skysight-inc/HackerNews huggingface dataset:
Let me also address this with some snarky quotes by Lamport[1] (and just add, that having tried what he suggests on real-world programs, although what he says may sound more complicated, it is actually simple):

> Computer scientists collectively suffer from what I call the Whorfian syndrome — the confusion of language with reality

> [R]epresenting a program in even the simplest language as a state machine may be impossible for a computer scientist suffering from the Whorfian syndrome. Languages for describing computing devices often do not make explicit all components of the state. For example, simple programming languages provide no way to refer to the call stack, which is an important part of the state. For one afflicted by the Whorfian syndrome, a state component that has no name doesn’t exist. It is impossible to represent a program with procedures as a state machine if all mention of the call stack is forbidden. Whorfian-syndrome induced restrictions that make it impossible to represent a program as a state machine also lead to incompleteness in methods for reasoning about programs.

> To describe program X as a state machine, we must introduce a variable to represent the control state—part of the state not described by program variables, so to victims of the Whorfian syndrome it doesn’t exist. Let’s call that variable pc.

> Quite a number of formalisms have been proposed for specifying and verifying protocols such as Y. The ones that work in practice essentially describe a protocol as a state machine. Many of these formalisms are said to be mathematical, having words like algebra and calculus in their names. Because a proof that a protocol satisfies a specification is easily turned into a derivation of the protocol from the specification, it should be simple to derive Y from X in any of those formalisms. (A practical formalism will have no trouble handling such a simple example.) But in how many of them can this derivation be performed by substituting for pc in the actual specification of X? The answer is: very, very few.

> Despite what those who suffer from the Whorfian syndrome may believe, calling something mathematical does not confer upon it the power and simplicity of ordinary mathematics.

Obviously, we all suffer from the Whorfian syndrome, but I think it's worthwhile to try and shake it off. Luckily, doing it doesn't require any study -- just some thinking.

[1]: http://research.microsoft.com/en-us/um/people/lamport/pubs/d...
It may be, that Intel didn't plan this as an NSA/XYZ back door - but it doesn't actually matter. What matters is that we know 1) Intel has such technology implemented in allmost all desktops/servers currently running 2) you can access those machines remotely (even over GSM) and perform reads/writes.

Example misuse: somebody can put illegal stuff on your machine and then sue you...

(Intel has marketed this feature for big companies so they can format the HDD remotely over GSM in case laptop was stolen.)
Right, just keep hitting them at random, and see which ones disappear the fastest. But you'd need to crowd-source it, and build an app so people could quickly geo-tag as they apply them.

I can't imagine that putting stickers on utility poles is illegal ;)
That type of attack doesn't scare anybody who works in the Pentagon.
What it has to do with it being Asian is the culture of conformity and group think; this is in stark contrast to Bryan's statement that at Joyent everyone leads and is led by taking individual initiative.
I wonder how big his pay increase is. I actually find all the "reasons that aren't $bigpayrise" crap that people go on with in these personal PR things a bit dishonest. I'd bet it's a very large pay increase. I'd be amazed if he isn't getting paid in excess of 350k Which I think is more than CMU pay.

Yeah sorry to be rude and mention money, I just find it more rude to lie and make pretence it's not important when it so clearly is. Maybe I'm wrong, maybe he's such a bad negotiator it's not a pay increase, maybe CMU pay in bushels of gold? But if it isn't a pay increase, it's possible to say so.
I desparately wish we as a society would stop clinging to the 40-hour work week and working non-stop until retirement. I don't think we live in a post-scarcity world, but we could sure make things easier on ourselves.
They're not doing anything Google isn't doing. Public streets are fair game for anyone with a camera, and that includes the police. It's best if that doesn't change.
I feel that you do not understand, not even the articles that you link to.

> You're just wrong about San Fransisco's population density being low. It is 21st most populated place per square mile in the U.S.

