skysight-inc/HackerNews huggingface dataset:
Anyone can help?

He is writing that the current browser sandbox model is not secure–all in a dramatic, clickbaity manner.

After many esoteric lines, then he says (maybe it's the tl;dr)...

"We need a highly secure (ideally provably secure) sandbox that doesn’t have any features! Then, you can run an insecure browser inside, where security doesn’t matter."

Then again some more lines of confusion.

So, what does he suggest? Putting the browser in a VM?
> If your network link is saturated, you can expect to have sound stutter, mouse lag and video lag

Not a Windows 10 issue.

I've had this in various windowses (and it actually went away for me with win10) and found it actually is the network driver blocking things. On older windowses i had to forcefully downgrade the network card's driver to an older version. Try experimenting with that.
I get less productive when I'm always at the exact same desk in the exact same room every day, so I like systems that force me to move around.
Run code inline in Atom using Jupyter kernels
Spark email client may have been hacked, according to reports of users on Reddit
Three guesses what the second worst sandbox is. :)
A "dead" (or shadowbanned?) user replied to you:

<<
ghgfhgfhn 26 minutes ago [dead] [-]

I think he means:

The Google culture is built around cerebral competition. The drive to dominate ones peers, possessed by many technical types, is used to create a fiercely competitive atmosphere. This competition is used to drive productivity. The trouble with this is that it is difficult to measure code quality but easy to measure how quickly the code is produced. Thus within highly competitive environments code tends to be produced as quickly as possible, rather than as well as possible. Of course this is debatable and if true, is only a tendency...>>
The developers in a tech-company are working at a profit-centre, generating income.

In a non-tech company, they are working in a cost-centre.

Ironically, a lot of non-tech companies have not yet realized that the services they provide are actually digital, and their profit centers are actually just a sales organisation.
Trump Names Mike Pence, Indiana Governor, as Vice Presidential Pick
The first thing to recognise is that is shell is not a special kind of program. It's just a normal executable like everything else.

Next, recognise that a shell is a language, so you're basically building a commandline programming language interpreter (like python and ruby offer). The difference compared to a general-purpose language is that a shell language traditionally has super-lightweight syntax for operations related to processes and files.

The first step of building a language interpreter is being able to lex (tokenize) and parse a stream of characters.
What if one's slow is someone else's fast ?
> full of weird bugs, incorrect concurrent code that still works 99+% of the time but then rarely crashes and burns when that ill-anticipated failure case execution interleaving randomly strikes -- to say nothing of problematic and unrefined UX.

That sounds like an accurate description of 95% of existent software in the world.
IMHO HTTP/2 solves HOL blocking partly. It will allow other streams to proceed if one stream is blocked due to flow control (receiver doesn't read from the stream). E.g. if you have multiple parallel downloads over a single HTTP/2 connection one blocked/paused stream won't block the others.

However it doesn't have abilities that will allow individual streams to proceed if some packets are lost that only hold information for a single stream.
This was with Amway's eSpring water purifier. The fix was very DIY over the phone.
- Meditations by Marcus Aurelius

- A Guide to the Good Life: The Ancient Art of Stoic Joy by Irvine
Sure naughty or not naughty though, having IBM be actively hostile to the only cheap way to get access to a mainframe like environment is disasterous for their skill pool.

So if they don't like herculeas' efforts they should've brought out their own, or come to some kind of arrangement with them.
I'd call it independence.
The Ultimate Guide to Pokémon Go: Tips, Tricks and Cheats
They are making some more attempts with MPX.

https://en.wikipedia.org/wiki/Intel_MPX
You can find plenty of references to Hitler and some of his henchmen thinking they're doing the will of god; http://jewsforjesus.org/publications/issues/v16-n10/01

Nor would I describe that as terrorism; the nazi's were the elected party.
I'm sad to see them go. Used them near exclusively for my past 2 dozen trips (about a dozen SFO, about a dozen OAK).

The rental car experience in general is ripe for disruption- flightcar was not perfect but the incumbents were and are just atrocious, from surly, conniving employees every step of the way to miserable shuttle/train rides to out-of-the-way and monopoly-priced oceans of asphalt.

