skysight-inc/HackerNews huggingface dataset:
A little confused as to how this integrates with existing sites. Does it require usage of a new theme, or can you integrate it with your current theme? If integration is not possible, does it support plugins like WooCommerce?
They had a negotiator, for multiple hours. I don't know if the negotiator gave up or if someone else made the decision to end the standoff.
The $12 “Gongkai” Phone
The CDG "guards" are soldiers on active military duty, IIRC.
It's not clear at all that he posed a non-imminent threat. He had a weapon, had just been using it to kill people, and at any moment could have started trying to kill people again. The cops shouldn't have to risk their lives in this situation.
Could you please share any existing sources (schema, firmware)? Thanks in advance.
There's no way for a site to securely store keys in the browser. The server can't put them there because then the server would have them too. A client-side script could generate them, but it can't store them without extensions (or the server via some JS it sends) also having access to them.

This is why Signal and WhatsApp require the client to run on the phone - the phones are doing the decryption for the web apps.

This is flaky, consumes a lot of battery and generally is somewhat error-prone - probably not something FB wants to deal with.
This is very good article - gave me much info into how I could manage spikes. Thank you
If it seems oddly excessive, this might be the point. Cops are always "enthusiastic" in their response to cop-killers. I think they intentionally sought out a way to end the standoff with a little extra extravagance. An IRL sharks with frikin lasers moment.

The entire thing, from the shooting of the unarmed man by police to this end seems to be one long chain of ridiculous over-reactions. I sense a theme.
No, we don't expect police snipers to shoot a suspect who's holed up and talking and has no hostages. At least I certainly wouldn't.
> Java has such a horrendous ecosystem, it's really unacceptable.

This has not been my experience at all. Java's ecosystem and vast libraries of battle tested software is unmatched on any platform.
The reports so far is that talks had broken down and the suspect threatened officers. At that point they could have waited longer, which could have lead to either more fruitful talks or a stalemate. At that point they could send in a SWAT or a robot to take the guy out. Both result in a dead suspect. One could result in injury or more to officers, if suspect had other weapons explosives and wasn't going to surrender. The other you send in the robot to take the suspect out.

The only difference is that one you have people with triggers, the other you have a remote person with a button. The result is the same.

When we begin using robotic fighters in wars, the same question will arise. And we'll make the same decision. We'll send the robots instead of human soldiers to minimize danger to our people, rather than give equal footing to the person or people not us.

I must say, I didn't expect this to happen so soon, but on the other hand, it was a practical decision --with lots of open questions, as well as precedence.
Major ISPs reported to MITM foreign news sites in Russia. Cisco DPI used
>when there's an imminent threat to innocent lives

This is way too subjective.
If they have to be warned about triggers what are they going to do when they see a multi-page stored procedure :P
At a minimum, they've made a number of choices which go against (fairly widely considered) good cryptographic principles.

This in itself wouldn't even be that bad if they weren't then trying pretty hard to convince the general public that it's super secure with massively flawed stunts as explained here: https://moxie.org/blog/telegram-crypto-challenge/
So ... no comment on the choice of picture in the blog post? I hadn't heard of Jules Bonnot, but found the wikipedia article illuminating: https://en.wikipedia.org/wiki/Jules_Bonnot

This seems like it's a subtle endorsement for using Open Whisper Systems for criminal activities. Is it just me, or does that seem like the wrong image to gravitate towards?
tools list is useful, added to pocket.
It still sounds like something doesn't work quite well . The Chinese in general doesn't have a maker culture, a free open-source culture.

On the other hand, just translating the documentation of this led lightbulb interface would have taken very little time, and would have probably created a nice app that would appeal to western buyers and increase sales.

