skysight-inc/HackerNews huggingface dataset:
This isn't so much about nothing to hide - but more about doing a costs/benefits analysis.

I mean - most people here use webapps - whether it's HackerNews - or more mainstream ones like Reddit, Instagram etc.

We assume that the webapp developers know when we use their services - after all, it's hosted on their servers.

If you were super paranoid, you could run your own "cloud" services - your own email service, your own document sharing service, your own image sharing service etc. However, for most people the cost/benefits analysis simply isn't worth it.

Apps like Twitter, Instagram, Google Docs, GMail etc are popular precisely because people figure the utility outweights any "fears" they might have over those scary developers tracking their usage.

In a comment above, I provided a concrete example of where telemetry data is useful:

"I worked at a trading company before, and one of the reasons we pushed out telemetry was due to user's feature requests - users would request features, and we wanted to see if they were actually using them, so that we could prioritise developer time accordingly."

Or the same reason most people don't use encrypted email (currently).

I mean, come on - you're storing your data on their servers - there's got to be some trust there.

So my question remains - what is the fear here?
It already happens unofficially. How do you think banks assess your lending/borrowing habits when you apply for a loan? There are detective agencies who track credit cards and other things (like a few examples someone gave in this very thread).
Because you might be exporting it to an un-friendly country.

Don't try to apply logic here -- "But can't they just compile openssl or just use Linux!? or some library..." -- this is government contracting and security world, regular logic doesn't work here.
Fair. Although you could imagine a world where things like the original .Net trusted computing initiative succeeded in full force, and you could not purchase general purpose PC that let you execute any unmanaged code. Just look at the phone market, you can execute C code technically sure - but in unprivileged user space - with hardware you "own". (yes I know about rooting, but this is rhetoric about a hypothetical)
Why does it have to be fear, rather than preference?

Maybe there's no data you're afraid of leaking, but you would prefer never to leak that data. It's a consumer choice - the problem here is lack of transparency/information to the consumer.

The cultural standard is what we accept to be appropriate - do we want to accept a cultural standard of everything you use is tracked and logged by default?
No I think most devs don't interpret the rules as the OP does. Connecting to an https endpoint is clearly not what they mean here.
With almost 600M monthly visits, Tumblr does not look like dead. At least yet.

http://www.similarweb.com/website/tumblr.com
Are you US-based?
Yes, but many peopel use webapps - whether they be Gmail, Reddit, Instagram, Twitter and mobile apps.

I mean, the damn webapp/apps already have your data.

There's an implicit trust there.

Why do you think webapps are doing so much better than heavy desktop apps? Because people figure the benefits outweigh the risks. Just off the top of my head:

* Reliable distributed backups of your data, without having to do it yourself
* Ability to share easily with anybody on the web
* No costs for running your own servers
* Less technical knowledge required - e.g. have you tried setting up your own email server? And actually sending email reliably?

I don't think we should assume, in our ivory towers, that people are somehow "stupid" - is there a concrete fear here? If so, is it something we think they are unaware of?
What makes you say that? This article doesn't say that and last I heard they said they weren't using Bitcoin.
Lucie Blush Talks About Feminist Porn
> Or do they just expect to keep being paid for doing the same thing forever, even if it is no longer economically viable?

I agree with your point that it is incumbent upon every individual to continually improve themselves. However, I like point out whenever this sentiment is brought up (including by myself) that while individuals must continuously improve, it does not necessarily follow that organizations will improve. Even if those very organizations are crammed with lots of those continuously-improving individuals. Especially large, monopolistic or duopolistic organizations with a lot of staying power over long periods of time.
Incredibly cool, I watched the tutorial videos. I can't imagine how you would create large complex structures with this, but I'm impressed with whoever is able to do it.