If FC ran out of room for cars, they could always have charged a discounted rate for parking instead of offering it for free.

I guess I'll give Turo a try next time.
It's weird that his color theory is such a minor thing in the article: I've recently read his "Conversations with Eckermann" (highly recommended: a long book of notes from Eckermann where he summarizes, well, myriad talks with Goethe. It's public domain.), you'll see that Goethe was convinced that his color theory was the major work of his life. He was quite bitter about the establishment rejecting his work (not Newton himself as he died 20 years before Goethe's birth) and couldn't let it go.

>»Auf alles, was ich als Poet geleistet habe,« pflegte er wiederholt zu sagen, »bilde ich mir gar nichts ein. Es haben treffliche Dichter mit mir gelebt, es lebten noch trefflichere vor mir, und es werden ihrer nach mir sein. Daß ich aber in meinem Jahrhundert in der schwierigen Wissenschaft der Farbenlehre der einzige bin, der das Rechte weiß, darauf tue ich mir etwas zugute, und ich habe daher ein Bewußtsein der Superiorität über viele.«

(my translation: I don't pride myself on anything I've done as a poet, there have been good poets alive with me, even better ones before me, and will be alive after me, but I'm proud to be the only one in this century who knows what's correct in the hard/difficult science of color theory, and therefore I feel superior to many)

He wrote several books about the theory and kept on researching it, roughly summarized according to him colors came into being by a mixture of light and shadow.

But he was quite blind about the failings of his theory - in another biography of Goethe (Safranski's) it even says that someone gifted him a prism which invalidates his theory as there's no shadow needed to make a rainbow, he just refused to use it.
Does it happen often where a company will disable pull access on github and to request EUA to be signed first?
I've always said sales (and marketing) was Microsoft's biggest problem. The are finally starting to be cool again as the engineers take over.

The silo between Windows and development (Azure, .net etc) needs to come down fully to fix Sinofsky's mess too.

We're still left with a desktop OS UI with huge animated icons designed for a phone even though they've now given up on the phone market anyway. They gave up too easily just as Windows phone was starting to overcome that screw up and become popular with some non techy users as it really is the most user friendly.
Unfortunately, this looks like a localization bug that will probably be fixed soon.
Amazing christmas nativity sets for you
The Dark Secrets of This Now-Empty Island in Maine
Claiming something and believing in something are two different things.

Of course, "tribes" have always painted their fight against the other tribe as God-approved. That doesn't mean that God actually plays a role.
Kraken confirms July the 20th #ethereum Hardfork
Not only should it not have direct access to hardware[1], important data such as private keys shouldn't even be directly accessible by any part of the browser. We've known how to keep keys in their own management process for a long time (e.g. pgp-agent, ssh-agent).

[1] Putting USB anywhere near the web may be the stupidest idea I've ever heard. Attempts to add USB access to the browser should be seen as an attack. A camera or microphone can be a serious security problems, but failures in those features can (at least theoretically) be limited to features related to a specific hardware. Failures related to the USB buss can grant access to a lot of hardware that was never designed for security.
Dystopic Postmodern Pipes
If you want to know what's ailing science, research, academia, publishing, research, the career-gateway control of publishers, and access to research, read this article. I'm put off by "<number> things..." articles, but this really does hit the marks, hit them well, and cites some good folks. John Ioannidis, Tim Gowers, Michael Eisen, and Marion Nestle, are all names I've come to know and respect. Alexandra Elbakyan I owe personal thanks to daily for the access she's provided me to 92 years of paywalled articles.

Brad Plumer is a reporter whose work's caught my eye before, I'll be adding Julia Belluz and Brian Resnick to the clueful list.
VR Will Totally Change Data Visualization
Thinking, Fast and Slow by Daniel Kahneman.

Also, strangely enough (not being a Harry Potter fan), I immensely enjoyed Harry Potter and the Methods of Rationality.
From Airtel's spokesperson:

> This is completely baseless and incorrect. ... Only in the case of instructions/orders from the Government or the Courts, specified URLs are blocked.

