skysight-inc/HackerNews huggingface dataset:
>It's simple: make computers secure enough that connecting one to the net won't imply being hacked within a few days

It's not really simple. It's actually complex and having a general purpose computer be hardened enough for non-geek homeowners not to screw up (social engineering, security warnings fatigue, etc) is possibly an unsolvable problem.

If RSA SecurID whose very business competency is security can be hacked[1], the homeowner running Dovecote/Sendmail/Qmail/etc on Linux or Linux container has no chance at all. If uber-techno-geek Mark Russinovich can get infected with a rootkit[2], the average homeowner has no chance.

One could supposedly burn an embedded chip with email software (a dedicated "email server appliance") that can't be hacked -- but that also means it can't be updated. Email technology evolves (cleartext email --> SSL email --> next tech is ???) Also, if a vulnerability is discovered, the homeowner has to buy a new email appliance. If you make an email server on FPGA than can be flashed with new firmware, you've now re-opened an attack vector from social engineering.

>Re-enable mail servers to be run from home connections,

If you're talking technical issues such as ISPs opening up SMTP traffic on port 25 for residential internet connections, that's not really the problem. The real issue is the social dynamic of trust which is affected by bad actors and spam. Analyzing it through the lens of "technology" disguises the true problem. The puzzle of "trust" happens in a layer above SMTP/25.

[1]http://bits.blogs.nytimes.com/2011/04/02/the-rsa-hack-how-th...

[2]https://blogs.technet.microsoft.com/markrussinovich/2005/10/...
That's the A in ADSL for you...
Crud operations using angualr js and web api with bootstrap
Show HN: Redesigning the Pulse CMS site
Well done. If you are happy to expand further on how you managed to set aside the 7-8 months of time on this I'd be interested to hear. For example did you do consulting on the side or something?

I want to do the same thing but I don't really like consulting and I'm afraid of burning up all my savings.
Quite often nowadays devices have BT support but also offer a "dongle" or usb connection point as well (in case your computer doesn't have BT).

It's a solved problem I believe since BT LE (low energy) I believe. Now it's just a matter of market adoption.
France releases terror alert app ahead of Euro 2016
Freedom of Panorama – can we be satisfied with only non-commercial use?
That's why Webextensions is coming out.
https://vpn.ccrypto.org/

It's plain and simple OpenVPN made by nice people, and it's only 3€/month.
It was actually a voice alert. I'm not making any judgement about its appropriateness.

In fact by the time it arose, the aircraft may already have been in an unrecoverable dive (or whatever the word is for rapid descent while stalled), I don't remember. So it's not a primary cause of the accident.
Sure, to an employer who goes to employees and says "Hey market value for this position has gone crazy in the last year, here's a raise to bring you back in line with that" without prompting. I haven't met them yet.
The New ASUS ZenFone 3 Is a Perfect Competitor to Apple iPhone
I've used in the past and it's actually no distraction at all, it's something you do on the 1st day of the month and forget about it, doesn't take more than 20 minutes in total for a whole year (to number pages, write the calendar and all).

Surely it doesn't distract at all from the core of keeping tabs on what you're doing and in the day-to-day usage.
I don't understand why this function is needed if the search engine performs its purpose. Shouldn't searching on any of those symptoms return results that suggest the possibility of pancreatic cancer? As designed, it returns those results to the very person with the most vested interest in both the results and their own privacy.

How is this project anything more than "other people snooping around in my search queries," or any better than simply tuning the search engine to highlight those results more if they are believed under-represented?
I have been looking for a solution to the same problem - short projects with no long term commitment for some side income.
Maybe this is useful - CodeGophers: https://news.ycombinator.com/item?id=11663869
A Water World Would Be the Ultimate Surfing Spot
I'm not being snarky. I saw several patients with LVADs on my cardiology rotation in medical school. As far as I know they are the only patients exempt from CPR if they have a cardiac arrest, although device failure should be the only reason for this.
Looks great. I learned some years ago that mosquitoes can't fly in more than 2.5mph wind so I just put a box fan outside on low and it works!
HideIPVPN and Avast SecureLine.

I use HideIPVPN for their European servers. And I use Avast on my phone to automatically get on VPN when I am on certain Wifi networks (it does SSID based connections).
NordVPN, outside of US jurisdiction and (claims to) does no logging.

The service used to be really spotty, but they really stepped it up lately.
A better way to frame the support is in how the US defeated Germany and Japan and then helped them economically, in order to get them back up and prevent too much resentment. First and foremost Britain took no responsibility when they decided it's best to un-occupy the region, allowing the recent conflict over the same patch of land a lot of previous blood was wasted for before. Also, let's be fair and mention how much support (like Japan or Germany) the new state has gotten from the West and used that to reach where it's now. There's a difference between a regime supported while under sanctions and limited I/O ports and another that's supported freely. I'm mentioning that before anyone says Palestinians were supported from the outside as well.

