skysight-inc/HackerNews huggingface dataset:
> If you don't see the contradiction between these two statements, I don't know how to help you.

Alternatively you could be more constructive and try to explain what your position here is because, as I'm reading this standard, I'm not seeing any remote access (it's all client-side). Granted, like I already mentioned, once access is granted you could use something like web sockets to make it accessible remotely but that's a very explicit thing a developer or malicious app has to do. Which, granted, is possible but the user also has to give it access to do such a thing which is no different than allowing camera access which already exists in a similar way.

If you want to argue that anything that can be coded to be accessed remotely is outright remote access then...well just about everything is remote access and it kinda loses its meaning.

> Stop thinking of what this is supposed to do; it's the failure cases that are the problem. Good security design involves concepts like compartmentalization and defense-in-depth. Finding a browser exploit shouldn't also grant low level access to the USB buss.

This shows me you didn't even read the standard. The standard OUTRIGHT says the same thing as you and outlines how their standard WOULD NOT grant low level access to the USB bus.

So why even bother commenting if you're not even going to read what's in the standard and comment, incorrectly, about it? This isn't really typical on Hacker News.
I think the only way out is political top-down decisions rather than mental shifts. Habits are just too strong and the competitive disadvantage of frugality just too inconvenient for most of our primate brains. Environmentalism and passive-aggressively oppressing of habits via high moral self-standards is too easily strawmanned or misinterpreted as ideology by the mobs. -- The most ignorant win.

The largest impact will be by China, India and Africa, so we'll quickly need to popularize green energy such as solar and perhaps the kinds of nuclear technology which can't be used for weapons (nuclear waste might be preferable over damages caused by pollution and climate change).

We need to be decisive and strong, which might involve bold and expensive media events and populism.

The ones who are able to think in the long term need to stop fighting themselves for superficial issues, political correctness and minor details. We need to strengthen our arguments instead and keep in mind that we are following the same ultimate goal.
Timber skyscraper 80 floors high called the Toothpick proposed for London
I don't know how they justify it. I can only assume this sort of activity falls under protecting "the interests of the economic well-being of the United Kingdom in relation to the actions or intentions of persons outside the British Islands" from the Intelligence Services Act 1994.
It might be a terrible idea, but keep in mind that practically every development platform aside from the web is becoming more and more locked down as time passes (app stores, etc).

Which sucks, obviously, but it's not surprising that there's an attempt to bring the web closer to parity with native, since it seems to be a more tractable problem than stoping what's happening to native platforms.
The way I look at it is, if you're a one man shop.

Link your arms and make a circle, that's the biggest income stream you can capture. Now take ten people and have them join hands to form a circle and that's the biggest income stream they can capture. Obvious a small group can capture much large income stream per person than one guy by himself. Difficulty, keeping them all holding hands in a circle.

You by yourself also have the problem that the stream you're trying to manage is often too big, or too small. Too big you can't keep up with it and burn out. Too small you starve.

One advantage of having been a consultant is your bosses can smell it on you. They treat you differently.
Complete List of JavaScript Versions: From Netscape to Mozilla
As a counter example, there are bands whose aesthetic is defined by what Brian Eno described - taking the sounds of old hardware & exploiting their points of failure. Boards Of Canada uses 80s hardware, preserving/amplifying the sounds of grain & hiss in VHS tape and other analog mediums, and uses it not just as an aesthetic but exploring the theme of society on the brink of collapse as well:

Reach For The Dead: https://www.youtube.com/watch?v=2jTg-q6Drt0
Album trailer: https://www.youtube.com/watch?v=e2lyYEUPat8
Build product that changes lives (Shoptiques – YC W12) NYC
The author doesn't show the schema for the table. If the "Name" field was UNIQUE, the search could stop at the first hit. Most SQL optimizers are smart enough to do this. UNIQUE is usually used with an index (otherwise, inserting a new record requires a full table scan for the uniqueness check) but that's not required.
FWIW, you can plug mesos in as a Kubernetes scheduler. From the OSS world, that is about as heavy duty as you're going to get and proven on quite large (although not google large) 10k+ node clusters.
> A lot of points about the dangers of exposing a USB device to the internet.