Wow, they must have some other definition of "baseless and incorrect" over in LaLa Land.
Imagine a civ where this scenario ran away- for thousands of years. Behaviour optimized towards this.
Things that I find helpful:

- an ability to restore clipboard history (alfred on mac or hain on windows)

- snippets

- keyboard shortcuts

- toast notifications for lifecycle events (test and linter failures, CI build events)

- having enough monitors (I tend to arrange mine in an way so that the leftmost shows designs, the middle is for my IDE and the right one shows live output)

- most of the things already mentioned
Everything is glue between turtles.

It's glue between turtles all the way down.

(A problem now is that the glue is nonstandardised, and you've got vendor-specific glue, much of it with craptacular Web interfaces, at various levels. We used to have this in other parts of the stack, but they eventually got commoditised, and those particular layers went away. If you haven't done it before, crack open a Sendmail.cf file. If you have done it before, I'm truly sorry for the flashbacks.)
My thought too. You can put some tape on the cam but doing the same with the mic may not help much.
Free Stock Photos from Bara-Art
I mostly disagree. A sandbox like seccomp with a truly minimal set of system calls allowed through (read, write, close, exit) is a tiny attack surface and provides functionality roughly equivalent to raw Nacl. As far as I know, no holes have been found in seccomp configured like that. The problem isn't the sandbox per se, it's the set of services (3D! Audio! USB!) that are allowed through the sandbox. This proposal does nothing to help address that problem.
I think what you call it is more complex. As I can see there are three important capacitities: attention to details, working memory and iq (capacity to see patterns, what is tested in iq tests). In my experience they are all important, I'm pretty bad at the first two, and this makes me miserable in my job.
Do bacteria ever lose DNA then? I mean they can't have an unlimited genome
Maybe we can look into exotic sources like lightning, even if it may not be as conventionally usable according to our current understanding.

Say, send up baskets of some materials in a balloon into storm clouds, have the immense burst of power in lighting strikes fuse them together into some form of fuel that we can then tap for energy.
There is a next generation implementation of hypertalk, livecode. It began life as metacard (a hypercard clone) and has now evolved to something that can export to mobile, html5 and multiplatform applications. Basically you program in simple english with a smalltalk message passing philosophy.

https://en.wikipedia.org/wiki/LiveCode
You got lucky getting by with only 2 issues, I've lost count and since abandoned the OS.

When I upgraded my 8GB RAM, i7 machine (what should be a decent bit of kit) I experienced continual problems.

Sound drivers would just stop working, the OS would completely forget that there were even speakers. The cause would always change and there would always be a different, stressful, time consuming fix. This was not an uncommon problem, I found myself in a large crowd with these faults.

Later I found myself joining plenty others in losing networking abilities after forced updates. My WiFi drivers would vanish and intermittently reappear, pretty much like the sound issue.

Every update MS pushed led to another time-sucking issue to patch up, I would dread the next update.

The continual problems caused by Windows 10 made me go out and buy a Mac. I don't want anything to do with Windows anymore. After suffering through the Windows Phone, Windows 8 and now Windows 10 I'm completely done with MS. It's so sad to see the company just turn itself to trash, I used to be a huge fan.
I'm honestly wondering whether this indicates that the TSA torment is useless (there isn't even a remote chance of stopping them, so why bother), or whether it indicates that it is effective (they're switching methods because the first one no longer works).

The abysmal TSA performance data seems to strongly suggest the former, but I can already see some policymakers scramble towards the latter interpretation - we need more TSA, everywhere.
We're using it for web crawling: define what to look for (a reward function), and crawler can learn how to get these pages from the web without wasting too much HTTP requests for irrelevant content. No neural nets, just Q-Learning with linear function approximation, with some common tricks like double learning and experience replay.
Senate committee calls out Elon Musk, wants answers on Tesla Autopilot
What makes you think this was religiously motivated?
Hrm I wonder how much of his stuff would be on browser caches of his fans? Perhaps he could do a callout to his fans?