Regarding Israel's (the regime) support of the west bank and gaza: it's more like a prison where, despite the inmates' violent behavior trying to get out, you must support them because you're holding the key to their cells since the victory in the war. Is it right for either side to repeatedly reach out to violence as a bargaining chip? No, it's not, but not every tribe of this world subscribes to Mahatma's strategy. Well, the Norwegians did successfully when peacefully opposing the German invasion, but again, different populations act and think differently.

I don't pick sides in this debate, but it's important to put things into perspective. Yes, other nations may have decimated them. Yes, both regimes have a history of undiplomatic approaches to finding consensus. No, Israel (the regime) doesn't support them out of good will.
I used Cloak but moved away because:

1) There was no real interest in expanding the list of exit points.

2) It seemed to protect only http/https traffic.

3) The whole operation felt like someone's "passive income" business (although, to be fair, the owner responded fairly quickly and honestly when I queried him about other stuff).

To be fair, their OSX client tries hard to be transparent. This approach falls apart in some cases (i.e. some captive portals), but feels very smooth when it all goes right.
http://reddit.com/r/forhire is full of the latter.
How MittMedia achieves its own Instant Articles and escapes adblockers for good
Beginner's guide to Git hooks
Two things as the author said: ease of use; distribution channel with 1+ mil visitors. The GitHub system is just really weird. Makes sense when someone knows Git and/or goes through GitHub's tutorials. Going to SourceForge, I currently see a big, green, download button to immediately get the bundled app for several OS's plus files right next to it. No odd labels tied to last commit or anything. Just the files. If project owner side is as easy, then there's a definite advantage for people that want to set up a hosting and distribution channel without lots of trouble.
What's the killer app?
Why Nest’s woes are typical of the smart home industry
They do "broadcast" where you shop (if someone knows where your clothes are from), what kind of job you have, your social class and many other informations about the person.
Does anyone know how the IT sector is in places like Dubai? I hear about a lot of need for skilled programmers there, but it's hard to glean insight from Europe. Anyone with first-hand experience?
That's why I felt that reputation should come from status/community, as a developer I don't want to be untrustworthy with my university/oss/friends/peers and as a employer i want to be able to exert social pressure on the developer in case things don't go as expected.
I remember when looking for a new job was considered bettering yourself. Now you are labeled as one of those assholes who wants to be paid for his work.
When I read the article in the beginning, I thought he was going do linear regression, later I believed that it was going to be logical regression. In the end, it was classification with clustering.
The thing that I feel is relevant is: "The risk is borne by the company selling it." That risk means that they have to give you a very bad rate to cover their risk and still make a profit.
With a Tontine the risk in the return is borne by the individual who can therefore share in the upside as well as the downside.
UK Government Extends Voter Registration Deadline After Website Crashes
Transit Nerds Get a Handy New Tool for Easily Turning Data into Apps
Peripheral Veins are not pulsatile (near the heart, they have a complicated waveform).
Peripheral pulse is arterial.
http://postgresql.nabble.com/working-around-JSONB-s-lack-of-...

Of course, that doesn't mean indexes never help. See for example http://blog.2ndquadrant.com/jsonb-type-performance-postgresq....

I guess the workaround would be creating indexes on computed columns that query from the json data, together with changing one's queries to use that computed field. For example, with a json column storing names in various places, a computed column could collect all of them in an array. An index on that computed column will have good statistics.

Bottom-line: if you want your queries to run fast, you will have to tell your store what kind of data you have and what kind of queries you will run. Otherwise, there's little the store can do.

Having a traditional database with various constraints is a way to give that information. With json columns, you may have to do it in another way (for now).
If you use ncat you can even get TLS support.
In such a scenario, none of the apps "own" the data - the DB is a primary source of truth and consistency is enforced there instead of relying that the code in the many apps will match.

Application logic can undergo active changes and refactoring without changes to the data permanent storage, indeed, a 1-to-1 correspondence between DB and application data structures isn't expected. It's just as with backwards compatibility with file formats, changing the application version shouldn't require incompatible in-place changes to the backing data persistence layer - you can need to add some new features, but the old version of the app should work fine with the updated DB.
SPA is applicable to arbitrary services - not just SSH. Essentially it is a lightweight UDP authenticator, and it can be applied to commercial VPN's, webservers, or anything else. Achieving asymmetric costs on attackers is easily achievable for many such services.
I've added support for the 'SameSite' attribute in PHP here, in case anyone is interested: https://github.com/delight-im/PHP-Cookie
Zapty Software Review: Overview – Features – Pricing
100 years of global aging, in one GIF
An Introduction to Signal Smoothing and Edge Detection
My point was to say that it doesn't matter what these guys do. The web became centralized because that was expedient, convenient and we could pay someone else to do the work. Anything that doesn't have these characteristics will not replace the centralization.
I thought much the same thing. The price and returns of the annuity assumes that some people will die before life expectancy, and others will die later. I don't see what's unethical about that.

