skysight-inc/HackerNews huggingface dataset:
Do not trust the cloud.
Do not trust the cloud.
Do not trust the cloud.

If you didn't build it and you don't know where it is, it could go away at any time for any reason and you will have zero recourse.

DO NOT. TRUST. THE CLOUD.
Run Bash on Ubuntu on Windows
SGX has the potential to be amazing though. With it you can build "trusted" applications. For example, a Bitcoin mixer that's provably secure. (Well as secure as trusting Intel and users not to be able to break the chip.)
Looking at the graph of comment text, it's remarkable how many people are convinced that Mark Zuckerberg should be giving them money for some reason.
Until things like these become "standard clauses", with a side of "data shared with select partners"
You can do that if you have unlimited time. Eventually there's just too much "own shit" to take care of, if you keep adding all kinds of services. This is quite familiar to me, having run a bunch of email/web/container/database/file servers for personal use. After a while, it's pretty tempting to just trade money or privacy for time and convenience.
And?

A thermostat should not need to connect to the internet. Everything it does should be able to be done onboard.

I refuse to buy a Nest.

And problems do happen: http://techcrunch.com/2016/01/09/nests-smart-home-apps-are-b...
Open California: an archive of free high-quality satellite imagery
Not just disappointed. A car being in this same situation could be extremely dangerous to people riding in it, or just in the nearby area. Imagine if your autonomous car just stops midway along a motorway at 70mph, or in rush hour traffic, or in just about any other important situation. That's a situation that'd be pretty hard to avoid for a manufacturer, given all the timezones and places around the world that such a vehicle could be used.

At least this device merely controls some devices inside a house, where it switching off is a simple inconvenience rather than a danger to life and limb.

The solution to these problems is fairly simple, at least in theory. The 'smart' device simply loses any functionality dependent on the maker's network when services are shut down. Fewer people complain about a lot of Nintendo's games losing online functionality because there's a single player and various options that doesn't dependent on it. So if Mario Kart 8 or Luigi's Mansion 2 has its servers go offline, you've got a perfectly decent game which simply loses online multiplayer.

In these cases, if the services goes away, it should simply become a normal device that the user configures themself independently of the company's network.
> it's not like white folks are suffering in any way in the government procurement space

Except, y'know, for being ineligible for certain government contracts.

What's worse is that those people are being penalised without having been guilty of anything. This is utterly inimical to a free and health society.

Yes, there are some lingering negative effects from past racist discrimination: but there are also ongoing negative effects from current racist discrimination. You don't fix racism with more racism: you fix it by not being racist.
Here is a source on Wikipedia: https://en.wikipedia.org/wiki/Resident_registration#Germany

"Unlike common belief there is no central administration — except for foreigners (see Central Register of Foreign Nationals (Germany)) — the resident registration is run by 5283 local offices throughout Germany."

For passports, I'd guess that there is a different database.
But the real test is whether your are influenced by radio and tv commercials. Do you buy the products advertised?
"If you want to be a Millionaire, start with a billion dollars and launch a new airline." --Richard Branson (on starting Virgin Atlantic)
Working with Epics inside GitHub: Introducing ZenHub Epics
Lmao. Yeah, that would be ridiculous. Truth is more reasonable:

https://news.ycombinator.com/item?id=11424195
Yeah, screw the author for making a joke on the internet!
they did a lot better with closing Google reader than this. at least then, they gave you what you needed to get the same service through a different provider, whereas here, theres nothing
Do you DevOp?
Sure, sometimes. But it's not easy or possible to pay directly. Paywalls are very tricky to get right and IMHO make the whole site less valuable -- just look at how many complaints there are on HN when someone posts a WSJ.com link. And frankly, I'd rather look at contextually relevant ads than pay money for most sites.
I think the transition to a physical item makes a huge difference, mentally, to the customer: see also John Deere tractors [1] (and almost certainly automobiles in the coming years).

You feel like you OWN physical products, even when they are tied to a service like this.

