skysight-inc/HackerNews huggingface dataset:
It's strange to see Android take this extremely anti-local-CA stance, while Chrome on the desktop does the exact opposite, even bypassing key pinning if a local CA is in the chain. https://www.chromium.org/Home/chromium-security/security-faq...

Especially so since Android since 5.x already shows a huge obnoxious "Your network may be monitored" if you have installed a local CA.

It's a shame you can't configure certain domains to ONLY trust a specific LOCAL CA system-wide. It would completely eliminate the security problem that is untrustworthy or hacked global CAs, for example for your own/enterprise mail server.
I'm hesitant to build on a platform that could be appropriated by corporate interests. An example of this is the way Apple has appropriated BSD for MacOS. The BSD code is still open, but the tooling and funding comes from Apple to an extent which allows Apple to determine the direction to some extent.

I have no problem with MIT for smaller tools, but the compiler is too foundational a dependency to take risks on, and it needs better protections--protections which are afforded by the GPL and the FSF's funding of GNU projects.
Do you have any plans to implement accessibility? On Windows, you should probably implement a UI Automation provider. For GTK-based platforms, I guess you need to use ATK. You'll need an accessibility API of your own to abstract over the multiple back-ends; maybe copy what Gecko has in its nsIAccessible and related interfaces.
Well, yeah, Google has logs of what what people search on their search engine.
You measure "X" with data.

Like revenue generated, or cost saved, or lines of code saved, or time needed to deliver work, based on current or previous work.

Is this bullshit for you?
I don't think paying to get your location to become a pokestop is the right move.

Pokéstop modules are already a pretty good answer, just upgrade the pokéstop (after requesting one to be added).

I'm guessing a paid subscription model for a permanent lure module could work too for effective monetization. Same for other kinds of modules, and even tiers of more powerful modules. Also for more module slots.
23 Surprising Social Media Stats You Should Know in 2016
Anything similar for Chrome?
Not all undefined behavior can be caught at compile time.

However, LLVM and GCC can detect a lot of undefined behavior at runtime with ubsan. I'm not sure how much performance penalty there is. Presumably checks are added on every signed integer arithmetic operation, pointer dereference, etc., but some checks can probably be removed by the optimizer (for example, a branch may be taken if a pointer is not null, which means the optimizer can remove all null checks in that branch as long as the pointer hasn't been modified).

Edit: oops, I missed the part where you said you're aware of sanitizers.
Not knowing every detail does not make something a "complete unknown".
As a native, I'll say it then. Don't come here; or rather, don't move here. ;-)
And have storage for working when the internet fails. And have a camera. And we just invented the tablet.

Oh and a keyboard to type with. We shall call it "laptop".
Pasta May Be Good for Your Diet After All
That can be said of just about anything in physics.
Fletcher and I are suing Doig not for merely disavowing the painting. After a year of research and ridicule from Doig and his dealer, we put it in auction. They threatened lawsuit and killed the sale. Our complaint is for interference of business. He can't do that if he is the real artist. What he will owe us is what we would have gotten if he had stayed out of it. We have plenty of evidence and his behavior and character is quite consistent with what made him a guest of the Correctional Centre in the first place. Wait for the real story when the book comes out.
My IPvFoo extension has a similar ability:

https://github.com/pmarks-net/ipvfoo

When viewing the popup window, each domain gets a yellow highlight if a connection is currently open. The feature was introduced in 2012:

https://github.com/pmarks-net/ipvfoo/commit/d09c68219cb970c1...
Free trade and free movement are unrelated, as evidenced by the fact that the EU is trying to sign free trade deals with Canada and the United States. It's only countries geographically in Europe that are told they must accept both or neither.

The EU will either sign a free trade deal with the UK of some sort (possibly not as free as within the single market), or it will simply fuel its own collapse.
PGO = Pokemon Go Optimization; I should become a PGO expert :p
Small as in value->0 as t->years++? Sounds correct!
Maybe because much of what started as the goals and methods of "philosophy" were later appropriated and redefined as "science"?

