skysight-inc/HackerNews huggingface dataset:
No it's not unproductive. It's better and more realistic. What will happen is that your hiring manager goes away after three months because managers are always trying to reorg and hire people beneath them to save their ass. You friend that handed your resume can be fired or quits to go work somewhere else. Suddenly there is no reason that you should have a job at that company and lots of other people are handing resumes to your new manager for people that they are trying to give your job to. Maybe you can stretch it for 9-12 months. It's far better for job security to just have the credentials and background to get a job without going the social route.
I didn't see this explicitly mentioned but if my site is HTTPS, I get referers, right? And so isn't that the easiest/best solution?
> I have a box of broken tools, and I don't want to bother a driver.

Why not? Isn't that their job? Especially with a box and not a single tool.
There also seems to be good progress in the implementation of WebRTC in WebKit:

https://bugs.webkit.org/show_bug.cgi?id=143211
I look at this, and then I look at people wondering why non-coders don't use version control, and I laugh and laugh.
There's no magic here. The code is quite clear, if you wish to review. Moreover, each module is independent, so you can include only the files that you find useful, after reviewing them beforehand.
As to why:
1. For fun, as an exercise.
2. It does make it more pleasant to write and debug readable Bash scripts.

Obviously — you should always use common sense and choose the programming language to your needs.
> why do you think it would be appropriate for someone to sell me a health insurance plan without any understanding of what the different plans offer or which plan best served my needs

I signed up with Covered California a few months back and while they provided basic facts and a comparison matrix of plans, they didn't go out of their way to make sure it would fit my needs just perfectly. With nothing but a Web site and a wizard, how would they?
All except the bad ones. They'll be prohibited by statute from taking advantage of any of this.
Can't remember exactly but it could just be instagram storage. Try the link below and see if that helps you figure it out.

https://www.google.com/?gws_rd=ssl#safe=off&q=info+version+7...
> Spivak 1 hour ago
Sure it does. If all the hardware and software associated with iPhones was open-source Apple could tell the FBI to off and write their own firmware.

No, not based on the interpretation of the all writs act that the FBI is attempting to use. As far as the FBI is concerned, they could force my Grandma to write a backdoor if they deemed her the best person to do so. Given that she can't answer the phone most days it'd be a lon wait, but I wouldn't put t past them.

--edit to correct auto-correct
It seems that the authors have decent ideas, but don't have much experience with the subject matter. If you look at the assigned identifiers in the binary scheme, the authors believe that 32-bit truncated cryptographic hash functions are useful. 64-bit truncated cryptographic hash functions are essentially useless from a security standpoint, so the 32- and 64-bit variants would be better served by CRC-32C and CRC-64ECMA. If your standard contains a 64-bit truncated cryptographic hash, people without subject matter expertise will assume that it provides more than a modicum of security.

Also, the authors apparently vastly underestimate the utility of using Merkle trees. I used to be an engineer for LimeWire. Gnutella used SHA-1 as identifiers for the content. Unfortunately, this means only being able to integrity-check an entire large file instead of small pieces, or having to get a Merkle tree root out-of-band. LimeWire just got the Merkle tree root (plus one row of the tree) from the first peer it contacted for download data. This represents a simple denial-of-service poisoning attack where the attacker hands out Merkle trees corresponding to something like 10% of the blocks being corrupted. The clients would then repeatedly request the "corrupted" blocks from peers, until giving up, notifying the user that the download was corrupted, and most likely keeping around a file that had sections that weren't integrity checked. (Corruption really does happen. The TCP checksum is rather weak.) If they had used the Merkle tree root as the file identifier instead, then there would be no opportunity to trick the client into incorrectly associating the wrong Merkle tree with a given file.

If you're going to define a hash URI scheme, please incorporate Sakura trees (a provably secure hash tree scheme) of degree 2 with a fixed leaf block size. Leaving the block size variable leads to the Bittorrent problem where a single set of identical files has multiple identifiers and clients using hashing at one granularity can't share information with clients using hashing at another granularity. Merkle trees with a single standard leaf block size allow different levels of the tree to be shared to in effect give different granularities, without dividing resources due to the multiple identifier problem.