Maybe there's an opportunity for some site to make this process happen ?
I predict a lot of unwarranted attention will be devoted to the fact that a "robot" (i.e. The robots are killing us!) was used, even though it was remote controlled and functionally not much different than if officers had lobbed an explosive grenade at the suspect. To me, it's more interesting that lethal force was used in a non-hostage situation -- did the suspect threaten to detonate his own bombs (which would make this more like a hostage situation)? Though I suppose concern over the use of robots is warranted...in the same way that drones have allowed for the conduct of a proxy war...would police have gone for the lethal option if it required officers to be put in harm's way?
The operative word there is _good_. Remember that we're talking about multiple systems that are run differently all across the country. Some systems are better than others. It's not a one-size fits all comparison.
What if he's scored as a threat and reported to the FBI? A human can understand sarcasm, jokes, or hyperbole. An algorithm is going to see scary words and add them to the 'dangerous' score.
Can you share the steps so that more people can do this? What exactly should we look for?
It could be, but the article didn't seem to paint the clientele in a good light.
From the article:

> Five officers were killed and seven others were injured, as well as two civilians.

Even NBC is referring to non-police as "civilians" here which really drives the point home.
... it's peer to peer ... the server acts like a peer... the same code can run for both peers ...

So you can choose any webrtc binding for any language you use server side.
The term is "leafy suburbs" or "leafy neighborhoods."
> 3) Join an active developed (currently hypothetical) fork of python 2

RedHat is probably going to keep Python2 on some degree of life-support at least until 2030 or so, just based on a guess that RHEL8 most likely will still have python2, and its support will continue for 10+ years after its release.
Why? The guy was directly responsible, either solely or in a group, for intentionally assassinating uniformed police during a crowded event and vocally claimed to plant bombs and kill more police. There is no greater justification for police to immediately terminate a life, whether that justification is legal or due to exigence.

If this is what it took to end the suspect's life, thereby preventing further harm, then so be it and congratulations.
So how do you manage your passwords you have for multiple sites?
Bingo. Much clearer than how I said it haha
The situation is considerably better on Marshmallow because the app only prompts for permission for the extra features right before they are used - and many of those never will be. The app covers a lot of functionality (too much?).
I wonder how they made the robot blow people up, it doesn't seem like there are any factory made "Turn your expensive toy into sucidie bomber" kit. Jurry-rigging on the scene using moving parts to pull a pin of a grenade? Or did they use a last resort "let's blow it up when we clear the premises" kind of defusal kit? Or did they already had a custom kit with directional explosives?

The robot in question, incase anyone cares about the robot;
https://www.qinetiq-na.com/products/unmanned-systems/dragon-...
Companies using Numpy and Scipy who need python 2.x support will probably buy a support plan from someone like Continuum Analytics.
Putting the prostitution to one side, the underlying issues are particularly concerning to me.

In this article, young people appear to have either large debt or expensive taste. They're encouraged to attend college, but increasingly find that the available jobs don't meet expectations. "Vanilla", low-paying employment.

The description of the young woman who learned how to present herself and even how to do an elevator pitch sound like the exception, rather than the norm. Not everyone is so ambitious. Instead, the article suggests that most young people start doing this out of desperation.

Desperation for paying off increasing debt, desperation for not having been taught or learned the skills necessary to have a non-vanilla, well-paying job, desperation for not being able to have the life that seems so accessible online today but only available to a few.
Even if they have been able to successfully get in-browser code signing working, how can they possibly gaurantee no leakage of data? I mean, there are so many inroads, from mitm to rogue browser plugins... It seems (near) impossible to secure them all.
Great, congrats!!!

Providentially, I was in the process of landing a WordPress dev + SEO/SMO job just around the time you were posting this. I am going to work on this over the weekend and will most certainly give Tailor a try and hopefully, have some feedback for you early next week.

Edit: Thus far, I've been a big fan of the SiteOrigin Page Builder so it would be interesting to see how Tailor stacks up.
Like everyone else I don't have any details on this beyond what's been reported. But I for one think this -may- have been a great decision to end the standoff without risking the lives of any more officers.

