skysight-inc/HackerNews huggingface dataset:
With Fastboot, somehow an additional, non-interfering layer of computation on the server does the same loop (without having to download anything and without significantly slowing down overall client app JS initialization)

Right. Typically, the way most client-side JavaScript applications (or "SPAs") work is by having a small, static HTML file that doesn't contain much content (beyond maybe a loading page). It contains <script> tags that point at your JavaScript payload.

First the browser downloads the HTML, then the JavaScript, then the JavaScript runs and fetches the data via XHR. Only then does the user see the content they were after in the first place.

This actually works surprisingly well for "workspace" apps where the user is using it throughout the day (Gmail, Google Docs, etc.) On modern devices with good broadband, the difference is negligible.

But the thing this sucks for is content sites, where you aren't using an "app" but you're just clicking a link in Twitter or something. If it doesn't load within a second or so, you aren't that invested that you don't just close the tab. That has been the biggest source of pushback on frameworks like Angular and Ember for sites like this.

FastBoot bends the curve by replacing that static HTML file. Rather than serving an empty document that just points to JavaScript assets, we keep your Ember app running in Node.js on the server. When an HTTP request comes in, we direct it to Ember's router, where it figures out what models to load and components to render. When it finishes, it sends the document back to the browser.

You can think about this is as effectively outsourcing the JavaScript runtime to the server for the first load, but then the browser can take over again on subsequent navigations so it's very fast.

I think FastBoot is a great option for search crawlers, Facebook and Twitter embedding (it supports Open Graph and Twitter Cards), and supporting JavaScript-less clients. Most importantly, it's a way to get content quickly to users with a cold cache.

That said, we are planning to aggressively take advantage of App Cache and Service Worker, so ideally any second-time visitor to your site only has to fetch the raw data to see what they're after.

I'm guessing that somehow the client's processing is disabled on that first "pageview" to avoid double calculation. Is that correct? (if it is, it's very cool :)

Currently it does a full rerender once it loads, but one of the motivating features for writing Glimmer 2 is the ability to quickly "rehydrate", so that rerenders are imperceptible to the user assuming nothing has changed. We'd also love to automatically serialize the backing models of the app so you don't have to double fetch.
Ask HN: Do you pay for online articles?
NYTimes paywall failed, but FT is currently at their highest number of subscribers ever. How successful have paywalls been?
Clean feature I must say.
It seems to me the people who can't get their heads around GMO'ed foods are going to utterly freak about this pretty soon.

I hope I'm wrong, but how can anyone see that working out?
Baxter as well designated people who prepared baked goods. Shoemaker and cobbler. Sometimes there were multiple words for a given occupation.
“one of the biggest embarrassments in F.B.I. history,”
- Rightly so..after all the fracas they created

Oops...this is not real news - humor apparently
...and "conventionalizing app boot" just means making it a few simple commands to implement for any given Ember.js application (instead of each application needing its own bespoke solution).
Charlemagne himself could read, but not write.
Recessive conditions can persist for a long time. Certainly there are some diseases which are double-edged swords (having one copy of the sickle cell gene is great if you live in an area where malaria is endemic and you don't have modern medical care) but it looks to me like there are a lot which are just plain bad.

Making all children tall and with perfect teeth is probably not a great idea. On the other hand, wiping out the mutation responsible for cystic fibrosis, say, would be a big win. Even wiping out the sickle cell mutation would probably be fine at this point, unless you're planning for your descendants to be slightly better off if they end up in the tropics after civilization collapses.

There's a lot of middle ground where things are unclear, but we shouldn't be too eager to extend that mystery to the edges and let that stop us from ending some unpleasant conditions.
I echo the sentiment but think Android doesn't go far enough; especially as apps migrate to relying on the closed/proprietary Google Play Services framework rather than vanilla Android.

I'm anxiously awaiting the https://neo900.org/
Note: this is in the humor section of the Newyorker.
Why do this when they have google hangout?

I can see that hangout is tied to a person but home phone is not. But making it a different product/service and charging $10/month is absurd.
...or until you realise that the personal preferences of Robert Baker do not constitute what is "proper". It was a daft preference when expressed and it's no less a daft "rule" now.
Wait - I think this is a joke. Please remove this as it can be misunderstood
An actual POTS circuit provides redundancy, but many people's landlines aren't actually POTS anymore, they're the ISP's proprietary version of this with an ATA inside the cable modem. This should have the same failure profile, while being cheaper and more fun.
>The stance was without an agreed upon way of trusting public keys, you don't get any additional protection beyond shasum. Isn't that true?

