skysight-inc/HackerNews huggingface dataset:
I can only talk about Germany, as this is the country I know best. I suspect it's not too different in most others.

Most laws are not passed after a long public debate in parliament, certainly not years (that would make for really slow legislation). In fact, almost all laws see almost no debate at all. As an example, just today the federal parliament passed a law without plenary debate at all and with no votes against to streamline electronic communication with the patent and trademark office. The law was introduced in November and voted through all required phases as just a single line-item every time. That is not an exceptional example.

Sure, these are mostly low-profile, low-impact laws so not really comparable to TTIP.

But extremely fast lawmaking is also not unheard of. For example, the "Finanzmarktstabilisierungsgesetz" during the financial crisis was first introduced to parliament and the public on 14th October 2008 and already went in full force by 18th October 2008. And that was certainly not your regular change of traffic rules but introduced hundreds of billions euros of liability. Of course that drew a lot of criticism.

I'm not saying everything went well with TTIP (certainly it didn't). But if you talk to anyone in the EU commission they will tell you that they have been really caught off guard with the public interest which hadn't been anticipated at all. It was not that they purposefully hid the negotiations from the public to reach their goals but rather did what felt natural to them. The EU has negotiated dozens of similar treaties (though smaller and lower-impact) with nobody voicing interest in the process.

When was the last time you heard about trade agreements with Singapore, Japan, Ecuador, Kazakhstan, the East African Community, Thailand, Morocco, India, etc.? All those are currently being drafted or have just been finalized without any public debate at all. Many of those contain clauses similar to the ones criticized with TTIP.

Of course we should ask critically why they saw it that way and hope that it will change in the future to more open negotiations. But saying TTIP was created in an exceptional never-seen-before process is really stretching reality.

Drafting the net-neutrality laws is the exception rather than the norm here learned after years of public debate on certain topics.
reviseddamage: You were questioning why Atlas went with SVB and noted that SVB doesn't bank fin-tech in general.

There's no reason Stripe's selection of a payfac provider should (strongly) influence it's selection of a corporate/startup banking bizdev partner. Atlas is linking companies up to regular corporate banking services.
From recent polls most people think this debate is about:

"Should Apple be forced to give the Terrorist's phone data to the FBI"

When what it's really about:

"Should the FBI be able to compel technology companies to use their resources against their own and their Customers right to Security."

In order for the public to be properly informed about what's really at stake this case needs to be about the "Technology Industry vs FBI", not what the US Govt is trying to set the narrative to:
"Apple protecting Terrorism". With this announcement this brings us to:

- Apple
- Twitter
- Yahoo
- Facebook / WhatsApp
- Microsoft
- Google (Sundar lukewarm)

Big technology companies with large user bases that's notably missing:

- Amazon
- Linked In
Whether or not the implications of this particular CSRF vulnerability were serious, the developers should be commended on implementing a fix quickly.
Or perhaps, miraculously, you're only looking at the best of the best products?
I read somewhere react native/phone gap base type js app are allowed in app store already.

Supposedly, the authors can dynamically update the GUI/js code base on the client without going through the app store update process too.
Previous discussions

https://news.ycombinator.com/item?id=11170713

https://news.ycombinator.com/item?id=11170806
If not confidential, can you describe what kinds of automation you used this for, particularly the desktop automation?

I was interested in automating transcription to text of my own reminders to myself and other such audio files, say taken on the PC or on a portable voice recorder, hence the earlier trials I did. But at the time nothing worked out well enough, IIRC.
I disagree. "Terrorist's Phone" is simply the most efficient way to identify the case. "User's Privacy" would mean absolutely nothing to someone who hasn't heard of the case as much as we have, especially considering most of Apple's marketing nowadays is through that lens…

> The government couldn't have chosen a better case to publicize in search of a precedent in their favor.