For those that are saying "there was no imminent threat", that is incorrect. One relevant data point, see the 2009 standoff in Oakland, where 2 SWAT officers died when they moved in on a cornered suspect (https://en.wikipedia.org/wiki/2009_shootings_of_Oakland_poli...).

This seems to me like a good application of technology in this extremely rare type of situation.
You should've made it explicit then that you're referring to slow HFT -- the post I was replying to drew no such distinction apart from saying the "extreme end" uses FPGAs. Obviously if young gen GC pauses aren't an issue, then there's nothing to talk about here but then I'd argue that's not really HFT, although I know the term is quite vague, and is no different than other types of systems. There are other issues with GC and garbage allocations, such as d-cache pollution, but I suppose no need to really discuss them given the type of system you're discussing.

I know you were throwing 250us out there as a pseudo example, but that's actually a very long time even outside of UHFT/MM.

Also don't forget that your trading daemons will be under a fire hose consuming marketdata, so beyond being able to tick-to-trade quickly, you need to be able to consume that stream without building up a substantial backlog (or worse, OOM or enter permanent gapping).
Your comment is a bit unclear, but the answer is the same.

If they rent the lab out to someone else, they're still the owner.

If they rent the lab from some third party owner, they're the operator.

Either way they're violating the terms of the ban.
Now that the Signal Protocol is deployed in so many different places, is there a proper specification of the (current) protocol? (The old axolotl spec and the GPL implementation don't qualify)

What are the licensing conditions / restrictions for using the protocol?
At the end of the day, text is just an intermediate format that we understand. Its all stored in a binary representation.

Yes, I agree. Text is too flexible (allowing you to do clever things you couldn't do in a drop down menu). A drop down menu won't allow you to make the same mistakes that a text option will, but is way less flexible.
1. I check in on .NET Core and ASP.NET Core every few months, to see if the tooling and documentation have stabilized. I just happened to check in yesterday, trying to create a "Hello World" ASP.NET Core web app. The skeleton project created by the "dotnet new" command doesn't match the "Getting Started" documentation on the ASP.NET Core website. After tinkering in frustration for an hour, I gave up. See you again in another few months.

2. What .NET open source community? I'm not aware of single significant open-source community project in that ecosystem that isn't a lagging imitation of something from the Java community (e.g. Akka.NET, MassTransit, etc). There's a lot of excitement around VS Code, and the possibilities of future stuff on .NET Core, but chatter on HN and Reddit isn't the same as actual shipped code.

3. If by "ecosystem" you mean web forums filled with college students chatting about it, then fine. But I think for most people, "ecosystem" refers to the availability of production-grade libraries and infrastructure components. Try naming one server-side niche in which Maven Centrals lags behind any other language in existence.
Commanding “Google Now” via speakers with distorted voice (proof of concept)
Theranos CEO Elizabeth Holmes banned from owning a lab
Heh, Tinder where you have several "Like" buttons, each with a different price tag...
Remember that rogue cop a few years back that killed a few other cops and tried to flee the country?

In their efforts to find them, eight cops open fired on a truck with two women inside. Over 100 rounds fired, and the women thankfully survived despite multiple gunshot wounds. And of course millions of dollars were awarded to those women and none of the officers were fired as a result.

And remember how that situation ended? The cop killer holed up in a cabin in the woods by himself surrounded by hundreds of cops. They decided to burn the place down with the cop killer in it.

Only a few cops are actively over-aggressive and hot headed, but that nearly every other cop stands by as they let the suspect burn alive (or over a hundred rounds fired at a truck without any probable cause) says all that needs to be said.
The language in the police department's announcement that I heard on the radio was really curious. I can't find a transcript so I'm going by memory, but it was something like, "The suspect was deceased by a robot carrying a bomb." It was really passive and euphemistic language. I thought it was weird that they couldn't just say straght-up "our officers killed him." I'd have no problem with that statement if the killing was justified, but they seemed to want to soften it as much as possible.
That's not been my experience, and I'm a Python developer by trade. Python simply doesn't scale well with code size, team size, performance requirements, etc.