They are both human endeavors to better get at and understand the truth about ourselves, the universe, reality, etc. Philosophy often extends further into realms such as art, morality & ethics, dignity, aesthetics, the role of society, and human nature. Philosophy even takes a meta-view of science, asking how we are justified to even claim to know something to be true at all (epistemology). And for the most part, these questions are answered in terms of and in concert with our scientific understanding.

Moreover, evidence-based science itself is to some degree an outgrowth of Descartes' "method of doubt" and rationalism, then the empiricist philosophical movement, and on and on. It's no wonder that throughout history often the leading scientists/mathematicians and the leading philosophers were the same people.

Concepts such as natural rights, liberty, free will, social justice, etc. all originated in philosophical works, and have indeed "solved problems" by influencing people who are say, in the process of forming secular governments after a political revolution. You can draw a fairly straight line from Plato to Descartes to Hobbes to Locke to the Constitution. When we talk about a "bill of rights" -- where is this concept of a natural human "right" even from? Philosophical theories such as utilitarianism, the meaning of good vs. evil, are used every day in our legal system, economics, politics, and foreign policy.

Moreover, often a breakthrough in science or development in society may have very practical consequences which FORCE people to face unavoidable philosophical questions. Should scientists be legally permitted to clone humans? Should a Tesla kill its own driver to avoid plowing through kids crossing the street? Should there be a minimum wage? Should pharmaceutical companies make life-saving drugs free? When should abortion or infanticide be permitted?

These questions must be answered reasonably-- I'd much rather have them discussed through the lens of rational philosophical discussion rather than religious or purely emotional "go with the gut".

So philosophy has served as an on-ramp to science. But among its benefits, it also helps us move from the descriptive study of the universe to the prescriptive-- to paraphrase the great philosopher Dr. Ian Malcolm-- there's a benefit to moving from the scientific question of if we could to consider the philosophical one of if we should.

Just like there's a "God of the gap"-- a notion that a need for God pushed back as our scientific knowledge expands, so it seems there is a "philosophy of the gap"-- some people seem to redefine "philosophy" to mean useless mental spaghetti that goes nowhere. Do you judge science by the same criteria? Does every "failed" experiment constitute a failure of science?

Given its usefulness, especially as an alternative to religious methods where "science" doesn't offer a clear answer about how people and societies "should" behave, I think damning philosophy too hard is kind of unfair.
Why is it so bad that a webmaster gets to know I found them through Google?
A few chrome extensions no Chrome should be without. uBlock and/or Ghostery, needs no introduction.

FlashControl disables flash and allows selective enabling on components, pages or domains. Quick Javascript Switcher let's you selectively disable JS on individual pages, handy sometimes for badly behaving pages. Tab Suspender suspends unused tabs, useful if you have dozens of open tabs not otherwise.
Seconded. Asheville is one of the prettiest, most eclectic places in the entire country, with a reasonable cost of living to boot. Unfortunately all the jobs are in banking and the service sector.
One weekend is not what I'd call "a lot of opportunities". If you think it is then we're discussing different levels of fluency. I'm quite conversational in German. I would not say I have a lot of opportunities to practice because restaurant and supermarket German are so simple they don't help me get any better.

Swiss people learn English in school. I have only met a few who cannot speak English well. It's a much more common issue that I want to speak German with them, but they don't actually like German (it's something of a foreign language too compared to dialect), and they prefer to practice their English with me. Linguistic tugs of war are always awkward.
There's addons/extension for Chrome and Firefox. Both also called JSON Viewer (different author).
For really large files I use a command-line tool plus grep and awk though https://stedolan.github.io/jq/
You could try the JSONView chrome extension.
I wonder whether Google deliberately makes it hard to copy a real URL to the clipboard or whether it's a careless unintended side effect of tracking context menu open in new tab operations.
Moral Machine – Platform for human perspective on machine-made moral decisions
I'm a fan of named parameters, too:

# python
self.executeAfter(func=myCallback, delay_in_seconds=5)
# or
self.executeAfter(func=myCallback, after=delay(seconds=5))
This sounds extremely interesting.
How do you generate the SDHC dictionary ?

