skysight-inc/HackerNews huggingface dataset:
> If you've ever thought DRM made no sense at av the tech or crypto level, read that to see that you are right but focusing on the wrong aspect, and that strategically it makes perfect sense (and is even nastier).

Everybody already knows that. But Hollywood can't actually admit to that because it's blatant cartoon villain-style robber baron behavior, so they keep insisting that the purpose of DRM is to "protect content" from "pirates." Which means we have to keep pointing out that it has never done that.

Their actual reason for pushing DRM is why we need to get rid of it.
Then I don't understand why you're deliberately spreading FUD about the PvP.
> Free software developer do what is technically right most of the time, while proprietary software developers have to deal with that kind of market forces all the time.

I'm no fan of EME but you completely lost me there. GCC has been kept monolithic not for technical reasons, but for fear of modularization leading companies to close source their frontends[1]. This has come up again now that LLVM/Clang is gaining on GCC[2]

The decision to avoid a stable ABI or even API for Linux drivers is again driven by non-technical reasons[3] (Linus actually specifically says the reasons are non-technical).

Whether or not you agree with these reasons, I find it hard to call them any more "technical" than the reasons you ascribe to the "rights holders" (also am I the only one that thinks it's silly that the term these companies prefer to call themselves by feels a lot like "landlords"? Who as we all know are universally loved!).

As far as getting better software, it depends. A lot of free software projects end up just doing what the creators feel is interesting instead of things users actually want (cf. Linux on the desktop). I'm not faulting them for that (it's their project and time after all!) but it does sometimes leave users of free software out in the cold unless they have the skills and time to contribute the features themselves.

[1]: https://gcc.gnu.org/ml/gcc/2000-01/msg00572.html
[2]: https://lwn.net/Articles/582242/
[3]: https://lwn.net/1999/0211/a/lt-binary.html
We'd love to help you out with this especially because we are newer to the US - really looking for customer experiences- email me please and we can setup a demo account: robert@messagebird.com
I also really liked Trisha's presentation on this https://www.infoq.com/presentations/Concurrent-Programming-U....

Also want to append https://projectreactor.io/ which uses most if not all of the aforementioned technologies too.
> It means nobody is going to be able to read your data other than:

(Assuming it is properly implemented and doesn't have backdoors, which can only be practically verified if the client is free software).
Since the EME video has to show up in HTML, there may be a way of an extension blocking it. If this is possible, I'd be surprised if it didn't end up as an option in uBlock Origin and friends.
Astronomers find planet with triple sunrises and sunsets
The most recent episode if "fully charged" was also about a prototype electric acrobatic plane:

https://m.youtube.com/watch?v=Xe1g1JrRRkY

It reminded me of Tesla's evolution, where they found a niche where they can apply the benefits of electrics and rethink some basic elements of the platform most notably in the double propellers.
Non-mobile site: http://phys.org/news/2016-07-web-based-tool-drug-safety.html
Great points!

(But IE6 was updated, it's just that companies didn't update their browsers and OS)
Perhaps more relevant to me than the product itself, is the business model, the concept of running your own show, optimizing processes to maximize income and minimizing time spent working.
I don't really like bashing others on why we are better than them. We provide high-quality service on top of being generally cheaper. We are all telco/ tech people so have vast knowledge how this space works and should work. Please email me to try us out, if you are not happy I'll refund you! robert@messagebird.com
You should stop spamming HN with this crap. Thank you.
We will look into this asap!
direct link to the the project homepage of 'microG': https://microg.org/
Best i can tell, what makes a country free is the ability to pack up and leave (if you can afford it).
Let me know what you think about the aquaponics sand setup after reading the research. Edit: here's a link to a comparison of gravel and sand as the biofilter media: http://iavs.info/commercial/sand-vs-gravel-etc-as-a-biofilte...

I've only been running the system a couple months, and haven't seen any problems. Of course any system will need maintenance, but in this case, it's on the order of once every couple years. Here's the relevant link: http://iavs.info/commercial/sand-is-amazing-but-its-not-magi...

