skysight-inc/HackerNews huggingface dataset:
>But a prank is always at the target's expense.

This is technically correct, but traditionally you're only supposed to execute pranks against friends that you already know would appreciate this kind of humor. If that's what you're doing, it's not usually a negative thing for anyone involved.
Tule (YC S14) hiring initial sales and marketing roles
Underlining links always help.
> TLS is __supposed to make URLS confidential__. I don't understand why you don't
see this is a problem.

No it is not. TLS is supposed to provide a secure connection for applications. HTTPS is supposed to make URLs confidential. These are different RFCs.

This exploit does not affect TLS. Okay? It. Does. Not. Affect. TLS. This affects _your web browser_.

- When a Flash vulnerability exposes user data, do you say HTTPS is compromised? Of course not.

- When you send someone an e-mail virus that they download with their e-mail program, do you say IMAP is compromised? Of course not.

- If your browser sends all its URLs to some unauthenticated unauthorized random server on the internet because it was being 'overly friendly', is HTTPS compromised? Of course not!

Your browser is compromised! HTTPS is working fine! And HTTPS isn't even involved!!! All of the juicy parts of this exploit happens over plain HTTP!

Your web browser and plugins and e-mail client may be fucked up, but the protocols they work with are working fine. Even wpad is, ironically, working exactly as it's supposed to.

> RFC 5246 makes no distinction between POST and GETs for it's security assurances
- as part of the HTTP request, it should be confidential.

....Why are you bringing up TLS at all?

> You mean HTTP, the one thing HTTPS is used with?

Yes. This exploit does not affect HTTP or HTTPS. It affects wpad-enabled services and applications.

There are lots, and lots, and LOTS of HTTP and HTTPS connections out there that do not support wpad. None of them are affected. The HTTP protocol, and the HTTPS protocol, and TLS (why you keep bringing up TLS is beyond me) are not affected directly by this exploit. The services and applications are.

> > The net effect of this exploit (that's what it is, not an attack per se)
> There's no fucking difference.

Go get a dictionary, buddy, and look up vulnerability, exploit, and attack. Now pick one word and replace all cases of all those words with just the one word. We use specific words for things for a reason.
If I can viably develop on Windows instead of a slow (on my i3 laptop) Linux VM I'll be thrilled.

Not getting my hopes up though.
This is awesome, thank you! I have to admit I wasn't even thinking about GMO in relation to organic. But I can share that my wife and I totally feel like "Organic" is mostly a bullshit marketing label being used to justify increased prices, and we don't buy that organic certified foods are safer.

I wouldn't say I'm anti GMO in general, like you I just don't love all the ways this tool is being used.

What do you think the chances are that the Jurassic Park movies have had the largest impact on the public perception of GMO foods? :P
Anecdotally, it seems that investors (funds, really) are getting more conservative with series A rounds, but the seed money is still quite loose. But bubble-spec is kind of a pointless thing to argue on the internet. Either buy your short positions and laugh all the way to the bank if you're right, or don't, but creating FUD is bad for everyone.
I left both OS X and Windows for Linux Mint recently; both because they became regressions to previous versions and once in decline you can't really expect improvements, hence Linux where there is still some nice flow of creative air and a potential/need to improve.
Yeah, I'm saying that as your app grows out of being a simple CRUD app into something more useful and involved, there will be less of a relationship between what you need to store things efficiently, and what you need to present them well. Your model will become more graph-like, probably. For this reason, patterns designed around AR-style models will fail to scale. I disagree that this only works in a mono-lingual environment, although you will need tooling and infrastructure to support it; a model-centric architecture typically doesn't afford the possibility of multi-lingual support.

The code doesn't go in the models, it goes in the service/arbitration layer. DB as a store of facts is obvious -- DB as a 1:1 representation of what yet-unforseen features, UIs and platforms will need is a naive and limiting assumption. You have to build your application in a way that future product needs won't be constrained by storage and modeling decisions, which is a tension that Rails apps frequently encounter.
There is a huge social and logistical difference between education and implanting computer chips in people's brains.