Would it be interesting to compare your results with Zstandard using the same SDHC ? It seems to have a strong dictionary mode.
awesome thanks!
Xposed can do the same without modifying the apk file in storage, instead it intercepts the calls and modifies the responses for what the app config would be.
pijul is not a fork of darcs, it's a completely different system that adopts the main ideas of darcs.
OCW does have some of the 5-minute segments approach if you access it through the MIT website (for some courses at least).

However, OCW coupled with Youtube 1.5x playback is heaven.
I very proudly have not clicked the link, because it so such wild click bait, that it would be against my integrity.
Would it be possible to do this more like GNU configure does? The software specifies what it needs, and the system looks for a version that works. How about check the Haskell code automatically to see what functions it uses? If I'm using `text`, and all I use from that package is `pack`, `unpack`, and `cons`, I shouldn't have to specify bounds.

The Cabal way of doing this--specifying version bounds--creates a big maintenance burden. And even then, it does not always work.

So yes, I would question the merits of having a solver that checks some version numbers that developers manually put in. That said, I lack the know-how or resources to come up with anything new, so I'm stuck using curation or a solver. Using someone else's curation winds up being much less work for me than using a solver, so that's what I do.
To each their own. When I read such articles I wonder what the motivation is?

Clearly the Bay area, whether you like it or not, is a phenomenal place which has stayed at the top of the tech pyramid since it's inception as "Silicon Valley". It's expensive, people work crazy hours, tech bubble, housing bubble, traffic, bad infrastructure etc. But there's a reason why most major technological developments happen here and not elsewhere.

I'm not advocating that this is a place that everyone would enjoy living, but bashing it for it's negatives and completely ignoring the obvious positives, is IMO disingenuous.
Link: https://chrome.google.com/webstore/detail/jsonview/chklaanhf...
Thanks, I've fix it up.
> Dropping XUL breaks backwards compatability and it seems Mozilla is willing to break it before they provide adequate replacement APIs

The problem is not XUL. Modifying HTML or XUL DOM via JS is roughly equivalent (setting aside XUL-only features like XBL, does this matter for many extensions?)

The problem is all the internal JS APIs that add-ons can call right now, there are too many to secure and ensure backwards compat. This is why extensions break between releases so much. It's also pretty hard to program against, so there are a lot of common bugs and it's very difficult to ensure any level of security, since Firefox extensions can do anything.

WebExtensions are intended to be a superset of the APIs Chrome exposes, new APIs are being added all the time. It must be possible to implement them securely and maintain them over time, unlike the current situation with internal-only APIs.

> The design of the new addon signature requirements turns AMO into a walled garden and I very much do not appreciate that

I disagree. Signing is required to make it more difficult for malicious extensions to persist in the wild. There's no requirement to host on AMO, just a requirement to sign if you want your extension to run in Firefox release builds.

If the extension is later found to be malicious, it can be revoked without having to depend on the ID (which is set by the add-on and trivial to circumvent).

> The primary concerns I have, which I left Firefox over

Which browser did you switch to? There's still time to participate and influence outcomes, old-style extensions are still supported today...
Root users could use Xposed to inject the settings to trust user added CA:s into selected apps. More work, but power users do retain the same ability (for apps not using NDK for networking).
How much money are you willing to spend? ;-)
Yes and some of the data science courses seem to be offered weekly, at minimum monthly. At least the courses I took.

Something that annoys me is courses that are listed in the course list but were once and done and never coming back, or "maybe someday" classes.
Not everyone is ready to admit it yet, but IMO there is no long term future for us in space without something like artificial gravity.