On the github repo I noticed that you can convert your designs into 3D printable STL models, very cool!
Faraday Future unveils its FFZero 1 supercar of the future
The proliferation of "blockchain-backed technologies" is one fad that I really do not like. It makes me want to sell my Bitcoin, in fact. There is some vague feeling that this trend is just going to result in a collapse and loss for everyone.
A Nigerian comics startup is creating African superheroes
That is not what either Rust or Haskell are. It would behoove you to have a passing familiarity with what someone says before responding to them combatively
It allows you to have an immutable distributed database with known entry ordering that can be shared between multiple parties.
Fair point, there's no formal or widely accepted definition for Product Engineer.

In Roman languages, the word "engineer" derives from the word for "wit" (e.g. "Ingeniero" <- "Ingenio" in Spanish); hence there's a mental connection to identify an engineer as someone who uses her wit to solve problems. The Product Engineer hence uses her wit to solve Product issues, that could range from technical issues to manufacturing, materials, distribution or even marketing issues. She has to have a more holistic and less deep view of multiple areas, a la Project Manager.

Now you'll tell me that I'm talking about a Product Manager and I'll have to agree. In my opinion, a Product Engineer is a different name for a Product Manager. Product Management is a really broad area and I think some people more inclined to technical stuff and especially software development would feel more at home being called Product Engineer than Product Manager.
You don't need mining for private chains.
There is still the matter of EPEAT though.
> The Shah thought he was buying development, making Iran into an advanced nation. But all he was buying was a factory, though an immense one. What he needed in order to actually be developed was what he couldn't buy: the web of thousands of companies that together enabled to US to build that factory.

This brings to mind the economic development of southern Korea under the Syngman Rhee and Park Chung-hee dictatorships. Rather than buying just a factory with their available capital they used it to fund the expansion of what are known as chaebols, Korean firms involved in a wide range of enterprises. You'll have heard of Samsung, Hyundai, LG, Daewoo, to name a few. Those are examples of chaebols. To be clear, that system can have problems, but it is an amazing contrast to courting transplants [0] or buying factories.

[0] http://www.rgj.com/story/news/2014/09/04/nevada-strikes-bill...
3. is probably more interesting on the users' end (e.g. a highschool: often slow connection, tons of students all wanting to watch trendy videos). Could be solved with a special solution as well, though.
*The Golden Rule. "Treat others as you would like to be treated"
If that's your preference, then you are free to not use those webapps, or mobile apps - why would yo use Gmail, or Instagram, or Twitter, or Facebook, if you were worried about your data being held by a third party?

We shouldn't automatically assume people are stupid, or that they are being "duped".

There are numerous advantages to using a cloud-hosted service - if you tried to replicate Gmail or Dropbox, to the same level of reliability, performance and sharing features - the engineering effort alone would probably stump many of us.

Once again - is there a concrete fear here from application developers knowing how we use their applications? And is it one that we think people are somehow unaware of?
Computers are great at brain augmentation devices - but if you spend all your time building the device, then you'll get a poor outcome and have wasted (most of) your life. That's the practical reason we want both mass produced hardware and transparent (and hence, controllable) hardware state. A world of augmented minds is much more problematic when a central authority can and does monitor everyone's mind, not the least of which because in such a state revolution would be trivial to eliminate even in it's earliest forms. And I believe all thinking humans have learned by now to distrust any system that can perpetuate itself so perfectly, and so indefinitely.
Stop comparing JSON with XML... let me compare them to show why.. ;)
Both the Junior Engineer and the Senior Front-end Engineer are jobs with Elm.
Yeah, I discussed that incident as well. They are quite quiet about their security efforts for obvious reasons (you don't want to give criminals hints on how to get away with it) but beyond the obvious dissuasive factor of drivers' identities being known, and bad characters being weeded out quickly by the rating, they were looking into things like comparing path taken by the car with the path it should be taking, flagging up rides to be reviewed and rapidly sent help if necessary.

