across multiple packets you will notice a spike in video latency.

[1] https://en.wikipedia.org/wiki/Viterbi_algorithm
[2] https://en.wikipedia.org/wiki/Low-density_parity-check_code
The Quest for Artificial Intelligence: A History of Ideas and Achievements [pdf]
Not really:

https://en.wikipedia.org/wiki/Operation_Aurora

http://www.nytimes.com/2014/03/23/world/asia/nsa-breached-ch...
You make "downloading" sound more sinister than it is. Downloading something from the network is the only way to see that it's there or know what it is. There is no substantial difference between downloading and viewing in this case.
I just had an APL day last week. gnu-apl + emacs apl-mode was pretty fun. Array based thinking with repl like interaction.. gosh what a bliss.
Right; if you're building a large system, you'll want to structure your design around a set of common patterns. Just writing a ton of hapi/express/koa routes works only up to a point, past which the application's complexity becomes a hindrance to future progress. As with any system.

If you're building a website for your cat, then sure, the tools you use don't really matter.
If JunOS gets a bulletin, the whole Internet has a lot of work on its hands.

If JunOS gets a bulletin, shit, that's really, really bad.

I feel it's very likely that the NSA had something to do with the recent Cisco ROMMON "discoveries", so it would not surprise me one iota if they were involved here as well (although it's obviously pretty early to speculate on something like that -- and impossible to {dis}prove).
>Comparative descriptions like this are a great way to describe products. It's too bad most companies publish new products with a presumption the reader is closely familiar with the existing products/business to make their own comparison.

I tend to read this behavior oppositely: they're not assuming you have the knowledge, they're hoping you don't, and obscuring the similarity to existing products that they might seem inferior to when framed as competitors for the same use case.

"Hey, UberHOP is just Lyft Lines + hotspots with an extra requirement that they hit more stops off my route..."
is this a bit like sheetsu?
This is all true, but (speaking as one) I think the deeper reason is that C and C++ developers are just already used to great pain associated with manipulating character data, whereas scripting language developers expect these things for free.
As I mentioned in another comment, the smaller the system you're building, the less importance your tools have to the success of the project.
Yeah, that's like gaining root access on a server and being told "well, the fact that those commands will execute is merely Linux working as designed". Talk about missing the point...
Hierarchical coding: send a low quality version of the video with high redundancy, and a higher quality refinement of the video with lesser redundancy.
I actually have thought about it some more and gave Ubuntu a spin and now I am 100% with you. Might seem a little weird, this "sudden" change of heart, but yes, you are right.

If I am honest, I spend 90% of my time in a terminal, browser or editor (which is also in a terminal), so give me a system that allows me to easily install my most beloved programs via command line and handy binary packages, a system that is reasonably stable, runs on most hardware, and that has a big community and a lot of documentation, sounds like a good deal actually.
DRM isn't preventing any piracy and we all know that.

If Netflix was righteous, they wouldn't just DRM on their own titles, just ones that require it. Is that the case? Does Netflix use misleading words like "protect"?
A Microservice Toolkit from The New York Times
My new app: CoVerse – Ask and answer anonymous questions from all over the world
Monitor mode is a MAC level concept, and doesn't alter any of the RF characteristics that would make operating this device illegal. (This is not legal advice. Consult with an attorney, etc etc)
What's wrong with Chinese Internet companies?

If you mean they have unfair advantage, you can compare jd.com with amazon.cn.
Are you suggesting there's no night in Mountain View?
Where is the money coming to audit these places? Who writes up the fines/bans and enforces them?

Also if the licensing is so easy, bad vendors can simply use other identities. Making licensing tough and expensive means bad actors pay harder.
These exist pretty much everywhere, by dozens of names: https://en.wikipedia.org/wiki/Share_taxi
That might not be the point. The point might be to allow the intersection between what is palatable for the company and what serious exploits white hat hackers can come up with.

No company wants to include in their privacy policy that anyone can legally access and download your data if they are trying to perform exploits on the system.
Show HN: I spent 6 years making a cool free game
Hey everyone!

Long time lurker, first time poster. I've just reached beta in my game BoxByte Lyte.

-What is it-

It's a free 3d arcade game for hardcore players that uses color matching in interesting ways. Also it's a one button game, well movement and one button. Cool huh? The final release will be free too.

-What I need-

This is a very challenging game, so I really need to balance the difficulty so that it's still hard but not impossible. It would be great just to hear your experiences of the game and how far in it you got.