We already have a semi-permanent underclass based on (among other things) poor access to decent education, something which is supposedly guaranteed by law in the US. Imagine how much worse that will get if we don't even pretend that augmentation is a universal right, but let the free market charge for it instead.
>As I am typing this on my macbook air, I have to take my hands off the keyboard time to time because it gets too hot.

For over 5 Apple laptops of various kinds, I've never seen that, with heavy programming/VM use, or DAW and NLE use. A little warmer yes. Ouch, my hands hurt? No. Does that really happen, and can we have some actual temperature measurements, or is it just that some people are too sensitive?

>Also the battery has swollen up to a point where I can't even close the laptop.

That, on the other hand, I had happen. The battery needs to be replaced, and it can even be dangerous.

>All they released was some minor upgrades and a "macbook" which I didn't buy because I know better than to act as Apple's guinea pig and buy their first iteration of anything--I learned it the hard way with my iPhones and iPads.

Those are probably the worst examples to cite, as the original iPhone and iPad were mighty fine. It's mostly with 1st generations of Mac redesigns that things sometimes get bad for some production runs (faults found in new materials/suppliers/designs etc).

>Anyway, all this to me feels like it's because Apple is no more an innovator company, instead they follow the stock market.

Compared to which company that is? Because I mostly see either PR projects (like Google glass) or failed semi-copies (Surface capped to 1M unit sales etc).

So while new and exhiting things might have slowed down at Apple (though I remember in Jobs times that we waited for 5 years of iterations to get color and wifi on our iPods and people cheered for any minor incremental update as if it was golden) I just don't see anyone in the PC land doing anything worth my while.
I saw that there is a an Ember addon to work with Electron[0], that's probably the closest thing I can think of.

[0] - https://github.com/felixrieseberg/ember-electron
It's often an issue in up-rounds as well.

Sometimes firms can't follow-on from a different fund even if they're following, up-round or down-round. That's why funds usually reserve money for follow-on investments.

Firms often have to go back to their LPs if they want to invest in the same company across funds.
Selenium Open Command
>I hear this a lot in retrospectives but was this really that challenging?

What was more challenging in my opinion/experience wasn't the technical aspect; it was the social/human aspect. I live in Algeria and I had a computer since age 4 and started BASIC at 9 and all is good, but there was no Homebrew Computer Club. We were among the first in the country to get a machine like that (it cost the same as a piece of land).

Granted, we also didn't have internet in 91 and the country was in a bloody civil war where you're happy when "only" 10 people get decapitated a day, people waiting in line to get groceries hoping to get home before curfew, and children being taught tradecraft.. but for someone my age, humans would have been more useful.

It's the microcosm/scene/culture that was lacking the most. People to live your interest with, to show your programs to, to learn from. The encouragement of knowing there even exists a scence/culture where that stuff is cool instead of asking myself why on earth I, as a non English speaker in a non English speaking country, am looking up every word in a function description in the dictionary to make sense out of it. Doing that stuff at that age in a computer desert instead of being among your peers was more challenging than any technical difficulties.
I'm not sure if you're being tongue in cheek, but if not, honest question: aren't those examples of actual fraud rather than "just" frivolous spending?
> Presumably you wouldn't be visiting a .onion address if you're not already connected through a Tor instance you know about.

How about a link? Or even more problematically, using its now trusted status to load inside an HTTPS page!

> Which would be exactly the point, those are OK to spoof, since you'd only be visiting them through a trusted network, where nothing can be externally verified anyway.

What? How is it okay for safe-place.home to be trusted when an attacker can spoof the DNS resolution upstream (like ISPs already routinely do to point you to ads)?

