skysight-inc/HackerNews huggingface dataset:
The point is the security professionals exist in order to facilitate the needs of the users they serve, not the other way around. It's always easier to just say no, but a good security professional knows how to assess risks, find creative ways to mitigate them, and serve the needs of the user to as great an extent possible without compromising security.
You realize that "over secure channels" doesn't include email, cell phone, or remote site based on this very article?
I think he is saying that often people have a legitimate need and security professionals should try understand these needs and not just say "No".

In my company IT puts all kinds of restrictions on the network but for automated testing we need these restrictions removed or we can't do our job. Since IT didn't accommodate us or provide an approved workaround we had to hack around them and make the system less secure as a consequence.
One of the sad things about 'zero interest money' is that we aren't using that to save the taxpayer millions by investing in real infrastructure improvements. It doesn't help that infrastructure costs are the only construction costs that cost more in real dollars today than they did 50 or 100 years ago.
> Unity, one of the largest and best-regarded game engines in the industry, showed that the Web stack is ready for prime time by removing the ‘Preview’ label from their amazing WebGL exporter which takes advantage of WebGL and asm.js.

And still, making a straightforward social game with simplest 3d scene to work in WebGL takes a month of work, and even after that, it hogs 1 Gb of memory, runs around 30 FPS and heats up the CPU like a beast.
The difference is you're a peon while she holds one of the most powerful positions in government.

You'd also be fired if you made life difficult for the CTO. They'd find someone more capable.
If this article is to be believed, shortsightedness and bottom-line-thinking are contradicting what Alphabet is suppose to be.

>Alphabet is about businesses prospering through strong leaders and independence... Sergey and I are seriously in the business of starting new things. Alphabet will also include our X lab, which incubates new efforts like Wing, our drone delivery effort. We are also stoked about growing our investment arms, Ventures and Capital, as part of this new structure.[1]

From the Alphabet website, to this article:

>Aaron Edsinger, director of robotics at Google in San Francisco, said that he had been trying to work with Boston Dynamics to create a low-cost electric quadruped robot

>In the meeting, Rosenberg said, “we as a startup of our size cannot spend 30-plus percent of our resources on things that take ten years," and that "there’s some time frame that we need to be generating an amount of revenue that covers expenses and (that) needs to be a few years.

Focusing on building revenue is good for established companies, sometimes even for company devisions. Not always useful for startups (imagine if FB bootsrapped), which in my understanding, was what Alphabet was trying to incubate.

> “There’s excitement from the tech press, but we’re also starting to see some negative threads about it being terrifying, ready to take humans’ jobs,” wrote Courtney Hohne, a director of communications at Google and the spokeswoman for Google X.
Hohne went on to ask her colleagues to “distance X from this video,” and wrote, “we don’t want to trigger a whole separate media cycle about where BD really is at Google.

Ignorance aside, you can glean more of the poor distinction between Alphabet and Google here. X[2] is suppose to be a separate company from Google, under Alphabet, yet it is referred to as Google X here. Even Courtney Hohne, a director of communication, lists herself as working at Google, not at X or at Alphabet.

This confusion between the two hints at larger problems, which bodes poorly for Alphabet's lofty aspirations.

[1]http://abc.xyz
[2] https://en.wikipedia.org/wiki/X_(company)
Are you implying that selling a company they acquired is "evil"?
I’ve Automated My Intro’s and Saved 3 Hours per Week
I was always a big fan of https://twitter.com/hipsterhacker

