skysight-inc/HackerNews huggingface dataset:
> It is unbelievable how invasive Adobe software is.

Have you ever attempted to analyze the periodic data transfer that happens from your computer to Adobe servers when you have one of their products running? They log every action that you perform: from opening a file to clicking a menu item.

Hint: The "encryption" scheme employed to _encrypt_ the user actions is a substitution cipher.
under what kind of pressure would Tim write this public letter?
That does not make sense.

Among others the page lists:

> [...] when /etc/resolv.conf or /etc/nsswitch.conf specify the use of features that the Go resolver does not implement, and when the name being looked up ends in .local or is an mDNS name.

Those things you can't check at compile time.

In any case, you can tell whether the binary is statically linked or not.

Statically linked:

$ file /usr/bin/consul
/usr/bin/consul: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, not stripped
$ ldd /usr/bin/consul
not a dynamic executable

Dynamically linked:

$ file /bin/echo
/bin/echo: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, stripped
$ ldd /bin/echo
linux-vdso.so.1 => (0x00007fff01fff000)
libc.so.6 => /lib64/libc.so.6 (0x0000003bcd800000)
/lib64/ld-linux-x86-64.so.2 (0x0000003bcd000000)

Notice the libc.so.6
Well if the tradeoff is to use a lesser OS or desktop environment compared to for example Fluxbox then it could be worth it ?
Allowing a 'yes I'm 18' button allows for children to be exposed to obscene material very very easily. And since the government can already track what you visit, what is the big deal with adopting UK's system for allowing access to obscene material where you have to opt in and identify yourself?

Or perhaps the more famous one... a lot of crime that hurts a lot of people is made so much easier by privacy. Since the government can already invade that privacy anyways (either illegally without penalty or legally by getting a court order), I just don't see a legal reason why you'd demand so much privacy from the government. If you haven't done anything wrong, you don't have any reason to hide.

The core problem with all of these is simply put: I do not need to justify why I have a freedom, you need to justify why I should lose it. And 'making crime easier' is not a valid justification.
I have up voted despite sharing your sentiment. I am simply interested in the discussion.
Why would anyone ever pull a scam like this? To get a POS terminal, don't you have to submit a lot of personal information? And then, how would you anonymously get the money from the bank? It's not like you could do this over a long time lime where you slowly accumulate < $30 charges and then one day withdrawal all of the money. You would surely get flagged?
Encryption=terrorism, cash=terrorism.

Larry Summers: "The fact that... in certain circles the 500 euro note is known as the “Bin Laden” confirms the arguments against it."

https://www.washingtonpost.com/news/wonk/wp/2016/02/16/its-t...
DFU/Recovery wipes the device.
But most users don't want the ESR version, they want the latest non-ESR version, yes, you can go and get it from mozilla but some users find this inconvenient.
Although GitHub Issues has a lot of issues, for the singular reason that you can opt-in and opt-out of notifications on particular subjects I find it vastly more useful than most bug trackers.

Is there a good open-source GitHub alternative that implements this feature?
under what kind of pressure would Tim decide to write this public letter?
This is a great story and kudos - it looks like an awesome piece of work for a weekend project.

As a counterpoint, I did something similar (replicated a barebones version of a tool that a company I wanted to work for had) and sent it off and didn't even receive a courtesy "thanks but no thanks" email. Them's the breaks I guess.
How Git Blame Works
I'm posting from a Razer Blade Stealth QHD/256 right now on Ubuntu 16.04 LTS. The USB 3.1 ports function fine, the USB-C charger functions fine. Not attempted to attach a Thunderbolt over USB-C peripheral yet, but it would not be the end of the world if it wasn't functioning since everything but suspend and the camera behave fine.

The real downer is Intel's appalling OpenGL support in their Skylake drivers. Games and certain other applications are pretty much hosed if they expect remotely modern shader support, otherwise it is quite the capable chip.
But when ordering something, you are entering a contract.
By placing a sign saying "We don't accept cash" they are placing a condition under which they'll enter a contract with you.

By ordering, you are implicitly agreeing to that condition.
Sure it can, banks would just have to modify the exchange rate between physical cash and bank deposits.
The important lesson here is that it is time to design the next phones in a way that makes it impossible to either install a software update without unlocking the device or implement auto-erase functionality in hardware.

That way for future phones at least, the issue would become moot: there would be no way for Apple to build and/or install a custom software image that allows brute-force password cracking.
If you don't like the 2 year release cycle, use Ubuntu, which is Debian-based. Debian maintains such long release cycles because the tolerance for bugs and incompatibilities are smaller than other linux distros. For long-lived applications or applications that have long planning periods Debian is ideal. NASA uses Debian, because their projects are measured in years, have low tolerances for bugs, and are developed to last 5+ years. Simply put, Debian's release model is for a different use-case than your typical web development project
Cash transactions can be strictly peer-to-peer. Any electronic interchange requires an intermediary (be it centralized or decentralized).