It's a massive step up from what was available with taxis before. I remember when I worked in Mumbai, getting ripped off systematically until my co-workers helped me find "Meru Cool Cabs" which were always on time, professional and charging my non-Hindi speaking, non-Indian looking self by the meter. That, and trying to haggle on a fare with autorickshaws (resulting in 1 in 20 agreeing - the rest wanted 10x) to go home from the Big Bazaar in Vikhroli, and wondering if the shortest path REALLY has to go through that slum. Wish there had been Uber back then.
This was an awesome article. Great post
I wrote a small gem for Ruby on Rails that does this (tastes_bitter on RubyGems). It's very basic, and doesn't handle browsers which don't support all of the attributes, such as stack trace, yet. I'd like to implement a polyfill for it like you've described in your post!
Free has a price.
>these kinds of connections (India(?) to rural Western Europe) should stick out like a sore thumb in the data sets IK would guess?

I'd guess the opposite: there are enough legitimate outsourcing firms in India that traffic from fraudsters blends in pretty nicely.
Well, it is really non-obvious, to the point that I think they're clearly trying to hide it. The white space expands to push the start of the paper below the fold no matter how large your window is, and the "READ PAPER" text is light grey on white.
Public blockchain == glorified database too. What's your point?
That was my first thought, that there's tooling around JSON to do all of the above... for that matter straight python, js/node and other languages do very well processing JSON... if your encoding ensures no unescaped cr/lf, then a record per line in json + gz is awesome.

XML is literally too expressive, and you can't tell how to deserialize xml with a good fragment... json you can (at least better)... the query/expression syntax is even worse than learning/using a simple general purpose programming language.
Any support for nearest neighbor joins? They are very important for aligning events in time series data sets.
It's a FREE app. If you don't like it, don't agree to the terms and quit using the app.
You're right! Updated the title accordingly
> [commenting the sha] makes this a moot point anyway.

No, it does not. Emacs has gone through 4 version control systems, I can't imagine how they'd refer to it in a comment. As someone who's been through several, I guarantee you that git is not the final frontier of VCS.

Also - if you intend the comment to communicate to your team (as this commit does.. did you read it?), then your other comments also make little logical sense.
So you're prepared to invalidate close to 100% of all employment contracts in the US?
Gene-Editing Drugmaker Backed by Google, Bill Gates Files for IPO
Quite the contrary. Those are entered into willfully and not coercively.
It's easy enough to create an alternative syntax for it, one-to-one translation. For HTML (XHTML?) there are plenty examples already like Jade.

http://jade-lang.com/

But people who are serious about XML-related technologies understand that syntax of XML is mostly fine, interoperability and existing tools matter way more. It would be hard for such an alternative syntax to catch on. People often forget that it is a direct descendant of SGML, I imagine for similar reasons - there were existing tools for it.
Supergirl (Blood Bonds) Summary and Review
So where did she stand on IP and copyright?
My problem with these benchmarks is always which JVM are they measuring, given that I can choose any of these ones:

https://en.wikipedia.org/wiki/List_of_Java_virtual_machines

It is like I would measure C performance by picking a specific compiler, even though I can choose any of these ones:

https://en.wikipedia.org/wiki/List_of_compilers#C_compilers
Indeed, and that's the case with everything - Google, Facebook, Twitter, etc.

I get it.

My point in this post is that I (who am interested in privacy and rights online) didn't realise what was going on, how is Joe Average going to know?
>each test is one better than none

My experience has been the reverse: lots of ultimately pointless tests add nothing to a given codebase but maintenance costs and developer frustration.

The most successful projects I've worked on used (completely automated, no code getting pushed to staging unless the CI server says it passes) tests sparingly.
It was practical, easy enough to do and didn't break any existing stuff. It's still XML, right? So why not? Nothing to do with obnoxiousness.
>PFM (pure fucking magic)

This acronym is beautiful.

That's a cool library you have there but have you considered restructuring it to fit PFM pattern ?
at no point am I arguing whether python 3 is better or worse than python 2. That is an uninteresting conversation because the fact remains that less than 30% of all software is in python 3. Even when Google released Tensorflow, it was in Python 2 (and they employ core developers of Python).

