skysight-inc/HackerNews huggingface dataset:
So Heartland Payment has an interesting scheme where micropayments are aggregated over a certain time period (say 2 hours) and then charged en masse. Another work around is to require users buy "credits" that they can then use for micro purchases at any given time.
I would expect Apple's driver to be open source, so someone could just port it. Their HFS+ driver is open source.
They simply started from scratch with an aim to

* best support modern hardware technologies,

* start from the state of the art in file systems (like ZFS and btrfs, old as they may be), and also

* emphasize security.
I know people who had psychological issues. The doctor gave them a simple prescription for "Restyl"[1]. The person has then simply buys the medicines by walking into a drug store with the same old prescription for the rest of his life.

One doctor's visit that is all.

In USA the guys will have to make several doctors visit, renew the prescription every month. Not to mention the insane amount of friction to get that doctor's appointment.

I do get the point you guys are making but letting the drug companies actively advertise their medicines will help in informing customers what drugs they may buy.

[1] Restyl, also known by the brand names of Niravam, Xanor, and Xanax, is a benzodiazepine-class, short-acting medication used to manage moderate to severe panic attacks and anxiety disorders. It is also used as an auxiliary treatment for anxiety caused by moderate depression. It's available in both generic form and extended release form (Xanax XR). In America, this medication is a schedule IV controlled substance under the Controlled Substances Act.
So you can tell them in person that you don't live in the same country or work in even vaguely the same area rather than ignoring them as you do now?
You can predictably silence it before it happens with the above method. Just drag the "music" volume to zero.
Glad to help!
Those limitations are obviously because it's in development.
While that sounds fairly similar to most session implementations, I would recommend using a battle-tested implementation rather than using your own, if at all possible.
Radare2 (RE framework) collects money for it's own Summer of Code
It apparently is worth more, $26 Billion to be exact
That's pretty much a perfect summary, yeah.
Sure, but the usual outcome of such proposals is merely to placate those affected with less compensation than the actual harm caused, and to erode such payments over time after the affected have lost their veto. Honestly carrying out such a plan costs more than businesses are generally willing to pay, especially when their dollars go much further by corrupting the political process directly.
That's if they all switched at the same time. Unfortunately right now only one manufacturer is willing to make the change.
I think the question is not how much you want bluetooth, but how much you want to play songs on your phone over your car stereo.

In the current world you can often plug your phone into your car by a 3.5mm jack and play music. In the brave new world, you can plug a bluetooth dongle into your car's cigarette lighter and 3.5mm jack, pair your phone and then listen to music. If needed, you have the "option" of hiding this awful mess under the dashboard and hard wiring it.

It sounds worse than cassette adapters to me, but I am not a phone manufacturer, so I can't do much more than bitch on the internet :)
HFS+ uses zlib (gzip).
perl.

Also: view source on any page to learn just what kind of a website 0x.co is ...
Instead of selecting text I'd rather have a dedicated softkey to emojify what I type after. E.g. ⁂poop spits out pile of poo emoji. Tap and hold the button and the emoji menus show up.
Once companies go public, employees “are on Yahoo Finance every day, and it’s palpable how much that is affecting the decision-making of ordinary managers,” he says.

This is believed by most everyone I know. It makes sense to me. However, is there any hard data to support this?
Come on. HFS+ has been a shame for 15 years now. It's been the laughing stock of the filesystem community for ages. They got the developer of BeFS on board to patch the thing until it may apes a modern filesystem for a couple of days at a time, and that's about it. It deserves to die an ugly death, strangled in a back alley without mercy. It's about as good as LINDOS/FAT32.