-Where can I report bugs?-

https://bitbucket.org/ZayWolfe/boxbyte-lyte/issues

-So where's the game?-

Windows: https://www.dropbox.com/s/3143ynz2hlqhg58/BoxByteLyte%2012.17.15-win.zip?dl=0

Mac: https://www.dropbox.com/s/welj1gswunfm4tq/BoxByteLyte%2012.17.15-mac.zip?dl=0

Linux: https://www.dropbox.com/s/ypvtnndmzklj17e/BoxByteLyte%2012.17.15-linux.zip?dl=0

Win VR: https://www.dropbox.com/s/bm0ydtzra4sjml0/BoxByteLyte%2012.17.15-winVR.zip?dl=0
(Warning VR isn't going to be an official feature. It's just a cool experiment for kicks. Might be nausea inducing. I just think it's cool :3)

For the most accurate movement, I recommend playing with a gamepad of some kind.

So if hard challenging gameplay is your thing, why don't you see if you have what it takes to beat my game... Mwahahaha!

13 gates, can you reach the end?

Cheers!
I don't think that most people need to be reminded that digital data is transmitted with electricity.
The Go authors have solved this problem thoroughly. When working in Go, I usually never have to think about this.

https://blog.golang.org/strings
I wrote the comment that OP linked to. IMHO, Sails is dying, which is why many of the project maintainers have started building a successor: https://github.com/trailsjs/trails. Yes it rhymes, no it's not a fork. It's a modern re-write with modern tools and ES6, built around similar conventions.
@secalex I believe that the researcher clearly fulfilled the primary objective of bug bounty programs by exposing a weakness of yours which you, inspite of having large and competent teams, weren't aware of and had not sealed yet. And he did nothing to use that information with a malicious intent.

Your actions are detrimental to your relations to such good mannered external security researchers who are helping you keeping you infrastructure safe from the bad guys. You should have been a little more sensitive and a lot more generous that you have been.
If it works, took no time, and people are using it - I think it's a job well done. Great work jl!
After WW2, there was a period of time when it was seriously considered that Italy might come under communist control. Most famously, you have Operation Gladio[1].

If I recall correctly (and I may not, because this is probably colored by some History Channel conspiracy documentaries), there were contingency plans where Sicily would secede to allow NATO to retain a foothold in the Mediterranean, with the CIA relying on Cosa Nostra connections with the Sicillian mafia in order to effect this...

Yep, I must have been watching that in between a special on the Mayan calendar, and one on how Stonehenge is a pre-historic alien spaceport...

[1] https://en.wikipedia.org/wiki/Operation_Gladio
I don't know their organization/development structure, but couldn't it also mean (for example) an overzealous intern committed where not authorized, and it passed into a production release? It's early to tell, and hard to tease from Junipers message. On the one hand, one might say they'd like to see more info from Juniper, but on the other, courageous of Juniper to be as forthcoming as they are.
Maybe someday the response to this sort of threat will be "In the interests of sharing, I already passed on this information to your favorite class action law firm and the media. It's already in the hands of lawyers and your company is already being sued."
Yeah other tests are global, based on the shared submissions. But that one has to be site-specific, because some sites talk about cheap cameras, and others about medical-drugs. So the databases shouldn't pollute.
If there is an impression that ads are going away, it's the wrong one. In the US alone, it's an almost $200B industry. That sort of money doesn't go away.
> The fact that AWS keys can be used to access S3 is expected behavior and would not be considered a security flaw in itself.

Isn't it a security flaw that a single AWS key was able to access all of Instagram's data?
See also my other comment, I changed my opinion on that.

What I originally thought about were systems like NixOS (for serious development), or something more minimalistic that offers greater control like Slackware, a *BSD (Jails, byhyve, dtrace(!)), or even just Debian (less flashy, more stable and robust).
Show HN: Startup Interns – Connecting Awesome Students with Awesome Startups
Fuse is kind of a cheap hack in comparison.
I went down the road of working with QuickBase, meeting their implementation consultants. It was classic old school software company. Left hand not talking to the right, bloated, unresponsive, just trying to sell you.

TrackVia is another interesting alternative, they started as an Excel replacement (and very good one at that), but have since gone more towards mobile and simplicity in the new version.

Knack is in the conversation as well, but it seems like Fieldbook & AirTable are now the ones to watch.
Go came out in 2009. What's your point? I'd sure hope they'd look at languages older than them.
Let's take a step back here: Facebook threatened to have a security analyst arrested for demonstrating and promptly disclosing the full extent of a serious exploit in a non-destructive manner. Whatever other behavior he engaged in that was unnecessary or ineligible for the bug bounty program, that's incredibly unethical on your part. Especially so, because you clearly didn't believe he was going to do any damage to your system or you would've actually called the FBI instead of someone he worked with.