Do you seriously think anybody is thinking of dropping python 2 support by 2020 ? that will only create a fork. None of the core frameworks have upgraded in a decade. Look at Flask for example. So yes, I havent been using Python 3 much - there has been no reason to.

the point I'm trying to make is how to get everyone on the same page. The reason Python 3 was api incompatible was because of the core tenet of one-true-way. All the functions you mentioned may be superior, but unless you give people a way to mix and match both in the same source , you will not have adoption.

Or do you think Python 3 adoption has been successful ?
Hey, OP here. Thanks for the mention of Xprivacy - I wasn't aware of it. :)

Like everyone else, I'm always learning. Just sharing this post for others who weren't aware of Amazon's business model here (which does seem somewhat hidden).
How about:

The old version of this code is under source-control <here>. The code is very complex and likely to have subtle bugs. If bugs _are_ found, it might be of interest to look at the old code and see what did it do in the relevant situation.
There is another reason for C's undefined behavior.

Back when the language was being standardize, there was way more hardware diversity than there is now and C implementations outside UNIX, even K&R ones, had lots of semantic differences.

As no compiler vendor involved in the first ANSI C process wanted to give up on their semantics, all of them were swept into "undefined behavior".
Not OP but...redux and react-router, both mentioned elsewhere in the thread, and both maintained here: https://github.com/rackt
Application Validation and Domain Validation
Basically I'm tunnelling on SSL.

I'm close to launch a first version of the service, it's got some already identified issues, but I'd like the customers to tell me what seems to be more pressing to them after using the service.

Anyway, when I launch I'll also write a guide on how do this yourself with open source software. My service would be aimed to those who can't or don't want to maintain their own deployment :)
And even in the case of emergency care, there's at least the potential that you could prepare in advance by familiarizing yourself with the market. But hospitals won't tell you what anything costs ahead of time, which is practically an invitation to gouge ("just leave your wallet and bank account passwords with the front desk...").

Even auto mechanics are required by law to give you a written estimate.
MicroSemi offers FPGA+ARM in their SmartFusion chips. About RISC-V: consider asking them.
That would an interpretation. I didn't order the item in question. However, a week before, I did order a different item for double the price. Different vendor. Different department; one was food, the other electronics. Then I started to look at other reviews for overpriced products. Ok, so I'll leave a negative review. No longer allowed? Seems like a bad combination: no negative reviews on price gouging + really easy purchasing. Caveat Emptor Amazon.
What do I expect? I expect the people that I send sensitive data to to be able to protect it. Blaming their overseas offices and partners doesn't make it better or relieve them of responsibility.

And Dell isn't some too-cheap-to-be-true, fly-by-night operation. Saying that their customers were basically asking for it is bollocks as well.
I can't see where the article's scary headline is justified. It appears that all that happened is, he used this service without knowing it was based on tracking app usage, and was surprised when he found out.
One way to alleviate this concern is to know your audience and not sign up for a product like Mailscope if your audience is privacy-minded.
We continue to need to bear arms of all sorts, equal to those that the military uses. As you pointed out, the purpose of the 2nd amendment was to avoid tyranny in a powerful central government. As long as the (federally funded & led) military uses firearms, responsible civilians _must_ also keep & bear them.
Lobsters
I've been pondering how to attack the problem of making better UIs for going on 10 years now. Half the time I think I'm completely out of touch and that my ideas are irrelevant (with good reason), the rest of the time I wonder what would happen if I actually tried to implement some of the stuff I've come up with. (I strongly suspect I'd get a rude shock and realize how much iteration would be needed to make it usable, heh.)

I'd love to bounce ideas back and forth, but... agh, a Slack URL. I tried Slack once, felt too stifled, and bolted. The poor team I joined still has no idea where I went or why I left.

I'm torn between asking for an invite and just passing because, ironically, the software being used grates too much (XD)... maybe you could enable the IRC gateway?