1. http://www.wired.com/2015/04/dmca-ownership-john-deere/
Two identical articles on the front page?

https://news.ycombinator.com/item?id=11423511
> in C, python

Python actually has much better support for varargs than JavaScript used to have. See: https://docs.python.org/dev/tutorial/controlflow.html#keywor...
Higher education enrollment has been on the decline in the U.S
I've been sticking to blocking all ads everywhere for a long time. It feels like every time I start thinking I ought to whitelist a few of the sites with better content, a story comes out about a fresh set of malware via ads attacks on very respectable sites. Another example of advertiser's greed and sloppiness spoiling the pot.
Sorry but none of this sounds insidious to me - if you don't pay for something, you don't get to use it.
Also if you know how to do it in the first place, have the resources to afford learning-related mistakes, etc.
And the greatest value is that you wanted people to hear what you had to say about something, and some did.
There should be something on the box or in the associated paperwork. Think "frustration-free service terms", similar to Amazon's frustration-free packaging. I shouldn't have to dive face-first into reams of legalese just in order to figure the half-life of my newly purchased gadget.

"Forever" is definitely not the answer I'm looking for here, but there should be a date, and preferably a DIY way forward for those of us who're technically inclined and have stocked up on sufficient amounts of elbow grease. This could be accomplished similarly to the Parse sunset: the service won't run anymore, but here's all the stuff you need to get it going, good luck! I'll take that over the seemingly imminent paperweightization of my camera.
I have only seen ones that allow you to program them (wake, leave, return, sleep) but wifi enabled for querying I have only seen ones that require a cloud account, even if you can also locally query them.
A Food Court in Your Pocket
Source on the JVM claims?
I don't understand the "greed" part. I worked for a publisher which eventually had to put 8 ad units per page and still could not break even and went out of business soon. I don't think trying to pay salaries of employees is greed and if it is then all of us are greedy.

But your solution is right and that is why native ads like Taboola, Outbrain and Revcontent are winning. As times goes by having ads that are not distinguishable from content is what might help these publishers.

PS. There is one more serious side effect of small publishers dieing out. It means Facebook and Twitter might have much more influence public opinion and they may not support diversity of opinion the way an open internet did. Facebook is already taking a pro-migrants stand or Twitter is also helping censor criticism of religion. Survival of small publishers is important.
The title says that broadband speeds are becoming a critical need. It doesn't really matter what it is that the broadband is used for, the point is that the demand needs to be met. I'm sure you could do without a VR headset, but then again I don't know if you would have had a similar opinion at the beginning of the rise of streaming video. One of the most amazing aspects of technology are unanticipated uses and developments.
Hah. Has anyone been able to uphold a "You agree to being abducted" in a terms of service before?
> The difference between charging for goods and services vs taxation is that you are unable to choose not to patronise the state.

I agree with you on this for persons, that membership in the state should be voluntary and accessible. Currently people are forced into state membership and discriminated against when they seek alternative state memberships based on birthplace, parents, and other factors which would typically be considered bigotry.

However, this argument breaks down entirely when applied to corporations. Corporations do have voluntary membership in states; nobody is obligating a corporation to make use of the services of any state. Beyond a certain size, corporations basically have complete freedom to operate within whatever states they choose, making use of the services of that state. And when you consider that the vast majority of income for the rich comes from such corporations, and furthermore that one of the easiest ways to change which state(s) you are a member of is to operate through a corporation, the separation between corporations and rich individuals becomes unimportant. Maybe you are unable to choose not to patronize the state, but the very rich are not so limited. If anything this is a very strong argument for progressive taxation: the rich are patronizing the state more by choice than the poor and therefore it's fairer to charge them more taxes.

> So yes, it is nearly three quarters of this person's income, being taken against their will, to support an institution which is not just incompetent, but actually hugely, enormously viciously destructive and damaging to the world at large, to the extent that it is the largest non natural cause of death in the preceding century.