So, you just wanted to cause him reputational damage and personal problems as an act of petty retaliation. You're right on some of the technical issues here, but in terms of ethics, your behavior has been far worse than his. I don't think you realize how much long-term damage you're doing to your relationship with the wider security community by threatening to jail people who were at no point acting maliciously and at no point caused any damage.
Note how information about Operation Aurora always carefully stops just short of saying that any source code was modified.

Whereas the NYT story is not a statement from a vendor.
BCPL and B were untyped languages, where the fundamental unit of the language was a "cell" that could hold either an integer or a pointer. Also fundamental was that memory was addressable by cells, and that adding one to a pointer (which could also be an integer) must cause it to refer to the next cell. This could only be implemented efficiently on a word-addressed machine. When confronted with the byte-addressed PDP-11, they created a language where the basic unit was a "char". Fortunately, they also added types, so that the language could adapt to changing architectures. However, they were fortunate, or foresighted, in that virtually every architecture after the mid-70's was byte-addressable. C does not adapt well to word-addressed machines, but that didn't slow its adoption because word-addressed machines disappeared rapidly after C was born.
FYI, Sails is being replaced with Trails: https://github.com/trailsjs/trails
https://news.ycombinator.com/item?id=10754917
0 Day Bug in Grub2 Hack into a Linux Computer Just by Pressing Backspace 28 Time
The maintenance of its rural character is purely by fiat - every square inch of Anne Arundel county is zoned for the benefit of the politically connected in Annapolis. Absent the imposed zoning law, the whole area would have been converted to high density suburbia decades ago. Further, farmland would be immediately sold if it weren't sheltered from property taxes through state subsidy law. So anyone trying to scratch a living from that farmland lives in an economic reality that is largely dictated by others.
I see quite a few things wrong with this comment.
but if you really can't figure it out, here's the solution
http://us10.campaign-archive2.com/?u=96bfcc9449f4a039f323866...
You can tell this guy is smart:

> I ... consider programming sh for any purpose ... as an extremely misguided endeavor.
I use DDG for 100% of searches, and never end up using !g anymore. (It took a while to disentangle how much I'd equated result quality with "formatted exactly like Google results".)

But unfortunately, I still end up using !maps for all my map searches, because 1) DDG defaults to Bing, so no, and 2) DDG doesn't automatically parse anything like "$ADDRESS1 to $ADDRESS2" and provide directions. It'd be nice if DDG managed to get sensible first-party maps and routing, either via OSM data or direct map data licensing.
Then rotating their SSL keys shouldn't be relevant.
But until Wes told them, they had no evidence that Wes was accessing the data! Or are you saying that they did have evidence, but chose to take a "wait and see" approach to someone gaining control of their entire platform?
Makes sense.

I've used Hetzner for 2 years now for a lot for personal projects, and I do get slowish SSH sometimes, but that's what Mosh is for. Also, it's much better for European customers than for US ones.

They are also the only service I can afford for personal projects that requires a lot of RAM. Basically, any machine learning with a ton of features.

Here's a test with latency:

URL tested:	http://rerecommender.com
Test performed from:	New York, NY
Test performed at:	2015-12-18 04:36:44 (GMT +00:00)
Resolved As:	188.40.128.87
Status:	OK
Response Time:	0.306 sec
DNS:	0.075 sec
Connect:	0.115 sec
Redirect:	0.000 sec
First byte:	0.116 sec
Last byte:	0.001 sec
Size:	7688 bytes
> 5. Fb nukes the server, confirms the RCE, pays out $2500 for it, declines to pay for the second finding, and asks the tester not to use RCEs to explore their systems.

The issue here is that, in hindsight, FB failed at this step.

They nuked the server, but they didn't determine what sensitive information was available on that server, and take steps to mitigate those risks.

I think that's an understandable mistake - cleaning up after a server intrusion is hard. Knowing how much to do after a possible intrusion is even harder. But it is still a mistake and it happened on Alex's watch.

If the purpose of the bounty program is to find out about your security mistakes, then the program did its job here, and Alex should be pleased that the problem was reported so that they could fix it.

That the researcher found the mistake by overstepping what is considered ethical (and I have no doubt that they did overstep) creates a very difficult situation - you don't want to reward that behaviour, but you do want to know about security problems and this one was only discovered/reported because of that bad behaviour.