I don't have a DO sensor, but I do measure ammonia, nitrates, and nitrites. There were the predictable spikes in ammonia, then nitrites, then a smaller spike in nitrates that you get in a typical aquaponics startup cycle. My pH started out high (~8), and is slowly dropping. It's around 7 now.

Like I said, I know my tank placement with respect to the sun is not optimal. I think the reason I haven't seen algae growth in the tank is because the water is not clear because of the sand fines. The water should clear up once the biofilm/algae gets more established in the furrows; maybe I'll see some algae growth in the tank at that point.
Show HN: A NLP Library for Matching Parse Trees
Thanks! I'm not persé against burning money for growth, it is just different in Europe than here. We are also Dutch, and you know the saying "going dutch" so maybe a bit cheap haha
PGP fills a niche that OTR and Axolotl do not. It provides a bunch of operations that are not supported by OTR (anything that requires signatures that are verifiable by third parties). PGP is used by the masses (package signatures and similar functions), it's just that they don't use PGP for communication.
Win32 uses messages for everything. While Windows does include signals[0], only three are actually used (SIGABRT, SIGFPE, SIGTERM), and in practice I don't think I've ever seen a Win32 program implement signal handlers.

[0]: https://msdn.microsoft.com/en-us/library/xdkz3x12.aspx
Except that the "new" have existed on mainframes for decades...

It really feels like IT is just reinventing wheels at this point, because nobody involved seems to care at all about history of computing.
Movies on TV are already paid for, and it's still illegal to copy and redistribute televised content in some cases (see:Aereo.)
That sounds interesting. What was the point of printing source and scanning it back into computer? Did that bypass the export law back then?
> WebSign does have a patent pending on it (I think it's fair enough to say that the whole system of accomplishing in-browser code signing this way was non-obvious),

Yay, another technology to boycott entirely.
I'm in the same boat. Used delicious for years but switched when it went down for a week without any explanation or assurance that it was coming back
Write some scripts for FreeCAD to export to the right formats expected by EDA software?
robots.txt is not DRM: it can be freely implemented by anyone without special knowledge – and ignoring it does not lead to a criminal investigation.
Direct link to a PDF: http://pages.cs.wisc.edu/~mkowalcz/628.pdf

Date: 1989
Robot's role in killing Dallas shooter is a first
It's too high but only for a tiny minority of people.
But is Fathom supposed to be for annotating your own web site, or analyzing others'? If the former, then I'm truly bewildered, but it's not clear which it is.

As for rel=next/previous, I don't use them because Google makes it clear that these will make it treat the whole sequence like one paginated document in the index, contrary to their original semantics. I'd love if someone could correct me on this.

[0] http://webmasters.stackexchange.com/questions/61573/is-it-ju...

[1] https://www.w3.org/TR/html401/struct/links.html#h-12.3

[2] https://webmasters.googleblog.com/2011/09/pagination-with-re...
The video of a line of red dots moving northward reminded me of Cherry blossum front (桜前線) in Japan.

https://en.wikipedia.org/wiki/Cherry_blossom_front
Tsuru open source PaaS puts developers first
They never said anything about batteries and efficiency, the primary constraint holding back electric aircraft.
Boeing to Test Non-Stick Paint That Shields from Icing
There should not be long strings of commits that focus on features. Continuous development means continuously looking after developers, too: intersperse commits that remove code, increase documentation, update versions of dependencies, fix ancient bugs or whatever else eases maintenance.

Test suites should not just be thrown together, where every test is a "diff" of a giant log file! You do NOT want to be constantly fixing “tests” that “fail” due to trivial differences. Ensure that your code can completely expose all relevant state for one feature so that you can write precise checks and ignore any other output.