If you believe entirely in the wholesomeness of the intermediary, it's great. But becoming dependent upon the intermediary makes you beholden to it.

Tax authorities found myriad ways to catch and prosecute tax-evaders in past, where cash transactions were the rule.
I was under the impression that law enforcement can coerce you to put your finger on the touch pad to unlock your device much easier than they could coerce you to provide the pass code. I have Touch ID disabled on my device for exactly this reason. Is that not the case?
According to Starbucks [1], their espresso 'solo' is 75 mg per shot and a 20 oz brewed coffee has 410 mg (not sure how because 410/75 = 5.46 shots)

[1] https://news.starbucks.com/uploads/documents/nutrition.pdf
I knew these issues would be in the corporate world too but obviously I can't relate. These problems reach further then we'll ever know I think.
If the person agrees to the scan. I'm not sure you fully understand the law.
Even if that was ever true, it hasn't been true for a very, very long time.
I think Apple tried to prove that they don't give any user data to agencies. PR stunt.
But actually they got it fundamentally wrong as this was actually case of national security and the attack that happened. So huge PR stunt, but a own goal
Or, we could move to not storing passwords at all, viz client certs and SRP.
If you're using node.js and you use these hashing methods, your entire server is going to pause for 0.5 seconds on a login because it runs on a single thread. Goodbye to all of your server performance.

You can create a worker system, or use a child process to solve this problem, but most of these articles never mention it
That's really cool, thanks for the link
I hope you don't really think like that.

Your second point is completely true and much more sensible. It's about working sustainably.
China exports a lot to the US, and exporters get paid in dollars. To use that money in China, they need to exchange it, increasing demand for yuan. There aren't enough imports into China to counterbalance this. Buying treasury bonds instead means they don't need to exchange the money and can keep on exporting. It also happens to be a very safe investment.

You could worry that someday the Chinese might want to cash in on this investment, but increasing US exports to China isn't actually a problem. Increased demand for US exports would improve the US economy.

People like to try to figure out which side is exploiting the other, but both sides are largely getting what they want out of this deal.
We tried to use rather generic agile terms.

Here's a reference to most of the same concepts on the Jira site, for instance: https://www.atlassian.com/agile/delivery-vehicles/

(I've worked with Pivotal on projects in the past and I worked at Thoughtworks for a while, so we're definitely using language that should be familiar to users that are familiar with the flavor of "agile" promoted by those companies.)
Meanwhile in my bag I have a crisp $100 trillion Zimbabwe dollar bill I use as a bookmark.
I don't understand why Debian has anything to do with Firefox. Why does the operating system have any say on what applications get released and how often? Isn't this the whole point of using free, open source software? To be able to choose your own components? Why do we need Debian bundling Firefox?
For one, I wonder if AI will disrupt call centers and put CSRs (customer service reps) out of a job.
>I want a region of memory in which I can treat as a bitmap... ...Show me your malloc equivalent and see if I can go from there.

http://www.lispworks.com/documentation/HyperSpec/Body/f_mk_a...

https://wiki.haskell.org/Numeric_Haskell:_A_Vector_Tutorial#...
Ahh - got it. Basically for the real systemic international risks, only global banks can handle them. There is a bid of a tragedy of the commons with independent central banks too. I'm not sure I agree with it in practice though - did the large banks really attack risk systemically? Or did they just line up their bets all in the same direction?
I regret mine. Keyboard is missing so many keys, speakers are garbage, getting Debian to support the hardware was nontrivial and stuff continues to break. So few ports. And if it's plugged in when the battery gets to full charge, it will often emit a high-pitched whine until I unplug it, meaning I can't leave it sitting plugged-in with full battery (perhaps a defective unit? but who knows if that's due to running Linux instead of ChromeOS?).

I'm shopping around for a new laptop to replace it, that will be more linux-hacker friendly (more keyboard keys, touchpad with real buttons, etc.)
The number on the paper != purchasing power
Then they can get it from outside the stable branch. Testing and unstable both have a Iceweasel 44, and there is the mozilla repository at http://mozilla.debian.net/ just for mozilla software.

Debian stable is "conservative and with as few changes as possible", so the ESRs are the obvious choice for it.
The amount of sugar you were putting in your coffee is probably not close to comparable to that in these drinks.

> Once you begin loving the true taste of coffee

The "true" taste of coffee is how you prefer to drink coffee. Don't forget that a lot of people like to drink milk based drinks (latte, cap, macciato, etc) which are technically not showing the "true" taste of the coffee being used. Yet for someone reason no one thumbs their nose at them.
Or the NSA doesn't want to reveal that they have Apple's code signing key.
Do you feel underpaid?
Thank you for answering one of my questions: "Why does a multi-billion-dollar company give one lick about personal freedom ?".

