skysight-inc/HackerNews huggingface dataset:
> I don't think the math is on your side. As the defect rate approaches zero, there are diminishing returns to pushing it lower. On the other hand, the attack surface effect becomes overwhelming. Addressing both at once will be far more effective than concentrating on one or the other.

Huh? That's not how it works, is it? If we want to minimize X * Y and we currently have X = 50 and Y = 5, it's much more efficient to focus on bringing Y down.

> Once we've picked the low-hanging fruit (including perhaps a provably correct sandbox), then we can start thinking about how to prove the correctness of random applications.

"low-hanging fruit" tends to mean doing unprincipled things that can't be generalized / don't contribute anything in the long term, right? My view is that there's limited value in lowering the rate of security flaws in ways that aren't on the path to bringing it to zero. Getting it to zero will be valuable; halving it isn't really (there's some economic value in reducing the frequency of breaches, but not enough). So I don't think ad-hoc countermeasures are worthwhile.

To the extent to which a sandbox can be written in a principled/provable way it will be valuable. I'm not at all convinced that a general-purpose sandbox is possible, but that's a different question. (The techniques of factoring a program into pieces with the minimal capabilities that they need are valuable, but I think this needs to be done far more holistically than is possible with a sandbox; the security design needs to reflect the program design, because whether particular operations are safe or not is a function of the application-specific context. But this is very much speculation on my part)
We're definitely working towards that. Right now we don't have the capacity to extensively prepare people for interviews to reduce the variability there - but should get there soon
Harness Power from Ambient RF
A lot of that "progress" in web technology should be rolled back ASAP and just be remembered as a cautionary tale and/or used as a bedtime story for scaring little children.
honestly facebooks messaging app is annoying and slow. facebook might have a lot of users but how many of those use messenger? myself i install t and then quickly deinstall it. messenger has more to fear from apps like this than they do from it. whatsapp is good though.
Facebook Messenger Intros Instant Articles Preview on Android
Lowlypoly Interview: Architecture and Hobbies That Lead to Becoming a Game Dev
There are loads of reasons to hate ISIS. Creating a solidarity movement isn't really one. And it's not much of a solidarity movement if you are slightly the wrong religion.
That would only work if a was itself a list..
- No signalling effect

- Quick and reliable disclosure of and turn around on vulnerabilities
My understanding is that for climate science, a lot of effort is spent to debunk claims, by well-financed groups who will publish without independent peer-review but with a clear goal in mind. Allowing those groups to access the same data means that the researchers will have to spend a lot more effort explaining why those claims are unfounded. That means the researchers are not really encouraged into sharing the data.

There is a more general issue in science or any data-intensive practice (Google ranking is another example) where the argument “People should be allowed to cross examine raw data” fails to acknowledge that ‘People’ generally do not have the ability or know-how to, and those who can generally have interested financial backing. In many cases, it is positive (Open Source Map is a good example of that: my employer is interested in identifying, say, bike parking spots) but there are examples where de-anonymisation, competitive pressure, make “sharing data” a pragmatic question that needs more than principles.

Will more people who can contribute positively to climate science help if they had free access to those data? It is the case for astronomy; I am less convinced for climate science.
> We are not talking about neuorsurgent.

Most neurosurgeons just follow textbook prescriptions. I don't think this is a good analogy.
Or you can do what I've done, get a PhD, and be friends with the MDs.
https://news.ycombinator.com/item?id=12097063 ?
If your battle with invaders happens inside your home, then you have only one more misstep before game over.