God, what a relief, we're almost done with this monstrosity of HFS+. Didn't you hear the collective sigh of anyone having to _work_ with this flea-market antique FS?
How Telegram can be hacked (with video tutorial)
No it doesn't. How would it work on Linux if it did?
You're right, but as someone who's done a lot of sound editing/foley work I can't help having mixed feelings at seeing yet another job skill automated away. Good part - in a few years this will be good enough for commercial use which will save sound editors all sorts of tedious dull work and free them up to do more exciting creative stuff. Bad part: the tedious dull work was also what paid the bills. The easier it is to do that stuff automatically, the less people are willing to pay for good quality work.

Rather than now being able to make a living do the sort of fun really creative stuff like inventing new sounds for teleportation devices or dramatic natural phenomena, editors are more likely to be asked to work for free on the theory that they'll gain great exposure for their creativity. That's generally a very bad bargain. If past trends in the electronic dance music market are anything to go by, increasing automation will not reward true creative talent but rather just lead to an arms race to have the latest sound libraries, synthesizers etc. and just be the first to market with big splashy new sounds that offer superficial novelty.

Ability to provide high-value equipment below normal rental cost frequently trumps considerations of talent in the film industry. Similarly there are plenty of crappy directors of photography out there who get hired regularly because they own a pile of nice lenses and related camera equipment, and hiring them plus their camera package looks economically attractive on paper because it's hard to quantify photographic talent.
This is my site! thank you for posting it here :)
> I really do not understand why "Hi Ibrahim, I live at Alpha-Unicorn-Honey, just drop here when you are in the area" would beat "The train stops at Nadira, from there you walk 2 miles in the direction of the sunset, when you reach a rock looking like a kneeling woman you turn in the direction of the face and walk anoter mile - and there is my hut".

You misunderstand. It's not trying to be better at directions, it's trying to be better at unambiguously specifying a location. If you're mailing something to someone where there are no roads, then this gives you a way to address them with more precision than you could do before. You just need a postman with a $40 smart phone with GPS (or a look-up-table).

You should really think about this as "easy to remember and communicate GPS coordinates".
I didn't see any mentions of check-summing.
Please tell me this brand new filesystem won't be susceptible to bitrot?
so if you solder this accelerator onto a motherboard and make it a few times larger than your RAM, you get a super-low-latency L5-ish cache (where RAM is L4-ish) and, potentially, an ability to instantenously suspend and keep suspended without consuming any power at all, assuming RAM is mostly in the Optane cache at all times. sounds nice.
Skype for Business is just rebranded Lync. AFAIK there aren't any new features that were integrated across from Skype. Hell, it's still lync.exe.
This is not the same thing.
I agree, unfortunately it seems like the political atmosphere for free trade is trending in the imo wrong direction. So if we have to pass this in order to get that then I think I support it.
Id0-rsa.pub crypto coding contest this Saturday (6/18/2016). $100 Prize
> I went crazy trying to find the square brackets.

Apple's US keyboards have them in a good place: on dedicated keys to the right of the 'p' key.

Scroll down a bit here:

http://www.apple.com/magic-accessories/

Like you, I am baffled as to why some of their BSD userland programs are so very out of date.
From the sounds of it, you're essentially using stateful JWT tokens. In that case, I'd recommend using a battle-tested session implementation for your stack of choice instead, if there is one - this rules out implementation errors or overlooked security issues on your end. Security can get pretty tricky.

The exact token scheme you use shouldn't matter for the client. As long as the client supports cookies in some way, it'll just treat it as a dumb blob of text - only the server needs to care about how to interpret the session token.
No, Not from the manufacturer usually, just a third party, and to consumer, not retailers. Some third parties advertise themselves as drop shippers and some don't know they are drop shipping. If I list an iPhone on ebay and instead of shipping it out ( I don't have it) I go to amazon and order it and put the buyers shipping address and have amazon ship it directly to my buyer - that is drop shipping. I am selling something that I don't have in stock and having a third party ship it out.
To join the contest use the access code "chi-squared tests are my friend". Winner will receive a MASSIVE $100 prize (okay not massive but hopefully enough to make it interesting haha).
What exactly is a bubble here? I think AR is going to hit high strides.
Does that page say Presburger arithmetic requires infinitely many axioms ? How do you make an actual decision when you need to take into account an infinite number of axioms?
Steve Jobs refused a lot of things that he later back peddled on, and released many things that failed.
I cannot see anything on my Android mobile S:
http://pmem.io - for byte addressable form factors

