skysight-inc/HackerNews huggingface dataset:
I appreciate a lot of the work that the Tails guys do - but for a privacy and security focused distribution there are far too many included apps for my liking[1], which increases the attack surface. LibreOffice, Gimp and Audacity are just some of the apps - and many have a horrible history of vulnerabilities[2].

When Tails has had vulnerabilities it is often with one of these included apps[6].

The browser isn't sanboxed (it's in progress[3]), and the machine is still directly connected to the internet, so you're a single Firefox vulnerability and a drive-by download away from being deanonymized.

It is also a shame that both OS X and Windows make it difficult to write an OS to an USB stick and boot from it - the install requires an intermediary Linux OS either on DVD or USB, which a lot of users won't get by.

For a different approach, see Whonix[4] - a virtual machine based approach with an isolating proxy (very popular setup amongst black hats) and Qubes OS[4] which is built on Xen and runs processes in separate VM's

[1] https://tails.boum.org/doc/about/features/index.en.html

[2] https://www.cvedetails.com/vulnerability-list/vendor_id-1143...

[3] https://wiki.mozilla.org/Security/Sandbox

[4] https://www.whonix.org/

[5] https://www.qubes-os.org/

[6] https://blog.exodusintel.com/2014/07/23/silverbullets_and_fa...
Asking "Would you buy a product like this?" is empty. There is no "this" and therefore there is no way of knowing if what you mean by "this" is consistent with what I think you mean by "this".

My advice: build a mockup or prototype. Make a "this".

Good luck.
" When asked to identify the number of phonemes in a word, they were correct 62 percent of the time. They struggled more with morphemes, correctly identifying them 27 percent of the time. "

I'm surprised. When I was TAing morphology and phonology courses, people generally had more trouble learning the inverse. That is, identifying morphemes was relatively easy compared to identifying phonemes (although you could choose your examples to get a similar spread. People take a nontrivial amount of training to ignore how things are spelled)
Yeah I think this is very exciting and this sort of development could be of great importance for programming in the future. There are certainly more possible complaints than performance with Ruby but when you take a top layer that people are generally pretty satisfied with and make it much better under the hood, you are going to have a big impact.

This idea is what made me excited to read about this and reach out to Chris to conduct this interview.
Remember, the patent system can only be abused if people participate in it. I hope nobody here cheering for Newegg has benefited from their company's "patent award" system (which many companies have, where they pay you a small bonus for every patent you help the company get). You can't claim that software patents are bad while getting paid for helping to write them.
The Difficulty of Talking About Doomsday
> Yes, 70 years ago psychiatry had some odd ideas.

Yes, that's true, but in the name of accuracy, the Asperger's fiasco wasn't 70 years ago, it played out seven years ago, when the condition was finally abandoned after an epidemic of phony diagnoses (http://www.nytimes.com/2009/11/03/health/03asperger.html).

The Recovered Memory Therapy fiasco wasn't 70 years ago, it played out in the 1990s -- you remember, when virgins could claim to have been raped and be believed (http://arachnoid.com/trouble_with_psychology)?

The homosexual fiasco wasn't 70 years ago, it played out in the 1970s, when homosexuality was finally abandoned as a diagnosis (https://en.wikipedia.org/wiki/Homosexuality_and_psychology).

But in all these cases, the abandoned diagnoses can still be offered by mental health professionals, and some still are, simply because there isn't any science sufficiently persuasive to say "no" to anything psychiatrists and psychologists care to do.

> It's frustrating that you only make these comments about psychiatry - you don't pop up in geography threads to say "Wait, what? Does this mean geographers don't still believe in fixed immovable continents?".

Geologists don't have clinics. Geologists don't issue press releases telling us how sick we all are, and how desperately in need of talk therapy.

> A therapy might be involved if a person is hearing voices, but isn't particularly bothered by them.

