skysight-inc/HackerNews huggingface dataset:
Hey, thanks for your detailed response. I definitely wasn't implying that not using client-side encryption is obviously a bad decision on your part. I totally buy that the security expertise of Dropbox et al is in a different league to that of most law firms. I'm a security researcher currently working on secure cloud storage and it's very interesting to hear about requirements of real users, especially for an industry as security sensitive as the legal industry.

Regarding the exception you mention, what granularity would you make this distinction at? For example, would you typically just say that all files related to a particular case must be protected from a government agency, or would you divide up the storage of files for particular cases at a finer granularity (e.g. some files for this case can be stored on Dropbox).

If Dropbox offered a solution with client-side encryption, how much do you think you would be willing to pay for it in terms of cost or performance?
Also I think your model of "buying" a free copy is a great idea. Then if you think the content is worthwhile consider the second purchase a donation.
High rises come in many, many forms, and particularly how they interact with the streets below them is critically important to whether or not they work.

NYC does this better than most places, but mostly by luck. Le Corbusier's Radiant City philosophy of urban design (sleek towers surrounded by idyllic parkland) gained a lot of traction in the 60s and 70s. This is why most American downtowns are wastelands - most developed under that model. It's characterized by lack of street life, lack of ground floor usages, lack of mixed use, and mechanical features that separate buildings from the city rather than integrate it (deep staircases leading to the base of the building, large setbacks from the sidewalk, etc).

NYC has the benefit of predating that model, so besides the ubiquitous housing projects and some 70s-era highrises, has survived mostly intact.

It's frustrating that in some American urban planning circles Le Corbusier's name is still uttered in awe instead of derision. I think his ideas have been thoroughly debunked by reality, but not everyone agrees.

There's nothing inherently wrong with highrises, there's everything wrong with the prescriptive school of architecture and planning that are more concerned with fantasy scenes of tower-dwellers living idyllically in the surrounding parkland, than how people actually want to use that space.
Pifpaf, or how to run any daemon briefly – OpenStack, Python, TDD, Pifpaf
I'll take a stab: it's like sending mail in transparent envelopes.
Two Former Mossad Agents Arrested for Trying to Hack Romania's Top Prosecutor
That's fun! It seems that it depends how far you talk from the mic. Otherwise It's pretty accurate. Is there a certain speed I have to talk?
The problem with home environment testing is the expense of implementing the mitigations. That doesn't mean this business idea isn't great, but a nice twist to the website would be to acknowledge this hard reality up front.

You could have a graphic of a home, all kinds of UI inputs:

* SQ FT

* Geographic location

* Flooring type

* etc...

Then a list of potential problems. The user starts to enable the problems they may have, and a Turbo Tax money ticker starts rolling. Then they adjust sliders for mitigation options. More money counter ticking.

If the cost if too high, sure I might not even order the test. But the sale would be consultative from the beginning, rather than the typical alarming approach.
> humiliate people trying to use language in unconventional ways (Martini...)

The author of Martini, Jeremy Saenz, didn't feel humiliated:

https://codegangsta.io/blog/2014/05/19/my-thoughts-on-martin...

> lack of dynamic linking

You can build and link shared libraries since Go 1.5:

https://golang.org/doc/go1.5#link

> package management

The Go team is listening to the community about package management and is even willing to make changes:

https://docs.google.com/document/d/1Bz5-UB7g2uPBdOx-rw5t9MxJ...

I agree that Go is a conservative engineering project, which can explain some answers you read on Go mailing lists, but I think you mischaracterize the community.

I would add that I'm tired of people repeating that the Go core team is stubborn and doesn't listen to critics about the lack of generics, even though they have provided substantiated answer on this topic:

https://news.ycombinator.com/item?id=9622417

I'm wondering who is not listening to who?
I agree that what it does for the Russian government is very shady, but it doesn't seem like much of that was revealed by the Panama Papers. This article makes a lot of accusations, but almost all of them are things that preceded this leak.

