skysight-inc/HackerNews huggingface dataset:
The guy has a point: companies paying ad-blocking companies so you have to look at their ads, even with the "ad-blocker", reeks of protection rackets.

The solution to all this is very, very simple: install uBlock Origin. It blocks ALL ads (that it's programmed for), and has no way for companies to bribe them to allow their ads through. So it can't be compared to a protection racket.
I see it in private industry too, I just worked in 2-week sprints on something only to discover that all our "feedback" for the past six months was actually from (surprise!) the managers in the pipeline, who hadn't actually enabled the feature to be seen by real end-users.

Among many possible causes, two that come to mind:

1. Managers who (despite lip-service to the idea) refuse to take any incremental risks looking bad with negative feedback each sprint, and would rather risk one big failure-event.

2. Companies which have either very-convoluted procedures or who try to treat end-users as cheap interchangeable human-robots... Which means no change can ever be rolled out without exhaustive documentation and training plans. Therefore all changes have to be "big enough" to be worth it.
You're pitching it to potential customers entirely the wrong way.

Most consumers of web content (>99%) don't care about this in any way. I mean, to be perfectly honest, I'm only mildly interested in exploring alternatives to the ad-supported web. I almost never see ads anyway.

You should be selling this as something that will give access to paywall content. That's it. Because that's the only possible thing that there is even a sliver of a market for. Recruit content providers (the bigger, the better), figure out how much they are currently making off paywall revenue, possibly sell at a loss to build a user base (and demonstrate traction to more content providers and possible investors).

Once you have a user base and demonstrated traction, allow future content providers (of any size and viewership) to join your "platform" and earn payouts based on viewership. Obviously, still target large, valuable content providers directly.

As the number of content providers grows, your value proposition grows.

As it is, you're charging $10/month for a service that offers less value than what most people get for free through AdBlock.

The real economics experiment is if people will pay more money for less value. The utility of "fixing the web" doesn't even come close to spanning the value deficit.
No, I understand, but it looks like browsers can tackle this better than any third-party could unless there's a plugin mechanism just for that purpose.
It would be cool if someone does an A/B testing over a significantly big population of users and show us the dropoffs on each version. I would love to have no password login (temp token), but if the users don't receive them on time (email deliverability might be laggy at times), or they don't get the idea, or they don't care/like the method.. Well, you got my point.
Agreed: to me the word "random" makes it seem like the IP address was randomly generated.

Interestingly enough, the author himself uses the word "random" to describe the address, but then implies it is indeed unique: "it didn't resolve to anything".

I believe he really meant "unknown" there, but he is a professional researcher, so what do I know? I guess we will have to wait for the paper he mentioned he was writing on the subject.
I work for the government (and perhaps more significantly, have never worked as a developer outside of government), so it's difficult for me to understand the ideas and concerns promoted here. Just as in private industry (according to the article), our first versions are MVPs which have a roadmap for future additions and improvements. Based on funding, those may or may not result in an increase in team size.

At some point though, the team will decrease in size and the software will be considered "complete for now". Generally, that software will continue to be "on life support" (I guess you could say that?) for the next 5 - 20 years. That isn't a bad thing. Some of the projects I maintain have code from the mid-90s that I'm still making incremental updates to. Sure, I'd like to rewrite it in something newer, but it isn't about me, it isn't about fancy shiny. It's about the fact the system as it exists is proven and solid and meets 90% of the customers stated need. "Whack-a-mole" changes are just a sign of poor testing, poor architecture, or lazy developers. All of our teams here make incremental changes on aging software and generally don't experience major regressions except when it's time to do the big rewrites (which are usually customer-initiated when they bring a raft of changes and some money). When existing technologies are so obsolete as to be unsupportable, then we (IT) will initiate a rewrite as well, but hopefully with incremental upgrades we can keep a product running for as long as the customer likes without spending any more money than they want to spend.
Digital Logic Design: A high-level overview
If you mean project dependencies as dependencies declared in the setup.py file, setuptools support the dependency_links option, which can include VCS links. So that shouldn't be a problem, albeit I believe it is frowned upon.
It's either a) change the group on the /dev/bpf entries and add your user to that group or b) run Wireshark as root.
> Lie.

It's a fact.Google paid millions.
> So what you are saying is that if I voluntarily seek a therapist, I could end up committed, but if I don't, then I have to have done something bad enough for me to be in front of the judge first.

It depends where you are. That's not true for the UK, for example, where a variety of people have powers to detain under the mental health act. There's a bunch of checks and balances built in to the system so while it's not perfect it's very far away from the misinformation some people are spreading in this thread.
You're saying something nobody wants to hear.
They never had control or they never lost it?
Comcast gets tax break designed for Google fiber
https://adblockplus.org/acceptable-ads-agreements#payment

> Whitelisting is free for all small- and medium websites and blogs. However, managing this list requires significant effort on our side and this task cannot be completely taken over by volunteers as it happens with common filter lists. That's why we are being paid by some larger properties that serve non-intrusive advertisements that want to participate in the Acceptable Ads initiative.

http://www.businessinsider.com/google-microsoft-amazon-taboo...