Also, in the case where there are 2^N + 1 blocks (or any other case where you'd be tempted to "optimize" by skipping a node at that level), please have a re-hashing node at each level for all blocks. This means that the final block (along with at most one extra hash per tree level) constitutes a cryptographic proof of the file length corresponding to the tree root. Otherwise, in order to avoid certain denial of service attacks, you also need to always put the length of the file as part of the URI, or the first client needs to send the entire bottom row of the Sakura tree.

Note that the Bittorrent Merkle tree format is broken in the same way that the original Gnutella tiger tree proposal was broken (fixed before implementation in the Gnutella case). Use Sakura trees. They're provably as secure as the hash function you use.
Nice article.
https://codewords.recurse.com/issues/three/unpacking-git-pac... is another article that i found very useful to understand packing and unpacking.
(I found this when I was building a standalone html viewer for .git directory)
Thanks, I was unaware. Though by the number of submissions, so is everyone else.
Yes, people have been making facsimiles for a long time. The Spurlock Museum in Urbana, IL has a set of copies of the Elgin Marbles, for instance.
I made a WiFi button for pretty much the same purpose:

https://www.stavros.io/posts/emergency-food-button/

A bit latent, but doesn't require a second press.
That's the thing, there is almost no reason to ever have to delete and redownload. Moreover, the reason that git is dominant is (network effects, and) because it is solving the right problem with the right internal abstractions. It has even managed to become popular in spite of its user interface.
Good point, I concede your objection. I certainly do not concede your conclusion however.
I wouldn't read too much into this. SOP for most police forces is a tiered approach to seized drives. They plug it into a windows machine and see what's what. If that doesn't get the immediate results they have to hand it to the professional data recovery people. Even a cursory forensic examination of a drive starts at 1,000$ and may yield nothing if encrypted. With a small pile of drives to look at, they probably didn't bother trying after spotting it wasn't going to be plug-and-play.
One of the reason why I want to limit or remove anti-discrimination laws is that I want to focus on more effective and less costly methods instead. I suggested a compromise to limit the laws to manual labor and the like.
Traits are not like Concepts. Concepts are for template meta-programming. You're thinking of the "Contracts" proposal which would be like concepts but for normal types, so like traits.

Also, can we have a C++ article where the comment section doesn't turn into a Rust ad?
Completely false, as has been endlessly detailed by nearly everyone at this point.
And? if you are looking at a good reproduction of the Mona Lisa do you feel anything less?

There are tons of items that cannot be displayed to the public in fear of damaging them this can help to create a more accurate replica that can be easily displayed at a fraction of the cost.

Just so you know museums have been displaying replicas for decades (if not longer) as many items were too fragile to display, many "original" items that you might see in a museum are in fact replicas carefully crafted, some museums go as far as commission high end manual reproduction paintings if the original is too fragile to display.

And while reproduction paintings are rare natural history museums are filled with replica's those dinosaur fossils are not the actually fossils found in the ground, those are cast and hand finished to look good for the display and the casts often do not even come from a single fossil as a full fossil is almost a unicorn.
How is taking photos of yourself vapid? For most people, that's the only kind of photographs worth taking. They're a documentary of your life.
I think it does. The study authors present evidence that fish, as measured by a stress hyperthermia response, respond in a manner consistent with an emotional response.

As a recanted neurobiologist, I find that surprising and I'm willing to go along with the headline. It would be even more surprising (to me, at least) to find that something as fundamental as emotional response were not to be found in more primitive branches of the phylogenetic tree.
The HSTS header allows you to specify "includeSubDomains" or not, as you like.