It gets exposed to the web browser, not the internet. They can become accessible via a usb:// protocol and use JavaScript for interaction. They gain no low level access.

> I'm concerned about a future where all my USB devices require internet access.

Many people on HN are worried about this though why mention it in a comment on this article? Did you read it? It exposes the USB devices to the web browser through an API that has parts similar to CORS. You'll be able to take a usb device and interface with it using an offline, HTML5, web application.
The issue of what individuals who lack currently marketable skills should do is a tough one. Note that I didn't say unskilled...skills that once were valuable can become less valuable quite rapidly in our fast-changing world.

Since we can't predict the future, we shouldn't blame those individuals who were unlucky enough to have invested in now-worthless skills. As a society, we need to understand that investing in re-training so that someone can find a new job is far better and less expensive than either putting someone on the dole for the rest of their life, or letting people "die in the streets," which is as nonsensical as it is callous.
> God I hope that this shit will never appear on any of the websites I visit, as I’ll make sure to patch it out of my browser.

That's what they said about JavaScript, and look how that turned out.
If I'm not mistaken, the original article for this album is http://www.sciencystuff.com/?p=24
How does Pelikan cache compare to memcached/redis/...?

We envision Pelikan to have significant overlap, in terms of functionality, with many popular cache server implementations. After all, we are aiming to replace our use of Memcached (Twemcache) and Redis at Twitter with Pelikan. However, Pelikan is not a strict superset or subset of any of them. Without trying to be comprehensive, here are some notable similarities and differences:

* pelikan_twemcache fully replaces twemcache, and supports most of the commands specified by the memcached ASCII/text protocol. However, unlike memcached, pelikan_twemcache only has one worker thread per instance.
* pelikan_redis (in progress) will support a subset of data structures provided by Redis. However, we have no plan to add features such as master/slave replication, message queue, or on-disk data persistence. We also will manage memory using slabs/items instead of directly relying on external memory allocators.
* All binaries come with the ability to log each command for traffic analysis, which are not part of Memcached or Redis.
* pelikan_slimcache implements cuckoo hashing to store bounded-sized key/value pairs with minimum (~6-byte) overhead.
* Pelikan enforces the separation of data-plane and control-plane functionalities by using separate threads; further more, server and worker run on different threads as well, and there are no locks anywhere in our system.
Are there any programs that produce output before they are executed?
Oh, and put this in Flash. All you get to talk to is the originating site. No local file access except Flash's local config and cache files, which can be opened before reading the .swf input.
> Why should we build this functionality into the browser? Is it really that much more convenient than installing an app to run the proxy?

Apparently it is, given how highly requested of a feature it is to have everything you could do with VMRC available through the web browser with no plugins or local software.

Again, I still don't think it's a good idea either, but I also don't like a lot of the crazy shit built into modern web browsers for maybe the 1% users, like the mentioned WebMIDI.
Thank you for bringing this up. There are a significant number of apps already in the debate space, as listed below. The presence of competition in this space means that the potential market size these startups are trying to tap into is large. However, none of the startups have been able to capitalize on the idea. As a result, most people still meet their "debating needs" by making long comments on ESPN or Huffington Post or Facebook. Dais/Agora is confident it can capture this market in a manner Google did with search engines, or Facebook did with networks for friends.

Brigade - User scrolls through topics and scrolls through multiple one-line statements within said topics. Then user chooses between "Agree", "Disagree", and "Unsure". User bonds with others who share similar percentage agreement on various issues as decided. Dais/Agora is at least 70% different. Even though Brigade has an active blog section and claims that it "is a free app that lets you express your opinions on news and politics", it does not give voice to the issues the way Dais/Agora will.

DebateMe - Last updated 10.6.2015. There were 4 total debates going on worldwide. They are one- or two-liners, with ability to include images. Dais/Agora is at least 40% different, and will work hard to be a more vibrant community.

