skysight-inc/HackerNews huggingface dataset:
we do not yet measure latency, we really need to and have been wanting to for some time. could you help us with this?

IP address signals are good, but we must maintain real measurements of all our connections to be able to adjust over time. also, with things like cjdns and tor, IP addresses wont help much.

I'd love to get network quality estimation at various levels -- as close to the wire as we can for proper measurements, but also across layers of the stack to quantify overheads and so on.

Would love to see how transports like QUIC improve things like parallel fetching of blocks.
Yes, that would be ridiculous. It is fully automated. Only communications with specific attributes are routinely inspected.
It doesn't seem like you can even log out anymore inside the iOS Messenger app. My wife was without her phone a few weeks ago and needed to message someone via FB.

I could not find the log out button in iOS Messenger, and the only way to do that seems to be logging in to fb.com and hitting a button there which will deactivate your phone session.
Hopefully. They would have to see some value in allowing humans to live, exceeding the cost. Since that might not work out, maybe we need to teach computers compassion. Or submit to be their pets or zoo animals.
BTW, we have MaxMind's GeoIP Lite database (we asked first) stored directly on IPFS, indexed with a b-tree. see https://github.com/ipfs/ipfs-geoip :) -- it's what powers our webui globe.
"Organic" is a marketing buzzword.
As long as you visited Gmail within the last 126 days, your browser won't allow you to visit the HTTP version of Gmail because they have HSTS[1] enabled:

> strict-transport-security:max-age=10886400; includeSubdomains

This sensational article fails to mention that.

To protect your website visitors, enable the HSTS header on your web server. Basically just use SSL Labs[2] and fix everything until you have an A+ rating.

[1] https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

[2] https://www.ssllabs.com/ssltest/analyze.html?d=wakatime.com
Federally in Canada, the upper limit seems to be 500W and 32km/h in Canada.
And maybe list the Boston Dynamics videos as proof how mankind has been violent against robots from the beginning.
I'm not sure if you were being sarcastic or not, but they most likely are:

http://security.blogs.cnn.com/2014/01/04/nsa-wont-say-whethe...

And let's not forget this one:

http://www.theguardian.com/world/2014/jul/31/cia-admits-spyi...

I'm not sure why people still give spy agencies the benefit of the doubt, when they are almost always caught with lying. Skepticism for what spy agencies have to say should be the default in everyone's minds, especially in policians' minds. Unfortunately, those very same politicians who are supposed to "oversee" the spy agencies are the ones cheering for them the most.
Gentoo install iso seems broken
...or unfollow them.

Most of the time, if someone complains about "stupid discussions/content" or anything alike, I feel that facebook just isn't used in its full potential.

I unfollowed/unfriended/blocked all the connections to people who produce content which isn't enriching my browsing experience. As a result I follow around 10% of my facebook friends, which is a set of about 200 connections with (mostly) valuable content.
Please rephrase my question in an HN appropriate way. I'm curious about how you can make "what kind of talent" and "cronyism" less nasty.

Here's my attempt:
"Why did Ito get this job? His Wikipedia page makes it seems like connections rather than skill was important."

IMO this latter attempt is boring and will lead to decreased engagement on HN over time compared with my more provocative original comment.
Marc Andreessen is close to admitting there’s a tech bubble
In many other countries with domestic card schemes, EMV cards are often co-branded with other domestic schemes to allow the same card to be used internationally. Domestically, low fees are maintained, but internationally the card would still function. This was more or less forbidden in Canada (see item 6):

http://www.fcac-acfc.gc.ca/Eng/forIndustry/publications/laws...

According to some of my colleagues, these regulations were explicitly made to protect Interac against Visa debit and Maestro which were characterized as domestic schemes from the Visa and MasterCard network.

Because there are no co-branded cards, it also means that Maestro is not really accepted at many POS devices in Canada.
I found this app meant to fight this block by facebook.
https://github.com/gsurrel/MessengerBypasser/blob/HEAD/READM...