> Google, Microsoft, Amazon, and Taboola are paying the owner of Adblock Plus to unblock ads on their websites at a fee of "30% of the additional ad revenues" they would have made were ads unblocked, the Financial Times reports.

Umm.
In the video, the audience laughs at that line. But maybe many buyers would not.
Well I had to try this on JOE, the highest score is:

1613 359 325 regex.c(1260): joe_regexec

The manual has:

‘50-99’ Unmaintainable code.
‘100-199’ Crazy making difficult code.
‘200+’ I only wish I were kidding.

Score | ln-ct | nc-lns| file-name(line): proc-name
4707 3815 2838 lib/vasnprintf.c(1747): VASNPRINTF

The golang compiler should include this technology and refuse to compile files which it decides are too complex for you to maintain.
Right. Can verify. Step one of the CIA "send operations people into a country to fuck them up" is generating the money necessary for the operation locally (with the first recommendation towards that goal being to deal drugs). Global drug legalization would make it very hard for the CIA to undermine foreign governments so quickly. If you take drugs out of the equation, it is hard to generate lots of cash quickly.
15k barely covers the engineers employed by Google alone at the time. The class action lawsuit covers 64k employees, and that's a subset of the employees affected. If your argument is that Eric Schmidt's entering in the agreement only affected employees at Google, that's clearly false. A single company no-poach agreement would clearly be worthless, so it must be the case that Eric Schmidt's actions affected employees at other companies. If you believe some of the latest news, the agreement spread to enough companies that 1M employees were directly affected: https://pando.com/2014/03/22/revealed-apple-and-googles-wage.... Schmidt and Jobs were central in creating the agreement and its spread.

As for the second order effects, do you know a hiring manager? Ask them about how competitive offers have changed since the no-poach agreement was canceled. The effect is much larger than just having to keep up with the across the board raise Google gave to their employees when the agreement expired, which was itself non-trivial.
Wired's final prediction is that all the ads will disappear into sponsored content within a decade.

I’m surprised that Wired made such a prediction because to me it sounds awfully wrong. For starters, whatever is going to happen it will happen much sooner than a decade. Ad blocking adoption has already reached 35% in some countries. At 50%-60% the industry is doomed. Not to mention fake ad impressions which already amount to one quarter of all traffic. I also find it odd that the only outcome they see is sponsored content. We already have that, it’s called native advertising and it sucks. If advertisers can have a saying on the content then the quality will go south pretty fast. What about micropayments? What about serving ads from the publisher’s domain? What about stopping the damn profiling which is the root of the problem? It seems that the online publishing industry is in a bit of a shock from the way things are moving and can’t think originally.
Right now workers can claim available shifts, and managers can assign them manually (including viewing whether an assignment may trigger overtime). More advanced shift swapping workflows will be published in the coming months too!
Ask HN: Do you allow your kids to own an iPad?
This has been a difficult topic in many families. Some forbid the use of tech completely but I believe that educating my kids on tech and providing them the tools needed is better than denying something that is really common now and will be the normal for them in the future. Do you allow yours to have their iPad all they long or just some hours? how do you hand it?
Surely this doesn't protect you if there is hidden code on the chip?
Industrial Internet Consortium and Plattform Industrie 4.0 Reach Agreement
To be fair, people also think "rest and relaxation" is amazing, and we probably need to capture some of the value of this technology via a for-profit company as well.
Show HN: Convert vines, instagram/Twitter/Facebook videos into .gifs
The prison lobby (guard unions, etc) is actually fairly loud about this. They make a lot of noise around things that put and keep more people in jail. It's way past "probably"!
>> to split a string into words [...] For Unicode, I don't even know where to look up how to do it.

> That's not a problem with unicode.

So how do I know or make a reasonable decision what's "whitespace" in Unicode? There isn't just these few characters <= 0x20. http://www.fileformat.info/info/unicode/category/Zs/list.htm lists just 17 characters, which does not include newline, tab or CR. And maybe the list will be expanded over time? I'm also not sure if there are other categories or special cases which I might have to consider.

>> Did you ever do a 'sed /\xFF/d' and asked yourself how the hell this is interpreted (in a UTF-8 locale)?

> The exact same question exists about ASCII, since \xFF is not valid ASCII.

Read that as C locale. The point is, there are not many ways that can be handled, and consequently not much surprise is possible.

> It's painful that your random manglings don't make sense?

If you consider basic and practical things, like interpreting input as lines and words/fields, random manglings, then yes. But there are actually many applications that can profit from a "free monoid" property (i.e. the concatenation operation being associative, without "chemical reaction" between the concatenated chunks).

