skysight-inc/HackerNews huggingface dataset:
It's not really about "proving" something secure, but about leveling the playing field.

With a piece of proprietary code, there is inherently a large difference between the public and private analysis of that software. And that private information can be leveraged by traditional power structures of money/government, eg source sharing programs with surveillance agencies.

With Free software [0], one can be reasonably confident that the public analysis and private analysis are much closer. Nefarious groups can still spend resources to increase their private advantage, but the public baseline starts off much higher. And if the bad actors do start to exploit something, the public already has much more information with which to go about figuring it out.

As another poster said, it's necessary but certainly not sufficient.

[0] "open source" ersatz seems sufficient for such analysis, but generally implies a lack of ability to recompile. So who the hell knows what the binary is actually made from.
Thanks, and I hope the post didn't come across as aiming to be a manager, indeed that's the opposite of my goal. I'm mostly interested in becoming a principal/architect at some point and am worried that path is blocked. The sort of school you described doesn't sound very reputable... wouldn't that be a waste of money?
Teenage Drivers? Be Very Afraid
This isn't quite related to your question, but I think Markov chains made their debut in the original information theory paper by Shannon

What? That paper even says: Stochastic processes of the type described above are known mathematically as discrete Markoff processes and have been extensively studied in the literature; the corresponding footnote says "For a detailed treatment see M. Frechet ... 1938".
I'm not aware he made any such promises in the 2008 campaign with regard to lockdown of certain secrets?
Yeah and it doesn't seem that knowing about them makes any difference. I actively know that Diablo and other similar games are doing this and yet I find that I like it. The games do lose replay value over time a bit (I'm worn out on D3) but if you wait a while and go back it's fun again. For now, I'm playing similar games (Path of Exile, Grim Dawn) and finding I'm enjoying the different styles of art, even though it's essentially the same exact gameplay.

Maybe what I think is fun is more addiction than fun? Hard to tell. Obtaining random loot sure is addictive.
I'm growing less sympathetic of the "it's impossible" argument against digital backdoors. We've known how to do it for a long time: just add a second signing key to every iPhone, and give it to the government.

Sure, this increases the risk that the key will be stolen by the bad guys. But that's also a problem with good solutions. On the hyper-paranoid end, there's something like the DNSSEC Root Signing Ceremony[1]. On a more practical note, there's whatever Apple does with their current signing keys. After all, those don't seem to have been stolen and used at large so far.

Of course, this is still a terrible idea, mostly because governments are not often working in individuals' best interests. But it's far from "impossible" to meet the requirements being handed down by US.gov with only a reasonable level of risk.

[1]: https://www.cloudflare.com/dnssec/root-signing-ceremony/
duplicate

https://news.ycombinator.com/item?id=11313263
It's hard to compile generators efficiently, and iterators can do a good portion of their job.
Yeah, though CF does have content optimization features, including one that auto-resizes images to the type of device.
The limitations of things like self checkout have been largely customer driven, the expense of equipment (installation, repairs, etc...), and the logistics of such a transformation. I think there are many more hard limits on the ability to replace on site service workers with technology than most people realize. The barriers are far greater than a few dollars an hour per employee. If they weren't the low wage service workers would have already been replaced. This is also not an area that drives technological innovation, but rather benefits from advances made by other industries, so I do not believe that raising the minimum wage would escalate this process.
Doing Random Crap Does Not Work – Life Learning
Wouldn't it be wise to wait for argon2 to get some more cryptanalysis and testing in the field before jumping on it, sticking to scrypt or bcrypt in the meantime?
Yes, but are these any simpler than most written discussions of the same topics, in things like essays? It seems that the once they're codified in some kind of mathematical model then we can see the shortcomings right away, whereas an essay might obfuscate this, and yet be conceptually even weaker.

In another way, the same arguments could be made in a mathematical model and an essay, but the model might just be easier to criticise. I'd say that's a good thing.
OK? So the court can compel Apple to write the software-- not individual employees. I don't think anyone is considering holding individual employees in contempt.

But yes Apple as a corporation can be punished financially if they refuse, if you hold that corporations don't have speech rights.

Your point is not consistent.
How your taxes end up enriching coal executives who are betraying their workers
Jason was one of the first people to put money into Chartbeat. I've now worked with him as an investor for seven years and he's been consistently supportive and founder friendly even when it hasn't been in his short term interest to do so. He's also got incredible product intuition. I'd recommend him to any founder looking to work with someone who gives a shit.
Or go straight to the source and read the Sayings of the Buddha. Now available in audio book format on youtube! :)
Those stats quote AFR not IMR. The OP was talking about infant mortality.
Yes, when that plugin is Flash.