http://spdk.io - for block device form factors
but what sound is a DNN going to associate with an insect eating ?
De novo genome assembly: what every biologist should know
That's a bit of a disappointment. I imagine they'll gradually loosen restrictions.
Today I learned that I could be making a lot more money on the side doing this for half the cost with a better method.
I'm not sure if you'll find that helpful, but you can create a Google account with a non-gmail email. When you create your account, below the username textbox is a blue "I prefer to use my current email address". Never tried it myself though..
The unofficial word is that Apple wanted Sun to sign an indemnification agreement, Sun had agreed to sign it on the day that Oracle's acquisition of them closed and Oracle refused to sign it.
Getting UDF to work with rewritable media, like usb sticks, is an unholy pain in the arse. It involves trying to remember an arcane combination of versions and feature flags to get the universal format to actually be universal. I managed it once, but after that, realized that the network was fast enough for most of what I needed and I tend to not have the four gig files that cause problems with FAT filesystems.
I have a similar problem... and similar to DelaneyM

In 2007, I got my MBA in Finance, which is the worst time to get one at the beginning of great recession.

Anyways, I taught my self to code in 08-10 and somehow convinced people to pay me to code!

After being unemployed for so long in 2009-2010, I was happy to move down this coding career path cause the money was so easy.

But only in the last year or so I have come to realize (after all the money wore off), I have no desire to be CTO or a coder, I'm having a hard time being a coder, lol.

I'm a entrepreneur, that knows how to code, is my new catch phrase. I have a enough leadership and communication skills I'm just wasting those talents when I'm just a heads down coder.
Why would you need encryption for the Secure Boot chain? Would you not rather sign the base system image for that purpose?
FLocker Mobile Ransomware Crosses to Smart TV
AS/400 still exists actually, under the name IBM i. I know a person who swears by them. It's a fascinating system. There are no files, only persistent objects living in a 128-bit address space. Downside: still uses EBCDIC….
I dunno, I think my parents will like it. One of the great features of snapchat is the ability to caption images with stickers and text. It's a lot of fun.
Plotting the Next Semiconductor Road Map
Supposedly this OS release is supposed to coincide with a hardware refresh.
There are some interesting options coming out. Both of these are fully funded and should be out sometime in the next year.

https://www.indiegogo.com/projects/paperlike-world-s-first-e...

https://www.indiegogo.com/projects/13-3-inch-android-e-reade...
As a sound editor with 2 decades of first doing it for fun and then for a career I don't think that balancing the tracks is uniquely human and immune from automation.

This isn't going to lead to some new golden age of well-produced soundtracks, it's just going to make big bombastic soundtracks cheaper and more common. For a few years everything is going to sound like a disaster movie. Some would argue that we've already got that problem and I can't entirely disagree.

In short, quality won't go up, prices will go down and oversupply will result in excess.
will not be swallowed
I'm going to go out on a limb and say that I actually like this. I'm a huge fan at reducing the number of different ports on our devices, and if we can make them the same across phones and computers even better.

So this means that I can plug in one USB3 hub and my monitor, speakers, microphone, and external storage are now connected to my computer. That sounds awesome. We are back to docking stations without the propitiatory connectors.

However I think that a transition period would be nice. Then again, is anyone going to transition if they aren't forced to?
Why it’s easier to teach maths to Oxford undergrads than kids
Because you can upsell a larger iCloud subscription to your customers using the new built in automatic cloud archival function.
Then use compression server-side. $$$
Another Ad Blocking Solutions Vendor, with a New Approach
Dotenv alternative
I love Dotenv, but I have a difference of opinion on a few things. So I decided to create my own.

https://github.com/austinthecoder/zenv

Feedback welcome!
> Packing bits into phrases is also useful for passwords (https://rmmh.github.io/abbrase/), but in my experience the increased difficulty of correctly remembering phrases from a large wordlist outweighs the additional entropy.