21st is far below 1st. Also, dividing by city is arbitrary and misleading, because a lot of traffic moves across the entire region. As a metropolitan area, San Francisco is 7th in the US, at only ⅓ the density of New York. And the density is even worse when you consider that it is unevenly distributed, and also when you compare to other metropolises around the world. It’s denser than the typical suburb, but it is still not dense enough. This low density contributes to the traffic problem.

I am going to ignore your ad hominem straw man about induced demand. I even linked to other sources that discuss the same issue. It’s not a marginal idea.

> Being more distributed reduces the need to transport water (arguably the single most important resource) vast distances.

Being distributed would reduce infrastructure if you didn’t have to connect them. If you draw your water from a cistern and flush your toilet into a septic tank, then you don’t need vast pipes. That is not suburbs. As far as I know, the typical suburb requires the centralized systems of a city, but uses more pumps and a lot more pipe per capita to bring the water to the residents. So much that the equipment just can’t be maintained using taxable revenue. [0] We need greater density to decrease per capita public expenses.

> Not to mention, suburbs eventually becoming cities (or as populated as such).

That doesn’t automatically happen. You have HOAs that fight to preserve some unrealistic ideal. You have NIMBYs who say growth should happen but it should not happen here. You have zoning laws that make it illegal to put jobs and grocery stores in walking distance of housing. We need to recognize that the suburban lifestyle is an unprecedented disaster, and work to undo that mistake.

> My argument was that the suburbs have access to at least just as much as a city, at a more affordable price.

My argument is that there are other considerations, agreeing with aaron695 that “very high density where people live is the most important thing ever.”

I also disagree with your numbers, and I could play soccer, go mountain biking, and go to one of a huge number of stores and restaurants in one day, without even leaving this city, because it’s not spread out over a vast area. As a bonus, I also avoid trampling the road with a multi-ton death machine and spewing noxious gases into the air I breathe, because I can do all that without driving.

“Affordable” is a weird issue. As SonjaKT has pointed out, the price of housing and the cost to produce it are not directly connected. The bigger issue is that suburbs are not sustainable.

[0] http://www.strongtowns.org/the-growth-ponzi-scheme/
C# and ASP.NET Core. No more IIS server. Instead, built in web server that can be configured via pure C# code. Visual Studio is the most powerful GUI on the planet. C# & ASP.NET is now open source. CNTK is a multi-core GPU optimized deep neural network run via C#.
Where "we" is a group of politicians who want to be re-elected. If longer lines don't hurt them politically, then they aren't going to worry too much about fixing things to make it faster.

There is a premise here that the wait is an issue, but I'm not so sure a long and bothersome security line is a bad thing from the perspective of our political leaders. I suspect (with complete seriousness) that if airport security wasn't a bother, people wouldn't feel safe.
No. Does your comment answer my own question?
Those automatic translations are wrong. The name you cited means "Felix Edmundovich" (or "Felix, son of Edmund")
It's a real shame, because HFS is an absolute abomination. Apple will remain without a reliable, full-featured filesystem for another decade, it seems.
We need to ditch passwords, not continue to proliferate them with sandboxed databases.
Igor Skochinsky (of IDA Hex-Rays fame, among others) has been studying Intel ME for quite some time. He gave a nice talk at Breakpoint summarizing what he'd discovered (slides here [pdf]: https://github.com/skochinsky/papers/blob/master/2014-10%20%...).

Among other things, he finds that ME is capable of running signed Java code which is pushed to the device. Due to the complexity and size of the Java code, it's quite likely to have bugs.

ME is a bit scary partly because it's a totally closed-source and proprietary component of your computer with full and essentially unfettered access to everything - RAM, peripherals, and network I/O. Any bug in a publicly-accessible component would have the potential to do serious damage. For example, a bug in the network stack might make it possible for attackers to remotely own your box.
> "Josh “Mac” MacDowell says he not only has the engine, he has come up with an idea, strong enough the U.S. patent office has given him a patent for it."

