skysight-inc/HackerNews huggingface dataset:
Wall Street Journal reporter wins journalism award for investigating Theranos
Debian as well. IIRC there is a FreeBSD porting effort which hasn't made that much progress as yet.
Then how can you get into the situation that the shipped binary packages can't be built with the shipped toolchain or shipped dependencies

I think that Matthew might be suggesting that not all packages are rebuilt with every release? A binary package might be compiled with GCC-4, then the distribution is upgraded to GCC-5, dropping GCC-4. If for some reason the package is not compatible with the new compiler, you would then be in a situation where the binary cannot be recreated from source without outside tools. Do you know if Canonical recompiles everything on each update to the toolchain?
What of Yahoo when they allowed Chinese authorities to access an email account? While we might believe in the integrity of the US government, my faith in a backdoor being made available to the Chinese government used responsibly is low.
The trouble is that widespread leverage means that asset price falls detonate the entire system unless capital is backfilled somehow. That was why state credit was so widely extended to banks in trouble: the risk that collapsing bank A is in debt to bank B, which then collapses in turn taking out banks C, D, E, the payments settlement system, and the ability of people to get money out of ATMs.

It's not so much that any one entity is "too big to fail", but all the big entities are too interlinked so they cannot fail separately.
For programs like servers, it might be nice to be able to export runtime type information out of a tracing JIT VM, like PyPy. There have been studies that found, after an initialization period, that types in server applications tend to "settle down" in languages like Python. So large parts of the codebase of such applications could be usefully typed by information generated by a tracing JIT VM.
Fractal-plan: An animation using geometric plan
Quite hard in northern countries. Canada, Norway, etc. have huge numbers of SAD-sufferers, because there just isn't enough light, even outdoors.
Those are some valid points but the request to use descreening filters seems strange. Descreening is used to remove halftoning from images, not text.
Because we have decades worth of existing software and existing standards which count on there being ports. We have standard ports for different software applications, we have changing port number on the same machine to reach a different service -- if we eliminated ports it wouldn't just replace IP addresses of one type with a new type, it would ALSO change lots of other things from the networking layer all the way up to the application layer.
In case you haven't noticed yet, CEOs and board members all appoint each other on various other corporate boards and in various companies.

Once you're in the inner circle, unless you messed up MAJORLY (i.e. bankrupted a billion dollar company), you'll always be able to get a new gig at some point.

Yes, it's not always a meritocracy - yes, that's how the world works. If I sit on a board, would I rather appoint my buddy, who will have my back? Of course.

As much as I think Marissa did a terrible job, she didn't pick the easiest company to become CEO of. Some CEOs have it easier than other; certain companies run on autopilot and have just a few major competitors.
On a network like that, wouldn't DDNS solve the problem?

I mean DDNS where the DHCP server tells the DNS server which IP has what hostname, not e.g. dyndns.
My guess for the most immediate reason is that Dropbox uses a lot of Python 2, and it sounds like they're paying for the vast majority of mypy's development.

Apart from the sweet sweet cash though, missing Python 2 support makes it harder for people to take you as a dependency. I think it's similar to why a lot of Python projects put in the effort to add Windows support, even if only a tiny fraction of their users actually run Windows. If your project doesn't support Windows/Python 2, and my project does, I can't take you as a dependency. If my project might ever in the future support Windows/Python 2, I can't take you as a dependency. That's a huge drag on adoption.

I sincerely hope that in five years, supporting `async`/`await` will be more important for adoption than supporting Python 2.
“Shit I cannot believe we had to fucking write”–filling Wikipedia's gender gap
I would not describe a breaking change every three months as stable.

I like the upgrade paths but can you really say with a straight face that an API is stable if the code you write could be invalid a few months later? That's a maintenance nightmare!
As this entire thread has pointed out, the law makes no sense at all here. So you might as well say "Congratulations! You're going to jail! And I don't have to tell you why!" because none of the details matter anyway.