Actually I understand what you are saying. Showing the list that way is kind of unfair.
Ask HN: Which domain registrar has the best UI?
UI trends towards mobile first, I am afraid, are breaking usability of some services and domain registrars seem to be headed in this direction.

Mobile first generally means one thing: Everything is larger so fingers, rather than mouse-operated cursors, can be used to interact with the site.

Imagine having to interact with a service listing over 200 domains you own. And now everything on that page is "mobile first".

That page sucks. It is virtually unusable. Productivity is terrible and access to information cumbersome. You have to touch indecipherable icons to discover such things as expiration dates and whether or not you have auto-renew enabled. You only see 8 to 10 domains on the screen when you could easily fit fifty or sixty on an equivalently sized Excel spreadsheet.

Rather than having columns with spelled out status elements (again, imagine an Excel sheet you might design to maintain information about your domains) the designers of these UI's choose to make you click (hovering is out on mobile) to see detail.

This is absolutely horrible and a huge step backwards rather than forwards.

So, are there any good and sensible domain registrars who actually understand what customers need by designing management UI's that don't waste our time?

I don't have a problem with the external website being mobile friendly. Once I am inside I want to get shit done. Good design is wonderful and I do appreciate it, but not at the expense of productivity.

EDIT:
Developers: Bootstrap isn't the solution to every UI problem!
If you want to knitpick, right back at you because that's 100% not true; the last link is about all known cases of RIPA being used.

I feel that if a judge orders you to hand over encryption keys you probably should, but I worry about these laws being misused; for example we are sold on them being about paedophiles and terrorists and most of their use cases are simply not about that. That's the basic premise of my argument, I'm not saying (at least here) that there is too much surveillance. Instead I'm saying the powers are given for one reason and then used for another. I don't see how you can disagree with that given what I've provided as evidence.

More generally are you asserting that anti-terror powers are never granted and then used for the wrong reasons?
When people say "Housing is so out of control in SF soon nobody will be able to afford to live there," they mean 'nobody like my friends or me'— the system may reach a new normal, but it is a new normal where a city with lovely weather (and thus some of the US' lowest carbon emissions) and spectacular professional opportunities is closed to all but the wealthy.
Like OpenSSL?
We changed it. Submitted URL was https://daniel.haxx.se/blog/2015/03/20/curl-17-years-old-tod....
I'm very much passionated about all this. I remember when technology wasn't really at the center. I would never bother with the quality of VHS tapes. Watching Star Wars on a bad CRT TV didn't really matter.

The run for tech and visual is natural. I'm sure all generations had this. When it's gone you're left with timeless principles. What I'd call the 'classics'. Good thins have a good deal of it. And this classical features are related to the tech used to implement. More to how our minds find joy.

When I watch old movies I see them without the glow of the era they were born in. I see the framework behind, and how theatrical they were. How they faked most of things, with moving pictures instead of actors on a scene. But the rules are still there. Surprise, tension, suspense, exageration, timing, aesthetic, oddity, rhythm.
The decline of high-growth entrepreneurship
Seattle's Capitol Hill, UW light-rail stations open to big crowds
The sqlite3 test suite
Very similar instantsearch.js (which is also react components) for Algolia search.

Having this for elasticsearch is very useful indeed, get products out there with a consistent search UI.
Meet College 2.0
It certainly couldn't hurt... but I believe it would still be hard to find certain things. An example of that is taxes, accounting, or just general budgeting. Depends where the incentives are as to how easily findable anything will ever be.
Perhaps we're using the term in two different contexts.

I'm using the term loyalty for lack of a better term. There was a time when employees would often go above and beyond for their employers, because the reverse was also often true. Roughly, the shift away from the "lifetime employment" model.

Things like:

- Somewhere in the 1980's, when layoffs started to happen even in relatively financially healthy companies

- The move from pensions to 401k's

- The shift of a higher percentage of healthcare costs to the employee's portion

- More focus on hiring outsiders into higher level positions, versus training/placing internal candidates

Specifically, I might be incented to occasionally "work for free" if I thought the company would, for example, not lay me off during a particularly rough financial period.
If it were called 'Tunez', then I could see how someone might mistake it for a music library.

But it's called 'Toonz', so I'm guessing the majority of people that see that name immediately associate it with the word 'cartoons'.

EDIT: I'll also add that the title of this submission is not better than the other one because it doesn't even reference the name of the software in the title.

The actual title of the article would be better than this one. "Toonz Software Used by Studio Ghibli and ‘Futurama’ Being Made Free and Open Source" is better than "Software used by Studio Ghibli and Futurama will soon be Open Source"
Digitizing analog circuits containing op amps using Wave Digital Filters
In computer science, that's going to be less helpful. In fields like psychology, sociology and even biology, the initial idea may not be too hard. The onerous part is in designing an experiment, running the experiment, and performing the data analysis. The sorts of questions that the experiment are trying to answer tend to be multivariate, which means it's easy to do all of the prior things wrong. Replication is key in sussing out if any of that went wrong. For psychology and sociology, replicating research can take just as long as the original.