The only thing actually revealed by the Panama Papers in this article, as far as I can tell is this:

"As reported this week by the Organized Crime and Corruption Reporting Project, a consortium of journalists exploring the Panama Papers leak, Sberbank and Troika Dialog are used by members of Mr. Putin’s inner circle to shift public funds into sometimes questionable private investments"

Which isn't great, but is hardly groundbreaking news.
On the tech issue, we are developing technology around booking, Africans accessing the net over mobile is on the increase (Kenya has more mobile phones than toilets) and with hotels around inventory management via an extranet app
Issues for Self-Driving Cars in U.S. Cities
How Germany Fixed Its Once Sclerotic Labor Markets
do you know much about the NYPD?
Any plans to use HSTS and preloads header to default to SSL in browsers for Wordpress-hosted sites?
Wish I had watched this 6 months ago.
There is disk based buffering in NXLog CE. You might want to check it out with respect to the other woes you have with rsyslog.
Is the statement "more passive money implies more arbitrage opportunities" actually true?

1. I think passive money is generally not taking any position on whether an asset is over or under priced, and as a class tends to be very inactive. I doubt it either increases or decreases arb that much.

2. I think what would increase arb opportunities would be:

A. A critical mass of misinformed active managers

B. So few active managers that the market is gameable

However, as the number of active managers decreases, one would think that the misinformed ones would go first (A), and that (B) won't be a linear progression, but a sudden tipping point at a very low level of active management.

Actually, I sort of think the final statement is reversed. As the number of active managers declines, and the average active manager becomes more competent, it will become harder for the active managers to find profitable arbitrage opportunities.
Also possibly relevant for comparison, DC rate is 0.85... so there is already a 40% premium for enjoying the Cali weather :-]

http://otr.cfo.dc.gov/page/real-property-tax-rates
"We’re still in the process of soliciting input from stakeholders and hope to have final language ready soon." Who are stakeholders in this context?
The Book of Shaders
Signal on Android offers password protected encryption for chat logs
It seems consistent with statements by Clinton and other government officials, "Maybe the back door isn't the right door, and I understand what Apple and others are saying about that. I just think there's got to be a way, and I would hope that our tech companies would work with government to figure that out." They create the requirement and tech companies have to find the least bad way to comply.

I wonder what that means for software like Google Chrome. Chrome would need to send the parameters of every SSL session to Google on the chance that the FBI requires Google to decrypt it.
Then they have failed.
> You are attacking someone who has been in business longer than the service you are advocating on the basis of you knowing their financial situation better than they do. Maybe you should consider that isn't a good position to be taking in general rather than resorting to personal attacks?

I think you're seriously overreacting. You could have easily responded to the OP's point without the condescension and calling them "clueless". I didn't think the OP seemed like an attack at all, rather just skepticism. Your response, however, seems very much like an unwarranted personal attack.
"One banking recruitment manager summarized the typical approach this way:

I’m just being really honest, it [an application] pretty much goes into a black hole. And I’m pretty open about that with the students I talk to. It’s tough. You need to know someone, you need to have a connection, you need to get someone to raise their hand and say, “Let’s bring this candidate in.” … Look, I have a specific day I need to go in and look at … the Brown candidates, you know, the Yale candidates. I don’t have a reason necessarily to go into what we call the “best of the rest” folder unless I’ve run out of everything else. … Unfortunately, it’s just not a great situation. There’s not an easy way to get into the firm if you’re not at a target school."

https://hbr.org/2015/10/firms-are-wasting-millions-recruitin...
CherryPy – A Minimalist Python Web Framework
s/la/le/
Deflation.
It seems odd to me to leave wifi turned on if I'm not planning on using it. I keep all my phone services off unless I'm using them for something. In my imagination, this prolongs the hilariously short battery life of modern smart phones.
Windows XP support was rolled out March 25 2016.

