skysight-inc/HackerNews huggingface dataset:
I've already firewalled a completely open phpinfo page and a compatibility page leaking all my server info. Who knows what's inside the obfuscated portion. They were leaking my ip I try so hard to hide for cloudflare.

Yes firewall all in is necessary. Outgoing only to Amazon. I don't have a perfect solution. A vm will stop full backdoor.
Glad you like it. We're curious to see what contraptions people come up with.
UPDATE: We heard you! We've rolled out a new version of our landing page that shows our current plans. Thanks for the great feedback!

It's still free (forever) to sign up and have an FAQ with up to 20 questions. You'll need to upgrade to a paid plan after that. Enjoy and feel free to get in touch! Thanks!
Histories of the Scientific Revolution
Can't see why not. Buy a pack, start experimenting. You need to sense current, not voltage, so it will be a resistor and scope, not just a scope. Good luck! The chemistry is established; the amount of glucose is proportional to the charge that will flow through the thing.
I haven't seen this on the two devices I have running Windows 10 at home. I believe opting out of all the personalisation at http://choice.microsoft.com has stopped this "feature".
Jake Gyllenhaal Secret Training
One of the guys who started this gave a talk at Chicago's OpenGov Hack Night about a year and a half ago. I honestly don't remember much about it, except for a huge feeling of "meh". A class on excel would be better than the crap they showed.
Just coming here to give Backbone.js some credit. It is one of the most mature of the frontend frameworks, because it does almost nothing. It's what I'd call feature complete, its core probably will not change or grow much from here (in a good way). jQuery and Underscore back it, which also aren't changing or going anywhere. And as another commenter point out, it's 5 years old already, still in production all over the place.
Payment Processors Still Using Weak Crypto
I'd like the option of that! Unity and C# are a great pair, but I'd love to have the newer C# features rolling out.
Appears it is GA now as I was able to upgrade my account...
I remember how bad my Palm Pilot was at that... It didn't even make sense why they added this "capability".
How does a 3rd-party researcher find the next heartbleed if they can't even decrypt the binaries for analysis?
That's a story in itself.

The Germans used airships to bomb Holland and the UK during WW I. Early in the war, before superchargers, the airships flew higher than the airplanes the allies sent to stop them. But with improvements in allied airplane engines, Germany started to take heavy losses.

So they started to build a series of airships they called "height climbers". The idea was they'd drop their bombs, drop their ballast, and fly home far above allied aircraft. It worked, too, though they lost a lot of people to hypothermia and oxygen deprivation.

Fast forward to the end of the war. As part of the Treaty of Versailles, the remaining German airships were divvied up among the victorious countries. What the US (and others ) got were the stripped-down airships that were never intended for normal use. These were ships designed right to the edge of simply falling apart, because otherwise they would have been destroyed by airplanes.

And that's what the US used as a template to produce domestic airships. It's no surprise they broke apart in a strong wind.

Zeppelin knew how to build airships, though. By 1937 the Graf Zeppelin had flown over a million miles without incident.
The cydia creator, while accomplished, is not right to call Cook a liar. Cook says the OS does not exist and that only Apple could make it work on the iPhone. What's untrue about that? The DOJ did not ask for a signing key. They asked for special software.

Regardless of the semantics, the question is should Apple be forced to weaken the security of its product which is used globally. It doesn't matter if you think Apple only needs to hand over a signing key. The result is the same. Anyway, neither the DOJ nor Apple are saying what you or the cydia creator are saying.
A virtual list for React that handles trillions of items
those were aquisitions by Google. Now a list of Microsoft:
My take on this:

https://medium.com/@duncan.bayne/coraline-2893dc09aea1

"To be blunt: based on observations of outspoken SJWs like yourself, hackers like myself think that there is an unspoken delta between your stated aims (which as I’ve said are often noble), and your practice, which is to use open source projects as a weapon against their contributors when they behave in politically unacceptable ways (e.g. OpalGate and Brendan Eich)."
PadMapper is now on Android
I don't make that assumption, I worked on developing TPM modules myself in the 90s at research labs, and our prototypes had even more anti-tampering than so far revealed about Secure Enclave/Trustzone: we had micro-wire-meshes in the packaging to self-destruct on drilling or decapping, we had anti-ultrasonic and anti-TEMPEST shielding. I'm pretty familiar.