I tried it with tinfoil for facebook and it seems to work well.

It also states that what crashes the tinfoil-app is a call to launch Messenger.
This is very common by Facebook. Many of their APIs are private and oly given and only provided to some of their previledged partners (e.g. shop section).
This particular site had already been uncovered before (I believe in the 60s); then, as now, a building was going up and the archaeologists had a limited time window to get in there and see what they could find. So in this case it was already known there was a Roman site there.
But once you adopt bash-only features, you're losing the main argument for a shell script: portable scripting without the need to first install something to get something else running. Once you require Bash, it's equally easy to demand Perl and that will provide a much richer scripting experience.
The Facebook app on Android actually works fine without any special permissions. If you disable them all via the new methods in Marshmallow, it just continues trucking on. Of course they'll never stop asking for the extra permissions, but its functionality is pretty equivalent to the mobile site even with no intrusive permissions.
> Not only is it [linearly written code with async/await] easier to read (as the chaining example was), but now the error handling behavior is the exact same as regular synchronous JavaScript code.

Then why not write code synchronously in the first place?

I understand that async/await looks attractive in languages with an event loop model, such as Javascript, or with expensive threads, such as C#.

I see two main justifications for async/await in these languages:
1. Linear code.
2. More performant code.

It's easier to follow a linear flow of code than it is to follow entangled callbacks and state machines.

Async/await is also sometimes perceived to help with performance. This is an observation that is typically made in languages with few, heavy threads, such as C#. As async/await code "doesn't block", expensive thread resources are mostly free to execute concurrent async/await code.

It seems to me that async/await provides very little apart from making code flow over callbacks look like regular, synchronous, structured, procedural code.

It introduces new concepts: Now there are two types of function calls: vanilla "blocking" function calls and the new async function calls. The difference is that one "blocks" or "takes a long time" whereas the other does not.

Some APIs are only available in one flavor. How do I adapt between the two conventions in code that is required to deal with both API types?

C# and the .NET framework mostly choose to completely double API surface - for example you now have a System.IO.Stream with both vanilla and async/await Read()/Write() etc. methods. You can only hope that they're implemented in a consistent fashion. (they're not)

Given all these conceptual and practical disadvantages I don't understand how async/await becomes such a praised thing.

I'm in favor of coroutines/green threads/goroutines (depending on whether you learned programming in the 1970ies, 1990ies or 2010ies ;)) with a scheduler that multiplexes I/O to the appropriate OS concepts for concurrency. With this approach you get the benefits of structured, procedural programming without the mental and practical disadvantages of async/await.
Except when you want to add a dependency. Then things will not look nearly that simple...
WhatsApp would never accept that. Their brand is a ton better than Messenger's is, for good reason.
Knowing When Not to Trade Is Important
One approach is to turn regex! into something like lazy_static! but with syntax checking. Since this just reuses Regex::new, I wouldn't call these "compile time regexps."

Another approach is to re-implement everything that has gone into Regex::new, but in a way that works at compile time.

Another approach is to operate more like Ragel and try to get better performance, but this will need to be compensated somehow to provide the full suite of the regex API.

(1) isn't that interesting since lazy_static! and Clippy already serve that role. That latter two approaches require a lot of work that will only be available on nightly for the foreseeable future. (And it's not even clear to me how much faster (3) could even be.)
Bash is the default shell on the most popular server nix (Linux) and the most desktop nix (OS X, though it's always a slightly old version).