If you'll allow me to be pedantic, they could have; we can be pretty sure this phone has none of the evidence they want it to, and it's not like anyone at Apple will lose sleep feeling responsible for aiding terrorism.

But my point is, this is simply the headline that will get the most clicks. Any political bias in it is coincidental. (And of course, it seems reasonable for most people to agree that, in a vacuum, it would be OK for Apple to unlock the phone, as long as it never affected other users.)
When I worked at AT&T, we (annually) had presentations by a PAC and if you wanted to have a payroll deduction done, you would stay behind after. They took attendance for these presentations (and for other things like United Way).
It works wherever you've set up a Kubernetes cluster! So as long as you have kubectl configured correctly, you're good to go.
Your metrics don't touch software plasticity (capacity to receive changes) at all, yet it is one of the most important components of software quality.
Good points indeed. I never thought of adding anti-CSRF measures to login forms, only while logged in, so I'll start doing that :)
cmrx64: it all depends on how much you trust 1password and what your threat model is. For me, the advantage of keepass is that I don't need to upload my credentials anywhere

oneeyedpigeon: But if you want to sync your credentials across devices, you still have to upload them somewhere, right?

dorfsmay: You are uploading a file that is encrypted using very strong encryption, not plain text password

I took that to mean:

(with keepass) you are uploading a file that is encrypted ... not plain text password (as for 1password)

dorfsmay has now confirmed that was their meaning in this comment: https://news.ycombinator.com/item?id=11177045
> than to set up a system to handle recurring billing (and then you need to deal with cancelations, chargebacks, etc.).

You just plugin the Stripe SDK and set up a Stripe account and it's done. It's not hard. It takes like half a day. You don't have to do any of this manually. If you're a tiny team and you are doing this manually you're doing it wrong. I've never had to worry about chargebacks or cancelations being a problem.
Nyiragongo Volcano the Volcano Next Door
The problem that I found with that approach for this particular use case (maybe using files wasn't a great example, since it has its own module and files can be templated) is that the variable itself is a list of dicts. I found that using with_subelements or with_items for this didn't reduce the complexity much since I still needed to resort to Jinja gymnastics to get what I needed and then needed to worry about taking that output and casting it to a list anyway.
There are many good points in this article and even the variety of Common Lisp implementations in existence attest to the author's point. It seems that everyone is rolling out their whole new CL implementation.

That said, even if it were true that the power of lisp turned out to be it's curse, one should be careful to generalize this way about lisp hackers, 80% projects and lack of documentation. The language might tempt you to become the hacker portrayed in this article, but it certainly doesn't fight you should you want to follow best practices.
It says in the first paragraph that it's diesel.
It would be even more impressive if they could compress the images, given that the backgrounds are already known.
"Consumer Security Solution"? Your advocating is pretty devilish indeed

I think you are misunderstanding what's going on and it seems you are not aware that dealing with network resource abuse is a normal thing in the running of an internet service - at any level. There are many legitimate uses of network resources and some which aren't: spamming, hosting illegal content (for whatever value of illegal), running botnets and so on. Each organization and jurisdiction sets their own rules about what is and isn't allowed on their resources which their customers have to abide by. And usually they share a way to report abuses to them. (See, the companies who hosted the spammers who sent out the link to the domains in question have already responded by shutting the spambots down.)

And indeed CloudFlare does have these policies in place, which you can clearly read on the link shared by jgrahamc above.

This particular issue is concerning a situation which isn't directly addressed by the rules already in place, and I am well within my rights to ask them to remedy this.

And if I was aware that customers of Dun & Bradstreet were selling data they received by Dun & Bradstreet on the black market to the Yakuza, be sure that I would let them know about it repeatedly.

You keep emphasizing that I want something for free from them, au contraire, I am providing them with a free service by letting them know they're system is being used by criminals to commit crimes.
Show HN: User scripts for HN comment section usability improvements
Ruby 2.3 Is Only 4% Faster than 2.2
Porting existig software to JS is advantageous for a few reasons.