Bad google. Bad artist!
Next step: increase military and security budget.
I wonder if experiential diversity has increased. Surely the decrease of biodiversity is painful for mother earth, but perhaps there is greater variation in the the experiences of all living organisms.

EDIT: Just a runaway thought: why is biodiversity important? If we are optimizing for the general well-being of humans and living beings on earth (which is the frame of reference I am using), then extinction of a species while increasing experiential diversity seems worthwhile.

In addition, the extinction of a species is only sad to those who remember. Many cultures have merged in history to become nations we see today, but nobody misses the oh-so-glory days of a specific Northern German tribe in BC 500.

As to the beauty we experience from diversity of species (seeing them, interacting with them), I would much rather enjoy technological experiences over that natural experience.

Perhaps this makes it sound all too all-or-nothing-esque, but it seems that there is a general assumption that increased biodiversity is good beyond measure.
But I was not claiming that; if you take away religion, at least you don't have god on your side. That is what i'm saying.
> The guy said "in a temperature range where burns are more likely".

Which makes it sound like there is a lower and an upper bound for this range. That's the issue.
Adobe Report Shows Continued Deflation in U.S. Economy
This member-only article was unlocked for you by Sarah Lacy. Unlock expires 1 day, 9 hours from now. For unlimited access to all of Pando, become a Pando member for just $10 a month.

So by tomorrow this article is paywalled for HN visitors? Is there a workaround?
To fork or not to fork
The Holy Bible :)
Node.js and Python – Where to Use and Where Not?
I worry about TCP window scaling (and full TCP windows) when only using one TCP connection. There is a good reason download managers use multiple connections to download one file, because depending on the latency the maximum transfer rate is capped because only so many TCP packets can be in flight simultaneously. I wonder if nobody ever thought about that... HTTP1/x solved that (more by chance) with multiple connections...
I'm pretty sure the ToS allows Google to close an account for any reason they see fit. I would not place a lot of trust in a lawsuit in this case myself.

There's something very scary about account closures like these and the lack of appeal opportunity.
In general Google's support is abysmal, but I can somewhat see how providing support for all free users would be extremely expensive.

However to wake up one day and find that everything you trusted Google to keep safe is now locked away from you without any avenue of reaching a human to appeal, or even just to get a copy of your data is quite scary.
Put the browser in a VM/sandbox, yes.

tl;dr: Right now there is a competition between features and security, and security is losing. By separating them, they wouldn't need to compete, and we could have both. It isn't a good idea for a sandbox to directly handle things like CSS transforms.

Is my writing really esoteric?
Load Balancing: How to Quickly Boost the Performance of Your Apps
Microservices Weekly (Issue #34): Summer Holidays
Do nice guys come second in Silicon Valley?
Off-topic, I think the OP should remove analytic parameters:

?utm_source...

from the URL.
Hopefully another company in the near future is founded in the same name to deliver the promises of its title.
> first I've heard of COS and (b) I cant find jack on it.

If you can lay your hands on some issues of BYTE and PC Magazine (Ziff Davis) dated between 1985 and 1990, you would find plenty on RM COBOL.
I had problems sometimes with 2.4Ghz Wi-Fi, I permanently switched to 5GHz Wi-Fi which solved the problem. It may have been the USB3 hub I was using, I'll do more test.
I know. The "seven basic plots" idea works, but only if you completely ignore the subtly and nuance of story-telling that authors have used most of the time. The point I was making was that you can't just boil every movie since Terminator 2 down to a rehash of what's come before. If the poster I was replying to is going to be over-simplify film plots then you also have to accept we can over-simplify book plots to get to the same point.
Are You Open Source Contributor Material?
I see a large problem in the fact that (as it seems) the original data and the computer code is not published, too. This is in my opinion a contradiction to the scientific principle that any result or conclusion has to be able to verified independently as much as possible. Though not publishing data and computer programs (and ideally a virtual machine for independent execution of the program code, too) is unluckily accepted practise in science.