My point is very simple -- the health resources directed toward psychiatry and psychology, for what are fact either nonexistent or biological ailments, are wasted, and would be better spent on real science. Thomas Insel's (director of the NIMH) proposed abandonment of the DSM was a good first step (http://www.newyorker.com/tech/elements/the-rats-of-n-i-m-h), but more needs to be done.
In our case, the admins who create/manage those events have to specify the event location, so we fetch the timezone for that location and if there's any mismatch, they can change the timezone manually. Since we migrated all the data, we have not received a single bug report for an issue that was caused by DST or from converting UTC times to local timezones.
"First, let’s agree that the way to evaluate teacher training is to test teachers. "

Oh. Uh... Can I agree that testing teachers is a sensible part of an evaluation plan instead?
I've not seen this before, I'll give it a look.

Also, I do admit, my point is made bluntly.
> It's as if you had to be there from the start to have a full image of how the language grew and truly understand the interplay between all the "features", otherwise it's too late to become an expert, and in some cases even too late to become comfortable writing good maintainable code in C++.

Although this is perhaps a poor anecdote more than anything, I myself only learned C++ six years ago (when I was learning to program, to boot). Overall the switch to using C++ today is more of an "unlearning" process, and requires that you don't treat the language as you would treat C (for better and or worse).

Overall I don't think it's true that you had to be there from the start, as you could easily just learn C++11 and C++14 style idioms today and avoid the hairier parts of the language if you want to. Reading through Scott Meyers' books are a great start, but overall I found that switching to a more modern style was very easy if you already know some basic concepts from other languages (range-based for, what a lambda is, how auto / type-inference works).

I guess really, is that I think giving up because C++ has evolved very differently from C or how other languages evolve just seems... defeatist?
Fascinating reading. This is probably of interest to the wider HN crowd.
Nothing I've worked on has been nearly to this scale, but having management understand and ignore warnings is commonplace.

Just today, I pointed out that a backend web service system for an important (HR) function was so insecure that simply putting a single quote in an end-user input field would crash it, and that a SQL injection would be trivial. After a little arguing from them ("You don't know what a SQL injection is") they changed their tune to "Just put a limit on the frontend", and when I told them that could be trivially bypassed, they said "No one will ever think to try that." When I pressed further, they continued to "It's an internal app, no one would attack it" then to "And do you want me to put locks on all the doors and cabinets around the office too?"

So that's a case where there's some reasonable level of understanding and just a refusal to act.

I also recall a time (at a different company) when I discovered a public read/write anonymous FTP server setup externally facing with no firewall rules. When I pointed out the problem, they said, "that's what our customers are used to, we're not going to change it." and when I pushed, "No one will ever find it anyways." Literally less than a month later that server was overrun with illicit content.

It happens. Unfortunately, as we've seen with the Volkswagen debacle as well, it happens even when regulation or (in the Challenger case) human life is on the line.
Misunderstanding the Financial Crisis in New (but Still Wrong) Ways
What OS & browser? I can check it out. We use the same font as Medium used to (for readability reasons), but they've changing to system fonts (which are probably better) and I want to cut down on the page size anyway.
Yep. They are MS ingenieers, of course Windows is easier for them. Plus it's good publicity. Given that they are paying for it, it's fair they start like that.
I disagree. This is a fairly poorly-written persuasive letter, and we have ample evidence for its lack of persuasive powers. The letter opens with useless content "This letter is written ..." which is self-evident. Then it proceeds to the grammatical error of "insure" which almost made me stop reading. If I was writing a letter like this, and I wanted it to have some effect, this would be the first sentence:

The total loss of a future shuttle mission and the death of its crew is a near certainty with our current booster o-ring design.

Then I would omit everything else in the original letter except the request for staffing.
Getting admitted isn't as valuable a signal as getting a degree.
Both are a signal or proxy for intelligence (IQ), but getting a degree is also a signal of persistence and conformity to get through the grind of college courses.