You can find more information about upcoming and completed features here:

https://letsencrypt.org/upcoming-features/
Or, "That sounds like a fun challenge! Can I ask you a couple questions to better understand how this company is structured before answering?"

Just saying you don't have enough information to formulate a plausible response doesn't make a very good impression from my experience.

They're asking you to qualify yourself and so you need to know where you fit into the equation.
I was more asking whether or not the quality and advancement of the healthcare in the United States justifies what it costs. Are we getting what we pay for?

Another way to phrase it: if we trade market forces for universal access, will the rate of healthcare innovation slow down?
Unless they backdoor in backdoors, it seems like this will just force companies to make sure there's no possible way for them to access the data.

If your company ever has any way to view the data, the government will find a way to force you to give it to them.
Quad-Edge Data Structure and Library (2001)
Funny how prices are region-dependent. I just checked and E5-2670 retails for… wait for it — between $2000 and $2150 here (EU, or more precisely Poland).

No cheap workstation for me, I'm afraid.
In Icelandic the word for computer is tölva, a compound of tala + völva (number + seeress).
I've recently been using Rust to write a small instrumentation runtime for a project that I would normally have written in C++. The FFI is surprisingly easy and I really love that I can compile down to libfoo.a with no other Rust runtime required. Lack of GC is essential in this space. It really can do anything C can. (I know it didn't always work this way -- there used to be an N:M threading runtime, for example, and a built-in GC for the old @-pointers -- so I'm glad they've gone this way!)
If you truly run multi-threaded applications all the time, it's an amazing value right now - ~$70 for an 8-core CPU with a huge chunk of cache.
*AND helps a company make profit by training their proprietary models.

If they were open, it would be a lot better (considering all the training is done by volunteers, too)
Patient secretly recorded doctors as they operated on her
I think that might be too subtle. I'd go with "It's like mailing a check in a transparent envelope with the amount and pay-to fields erasable and written in with a dry erase marker."
Is it not live yet? The article uses the present progressive "is activating", but e.g., https://whatever.scalzi.com serves a certificate whose CN is *.wordpress.com (i.e., one that is invalid for the intended domain).
The business model would likely involve retaining various degrees of equity in the projects that emerge. The longer we can keep the community sustainable, the more potential projects. If the model is viable, I'd think replicating it in other locations would be a way to scale up.

As far as exclusionary sales/rentals go - I'm happy you brought that up because I'm not very familiar with it. Targeted marketing instead of screening sounds like a logical choice.
That's a good point. I just want to be clear that we are not looking for ways to weaponize their or even our own website :)

Just trying to get some input on a tricky situation. Should we expand to China earlier than planned? Should we ignore it? etc pp
In my experience, being connected to solid wifi will drastically increase your battery life vs. the phone trying to use the cell network for everything, especially if your cell service is noticeably worse than the wifi.
And Erik Meijer wrote "Often I wonder if generics are actually worth their weight."

https://twitter.com/headinthebox/status/705963164815327232
>> I know of no other language that invented new words when computers came to the market (ordinateur)

Greek also: υπολογιστής ('ypologistis', literally "computer").

Greek universities teach computer science courses in Greek so a lot of the terminology is translated over. When I speak to fellow Greeks who have studied CS in Greek, there's always a bit of mental gear shifting needed before we can be sure we're on the same page.

A few examples:
μεταγλωττιστής (compiler; lit. someone doing voice-overs of foreign language speech)

λειτουργικό (σύστημα) (operating system; lit. functional system)

πολυπλέκτης (multiplexer; lit. multi-knitter. Note that "plex" is possibly from the Greek for 'knitting', 'pleximo')

σφάλμα κατάτμησης (lit. segmentation fault)

περιηγητής (web browser; lit. explorer or sightseer)

μητρική (motherboard; lit. maternal (card))

And my personal favourite:

αντικειμενοστραφής προγραμματισμός (object oriented programming, literally, in the sense of "oriented" used to denote physically orienting one's body towards a given direction; in other words "programming that is facing objects")
ShapeShift Security Breach
So, why can't I view the roadmap?
More like: The government wants a master key that will unlock all the doors on your home, but they super promise to be real careful not to let anyone else use it.
Another: it's like requiring safe manufacturers to have a master combination to unlock any safe.