If it were otherwise any critic of the result could reapply the computer program to the non-detrended data and see that the conclusion will not change. On the other hand, if the computer program and data is not published he has to trust the conclusions that the researchers came to. So the only way for an independent person to check the result is to find indirect evidence that the conclusion could be wrong. And finding out that a different data set than (wrongly) claimed was used is exactly such indirect evidence (and in my opinion nearly as far as one is able to if one doesn't have access to the used data and computer programs).
I can understand why the big banks are reluctant to re-write the big systems now that they have painted themselves so far into the corner, but what I don't understand is why they seemed so disinterested in the massive advances that were made in the 1970s that would have made COBOL and IMS long obsolete already then.
Refine: interactive list editing in Emacs
The best things suggested:

- Strip down the features of the application to minimize attack surface. (see bloated, badly designed web apis...)

- Don't let sensitive code be produced by interns.
Nvidia unveils its first ever game and it's in VR
This is really a fantastic suggestion! Pair programming can't be advocated enough. I used to think it was stupid many years ago, and then I made friends with a guy who'd been programming longer than I'd been alive. We'd both stay late and shared an office, and in the evenings he started mentoring me, and we'd pair program. I think there is no better way for bringing programmers up to speed (whether junior-senior or slow-fast or new-old or whatever). Also, having tried a variety of interviewing techniques, I find pair programming to have one of the highest concentrations of useful information about a candidate. Work sample being another.
I was a Windows user for a long time.

5 years ago I switched to OS X, because I think it's closer to the deployment environment I use as a dev.

However what OS X did ( when they killed the old one - MacOS 9 and rewrote the whole thing on UNIX based kernel ) was the single greatest move, which I think pays off even these days.

This is what I hope should happen with Windows. They should decide on POSIX kernel and completely rewrite most of it. This will put Windows as an option for me.
App Remarketing on Facebook to Re-Engage Users
The good ones do! Try Micro64, its CRT simulation is completely configurable and you can set it up to match a high spec CRT: https://www.youtube.com/watch?v=d1qEP2vMe-I
Population growth is not a long term problem. Fertility rates are approaching 2.0 globally. Even developing countries like Bangladesh that had a real effort to educate women about sexual health already have rates of about 2.1/2.2 i think, it is pretty narrow minded to believe that only "clever" people want small families.

Only Africa has large population growth still.

China have stopped the 1 child policy (such as it was, if you could afford it you had as many as you want) as they are worried of fertility rates being affected in the future. They have seen the situation of countries like Japan and Germany with a shrinking population.

I would be more worried about resources such as clean water and energy. When most of the worlds population is competing for as much water and energy as the average US citizen currently uses, then you have problems.
Thread and ZigBee Capable Modular IoT Gateway
I realize that, but the PST/PDT thing (along with GMT/BST) is incredibly common and incredibly annoying.
The idea is that Rust (or something like it) is genuinely necessary to address it, because the necessary API is complex, as you say.
How to Get Perfect Acne Treatment Using Argan Oil
Reminds me of my cow-orker complaining yesterday that when he turned his screen 90 degrees (pivot into "portrait" mode), the text started to look visibly less sharp. I guess that's the problem with subpixel AA and subpixels now being wider than tall.
Exactly.

Every sandboxed app ever has needed native access of some sort to do something useful.

The best example of this difficulty is probably graphics (WebGL). To provide a compelling user experience, the API must allow apps to upload almost arbitrary code (shaders).
which airport

/usr/local/bin/airport
And throw away years of progress in web technology. No, thanks.

What if I (and users) want those features? Ah, I remember, just install a plugin, which is closed source thus more secure... wait a minute.
I'm sticking to Phoenix. Are there any advantages in using Lua script instead of JavaScript?
I have had this annoying problem and had no idea what was going on until I stumbled upon forums somewhere after many Google searches. My Anker USB 3.0 hub would cause my bluetooth keyboard/mouse receivers to become unresponsive at random times (in retrospect at times when the hub was placed close to the Macbook Pro). I placed the hub at some distance from the MBP and voila the issue went away!
Defeat, defend or transform