Bryan Caplan has written much about 'signaling theory' and education in posts like this one:
http://econlog.econlib.org/archives/2006/02/mixed_signals.ht...
It sounds exactly like Russia to me. Same level or corruption and danger to regular citizens.
> Firefox refuses to let me look at this page because of a certificate problem.

Me too, but I know why: my employer's proxy MITMs any SSL connections whose certificate authority it does not recognize as bona fide. Quite aggravating - but a very nice tool to explain SSL MITM to users... There's always a silver lining !
Isn't something missing? I was under the impression that the accident happened due to the cold. Nowhere in the memo does it say anything about how to avoid the problem, nor does it call for a full stop of launches until its fixed. It seems to be referring to a known issue without explaining what that is or what to do - specifically. Or did I miss that?
accepted = past tense of accept (to receive or admit formally)

excepted = not included in the category or group specified
I mean, thats one way to look at it. If you can't find anything unique in the tens of thousands of home producers nowadays I don't know that there'll be anything you'll find unique. What would you want, music via implant?
Bernie Sanders campaign questions Microsoft apps made for Iowa Caucuses
Nim works quite well with GDB. I've tried it. It can generate metadata that GDB can use.

It's not perfect, but for my uses it has been alright (but then I'm ususally the kind of person who prefers to use debug printing and just studying the code)

Nim also shows very nice stack traces on uncaught exceptions so that also reduces the need to fire up GDB.
This seems a very risky option, if he has a copy of the data and you are harassing him this way, there is a good chance the data is going to be released somehow.
Sweden to Deport 80,000 Asylum Seekers
> Don't bother with legal threats or trying to get UK law enforcement to seek revenge. This is me playing nice.
If you want to go nuclear with me, feel free to do so, but trust me when I say you might want to think long and hard before you do.

> I'm not known for bluffing, and I know many more of your secrets. About 18TB all in all actually, all unpublished yet.

I wonder what's in the unpublished docs, and why they're remaining unpublished.
Back in the 90s I was working for a very large IT contractor on a very large federal government contract.

The place sucked, but that's another story. I started as a senior dev, and within a year or so moved up 3 or 4 levels.

Even after moving up, after a year I couldn't do that no more. I wanted to build stuff. When I told them I was going to leave, we worked out a deal: I'd pick a team of 2. We'd work on a project with a couple of other large government agencies. Folks would leave us alone. We'd get shit done.

So we did. In six months we delivered the project. I worked mostly from home. We 3 were delivering at a rate that was greater than the 10-20 person teams at the other agencies. It was sad.

After six months, I was getting ready to bail, but they beat me to the punch. They told me I could no longer be working at the job I was doing. Why? Because I was self-taught. Needed at least a Master's degree, preferably a PhD.

It really didn't bother me since I was leaving anyway. On the way out, though, I spoke to the number 3 guy on the contract. He asked me about a few of the PhDs I had working for me.

"They're pretty good, I guess. But this one guy? He's so arrogant nobody can work with him"

The guy basically told me that they had to fill seats with PhDs to meet the GSA schedule, didn't matter whether they did anything or not.

I liked all the people I worked with, but I'd never voluntarily go back to that kind of idiocy.
Right.

Because an individual defending himself against civil AND criminal proceedings will get very expensive very fast. In addition, any competitor would be very cautious about touching that data if the guy approaches them trying to sell it, because see figure (1).

So the only avenue remaining is selling the PII to spammers and identity thieves, which will still land him at figure (1) if they get caught and roll over.
This kind of hippiesque, free-spirit approach sounds fine for MIT-level students, but I have my doubts that this model can be effective beyond those highly driven individuals.

Also, while I agree that you don't need a college degree to be a successful programmer or business person, most other science professions require some sort of structured learning environment and equipment to effectively teach students.