I remember back in the 1970s one of the Skylab astronauts came to my college to give a talk. I had read about some problems, so I asked him about the effects of prolonged weightlessness. He was very dismissive, he vehemently denied that there could be any problems at all.

As they say, denial isn't just a river in Egypt. And the denial has been going on for many many decades.
You might want to check out some of the research of Luigi Auriemma. I'm using his encryption/decryption algorithms for a halo combat evolved client.

http://aluigi.altervista.org/
Really you have no idea how Lincoln felt about slavery, nor how those feelings changed with time. His public statements are the carefully crafted words of a master politician.

For a guy with no interest in freeing slaves, he sure freed a lot of slaves.
What if your time travel lab is stationed at Mars already?
Awesome sarcasm, made me laugh. Thanks!

Seriously though, I feel the tone and attitude you're satirizing are describing the startup culture pretty well.
Thank you for the kind words :)
Even if time emerges from something different it is still there.
I'm surprised his battery lasted that long.
"work them "too hard" it's good for them and the only way they get seasoned"

Oh, games industry, never change. I'm sure people will think this is satire - except the ones who worked in gamedev.
you are correct, thanks!
What does "peer to peer with no routers mean"? Also, with all the benefits of FPGAs, you seem to gloss over power consumption. Any concern there?
I'm already using JSONView Chrome extension and it's great but it doesn't work with local files. Nor can I copy and paste JSON.
Wait, what? Why do people from Austin and Denver always say their home prices are comparable to Seattle? The average home for sale is Seattle is $666k. It hasn't even broken $350k in Denver. I'm looking at homes on Redfin within 1 mile of the University and there are dozens of ~2k sq ft, 3br 2+ bath homes listed under $500k.
Not that it should be asked for; just that it should be configurable. Subtle but important difference. Firefox is following this recommendation, but doesn't ask for it explicitly.
No, don't move to Colorado. You'd hate it ;)
Use Xposed as root, inject the settings to trust your own CA
It feels paradoxical either way to me, but maybe the multiverse is cool with there being universes that are paradoxical.

Perhaps there's a dimension beyond time, and just as information changes in space across time, the entirety of our timeline changes within this upper dimension. The timeline that we once thought was straight and obvious turns out to be wiggling around and looping through itself in this "time of times".

Now, where did I put all of my tin foil...
Yes, all of those are easy to bullshit. Someone can put them on their resume and it's not that easy to check. Why do you think we do whiteboard interviews?
Yes, the intense competition drives minor incremental improvements. Not capital-intensive major inventions.
There's also an intermediate value of 1, which AFAICS disables referer sending on requests for embedded images:

http://kb.mozillazine.org/Network.http.sendRefererHeader
WebExtensions are a superset of what Chrome does. Things like tree-style tabs will be possible in Firefox with the new extension system, for instance.

There are already several WebExtension APIs implemented that Firefox supports that Chrome does not, the difference now is that APIs are being built specifically for extension authors to use, rather than Firefox internals being directly accessible (which certainly allows you to modify anything, but is intractable to maintain backwards compat and secure).

Many authors of popular extensions are working on specifying and prototyping the APIs they need.
Bitcoin's reward for miners just dropped 50%
The way I understand it, this only affects apps, not Chrome for Android.

Chrome on desktop follows the HPKP RFC on this matter[1]. Failing pins that chain up to local CAs would break many deployments. On mobile, apps that implement certificate pinning are usually already broken if a MitM proxy is used, so it's a different context and this move improves the situation for apps that haven't moved to cert pinning yet (it's not a full replacement as it only helps with the "malicious local CA" problem).

The implications of an attacker being able to import a CA certificate are different on mobile as well, IMO. On desktop, this usually implies administrative access, in which case anything Chrome could do would be pointless, as the attacker could also just replace/modify binaries, install a keylogger, etc. Android has a more fine-grained permission system, and an attacker who tricks a user into installing a CA certificate would not necessarily be able to do these things, so this would definitely make things harder for them.