The whole point of distinguishing HTTPS connections is that they provide some way of guarding against spoofing of name resolution/packets and snooping. Nothing about how .local, .home, .onion, or local-reserved IP ranges are handled by browsers prevents these from being attacked, in many cases even from outside your network. If you curl 192.168.80.1 (assuming that's not within your subnet), your router will happily shoot some packets at your ISP. The situation for the others is even worse.
Serval: Self-Hosted Automation
My cofounder and I were hoping to attend startup school. Surprisingly, we don't have a name or a URL but we do have a prototype and interested customers! Is there any good way to batch our applications together?
Inside the Great Wall
well that's a blast from the past, thanks. though it did totally jump the shark when any bad news at any company of any size got to be "newsworthy."
I have a feeling you'll enjoy this:

https://www.reddit.com/r/subredditsimulator
Yes you have. Jersey, Jackson and almost every Java database abstraction that's higher than JDBC uses one if not both. Dropwizard is one of the better Java libraries in this regard but it's still there.
I noticed that property when I was 10 after the schoolmaster forced the class to write out the cubes of 1 to 20 to keep us quiet for a few hours.
The helmet is actually very nice. The HUD (actually technically a HMD not a HUD) is not distracting at all. it's the size and position of a typical right hand rear view mirror, and hardly anything visual happens on it except the rear camera display, which is has been a fantastic enhancement to my riding safety, although it does take some getting used to.
I think this is an obvious thing for NYT to do and it seems like this is one of the things they can leverage to get more subscriptions, since they obviously put it behind a paywall. I think it would be really interesting if they did something with the digitization of it all, like having another subscription where they offered reprints of different years, presumably only one at a time due to logistical problems.

It would also be really interesting to be able to see the different discussions in one publication about a topic and see how it may have evolved over the years.

These are the things that I think are going to be key to NYT and other publications moving forward, which seems more like story telling with archives, which is part of their resources compared to new publications and outlets.
That googly-eyed bald guy is, quite literally, the worst thing ever. I'm not sure why, but it was deeply disturbing in a very strange, uncanny-valley sort of way. Perhaps it's the fact that they've not got the synthesis _quite_ right yet, and something is tapping on your subconscious' shoulder going 'that's not real' while you are happily looking at it, and seeing something that - to all intents and purposes - is an actual, real video of a person?
Don't worry, new iOS release will show you what a clunker you actually have! ;-)
It's odd how desperate some people are to give Tesla a free pass.

Basically you're saying that some level of collateral damage is acceptable, and because there's a warning, it's the driver's fault.
I moved from Windows to Mac because I can actually afford it, and honestly I'd really prefer not to go back. I don't get the love for Windows that some Mac/Linux devs have.
Here's our take...bitcoin is not money.
https://medium.com/snow-ventures/bitcoin-is-not-money-part-1...
You can't organize the opposite of commercial exploitation. It's something the individual has to value and oppose for themselves, a choice they make. But you can motivate commercial exploitation by dangling carrots in front of people who can be bent to compromise, which is many of us. So commercial exploitation can gain momentum.
I really don't think the HMD would be a problem in a crash. If it somehow came into contact with my face, it would basically mean the helmet caved in, in which case I already am in plenty of trouble so who cares about the HMD.
I'm unaware of any precedent... I could certainly see people getting upset, but I don't think they'd have solid grounds.

The interesting thing is that I actually am considering setting up a WPAD entry on a domain where I am seeing that traffic, for my own purposes (i.e. unrelated to the random queries I am getting).

In fact, I have just as much an argument that they would be the ones with possible CFAA liability if they start using my proxy server in a way I don't intend.

The CFAA is a mess.
They are actually fraud, and nobody should do any of them.
> If it is true that most designers are not aware of the accessibility issues caused by their designs in various environments, how can we still call them designers?

... penny for every time I heard a developer say something stupid about their own field.

Just because you're not aware of 1 thing, doesn't mean you shouldn't be called a designer anymore. Just so you're aware, your horse is high as a kite.
Domains are cheap; why not just buy one and make up a working name for now?

Alternatively, you can get webhosting on subdomains for free on sites like tumblr, so at worst you could do that (but the former doesn't seem that much harder but seems a lot more professional.)