No, that is not true. It is demonstrably wrong and was demonstrated this week.

https://medium.freecodecamp.com/npm-package-hijacking-from-t...

shasums do nothing to stop package hijacking. An attacker can regenerate a shasum at will. A GPG signature cannot be forged and it will be very clear if a public key is changed.
Relevant in the context of the recent FBI / iphone case.

Where I live in California, these boxes are everywhere.

One interesting aspect is that they can be alarmed, so that you can know when someone has accessed the key. It would be interesting to at least know when someone has accessed your encryption keys.

I hope the Riverside fire marshall (in the video) isn't holding up the real key on camera.
What about using kubernetes for running gitlab ci?
JK Rowling posts letters of rejection on Twitter to help budding authors
I really hate them, specially the taxes even on school songs.
Hey, you should check out tools like Lauterbach's Power Trace (which seem to be missing from your list), they are quite awesome for debugging embedded SW (especially some seldom reproducible races).
Ah, been a long day and completed missed it. Thanks for that!
That's not a good tl;dr. The Fed only controls monetary policy and does not affect fiscal policy, which is Congress' responsibility. The Fed is doing a seemingly good job with the only tools available to them.
Yes would be nice to see Google support G.722 on this service...

I do think Google has other motivations here:

+ More "data" to train their speech to text and AI algorithms on?

+ Another UI for home automation...call your number to tell your home IoT device to do x...and enable the devices to call out?

+ Residential now...SMB and enterprise next?

+ More ads...future pricing..."free" but you listed to Google ads before/after conversations?

Anyone know if Google needs to be a FCC licensed carrier to offer the E911 service? Seems grey. If so, maybe that's why only certain markets?
This looks a lot like Wave, just within a single company, rather than federated. I'm wondering what has changed that would make this successful now vs. before.
>In a utility closet in the same building, they found three Red Bull soda cans filled with 600 grams of TATP, the temperamental peroxide-based explosive that would later be used to deadly effect in Paris and Brussels

It's quite amazing that (1) ISIS actually promotes use of acetone peroxide and (2) that there aren't several orders of magnitude more self-inflicted casualties.

Any chemist (or rural child who attempts pyrotechnics) knows that low molecular weight organic peroxides are horrendously touchy, to the point where large crystals can detonate under their own weight. An amount of AP sufficient to cause a big boom... rattling around in a can... with chunks of metal in it... is just plain irresponsible.

Unless there's a way to stabilize it, one would almost think that reporting the explosive as TATP is misinformation intended to make aspiring terrorists blow themselves up. Maybe we'll hear about nitrogen triiodide disasters after acetone gets banned :)
Big companies might get away with toll booths - how about small ones like IFTTT? There are alternatives, these services are not absolutely necessary (like payment processing or hosting) etc etc. It is in their own interest not to screw people over. There will always be someone else to take their place.
Love those cold, corporate, canned responses?
Does Level 1 tech. support make your day by asking if you've rebooted?
These features and more, can all be yours!
But... coding it that way is the only way the insurance covers it.
Is there any hope they could do better than PSTN audio quality here?
http://www.knoxbox.com/property-owner-support/faq
Especially if there are objects that correspond to something real.
Steve Grand.. this is the man for the Job

I can't recomend his book enough "Growing up with Lucy"
I remember. I don't remember the quality difference being as stark as you suggest, but maybe it was. This offering from Google is VoIP as well though, right? I think a decent VoIP call's quality is still better than the average cell phone call, but that's not why I'd want this - I just find it convenient occasionally (maybe occasionally enough to justify $10/mo) to have a phone hanging on the wall. Something the babysitter can use reliably, for example.
I am using OpenBSD as my primary workstation on a 2015 Carbon X1, and it works like a charm.
That makes no sense at all. To bring reproduction up to sustainable rates, you'll need to convince people to reproduce. How they reproduce is irrelevant. The fact that birth rates are dropping in some places does not mean that people will always refuse to conceive more babies naturally, nor does it imply that the only way to overcome this is with artificial reproduction.

The birth rate isn't dropping because people don't like natural conception. It's dropping because they're choosing not to have babies. When people want a baby, the vast majority have nothing against the typical technique.

Your insistence that these two unrelated issues are somehow linked puzzles me.
Are you describing your own comment?

That's very meta!
More links:

Concourse's own CI: https://ci.concourse.ci and Concourse Slack: http://slack.concourse.ci
One Startup's Heretical Plan to Turn Open Source Code into Cash
Yes, it relies heavily on Ember CLI.
I thought this was happening to me on another site, but it turned out I had developer tools on (disabling cache). Might be what you're seeing.
It's simple: Dox is short for "docs". Shortening a 4-letter word to a 3-letter word is sensible (albeit lazy). Shortening a 4-letter word to a 4-letter word ("doxx") is stupid.