NPM makes cross-platform installation simple, easy, and scriptable by default.

Dependency management. The package manager supports both local and global installations, as well as the ability to manage multiple versions of a dependency where necessary. Not by convention, by default. Dependency hell simply isn't an issue in the JS ecosystem.

More secure. Scipt installation/management doesn't require root privileges. The runtime uses it's own sandbox. No matter how safe the underlying OS is, it's virtually impossible for a malicious script to break out and mutate memory/data outside of it's context. PwnToOwn competitions are frequently held to test, identify, and harden security.

Project hosting is trivial to setup. Package installation, upgrade, removal is supported by default.

Scripts aren't tightly coupled to the OS. So you don't have to import the entire universe to use them. For example, Cygwin or MiniGW not required.

Scripts don't require compilation. If you run into problems, it's trivial to open up the source and correct the issue yourself. Shorter iteration/feedback loops on OSS projects means more users are capable of contributing fixes and/or new features.

In short, all of the pain points that suck about native application development have been solved in the JS ecosystem.

Just the 'import the universe' point alone is enough to deter any dane dev from porting a *nix binary to Windows. Disk space isn't the concern, surface area for potential security issues, bugs, and the maintenance overhead of keeping an OS emulation layer updated are.

Javascript is a truly cross-platform solution.
I don't think the community necessarily rejects the idea of a "search engine" project, but the way it was communicated (or lack of) is the main problem.

As well, the foundation has no current strategic plan at the moment. Once there is a plan (formed with community involvement) and it's decided some search project should be a priority, then I think most people would have no problem with such grant funding.
In echo of your words, for the last few years, people I've been meeting in the pub have sometimes turned up late, sometimes really quite late indeed, and they always complained that they couldn't call me to tell me. I would point out that they would generally have called too late for me to delay, being on my way to the pub already (or even already there), but there was a weird belief that telling me they were late made it better, somehow.

Except this year. For example, the last time I went to the pub (a week ago) the other party got there bang on time, to the minute, having apparently freaked out at his other half and made absolutely sure that she'd give him a ride to the pub in time, because he knew there was no way to contact me. Now that I'm known for not being contactable, people actually start planning around it and make an effort to be on time.
Users will complain loudly about battery life. Using the GPS, accelerometer, barometer isn't free.

It should be possible to piggyback on the user texting or performing some other common action after landing. But probably isn't easy.
I have done the profile cleaning routing (I think that's something like the defragmentation runs of old...) and disabled all add-ons except for uBlock, Reddit Enhancement Suite and greasemonkey (for a total of 3 GM scripts).

I don't understand what's up either, but I have it both on my Windows work machine with a 4+4 core desktop CPU and 32GB RAM and my Macbook with 16GB. After a couple of hours, I can type in a text-field and see the text lagging. On a 2.4Ghz machine.

I do have lots of tabs open, but since they only load on activation I doubt that's the reason. Maybe it's the Web Telegram app. It's totally frustrating that I am not even able to find the culprit if there's one since not even the dev tools have something like `ps -aux` to show what the tabs are consuming.

Granted, it's gotten better with v.45, but still I just hope something useful comes out of Servo, and soon.
But the tool I linked to was just a prototype. The actual product will be accessed via the web.
Why doesn't EmberJS get more love on HN? I started at a new company last summer. From knowing 0 JS knowledge and starting with Ember we've built a large, awesome single page application with tonnes of bells and whistles. The details are boring but the results are impressive.

It was a bit choppy at first but Ember is really really awesome, everything is included and it all just works. You have components, ember-data for server-side stuff, routing, templating all included.
PocketC.H.I.P. Time Machine: Designing a Hackable Linux Handheld
> There are people, though, that when looking for a license to use when releasing their software specifically choose one that is known to be incompatible with the GPL.