In the fields of computer science where you actually implement something, it's the design and implementation of that new artifact that takes up most of your time. The experiments are not nothing, but they tend to be the sort of thing you can script: run a bunch of programs, accumulate results, do data analysis. Even the data analysis tends to be scripted. If, at the last moment you discover a small tweak that could improve your implementation, it can be trivial (in effort, not necessarily time) to re-run your experiments.

Now, the experimental evaluation is still important, and it is also easy to do wrong. But I also claim it's more deterministic. If an author is honest in describing their experiment, it's easier for reviewers to cry foul in computer science systems research than in, say, psychology. There are ways in computer science to design poor experiments that show bogus results, but it tends to be more obvious.

If, upon trying to publish, you discover that someone else had a similar idea and implemented something similar, you have replicated the hardest part. You spent a lot of time and effort designing this new thing that overcomes all of these challenges. If someone else already did that, you could have just skipped all of that, and started on improving it right away. In computer science systems research, replicating someone's research may actually be must faster. Sometimes you can view their code directly, or you can implement their idea in another system. Re-implementing an idea in a new context can take a lot of engineering effort, but it can still be a lot less work than doing it the first time.

Now, what happens if that was a bogus technique, and you can't replicate the results? That's a publishable result, but it tends not to be the whole paper. You figure out a better way, and explicitly compare your new way to that old published way. Again, that's because in computer science systems research, you're not discovering fundamental properties of things. Instead, you're discovering better ways of doing things.

I do sometimes read computer science systems papers and think "Eh, I don't buy this result". That's usually not because they did anything wrong (although sometimes it is), but because I just think that what they are investigating does not matter. "Sure, I believe you figured out a reliable way to optimize a three wheeled car, but four wheels is still better."

Theoretical computer science is not impacted by this at all, as there usually are not experiments in such papers. Their "results" tends to be a proof.
>Maybe it's fair that their discussion totally ignored some of the key issues, such as the dangers of back doors and their impact on public safety, the opening up of abuse by other governments, and the potential negative impact on the technology industry in the US. Because they were focused just on what the court will consider.

These are all great arguments for Congress to consider. Maybe there's a good reason to create a privilege, like doctor-patient privilege, for companies in Apple's position. As I think you acknowledge, this is a political judgment that must be made by the people's elected representatives. As an aside, you're playing the same game with the definition of backdoor that we were accusing the government of before. Hacking a phone is not creating a backdoor. Shipping phones with an intentional vulnerability is a backdoor.

>But even then as baldajan pointed out the first amendment issues are way more than just code. They are also about the core values of the company. Apple should be able to choose what kind of dent they put in the universe.

So let's assume that Apple outright had the PIN in their possession. They would be forced to hand it over. "What kind dent they want to put in the universe" notwithstanding. Again, you're asking the court to come to a political decision, not to interpret the law as it exists and has been applied repeatedly to other cases.

The court is not the third house of Congress.
I am pretty much in agreement with you.

However I am curious how others feel about learning on your own time. I do a fair bit of that (and the company often benefits as a result) but there is hardly a set line between working and learning in our line of work, its definitely a continuum.
yes, the society we have at the moment is absurd to say the least. Because roughly 2/3 of all economic activity is consumer spending, and advertising is in some categories the single biggest driver for that spending, advertising effectiveness is intimately connected with national economy.

For example, if country A has significantly higher return on advertisement investment than country B, country A will have an advantage when the economies of those two countries are compared. I don't see anything good in the fact that it is so, but that's where we are now.

I don't spend much myself, and I'm not advocate for more spending. But the commentary is about ad blocking, and it would be foolish to discuss it without discussing the aspect of economic impact. My hope is that such commentaries stimulate the advertising industry to re-think advertising to the extent that it makes (much) more sense than it does currently.
Agree on fail2ban w.r.t ssh, though it can still be useful in other scenarios e.g. blocking brute-force attacks on a website login page, or on an API.
https://en.m.wikipedia.org/wiki/DNS-based_Authentication_of_...
I had a look and I actually can't find any cases that address an employee sharing their salary with third parties, so I might be wrong (or just bad at looking for relevant legal cases). However I can find numerous cites where people mention off-hand that 'of course this doesn't mean employees can share salaries outside the company' and similar - http://www.velaw.com/uploadedFiles/VEsite/Resources/Employer...