(or, closer to what the article states: it's like requiring safe manufacturers to open any safe the government gives them, or at least require the manufacturer to provide technical assistance in breaking into their own safe)
We intend to conduct routine checks, have a fleet on the street, and through reviews by our customers
Application Layer Attacks Could Defeat DDoS Protection
I would like a better type system, immutability, and a better guarantee of memory safety.

I'm totally aware that C++ has unique_ptr which can give you something relatively comparable to the Rust memory management, but I personally think that if the compiler doesn't have any kind of official idiom on the subject, it'll probably end up in the codebase. C++ kind of prides itself on being able to "write however you want", which is fine, but then that means that people might start using raw pointers, unchecked arrays, and mutation.

Could a vigilant C++ programmer replicate every feature of Rust? Absolutely, not denying that for a second. Rust doesn't give you anything as much as it enforces a paradigm.

At least that's my two cents.
White-Box Crypto Gains Traction
turn off wifi for location based services.

with wifi disabled but enabled for location services, it will try to matchup up where you are based on history of location and local wifi SSIDs.
I almost want this to happen, simply because it only applies to "remote computing services".

It would provide a major incentive to move anything security-relevant back to the endpoints where it should be in the first place.
To be fair, I personally enjoy working in a diverse environment with so many accents, and at least for the european ones I don't have any trouble (international english is the working language, native english speakers are not a majority in my office and there are over 50 different countries represented). Personally unless I feel like people have trouble understanding me, I don't make too much effort to cover my (french) accent.
WeChat has over 650 million users, mostly in China. Quoting Wikipedia: "WeChat allows people to add friends by a variety of methods, including searching by username or phone number, adding from phone or email contacts [...]"
I mean... you literally can't legislate crypto, can you?

Could someone explain what this would look like, in a practical sense? Would self-signed keys become illegal, and all PKI would have to have a "government" parent key of some kind?
Why do you Americans put up with these things? Is it not time for a new government?
One thing I couldn't figure out how to do recently: Download only a certain time range in a video. Of course, I could have downloaded the whole thing and then used standard video tools to extract it afterward, but the video was very large so this would have been impractical. Do you know of a way to do this, by any chance?
Play to different fears, e.g.: "Anything that makes it easier for the government to track criminals also makes it easier for stalkers to track their victims."
Ask HN: Why are there no standard TOS and PP like there is MIT or CC licences?
The problem is that even if you simplify or explain your legal documents like https://about.500px.com/terms/ or http://stackexchange.com/legal/privacy-policy the only thing that really matters is the small text. Why are there no standard policies that everybody would trust without reading them, like there is a MIT or CC licence?
Look, I appreciate what people are trying to say about this stuff, but there's one universal truth that managed services absolutely cannot get around: Cost. As someone that's bootstrapped a couple of businesses from zero, I have had to lean heavily on my ability to work with bare metal. It is an incredibly valuable set of skills that translates literally to more money. Managed services will not kill off DevOps because there will always always always be companies that want to be profitable sooner, or don't have a ton of money to throw at AWS.

Second, this is a really clickbaity article.
This is very exciting. We use Erlang in an embedded environment and 19.0 will be a valuable release for us.
Ask HN: Setting to ignore /node_modules with find and grep
Searching files in terminal and node_modules is making my life extremely uncomfortable.

Project directory looks like so:

project/
├── index.html
├── node_modules
├── js/
│ └── scripts.js
└── style.css

I find myself using `find . | xargs grep "text string"` to search the project directory.

I want to ignore everything in node_modules all of the time.

I'm familiar with --prune and ignoring, etc.. but I want something like an alias in my .profile that ALWAYS ignores the contents of node_modules.