Another option would be to each put the same string in those fields; the grouping (assuming there is one; I haven't looked into it in depth) probably would be based on string matching rather an actual website existing.
Assange Timed WikiLeaks Release of Democratic Emails to Harm Hillary Clinton
Tom Demarco (one of the authors of Peopleware [0]) argues that certification is primarily about the political agenda of the certifier/de-certifier, for example in a letter to the editor [1] of the Cutter IT Journal, the end of which I've clipped:

" Before ending, I offer the following example of how certification/de-certification will work: I hereby de-certify Prins Ralston, Nancy Mead, Patricia Douglas and Ed Yourdon. They will forever after have to write their names with the letters RTSF (Relegated To Slinging Fries) after them. This demonstration shows us two things about the process: 1) those who do the certification are always effectively self-appointed, and 2) the basis for de-certification, no matter what the societal rationale, always works out to be the private agenda of the de-certifier.
James Bach and Luke Hohmann came out against certification in their article, arguing along the same lines I have used above. But I am going to de-certify them as well. This shows a third fundamental fact about certification: 3) it is inherently capricious, subject to all kinds of mischief.
I vote that we let poor old Citicorp and poor old Aetna and poor old Microsoft figure out for themselves who they should hire. I suggest that we have a perfectly fine selection mechanism at work today; it's called the market. Some people get hired as software developers and some people don't. It is a lot more competent than any appointed elite would be and a lot more ethical."

[0] 'Peopleware: Productive Projects and Teams', Tom Demarco, Timothy Lister

[1] http://www.systemsguild.com/certification.htm
> Honestly who wants to sysadmin their helmet?

You sound like someone at the advent of the smart phone who says "who would want to sysadmin their phone?"
I'd rather not hand my money over to one of the few organizations (i.e. the US government) whose cyber security practices are even worse than banks.
Yeah, the title is heavily overloaded for sure.

The meta point I'm trying to share is that if you're trying to convince a technical audience(which HN certainly is) berating people by saying "I know better because I have this slip of paper" is the quickest way to get someone to dig in and dismiss your idea.

Engineers are natural skeptics, arguing from the technical side will always be the stronger position.
Most definitely is fraud, and of course I wouldn't actually recommend doing it!!

But that's what parent was talking about, buying toys and parties and such and why investors don't notice. Cause they call it by a different name.
A battery "swollen up to a point where I can't even close the laptop" is a serious fire/explosion hazard.

You should remove it from your laptop and safely dispose of it as soon as possible.

It does NOT go into regular garbage or recycle. Call your local recycle center (or the non-emergency number of your fire deptartment) to ask how your city handles laptop batteries.
Yeah that's a good point. I don't really think these services are "at cost", though: isn't the whole point of this industry that marginal costs are super low?
If you click checkout you will get a message that the product is not currently available.
Deflationary currency discourages spending, increases the value of debt, causes people to hoard cash, and potentially causes wage unemployment.
The GoPro cameras are quite different to the cameras that facebook are using... GoPro cameras have rolling shutter on the lens, whilst the facebook cameras are using higher quality cameras which have no rolling shutter.

The google jump is also using go pro cameras.
What about gRPC?
I don't treat my helmets with nearly the care I do my iPhone

Just as a note to everyone: If you drop your helmet, you should throw it away. You can't tell if the foam has been cracked, which reduces its protection.
I use contactless wherever it's available, the chip readers are way too slow and drive me nuts.
Alcatel Link Y900 4G+ LED Mobile Hotspot
My two cents: I have used an Apple Watch every day for the past year, and I love it.
Hell, I've actually manipulated the database locks of a web app server by hand behind the scenes during a demo!
> In what world is shutting down, a superior alternative to selling the company to LeSports for some cold hard cash?

In a world with lots of cash where a companny like Skully is just pocket change and they'd rather not deal with as they have bigger fish to fry.