The issue at hand is not that the CDDL licensed software is being re-distributed under a GPL license. It's not. The issue is whether or not GPL software and CDDL software can interact in such a way as to violate the GPL license.

I doubt very much that "this can't be ported to a Linux kernel module" was a deciding factor when choosing the CDDL. If it was such an important factor, then they should have modified the CDDL to add such language to the license, which would make this issue much more clear.
> because it would be hard (if even possible) to get every ZoL contributor to relicense

I think this is the fundamental point that 'ajross disagrees with.

First, they could dump the code and rewrite it. That solves the actual problem (getting a ZFS under GPL) without actually relicensing. If the code from non-Oracle owners is small, that's reasonable.

Second, they could ignore their copyrights. I believe this is legal in many jurisdictions where you have many of the copyright holders on board; in particular, for many small patches, they are too small to be copyrightable. (The FSF, for instance, doesn't require copyright assignment if your patch is under 15 lines or otherwise not "legally significant", like a mechanical find/replace.) That's why Conservancy can't file lawsuits with anyone in the entire `git log` of Linux who's contributed one or two patches once, but needs someone who wrote something at least somewhat substantial.

See also this VLC blog post and its discussion of French law:

http://www.jbkempf.com/blog/post/2012/How-to-properly-relice...

Third, per that VLC blog post, it is empirically possible to get every contributor to a large project to relicense. And VLC's ownership is almost certainly more varied than ZFS's.
WW3 RUSSIA THREATENS TO NUKE TURDS AND NATO SEZ FUCK OFF TURDS
Was Marc Andreesen speaking on behalf of Facebook when he made those remarks about India the other day? No. Neither was Bill Gates speaking for Microsoft.
Does something like this have any value to an acquirer even if just to keep the lights on and no cash is involved?
XtreemFS is BSD, what is Quobyte?
I clicked on comments to say the exactly same thing. I will not be surprised to learn later that FBI was arm twisting media houses against Apple.

I need to read Orwell's books again. They are like handbook for life in modern America.
I was using a mobile browser before, and the page layout was different, putting the big summary box full of photos (which excerpts and links to Wikipedia) at the top.

On a desktop, I see what you mean; UrbanDictionary is indeed at the top of the plain-text search results.

Not going to defend Google at all. But for myself, if I'm looking for a Wikipedia-grade introduction to some topic, I usually just search Wikipedia directly. Wikipedia has become so ridiculously useful that it is the top result of a Google search half the time anyway. Wikipedia is a better human-curated web index than any of the old-school 1990s human-curated web indexes ever were.
Is there a way to do it on the bog-standard Firefox? I can't use a nightly on my company's work machine.
> Ubuntu has been shipping nvidia.ko for years.

Is that true? I thought Ubuntu's support for nvidia.ko involved downloading source code to the local machine and compiling it there, to avoid distributing a GPL violation.
Why "500 times"?
As far as I can tell that particular vulnerability isn't a CSRF at all, it's an insecure JSONP endpoint[1]. The original author is mistaken.

[1] http://homakov.blogspot.com/2013/02/are-you-sure-you-use-jso...
That's not what issue with that was. The issue is that it wasn't discussed within the BoT, it was someone's pet project and it is clear that the discovery team was ramped up before discussions even took place properly, which meant funding allocations, IMO, we're done in a decidedly underhanded way.

They also made that grant application so vague that it looked like they wanted to compete with Google. Read the document. Heck, read the article that is now on Wikipedia!

https://en.wikipedia.org/wiki/Knowledge_Engine_(Wikimedia_Fo...
This chain of what-if?s can end here.

In the CDDL, like the MPL that it was modeled after, forward compatibility is not opt-in—unlike the GPL, where you explicitly have to state that it's under any later version if you want to allow for that. (The CDDL does allow you restrict the code to a specific version, but you have to explicitly opt out.)