The thing the article discusses is, if you're on the HSTS preload list (your HSTS entry is hard-coded into the browser binary), Chromium policy is to require that includeSubDomains be set. It's technically possible for them to add an includeSubDomains=false entry on the preload list, they just choose not to.
feel so nostalgic reading this! I remember my first contact with the 555 was through the Chip-chap electronics kit when I was 10. good times making LED timers, metronome, etc.
Actually, it does. Unless you mean that it isn't surprising that there is evidence that fish have feelings.
Not sure what you mean, I've always billed it as an internal tools platform since it's our intent to have it do everything you need. (bugs, repo, review, kanban, wiki, chat, etc)
> "There is so much work out there to be done, it's laughable that we are talking about paying people for doing nothing."

If automation continues to expand as expected, the majority of tasks humans do could be replaced by machines/AI. At this point, the total volume of work may be high, but the total volume of work only humans can best fulfil may be much lower than it is today. The question becomes, when we can apply automation to most jobs, what will human society look like?
Check out the structure sensor one of its two major modes is for room scans and its awesome
What other ways are there to download, apart from http and torrents?
Manual HSTS preload isn't the only way to make it scale, and it probably wasn't going to scale even if nobody wanted to be removed. You could automate the process for both additions and removals entirely, and make it a separate thing the browser keeps up-to-date independently of itself, as mentioned in the article.
University of South Florida has an amazing program called Lit2Go, in which they have public domain books narrated by professional voice actors[0]. I have had mixed results with the quality of librivox recordings, though I very much respect and appreciate people who are willing to attempt it. Lit2go is wonderful quality.

[0] http://etc.usf.edu/lit2go/
If you look at the assigned identifiers in the binary scheme, the authors believe that 32-bit truncated cryptographic hash functions are useful.

No they don't. From Section 2:

The sha-256 algorithm as specified in [SHA-256] is mandatory to
implement; that is, implementations MUST be able to generate/send and
to accept/process names based on a sha-256 hash. However,
implementations MAY support additional hash algorithms and MAY use
those for specific names, for example, in a constrained environment
where sha-256 is non-optimal or where truncated names are needed to
fit into corresponding protocols (when a higher collision probability
can be tolerated).

Truncated hashes MAY be supported. When a hash value is truncated,
the name MUST indicate this. Therefore, we use different hash
algorithm strings in these cases, such as sha-256-32 for a 32-bit
truncation of a sha-256 output. A 32-bit truncated hash is
essentially useless for security in almost all cases but might be
useful for naming. With current best practices [RFC3766], very few,
if any, applications making use of names with less than 100-bit
hashes will have useful security properties.
I was watching TED talks about two years ago. My (then) 7 year-old paused in the midst of wandering by and watched for about 30 seconds then asked, "Is that like cartoons for big people?".

Yes. Yes it is.
There was an episode of radiolab or something where a guy had a brain injury and became an obsessive child porn collector. The DA argued that even if he had an illness, if he was cognizant enough to hide his activity from his spouse, he was cognizant enough to seek help instead of continuing his behavior in secret.
You are arbitrarily defining "peer".
From the article:

> HTTPS websites will send referrers to any other HTTPS website even if it contains sensitive information

As such, having a website which is HTTPS will get you referers from both HTTP and HTTPS if they're willing to send them, but it's also important to know you can control them in case there are privacy implications such as leaking your customer's information to external HTTPS sites.
I disagree. This feels like short term greed that hurts everyone in the long run.
Show HN: Devhouse – A House for Developers
Might be better to have the direct link, as the iframe is a bit quirky on mobile:

http://rud.is/projects/clinton_emails_01.html
Cool!

I was curious and looked this up on Wikipedia [0]:

> It has been hypothesized that the 555 got its name from the three 5 kΩ resistors used within, but Hans Camenzind has stated that the number was arbitrary. [1]

[0] https://en.wikipedia.org/wiki/555_timer_IC#Design
[1] http://www.semiconductormuseum.com/Transistors/LectureHall/C...
Public-facing: subdomains.bigco.com includeSubdomains

Internal: subdomains.bigco.<whatever TLD you want>

Don't use HSTS if you're unable to TLS enable everything (which you should be doing, regardless)

This is how we use HSTS within our environment.
Does anyone know the start date ? I had a friend install it for their laptop two weeks ago
> From what I've heard, Google had similar battles between senior leaders and they've been wildly successful.