There should be no compile-time options (like #ifdef) that are not automatically built before every commit. Developers change things, and they have to know exactly what can break by doing so (especially with languages like C++, where a tiny change can cause true chaos). Put another way, don’t set yourself up to discover problems weeks from now at the worst possible moment; build defensive code and infrastructure.
I don't think message queues and signals serve the same use case. Signal could be used for out-of-band communication.
Currently the thread's title has been modifed, the title of the Gitbook is An Introduction to Elm.
> I don't understand why people think the Web needs Hollywood's video content. Let them build proprietary set top boxes or whatever, who cares if it's not in a browser? It's certainly not important enough to undermine the Web's principles of openness, interoperability, free access to knowledge, etc.
> As far as I see it, EME would only be a loss for the Web and browser makers like Mozilla; in a similar way to, for example, losing the ability to "view source" would be a loss.

The flaw in this line of reasoning is talking about it in the past tense and referring to “the Web” as if that's some central authority distinct from the browser manufacturers which can dictate terms. EME has already shipped in Chrome, Safari, Internet Explorer, Edge, Firefox, and Opera. The alternative was something like Apple, Google, and Microsoft hammering out an agreement privately and leaving Mozilla and possibly Opera out in the cold, stuck with either Flash or slowly bleeding users to a browser which offered a better experience.

Look at Netflix's support matrix now and notice how many people can now play movies without needing to install anything:

https://help.netflix.com/en/node/23742

You're going to have a really hard time convincing most people that this is worse than the previous security, stability, and performance disaster of using NPAPI plugins. The vast majority of users think it's a plus that they can just search, click, and play without having to use a separate device or player application — how are you going to convince them that this should not be allowed?

Note also that this does not prevent the use of view source on netflix.com – only access to the decrypted video stream – and should any of the extremely rare browsers which you listed (several of which don't even support images or video of any sort!) decide they too wanted to support it, there's at least a standard process.
Here's an excerpt of what we send:

Before you make your decision, please read the following:

The OwnLocal Engineering team is transparent. We want to make sure you have clear expectations about our hiring process, so we've outlined for you. If you are unable or unwilling to complete our entire process, that's okay! The last thing we want to do is waste your time, so please let us know.

Our hiring process consists of six steps: application, phone interview, project, meet and greet, on-site technical & culture fit interviews, and finally an offer.

Phone Interview

The phone interviewer will ask about your background, recent projects, and ask questions related to the skills we look for. We’ll give you time to ask questions too.

Project

The project is a small application related to what we do at OwnLocal. You’ll work with mocked or anonymized data in the same format as our real data.

Meet and Greet

The meet and greet is not a formal interview, it’s a chance for our team and you to get to know each other. We hang out for an hour, ask each other questions, and discuss our interests.

If you’re not local we’ll do a video call instead with 3-4 people.

On-site Technical & Culture Fit Interviews

The formal interview is two parts. The first is adding an additional feature to your project with one of our engineers. This allows us to evaluate how you work with our team. The second part is contingent on the results of your technical interview. If you pass the technical portion, we'll ask you to stay for culture fit interviews with people from different teams.
The unspoken subtext is, of course, "as simple as possible while still adding business value". For example, there may be external constraints (contracts, regulations) that require more convoluted code. There may be certain business situations where there just has to be complexity.

In these cases, we should strive to understand:
* the complexity and the sources of it
* how the complexity will change, and how much (as best we can, as predicting the future is hard)
* what, if any, of that external complexity needs to be in the system we're building, and what can be pushed into human hands
* how best to encapsulate that complexity so it doesn't spill over into parts of the system where it needn't be

It's all well and good to say "keep it simple", but that can be difficult when there are external forces that are saying "the system must do X when Y, A when B, and C when D, except when X. Oh, and if Y then C, except when A", etc,etc.
4 Pillars of Social Capitalism Drive Good Business
MacDrive 10.0.3.15 Crack and Serial Number Free Download
http://www.ownlocal.com/about/jobs/
The known price is okay for nearly everyone.