I don't know why people spell it with two. Maybe they think it looks cooler? But really it's hacker slang for "I accessed and published sensitive information about an individual" and is in most cases horrible.
Haven't they been able to get some dna from dinosaur bones recently? That would really help. When genotyping first appeared many genus/species had to be recategorized.
> If you put police in one area and they do a lot of arrests, that becomes a high-crime area. Because crime rate isn’t who does stuff, it’s who gets caught.

Nonsense. Any area with a lot of reported crimes is a high-crime area, arrests or no.
Yeah, I was being overly security minded and thinking only about the threat of someone taking the name and replacing the package with a malicious one, not the breakage caused by the package disappearing in the first place. In the former case, if the maintainer deletes their GitHub account, it matters whether someone else could register the same name. But of course you're right that Git repos are far more vulnerable to the latter too, unless you fork.
I feel products like this - http://www.vtechphones.com/products/product_detail/1673 - (just an example) are a better solution to this problem. You dont need a land line subscription, just a cell phone with bluetooth.
When my parents get home, their cell phones pair to the home phone, so when they receive a call, the home phone rings. They don't have to carry around cell phones, and they can place calls through their cell phones using the handsets. Seems complicated at first, but saved headache and $$ in the end.
He could have been selling actual magazines and tapes, rather than digital files. As I'm sure you remember, snail mail orders were part and parcel of the BBS world for all sorts of things.
The american education system seems obsessed with standardized tests.
All fixed VoIP providers must offer E911. I don't think they would have the option of not providing it. I don't know the exact rules, but I've worked for several small ISPs that offered white labelled Voice products and we always had to carefully maintain our address directories for E911 service, and customers were not allowed to opt out. (For example if the only address we had on file for a customer was a PO box, we had to get a street address in order to sell them the VoIP product.)
I have pushed an update. It's getting closer. Here is preview.
http://www.crimsonbox.net/new-update-pushed-to-app-store/
Join an Entrepreneur Slack Chat?
Me and another person interested in entrepreneurship, such software companies, side businesses, etc., created a Slack channel for discussing things in depth. We are looking for like-minded individuals who want to chat about possibilities and maybe collaborate.

Slack can handle multiple teams at once, so if you are at a full-time job and want to chat when you have time, it would be great to have you join.

Please apply and we will send you a Slack invite.

Quick Application: https://docs.google.com/forms/d/1Q6R9VAm6-OMMWaz7cvq7wDAma7-gRg7Hve6caxXmjZ8/viewform
The Global Consciousness Project: Meaningful Correlations in Random Data
No I didn't see that the authenticated header which was called out as the source of the vulnerability in the paper has been fixed in the 2.20 version, though I should have. Thanks for pointing that out.

I'm testing KeePassX now, and it seems ok. However usability is a bigger criterion than I originally thought, because all the copy/paste of username and login is more effort than just memorizing and typing by hand. In fact I've memorized the credentials of the 5 accounts I'm testing it with.

KeePassX has a timed lockout function, which is excellent.

However unless I quit the browser I will remain logged in to the accounts even after computer sleeps. I would prefer to require another master password confirmation to access accounts after leaving my computer and returning and authenticating the machine.

This is a new criteria I would like to add: re-authenticate master password after inactivity/sleep. This would be ideal, in the unlikely event that my employer fires me and takes my laptop away - I don't want IT admin to be able to log in to the machine and access my Evernote, gmail, or other accounts.

It looks like KeePass/KeePassX cannot address this, probably would require a browser extension.

Maybe I should consider the LastPass/Dashlane model, I think they offer this functionality.

Also, I won't use rando Chrome extensions like Log Me Out, though it would provide the needed functionality. I would consider opening the package and rolling my own Log Me Out chrome extension. That + KeePassX would solve my problems, except for the copy/paste usability issue.
Sortix 1.0 Operating System Released
Thanks! This is first version and I am still working on the design.
Ironically, a song satirizing a dictator ends up being censored just by stating plain facts. Imagine how it would have been if the song was released in Turkey.

Can only grief for the sane people in that country that have to put up with such repression in society.
I don't think that's your real objection: consider a chat-bot, perhaps doing tech support, that can only output one letter at a time (forming words over multiple outputs). It chooses from one of 26 or so options at each step. State space is finite. You still think that GO is fundamentally unlike this case, but not for the reasons that you've presented.
Isn't Google's offering here VOIP based? Sounds equivalent.
I am working on it. Hopefully soon.
The Inspector works by injecting some debug code into the running app, so it won't work with FastBoot because the JavaScript is running on the server.