Companies exist to make money, not to protect our rights. It even crossed my mind that the possibility that NSA et. al. rooted these devices long ago, and that this whole "debate" is just a staged thing to make it appear as though we had any privacy and feigned adherence to the democratic process.

But your point that, as a matter of policy, many organizations will simply not use the product if they know it has backdoors, relates it back to their capitalist motivation and makes any conspiracy less likely.
This is a fascinating article for me. I was a self-taught web developer, but I had studied engineering (not software/computer) in my undergrad so I was very fluent in algebra - which seems to be what programming is mostly about. I struggled to convince anyone that I was qualified, eventually got a crappy job at a fairly high-traffic website and bootstrapped my way up from there. However, along the way I met several programmers, some in high managerial positions, who actually sucked at programming. They could regurgitate bits of code and patterns if they had to, but as far as solving novel problems or teaching themselves new frameworks etc. they were totally lost.

One thing I noticed in undergrad is that it was hard to tell if some people just couldn't "do math" or if they weren't trying hard enough. No one understands complex math concepts the first time they see them and I certainly had to grind really hard in some classes to learn the concepts. But maybe they would have to grind 100X harder than me to learn them? Who knows. I like to think anyone can learn math if they work hard enough but I'm optimistic.
True. It's very tough to make apples to apples comparisons across countries and cultures.
Early support for the Zephyr Project includes Intel...

<<closes tab>>
>"Past researchers had identified the CD19 antigen found (often exclusively) on B cells, and others had found that autologous T-cells could persist in a patient for many years, potentially providing a durable response."

I didn't watch the video, so I'm not sure where this info is coming from, but providing such references is one reason why they should write a paper up before talking to the media.

Also, I am fairly certain if we do follow up on these claims (I know nothing about them specifically) we will find the actual evidence is much more ambiguous, there has been no direct replication attempted, the references do not actually contain the evidence claimed, etc.
What is happening on the Augmented Reality technology that Leap was originally showing?

I am much more interested in Augmented then Virtual and was hoping to see Leap move more in that area. I haven't seen anything since July 2015.
I don't think that's an issue when your comparing salted passwords. AKA F('Passsword') = Hash('Passsword' xor 'some value') = "123456"

F("value") > "123455" which is close, but that does not let you get a 'better' guess.

PS: Assuming the Salt is hidden, and the Hash is secure.
First: What do you mean when you talk about Stoicism working - What do you think is the goal of Stoicism?

Second: This criticism is applicable to just about anything; does capitalism not "work" since just about any implementation has aspects that can be considered flawed?

You cannot generalize about an idea from people's failures to be consistent with their professed belief in it (other than perhaps that it appears to be difficult to act according to it in a consistent manner).

In the case of Seneca, it is also difficult to say whether he attempted to apply Stoicism 100%, how good his attempts were ("objectively"), or whether it is even possible at all.
> Release every 2 weeks like clockwork.

Which means exciting new regressions every two weeks! When I used wine it was definitely the case that certain applications(games) worked better with specific wine versions so a continuous release cycle could result in breaking a working application. That's something users of stable are trying to avoid.

If a user wants the latest version of a package you can always install it manually.
The biggest problem was that it didn't have physical buttons above the trackpoint - they very virtual. For trackpoint only users it's unusable, because we often have the thumb on the button for dragging, double clicking etc. Often we have even both thumbs on the buttons. And the virtual buttons didn't work on Linux.

The keyboard was utterly broken (I guess it was the keyboard electronics or firmware), because combination of some three keys didn't work - I remember that RightCtrl + AltGr + H, didn't work, I use this kind of combinations with Virtualbox.

Additionally I have chosen a screen that was reflecting so working more than half an hour made the head hurt. And on their web-site there was no indication which screen had anti-glare.

I guess there were more things that I disliked, but I don't remember any more. Sent it back and bought a used T430s that served me very well.
UPM IT Is Looking for a Deployment Manager in Helsinki or Tampere
I think this says more about node.js than it does about the proper way to secure a password.
>and not just by government officials but in any court of law or hacker.

Or business partner. Advertisement agency see that you have recently bought some personal item and they now show you ads for related items. Show you recently paid for a funeral and show you ads for 'saving their memory'. Shows you recently cream from a personal medical issue and show you ads for all related material... hope a friend isn't looking at the screen.
Thanks Rob - i'll be in touch
Tide detergent: http://nymag.com/news/features/tide-detergent-drugs-2013-1/
Very good point. You can only get hired for potential early in your career. This is one reason it's so hard to switch careers later on. Going back to school is the only other way to get a "reset".
SRP still stores crackable password verifiers, and is tricky to implement safely.
Parquet is designed specifically to store large amounts of data efficiently on disk. As such it defaults to compressing and encoding data to save space. Arrow is designed for immediate consumption without any materialization into a different in-memory data structure. It is already in a format well suited to be used for sending over the wire or reading directly from an API.