Those battles are for who can make the best product, a winner is crowned and done. It's not the same as making departments constantly battle each other with no end.

i.e. battle for two similar competing products, not unrelated things.
Much better than the usual terrible patterns of pyramids of doom.

Another reason to set tab stops to 4+ characters: make PoDs impractical and better code legible.
'Millennipreneurs' Are Starting More Businesses, Targeting Higher Profits
No computer BS, and none of the safety improvements made in the intervening time.

I don't understand why some people say that they prefer older cars because they're afraid the computers in newer ones will get them killed. Cars are overall much safer. Buy your older car, and sure, the computers won't kill you, but if and when you do crash it may well kill you where you could have walked away from it in a newer car.
At some point taxes are irrelevant. That's the justification. But they are also an excuse and the reason we don't fund education and social services.
Is there a better word, as easy to pronounce? "Pedoviewers"?
If you're using HSTS, you need to include subdomains to prevent http/https issues with subdomain-served resources, hence the requirement to include subdomains if you're on the preload list.
Content addressing most definitely does NOT guarantee the integrity of a message, because hashes are non isomorphic homomorphisms. Cf. an article on "cryptographic hash"ing, for instance, which are hashes with strong statements about how hard it is to find distinct messages with the same hash, etc. .
>We were exposed to an intrusion today.

> [...]

>Finally, the situation both happened and was solved today, so it should only impact people who downloaded this edition on February 20th.
The Muse is hiring back end engineers – help 50M people with their careers
Looks like something is going on again. Their website is down currently. [21-Feb 02:55 UTC]
More about the Law of Demeter at Ward's Wiki:

http://c2.com/cgi/wiki?LawOfDemeter
Well that is scary. I personally don't check ISO checksums and signatures very often. Probably the only time I do is when I sometimes get install errors and wonder if I got all the bits and if anything got corrupted.
Hard to say since every tool out there moves very fast and we're just building what we think our users want. Overall my personal opinion is the "pull request" model is flawed for businesses but great for open source. Phabricator doesn't serve two masters in that regard. This means we focus more on developer efficiency and code quality. Tools like arcanist are harder to convince people to adopt, but save me personally a few hours each week. (Arcanist does pre-commit lint, unit, and patch emitting). Other tools like Herald (business actions!) and Owners (claim you own code!) are also highly useful at scale.

Our lead dev posted some explanations on how we're different than other popular choices: https://secure.phabricator.com/phame/post/view/766/write_rev...

David Cramer also publish some thoughts on the pull request model: http://cramer.io/2014/05/03/on-pull-requests
Social Media Has Mobilized and Won't Return to the Desk
I'd love for the people who want to lower taxes as a way to strangle the beast to push for something simple: remove all deductions from personal income tax. Nobody gets ANY deduction for anything. All income is taxed the same regardless of the source.

If we want less government spending, we should directly reduce government spending. This roundabout way of reducing income to reduce spending does not work. This is why I cannot trust anyone who says they think Ronald Reagan was a good POTUS. They are clearly either stupid or they have a huge ax to grind.

As far as the current situation goes, the only reason we have this situation is because of our overreach. If we limit our taxation to transactions here in the US, we'd not have this problem. Who gave us the right to tax worldwide income anyway? Does any other country tax worldwide income?
This article is timely for us as we're using Scala for backend work.

Ruby 2.3 &. operator and Swift can do something like this pseudocode:

if let city = article?.author?.address?.city?.ToLower() {
// city present
}

Too long?:

if let city = article?
.author?
.address?
.city?
.ToLower() {
// city present
}

All are improvements over pyramids of doom.

(Be aware of subtle gotcha in Scala of var and val, really prefer Rust/Go/Swift keywords.)
To me, TED always felt like a stage for egomaniacs to talk about how great they are and how they are changing the world.
Hope the judge recognizes the apparent level of incompetence demonstrated by this case.