This would be a more persuasive argument if the governments to which this money was going were not run by the same people who are evading the taxes. Most, if not all, of the wars in the last 50 years have been caused by corporate interests. The difference between government and corporations is that at least in representative democracies, the governments must make enough pretense of doing good to keep getting elected (with plenty of help from corporate funding and other forms of corruption). Tax avoidance means that less money must go through this pretense; it's easier to justify spending less money on schools when the government has less money.

> Frankly, I'd give up almost all of the rest of it to avoid having given any of it to those parasites to begin with, and this is a constant drain on my motivation for economic activity in general, knowing how much of my earnings will go to finance activities that make me violently ill if I think too hard about them.

Okay, so why don't you act on your beliefs instead of stating them ineffectually? I doubt many people are enforcing the citizenship or taxation laws of Somalia right now. You can probably opt out of patronizing a state by moving there. If you really think that being forced to patronize a state whose actions you don't agree with is unfair to you, there are ways to stop patronizing states.
Taxing revenue would cause massive consolidation. Right now you might have a farmer sell their crop to a wholesaler, who then organizes it along with the output from other farmers and sells it on to the supermarket who in turn sells it to you. If you taxed revenues rather than profits, you'd end up taxing the total value of the goods 3 times rather than 1.

Ultimately, those companies would all merge or be bought out until they were one company to just pay taxes once.
The question is rather: Is there a large overlap between the people who can afford to spend thousands of dollars for a free (as freedom) POWER8 workstation and the open source idealists who would love to buy such a free device?
Well considering the guy took down his repo, perhaps it is at the heart of his reasons for writing it and taking it down.

So thread detachment, ok, but it is not off topic IMHO.

Your mod intuition is mighty fine tho', so I'll stop posting this thread and go write a book :)
TFA had, "I had to tweak my original code to include those two inputs!!?#\!" If that's such a severe "problem", I think I've suggested a plausible "solution". b^)
It was but a small portion of all the dupes.
Sorry, I get very (too) emotional when someone is wrong with math...
>> On top of all, what we really need is a platform-agnostic solution to app streaming that truly overcomes content delivery and discoverability problems.

Hilarious.

Yeah, it's called HTML/CSS and we should have been leaning into HTML5 starting in 2008 like the original plan was. Alas, there is too much money in apps, so now here we are.
ahh
the nexus one and its ridiculously small system partition.

I still love the design of this phone, but it has severe oversights as far as evolvability goes.
For Z-Wave, they use OpenZWave, which has a list of compatible controllers: https://github.com/OpenZWave/open-zwave/wiki/Controller-Comp...
UFC Gym Fitness Franchises State of the Art Facilities
Are you looking for interns by any chance?
If you are interested in my views on copyright infringement, you might find this comment useful (commenting on ad blockers).

https://news.ycombinator.com/item?id=11422763

It probably makes sense for me to formulate the argument properly and write it up at some point.

In this particular instance - I'm not sure that the amount paid is relevant - the desires of the publishers would be, which doesn't necessarily include payment (otherwise no-one would publish under GPL). It's potentially a violation of the ToS of YouTube - I wouldn't know, I use a commandline tool which bypasses the web interface entirely.

Sorry Google! I'm sure you'll do OK. (Do you have a donation address? :P)
Trends Disrupting the Insurance Industry in 2016
I would say that paid cloud works okay. At least there is some incentive for them to keep it online.
"search ads" == "lead generation"

This is the difference between FB and GOOG: one sells an audience that, demographically, is likely to want your product (similar to how TV ads are sold), the other, one that wants to buy it, likely right f*ing now.
I don't mean to be negative, but this looks like a version of Kicktraq[1] with less information.

[1] https://www.kicktraq.com/
Never heard that someone named Vladimir shortened their name as Vlad. Live in Russia for 30 years. Most of the times you can call Vladimir as Vova. If you tell that your name is Vlad, everyone will think that you are Vladislav.
Thank you for responding to clarify.

What parts of a machine do traditional data center VMs emulate that Hyper avoids?