"When asked whether it would be prudent to build a defensive wall enclosing the city, Lycurgus answered, "A city is well-fortified which has a wall of men instead of brick."

https://en.wikipedia.org/wiki/Laconic_phrase

"It is said that if you know your enemies and know yourself, you will not be imperiled in a hundred battles; if you do not know your enemies but do know yourself, you will win one and lose one; if you do not know your enemies nor yourself, you will be imperiled in every single battle."

https://en.wikiquote.org/wiki/Sun_Tzu

Moral: https://en.wikipedia.org/wiki/Code_signing + https://en.wikipedia.org/wiki/Web_of_trust + https://en.wikipedia.org/wiki/Quality_assurance
So. the intent of the DAO was _not_ specified in the code unlike claimed by all the hype. If I was a potential investor, I would be extremely curious to find out where the intent of DAO nowadays _is_ defined.
I wonder how hubs downgrade usb 3 uplink with usb 2 devices
Make your own PCB
Make your own PCB using Endurance L-Cheapo laser and engraving machine.
Full video guidance https://www.youtube.com/watch?v=Q39atHpMnfo
Read article on http://www.technology.org/2016/06/17/diy-etching-pcb-using-laser-diode/
I absolutely agree that retro gaming is about the "retro" feel, but I don't see how you can have that and have an internet store for legal roms. Would a raspberry Pi with an authentic NES controller + CRT screen connected through composite input fulfill your retro requirements for example?
Can you elaborate on what you think is bad about the IDE-with-extras-plus-console framework? I do research in quantitative finance and I actually find it really useful.
> I've always said that fusion won't save us from the coming global energy crisis, because it's coming too soon. Maybe that's good; we'll learn to appreciate it when we have it.

If we survive it. If the crisis hits so hard the technological civilization collapses, we ain't rebuilding it any time soon. All the easily accessible high-density energy sources are long gone.
Read linked article, offensive language was used AFTER they refused to provide raw data. It took lawsuit to get them.
Pokémon GO is not Gamification (It's a game)
Show HN: Material Kit – Free Bootstrap UI Kit Based on Material Design
Jupyter is a pain to sto a set up and configure for PHP on windows. I love it on Linux but Anaconda isn't exactly an out of the box solution.
Microsoft Wins Appeal on Overseas Data Searches
Sounds more like corruptocurrency now :)
Those cases are usually where the driver has got confused, in which case the hardware switch doesn't help much, IME.
Such process is called Euphemism treadmill [1].

From Wikipedia article on Intellectual disability [2] there is a list of historical medical terms. Nowadays used in offensive manner are: Cretin, Idiot, Imbecile, Moron, Retard. Same will probably happen (or already happened in some cases) with Disabled.

Probably same process takes place for many corporate terms. I observed this in my time at Samsung when internal organisation for CSR [3] changed name from POSITIVE_ADJECTIVE Workplace to New Management Committee.

I am through most of my career a C++ programmer and have personal interest in C/Unix programming. For one project I was working on JavaScript code base with Web developers. I've seen different terminology used for same things. When you study a bit of history or historical code bases then you will also see that terminology changed. I could say that web developers are reinventing a wheel and terminology with it, but every generation seems to do this again and again. It probably is related to the same mechanism. It must be often easier to name things than to learn their previously assigned names. Mostly because you don't know what to look for.

[1] https://en.wikipedia.org/wiki/Euphemism_treadmill

[2] https://en.wikipedia.org/wiki/Intellectual_disability#Termin...

[3] Corporate Social Responsibility
Unfortunately, it's incompatible with Outlook 2016 on Mac.
https://cdn.meme.am/instances/66130857.jpg
I am constructing an absurd argument. I mostly want to see the people who implemented torture against suspected enemies the start to try to justify its true effectiveness.

It is possible to extract information through torture. The question is how much, and how reliable is it? And most importantly, is it more effective than other non-torture methods?

The human mind is an incredible bullshit machine, and merely applying pain to it is no guarantee to get the truth out.

I suspect tortue isn't more effective than other methods, and I personally am not willing to run the experiment on my in-group to find out. I want to torturers in our government to fully come to grips with their own mortality (or lack thereof). And be prosecuted.
Depends what your threat model is, and what you're trying to do. I mean if you're an ordinary person with no particular enemies and no huge dark secrets then most of the time you don't need any security, honestly.
Today is “.RIP” Nice
Siemens. They are building the plants, too.
You raised you objection, then failed to add any substance to it other than communicating that you disagree. No point, no new context.

Again, I'll reply as I like. Step off as you like.
Paranoid talks about "well financed groups" have no place in science.