I don't know as much about the internals of Avro, but I know it is a bit different from Parquet, in that it can be used to serialize and deserialize smaller amounts of data. It is used to store large datasets in files, although it will in most cases be less space efficient than Parquet. It has also been used as a way of embedding complex structures into other systems (similarly to how JSON can be embedded in a database), or for serializing individual structures between systems. The binary representation of Avro needs to be read into a system-specific format like a C/C++ struct/object, Java object, etc. for consumption.

In contrast, Arrow is designed to represent a list of objects/records efficiently. It is designed to allow for a chunk of memory to handed to a lightweight language-specific container that can immediately reference into the memory to grab a specific value, without reading each of the records into it's own individual object or structure.
With a sensibly-built phone, that SIM card does not have the ability to access anything of value on the device.
Package Managers. In Debian the package manager (and repositories) is the app store.
Great story! Did they start you for free? Or how long did it take to get paid?
absolutely - maybe even worse as the spirit of sharing etc isn't as strong in the corporate world
If brain structure stayed static throughout your lifetime I would be inclined to agree. But as the structure is constantly in flux, and proven so, no so much. Granted there is disagreement on how much your iq can change over time.

http://www.livescience.com/36143-iq-change-time.html
Programmer jobs
Great. So if you run a lot (long distance cardio), you get a marked increase in new brain cells. What brain cells? The part of the nervous system that regulates (wait for it) breathing and metabolism.

No kidding.

This is like the study [citation missing] that showed a huge increase in brain cell generation for seniors playing wii fit ... in the area of the brain that regulated fine motor skills.

The "Brain" is not a general-purpose computing resource. Until someone can show that these skill-specific increases can translate to IQ or (better) improved long-term creativity and happiness, take them with a grain of salt.
I mean this sincerely: has the government used one of its 10 tries on the attacker's birth year? I hope the government has burned a couple tries on low-hanging guesses before going through this legal hassle.
Crucially, anyone with sufficient technical skill can open a safe, therefore the manufacturer offering that service isn't a violation of customer rights.

Nobody can bypass the security on an iPhone but Apple, requiring them to do so isn't requiring a company to assist in a search, it's requiring a company to use its unique position as the manufacturer to damage their product.
It was a shit movie, and in addition to the "team tensions" trope, apparently Turing wasn't ashamed of being gay at all

Could you get your grandfather to blog his memories of Bletchley & Turing ? People would be fascinated
You could simply add a Thunderbolt or USB 3 dock....

Using an external keyboard and mouse solves the ergonomic problems of using a laptop for long periods. (Sad to say, I see very few people actually doing this.)

Of course, you don't get the benefits of running a faster, hotter processor, expandability etc, though Apple no longer offers a reasonably priced tower system anyway....
Blog+Woodpecker.co+-+Cold+emails+&+follow-ups+that+grow+a+startup
Solving the Birchbox Problem in #Clojure Part 1
I'd tentatively suggest that this isnt the best way to dockerise.

Now, unless something has changed, there is no init inside your container, which means anything with a wait() in it will never get cleaned up.

Also, with an eye on the future its going to be a massive pain to scale.

I have grafana on a separate machine to the graphite cluster (grafana does almost no work.) apart from the actual data, the whole thing is deployable without manual intervention. (all without docker too)

I'd suggest the same for influxdb, it shards by default....
The Passwordless approach falls under "something only you have", and does make that the primary approach: tying your login security to your possession (lease) of your email address. Uses the same one-time token system that a Forgot Password or a "Verify Your Email Address" approach uses.
Node/Express API Authentication Tutorial with JSON Web Tokens
are you still working for free?
When running Chrome, the CPU goes into the 15% to 20% range when running the mouse in circles over the chart on my Windows 7 box at work. When running Pale Moon, I get about 10% to 15%, even after allowing all javascript domains in NoScript. Of course, I'm still running an ad blocker and don't see the top and right-hand column ads which makes me wonder if the author happened to catch an ad that was coded badly.
There are two issues at play here (completely my opinion):

1. The first is why people follow religion. People look for security even if it's just an illusion. That's why they read and watch these stories.

2. We don't know what the rich people (or successful) exactly did to get there. Maybe they did fraud. Maybe they did tax evasion. Maybe they laundered money. Maybe they ripped some customers or over-charged them. No successful person is going to tell you that especially if it's a black-hat shit.