The point is that state actors have vast resources to pull off these attacks. The NSA intercepted hardware in the supply chain to implant attacks as documented by Snowden. Stuxnet was a super-elaborate attack on the physical resources of the Iranian nuclear program, which was obviously carried out with supply chain vendors like Siemens. Apple uses Samsung as a supplier, and the US government has very high level security arrangements with the South Koreans, so how do we know the chips haven't been compromised even before they arrive at Foxconn for assembly?

Here's an example of a TPM module being decapped and hacked at Blackhat: https://redmondmag.com/articles/2010/02/03/black-hat-enginee...

Attacks have been shown using silicon doping, security fuse cutting, etc.

If the NSA really wanted to crack the Secure Enclave, I have very little doubt about their ability to carry it out.
This title reminds me of a quote from The Simpsons: "Can God create a rock so heavy that even he cannot lift it?"
https://github.com/WebAssembly/ilwasm - Of course WebAssembly being still in the design stage, this is probably not very usable.
Then the TSA drops a paper clip while you bend over and pick it up
It does. That's what killed Silicon Valley's airship, the Zeppelin 2 operated by Airship Ventures. The price of helium doubled, and airship sightseeing was no longer cost effective. That was a nice airship, too; much more maneuverable than the old ones.

It's hard to contain helium, especially when you have to do it with a ballonet that's severely weight-limited. Helium tends to slip between the molecules of thin materials.
The problem is that the line is not as clear as you'd think. Is someone who makes electronic circuits, but is mostly self-taught, an engineer? How about for software? There is usually very little difference between the best self-taught programmers and the best engineering-school taught ones, up an including knowledge of calculus, algorithmic complexity analysis, ML/stats, etc. Finally, there are people like me who did a bachelors in CS inside a school of sciences, rather than a school of engineering, is 'Software Engineer' justified in the later case, but not the former? Why?

Also, this discussion is a bit like asking why you can be a Data "Scientist" without a Ph.D. and without peer-reviewed publications. In reality, most people understand the difference between a scientist working in neurobiology or particle physics, and a data scientist working on ads (a competent data scientist working on a private non-profit in epidemiology might actually be harder to classify, though). So, same goes as to the difference between a civil engineer and a software engineer.

Edit: If anything, I know a few UX designers that reject the engineer label, but only because it makes the process sound more mechanical compared to designer (in my understanding, both are about discovering and satisfying constrains, but constrains are more strongly defined and more externally enforced in engineering than design, even for software).
Yeah, I agree exactly with what you were trying to do. You picked a bad example is all.

I have poked fun previously at this very thing you alluded to - that a news story about a natural disaster or murder has a "like" button at all, is plain stupid.

Adding new reaction icons to better represent the more appropriate response could backfire in that even they are still trivializing and almost gamifying our responses. It might end up a tacky mess.
This marks a very interesting time in my opinion. We have corporations with more money with governments making (or at least attempting to make) certain social decisions once reserved for only public sector government officials. If Apple is successful here, it will usher in a new era of what a private company can do.
> who decides what is 'deceptive'

Stripe does. No one is entitled to use their service. It's their decision.
Can the SE be updated on a locked phone? Because Apple's docs give the impression that it can't.
I myself have been mulling around the idea of doing a traditional punk zine. My town has an active zine library, in fact. http://www.thebeatlv.com/zine-library.html

Perhaps newsletters need a digital library as well?
"You'll see why 1984 won't be like Nineteen Eighty-Four." - Apple, 1984.
I think you're underestimating how many creative projects done for clients are very much led by something they've seen before. "Make it like the Tesla site. I love the Tesla site!" At some budget ranges, it's not worth the time to fight that.