In that difficult situation it is all the more important to tread carefully. The easy cases where you're paying out a $10k bounty typically don't require much finesse. It's the tricky cases where you need to make sure your actions are well considered and above-board at every step.

From Alex's own summary it's evident that he didn't handle it as well as he could have.

Two of the longest paragraphs in Alex's write up cover what he said to the CEO of Synack, even though Synack had nothing to do with this. Even if we accept that Alex thought it likely the Wes was acting on behalf of Synack (personally, I don't think that was a reasonable conclusion to draw, thought I assume Alex is sincere in his view that it was), he should have determined that up front, and then, once he knew it was not work related, he should have avoided:

- making accusations about Wes's ethics to his boss ("Wes ... had acted unethically")

- suggesting that his external behaviour has implications for his employment ("Wes's behavior reflected poorly ... on Synack")

- bringing in the threat of lawyers ("keep this out of the hands of the lawyers")

When faced with the difficult situation of legitimate security research that has (well) overstepped the ethical boundaries, all the evidence is that Alex jumped to the position of protect yourself, protect the company, intimidate and control the researcher and though that is a common and understandable reaction, it's not the way you turn a bad situation like this into a good one.
Once you get past the initial learning curve, array algorithms are a wonderfully natural way to think about problem solving. The toolkit you get with APL or K is compact but capable of concisely solving a shocking range of problems. Most of the functional languages I've played with aren't half as effective, even with a much larger standard library.
Back in the early 90's (in the US) I had a friend who was a college student from China. In the common area of her dorm there was a huge wall-size Rand-McNally map of the world. We were looking it over.

"There's China" I said. "And there's Taiwan."

"You know Taiwan is really not that big." she said.

"What do you mean?"

"Map makers show it larger than it really is in order to exaggerate its importance."

I was a little weirded out by that idea. This girl was pretty intelligent, she seemed to know some math and logical thinking. She was in the process of becoming a CPA.

For better or worse I responded with practical analysis: "How would that even work? You and I could go buy maps right now for navigating ships and airplanes, those would have to be accurate in order to function. We could compare them to this one and if they are noticeably different we could complain and the company that made the map would lose face. Why would Rand-McNally give a shit about the political importance of Taiwan anyway, enough to risk their own credibility?"

"They just do. All map makers do this."

She would not be convinced.
tl;dr Project aurora was a series of attacks in 2010/11 where Chinese attacked the SCM of major companies. Juniper may have had its SCM polluted without going through normal review processes

And so signing code patches looks like a good idea.
Many electric skillets are fully submersible and dishwasher safe. They pretty much all have removable plugs that has the thermostat control and what's left is a sealed unit. As for heating up, that's a function of your skillet vs. stove wattage which varies from appliance to appliance.
I think the case he is getting it is when you should be writing an actual program using something like C where you do have access to absolutely everything.

He alludes to this in his first comment about exactly when to use shell scripts.

> build or bootstrap scripts

I agree that python and perl are not good alternatives to shell scripts... even if they are more compatible with e.g. windows environments.
This might defeat the purpose, but why not have remote controlled cars. A digital taxi driver could alleviate a lot of the problems that we currently have with non-autonomous cars, except bypasses the whole open-research problem of having roads full with autonomous vehicles. What's being done right now with digital assistants is a similar strategy.
I use Hapi with Waterline and I love it. I'm looking forward to exploring Trails (pardon the pun) and integrating with my Hapi projects.
Frankly it's refreshing to see a slightly more balanced perspective on China in this article. The side note that Chinese people were suspicious of Windows because of the NSA was particularly good.
Yeah, I'm not reading 15K LOC... What makes it clever? What is even the point of linking a 15K file?
Android’s multidex slows down app startup
Big thread - https://news.ycombinator.com/item?id=10750928
The biggest streaming service renowned for no ads still sells ads. Hulu has ads between scenes, but Netflix has a fair amount of product placement in the shows they produced. I just want to pay money to avoid seeing ads for stuff I don't want to buy. It's painfully obvious I'm in the minority.
This whole thing is silly. Facebook (or any other tech company) have a lot of flexibility and hardly any accountability in defining what a "million dollar bug" is. You really can't believe they are going to just hand you over 1m because you think it is a 1m bug. It very well may be but in the end facebook will be the one deciding the value of said bug and you will have nothing to do with their decision so assume they just won't do that.
Fantastic. I am surprised to learn that people gift condoms too for christmas.