I saw a paper with a nice method for generating passphrases. Unfortunately, I can't find it. (Can anyone help me?)

First, you generate random data with enough entropy for a passphrase. Then, instead of encoding it in a sequence of words that is as short as possible, you encode it in many (say, a million) sequences that are a bit longer. Each sequence thus encode the same data. Now, you feed all these sequences through an algorithm that gives each sequence a score depending on how close it is to being a natural-language phrase. Finally, you present the user with the sequences, ordered by their score, and let the user choose any one of the to use as passphrase.
I for one welcome our new Windows overlords!

Let's hope they pull another Nokia with this, er, beloved company.
They did.

> Users can look up these three-word locations, which have been translated into Mongolian, for free on the What3Words website or app.
The nice thing is that you get quite a bit of middle ground to play with performance. Examples:

* Refresh TTLs that allow for some caching before hitting a DB (revoking).
* Using a Bloom filter to revoke to limit the number of affected users, but also bound memory.
They are on non-US apple keyboards, the US keyboards use the text "alt" and "option" and so on.

I've always wondered why they don't put the symbols on the US keyboards yet use them in the UI anyway.
(Speculation) I'd guess this is so they don't have to solve the hard problem of allowing arbitrary prompts and distinguishing between them (and QC thereof).

This way Apple only need to add a few new prompts like "send a message with $appname to $person", and ensure they work consistently.
Hype Machine
I love 3d touch, and use it extensively. I used a moto x 2015 for a year, and switched back to iphone just recently... couldn't be happier.

The most extensive place I use 3d touch is when browsing... don't use it elsewhere much.
developer.apple.com @2:30 pst
This page has at least 5 different analytics hits in it (Facebook Connect, Google Analytics, Google Tag Manager, MyFonts Counter, and Twitter Button).
I agree. There are a number of times I don't know the correct phrases to dig deep in google. Especially when I started programming.
I just read this: http://psy-lob-saw.blogspot.com/2015/12/safepoints.html

Wow, I had no idea how bad sampling profilers are on JVM. And apparently JVM profiling in general. So collecting a stack trace sample requires a thread being suspended at a safepoint. And a global safepoint requires suspending all threads? Sampler that needs to do that will surely not only miss real CPU time consumer but also significantly alter performance behavior.

Instrumentation is indeed often a pretty bad option as well.

Is it possible to resolve JVM stack traces captured from kernel side (Windows and Linux have mechanisms for this)? That would certainly get around any safepoint restrictions, right?
I've tested many web applications, and around 80% of all applications I've tested contained an XSS of some sort or another, that number drops to around 40% if you only look at stored XSS & XSS in a get request. And to less than 10% when only looking at stored XSS.

Unless you've used cookies with the HttpOnly flag XSS trivially escalates to session stealing. Do NOT store sessions in anything other than cookies with the HttpOnly (and really, SecureFlag) flag set.

Using javascript to manage your sessions only the client side in any way is NOT secure.
You can not consider anything on a VPS secure.

The host machine has it all, anyone who has access to the host can clone your entire VPS at will, RAM and all, what security are you talking about?

(you can't be sure if you rent a physical server either, but that's another topic)

Besides, while the paper talks about extracting RSA keys, nothing prevents extraction of any other kind of data using the same methodology. So even if people with host acccess overlook you, nothing is secure from your neighbours. It's just that encryption keys are for some reason considered more newsworthy. Maybe because once they get access to your VPS via them, the rest is even more trivial.
There's just two buttons. Both have specific purposes.