Debate.com - Has about 30 total "debates" and "polls" in database - ranging from super bowl ads, death penalty, gun control, math vs. english, Abraham Lincoln vs. FDR, Deadpool vs Starwars, etc. Few votes and views, very few comments. We are 60-70% different.

State - Established app in this space. Shows "opinion mixes" that are one-liners and gives user following choices to act in response - i) pick up to 3 words, ii) search, iii) pick from words featured. Dais/Agora is 65% different.

Lighthouse - One of the more similar ones. Hosts conversations on local and national issues. User feed and profile are adjusted by gaining agree/disagree/neutral feedback on one-line issues. Users participate in conversations via texts ranging 2 or more sentences.

A point to note is that most of the apps have gone for instant gratification methods because they followed the success of Facebook and Twitter. These companies are not providing the debating population with what they want (which is why they haven't succeeded). Dais/Agora realizes it is a radically different company from the existing successful social networks, and has a vision for itself.

Dais/Agora has the task of using technology to bring back conversations that used to exist in a village, but has been systematically alienated due to urbanization. In Dais/Agora, issues such as an incompetent teacher in some neighborhood school will be able to reach a larger number of people more frequently, thus gaining momentum in the community more often and being addressed as such. We only hear one or two such cases on nationally televised media every month, and perhaps the number increases to three or five - in local media. However, well-ingrained and systematically-inbred transparency in such a massive civic society as ours remains a major hurdle for human civilization to overcome.

edit: cut text "(which is desired)"
Being a hetero male engineer, I find your story quite appalling. My advice to you would be to go to HR immediately. It isn't being a tattletale when you're being discriminated against or being made fun of in mean spirits. In fact, the HR term for this is sexual harassment, which I suspect a serious business firm like Oracle has a 0 tolerance rule for to CYA against lawsuits.
Nvidia Not Sunsetting Tesla Kepler and Maxwell GPUs Just Yet
This story takes place in the USA, one of the world's most litigous countries. Surely someone can be sued for this.
The Future Google Rackspace Power9 System
Installing native applications are not always easy and straight forward especially in a commercial environment or an environment with multiple operating systems. For an enterprise they rarely want to push out new applications to every user because it's a pain to support. But tell them to go to a new web app? Easy.

I'm a big fan of native apps over web app. But web apps have a huge practically that's hard to ignore.
I was under impression that Buddhism is about giving up on 2.

By "hacking perception" I meant things like hiding thoughts from your consciousness so that other can't learn about them, masking unwanted emotions with others, forcing yourself to feel particular emotions in order to achieve some external goals - pretty un-Buddhist things to do, if my understanding of Buddhism is worth anything.

The distinction between 1 and 2 as I meant them is influencing emotions directly vs. influencing external factors which those emotions have evolved to benchmark, if that makes sense. I'm a (recovering) nerd, not a Buddhist :)
Last time I used the app it didn't support 'Find in page' or pinching to zoom. The web site is great and just works for what I want to use it for. The only thing that's annoying is that when sections of the article are collapsed 'Find in page' doesn't work (which is obvious, but annoying).
FBI secrecy makes it hard to challenge these tactics, because it's not clear what "these tactics" are, and whose information is actually being gathered.

The last aerial surveillance case I can recall is California v. Ciraolo, which was about surveillance with the naked eye. I hope that these flights wouldn't survive a legal challenge, but I also believe that the FBI would be likely to launder anything gathered via parallel construction -- engineering a "normal" traffic stop, etc., based on gathered information.

As with the use of Stingrays, secrecy is used to thwart justice. I don't know how to stop it.
Are you claiming that media.ccc.de doesn't store any web logs? Because it sounds like that is what you are claiming, and I don't believe it.
It's very easy not to pay attention, when Facebook provide the "don't show me anything from XYZ" button.
If you find yourself using formatted strings often, e.g. for logging, then it's also worth considering another approach: just dump your message and arguments to some lightly structured format, like JSON, instead. In my testing, rapidjson can produce structured JSON more quickly than even the good formatting libraries, like CppFormat, can produce a string.
Crazy to think how many people will get up tomorrow morning and hate the outlook of their day. To me that is insane and something that future generations will look back on in awe.
> Addition, as implemented by Python, is functional.