This is the spot we've reached through legislative meddling, and your best bet is either to be a good little consumer and don't make waves or do what you want and don't get caught. Neither of those seem to make a lot of sense in the long run.

So yes, congrats. It's jail for you -- but not for Google. Because they're Google, and you, well, you're not. You'd just better be happy we don't find out about you rooting your cellphone last year. Good grief.

ADD: I know you meant well, and I appreciated the 
 tag, but there was something I didn't like about your comment. Now I know what it is. By making this a big deal, you're increasing the likelihood that this poor schmuck becomes the next "example" some federal prosecutor decides to make. It's not your fault, but it still sucks. Let's hope that doesn't happen.
Thanks for sharing your experience with Ergodox.

Usually, I want to press Cmd + T when I'm in the browser, so my right hand is usually on the mouse. That's why I want to do it with a single hand.

(I've tried browser plugins that mimic Vim keybindings, but I still need to reach for the mouse a lot: browsing menus, etc.)
DestructHub: The channel of the destruction
Curious where Netflix is using this to authorize requests. Any more info on that?
> Another potential problem with the sometimes-length-varies aspect to IPv6 addresses is that serious software bugs can be hidden. An array allocated to an insufficient size may work for quite a long time with the vast majority of addresses that take advantage of shortening tricks like "abcd::::", and fail only when presented with an address string that uses the maximum possible IPv6 address length.

If the array you are referring to is the human-readable buffer used to store ipv6 addresses, I would assume the 'bugs' you are talking about are entirely similar with ipv4.
The dirty little secret is that most of those secondary market exchanges don't really verify accredited investor status. They just do the bare minimum to check off the boxes and ensure SEC compliance. Acquaintances of mine were able to purchase shares by simply lying about their incomes and assets.
How the Teleprinter works
I disagree with the overall sentiment. Doing the right thing technology-wise and delighting users is what made google possible. Technology fundamentals != business fundamentals but the pre-not-bubble-but-maybe-bubble market did not have either one. Many companies were pure buzz with neither business nor technology figured out.
> None of the credit cards I've ever had have made it easy to automatically pay down to zero. You have to do it manually

My bank's electronic bill pay automatically pays my full credit card bill, every month, without fail. It's been doing that for at least a decade IIRC. Is this that unusual?
> Does this generally piss off the employer? I wonder if the employee faced any sort of retaliation or anything from this.

No, it should not piss off any employer!

The equity that is offered to you to as part of your employment is remuneration for your efforts. The employer should not be upset at you for wanting to convert that to cash. It is true that the employer might not want their stock to go to outside parties. In that case, they should arrange for alternate arrangements (buybacks, employee-liquidity in funding rounds etc). But you are not doing anything inherently unethical to warrant any retaliation.
> At this point in time all Linode should know is
> SHA-2(password) and they can't use that to derive
> bcrypt(password).
> ...
> In order to do this without people logging in Linode would have
> to bcrypt hash the SHA-2 hashed passwords and then keep doing
> that for all password validations.

They just could make the intermediate step bcrypt(SHA-2(password)) via some lockstep code/db backend update. Then on next user login after verifying against bcrypt(SHA-2(password)), update the db to the more straightforward bcrypt(password). At the very least this would increase the difficulty of brute forcing in the meantime.
Did it ever occur to them that Apple's executives actually think this is the right thing to do?

It's not just about this case, where any data on the phone will be of at best little value. It's about future cases, and the possibility of widespread abuse of the back door not just for "terrorism", but far less important things like minor drug cases - or worse, wholesale data mining, like the NSA has already done with phone data.
I never said that, I recommended to address the cause (unjustified subpoenas) rather than the symptom (the government asking for access to phones owned by criminals or alleged criminals).
People say things like this a lot. I understand why they say it. But, no. Emphatically, no.