Gave me a chuckle.
True. Some of the first copyrighted items after copyright was established in 1790 were charts and maps which are very much like software, ie. follow a procedure to obtain a useful result, (ex. using a map, find out where you are).
The board needs vPro/AMT for things like remote access. If the board doesn't implement those things (and you'd usually know, because you pay more for them), the ME ends up doing...well, I'm not sure what. I think mostly things like enforcing DRM? Still, the machine needs special support on the motherboard and ethernet controller to enable the features that people are complaining the most about.
Why wouldn't it be?

If salted hashing were done on the client side, it means you're actually sending username + saltedhash, instead of username + password to the server to log in.

So an attacker could submit a precomputed or stolen salted hash to be compared against the stored one -- completely defeating the point of hashing passwords in the first place.
The gun is perfect for varmint hunting. It handles anything from a coyote down and I am not sure what overkill means it all depends on the bullet style. Also ar-15 style guns don't have to me .277 they can be higher caliber suitable for dear/elk. Although I agree I would rather have a lite weight bolt action if I am walking and elk hunting alot. The modular nature is great for coyote hunting.
^ This. I love the idea of spending this summer at home with my kid, reminding her to look at her list of interesting activities ... but realistically that's not going to happen.
https://puri.sm/posts/petition-for-intel-to-release-an-me-le...
Of course, on average you'd need to recover the full UBI from the average (not median) person via taxes.
> Lastly, don't waste time ...

From my 12 yrs work experience, I cannot emphasize how innocuous, trivial and prevalent above advise is, thus risking getting ignored. Please don't. This advise is most critical for ones growth (in all aspects).
The later shuttles leave at 5:10, and then we do some emailing and such on the way home...
Creating SSL Certs for Amazon API Gateway Using ZeroSSL and Let's Encrypt
> This is a funny comment, since he keeps repeating through the entire book phrases that sound like ...

Yeah, I know. Of course I meant "things work according to the advises given by the book ..." or something like that. I read the book, and everybody agrees that "it's a great book, but in reality...".
NASA Spots Mysterious Disruption in Saturn’s Ring
https://libreboot.org/faq/#amd

AMD has some rough equivalents to Intel's ME.
> The most efficient fossil fuel-based engines are massive two-stroke diesels

Unless you count combined-cycle gas turbines (also found on big ships and powerplants), which can squeeze above 60% efficiency.
Can we change the title to be not click-baity?
The case against distro packaging:

- Desktop Linux has a small user base. Further splitting it up with different packages for each distribution makes it further a non-target.

- You can only install software cleanly that is packaged by your distributor. No distributor packages software that costs money. Many distributors try to prevent you from installing software with licenses they don't approve.

- If your user is using a stable distribution they will have old software. The distribution might only push bug fixes if they are security related. Users will report bugs that are already fixed.

- Maintainers often have no idea what they're doing, because they aren't working on the project and there are rarely other developers that check their patches. Worst case this leads to something like the Debian random number generator bug.

Distribution packaging for user facing programs has large drawbacks with marginal benefits, which can be mostly broke down to the not invented here syndrome.
Lessons from 13 Years of Tricky Bugs
The Chan Zuckerberg Initiative makes its first investment
Another lame petition won't get the same kind of results as a well connected question. The PR department lives to shield a company from such negative external noise, a well connected question can surface inside the company and be heard by people with the capability to actually do things.
I won't try to diagnose you over the internet from 3 paragraphs.

But please try and take care of the 3 essentials:

* eat

* sleep

* exercise

It might not solve what you're feeling, but if those are taken care of at least somewhat properly, you'll buy yourself more time to figure out what's happening.
Control Challenges
I've been following this technology for a few years, but never got involved in it because it does not solve any problem I have (although it may, or may not, solve others, never seen it solve any real world problem so far).