Sure, but Python wasn't the first imperative programming language. (An aside: that's not strictly true anyway; the error thrown when you do 1 + [] is a side effect.)
Read the spec. It doesn't grant access to your USB devices directly. It's an abstraction layer gated similar to how geolocation works and the vendor supplies how much of the device the web browser can touch. It's actually pretty clever.
I would also advocate going to HR, preferably after recording one or two of those conversations.
> 365x100 rectangle

I like that!

> And every day spent not on a worthwhile project is a great loss.

Does anybody really values days of life based only on the "projects"?
The lies we tell are more convincing when we need to pee [2015]
Still recall running across a vendor that was hashing credit cards using MD5. Asked them why, and their response was that they were PCI compliant. Called the main PCI line, asked them if MD5 hash was an acceptable way to store credit cards securely, and the answer was yes.
So what is the implication of this? The major reason to use the crypto module is that my users can add their google drives to owncloud and its encrypted on there.

Whats the recommended course of action?
Hardware support for tracing branches is useful when the profiler cannot unwind the stack of the program being profiled (like when the binary is stripped and stack frames have been optimized out).
Caritas+chi+delinque+dietro+la+nobile+facciata?
Just watched his talk literally last night and ordered the same poster :) Thanks for sharing!
That webpage sends third party requests to oneandone.net, FYI - so they're tracking you exactly no more or less than Vimeo is.

http://mirror.eu.oneandone.net/projects/media.ccc.de/events/...

http://mirror.netcologne.de/CCC/events/camp2011/video/cccamp...

You're telling me none of these keep web logs?
So this antivirus lets the malware install drivers, edit system files and/or replace shortcuts created by other applications, but not talk to the web, when nowadays almost every program connects to the web to check for updates. Do you know how far-fetched that sounds?

The reality is that if this malware gets enough permissions to install drivers, it can certainly talk to a regular device driver and communicate with the web. It doesn't need WebUSB for anything.
Maybe they'll also wonder why our generation so easily judges others instead of looking inward first?
GCHQ 'intervened' over Harry Potter leak
I'm not the CBO, but that tax plan would have at least a one trillion dollar larger annual deficit than the current one, maybe closer to two. You would need massive, massive budget cuts.

Plus now you're relying on businesses to collect your revenue instead of the IRS, and so you're going to see rampant sales tax evasion.
You can use NetGuard [1] to block internet per app without root. (However, you can't use it if you need to use a VPN because NetGuard pretends to be a VPN, and Android only lets you use one at a time.)

[1] https://play.google.com/store/apps/details?id=eu.faircode.ne...
You are correct to say that you can't commit a trespass by observing someone in public. However, trespassing is not an exclusive test as to whether a search is permissible (though it was the applicable rubric for Jones). The Katz test still must be applied, above and beyond the trespassory test. The concurrences in the Jones opinion state "at the very least, “longer term GPS monitoring in investigations of most offenses impinges on expectations of privacy.”

Swap "GPS monitoring" for infrared, EMF, video, audio tracking, whatever those planes are doing, and I think we are at the same level of "impinge(ment) on expectations of privacy."

Is it your opinion that Alito and Sotomayor are barking up the wrong tree? Is this sort of extensive (i.e. multi-modal (visual, EMF, etc.)), and evidently prolonged, monitoring not an impingement on typical expectation of privacy? Sure, this isn't a trespass, but if a private person was doing this to you, wouldn't you want to call the cops? (Oh, wait...)
That "just" is from (2015), and it was posted before here too.
Having been (or sometimes, still being) in the same shoes, here's some things I can recommend avoiding the consultant blues:

- Never work without a contract or at least a clear statement of work. Ever. So much pain will ensue otherwise.