The actual price is nearly always much higher than that. Over centralization and breaches of privacy have insidious downsides that are hard to assess. Plus, they create systemic risks we fail to take into account because Tragedy of the Commons.
Can someone explain how the stacking on top of existing crypto works? Is it redundant (aka double)?
Does anyone know the details behind what happens to the thread-based server at 11:30? The response time for small requests "drops off a cliff" due to a single large request, apparently due to "the implementation of the GIL"?

Compared to the simple thread-based server, the generator-based server presented in the second half of the talk avoids the above problem. Does the generator-based approach have any other advantages?
Assets are worth more to Venezuela than anyone else is willing to pay. In case of defaulting, creditors can takeover those assets cheaper than they could buy them otherwise.
> I don't quite understand the ideological bent that EME corrupts an open standard, but the same result from NPAPI is somehow less objectionable?

The same result from NPAPI is the same objectionable. That's why NPAPI is deprecated.

There shouldn't be DRM in web browsers. Any DRM of any kind. If Hollywood then wants to only distribute movies via Comcast and not the web, let them. They'll lose a large revenue stream to spite themselves, smaller studios who use the web anyway will get a large uptick in viewers on mobile devices and PCs which will erode the big studios' power, Hollywood will get pressure from all sides to support the popular platforms anyway, and it doesn't even matter if they don't.

People aren't going to stop buying iPhones just because they can't watch certain feature length movies on the 6" screen.
> With the plethora of prep material available for past several years, the bar for interviewing has just moved higher and higher at good companies. If you look at G and F (and some others), there is no way you can get away with just knowing the basics of trees and binary searches. It just takes time.

This is so idiotic. Asking about binary searches does not identify good candidates unless they're going to be doing a lot of binary searches.

If someone asks me stupid CS 101 questions in an interview it's a red flag to me.
You do not have to phase out any kind of compatibility layer, if your implementation is forwards compatible. Implementing protocol negotiation and extensibility serves this purpose. Examples for forwards compatible systems are HTTP (upgrade header), XML (namespaces), X11 (extensions).
Seriously that's exactly equal to FUD.

In any case I am not saying that everyone should use iOS.
I thought this is about a search engine.
You don't want to pay the ultra-high taxes and social security in Austria. While corporate taxes are ok, they went berserk with personal income.
Amazon's Chinese Counterfeit Problem Is Getting Worse
If neither Samsung nor Apple are shipping a phone that can watch Netflix, one or the other has a huge incentive to be the one to sell a phone that does.

As for the viability of independent content. The last decade has been a damning indictment of that argument. Between high quality digital cameras and YouTube, it's never been easier to release independent content into the world. Yet, what rocketed YouTube to popularity? Being able to watch the Daily Show without paying. Same thing with games. With open source game engines and Steam, it's easier than ever to release independent games. Yet, companies like EA with borderline abusive customer practices are taking it in with Call of Duty 17.
Vice article: https://motherboard.vice.com/read/over-100-snooping-tor-node...
Technically you don't have to distribute through Mozilla, just submit for signing. While it's true they remain a gatekeeper it's not as bad as the IOS app-store.
Now you're reaching. Read the accompanying story for more information. This is a widely recognizing problem.
One more thing to add.

We've very picky. This year we've hired 1.3% of people who applied. It's not like our process is easier than the pointless ones others use. I'm sure we lose some good people along the way but at least we're not filtering for irrelevant criteria.
You can make any change you want, you're the boss after all. But if you're currently seeing 'more work than you can handle' I'd suggest a quick road to an improvement is to simply raise your prices until you start seeing some rejects based on price.

That way you can make a higher jump-off point in case you do decide to go the agency route.

Good luck, whatever you choose!
If you make a decent salary, expect a hard 50% to go to the state. No reduction for marriage or children.
Bitcoin Halvening Live Stream Party
If you live in Vienna you do however get to enjoy the highest quality of life in the world [1]. And not just this year either. Vienna has kept the title as the best city to live in for several years. Also, you don't have to pay hundreds of thousands of $ to send your kids to college.