And beyond fashion, user expectations are a massive influence. People are wary of right-side navigation, designers know that top-left is the common spot for branding for a reason, etc. There are very practical usability and design reasons that things get pushed down a fixed number of creative paths.
All laptops and cameras entering the US are subject to search and seizure.
Write Ios and Android Experiences with JavaScript – Exponent
Seems like Tor is demonstrably not as good protection as people hope it to be. Hm.
I remember reading about this guy more than twenty years ago. He and Franklin Chang-Diaz (who's been plugging away at VASIMR... well, for ever) get the lifetime determination award.
These are two different effects of the same quality.

"Average" means undistinguished, interchangeable; depending on the distribution and context it may mean, with examples:

* normal distribution (IQ): "worse than half of the others"

* distribution with a long positive tail (wealth): "way worse than the best"

* distribution with a compressed left tail (IQ in college-educated adults): "amongst of the worst"

* 20/80 cut-off (female mating strategy): "swipe left"

"Average" also means safe, solid, ideal, normal. This happens when avoiding risk:

* probabilistic estimate of future risk (there is evidence that averaging multiple faces renders a face more beautiful than the rest): average mate => higher probability of average (viable) offspring

* 80/20 cut-off (male mating strategy): "gentlemen prefer blondes — but marry brunettes"

* [too tired to think of other meanings]

Often the same product is both average-good and average-bad, and this is why we have Internet flame wars!
The theory doesn't work. It's based on the idea that if you go out into public the police could traditionally have followed you to see where you go.

Which isn't actually true. They didn't have the resources to follow everyone everywhere all the time. And if they were following you, it was possible for you to observe them. There are methods to detect a tail, so you could employ them and then not go to the secret place until there is no one watching. To maintain "technological neutrality" it would require there to exist equivalent digital methods for people to use to prevent being observed.

Kerr's whole premise of technological neutrality is also questionable unless you apply it both ways. But does it really make sense to say that the police can't use fingerprints or DNA evidence because it wasn't traditionally available? How does that framework make any sense at all?
German researchers claim success in removing HI-Virus from living cells
At some point, I thought about hydrogen-helium mixes, but it seems that you don't need all that much hydrogen to have an inflammable mix.

To address your drone question, I would have thought hydrogen would be OK for them, but I believe helium is generally used in weather balloons, suggesting that just the risks of ground handling make hydrogen more trouble than it is worth.
please please tell me for your own sake you just shut up at family gatherings because you will black sheep yourself pretty fast with this garbage
Apple iPad Pro 2(2016) Secret Video
Atlas robot video from Boston Dynamics
This reminds me of when Urban Airship shut down their free transactional push notification service a while back. It turns out theres so much more money in the marketing side than the transactional side (profit center vs cost center), and if you're going to run a marketing company it doesn't make sense to give away a service to people who will never become the type of customer you want.

We've been referring clients to mandrill for a long time on many different project and although a few have had enough success to hit the level where they start paying, for the most part it's been just a giveaway. It doesn't make it any less painful for those clients that we now need to switch (especially the few that are using the inbound features - ugh) but I can see where they're coming from in this change.
Uber rival Didi Kuaidi raised $1B, valued at $20B+
Railway Budget: Tightrope walk for Suresh Prabhu, fare hike unlikely
But you might be able to create it contractually. Before establishing a connection with a node, exchange a sequence of packets whose contents contains an agreement that neither node will keep a persistent record of the IP address or any other data or metadata associated with the connection. Refuse to connect a node that does not send a (signed) agreement. It's still tricky about identifying the parties, etc., but it'd be interesting to explore with a techno-lawyercat.
The state representing the number of attempts must be stored somewhere, and thus a determined adversary could eventually corrupt it.