If you use OpenBSD and hate ports, then maybe ignore all the good things bash brings and write everything in Bourne shell. If not, then write bash. Just fire it up with '/usr/bin/env bash' to label it correctly.
I don't know the costs for an office -- but WeWork provides the staff, internet, electricity, coffee, etc.
JS scroll magic took my tab down twice, gave up after that.
These "problems" are already solved in black boxes. What is actually missing is constant transmission of GPS data through every flight.
Using https://pypi.python.org/pypi/gitchangelog
That's exactly why many don't run the official Facebook either. There are third party apps using the web-interface meant to sandbox Facebook so they can't gather all information. Up until now those web-interfaces have also been able to use the chat though. And you can still do that with some quick apps made to work around this block by facebook.
Yes, that is what I've found too.
Unassisted learning will unleash great advances in computing. Imagine not having to write a program to accomplish some task, but rather just putting some ai in an environment with some obstacle and letting it figure out how to teach itself to overcome it. Advantage: no more need for humans to have to program. Disadvantage: self-aware, all-powerful AI.
> There's absolutely no reason to believe it experiences any of the qualia experienced by the people immersed in the VR.

Firstly, NPCs tautologically don't experience the same qualia, but that doesn't mean they don't experience qualia of their own. Like I said, they respond to their environment, which means they have senses of a sort.

> It just behaves as if it does [produce consciousness], like the people on your television screen.

How do you know that? You're merely asserting p-zombies exist, you're not proving it.
This is exactly what I did, and I'm so happy I did. I'm now Facebook-free which is something I didn't think I could get (albeit I lost contact with a couple of people I rarely spoke with).

I'm using Telegram a lot lately (although it was more about other people bringing me in rather than me bringing them over) and I still wouldn't switch to WhatsApp now. The webapp requires your phone to be turned on and connected (as it acts as some sort of bridge or something?) unlike Telegram which "just works" once you give permission.

Plus I find the whole infrastructure to be much nicer for group chats (with nice things like bots that are quite useful).
Want to Raise Your IQ? Neuroscience Says to Take Up This Easy Habit
Yes, very disappointing. Generally anything with "AI" in the title means the HN comments won't be worth reading. It's a big problem, and I'm not sure how solvable it is.

Basically, the paper discusses ways in which learning agents "will
not learn to prevent (or seek!) being interrupted by the environment or a human operator. We provide a formal definition of safe interruptibility and exploit the off-policy learning property to
prove that either some agents are already safely interruptible, like Q-learning, or can easily be made so, like Sarsa."[1]

It's an interesting result, and can probably be extended to other less hype-worthy scenarios.

[1] http://intelligence.org/files/Interruptibility.pdf
What does this project bring to the table? The examples are Python scripts that we could already write on a Raspberry Pi.
I don't think that's quite right.

I think they require SEPA transfers (roughly, transfers to other euro countries) to cost no more than domestic transfers.

Banks charge around 5-75 cents to business customers for electronic transfers, depending on the customer.
Same issue as with "evil": The greatest danger isn't intent, it is not giving a shit.

The reasons we humans care about humans and little else (watch movies without sound to see it's all about humans) is because we are hard-wired to do so - and even that is easily circumvented ("death camps" and torture). Or, very related, read "The Man Who Mistook His Wife for a Hat".

A lot of AI/robots will be made for environments free of humans (space, mining, automated factories), where implementing such a feature, which we would first have to understand in the first place, is unnecessary. At first. Then through convoluted pathways those AIs suddenly are placed in a human environment... and could not care less.

To such AIs humans will just be objects. That's not an oversight - from an engineering point of view making every robot as "human" as humans makes no sense - it's a huge cost, even our own complex brains have a hard time doing too much at once and already spend much of their resources on "being human". Why would you want to create AI that is "us", in a sense? It will be different - very different - and we will see what happens. It's all idle and empty speculation.
I had to uninstall the Facebook Android app and the Messenger app a while ago. After an update, just having the apps on my phone was causing it to keep stuttering. And if I actually opened the Facebook app my phone would completely lock up requiring a reboot.
Humans could already extort guards like that and -- in the case of ICBMs -- it has not been successful.

Also don't underestimate the psychology of guards: You'll always find people who are either very principled (yes, they do exist) or get a kick out of controlling (imprisoning in this case) someone/something, especially someone/something of a high intelligence.