Go's biggest problem is a lack of generics, which means that in some cases, you have to fall back to duck typing. So the worst case is no worse than Python's best case.
No Promises in Java.

Sadly - the language is really not quite as 'async' as we would like it to be.

Java scales much better than Javascript though, and I mean that in the architectural sense.

Past 50K lines of code - the lack of typing in JS can start to be hell, unless you really know what you are dong.

Of course, you move much more quickly early on in JS and that's actually important: you need to be able to 'iterate and adapt' in todays world. So it's kind of a paradox.

If you're building a bank, you do it deliberately with Java or something like that.

If you're building a nimble startup, you can start with Node and if there are systems that reach a certain degree of maturity and the uses/cases and data model start to settle you can fold over systems to Java or something like that.

A great team can use anything in the end though - that said, it's really hard to find super talented and responsible people across the board.
Server would have the keys _because_ the client-side code can send it to the server. That's also possible in the native app, isn't it?
> Best case, they can try to limit the sales of assault weapons (though there is no definition of that) and closing the insane loopholes that mean no-one needs a background check if they buy a gun at at a gun show, etc.

The problem with both of these proposals is that they're ridiculous.

Around 95% of shootings in the US are with handguns. Prohibiting some rifles based on cosmetic characteristics is not useful. (But still very irritating since they're quite popular with non-murderers.)

The "gun show loophole" has nothing to do with gun shows. Anyone in the business of selling firearms is required to do a background check. What it's referring to is that a private person can e.g. sell a rifle to a hunting buddy without a background check. Which keeps coming up because the statistics make it easy to mislead people.

A significant percentage of firearm transfers end up not requiring a background check because they're private, but it's because there are so many transfers between friends and family, not because there are so many criminals buying firearms at gun shows.

The problem is fundamentally this. Most of the people who commit the mass shootings that make the news would actually pass the background check. The people who don't pass are the drug dealers but the drug dealers get their guns the same way they get their drugs.

Canada has a lot of guns but very few homicides. Mexico has strict gun restrictions and twice the firearm-related homicides per capita as the US. The solution isn't gun laws.
2013, on HN before at:

https://news.ycombinator.com/item?id=8646781
Dallas police used a bomb robot to kill active shooter
Welcome to the world, where everything worthwhile is filled with ambiguity and subjectivity.
https://jhipster.github.io

It's actually based on Spring Boot.
Facebook supports PGP too, by the way:
https://www.facebook.com/notes/protect-the-graph/securing-em...

And runs as a Tor hidden service at https://facebookcorewwwi.onion/:
https://www.facebook.com/notes/protect-the-graph/making-conn...
Is there an equivalent of PostgreSQL release notes[1]? I went looking and all I can find is marketing bullshit, too many "exciting" links, and a little tiny bit of actual content.

[1]: https://www.postgresql.org/docs/9.6/static/release.html
These guys deserve high praise. They have an idea and try to realize it.
I want to believe that houses will be constructed. And many homeless people could live comfortable. But I have some doubts about project extension. I heard the similar few years ago. And earlier. Many funds pay for soup kitchen and housing. Thousands of volunteers try to improve the standard of living of homeless. But theirs number grows every year. Maybe it needs to find new decisions?
If you don't need Python 3, then you won't need IPython 6.
What if his taillight was broken? (Seriously, is the original shooting now escalating into a civil war in a matter of days? Looks like that.)
I know we've got the "use the title" rule, but the tech-interesting part of this article is buried several paragraphs down.

> A standoff then ensued, which ended when the suspect was killed just before 3 a.m. local time. Police Chief Brown says the department used a "bomb robot" to place a device "where the suspect was" and detonate it — a move that he said was made to prevent any further risk to police officers.