>> Then there are these combining code points which repeat the UTF-8 ceremony at a higher level of abstraction.

> They don't.

They are only meaningful as a combination sequence, and otherwise there is semantic illness, or am I wrong?

>> Then there are so many characters where you just can't know how they will be displayed (if at all) at the receiving side.

> Which is already an issue in ASCII.

Some common sense helps here. Show me what serious fonts don't support the ASCII print range.

> And if you think dealing with unicode is troublesome, for your sake stay far away from anything having to do with localisation, unicode is the basement level of localisation issues.

I'm totally with you.
Age?
Observing that your only point of evidence is your own unsubstantiated personal opinion is not the same thing as conducting a personal attack.
http://i.imgur.com/eSSeK3I.png
It must have changed from when I first signed up. The original ToS, etc. didn't state that.

It also doesn't appear to state that presently.

For instance:

https://mandrill.zendesk.com/hc/en-us/articles/206251597-Wha...

> Mandrill is an email infrastructure service designed to help applications or websites that need to send transactional email like password resets, order confirmations, and welcome messages.

> Any bulk email should be sent through MailChimp, rather than Mandrill.
If you're against hiring public officers and advisers based on moral turpitude, there'd be a non-existent stack left to hire from.
A drought isn't climate change. The annual weather is a chaotic system, and a drought for a year or two (or even 10) is normal. Climate change is much longer term.
Silicon Valley has to take a lead when it comes to working remotely. At the very least, let the well paid people work from a list of co-working spaces around the country or something if renting an office in Portland, Oregon or New York, NY is a problem and you won't have people working from home.
Author here:

Thank you for responding. The reason I wrote this up is not to let people oh my god the world is ending but to let them know, hey if you are using the browser extension there is clear text passwords being sent over the loopback, if you don't like that then don't use their extensions.

You have made very well informed arguments about how hard it is to protect if someone has access to your machine, specifically elevated. But the argument to me seems kind of like "well, it's hard to protect against then so we just decided to not do anything at all." It seems like one other password manager company did something, so why wouldn't you?

Can you explain why it would require a pairing request every time? Couldn't you just pair it once and then be done with it? Can you explain the other approaches?
Yeah but when I originally signed up I was told that was the purpose back in 2013.
>> but voters aren't driven by cost-benefit analysis.
>So, what of it? We should keep doing things we know don't work because the uninformed don't understand?

So we live in a democracy, and so have to pay at least some attention to what the people want.

The alternative is a dictatorship of some sort. Historically, those tend to ignore cost-benefit analysis and whether or not things actually work just as much as any democracy. Main difference is that the opinions of only one or a handful of people matter, and you have no access to influence those opinions, no matter what you think of them.
Google's Self-Driving Car Crashed.  So What Happens Now?
This is a very well laid out and interesting resource. Glad to get a chance to check it out. Off to explore some more, thanks for sharing!
I feel like discussion of 'sensible bash defaults' is incomplete without mention of .inputrc. My most "can't live without it" setting for bash is actually an .inputrc setting:

# From http://www.ukuug.org/events/linux2003/papers/bash_tips/
# Incremental searching with Up and Down is configured in .inputrc
"\e[A": history-search-backward
"\e[B": history-search-forward

... so if I type `ssh <up arrow>` I get the last command that started with `ssh`, not the last command I ran. oh-my-zsh thankfully does this by default as well. But I still use my .inputrc on server boxen where I don't want/need to install a different default shell.

Also worth noting that all of those `bind` commands in OP's script are actually .inputrc lines if you remove the `bind` and surrounding quotes.
Um, is AdBlock Plus not obeying the "Allow some non-intrusive advertising" checkbox? If so, that's a scandal.

However, if they only show ads to people who leave the box checked, I really don't see the problem.
Well I don't have kids but I agree that forbidding the use of tech is not good for them because sooner or later they will have their own and that's how their future will be.
FTA "the 1Password browser extension protects you from a more typical malware attack of pasteboard/clipboard sniffers."

Clearly, someone at agile bits has given thought to defending against a compromised machine. Therefore, I don't see how you can justify not obfuscating data sent over lo0. I also fail to see how obfuscating the data sent over lo0 would "have unpleasant side effects that risk user data in other ways."
Wouldn't consider this a "show hn". There's no code, demo or even screenshots I could see.
The point is that the most commonly used e-mail protocols do not have safety built in. The solutions for this problem (e.g. PGP signing) are not adapted widely enough to be considered adapted by the market.

If you'd want to use two-factor authentication by verifying access to the mailbox, you have to make sure that that (the connection to) the mail box is safe as well, which can potentially be very hard.