1: https://www.theguardian.com/business/2016/feb/23/vienna-name...
Twitching on the floor... blinky blinky cursor, is there no way to make it go away..? looks in the feature list. Went back to 4.
@zardeh Totally agree in that adding friction is bad. At Rhodecode, we tried to eliminate it, by creating a dedicated page for contributors (https://rhodecode.com/open-source) and allowing to login via GitHub / BitBucket.

One more point: although the contributions are not made for the recognition alone, a bit of it never hurts. We ended up with a badge system for https://community.rhodecode.com , where code contributors get rights to moderate discussions (since they ARE the core users of RhodeCode).
Why are American cars seemingly less reliable than Japanese cars?
>a truncation error on a cast of a floating point value to a 16-bit integer played a crucial role in the destruction of Ariane 5 flight 501 in 1996. These errors are also a source of serious vulnerabilities, such as integer overflow errors in OpenSSH [MITRE Corporation 2002] and Firefox [MITRE Corporation 2010], both of which allow attackers to execute arbitrary code. In their 2011 report MITRE places integer overflows in the “Top 25 Most Dangerous Software Errors” [Christey et al. 2011].

Wow, that's more than a little enlightening.
I half checked before making my other comment and didn't find anything.

A second look reveals media.eme.enabled in Firefox, so it's already possible to turn it off.
And if neither Sony nor Paramount are showing movies to customers with iOS or Android devices, one or the other has a huge incentive to be the one to start, even if it means no DRM.

And there are a lot more little studios than there are browser or OS vendors, so there would certainly be movies available. Which would put pressure on more studios to make movies available, which would put pressure on the remaining studios to not abandon a proven revenue stream etc.

I'm also not sure how the argument that people will pirate Hollywood content rather than watch independent content on devices that don't support DRM is supposed to improve Hollywood's bargaining position. It's pretty much the pure distillation of the point that offering content without DRM will reduce piracy and increase revenue.

And "companies with abusive practices are very profitable" sounds like the argument for platform vendors restricting the abusive practices.
For starters, nix and guix have the same security model, and it is remarkably similar to the old Unix security model. You can put your installed apps either in root-owned or in user-owned repository, so that might be an improvement over root-only package systems. (Nix also experiments with containers, but it's not perfectly isolated yet, and I believe it is targeted at docker-style management, not GUI apps.)

They don't have the same goals as Flatpak (aka xdg-app) / snap / AppImage. Those are targeted at GUI apps, with sandboxing guarantees (except for AppImage), and ease of installation (read: you don't have separate instructions for each Linux distribution).

Flatpak focuses on granular control through permission prompts à la Web apps. Snap focuses on automatic transactional updates. Sandbox-wise, they both use cgroups and namespaces. AppImage doesn't: it is simply a format to produce cross-distribution standalone executables.

(Note that snap doesn't just target GUI apps, unlike Flatpak / AppImage. It also targets OS- and kernel-level packages.)
>without EME how would movie studios agree to letting you stream their movies on Netflix?

They'll agree to it because they need the web to survive. Services like Netflix are the future of media distribution - physical media like DVDs and CDs are going extinct, and movie theaters are dying off. Mass media needs the web, but the web doesn't need mass media.

But is DRM really containing piracy? In most cases, no. What stops people from pirating content en masse is the existence of convenient, legal streaming services and the general disposition of most people to want to avoid breaking the law. People will tend to prefer legal services if they're convenient and inexpensive, even though piracy is free.

So, the pirates are still going to pirate, and DRM of any flavor likely isn't going to stop them. Copyright owners are going to have to put up with it because every distribution model other than streaming over the web will probably lose them even more money than piracy will in the long run.
It's a bunch of users.
This is pretty simple: The results from the two key exchanges are concatenated and hashed. The result is used as a TLS session key.
The idea is then that in order to attack this an am attacker would need to break both key exchanges. Thus even if one of them is insecure the combination still stays secure.

This is a well known method, but it's rarely used. Usually we are confident enough in our algorithms and most people don't see a need to combine them.
Talent Search (Israel's shortage of engineers)