There are 3 big problems with pensions. Firstly, people contribute too late, so they don't get the benefits of 50 years of compound interest and stockmarket booms. Second, many companies mismanage them - see the current Philip Green at BHS debacle in the UK for an example. Thirdly, too many people don't contribute anything at all (for whatever reason), but still need some kind of income in their old age.

I don't see how tontines get round any of these problems.
تراخى مسئولي جهاز القاهرة الجديدة حولها الي عشوائيات – وكالة انباء الشرق العربي
Doesn't the third sentence in the article you linked to answer your questions?
It is also a very strong motive for murder. I wouldn't want to go into such a deal with a stranger who "wins" a very large sum of money when I die...
VyperVPN has always been good to me and I've never read anything bad against it, anyone had bad experiences I should know about?
> ...better integration of women into the workplace should raise a country's birthrate.

Why is this? It seems a bit counterintuitive to me.
It's pretty easy to use... until you have to normalize data and query across one or two joins. I've been forced to build with mongo for the past few months (still not sure why) and I can't think of a single valid use-case for this rubbish.

If you need denormalized/distributed caching, Redis does a good job.
If you need to store some unstructured json blobs, postgres and now sql server 2016 can do that.
If you need reliable syncing for offline capable apps, you probably want CouchDB.
If you need real time, use Rethink
Obviously, relational data belongs in a relational database.

I think the problem is that all of these databases do one or two things really well. Mongo tries to do all of these things, and does so very poorly.
Tecniche seo per local search
thanks for the link!

I feel like I wouldn't trust the devs there, unless i can verify/get to know them physically outside it would feel like throwing money in the wind and hoping it works
[video] Beers with Engineers – Episode 02 with Michael Webster
S&P 500 Automated Trading Using Machine Learning
New tool lets scientists identify 1000s of genome errors in many people at once
I wouldn't call a JIRA ticket good documentation.

While I agree that it's good to know the limitations of the tools you chose those limitations should be clearly spelled out in the documentation.

I don't think most programmers have the luxury of learning all the voodoo and lore that surrounds MongoDB from JIRA tickets and blog posts.
No internet for Singapore public servants
AirVPN - https://airvpn.org/

- claims to be "operated by activists and hacktivists"
- uses OpenVPN
- GPLv3 client for many platforms
- accepts Bitcoin (or PayPal, Credit Cards, ...)
- has an API
I usually SSH tunnel to my server at home or to my 5$/month Digital Ocean droplet.
I use the following OpenVPN docker container on my homeserver: https://github.com/kylemanna/docker-openvpn

I then send all of the logs to Loggly and get notified anytime someone connects to my OpenVPN server.
A skiplist array is the proper structure to use. A linked list is never the right structure for a local block of memory.
Lego ULTRA AGENTS на пк
NLLib is ostensibly open source, why not improve it? Was your final solution too specialized?
How do you find the freelancing stuff?

I get tired of having to deal with people pretty quickly so I'm a bit worried I couldn't do it.
>I can copy your knock and get access,

Replay attacks don't work against proper port knocking.

Take for example, knockknock-daemon. It sends just one SYN packet where packets IP and TCP headers are encrypted request to open a specified port. Port is closed after connection.

https://github.com/moxie0/knockknock/blob/master/knockknock-...
Microsoft makes a Bluetooth keyboard that is ok. Not great, but there aren't many options. Dell makes a Bluetooth "travel" mouse that is actually pretty good. A little small, but lots of buttons.

I've also found that many proprietary dongle keyboards work over USB-OTG on Android phones.
"256 colors ought to be enough for anybody"
Hmm, this seems to be the exact same PCB mentioned in this post (and with the same module). Routing the PCB isn't really the hard part, it's mostly figuring out how the pins need to be connected. The datasheet is pretty long, but I'll buy a bare module now and try to get it working.
Standing on Distributed Shoulders of Giants
Does it become less "stable", or just much higher in speed of detonation? I don't remember reading any accounts of these airbags going off when they shouldn't have, just bad results once the system triggered them.
Not at all - it uses closed-source/closed-hardware baseband module, so no one really knows what is happening inside. This project is more of custom board, keyboard, display, OS, UX around readily available solution.

No successful or legal opensource/openhardware solutions exist right now :/ This was one of main problems with OpenMoko opensource phone.
nuda proprietà
On all 4chan boards, webms have pretty much completely replaced gifs.
I get the impression that you don't know who Aswath Damadoran is. You should look him up - he's one heck of a good writer.
The History Behind the WigWag Name
It can export as a H.264 video, with or without sound.
No, Bloomberg, I will not turn off my Ad Blocker.
I think I've done things in most well known programming languages that are quite far from basic - from dynamically typed languages up to static typed functional languages. And I'm not a fan of dynamic typed languages.