Maybe I'm dumb and this professor is onto something. She has a degree in material sciences, so perhaps she knows first-hand that all the knowledge you need to learn advanced chemistry can be gained by someone with a garage and aspirations.
Kmachine: Docker machine variant to create a single node Kubernetes instance
Still sounds like "Appeal to authority" to me. To speak to your analogy, I am involved in the field of computers, and I've seen first hand "experts" in this field build big complicated systems, that maybe had some merit at some point in time, but as the context changed with new developments and technologies, a young upstart built something much more simple that made the expert's system look like a mess. This is relevant because the context of what we understand is very different from Newton's time. School children have a more accurate depiction of the laws that govern our reality than the tops minds at the time, who believed in such things as phlogiston and the earth-centric universe.
Prosody runs on the original RaspberryPi, so it should run on even the crappiest VPS. It probably doesn't scale to thousands of users and is missing a fancy web GUI, but that doesn't really matter for a private server.
Mixpanel Mobile Dashboards, Monitor your key metrics everywhere you go
Stop What You’re Doing and Start a Bitcoin Company (2014)
> that phrase is a meme

So what? That bigotry is a meme doesn't make it any less bigotry. He used gay as an insult, there is no excuse for that behavior period.
Generally it isn't a backward adjustment but simply a slowing down of the clock until the 'real time' catches up. On the other side, you speed up a clock to catch up to the real time rather than catching up all at once.
But everyone should go to high school. Hell, if you aren't going to college I do hope there is an extended high school. I don't care if its taxpayer sponsored but even high school is not enough to foster a critical thinking process.

I picked that up somewhere between high school and end of college. Some people may be faster than me but that skill is really important.

Either that, or you don't get to vote.

Edit: The last statement was more about the ability to think critically and less about if you finished high school/college.
It's not another framework. It's not even another library. It's an implementation of an existing library with some features cut out.
It doesn't sound like either Buffett or Musk is really involved....
> Can you elaborate more on the last paragraph?

There's not much to say. You depend on external services (and network
connection) to write, build, and deploy locally developed things. All this
fails badly when one of the services experiences problems.

> Also what do you exactly refer to by package repository and how would installing pip, bower or npm modules become different?

Dude, really? `apt-get' didn't give a hint?

And all those modules are different from one, single package repository in
that you won't install Python modules using npm, or JavaScript with pip, but
you can do all those with `apt-get'. And you'll get repeatable process,
since you control your package repository.
We simply ignore DST. For example let's take a recurring event that happens every Wednesday at 6pm for 10 weeks. In the middle of those 10 weeks, this timezone enters DST.

By saving the series' time as 6pm EST in the database, we can save all the individual occurences without having to do any check for DST changes in the middle of the series.

The users are simply interested in knowing when their yoga class is, the class is at 6pm, that's it. Before or after DST change, it's still 6pm.

Edit : Even if we had locations that were running 24/7, I don't think there would be any issue. An event that starts at 10pm and ends at 4am after a DST change? Any good datetime library will tell you that the event runs for either 7 or 5 hours, when calculating difference between those 2 datetimes when knowing the proper timezone. We're using C# and the standard .Net datetime library is one of the best I've ever worked with.
I'm not U.S. based, so I don't have a total understanding of the whole "prestigious" university vs. community college debate. However, I find it hard to believe that they teach basically the same thing.

I'd believe that their curricula are essentially the same, but that's what's "on paper", so to speak. Even if they're both accredited, wouldn't better faculty lead to better teaching? Or better research programs and partnerships with industry? Even stricter requirements and evaluation criteria. If at least some of these aspects are true when talking about "prestigious" universities, then the bias you describe isn't that bad of a heuristic.
> Not to mention XML's main advantage over many other formats is having hierarchical relationships--but how does that help in a chat protocol?

Extendability. Transporting Messages in other messages. Transporting hierarchical data instead of only text.
There's no doubt the substance is actually more important, but the question is what folks end up caring about.

As an interesting anecdote, I found that when I'm around my Chinese friends or family, I'd hear the question "where did you go to school?", but when I had conversations with White or Black folks we'd talk about "what did you study?". I think that's a pretty interesting cultural nuance. For me, the second question is more wholesome.
> I have my doubts that this model can be effective beyond those highly driven individuals.