Let me put a bullet right in the head of this argument in favor of Cryptocat and things like it:

In June 2013, Cryptocat was used by journalist Glenn Greenwald while in Hong Kong to meet NSA whistleblower Edward Snowden for the first time, after other encryption software failed to work.

And, you know what else? Guess what happened right around June 2013? Decryptocat.
> because in many areas the median house now costs enough that it's beyond the reach of the median person. That environment is unsustainable over a large time scale.

"Too expensive" does not equal bubble. It has to be expensive because speculators are driving the price up, thinking they're all fooling each other. As soon as they get get scared that the other speculators might be thinking of selling the price suddenly collapses as they race to not be the last to divest.

If something is expensive because it's scarce, is actually being practically used, and there are no substitutes, then there is no way to make the price suddenly collapse other than flooding the market with new supply, and it would take many years to increase the supply of housing by a significant percent. If the price of housing drops a bit all of the homeowners aren't going to rush to sell their homes in a panic like you might see with a purely speculative asset.
Yea I use Newsflow which does a solid job of discovering RSS feeds on sites, easy to manage subscriptions, can star favorites, etc.

https://itunes.apple.com/us/app/newsflow-the-no.1-news-ticke...
Presbyopia and myopia are not opposite; in fact, you can have both at once! My mother has to wear bifocals for precisely this reason.
I know you were kidding, but I still don't understand this "exceeds access" bullshit.

Here's how HTTP(S) works: I issue a REQUEST to the web server; the web RESPONDS with it, or denies it. It is up to the web server to respond or deny or do whatever it wants. If the web server is badly implemented or doesn't know what it's doing, it is the webserver's fault.

Remember: it's just a request. I can request 100 dollars from you; the fact that you give them to me does not make me a mugger.
Wouldn't it run afoul of the DMCA for making available a tool for circumvention?
This is way more in the publics view compared to when Quest went through this though. I dont believe the government has the ballls to jail Tim Cook, CEO of one of the worlds most valuable companies.
I know at least a dozen of these words.
No kidding. After reading all this I think people would be nuts to continue using Linode for anything critical (hell, maybe even for anything at all) at this point.

How many times has this kind of thing happened to them now?
We simply do not know what caused the current increase in myopia. Hypothesis range from diet changes to too much time indoor where the light is either not intense in general or lacks intense blue component (indoor lighting is too warm in spectrum).

So projecting into 2050 is just a wild game as any of the factors can change in 35 years.
Other government agencies that do actually have people in security roles will be less inclined to issue iPhones.

This case sets precedent, that's the whole point.
Trump calls for boycott of Apple products
My current (half-baked) system is using ScanBot for scanning / OCR. This saves to an "Incoming Scans" folder in Dropbox.

I then have various Hazel (OSX) rules to automatically organize things out into various folders w/ date organization: receipts, bank statements, bills, etc.

Works somewhat well! You can do a search in Finder, which will also search contents, etc.
Here was EFF's take back then, same as it is today:

https://www.eff.org/deeplinks/2015/10/apples-eula-gives-it-l...
I'd (unseriously) love to do that but it must wipe every credit card, usb key and hard drive you touch...
"But the fastest CHERI implementation now or likely in the next couple years is orders of magnitude slower than the offerings from AMD and Intel. (Not fundamentally-- but primarily as a product of maturity and development)"

That's due to a lack of demand. The ultimate problem for high security. Gaisler's stuff is already implemented. The RISC-V Rocket core is 1.4Ghz. Basic checks like in SAFE's atomic groups have single-digit, percentage effects on performance. The mods can be tweaked to give desire performance. Worst I've seen was 70-80% loss on a prototype designed for research rather than performance on most memory-intensive stuff. Not 100x or anything.

"Meanwhile, the fast machines available to us all have opaque, cryptographically locked, and seemingly often vulnerable supervisory code running on them."