But I still stand behind my opinion from the parent post: Go's type system is quite primitive, but in combination with the typical way of doing things there it is sufficient for most cases. Whereas other languages need generics a lot more, especially functional languages where monadic types are often used or languages that don't provide builtin list and dictionary types.
Which is the VPN scripts do you use? Thanks!
Is this the number 1 key to get your first 10,000 customers?
Prestashop 1.7 beta preview – NemoPS
As someone with little experience in this area, I appreciated the step-by-step examples of cleaning and transforming the data into a suitable vector format for the training step. Very nice!

Is it typical that ~2000 samples (1000 leads, 1000 non-leads) is "enough"? I see that accuracy on the training set was ~86% and that the results are "starting to become useful for our sales team", but I would have thought more samples would have been needed. (I guess that since you're always collecting more real-world data you can continue to train the model and so it should get better?)
Swift algorithm club
In that case you can start with postgres and stuff your documents in a single json column, accessing it just as you would have in mongo while you're prototyping and don't care about speed and indexing, and when you're done, you can just change that table to a more proper structure without changing databases.
http://www.frostvpn.com/

When I signed up they had a 99 cent a month deal going on. I'm not really concerned about privacy. I just needed something to help with the connection to my dedicated server that runs Plex that is hosted with Hetzner.

Comcast here has poor peering to Hetzner and using a VPN solved the problem.

They have a lot of servers all over the world and they few times I have needed to open a ticket I got a reply in less than a hour.

I also have a Droplet on D.O. that can act as a VPN. I switch to that if I am doing anything sensitive.
I guess this is a question of how usefuly, deployable the prototype shoukd be. Why not just have an in memory object cache, literally a hashmap, for your dal? If you're composing app level code, you don't need to know what the backend does to your data. You could even create a simple method to populate the data at app boot in your in the dev profile. When you figure out the storage requirements and finalized model, build your db.

This would save you time on picking the db, schema changes or even migration changes in Mongo. You don't have to worry about bad documents from an earlier app revision.
The federation idea seems to be the best way to create decentralization . The problem is that most people working on a type of website usually combine forces and host together. ThePirateBay and Libgen have come the closest to being federation-like. Tons of mirrors and different host names with the same source code and content that is meshnetted across the federation. The only thing that tpb isnt a good demonstration of is divided private data. That is the motivator for most decentralization proponents
You're replies in the comments are rude and borderline fanatical in tone. There are two classes of constraints: one being 'this string shouldn't be longer/shorter than x' or 'this value should only be between 1 and 10'. The other kind is 'on the first Tuesday of every month only during a full moon can this record be deleted, and only by a user with permission X'.

The first can easily be modelled in SQL, the second should be modelled in your app. The first are not arbitrary, the second are. Not hard to comprehend mate. Just because SQL can't model all constraints doesn't mean you should throw it out the window and reach for mongo.

Comments like 'none of you understand this because youre not programmers and therefore know nothing' is incredibly insulting. I'm of the opinion that you know nothing, and if you're happy knowing nothing with fellow mongodb users then so be it. Just keep your nonsense away from me thanks.
IMHO, Handling exceptions well (not too course grained, not masking problems, etc.) takes just as much work as simply dealing with each possible error as it turns up in the go fashion. Lazy programmers are going to mishandle exceptions too.
Is making it externally invisible not a form of obscurity though? If so, why is this not frowned upon as well?
Can you give a use-case for such a constraint that can not be avoided by a better data organization? I'm not sure why you would deliberately design your data with constraints based on other row contents.

Also: how do you enforce such constraints with MongoDB exactly? If the answer is "do it in the application", then your answer applies to relational databases too.
The US is not the dominant engine of global innovation and Europe will overtake it
Native HTML Apps with Xamarin
I don't think I have anemia so maybe it is just GERD, but I will mention what you said on my next visit.

I really hope you are better.
Stanford Hacking 4 Defense (H4D) – Final Presentations
Not surprising considering my boss who was born without a heart.
The implication here is corporate malfeasance which is exactly what was displayed. How many design reviews have you been present where an engineer said,

“If we go forward with this, somebody will be killed”

At that point, I'd lay my badge on the table and resign then and there.
Questions that come to mind:

* how long does the battery last compared to other types of phones?

* can you tether a laptop to it for data access?
Cloud service doesn't really replace DBA.

Yes, it will help you to cover cases like where the server phyically explodes, but that's basically irrelevant, most problems where you need a DBA are caused either by data corruption caused by application code or developer, or performance issues caused by DB structure - in those cases the cloud platform won't do anything for you, they just host the server. They can restore backups, do monitoring and tune the server, not your particular app/db structure - but all the big problems are there.