You can touch the screen to drop the selector, click on which volume you want, and go ahead with using the rocker for that volume selector.

To silence app-audio, I use just: volume-rocker, click on down arrow, click on music icon to mute. That's it.
The way the entire thing was handled was deplorable. I got shadowbanned for posting a link to a BBC article on the shooting, which I only did because I thought it was weird as shit that it seemed like no one had done so yet.
28 kHz is in fact correct, although only in lab conditions:

> The commonly stated range of human hearing is 20 Hz to 20 kHz. Under ideal laboratory conditions, humans can hear sound as low as 12 Hz and as high as 28 kHz, though the threshold increases sharply at 15 kHz in adults, corresponding to the last auditory channel of the cochlea.

(ref: https://en.wikipedia.org/wiki/Hearing_range)
The hack was in 2012. The data recently went up for sale, dredging the hack back to the top of the news.
"I would argue that there are only two ways to view the constitution: 1) it means what it says and if you don't like that, do what the authors did, amend it, or 2) make shit up as we go along. I'm for #1."

And, that's what I'm saying is wrong. You're presenting a false dichotomy. "But, muh Constitution!"

It's boring, and doesn't acknowledge the things that went wrong in all these years of the American experiment.
Herbie 1.0 released (automatically improve floating point accuracy)
"it", according to the post I responded to. Admittedly, it was never defined, but seemed to be used in place of "claims by the few serious scientists who are not waiting for confirmation".
nitpick: iops is I/O operations per second. iops per second is redundant -- would be like FLOPS per second.
Ask HN: What is your job role and what are the side projects you are working on?
The question in itself is self-explanatory. Please mention your normal day job role (backend developer, full stack engineer etc) and what are the side projects you are doing currently. This question is about having insight about what people are doing.
I agree with most of your grumbles.

> Can someone please remind me again why the MacBook is such a preffered machine for software development?

For me, the greatest battery life and trackpad money can buy.
I recently got a 6S. What I really wanted was an SE, but they took so long to release the larger capacity ones that I couldn't wait.
In marshmallow, apps that are built for marshmallow behave like iOS, in that they will install without asking for permissions. For old apps, they will behave like previous versions of Android and pop up a list at install time. Those permissions are granted at install. You can go into settings and disable granted permissions in both cases (with a warning that things can break for old apps)
this is a really great piece of software that is deserving of love/donations. If you've ever wanted a free, supported version of a tool like ida, or a user-friendly tool for assembling/disassembling (radare2 can make use of libraries like keystone/capstone in ways that don't require writing new C code), then you owe it to yourself to donate to, or at least try radare2.
Yet another article advancing a flawed agenda. ugh.
It seems like a bad choice of domain, given the example usage. "0x" will be regularly confused with "ox", and ox.co is a completely different site.
Ask HN: Why should or shouldn't someone do MBA?
And will your answer will be different if a person is from tech background?
Individualizing Predictions of Disease Trajectories
I thought this headline might have been referring to a new YC strategy to invest in fewer startups.

Funny that a curation-focused startup is making its way through the VC/incubator world, which runs on high-volume, high-risk bets ;)
This is a huge feature. I have no idea why Apple didn't include this in their keynote.
This enables an interesting new kind of attack.

1. Attach an attack device to someone’s account.

2. ‘Poll’ the clipboard by pasting every ~5 seconds.

3. If the contents of the clipboard appear to be ‘secure’
(looks like shellcode, bitcoin address, url, etc), quickly replace the contents with an attack string with same datatype.

If you have an untrusted device attached to your Apple account, your local clipboard can no longer be trusted.
I'm using actionhero for the backend. To be clear, I'm not concerned about _sessions_ so much as I'm concerned about authenticating all requests. I guess it's just still not clear to me based on the article and your feedback what the flaw is checking a valid JWT in the Authorization header to identify the user making the request? Other than the relative inability to invalidate sessions (ie, only hacky methods for achieving this)