First, the bitcoin was going to change the world, then well nevermind, it's not the bitcoin, it's all about the blockchain. Then well, nevermind, it's not the blockchain, it's the DAO. Then, well wait, the DAO has it's own problems, but wait, it's going to be fixed and then it'll take the world over.

Is there any end to this?
That's new! Took more tries than normal to register, but that's great. They took so long to roll out even TOTP based auth, I figured it would be ages before seeing U2F.
"At Amazon we will be investing an order of magnitude more resources towards this problem. With data and computers to match this. This is significant leverage. Hence the change."

The research questions will be in the interest of Amazon, which may not align with the public good (though, admittedly, the logic of the university doesn't always align with the public good). He'll get more leverage, but I'd be surprised if he works on the same problems.

How about updating the academic funding model before everyone goes to industry?
>And what should I put to work cross browser? If chrome adds autocomplete when it's off and doesn't when it's set to a weird value, do other browsers do the opposite?

This. Exactly this. Now you have an attribute value that works in some browsers and the exact opposite function in other browsers, and the only way to switch between it is server side rendering based on user agent or javascript attribute value modification based on user agent at render time. No option to have the browser choose functionality based on the markup alone. Welcome back IE6. We missed you. Thank Google for creating more Web Designer jobs!
I'm very surprised that no-one on HN has talked about their experiences of using AMT for enterprise IT management. Aside from the security problems, I've personally never encountered or seen it's use, which makes the ME's inclusion (on all chips, for about 6 years) seem like an odd decision from Intel.
Got one answer to my own question. Waves from the Big Bang would be a big deal in cosmology.
Probably Correct
You don't have to. Libreboot is available for some Thinkpads. I use an X200s. There are businesses that offer Libreboot flashing services or sell refurbished Laptops with Libreboot installed.
> For your concatenated blocks of precompiled code maybe you should have used simple function pointers, and one monolithic precompiled block to achieve the same result like i originally suggested.

That's how the original version was like, but it was way too slow. I achieved eventually about 10x faster performance for typical (dynamic) configurations.
"Oh, the home invasion argument."

The article isn't about "the home invasion argument." Please read the article before posting.

Better yet, simply don't post. You're Australian and the article is about U.S. citizens living in the USA. Here we don't have to lock up our guns at night (and for that matter, some of us don't sleep either!8-)).

Finally plenty of the wrong people wander into the wrong homes in the USA (and many of them are armed).
That's what I was thinking of. Thanks!
Do you write the swagger-json/yaml manually or do you generate it from you server-code ?
If this were to actually happen I would consider it bad news for independent journalism and dangerous for some political viewpoints, even in the United States. Google already owns one of the largest social media platforms: YouTube. Both Twitter and YouTube have pretty large political significance and being owned by the same company could be an issue. Especially as we have seen some persons lose their verification badges (on both YouTube and Twitter) for allegedly being on the wrong side of the political spectrum. The idea of this makes me uneasy.
Considering how the entirety of web development works, you could probably just include both values and then the browsers would figure out themselves which one they want to listen to.
The thing is, it can be both money AND a better opportunity to make an impact that led to him making that decision.

However, it probably feels wrong to write a blogpost and say "I did it for the money". So people conveniently leave the money part out but I think we can all agree that it's probably definitely a non-trivial factor in their decision. It just happens to make more sense to tactfully focus a blog post on the better opportunity at hand rather than the money.
Hacking Facebook Accounts with just a phone number through the SS7 protocol
>Why wouldn't it be?

So that the server never gets any plaintext.

>So an attacker could submit a precomputed or stolen salted hash to be compared against the stored one -- completely defeating the point of hashing passwords in the first place.

You could hash once on the client and once on the server to get the best (?) of both worlds. Really only the server one needs to be salted.
I used to work in a mixed Windows/Linux environment and found what worked best for me was to run Linux via Vagrant, and use MobaXterm (http://mobaxterm.mobatek.net/) for ssh, as it has an X server. That's how I used to use RubyMine and Geany.