What system functions normally supported by a guest OS will Hyper not need to support? (E.g., memory management, network stack?)
I think that electricity generation, while a perfectly valid concern, is a completely separate issue, and I think that it's better debated separately.

Why? As the grand-parent post mentioned, it's definitely not applicable everywhere, and transportation is the sector where we are the most closely tied to petroleum as an energy source.

Just decoupling that, even if there aren't any gains for the environment in gas-powered regions, is a win in my book. Once we're decoupled, we can start looking at these problematic power plants, and replacing them with greener alternatives.

Also, in regions like Canada, we're all mostly hydro-powered anyway, so the gain would be immediate. Even then, a gas power plant would probably pollute way less than the equivalent fleet of cars, due to the fact that we're always running our engines cold in the winter, which pollutes a lot more than an engine running at the proper temperature.
UnifyID | https://unify.id | San Francisco | ONSITE | Fulltime | $80k-130k | EQUITY |

Join us in fixing authentication at UnifyID!
Hate passwords? So do we. We believe that within five years, passwords will no longer be the predominant method of authentication.
We are UnifyID, a StartX S15 company that is building a revolutionary identity platform based on implicit authentication. Our solution allows people to identify themselves in a unique way that is extremely difficult to forge or crack. Best of all, we are doing it in a way that respects user privacy.
We are a well-funded security startup in San Francisco and we are looking for enthusiastic builders to get in on the ground floor and work on some of the most challenging technical problems around. The founders are from MIT and Stanford and have worked together on a previous security startup that was successfully acquired. We offer competitive salaries and awesome perks/benefits, and are a few blocks from 4th/King Caltrain & BART.
Ideal candidates must be in the Bay Area, no remote workers. We are currently seeking engineers for: Frontend, Security, Data Scientist, Full-Stack, DevOps, iOS, Android: https://angel.co/unifyid/jobs
Come help us build the next generation identity platform, and have fun while doing it! Reach out at "jobs AT unify.id" and mention HN!
I don't know about chrome, but in firefox you can disable autoplay on HTML5 now. It's a bit annoying for watching youtube because it assumes the video is already playing (you have to go click the pause and then click play) but annoying news sites and other nonsense don't bother me anymore.
What bubble? Insights from my Lyft driver's startup
Yep, reality sounds like an nightmare. Thanks for re-clarifying :)
Conspiracy theory?

"Normal people do not spend $35-40k on a car."

That is dionidium's phrasing, and you're throwing slurs at me? Really?

"you seem incapable of understanding you are talking about new cars while dionidium is talking about used cars"

In a conversation that can only be about new cars, in a discussion that was about mass production (wait..were they talking about the mass production of used cars?)

EDIT: I realize now that talmand is simply a troll, and I apologize for biting.
Probably not when the TOS of the autocar service includes consent to such security-related rerouting.
Most search engines will do this. Kayak, for example shows it when you expand the listing.
In 2007 they introduced a unique tax number for every natural person.

In fact, assigning these numbers was complicated by the fact that there is no central registration data base. They started from all the local data bases and then filtered this data to remove duplicates.

Source: https://de.wikipedia.org/wiki/Steuerliche_Identifikationsnum...
(sorry, German only)
Surprised this isn't already a thing in production. Police cars have had automatic license plate detection coupled to databases of known stolen cars etc. for many years. Likewise cars have had pedestrian detection cameras for a few years.

All the technical bits are there, and I can't imagine it would be a difficult issue legislation/privacy-wise.
Comments moved to https://news.ycombinator.com/item?id=11423411.
Yeah, I know. Both services offer that.

Bytejail uses X25519 + Xsalsa20Poly1305.

SpiderOak uses RSA-2048 + AES-256. (Is it AES-256-CTR + HMAC-SHA2 or is it AES-256-GCM? That page doesn't specify.)

Bytejail uses scrypt. SpiderOak uses PBKDF2-SHA256 with 16384 iterations.

My earlier comment was saying: Bytejail uses TahoeLAFS on the backend after receiving encrypted blobs. SpiderOak uses ________?