Throw in a hierarchy with a controlling officer and two subordinates who were also trained to watch the officer and I think it's pretty secure.
If it's not their messaging app you're using, they're not happy.
What a pointless article. Nothing news-worthy.
An impressive application of Poe's law.
Well, I agree it got too much attention, that's for sure.
Except that I saw your comment, looked at your app, looked at flume, bought your basic app then immediately upgraded to the pro version. Your app does exactly what I need with no bullshit. Cheers!
Effective bash programming involves invoking other Unix commands. That's what the shell is for, after all. I don't know off the top of my head what you'd use for matrix multiplication; I guess it depends.

For another example, jq and jshon are excellent tools for querying, transforming, or creating JSON values.

My experience is that programming by composing Unix programs that communicate via pipes and files can be very pleasant and productive.

Sometimes I lament aspects of bash syntax and semantics, but it's also much more convenient than other scripting languages for tasks related to spawning programs and pipelines and working with files.

One of my recent projects that I've been having a lot of fun with is a kind of continuous integration system built mostly with bash scripts. It involves a lot of calls to git and Docker, process manipulation, file descriptor redirection, and file system manipulation—and bash makes all this pretty easy and concise.
Not sure how it would reliably detect the first sign of crashing given planes routinely fly through storms. You could make it detach under high pressure so it releases say 50m down if the plane is sinking.
One thing people underestimate about boxing is how much training goes into the feet movement. Any boxer at that level can do things with their feet that is pretty baffling. Training your feet and calfs in boxing is extensive. That said one of the things that made Ali so astounding is that for a big guy he was super light on his feet.

That foot shuffle doesn't have a name, and he isn't doing it for a tactical advantage. He's showing off. Nearly anyone else on the planet who tried it would have a coach in there ear ripping them a new one. But you know, the greatest of all time gets to do things others can't.
And hopefully there will be more people who refuse to instal another messaging app.
I hate how when I go to a website it forces me to open it in the app. If I Google a restaurant, and Yelp comes up, opens up in Yelp app....same with Amazon. Seems like you can long press a link to open it in the browser...but it's a very poor user experience.

When I am running low on space on my phone, those apps the the first to get deleted Facebook and Messengae first, of course!. Facebook caches their data and at one point it was at 700mb...with no way to clear the data except for deleting the app and reinstalling.
>If a site provides only HTTPS then sslstrip would fail as it can't fall back to HTTP

I don't believe this is true. Sslstrip would get the site in HTTPS and serve it to you in HTTP, right? Only pinning or hsts would prevent that, HTTPS only servers wouldn't help.

I guess they could mean hsts by HTTPS only, but the end of the article implies otherwise.

>Certificate pinning, though, is limited to Google sites at present

This is also false.

I'd also hope they'd mention something like HTTPS everywhere which also mitigates this.
Not Josh, but I would say they're on their own side. They get paid when you accept, so the want both the company to raise it's rates and you to lower yours.
That example code isn't going to run. Hyphens are illegal in python identifiers.
> I have a solution. Why don't you get all your friends off there?

While I don't disagree with your goals, it's not just moving your friends and family off Facebook. It's also moving their friends and family off as well. And all the groups they are associated with, and the people they interact with.
This is one reason I refuse to use Facebook's messaging app. There are plenty of ways to contact me on my phone. My friends know what they are. I don't see some Facebook messages, but that's just too bad.
Or you know, you guys could have emailed each other. Everyone still has email and you know what its the one thing on the internet that always works really well.

This is typical trope of the "why I have to be on FB." Download everyones contact and or sync to your address book. When people are in town they text you or email you. Trust me it works. People found each other just fine before FB and they can just find now.
Sounds like you're really cool.
The article does mention HSTS. And for many sites on several browsers you don't have to have previously visited them because the HSTS list is preloaded.
"Company makes product and decides how users should use it."
That’d be the end to staying in touch through mobile FB in w3m on an EC2 instance SSH’d into from China.