So you are in the business of buying and selling houses and you do $1M transactions every month. This is like finding a lawn mower in a garage, and yeah you could sell it for $200 on Cragslist, but in the big scheme of things it is not worth your time.
>As a single, insignificant data point: I just bought my first Windows laptop after 2008. I kept waiting for Apple to release Skylake professional machines. Just gave up waiting for them.

The Skylake processors meant for the MacBook Pros have not yet made available by Intel. They were announced last year but are still either not available at all (TBD) or available at small quantities.

The PC competitors rushed to put out PCs with whatever Skylake models Intels put out, models that have marginal gais (or sometimes even worse performance) compared to earlier Haswell.

The worst one can say about Apple is not about them not rushing to adopt the BS early Skylake models that are unfit for the MBP, but that they held the prices of MBPr with older processors high while people are waiting for the refresh.

That said, Apple has already put out Skylake Macbook and Skylake iMacs.
None of that is required, and newer installers can set your path with a checkbox.
Facebook commits to build housing in Menlo Park
> This hits close to home.

same, but I grew up in rural Australia, so it's missing the hours of driving to get to a null link modem cable party.
Pretty sure its not just the raw footage but the face that the action cameras have rolling shutter... I would assume that the rolling shutter along with the cameras not being in sync would mean that doing optical flow wouldn't work correctly in terms of creating a clean image.
The problem is that there are many thousands of places that can use improvements. Individually they're not necessarily expensive, but collectively the cost would be astronomical.

Even low hanging fruit sometimes doesn't get fixed in a timely manner. E.g. here's an example: http://www.oregonlive.com/commuting/index.ssf/2014/11/odot_s...

I-5 is the primary North-South highway for the US west coast. In Oregon until recently there were numerous stretches without anything separating the traffic other than a grass median. Many cars have crossed the median at high speed, sometimes resulting in fatal crashes.

That particular improvement cost $7 million. But, to riff on a comment from the late Senator Dirksen, "$7 million here, $7 million there, pretty soon, you're talking real money."
I've been sitting around for the past year or so wanting to give them more money for a new Air. Last month I tried a Surface and that came damn close to replacing my Air for its primary job of "going out to cafes and parks with me to draw stuff in Illustrator". I only brought it back because it had some major issues with Illustrator dropping the first half second of stylus strokes. Despite really hating the Windows experience.

If Apple comes out with a laptop/tablet hybrid like that, they will have my money in a hot second.
Understanding Trump – George Lakoff
I'm trying to find evidence on what memory usage is for MySQL for 1k connections vs postgres with 1k connections. I am finding a lot of people saying postgres has heavier connections but for 1k connections what's the difference. 1MB of memory? 1GB?
Tor has end-to-end encryption for onion addresses, but TLS provides identity validation as well as encryption. So you can be sure that the .onion address hasn't been spoofed (or that you typo'd it). In addition, if you have both the .onion and .com on the same certificate, you get the additional benefit of binding both addresses together as being part of the same logical website.
So I don't understand. Why make the "formal" specification for the processor rather then one in verilog (or some other immediately testable system) to start with?

If you can't directly check from a provable formal system then it doesn't really help with validation and you have to jump through a lot of hoops to get there (like OP did).
Because TLS provides identity validation and can be used to logically bind the .onion and .com methods of accessing the service.
>* Tell me how you disable your second monitor in OSX using the gui. It was impossible to do this around 2 years ago when I tried, it probably still is.*

By going to the Preferences -> Display?

>It is also super fun trying to get a macbook to output both sound and video onto a tv

Never had any issue with it, with 2 TV models, a projector, 2 Macs (Air, MBPr) -- using HDMI in all.
> Would you prefer to trust the Federal Reserve, with all its own internal goals and motivations, to print money "honestly", or would you rather have an algorithm that adjusted the block payout rate to maintain constant 1% inflation in the monetary base, relative to monetary velocity?

I would prefer that people not have to create their own promissory notes during economic booms because it's impossible to create a legitimate loan due to the current monetary supply. You're begging for a black market currency at that point.