- Take up front payments whenever you can. Ideally, 50% or more. Liquidity takes a lot of weight off your shoulders. Don't let customers get in the way of liquidity. We learned this the hard way and almost went bankrupt - never again.

- Trust your gut feeling regarding your customers - if your gut says no, don't do it. Again, a lesson learned the hard way.

- Adopt GTD or a similar methodology. The vast amounts of information you are bombarded with (especially if juggling 5 projects at once) need organizing. If you haven't read Getting Things Done yet, just get a free Audible trial at Amazon and listen to the first chapters of the audiobook on your way to work.

- Try to develop actual love for your customers, or their end customers. Or else, you will feel empty inside, and the time spent in the office will feel wasted. If you cannot love them because they treat you badly - talk to them about it or leave them.

- Tell clients to the face if you think that their reasoning or assumptions are wrong. This feels harder than it should be, I think that's because of BS mantras like "customer is always right".

- Insist on your own side of things. You are your own business' only advocate, and you must take a stand for it. No one else will. Everybody tries to push their own agenda. So push yours.

- Don't be a code monkey, but be an actual consultant. Code monkey freelancers are bound tightly into their client's development process, and only churn out whatever code is required of them. They don't get to adopt the purpose the client creates for a project. Consultants help the client transform their purpose (business goal) into a vision, and ultimately into a product. Adopting the actual purpose for your work is so important for not burning out.

I'll save this list as a reminder for myself now.
Show HN: Graph of subreddits connected by sidebar links
𝔸𝕝𝕝 𝕣𝕚𝕘𝕙𝕥, 𝕚𝕥'𝕤 𝟙𝟡𝟡𝟡.
> Next Postgres analyzes and rewrites our query, optimizing and simplifying it using a series of complex algorithms.

Analyze & rewrite doesn't really use any complex algorithms.

Analyzing basically means that we resolve tables/objects/operators/databases/... in the parse-tree into what they mean in the current database with the current settings. The process of parsing itself (via a bison parser) doesn't do any object lookups and such. So errors about non-existant tables, operators and such will mostly happen during the analyze phase.

The rewrite phase, which often will do nothing, will resolve both explicitly (CREATE VIEW) and implicitly (row-level security) referenced views by their definition. It also processes rules in an equivalent manner, but you should never use those...

The actual optimization you're referring to will happen as part of planning.

EDIT: typos
Oracle HR should be trained in EEOC regulations and guidelines. https://www.eeoc.gov/eeoc/newsroom/wysk/enforcement_protecti... describes some of them. https://www.eeoc.gov/eeoc/publications/brochure-gender_stere... gives a phone number to call where the EEOC might "explain whether the situation you face is lawful or unlawful." 1-800-669-4000 . I have never tried that number and I don't know the quality of the response.

If you talk with HR, phrases that will catch their attention are "hostile environment" and "discrimination based on sexual orientation."

If you go the HR/EEOC route, know your rights concerning anti-retaliation. (HR may not tell you about them. Their job is to protect the company, and not necessarily give you information beyond the minimum to do that.) Start at https://www.eeoc.gov/laws/types/facts-retal.cfm . In short, complaining about harassment in good faith, even if it eventually is not judged to be harassment, is a protected activity. The company is not allowed to conduct adverse actions against you, nor allow employees to do so.

That doesn't mean things will get better if you go that route. I have no experience with it. I mention it only so you know some about what the law says.
Does Android 6.0 let you feed fake data to apps requesting useless permissions?
Oracle is a large enough company that I'm sure they have an employee resource group for LGBT people that you could reach out to.

If you do go to HR, document /everything/ -- names and dates when the harassment started, exactly who has been involved, who you talk to and when in HR, and what they said. HR isn't there to protect you; they're there to protect the company from liability. Generally, in these sort of situations, the liability is best resolved by disciplining those bothering you, but it can swing the other way often enough that it's best to have your ducks in a row.