I would suggest anyone attempting to claim NLRA protection actually read the document, particularly clauses like the exclusion of protection for supervisors discussing salaries.
I suspect it has a lot to do with the legal deadlock "you'll sue me? I'll sue you!" type situation companies like Microsoft, Apple, Google and Oracle have been so reliant upon.

None of these companies have, to my knowledge, ever used these patents against individuals in the open source community but they sure do love to wield them with each other...
People are roughly* neutrally bouyant in water. Thus they don't weigh anything when submerged. Otherwise swimming would be very hard indeed. So you would need to weigh down the boat to sink all that air and wood.

*depending on depth and body composition, but give or take a bit, neutral.
So let's stipulate that this oversimplification is useful for conversation. Given that, what is it about the not-wealthy tribe that makes them more deserving of what they want than the wealthy-tribe?
Serious question: how do you pronounce 'pwn'?
Is it 'pone'? 'poon'? 'pwin'? 'pown'? Something else?
Hey all!I built this site because I think it should be easier and more fun to discover new datasets. I'd love hear your thoughts, suggestions and critisism!
Yes, but compelling Apple the corporation boils down to compelling individual employees. If the corporation is ordered to write some code, they have to find a way to do so unless they can prove that they are literally unable to (which isn't credible in this case). That would presumably ultimately mean telling some engineers that they have to do this or leave.
There's a hymn in the ancient Rigveda scriptures, known as "Gambler's Lament."

> The trembling hazelnut eardrops of the great tree, born in a hurricane, intoxicate me as they roll on the furrowed board. The dice seem to me like a drink of Soma from Mount Mujavant, keeping me awake and excited.

> [...]

> The dice goad like hooks and sting like whips; they enslave, deceive, and torment. They give presents as children do, striking back at the winners. They are coated with honey - an irresistible power over the gambler.

http://www-personal.umich.edu/~pehook/226.gambler.html
I only skimmed, but I didn't see anything horrible, what in particular are you complaining about?
Appreciate the recommendation. I gotta relearn a bunch of stuff due to a brain injury wiping it out. A simple x86 OS in modern C will fill in plenty of blanks. :)
CDN will pretty much always help, regardless of the device, by responding faster to requests.

They aren't magic though and still require optimization at some stage to be optimal for everyone. This can be during the development process of some CDNs like CF have front-end optimization settings to reduce images dynamically, inline JS, minify content, etc.

Using both dev-time and run-time optimization can greatly help performance.
The Oracle does seem to have been devised to make unspoiled ascensions possible, even describing the invocation ritual in detail. The Quest leader also tells confused players what to do after retrieving the Amulet (interestingly, with widely varying levels of specificity depending on the player's role).

Still, I've never seen any specific unspoiled ascension stories apart from Timothy Nodine's, so I wonder if that's the only one in history, or at least if it's happened fewer than half a dozen times ever.
Not namecheap.

They use the same form for signup and login but show two forms on the page, so if your browser autofills the login form, and you fill out and click submit on the signup form, it uses the user information from the login form to log you in.

And, since it asks for login >after< you have selected checkout, it will then complete your purchase on the wrong login.

I found this out the hard way when I purchased a domain from them, but had my work's credentials stored in my browser: I bought a domain for my wife using my employer's namecheap account.

Of course, their help desk was convinced that there was something wrong with my browser.
name.com
It's whatever you want it to be
I can't seem to understand if MSFT patents actually apply to the Android OS / AOSP or just to various firmware, middleware and software that OEM's use on their devices regardless of the OS in question.

The AOSP license and 3rd party notifications do not mention Microsoft and the patents listed in Chinese doc are like vague in the usual patent-esque way.

But in any case i don't really see the issue here, if MSFT gets royalties from these patents it would be irresponsible (to their shareholders, and employees) for them to ditch them, none of these patents claims actually seem to be aimed at Google or the AOSP project so it looks like the core Android OS is not really affected by this.

Google owns countless patents and Apple just might be the biggest patent troll in history and none of them seem to receive even remotely the same amount of scrutiny.
How did Motorola manage to push back while others caved?
Here's how: Auction the visas with a high reserve. That way the R&D slots that pay above market get nicked for a bit extra, that the employers will find a little inconvenient but nothing compared to the product not getting done. But for an outsourcing shop that wants a seatwarmer at the lowest price possible, a competitive aution is 90% unsupportable. They won't be able to tolerate negative margins for a year or two.
http://hal2020.com/2014/03/03/satya-shuffles-his-leadership/...
It's making an object of type "shell" with true as a constructor argument. But I believe it works like named parameters in that you could use any combination of parameters in any order. This works by making sp::call a variadic template, with the parameter "parsing" happening at compile time based on the types of these wrapper objects.
Download the Free Ebooks Page