He's for the most part inactive, but occasionally drips out something acerbically relevant.
Libretto – Vagrant as a Go Library, Supports AWS, Openstack, VSphere, etc
The path: Google's self driving car finally makes it out of dev. hell and a few years pass. Domino's and Pizza Hut plaster some of the cars with glaring vinyl stickers and plop a stoned teenager in the seat because lawyers. More time passes. Someone finally figures out how to make a decent enough pizza via a robot oven. Now you have a self driving car and a self making pizza, the stoned twentysomething is finally taken out of the car to find another job. You pull up you phone and order a pizza, the car is routed while in transit to another place and makes the pizza while delivering other pizzas. Store fronts disappear with their allotment of stoned thirtysomethings. Domino's tries to put in a self making deep-fried chicken wings machine, but so many catch fire and don't know it while driving down a freeway that lawyers evoke their toll. Eventually Pizza Hut puts in malicious code to wreck Domino's cars 'safely'. A literal arms race now pops up. Then the stoned fortysomethings order 2 pizzas from competing companies at the same time. The entertainment from watching heavily armed robots fight for the right to deliver you pizza becomes a major sport. Fin.
Unicode CLDR Version 29 Released
Neither of the APIs you mention exist. Maybe you mean requestAnimationFrame? That still doesn't solve the problem of getting the current mouse coordinates though. Currently, the only way to get them is through events like mousemove.

Honestly, it would be wonderful if we had immediate mode APIs for everything instead of being forced to register event handlers, which will always lag at least 1 frame behind.
I was just wondering the same thing
The Epic History of Vans Shoes
One can debate the details but in my opinion COM is fundamentally a great technology. Statically defined interfaces with extremely late bound, relatively large, opaque implementations. No inheritance. It's one of the only things that realises what Alan Kay was talking about when he talked about OOP (which is very different to what most people complain about). It's microservices and more and it works: It's still at the core of Windows and has served it well.
Probably a combination of:

A) People seeing this play out in their own lives enough to relate it to this experience
B) That the quote wasn't "No", it was "shut up and go color", lmao
When was the last time when somebody used the words "web API"? When web monkeys say "API" they expect anyone else to understand it as the new default hipstor meaning. It is extremely annoying.
> Law enforcement is explicitly prohibited from doing all sorts of things without a warrant that can then later be compelled by a court order.

It doesn't say they can't do it without a warrant. It says they unconditionally can't do it.

> Distinguishing between law enforcement and the government as a whole isn't complicated, headstand-inducing legal gymnastics, it's well-established legal reasoning.

The problem with trying to draw that distinction is that having the court order you to do it is how it always works. If CALEA said the FBI could order Apple to build the back door, the FBI still couldn't just throw Tim Cook in prison without trial if he refuses. They would still have to go to the court. So what the law is really saying is that law enforcement can't ask the court to order that -- but here they are asking anyway.
Yup, those errata lists....
One of the best explanationa on how public keys work
It's always a bad sign to me when a company's strategy lurches based on who's around rather than on changing external circumstances. It suggests to me that the strategy isn't a coherent, collectively understood plan, but a political balance.
Cutting edge robotics (from the perspective of learning systems) is back at the level of getting a single arm and a camera to learn basic tasks.

Which is a nice way to say that robotics really hasn't progressed that much in a sense an outsider would see as progress (where progress on outsider-terms would be Boston-Dynamics style robots that can, say, learn task and repeat them), though I'm sure researchers can point to a lot of progress on their terms.
Why is this a good thing? If a Mexican can do a job cheaper than a machine, why shouldn't he be hired to do so? It makes life better for him and for the guy who doesn't need to buy a machine.

If you really dislike Mexicans and are willing to harm Americans in order to keep them away, I guess it makes sense. I guess I'm just not a fan of Trump/Bernie/Hillary style nationalism.
Its not like its a nonsense word they've been squatting hoping someone would buy it. Obviously its the eastern european inventor, a popular band at the time it was registered, etc.

If Elon wanted the kind of branding where you can easily get a .com then he should have named his company something else. Using established names are a risk. I can' just start a company called Turing and expect to get Turing.com. Its long been taken.
Please give your feedback
That is very odd for me. How come a single man can change the faith of such a huge company in 2016.
Internationalization was considered important for C89… which yielded regrettable inventions like trigraphs and wchar_t.
Perhaps there's a strong correlation between the people that get terrified by automation and the people that click ads.
Time out. Let's go back to the late 80s, when Erlang was written. It ran on Ericsson's switches. The platform needed to describe a unit of concurrency that provided execution and memory isolation. Process fits that definition perfectly.