(Not that it’s that convenient… Gotta say though, impressed with both FB being able to work in w3m, and with w3m being able to handle FB.)
While I agree in general and prefer iOS, in this particular case that's a bit of an odd statement. On iOS you couldn't fix this behavior at all - the "stupid hack" won't exist.
It's interesting to observe how almost all mainstream dynamic languages move from "who needs types? types are very very bad and just get in the way!" to some sort of gradual typing or runtime type validation.

* Javascript has Flow/TypeScript

* Python has PEP 484

* Perl6 has some sort of types

* Clojure/Script has core.typed, schema and now clojure.spec

* Don't know about Ruby, but I've seen articles on type checking/annotations

* Erland has Dialyzer (although this is not a recent development)
I created a classifieds platform around Instagram posts and been operating since around April 2015. When filling out their form and creating a screencast begging for access back, I get denied stating that their API is not for "one off projects."

YouTube shows that they haven't even watched the screencast they asked me to make, just flat out denied without spending any time on my API request.

It's their product and they can do whatever they want with it, but the annoying thing is that they had released an API for people to play with, people built features around it, and now the features do not work. This kind of disrespectful dismissal make me really reluctant to spend time integrating other APIs in future things I make.
Notifuse – free dev stickers
This is more an issue with your bank being too lazy to do 2-factor authentication properly than the network itself, which supports authentication mode for almost all channels. My company provides tools for testing payment terminals/networks and I always make sure I use my actual debit card when I demonstrate our tools. My bank will not authorize transactions without proper authentication, so it really doesn't matter if people see my PAN/expiry date. Even using my credit card online requires proper authentication when the site supports 3D Secure.
Here are the criteria for rating the risk of wildfires in Alberta http://wildfire.alberta.ca/fire-smart-landscapes/wildfire-th...

The fire presented a risk right at the beginning and seemed to spread into populated area's faster than could be responded to, once that risk was no longer present outside assistance was not required.
I have a similar setup, combining a dedicated server and a shared VPN. On the DS I have two outward routes: one for BitTorrent, and the other for everything else. BitTorrent traffic is the one that goes through the VPN. In addition to this, I set up a private VPN between the DS and my home devices, and the DS is configured to route the traffic from this private VPN through the shared one if I choose to.

So far (about nine months in) I haven’t gotten any DMCA complaint, and can seed torrents without having to care for upstream bandwidth at home.
You are absolutely right. Whoever has time for a long confirmation, can find it here: http://www.wsj.com/articles/bridgenot-chessis-the-ultimate-w...

For those who want something shorter I can say that based on your reasoning, bridge is much more interesting. This may be sound as a joke since in US bridge is mostly played by old people, but is true.

The most important reason is that bridge will never be perfectly solved by computers. Someone said in this thread "for imperfect information (games), there is still a perfect, computable solution". This can be true, but the interesting point is that this perfect computable move may be the wrong move by far.

In order to explain this I will say that in bridge there are many situations where you have to choose between two paths.
Path one is a winner 65% of the time according to mathematical analysis.
Path two is a winner 5% of the time according to the same analysis above.
However path two is the winner, because the opponents have also incomplete information and even according to their BEST analysis (mathematical or psychological) they must follow up with a movement that will make you win 100%.

Unfortunately as the author said, this cannot be appreciated if you are not very familiar with the game.

Since you mentioned generals and the like, Eisenhower was a bridge fanatic. At present time it is enjoyed by the two richest men in Earth, Bill Gates and Warren Buffet.
No it is not. BC/AD has been in use for hundreds of years and is just fine. You can use BCE/CE if you want but it is no more valid than BC/AD.
It's not clear to me why I should be upset that messaging was split out from one app to another? Why is that "being led like sheep"?