Definitely improvements to be had in things with open firmware and such. POWER and SPARC have had that for quite a while via Open Firmware standard. SPARC and MIPS have open implementations with SPARC not requiring an ISA license. Not sure about availability of server-grade POWER implementations or licensing costs. Definitely need more to work with in that area.

"To make an impact OpenPower solutions need merely be better in some respect (avoiding the secret supervisory code) and not too worse in others."

I hope that's true. What killed it before was legacy effect: key apps or capabilities that worked on x86 didn't on alternatives. Even Apple abandoned PPC. Only one doing it on desktops are the Amiga systems.

For common use-cases, we need to port Flash, JS JIT's, ASM-optimized codecs... all sorts of things to POWER to achieve parity. I've always liked POWER better than x86. It's just that users use apps not ISA's. That's why x86 has holding power.

So, it's literally gotta be users who don't need games, fast browsers, CAD, etc. It has to be people using native apps written in portable code leveraging components written similarly. Even better if it's multi-threaded or benefits from POWER's accelerated instructions. How many use-cases does that represent for desktop users?
and with that, I suddenly regret not reading me some Ayn Rand
yes, I use reader.aol.com
Another vote for finance. It may just be familiarity, but I still prefer it to Google finance.

YQL can also be handy for some things. Yahoo site search "BOSS" was actually quite good too, but apparently was just discontinued (although apparently they have an alternative).
This is where I'm hoping for a "mypy-strict" mode. I don't care enough about future-me to add types to every single function I write. But I do care enough about future-me to add a single line to a config file, if that means a tool can force me to add types to every single function I write :)
I'll go even further and day that it will go up and down again continuously. An "economic cycle" if you will.

You can quote me on that too! :-)
http://www.economist.com/blogs/graphicdetail/2015/11/daily-c...

EDIT: I am specifically referring to the "Price to Income" chart in my comment below, not the one that shows up by default. Sorry for the confusion.

--

Uncheck everything but the 'US' graph. Different data sources give different ratios, but they all show that it's still well above historical norms & headed up. Some data sources say that it's already approximately back to where it was in the peak (see a link further down, that chart is up-to-date), others like this one only show it ~1/2 way there (note tat this chart is two years out of date), but either way we're above what has been stable in the past.
A more charitable reading is that dsp1234 thinks it's self-evident that only someone naive about the value to dmsguild would accept such a deal, that they should instead hold out for more, and that dmsguild is banking on that naivety, making someone who takes up the offer a chump.

It's a normative argument about the appropriate distribution of the gains from trade.
I guess the unintended consequences rather than the physics matter.

Okay, it is a question of taste.

But my proposition works in more than one language (latin included). ;)
Man admits he stole nude celebrity pics from Apple and Gmail accounts
Formats like this are a great place to apply fuzz testing. It's easy to write automated test code that generates IPv6 addresses which at least look valid according to the BNF specification. That way you can get pretty good test coverage without having to manually figure out all the possible edge cases.
Let's just speak them: http://blog.jgc.org/2011/07/pronounceable-ipv6-addresses-wpa...
I've never seen that. What I have seen is that if you don't pay the card off completely in 12 months, they'll assess interest going back to the inception of the account, so if you make a 0% deal you've got to be sure you can pay it off in the time allotted.
<3 this comment. would love to see the actual probability too. "vanishingly small" sounds about right :]
So, run yet another service with a poorly thought out RFC and add another code base to my vulnerability monitoring?
> Take a look, for instance, at the WSJ.com home page with an ad blocker turned on (note all the missing letters and scrambled up titles).

I don't actually see what you're referring to; maybe its because I get redirected to http://www.wsj.com/europe. Maybe I have a different ad-blocker. Either way, it reminds me somewhat of NME's [1] homepage (New Musical Express, a popular music publication; not sure if it's really known outside of the UK). They deliver their images in such a way that they fall foul of my ad-blocker, although I haven't looked in enough depth to be certain whether this is a way of preventing ad-blockers, or purely unintentional.