Fast forward to today. Look at projects like LING, where the Erlang VM runs directly on Xen, without a traditional operating system. Processes in Erlang are 100% analogous to OS processes.

Also look at something like Virtualbox or VMware. Is your process running in a VM less of a process than the OS process powering the VM itself?
Not to knock "Google X" but they seem to be extremely wishy washy when it comes to picking a direction. (Glass, robotics, curing aging) they really don't seem to have the "skate to where the puck is going to be" mentality at least from the outside looking in. Apple is struggling here too, but only very recently has this come to the attention of media and shareholders.
It's great to see Django getting first class support for real-time. I remember building a hacked-together real-time chat 10 years ago using Python using ajax, but I haven't done much since. I'll have to check it out.
"Why are these better employees"

He just explained that to you. The people who actually work hard and have goals will actually want the minimum wage jobs because now its more manageable to live off of.

A university student who needs to pay rent, groceries, a car, etc. Cant afford to live off minimum wage so they want the better paying jobs which may not exist cause companies want to get away with the most profitable scenario which is paying employees the absolute minimum.

That last statement wasn't needed, no body has time for ad hominems.
PR sent. https://github.com/feathersjs/feathers-docs/pull/74
What is your experience with using Docker Swarm in a production environment? I have heard conflicting views regarding it.
Not in the slightest. Completely based on first hand experience.
So back in the real world, no one's job is ever to go "do the best for the best's sake", outside of maybe academia. That's not how people work together, and as you get into more heavily politicized environments, the more true that is.
That's what the poster of that comment surmises to have happened.

However, that information is not contained in the AT article. We can't just assume that's what the Clintons were told. And going by the article, that's not the explanation they were given.
> Does anyone have some better ideas?

gcc's C extensions have some good ideas [1], particularly:

1. typeof(e) operator: great for use in macros

2. labels as values: used in just about every language interpeter

3. statement expressions: great for use in macros

4. fixed point types: who wants to hack their own fixed precision arithmetic?

5. vector extensions

6. arithmetic functions with overflow checking

I think all of the above would make good additions to the C standard.

[1] https://gcc.gnu.org/onlinedocs/gcc/C-Extensions.html
Show HN: GitHub-ls legit listing of files without auth
The problem is that quite often security professionals say "No", provide reasons, and the person doing the asking insists that convenience is more important than security.

My favorite story of all time, which I'll share because it's now over 20 years old, had to do with a security vulnerability in the diagnostic trace component of a serial device driver.

The developer in question insisted it had to be there. A meeting with the two of us, as well as our bosses, and a "neutral" odd-numbered party was had.

I started by explaining the exploit. The developer then explained the need to have support staff (who weren't "root" users") able to enable the diagnostic trace feature. I then explained how a non-support person could trace a specific TTY (see, it is an old story!) and capture an entire login dialog.

Things weren't going well for me, so I then explained that it presented a security vulnerability which I'd have to disclose.

At that point in time, the developer got up out of his chair, and came across the table at me. His boss grabbed him, sat him back down, then agreed with my explanation and the feature was changed to require privilege.

If you think being a security professional is fun, it's not all sunshine, roses and egotistical power-tripping. It's a constant struggle to say "No" when people want to make products more "useable" and we want to make sure they are "secure".
> The only reason I see for breaking the app this way would be to enforce low coupling.

Which is a big deal...

Microservices enable easier code re-use and division of labor across teams, especially when persistent data is involved. It is a technical solution to a people/economic problem and not the other way around. At a high level, I think of all the popular APIs powering the web (Stripe, Google Analytics, Twilio, Intercom, etc.) and how they enable developers to do their work more efficiently.