Climate science is way more important than astronomy. It should have much higher standards for transparency, not other way around.
If somone followed someone else around all day and yelled obscenities at them, there are laws to punish the perpetrator. If someone followed you around everywhere you went on the internet and comment and messaged and posted obscenities at you, you'd want the same protection.

I'm not saying people shouldn't be able to speak freely, but somewhere out there is a line that crosses from exercising freedom of speech into harassment.

This comic [0] explains it nicely. Just because it's on the internet and "not real life" doesn't mean it doesn't affect your happiness or your life "offline."

[0] - https://xkcd.com/1216/
Likely hack of U.S. banking regulator by China covered up, says report
You don't need "massive" amounts of stuff to start a colony on Mars. We could have a small one for tens of billions of dollors and a pretty big one for a few hundred billion dollars. That is not very much money in the big scheme of things, but political priorities are not on space flight.
Pokemon was a big phenomenon in the late 90s. So the latest interest is really building on a solid foundation established 15 years ago. I'm sure each new game would have helped pull in new fans too.
>All your documents are gone one fine morning when you wake up. Worst is you sometimes have no idea why and it's a lifetime ban

And there is no way to contact them about it or get information why you got banned. I was banned like that.
United Nations faces civil suit over 'peacekeeper babies'
Education + Decrease in Wealth Inequality + Better Mental Health Care is an answer.

Everyone likes to paint bad guys as monsters, but they all started as little baby human beings just like the rest of us. Then something went wrong.

Lets fix those things that go wrong piece by piece and make this world a better place for everyone.
The DIY diabetes kit that's keeping us alive
OT I know but aren't possums just great.

They look cute but would tear you to shreds. And you are absolutely right, they sound like demons. When I was younger they really freaked me out till my parents told me that was what the noise was.
Neat that this is the second article today on HN that mentions Qubes OS
Wouldn't the standard solution of lazy loading images (and prioritizing critical css) help. Since they are now trying to load everything on a big page, they should only be trying to load everything above the fold.
That's the thing though, they aren't changing the protocol, they are just reversing the transactions that fed the DAO. The DAO was flawed, not Ethereum, and now Ethereum's stability and promise of immutability are being sacrificed so that a bunch of people (including the lead devs of ethereum) who made a bad, uninformed investment don't have to lose their money.

The 'consensus' was not by a vast majority either, unless you consider 5% a vast majority.
Resizing feels very snappy!
Does Electron really count as 'native'?
The Other Side of the Cloud Hype.
I have a feeling that implementation speed is an instance of Goodhart's Law (https://en.wikipedia.org/wiki/Goodhart%27s_law). If you keep everything constant (code quality, amount of tests, documentation, etc) then a faster engineer is obviously better. However, if you start using speed as a criteria to judge engineers, then the easiest way to increase speed is to sacrifice things which make code maintainable and modular.

Finding metrics which work well even when people try to game them is incredibly difficult (if not impossible).
Summary of the article

> It’s gone because it was kept entirely on his blog

Take backups.
Repost: https://news.ycombinator.com/item?id=12091596
From the FAQs:

Q: Can I use Amazon WorkMail with Microsoft Outlook on Mac OS X?

Yes. Amazon WorkMail offers native support for Microsoft Outlook 2011 on Mac OS X. Support for Microsoft Outlook 2016 will be available soon.

However they don't say how soon...
Domain sharding is anti pattern for http2. Reason being for another domain it needs to make an expensive TLS handshake. With http2 on the same domain, it doesn't. We've done tests and even moved away from even having a static domain.
You don't have to rely on the built in interfaces provided by .NET, you can create your own. Just like in Haskell in F# you can use pattern matching against types to define which of the equality operators to use.

Also, I'm not sure what you mean by "manually pass that around". When you define a class in Haskell that inherits from a typeclass you reference that typeclass in the header of the new class. You follow the same approach in F# with interfaces.
Actually, now I see the site is different... Same difference though..
Nice UI and the finished results are not bad but I would...