Again, to clarify: This isn't a crticism of SpiderOak. I just literally don't know what they are doing from the pages people have linked to in this thread.
Has there been an explanation as to why later backers received theirs before early backers?
Among my employer's customers and employees, the people who ask for GCM really want "a TLS algorithm that isn't terrible" - and GCM is more or less the only widely-supported solution. (As you know, OCB's license made it a non-starter, CCM was slower and not Intel-supported, and most other stuff is newer than GCM.) Since people will take their cues from - at best - experts talking about TLS, even an old-fashioned solution like "HMAC plus CBC, but in the correct order" isn't on their radar.

It helps that TLS-on-Intel is about the only environment in which GCM isn't too terrible (hardware support fixes side-channel attacks, short-lived connections plus key (re-)negotiation fixes the short counter space, and fortunately nobody has standardized the foot-gun that is short-MAC GCM). Also, GCM does admit very fast pipelined hardware implementations (including AES-NI).

SIV, which you suggest downstream, is indeed cool (if you can afford a two-pass algorithm). A colleague suggests that GCM-SIV is likely to lap the CAESAR candidates for inclusion into various standards including TLS, which would be... about half as horrifying, I guess?

TL;DR: GCM is bad, but it's TLS which is the worst. ;-)
Are you from the future
OS size is just one problem with Virtual Machines. (Much of the OS is idle unless explicitly used anyway.) Other significant problems include:

- inefficient use of resources resulting from functionality duplicated in both the hypervisor and the guest (e.g., two TCP stacks, two filesystem implementations, two schedulers, and so on). (That's why I asked about this in a separate comment.)

- inefficient use of resources resulting from the inability to dynamically share resources between VMs (e.g., memory and disk typically have to be statically allocated to VMs, instead of sharing a common pool the way processes within a single Unix-like system typically do).

- poor visibility from the hypervisor into the application (i.e., observability tools cannot typically cross the hardware-virtualization boundary).

That's just a partial list.

I think that's why you're seeing pushback from people insisting that these be called VMs rather than containers: they have all of the above downsides of VMs, even if the operating system surface area isn't that large.

[edited for formatting]
It is a sad evolution of things. What happens to your Model S if Tesla goes out of business? The whole "remote compute / hosted" thing is a challenge. I hit it recently when I was looking to demonstrate an old game that used to run on Win98 and realized the version on the CD was unplayable and the servers where it originally downloaded the 2 gigabyte "patch" was no longer online. I found an older image of my C drive from back in the day and with a lot of work got that running under vmware workstation, only to have it still be unusable because I couldn't get the vmware version to simulate a 3D card that DirectX 4 would talk to. So well and truly dead as far as I am concerned.

So having all this stuff depend on other stuff which is only relevant at the current point in time where all the systems are online, is a recipe for massive loss of infrastructure support. The whole "long lived home server" thing starts to become a compelling response.
You're conflating what I'm saying with approval of the actions of the RIAA et al... I'm saying stealing is morally wrong. Feel free to start there.

There are plenty of things to share culturally that don't involve theft. Feel free to visit a library and likely walk away with more personal growth anyway.

>"Criminalising what everyone is doing and feels is natural and right is a fail"

You can't honestly believe this. This is empirically ridiculous.
The Politician and the Mechanic Are Still Conspiring to Rip Me Off
Painless AWS Lambda
The amount of animation on the page makes it really hard to look at.

E: from the graph it seems they are using Tahoe-LAFS[1] for the backend. However I won't be trusting this unless they make the frontend free software as well.

E^2: OpenPGP smartcard authentication would also be a nice feature. Thought of this because they seem to recommend YubiKeys and password managers so why not smartcards as well.

E^3: The reason for OpenPGP smarcard instead of YubiKey is that there is there it at least one completely open hardware and free software implementation for that, the FST-01[2].

[1]: https://tahoe-lafs.org/trac/tahoe-lafs
[2]: http://www.seeedstudio.com/wiki/FST-01