"Buy vs build" was mentioned as a promising attack on accidental complexity in "No Silver Bullet". If you design your microservices in a way that they're usable in different contexts and don't build at all when a paid or open source solution is available, you will boost your productivity.
This kind of thing is why I EXCLUSIVELY browse the Internet on my phone while at work (without using work wifi, of course). I also never use my work email for personal correspondence, ever.

Granted, I work at a remarkably lax institution that cares more about getting the job done and less about managing our lives, but these are habits I picked up working in Silicon Valley and I couldn't even imagine the kinds of perpetual monitoring that some of my friends from college have to put up with.

Nobody cares about how long I'm in the bathroom. They like the software I write. And then we all go home at 5.
>So now those same security people caused a considerably greater threat to national security.

Yeah. That woman made me rape her by not having sex with me voluntarily.

Maybe Clinton should accept that the laws apply to her too and if the constrictions of a particular position don't suit her, she shouldn't accept it that position.
Sharethebus (YC W16) Makes It Easy to Organize a Charter Bus Trip
Especially since the robots that BD is making are prohibitively expensive, and will remain that way for several years. If anything is going to take away human jobs, it's the software at the core of Google's business, which costs nothing to deploy and is inherently better than humans... Unlike robots that cost more than a typical human makes in their lifetime and are only now beginning to gain proper mobility.

If anything, the real concerns about their research should be their ties to the DoD and the military use of robots.
I love the ideas behind this app. I haven't tried it since it's iPad only and the last update was in 2014, but looking at the video, it has so much promise. It's the first app that I've seen that looks like it has the potential to replace The Brain. Hopefully you can find a way to make some money off it and keep it going!
I've worked in an environment where it'd be impossible to do your job if you didn't ignore IT.

I've posted about this before on here - "It was worse at $last_company where at my best count, I had 20+ different passwords, all with differing rules, and expiration policies, the solution in the end was a spreadsheet (contrary to IT policy) - which was stored on my workstation with full disk encryption."

If you have a choice between loosing 8 hours a week just to information access management or just ignoring the rules, which one would you pick?
What has changed in the limitations of the DOM?
Was that originally recorded in 2009 too?
HTTPS Mixed Content Tool – Live Example :)
Five Big Unanswered Questions About NSA’s Worldwide Spying
>ICANN's creation of hundreds more TLD's is just a further money grab

How? It fits a market need. People are registering with foreign TLDs beecause they can't get a .com anymore. Opening up arbitrary TLDs makes a lot more sense than the status quo today. It adds more supply to the market. Soon no one will think .com has any significance. I'd rather see Elon buy tesla.cars than tesla.com, for example. The fetishization of .com needs to end.

This is an unusually old-fashioned move by someone who is technically progressive. I guess there are bragging rights to having a .com and maybe shameful that he's one of the few 'big names' without his .com. .com possession is becoming a rich man's game like owning a supercar or a fabrege egg. It makes no sense today.
I quite like @shit_hn_says
It suggests to me that the strategy isn't a coherent, collectively understood plan, but a political balance.

I suspect that's the way it is... everywhere, all the time. That's been my experience.
Snapback Cache
I'll go against the grain and say yes.

The difficulty with the best protocols as designed by security professionals is that they are not necessarily designed based on how users actually work. And if they are not, it is likely that users will subvert them. This paper from 2010 is along those lines, "The True Cost of Unusable Password Policies: Password Use in the Wild" (http://www.cl.cam.ac.uk/~rja14/shb10/angela2.pdf).

I particularly like two of their observations from the introduction:

"Based on our results, we make three key observations:

1. When users cannot cope with the demands of strict
password policies, it a) reduces their productivity, and
b) leads them to adopt coping strategies - which usually
reduce security.

2. Although passwords are usually considered in terms of
authentication for a service or a device, today they are
encountered in many other ways in the workplace –
and existing password policies do not cover these. As a
result, users adopt ad-hoc solutions, which are usually
insecure."