I'm not certain, but this may be the first time US police have used a robot to kill a suspect.
That was absolutely my first thought. The article basically starts out with "everyone's doing it", then talks about how all the tech guys are taking part, and even goes as far as explaining the value proposition of "...girlfriend experience, without having to deal with an actual girlfriend.".

It reminds me of those "Don't buy <popular nutraceutical> until you read this" advertorials, which purportedly offer a critical look, but are actually written by the nutraceutical company.

I've flagged the post. I recommend you do the same.
Care to name some of these platforms which Java doesn't run on which .NET supports? I'm having a hard time coming up with even a very short list.
Looks nice, will probably try it out. (How) do you plan to monetize this? Looks very well rounded for an open source side project.
Flow and rhythm are a thing in progrsmming, which is why structured editing continues to feel "stilted" to many people. Heck, many people don't even like static typing for similar reasons...without heavy doses of inference, it forces you to write your code in a certain order or suffer from a bunch of distracting spurious tyoe errors.
Yes. But let's assume FB doesn't want the keys (because if they have them, then it's no longer E2E encryption), then client-side generated keys in a browser are still exposed to XSS attacks and extensions.

Installing a malicious extension, tricking users into typing commands in the developer tools, XSSing FB, all of these are much easier to do than attacking a native app on a phone.
They are A THREAT but not an IMMINENT one.
... man, that's vanityfair, I don't even know why it's on HN. I opened it, I saw the boobs, then I saw the boobs again, then the name.

This sort of magazines are just a channel to present products and to imprint the fear of being an outcast into people, in case they don't prostitute themselves for a product-brand. Of course it's bullshit marketing piece!
"Barricade is designed so anyone regardless of technical or security experience can understand and manage their security easily."

And then in the previous paragraph "someone has been running Cross Site Scripting attacks..."

Either XSS is such common knowledge that everyone knows what it means, or else...

Security is hard. SIEMs, behavioural IDSs, packet analysers etc, have all been done before - and you need someone full time to babysit the rules and all the false positives that they throw up for any moderately complex network with new apps/devices/use cases being added all the time.

There is a lot of detail on the architecture of Barricade, but nothing on how it differs from existing SIEMS, incident response, managing rulesets, tuning false positives, etc.

I suggest you put up more detailed information besides "machine learning" to show concretely how your tech is better than the stuff that has come before.
> company papers

Technically correct... The best kind of correct.
Please explain either with text or voice what is happening in that video. It is hard to follow.
The SWAT team had to move in on that suspect because the police felt the suspect was a threat to the lives of other people in the building, so they couldn't wait him out. That doesn't seem to have been the case here, since the suspect was in a parking garage.
True, however my point would be that when you have to selectively enable encryption, it only allows the government to more quickly find out who they consider suspect.
Ctrl-R for command history search. Similarly if you type a few characters and do up-arrow, it'll look up commands that start with the same characters. ipython saves every result, you can get it by typing Out[1] (... and it'll take up memory, so beware). Call it with --autocall 2 and then you can omit parentheses in function calls.
Am I confused? Isn't it impossible to brute force a single properly encrypted message?

(where properly means that the protocol and implementation are sound and so on)
Well put. This is the internet I'd like.
The formalwear thing strikes me as an interesting edge case.

I do not wear a suit regularly. I work in a lab and dressing up would be physically impractical (they would get destroyed) and culturally odd. Despite that, there are a few occasions where I absolutely need a suit and nothing else will do. Sometimes this even happens at short notice (e.g., for a funeral).

How does this fit into your four-part test? Q3a?
Wasn't the old bootstrap basically just pointing to specific commits to rust rather than tagged prior releases? I remember the servo repo doing something like that and maybe the Rust one as well (cloned it but have yet to build rust on my system from source!)
Could be a fun tip of the hat (so to speak) to the old saying: "When freedom is outlawed, only outlaws will be free."