C.f. Punished By Rewards.
One of the inspirations for my startup is the problem of developers supporting production systems they're not allowed to actually see.
"guarantee" that students "know" what they are "taught"

That used to be the case, but now corporations require you to pass their own exam before they hire you. Let that sink in a moment. No longer are the universities taken at their word about their product.

For some of you it has never been any different, but this change came about more or less when I was teaching at university/college. Some of us saw this as a quite profound change.

In my view, that was the first signal of the beginning of the inevitable disruption of modern higher ed.
This is true in some other fields as well, such as K-12 education. The typical teacher contract guarantees an automatic salary bump for getting an advanced degree,
I need more popcorn for this
That's a good point. It is easy to just say that the others were incompetent without knowing the rate of false positives ie. how frequently were such memos written talking about catastrophes. The issue of rate of false positives vs true positives (i.e.,real problem) is something that most engineers and managers don't have a good grasp of.
From diesel to electric: VW begins to make things right
Beware as it tries to reset your preferences to default.
Think about it this way: Would you shun glasses because it's possible to lose/break them?
Thanks, I actually missed this. The difference with modifying OpenJDK is that it's a common codebase as opposed to a language fork.

I know Redhat is one of the other major OpenJDK contributors, and a lot of distributions are relying on IcedTea. It will be interesting to see how this develops.
Honestly, if its concerning personal data held by hr I would expect locks on the cabinets. At most places you cannot sneeze in HR without running into security.
Yeah.. That's suspicious.. Firefox uses it's own CA list, so if your install of firefox is up to date, and your system clock is correct then you are potentially being MITM'd...

If that is the case then your browser is exhibiting correct behavior.

For me, I can see that the root CA is USERTrust (SHA-384 sig, interestingly), and the server is presenting a valid intermediate (Gandi - also using a SHA-384 signature), then the site certificate (SHA-256 sig).

There is a secondary certification path though, coming from a old SHA1 AddTrust Root (but this is also in my trust store for Firefox).
> everyone talks about legibility etc but nobody points to any study (or even pictures) on how those fonts compare under low conditions (night, rain, not illuminated, headlight full on)

That doesnn't seem to be quite true:

> In 2004, the agency embraced Clearview, based on studies that appeared to demonstrate its superiority, especially in nighttime driving tests.

Granted, mentioning studies generally is different to pointing to specific studies, but still it seems clear that exactly the issues you raise are of concern.
I love projects, I hate school. Lots of details to work out (and questions of scale), but still sounds very promising and exciting. Not sure I understand the "no majors" bit though.
Any advantages to using this over a blended haproxy / varnish setup?
No it isn't in any way "Jerry Springer" and it isn't beneath HN to comment on bigotry. I need no lecture from you on HN, I've been here since the beginning.

Beyond that, learn what literally means, because what you mean is it's figuratively beneath HN; exactly the opposite of what literally means.
hey, id like to fire you, but you have sensitive information on your laptop, so instead im promoting you to the position of data security, and your job is to create and enforce policies so i never get in this situation again. consider yourself lucky.
Straightforward solution that buys time until consensus on tougher scalability/sustainability solutions are arrived at.
GistScript might make a good "Show HN" post.

Guidelines: https://news.ycombinator.com/showhn.html
Yes, and the first is free. I was considering a purchase, but there's not really much to read at this point. FYI, "mlpichetatw" code will give you 50% off this book on checkout.
Anonymizing PII is actually incredibly difficult. The problem is that the same things that create the valuable uniqueness you need to operate on the data are the things that are most sensitive.
QuickAppIcon
Here's a rule of thumb that will serve you well:

If you brace something[1], the thing being braced will become weaker.

It will happen almost immediately. Your body is very, very good at efficiently allocating resources in as miserly a fashion as possible.

[1] In your body, that is.