The security we actually get is the result of the technology we use, and the human behavior that interacts with that technology. Sometimes, in order to get higher actual security, we may need to relax the technological security so that we get the human behavior we want.
It's a bit more than that. You'd have to compile a lot of fluff in to the ELF. We'd be talking something closer to Windows COM, which allows extracting IDL from a type library.
Ask HN: I have some questions as a new iOS Freelancer
Hey HN,

I've been working in a small startup as an iOS freelancer for almost 2 years (bug fixing, features implementation, etc). I landed this contact by publishing two apps to the App Store (one got a fairly good amount of downloads) and doing some small gigs.

Anyway, I have some free time now because this small startup doesn't have much work for some time. My first reaction was to go after some projects to work on. I stumbled upon UpWork and Guru and, as everyone else seems to be saying, it's pretty hard to compete with some programmers applying to work for $15/h for example. I'm trying to maintain my price as $35/h (I receive $30/h after UpWork's fee) as I think it's fair for my service, but I not having much success with that.
Is my price too high? Is my cover letter wrong? I've never applied to this kind of thing before and I'm having a hard time writing a good letter... do clients on websites like UpWork even read all cover letters? Some projects has over 100 proposals.

I have tried to move to websites like Crew and Toptal (I don't think I have enough experience to toptal yet). Can anyone help me?

Thank you!
No, they are not "retroactively" classified. They were intentionally kept out of the classification process by Clinton via her undisclosed server. When the emails were finally inspected for classification many of them were designated as containing what should have been classified from their creation. This act was fully intentional by Clinton. And inexcusable.
A while back there was some random blog (alas, I can't remember the details) that, due to some quirk of Google rankings, ended up first in Google search results for "facebook" for a couple of days.

It ended up deluged by thousands of comments of people complaining about not being able to log into Facebook.
The complexity of business decisions at one of the largest companies in the world makes Go look as easy as Chess. :)
Cool story, bro, spread the gospel. Better keep people from easy access to programming and enjoy the beautiful software we had in the 90ies.
Maybe, but does anyone think about the ad-buying system that they are supporting before they click on an ad? Personally, I doubt that ethical consumerism runs that deep.
How about continuations? Or is that too far...
Google is specifically not interested in DOD work. I don't understand why Google decided to buy a company so tied to DOD contracts if it did not want to continue that work.
Honda has been building robotics for years ahead of everyone else. Google "japan elderly care robotics". What's cheaper? A robot, or a human caregiver who has fully loaded costs for decades? If you can even find the human who wants to do the job.

http://asimo.honda.com/
It makes more sense once you take on a senior level role in those big companies, you start to see how a single, charismatic and convincing person can mentally mobilize (over a period of time) a large group of people to align with their hopes and dreams.

I was baffled by this as well, until I got closer to it and got to see "how the sausage is made".

It is amazing what a confident, strong personality can do in a group of people in _any_ setting.
Show HN: March Madness Bot for Slack and HipChat
> but the outcome often results in a lot more lucrative and fulfilling career than they had before

Not sure about that, that's not at all my experience coming from a poor area which has gone through several mass-scale outsourcing. ( i.e. a whole vertical slice of the economy just moves away )

You need an set of positive circumstances in order to make yourself relevant again. Access to appropriate education/resources, capability to identify a new opportunity, capacity to actually take it ( i.e. money, flexibility, ... ) If you miss any of that, you just enter a vicious circle that drags you down.

Over the course of a generation, what you say is true. Most of the youth has moved away from that poor area I came from, including me.
Support for other code repositories is on our roadmap — we are looking to hire more developers to help build support for them ! :)
An important distinction between patents and copyright is that independent invention is not a defense to patent infringement and the patent covers the concept rather than the specific implementation. Which means that unlike copyright, software patents create concepts that you aren't allowed to express, even if they're your own ideas.