...well, seeing as you're a commercial operation, I won't tell you what I would do to improve the realism of the images. Just keep reading up on those Photoshop adjustment layers and you'll get there eventually!
^ This x 1000

I feel for the guy, I do, since I have been there myself: I learned the hard way a few years back when my only drive died :(

I recently took stock of my backup situation and found it lacking so I changed it:

Working data on 2 x 3TB RAID1 WD Reds

Sync'd to my laptop via OneDrive (changing as I type this to Sync.com - getting rid of OneDrive)

Backups nightly to WD NAS downstairs

Monthly backups to USB drive that goes almost everywhere with me.

Not perfect as Sync.com is my only offsite but I am confident that anything short of a direct nuclear strike should be salvageable.

Edit: Clarity and formatting
well shielded :-)

How did you specifically shop for shielded cables? Are they advertised as such, or did you just look for something more expensive and hope for good build quality?
Pokemon Go is “prohibited” by Islam, Egyptian religious body says
This is really cool and I think over time, Atom is going to become really compelling once their org mode implementation or its moral equivalent gets some legs.

I've used the Jupyter emacs integration (https://github.com/millejoh/emacs-ipython-notebook) but in the end, I stuck with org mode.

For an example of what you can do in org mode (in emacs), here is part of a "dashboard" I created for one of my products: https://i.imgur.com/QUFbIBk.png

And an example of how I design: https://i.imgur.com/MeRYn1L.png

You can essentially use org-babel to recreate an approximation to the notebook environment which si cool
I tried to fly to London on a fake passport [video]
Sounds like this should be incorporated into the OS, rather than the browser.
Hi author here, If someone have some questions tweet me @0x1ad2
Thank you for the details :)
I think you might want to reconsider. I'd note that the Orlando nightclub shootings were flagged[1]. This of course wasn't as bad as in Nice in terms of fatalities, but is somewhat comparable (insofar as that is possible. What a horrible thing to have to compare). Comments there seemed to try to imply it was some kind of conspiracy, but I think the behaviour there was exactly the same as with this attack. I think we are seeing fatigue over terror attacks - people are just numb to the tragedies and feel like discussing it is useless.

I'm not sure if you are French or lost people in Nice, but if you are you have my sympathy. I was in France only a few months back, and this event made me both sad and angry.

HN is certainly Silicon Valley centric, but that is expected given its origins and audience. However, my impression is that coverage of EU tech issues gets more coverage than most places. There is certainly more coverage of US politics than other places, but the majority of that is related to tech issues.

(I'm not from the US, Canada or UK, nor do I live in any of those places)

[1] https://news.ycombinator.com/item?id=11888228
This is how much time obesity cuts off your life
They are (or should be) all shielded. You just need one that's correct.
91-year-old woman fills out crossword – turns out to be $116k artwork in museum
Physical side-channel key extraction from Intel AES-NI instructions [pdf]
> So all this time I just missed that menu item? Believable; I am pretty dense sometimes.

That's quite all right. I'm not perfect either :)

> Gotta wonder why though, with a 'flatten' option already there, there's need for two versions of 'Open File', one that screws you and one that works

I'm not entirely sure what you mean by that. Open File opennns files as new images. Open as Layer appends an image to an already opened one. Or am I reading you wrong?
Best Platforms for Mobile Outsourcing Development
I'm not sure what you mean.

What they describe is simply one of Cloudflare's SSL options, called "Flexible SSL", which is often used because it lets sites offer an HTTPS address without having to purchase a certificate themselves (or even setup a self-signed one): https://www.cloudflare.com/ssl/
SaaS based DIY Marketing Platform for your free trial
FirstHive dot com can perform Email Marketing, SMS Marketing and Social Media Management from single dashboard. Would appreciate your feedback on the application.
You are an SUV type of guy over an exotic sports car, right? :)
Warning: Article behind Data-Slurp-Wall©
My follow up questions on this is.

I run my website from S3 behind CloudFlare. How can I achieve free SSL without involving my own servers to terminate SSL and having to maintain and rotate certificates say using Let's Encrypt?
I see lots of "this is turning into RStudio" comments- but that's kind of the point of jupyterlab. Brian Granger was on a podcast recently[1] and spoke about how he feels RStudio has been great for the R community and wants to Proliferate that for other languages.