[1] http://www.nme.com/
You're right. I agree. In practice I'd heavily weight the decision based on whatever is best supporting in the Python libraries they are adopting.
This doesnt explain why they're not after marketing, or prove they are trying to draw a line without any other ulterior motive :)

No-ones going to ever know really, bar apple and the gov
Cryptocat was not secure. No argument there! Decryptocat was the proof in the pudding.

If a secure product could be as user-friendly as Cryptocat was while still being secure, then most peoples' communications would be more secure.

That's all I was saying. I'm not trying at all to hand-wave the proven insecurity. I'm saying that the only thing they got right was the one thing that secure products have consistently gotten wrong. (Barring Signal.)
Don't give up! Nearly every talented developer I know started off writing hacky code for fun. What people forget is that good code is relative to your level of experience. For a beginner, good code is code that works. Period. Do that enough and you'll be able to take it to the next level. But don't forget to have fun in the process, if you write code that makes you happy, you can't go wrong!
That sounds a lot like FileCoin which was created by the IPFS guy.
You can have millions if you manually configure them, the DHCPv6 and SLAAC will not grab several addresses for use.
Texas business bankruptcies may double:'The carnage is going to be terrible'
Why not AWS? They have nano instance types for as little as $5 monthly and infinity more flexibility.
I have done a dozen or so private share sales or purchases.

The model I have really come to like is EquityZen's. (https://www.equityzen.com)

Using a crowd sourced approach, a group of accredited investors (buyers) can participate in purchasing a block of shares as a fund. A win for the smaller individual investor who could not normally participate due to various constraints (ie buying power, transaction costs).

Likewise, its also a win for sellers and it applies to the Unicorn's of the world. It gives these shareholders access to a market they wouldn't normally access.

It seems that selling shares privately is becoming more common, any model that connects a larger group of accredited buyers to accredited sellers is good - IMHO.
Yeah as the other person said, you definitely don't need to be a shark, ask how much it would be if you were paying cash. Also you can always walk away from a purchase and say you'll think about it. I got a call the next day where they took $500 off of bedroom furniture when I actually was just thinking about my other options. Cars especially though you should be asking for discounts, I worked at a car dealership (in detailing, i couldn't be a salesman) and they are horrible. Also they work on purely commission so it's in their best interest to give you a deal since if they don't close they don't make anything. Walk away from a car dealership as many times as you have to... really just take your time.
Hi Ben,

This what you're looking for in JSON. Just change the date & ID to ping the dates you want to query:

http://212.28.72.220:5000/booking/us/malibu-beach-inn/detail...

http://212.28.72.220:5000/hostelworld/55551/details?date=201...
I predict in the future more people will declare bubbles until there is an actual bubble. Then, even after the bubble is fully deflated, those people will tell everybody about how they predicted this bubble ahead of everybody else. Then time will pass. People will then continue declaring bubbles, until one day they too they can become a true oracle of the bubble world. Then time will pass..
If you request the 100 dollars with a specially crafted piece of paper that I glance at and believe is legitimate, you are committing a crime (check fraud). Which whatever, let's not focus on the analogy. Whether you like it or not, the law doesn't necessarily view the valid server response as authorization to access the requested url, it examines what you were thinking when you created the url.
You can read more about it in this well written article: https://www.mikeash.com/pyblog/friday-qa-2016-02-19-what-is-...
I feel like I'm in the minority when I say that I actually enjoy the long passages of scenery descriptions. I really like soaking in the atmosphere.
People able to save 15k of cash usually have decent credit ratings and can get 0% financing for most things.
This is a misuse of the word 'need'.

So yes, there are many cases where all or most of us (even simultaneously) might want into a locked phone. But we're all worse off if it's possible.
Can you suggest some readings, stuff you found especially enjoyable?

(I ask because you're my favorite writer on HN, and am curious as to what things influenced you)
Hacker News. Not HackerNews.