That said, it should work just fine once the Ember app finishes loading and running in the browser. I would love it if you could file an issue on the Ember Inspector GitHub page with the error you're getting.
There's a joke about

chmod u+w Charlemagne

there, but I can't think of one off the top of my head.
Ember continues to be an antidote to the insane package/build madness in the JS ecosystem. It's opinionated for sure but it's also very easy to get started with.
Also considering he's probably in jail, I doubt he has internet access.
Some of these are pretty good, but mostly just intuitive stuff. Really wish it was to more than just an infographic style png giving broad strokes.

Things like "You are only strong as your weakest link," "There is no silver bullet," and "Never stop improving" are essentially meaningless platitudes. I would, however, love to see data on headings like "Attacks come in bursts."

Is there a link to something that delves more into each topic?

edit: Saw the links to the slides and video talk. Looks much more comprehensive!
Ok, but you don't have to buy a Netflix CD and install it and then pay a monthly fee. You have to buy the Dropcam, and then on top of that you have to buy the service (or else your Dropcam is a brick). No thanks. At least Arlo has a free tier.
The fact that Alphabet/Google hasn't replaced him is a horribly disappointing statement about what they think is most important: profit, not employees, not culture.

Yeah, well, they're probably not doing so hot on the "profit" part, either since while they're all busy having their internal squabbles, they're not innovating AFAICT. No more Nest products for me, because they don't seem to do any better than less expensive options (now that competitors have caught up, which was not a monumental task). The thermostat and camera that I've got are pretty much standalone devices (the camera and thermostat might talk to each other now, I think). From my minimal research, those two devices do not appear that will be a part of a "home automation system" other than talking (poorly) to each other. No HomeKit integration, of course, now that Google has purchased them. Yeah, there's Brillo, but to (put it kindly) Google past performance doesn't have me holding my breath. I expect a poorly-documented, buggy first release and after a few years it'll be usable.
We care if an animal is intelligent, because then it is sentient like us, and has rights.
Dataproofer: A proofreader for your data
grugq made a nice list of alternatives to Truecrypt [1].

I also personally use Tomb [2] containers and dmcrypt/luks [3] for full-disk encryption on both Linux and Android.

[1] http://grugq.tumblr.com/post/60464139008/alternative-truecry...

[2] https://www.dyne.org/software/tomb/

[3] Setting up Archlinux with dmcrypt/luks only takes a few extra minutes during install: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_... and Android uses dmcrypt when encryption is enabled.
Changed. Submitted title was "On-Demand Transit Algorithms".
The police likely intercepted material delivered via regular post, and worked their way up from there. No need to know how something was ordered, as long as selling it is illegal.
We use (and created) Fair Source (https://fair.io/) here at Sourcegraph (https://sourcegraph.com).

Happy to answer any questions people have about the license. You can also check out a recent talk I gave about Fair Source at https://www.youtube.com/watch?v=y_x-9oJ4pv0.
I think there's still a market for landlines although $10/month sounds like a high price point for such a feature. Having a stationary phone is important when you start having kids and they are old enough to know how to use it. There's a gap of several years from when kids are old enough to know how to call others versus old enough to warrant having their own mobile device.

So what happens in the scenario when the kid(s) is/are home with one parent or the babysitter and the adult falls down the steps and is unconscious? Certainly a 4-5 year can learn to call 911 for help and with a landline, hopefully the phone is a static location and always available rather than having to search through the house to find mommy or daddy's dead iPhone.
I believe that would be the expectation, but your clarification is good.
For Clojure Om, there's https://github.com/arohner/foam

Having access to .cljc (clojure files that can be loaded by either CLJS or standard CLJ) helps tremendously here. This means the server-side happens in Clojure on the JVM, so all of the async worries just go away entirely.
>Before cell phones and VOIP

My wife and I both have cell phones that support T-mobile's HD Voice and its incredible how good our calls sound now. At work, the PBX system I deployed uses plain jane G7.11 ulaw and it sounds good, as good as the old system because ulaw is designed to replicate POTS quality. We also have the option to use G7.22 wideband, but I just never bothered (this wouldnt work on the POTS system so we'd transcode back to ulaw anyway for non-internal calls).

I have the opposite experience than you it seems. I grew up with POTS phone service and it certainly sounded fine, but towards the end everyone had cordless phones that universally sounded terrible. If anything, sound quality is pretty good nowadays on average. Of course, overly compressed audio will never sound good, but bandwidth costs being what they are, there's no excuse to be using anything worse sounding than ulaw.

Lastly, have you used a POTS line or a non-voip PBX lately? I find them to be noisy and scratchy. I'm so used to clean audio that when I have to use a (mostly) analog/PRI transport it really does sound terrible to me. All that background static noise is just distracting now that I'm not used to it. The same way I really can't listen to records or tape players or tolerate SDTV. I suspect there's an element of nostalgia here with the old POTS system.
“Are kickbacks the new normal?”