[1]: https://tools.ietf.org/html/rfc7469#section-2.6
Ring buffers and moving averages
> and because the seller was a punk and refused to pay return shipping I threw them all away

That's not "punk" -- the seller doesn't want the garbage anymore than you do. Most vendors of inexpensive products don't want you to mail back returns. It's not worth it.
> He was very dismissive, he vehemently denied that there could be any problems at all.

We exist as we do because of the pressures our environment exhibits on us (e.g. gravity)- outside of hubris I can't imagine why folks would think weightlessness would have zero impact.
Fresh eyes on the problem is always good, usually after lunch or you have slept on it.

I find when my brain starts to grind to a halt I just go an do another un-related task to force myself to completely forget about the original task. It does help because when I go back to the original task my brain has to context-switch back into it and in doing so it may look at the problem a different way.

Extra holidays would be great! However, I think more holidays would make some engineers more productive and some less productive... I'm not sure if Google is still doing their 20% time, and if they are I know it doesn't apply to all the FTE engineers.
Yep, all that above + `sed`.
What we really miss is an ADS-B low-cost variant for drones. Safety requirements are different if ones takes into account the unmanned characteristic of drones. Furthermore it will be a great exercise in solving the known problems with the existing version. The main idea of broadcasting navigation data is worth the shot to optimise even more the use of airspace. Without lives at risk technical iteration can be, at least in theory, faster. We need more IETF-style drafts and RFCs rather than classic standards (i.e that require often more than 10 years to reach the market) to see a clever use of such a technology in our daily-routine.
Root and Xposed, yes. That's probably going to be the easiest solution.

Root doesn't inherently reduce security - it only adds as much target surface as you chose to add. Adding root services with bugs is dangerous, but one-off tasks with secure code and a secure root manager isn't a problem.
Where else were laws drafted specifically to deny rights to some race of people?

Google redlining and tell me who else we've done that to without restitution.
please do share where to look or examples. I run my own company (flair.co) and have no interest in looking for another job as long as we are continuing to make money. But I find the idea of 400K+ as an engineer to be crazy. Is it for some particular/niche experience or academic background? Is it execution speed? I feel like I can whip up whatever software I need and fast barring super deep academic bits but can't imagine who would pay my 400K.
I was quite confused by the article. It's old news. As one of the comments there said:

Custom ICs for networking were first developed decades ago. Everything from carrier class routers to home routers contain networking ASICs. Cisco and Juniper consume many ASICs.
> Regardless, I think people get too hung up on buzz-phrases like "is time real?" or "are we in a multiverse?".

If by people you mean science vbloggers like VSauce or Veritasium or even NDT's new Cosmos, then I'd say their goals are not to do or teach science but to inspire the next generation. Pop-sci is not for today's scientists. It is for the next generation of scientists and I think these philosophical questions are a fantastic way to get people interested in pursuing a career that doesn't have much glamor but can be very promising and fulfilling.
GKD: General kernel debugger
I think part of the "dream" in "dream setup" implies that there would be great connectivity in the forest.
Pay to Win is the evil.

Magic the Gathering is good.

Because.
As a happy resident in the San Francisco office, this is not quite true. To wit, there are major Cloud products in San Francisco, as well as Chrome, Android, and now a small VR presence. Also, Compute Engine started in, and mostly still remains fully based in, Seattle (the waterside Fremont office). Folks in the non-Mountain View offices may grumble about visibility, promotions, etc. but if you're just looking to work on something interesting in Google San Francisco (or Seattle, New York, etc.) they certainly exist.
The Radiological Accident at the Irradiation Facility in Nesvizh [pdf]
For those wondering whether APK Mirror is safe, it's run by Android Police, probably the best Android news site. That's why they link to it in their articles: http://www.androidpolice.com/2016/07/07/pokemon-go-now-live-...
print_r(json_decode(file_get_contents("http://url.com/"), TRUE));
I'm just curious, but isn't having just the whales pay more "moral"? More people get a huge amount of value for free.