That should be enough to get the FBI's request overturned.

But it probably won't be.
I don't think this article is a very good argument why non-coders don't use it. They don't care about the internals. Git's CLI, well, that's a good reason why they don't. (but you can get quite a lot of the benefits with a few basic commands via a GUI tool, and you totally can explain that to many non-coding users)
We don't taking building marketing pages seriously. But the software is solid, and we're a founding partner of HackerOne.
The problem is definitely the companies.

They're the ones exploiting the system.

I'm not sure what your agenda is, but the problem is definitely the companies.

If they just paid their fair share with a little bit of mild tax dodging no-one would give a fuck. But they're taking the fucking piss at the moment, generating billions in revenue and then not paying for any of the infrastructure which is supporting their business.
I've downvoted this post for using an xkcd cartoon. This comic has become cliche and no one really likes it anymore. Avoid stupid cartoons if you write a technical post, especially xkcd that's so overused.
http://www.forbes.com/sites/gordonkelly/2014/07/22/every-iph...

Apparently the NSA has a backdoor named ‘DROPOUTJEEP’ but needs physical access to the iPhone first. Possible Canada is using a backdoor like it as well.

Apple is not cooperating with this backdoor it uses an exploit to install.
And the gist with code from the post: https://gist.github.com/hrbrmstr/696b124d0190bba15817
Better to do with the maybe workflow from Fsharpx:

maybe {
let! address = author.address
let! city = address.city
printfn %s city
}
I kind of view him as a coach. I know for me there are many things I could do on my own but I find them much easier with a leader/mentor.
It's hard to find this information on Apple's website. According to https://theintercept.com/2014/09/22/apple-data/

> Apple encrypts your iCloud data in storage, but they encrypt it with their own key, not with your passcode key, which means that they are able to decrypt it to comply with government requests.

Not sure if things have changed since then.
> don't check ISO checksums

I've grown obsessive about it. When you're conscious about that it's amazing (to put mildly) how many prominent projects don't bother with any authentication.
Uber? I've not read Rand but apparently she was an inspiration http://www.businessinsider.com/how-ayn-rand-inspired-uber-ce...
I don't buy it. If I attach a switch to an incandescent light bulb, then the bulb will get hot if I press the switch. If I press the switch enough, the light bulb will burn out. But it would not be accurate to say that the light bulb "died of stress" or that this was evidence that the light bulb could "feel" anything. It certainly doesn't prove the light bulb is conscious.
Larry Ellison gives another $1M to boost Marco Rubio
Wizards of the Coast (and in particular Magic: The Gathering) is the most profitable part of Hasbro, too. IIRC, Magic was the highest earning property in all of Hasbro last quarter and has been at the top for a while.
Awesome thanks. I work in sports science and the ability to potentially animate this stuff would be huge, but simple scans/renders would be helpful as well.

Any idea how you might do it in 3d just out of curiosity? Probably just multiple cameras using a normal kinematics program.
Regarding structure scanning, I see a few details online...

Would you consider working up a write up, for Show HN, with all the detail you care to share about your structure scanning experience...?

This has given me an idea for a fundraiser for a local non-profit I support ...
matter of personal taste, i'd probably prefer having extra keys there, if anything. Why is it not being included in the default configuration somehow worse than allowing you to choose what you want?
AFAIK the cheapest American Volvo (S60) is about the same price as a BMW 3-Series.
Yes. There are some products that are better purchased in person.

Looking at this from a strictly analytic perspective, we could build distributions for each characteristic of a particular product. We would expect that some products would benefit the seller or distributor by being sold in person, and some products would benefit the buyer by being sold in person. There could be a case argued that society would be better served by both keeping some physical stores around and protecting some products so that they can be sold in those stores. It seems to me that philosophical arguments tend to ignore that different products have different characteristics - and those characteristics impact our society.
Lesbians with big tits licking