Look, there's a big difference between trusting known ciphers that have been well studied by the world's top cryptographers, and a proprietary TPM chip that relies on security-through-obscurity.

The history of embedding secrets into black boxes is a history of them being broken. This isn't a theoretical concern, it's a very practical one.
For low income uninsured folks, it could find use. Especially in lower income countries. America holds its self to such a high medical bar that many simply can't afford healthcare. That is unreasonable.
iPhone 7 Leaked video 2016
Because your buddy was secretly cutting corners using Chinese chips that have a backdoor. Or chips that weren't bonded to spec and last only 2 months in the desert heat.

That's the theory anyway.
> The specialisation means that work for "web designers" has declined IMO.

Yep, exactly. There isn't really such thing as a "web designer" anymore (or rather, there isn't going to be). The job has been split into several different specialised roles.

It's no longer enough to just be able to design and build a good website, because that level of service has become commoditised.
"...I feel very lucky and blessed that drstanleyspelltemple@hotmail.com were able to turn my marriage around like this with his powerful spell. My husband used to spend as much time as he could away from home with other women. Since he cast the love spell on him, My husband is now so in love with me and committed to our marriage than before. its so funny that my husband had not go out for weeks now!" Saikia
Bitbucket (all of Atlassian) UI designers are still living their IBM days. GitLab is the major competitor I see.
>As an engineer, I disliked how over-simplified the design was. There really should be bypass capacitors around the digital components. And SATA requires series DC blocking caps.

Beautiful.
Just read through your blog - found it very informative! Hope to see Winter open sourced soon.
Love the simplicity of PadMapper. Haven't used them since the last time I searched for a pad but I'm glad to see they're still around -- and with a relatively new web interface it seems (not to mention an Android app!).
>"The problem I have is with stuff like their answer to the question "Could Apple build this operating system just once, for this iPhone, and never use it again?", which essentially is outright lying: the "master key" in question is their signing key, not some piece of trivial software they develop (and then sign) in order to automate this process for the FBI. Apple already has the only master key of relevance: that key already exists; the idea that the master key is something that they need to "build" and then would have to "protect" is them trying to divert attention from what is actually important."

https://news.ycombinator.com/item?id=11158036

Yes, the OS does not exist. But to claim that creating the software means it can somehow get "out there" and be used without Apple's control is false.
How big cities that restrict new housing harm the economy
We still don't know what the deal was. Arguing the nature of what we know about NSLs is a bit pointless when things like 641A are happening.

Our interpretation of already unconstitutional NSLs guarantees nothing.
Common Lisp is one of the few languages that get this right:

(+ 1/3 1/7)
→ 10/21
Apple TV talks
Does using a font-atlas really deliver the same quality as fully hinted true-type fonts? Also, this demo doesn't really have any state changes in it. Wouldn't a more realistic example be of a UI that contains mainly different font weights and sizes, to better gauge the effects of all of the pipeline state changes.

I agree that the browser should be more like a game engine, and less like an X11 buffered window system, in terms of just rasterizing faster enough to render 60fps. But it seems like to me that the CSS spec contains a number of features (rounded corners, soft shadows, etc) that by themselves can be rendered fast on a GPU, but cobbled together in a complex scene graph might result in stalls.
>There are methods to detect a tail, so you could employ them and then not go to the secret place until there is no one watching. To maintain "technological neutrality" it would require there to exist equivalent digital methods for people to use to prevent being observed.

Honestly Tor seems like a great analogy here. It makes it far more difficult to be observed, but it's fallible, as is trying to spot a tail.
Two months notice and a huge price increase ultimatum. This heavily affects a lot of Discourse open source installs as we recommended Mandrill as an email provider for almost two years.

Free product so they can do what they want, but this feels a bit abrupt (how about six months to transition) and cruel (forced MailChimp account plus giant leap in pricing).