I've looked around, but I just don't know if I'm asking the question correctly.

Anyone have any solutions?
I can say without exaggeration that this draft bill is the most
ludicrous, dangerous, technically illiterate tech policy proposal
of the 21st century so far.

And that's saying a lot.
Yep. People have been thinking Detroit would turn around since about 1955. And they've been wrong every year for 60 years now.

If Detroit ever returns it'll be slowly, organically, and not driven by speculation. Nearby neighborhoods are more attractive and inexpensive than downtown (Dearborn, Livonia, etc). Until higher-end businesses and lifestyles return to central Detroit, (not to mention basic city services), surrounding city property values will never climb.

I wish Dan Gilbert the best, but having grown up in the area, I've heard it all before.
If you are setup to automatically connect to known Wi-Fi networks, and you often times are able to, it can actually result in large battery savings.

Transferring data over Wi-Fi is more efficient than going over a cell network. With how many network services exist on phones now days, your phone can spend a lot of time doing network transmissions. Wi-Fi is more efficient for this, thus the savings.

You can see this in good cell phone reviews, they'll have a battery life test for Wi-Fi web browsing and another one for 4G web browsing, the Wi-Fi test will demonstrate a much better battery life.

Another way to think about it, is if you are in an office building that doesn't have cellular antennas places throughout it, then to connect to the cell network your signal has to get through the building material. If there is Wi-Fi available, odds are those antennas are close by and easily reached.

(Of course really noisy Wi-Fi environments can change the math on all this, but I do not know by how much.)
How feasible would it be to run your own virtual Android device on a VM and access it remotely like VNC or rdesktop?
This could be nice for running clients like WhatsApp or Snapchat and accessing them from a real computer with less privacy worries to boot.

(Yes I know there are per app ways you can often archieve this if you tinker around enough, not the point)
Plus also: $$$$$$$$$$$$$$$$$$$$
Conservative "think tanks" are super good at reframing concepts in a favorable way, referring to estate taxes as "death taxes" for example. Maybe we need a crypto "think tank" that can help, but it doesn't seem like there are many politicians who support cryptography.
It worked for the TSA.
IMHO, Yahoo Finance is a wildly undervalued asset. It has the deepest and highest quality data integration of any publicly available site. I use it every day.

It has also been largely ignored for better part of a decade. Three areas where Yahoo just fumbled the ball: 1) Portfolio tracking, 2) Message boards and 3) Monetization. None of these have been upgraded in years.

Portfolio tracking is an exercise in good UI & UX. Yahoo could and should have bought any number of good teams over the years that have built portfolio trackers.

Yahoo finance message boards have very low signal to noise ratio. They should have either gone the reddit model of comments or even better, Yahoo should have bought Seeking Alpha a long time ago. Alternatively, when Seeking Alpha began to grow, Yahoo should have built a competitive product. Instead Yahoo let their message boards turn into a low value destination.

Monetization - this is just comically inept. Visitors to finance sites have and care about their money. They also tend to be older. Some of the highest paid ads target these people: Credit cards, mortgages, health, travel, banking, personal loans, autos, etc.

Yahoo finance should have been the center of a massive business unit at Yahoo generating a substantial percentage of their revenue.

What went wrong?
> a provider of remote computing services to the public shall ensure such products are capable of complying with a court order to decrypt.

I'm not well-versed in these things at all, but I wonder what implications this would have on VM providers like Amazon (EC2) or Google (GCE)? Does this mean they somehow have to magically ensure that you didn't install sshd on your Linux VM? Surely that can't be the intention (?), but the broad language is scary.
I believe in "ideas can turn cargo cult" it was adjectived rather than verbed.
I have a friend who grew up there, getting out was his top priority. Fortunately, he succeeded.
What I'd like to see is a new 15" MacBook Pro - with USB C
Even better with mapMaybe:

map transform . mapMaybe safeHead