I think it's easy for us to forget we are the developer minority. Many, many developers (especially hobbyists and researchers) live and love the safety and guiderails of an IDE.

[1] http://partiallyderivative.com/podcast/2016/07/11/brian-gran...
Google feels a bit more evil for every day that go by.
If you remove them others will create even less secure alternatives. Remember Flash?
“simplify user analysis, engagement, retention and support”
We are a product development company which has worked on several projects in the last 5 years. We have built both internal products and helped other entrepreneurs with their prototype and MVP development. Even though these projects varied across industries and geographies, the one common pain we noticed was with user interaction, engagement and support tools and the lack of integration. Hence we decided to build one ourselves.

http://interakt.co/

Our goal is to build a product which allows web and mobile app builders to communicate with their users in a seamless way across different channels and for different purposes. We hope that through this vision we can help you understand your users, communicate with them more effectively and retain them for a longer time.
The website says: (https://daohub.org/explainer.html)

By Creating DAO tokens through interaction with The DAO’s smart contract code, you expressly agree to all of the terms and conditions set forth in that code. If you do not understand or do not agree to those terms, you should not Create DAO tokens.

[...]

The DAO’s smart contract code governs the Creation of DAO tokens and supercede any public statements about The DAO’s Creation made by third parties or individuals associated with The DAO, past, present and future. The software code currently available at https://github.com/slockit/dao is the sole source for the terms under which DAO tokens may be created
Bean Validation 2.0 – A new JSR is born
From my favorite author Anthony J. Dos Reis[0]

If you want to learn assembly language, computer architecture and C++ all at the same time: Assembly Language and Computer Architecture Using C++ and Java , Course Technology, 2004 [1]

If you want to learn how to write compilers, context free grammars, regular expressions and implement grep: Compiler Construction Using Java, JavaCC, and Yacc, IEEE/Wiley, 2012 [2]

If you want to learn functional programming, lambda calculus and LISP: An Introduction to Functional Programming Through Lambda Calculus by Greg Michaelson [3]

My programming skills had grown dramatically with this books. I would wholeheartedly recommend the books mentioned above for those who are interested to learn.

[0] - http://cs.newpaltz.edu/~dosreist/

[1] - https://www.amazon.com/Assembly-Language-Computer-Architectu...

[2] - https://www.amazon.com/Compiler-Construction-Using-Java-Java...

[3] - https://www.cs.rochester.edu/~brown/173/readings/LCBook.pdf
- https://www.amazon.com/Introduction-Functional-Programming-C...
> "No signalling effect"

Can you explain this point please. I've not heard it used in this context before.

> "Quick and reliable disclosure of and turn around on vulnerabilities"

Sadly there's only a very loose correlation between the popularity of a product and the corporations ability or willingness to disclose vulnerabilities or release patches in good time, nor even patch them at all (in the worst cases).

An apt example of this is how poor many OEMs are at pushing Android updates to popular tablets and smartphones. However I do appreciate you specified iOS and Apple are generally better at supporting older devices than many Android OEMs. But I'm replying to the "herd" point more generally.
> That's not how it works, is it? If we want to minimize X * Y and we currently have X = 50 and Y = 5, it's much more efficient to focus on bringing Y down.

I guess I see 0 as the asymptote. Like if you're already at 99.99% reliability, adding another 9 is quite hard. On the other hand, if you're at 10%, then there are big gains to be had.

> "low-hanging fruit" tends to mean doing unprincipled things that can't be generalized / don't contribute anything in the long term, right?

I think sandboxes generalize much better than application-specific proofs. Once you have a provably correct sandbox (which I think is possible today, if you exclude things like 3D acceleration), you can run whatever you want in it: old software, games, Flash, Windows 98. Application-specific proofs only work for applications written in the approved way.
Sony sensor press release: http://www.sony.net/SonyInfo/News/Press_Archive/200307/03-02...

I’d love to see some better multispectral cameras and displays. If you can get the content and hardware working together, you can get substantially better results than current tech. Of course, as you say, there’s a big chicken–egg problem.
Zone-H.org – Unrestricted information