Would it cost them so much in brand loyalty to be a bit more generous with time to transition and cost?
Xilisoft Video Converter Ultimate 7.8.8 Serial 2015 Crack Full
Often is easier to avoid temptation than to resist it. Hence why throwing the phone away is better for some people.
Yep, that's the "elastic clause" noted by GP.
The counterpoint is that it does not belong to the space of naturally observed images.
Yahoo Games Has Passed Away at Just 17
If the proposed help here isn't "burdensome", then nothing would be.
The only statement I could find from Apple was from the iOS security guide that states, "it utilizes its own secure boot and personalized software update separate from the application processor." I think we can both agree that's a pretty vague statement, if you have a better source I'd like to see it.
It is weird, perhaps some of the profanity in the replies? Feels intentionally buried.
I work at a very large company so you won't be surprised to hear we use a variety of tools and there's often overlap. Almost everything goes to Confluence (our program wiki) including tech specs and marketing documentation. The product team often uses something simple, such as Quip to store and collaborate on their docs. Marketing tends to migrate toward Drive. I think the best advice I can offer is to keep one "source of truth". This isn't too difficult when your team is small but as you start to grow, having one place devs, marketing, sales can go really helps streamline things.
> I wonder if there is any negative effects associated with being refused entry by a CBP? Could it be the case that if you are refused entry once, that in the future they will be more likely to refuse you entry? If so, that's a fairly significant penalty/power that the CBP person has.

Yes, some categories of non-citizen visitors (I don't remember which) are asked on the form if they have ever been refused entry to the U.S. (and are required to answer yes or no). If they're using the same passport number as before, CBP likely also has access to a computerized record of the previous interaction.
Hi, Jan here from SlimFAQ. We actually built this for ourselves initially to solve the problem of allowing non-tech support staff to build and maintain FAQ's for our other products and have it nicely integrated with Intercom. Sure, if you are a developer you could maintain a static FAQ and pay nothing, but for the price of a couple of beers you get a super easy to use CMS and a lot of people seem to want this (us included).
Mr. Robot (TV Series)
What elegance was lost? Where is the biggest pain point on your new stack?
I heard a similar quote from Nathan Marz of Storm fame: "First make it possible, then make it beautiful, then make it fast" http://nathanmarz.com/blog/suffering-oriented-programming.ht...
I've found it's a lot of the time that the quick and dirty is the stuff I never come back to.
How to Use Deep Links to Drive Mobile Engagement
Markdown Preview Plugin on vim
I just checked out Sparkpost, and unfortunately, they seem to have a crippling price discrepancy. Their new "express" plan is sort of comparable to what Mandrill charged, but as soon as I grow to the point where I need more, they are x3 the price. Not sure what they were thinking with that sort of thing, are they trying to discourage customers from growing their email volume on the platform?

I find this sort of "nonsensical pricing" very off putting. If your pricing page is so obviously 'wtf' like this, how can I take them seriously, even if they do the emails for Twitter, PayPal, LinkedIn, they could be the secret real host for Gmail for all it matters to me... Their pricing page tells me they have a screw loose.
The real lynchpin here is not hardware, but iCloud. Apple can pull data out of an iCloud backup, and the only reason the San Bernadino case even got off the ground is because somebody at the county screwed up and effectively prevented the backup from occurring.

iCloud backups can be secured so not even Apple can get in them, but it is fundamentally much harder to secure (can't be hareware-entangled and still restore to a new device), and it would significantly complicate iCloud password changes. I'm sure they are working on it, but it is nontrivial.

That (software) problem is the real reason 99% of users are still exposed, as you say the hardware and secure enclave holes are basically closed.
Hacking Facebook Analytics into an A/B Tool
But the question isn't whether someone could use a welding torch to break into your safe, the question is whether you have a reasonable expectation of privacy.

Because the consequence isn't that the police can't get the information, it's only that they need a warrant first.