The mailbox still is a safe, but only from the moment that the mail has been sent to the moment the page has been requested. Mind that a safe connection to your mailbox does not also mean a safe connection to the server, but that is something that is covered by https+certificates (mostly).
I'm sorry, but I don't agree with any of your assertions. The constraints on channels are there not as an accident of a bad implementation, but as deliberate decisions to enforce a certain set of design contracts. Panics on invalid channel operations enforce those contracts. That nil channels block is actually an incredibly handy feature: see e.g. https://github.com/streadway/handy/blob/b8cb168/breaker/brea...

Without exception, hitting one of these corner cases exposes an error in design, from Go's perspective on CSP. You can disagree with that perspective on a subjective basis ("hard to understand") -- but you can't lift that opinion to objective fact, and you certainly can't claim these artifacts of design as evidence of incompetence or neglect.
Take a look at Portugal, which has now had general drug decriminalization since the early 2000s. There was an initial spike in general usage, but it dropped to lower levels than were seen before decriminalization. However the number of addicts remained the same throughout. It's a very interesting and eye-opening thing they have going there.
ES6 TypeScript CoffeeScript or Nutella?
I'd put "HOW DOES THE "EXPERIMENT" WORK?" higher up. I shouldn't have to scroll down to find out what atri is. I think an evocative explanatory one-liner should be above the fold.
You're presuming that there will only be a single origin. I think that's false. Even if "we" build AGI "in the safest and most ethical way possible", there will be a "they" who doesn't.
I came here to raise this. On balance, I think it is reasonable if done openly, as is "turn off adblock or pay" initiatives. The fact of the matter is, we have optimized paying carriers rather than the actual item.

Essentially we pay large postage fees for a package, the package itself being what we want and mostly unaffiliated with carriers.

So while I wouldn't turn adblock off to read an article, I understand why a publisher would want payment for their services, especially if a 3rd party is being paid and not them.

Adblock tries to strike a balance by permitting "reasonable" ads. It is hard to do and I am not sure how well they succeed but they are up front about this. This is an extension of the model described above except it tries to be a reputation broker.

Tracking by most companies has made the internet much less useful in a lot of ways. I connect to google, linked in, twitter and facebook beacons so tgey can track my preferences, then i am served the huge modal asking if I want to buy x or subscribe (or just taken to appstore out of nowhere on mobile) then the content loads but the 1/3 screen banner advert is clicked accidentally on mobile because i cant scroll.

So yes, if there was a universal $20 content fee, people would pay (and there sort of is and they sort of do) but they end up being a power broker.

Hard problem
Well, It has been many years without and accident, I think this still better than me driving.
Your headline reads as if you want CMOs and CTOs to work for free, NOT that you want to work for them for free.
This strikes me as scaremongering: yes, it's possible that this is some soft of malicious behaviour, but the article provides no evidence of that beyond "China." It's far more likely that the cheap Chinese smartwatch manufacturer simply uses servers in China (imagine that!) for collecting diagnostic data or to provide benign functionality.
I don't think this pattern requires a change to how log out works. It's just a change to creating a session and shouldn't impact ending one.

I'm definitely in favor of making people create fewer passwords. It's a nuisance that probably has a net negative affect on security by encouraging people to re-use weak passwords.
You could just as well have a log out button that removes the token from your session, I guess.
I have. In Fact, I wrote my own ecommerce market from scratch back before I realized that "but with the bitcoin apps" are mostly wastes of time: https://github.com/brighton36/CoinPost
The only thing we learn from history, Hegel once said, is that we learn nothing from history.
I wonder how BitWall and ChangeTip are doing?
Congress finally showed it's willing to fight the FBI on encryption
If you're willing to accept things that compile to in-browser javascript, check out Elm's magical time-traveling debugger: http://debug.elm-lang.org/
I love this story. So lawmakers are writing a law specifically for one company to take advantage of (corruption much?) and then are now upset that another company is trying to qualify for it.
And what can I do if I don't want to spend the next two months implementing this line breaking algorithm which probably no two implementations did in the same way? (exaggerating a little here).

I just want to split my text into lines and fields, without second guessing if I did it right. And I want to be confident about interoperability. This means it has to be simple. If it's not simple then it's a sure thing that one of the communication partners screws up.

I need a simple answer how I can compare two strings for certain properties, and not in a way which works in locale X but not in locale Y.

I often don't want a thousand ways to express (almost) the same thing. This is for example quite a headache in practice when you search text. Worse if you search it in a pdf where you typically deal with ligatures and what not.

I never said things are unspecified in Unicode. That's not my point. I think the things you and I want to do with text are just very very different.
You should accept bitcoin, that would at least get you a lot of attention and play in a niche community.
The article explains an alternative authentication scheme, it has no bearing on how session is managed after authentication took place. That's a fancy way of saying "same as before": some sites will stop session when the browser is closed, some will keep the session for days or weeks, and some will offer a "remember me" option at login.