The CDDL is at 1.0. Sun (Oracle) is the license steward. If they publish CDDL 1.1 tomorrow, and it says you can use the software under the terms of the MIT License, then every CDDL project in existence that didn't explicitly opt out will be available under very permissive terms.

That's a whole lot easier than relicensing the kernel.
Plus if you made the account name "new" or "top posts" or something, it could take weeks for me to notice that it didn't say my username at the top right.
If one gives a locked safe to someone else for safekeeping, do they really expect the keeper to break open the safe and search through the contents?

I don't think 3rd party doctrine is really a good idea if the above is OK.
Only by a linear factor. Current OpenZFS is no longer the Sun released ZFSv28 code of old. Oracle does not have the copyright for these important, non-trivial parts.

If the point of the SFC is that those 10 years of non-Oracle/SUN development can be ignored, than on the same basis all the extensions to Linus' code can be ignored as well and he can simply relicense. But that is not something they want to argue, since they rely on ownership transference of some of those parts.
Side ports are also used in 2-stroke piston engines. Most often found on mopeds and chainsaws.
I ask having no idea...

Does Linux allow for a file system to be invoked at run-time using a general-purpose interface? (If not, could one be added?)

If ZFS could be modified to use the general-purpose interface, people who wanted to use it could download it and install it.
In what is probably the biggest case, FlightAware, a lot of the data comes from a fleet of users running ADS-B[1] receivers feeding data into their system. ADS-B data is what Air Traffic Control uses to track planes, and it's receivable using using a cheap TV tuner and a raspberry pi[2]. It ends up being probably the best way to track planes very precisely, as long as you can get enough coverage, which flightaware manages to do pretty well [3]. They then package this data and sell it via an API/tools for Fixed Base Operators or apps like Just Landed.

[1] https://en.wikipedia.org/wiki/Automatic_dependent_surveillan...
[2] http://flightaware.com/adsb/piaware/build
[3] http://flightaware.com/adsb/coverage
Upvoting this since I'm also very excited about Elixir these days :)

Hopefully, more jobs will be posted to the Radar very soon.
The tech industry seems to be a bit like Hollywood in how it supports the military industrial complex - the pendulum swings between 'pro-totalitarianism' (where everyone signs up the the Patriot Act of the day without hesitation) and something more 'pro-democratic' (when a Snowden type situation comes along and freedom stuff gains traction).

In a way we are lucky that money talks in the U.S.A., it allows for this dynamic. If too much 'totalitarianism' hurts the bottom line then things get pushed back a bit and the noose loosens a bit. All the government needs is another big polarizing incident and I am sure Microsoft will be back doing as much of the government's dirty work as possible.
I'm not involved with the project...just an admirer. I do know that it has a headless option in the command line invocation.
Nobody is asking them for free customer security.

There is an expectation in the web hosting industry that when a bad site (child porn, phishing, etc) pops up on your network, you take it down. CloudFlare effectively shields who is hosting the site so that you can't pressure them into taking it down. An entire cottage industry of bulletproof hosting companies has popped up that actively advertise CloudFlare protection.

I used to work on an extremely large free DNS provider. Even though the service was free, we were still obligated (morally and by our upstreams) to take down malicious sites.
Impressively shameless.
I know. My comment also applies to large donors.
Ask HN: Examples of communication b/w Docker containers with JSON or GraphQL?
Preferably when docker containers are running code in different languages.

http://blog.deepgram.com/import-a-docker-container-in-python/ - this is cool but just prints out strings..
Unless its a engine that gets us away from using oil, its not a fundamental change.
It's not anything a human can't do in theory, identifying plants and common architecture features. If you are uploading photos on facebook, it's far more likely you'll leak geographic data through the photo's metadata, your ip, and gps.
I do not understand people's fascination with SWIFT. It is a great language compared to the atrocity of Objective-C but then no where close to Java.

I think there are lot of iOS programmers in the wild for whom SWIFT is first language and hence the fascination.