EDIT: There's also interesting stuff coming soon with Ubuntu/Bash on Windows https://blogs.windows.com/buildingapps/2016/03/30/run-bash-o...
They can remotely wipe my stolen machines? That's the one cool thing I've heard. How come I haven't received that email in my spam box? Poor marketing attempt if that's what they're aiming for. I'm not running a huge company but they could at least try targeting the SMB sector (I think I qualify for that). I'm against the ME vector up until it's actually useful to me.

P.S. fbi please don't hax0r me for commenting. Actually, go ahead, ya bastards.
Speculatively, I think the reasons here are threefold:

1. Japan has the world's oldest population, which means there's a pretty high level of unfamiliarity with and suspicion of many modern technologies. Fax machines remain more popular than email, for example.

2. Video games are a much larger and more mainstream part of Japanese culture than they are in America, and consequently they're seen as "serious business" to a much greater degree than they are here. It could be that hacking a game in order to cheat is viewed similarly to how we'd view cheating at gambling or professional sports. (Especially if the game is played competitively, and/or the cheat is intended to get around in-app purchases).

3. Very, very strong cultural emphasis on honesty and following the rules. Japan is consistently, by a wide margin, the world's most honest and law-abiding country, and those who aren't are viewed quite harshly. Like all things, this can be taken to extremes.
Have you used the browser on a Samsung Smart TV? They didn't give a shit about that.
Phone Detecting Sensors Allows Managers to Improve Their Businesses
I sure hope so, but the high performance nature and intent of SmartOS is at odds with the low electricity consumption, low number crunching performance of the Acorn RISC Machines processor. SmartOS is optimized for CPU bursting and squeezing as many tenants at bare metal speed as possible, while ARM is designed not to consume lots of power at the expense of raw performance.

That said, since SmartOS is based on illumos, and illumos is designed from the ground up to be portable, running SmartOS on ARM would be cool, since it would open the doors for illumos on embedded devices.

I would so love me an illumos based, iPad Pro-like tablet...
Best wishes to all at Joyent. Thanks for all your work in the community over the last few years, particularly with node.js. Hopefully Samsung will give you the resources and reach to go on to better things in future.
After a long series of small losses, our wheel spinner sinks into alcohol, despair, and eventually suicide.
According to my Russian friend, that evolved because the colon is Shift-6, so it's a bit annoying to type.
Thoughts on the future of academic publishing
Where in the world is it easiest to get rich? – Harald Eia – TEDxOslo
Android N APIs are now final, get your apps ready for Android N
As I toil away on a node based project that is interfacing with Samsung's Artik platform (both the Artik 10 board and Artik Cloud) I finally decided to call it a night -- check HN real quick -- and discover that Samsung is buying the original stewards of node. I almost thought the lack of sleep was putting me into psychosis...
How to set up cron job for Email Subscribers? What cron job setting shall I use
What if one or many "leak" on purpose tons of passwords? We end up forcing people to use password managers (or post-it)?
I'm curious if these have infrared "night vision" as many CCTVs do.

If so, looking for infrared spotlights may be a good idea
Yeah it probably is more than $350k, but who's going to put that on a blog. Oh look how much I am making now. People are supposed to read between the lines and I think the "it was an offer that I could not turn down" gives a pretty good hint in the right direction.
Dark Skies: Classification of nighttime images
The brain does a lot of optimizations and filtering. Like when you look down, you don't see your nose, (even though its in the way).
so it's typically a non-issue— unless you live in Puerto Rico.

http://www.globaltrademag.com/global-trade-daily/news/legisl...
lol, there's so many things I want to say back to you about telling me not to comment because I'm not American.

But you know... I won't.

By the way, the author begins comments about home defence about 1/3 of the way into the article, when you get up to that part. My comment was just touching on the point they just touched on.