One thing at a time though; if you're using Slack, so be it. My public email is in my profile. The private email I'd want to sign up under is different.
Yes, you can do it without `polymer`. But I wanna work with it. `polymer` will give more free times to do something funny more than think about, how to expand this app, how to control all states...
In my opinion, walk on BigBoy's shoulder will faster, and get wider vision
Maybe pre-launch and pricing not figured out yet?

He mentions that he just started working on it, so he could be in some sort of private beta.
Oddly enough, the American health care system is so broken that for many people that would be an improvement.

https://en.wikipedia.org/wiki/Medical_tourism
Then I didn't made myself understandable. I didn't say that it is. The title of Chris talk is modestly worded as "A Survey of Remote Automotive Attack Surfaces" not "A root exploit of the car bus system and engine management?".

I wanted to express that the title of the talk suggests that there exists something that is called Rowhammer.js that gives root access through the browser. And there isn't.
As I added as edit on my comment, I think that the place for such optimizations is pure hand written Assembly, if they cannot be safely generated.

You avoid relying on a compiler specific behavior, that will break the moment you switch compiler, compiler version or CPU target.

Instead you get a very clear set of Assembly instructions, that will never change for the specific CPU family.

The argument of writing Assembly being non-portable, doesn't play a role, because such optimizations are not even guaranteed to stay stable for the same compiler vendor.

In any case, only after a profiler has proven they are really a case for spending development effort on.

My experience with the C and C++ developer culture back to the mid-90's, is that many suffer by anticipation with needless premature micro-optimizations.
It doesn’t seem to be abandoned. The latest version of Geektool (3.1.3) seems to have been released in October and even has support for El Capitan¹.

――――――

¹ — http://projects.tynsoe.org/en/geektool/download.php
Wouldn't paying them more across the board lead to more competition for positions which should lead to higher overall quality?
He may be doing that, but he is not alone: the government has spent the past 8 or so decades trying to conflate the two in everyone's mind, and at this point, the only way to keep that up is to make housing into a de-facto collectible by strictly limiting its supply. This means that all those terribly high housing costs in SF are mostly economic rent, which is not productive and also tends to increase inequality. But that's not a problem caused by billionaire business owners, for the most part. It's caused by upper middle class worries about their speculative investment and the schools their children would go to, and the resulting regulatory capture.
I am a frontend developer and I wanted to learn Haskell for a long time. But I just can't wrap my head around it. Is Elm or Purescript a good way to ease into it? If so, which one is better?
Some very cool features included, I especially like using 900 MHz. I hope the WiFi Alliance doesn't pull the licensing crap that Bluetooth SIG has.
This article is pretty garbage. compares almost nothing about xml and instead compares the tooling around xml giving no thought to the tooling around json.

instead, let me give you my unsolicited opinion:

if you need to represent both the structure of your data and characteristics within that structure, xml is great because attributes are a really good way to do that. there's a reason most UIs are represented as XML.

if your data is just - well, data - use json. or better yet use edn
i seem to remember they had cds with examples on - does anyone else remember that?
I didn't buy the item. It was an Apple Watch charger that Apple lists for $29 and the vendor has a "list price" $59. In the past, I have read reviews which mention that an item is being sold for a lot more than SRP. So, I thought to do the same. But, I guess that is no longer allowed. So, I can't trust Amazon reviews anymore. This was a week after spending double for something else. So, time to experiment with another vendor.

EDIT (More to your point.)

>> it sounds like you bought from a third party seller on amazon, yet you seem to expect a different experience from those same type of third party sellers elsewhere?

Buying directly from Apple was cheaper than Amazon. Until last week, I would have gone to Amazon first, read the reviews second, and then order. Kinda sad; breaking a decade old habit.
...by the same person that has predicted World War III to happen in 2010-2014, leaving the Northern hemisphere devoid of life. https://lighthead.wordpress.com/2008/09/30/baba-vanga-predic...

In other news, Imminent Death Of The Net Predicted!!!!!!!