skysight-inc/HackerNews huggingface dataset:
For the tldr folks, I skipped past the security guards' posturing, because I assume that it's what we expect from this video.

https://youtu.be/zDYMewJN8WE?t=1225 <-- This is when the police begin talking to the cameraman, and tell him he's doing nothing illegal or wrong.

The police definitely seem like they reacted very well in this instance.
It all depends on what you are working on. If you are Tesla and building that next big car everyone is so excited to see as a short term strategy it might work.

Working overtime on a sinking ship is rubbish. You need to rush for the nearest exit.

Note: The comment is very very irresponsible on part of Mayer. Yahoo! anyways is not a preferred employer these days. How is she supposed to hire the best talent with these kind of statements ?
John Saunders died
That argument breaks down when you realize that your local businesses aren't buying the goods or services that you can provide locally.

You should really be buying from the people and businesses with the fewest trade transactions from your customers. Once upon a time, that meant buying local was a smart move, but now it's more complex.

Since I, as a software developer, do not have any small business customers, the tightest possible trade graph loops that could return my own spending back to me all go through the larger national- and international-scale businesses.

Generalizing, I should prefer to buy from the companies that spend the most on software and software development, or who often buy from companies that spend a lot on my industry.

If I go to the farmers' market, I should prefer to buy from the stand that uses Google Pay or Stripe or Square or Bitcoin--or even Paypal--than from the one that is cash-only. Failing that, I should buy from the guy who has the newest tractor, with programmable GPS-assisted steering and blinking LEDs on the cup holder. Failing that, I should buy from the guy that spends the most on MMORPGs and dating websites.

Anything invested in a place will never pay off if I have to move away from it. And if I move, I can always prefer to move to the places that already have good schools and roads and parks without any additional investment from me.

Why should I eat anywhere other than McDonald's? Every chain and franchise restaurant runs McDonald's management software. They have touchscreen POSTs, and reprogrammable menu displays, and video screens at both of the dual drive-through lanes. They are consistent and inexpensive and "invest heavily" in R&D. Because sometimes I just want a convenient variety of salubrious and tasty food to eat, that's why. When Just-Down-My-Street Diner hires me to remodel their website, that's when I should prefer to eat there out of pure economic self-interest.
Fasttext – A Python Interface for Facebook FastText
There are some other foundational things needed for living a full life (which I infer is the author's point).

> "Jack, you shouldn't play Overwatch..."

This is judgement, which implies ego. The indicator here is "shouldn't". Ego isn't an authentic representation of self, it is fiction. If we can become aware of ego and avoid following it's incessant needs, we are closer to ego-lessness which can contribute significantly to happiness.

So in the end, being authentic and transparent without ego, the original statement may be something like:

> "Jack, I don't like to play overwatch, I would rather (do x,y,z)"

Great book for anyone seeking - Eckhardt Tolle - "A new earth" - be warned, skip chapter 1!
That's backward. People's right to be and to be a part of their communities do not come from their presumed submission to a coercive power. The issue is not collaboration and contribution. The issue is coercion.

I'm of native descent. I was on this continent before this government and there's no way it could exist with my consent.
This is because it's security theater, not actual security. The entire security culture of the USA is focused on drama, not legitimate vulnerabilities.

It would be amusing if it weren't so scary.
Communicating data science: Why and (some of the) how to visualize information
Not a general solution, but m.xkcd.com has an alternative presentation of the mouseover.
> not your life that's on the line.

That's a bit hyperbolic. I'd wager that if most HN readers were in the same situation, they would not be in serious danger.
Hey Meegul, thanks for your comment! We'd love to chat! You can always reach out to me at mert@patientbank.us or info@patientbank.us!
Arthur C. Clarke was right, any sufficiently advanced technology seems like magic, so peeps trust it way too much (see digital voting technology.)
An example from high-assurance, security field to back up your claim:

https://www.usenix.org/legacy/events/osdi10/tech/full_papers...
It can be hard for patients manage all their health information. That is the problem we are trying to solve! Obviously, this starts with patients having more control over their data. Imagine the next patient you transport pulling up their PatientBank account and it has an up to date medication list, allergies and PMH. Instead of relying on memory they have all their information in one place - when they need it.
That's a very good point. Some possible explanations (let me know what you think):

1) Banks have healthier competition in the EU? They wouldn't be able to form a cartel like they are trying in Australia.

2) Fraud liability is fully borne by the consumer in Europe, whereas Australian banks still have to refund customers?

3) It's a very new change (December), whereas Australian banks have lived with it for a decade or so.

Personally I think #1 is sufficient to explain it.
There is body language people use to be ignored in NYC. A fast walking pace is one of the most obvious examples.
Thanks mbesto - we appreciate your support :)
The Simple Problem That Still Stumps Mathematicians
You could see if it will run in Shumway?
You're just stammering "but but but that's not how it works" while still clinging to this "we can stand up to the bullies" narrative.

I've sketched out my logic and reasoning, please do the same.

Also, the false binary you presented is indeed false--because that's not what I wrote. My thesis is exactly that "standing up to the bullies" will lead to escalation of force in the short term which leads to violence and loss, and that failure to "stand up to the bullies" is achieved by doing anything other than continuing what you were doing when they told you to stop.

Please stop the bluster and explain this magical thinking that somehow lets us both "stand up to the bullies" without consequences of escalation.
Thanks! Didn't know about that one.
I can't imagine being wronged hard enough to do something like that. Then again, this twilight amazon I keep reading about on the internet might be bad enough.
$3100 is still a high amount. How would this be any different for a couple to rent an (equally sized) apartment with another couple for the same amount? That price makes sense for the area.
We Were Wrong About How Ancient Humans Colonized North America
> p.s. pleasing people also makes you happy, because you develop better relationships.

I disagree with your causation. By people pleasing you develop relationships that are inauthentic, which creates a fiction of good within your relationships. People pleasing and expecting those "better relationships" to be real is just perpetuating your own fiction.
No, I'm sorry, but you're wrong. John is not being honest. He's being an asshole. Being "completely honest" and "not hiding your emotions" does not equal being an asshole. There are many, many ways to express both those things without acting like John.

Seriously, I am completely sick and tired of this idea people have of excusing their assholery by claiming they're being "honest", and that showing even the most modicum of common decency, common sense, and empathy is somehow "hiding their emotions" and being dishonest. It's not.
mkdir -p ~/tmp/squirrel

cd ~/tmp/squirrel

wget -O index.htm http://lcamtuf.coredump.cx/squirrel/

firefox index.htm

Alternately, using an actual webserver instead of opening a file://

python3 -m http.server &

firefox http://127.0.0.1:8000/

Also works.

Note that the actual img tag has src="#" so when you are looking at the file opened locally, the image is also from local disk, not from his server, so it's legit.

However, the fact that it needs to be identified as a HTML file by the server implies to me that the idea others had ITT of abusing image hosting sites using this trick probably won't work.
I think thereg didn't get that quite right. From reading the original advisory, I would conclude that this is not a backdoor (a by-design security "override"), but an actual vulnerability in the boot loader, where it does not check the type of the signed data blob (policy vs. supplemental policy) and thus can be exploited to disable further signature checks. The effect is the same of course, both to attackers and to device owners.

One could speculate if this is a backdoor created with plausible deniability, maybe paid for by some three letter agency. But the evidence doesn't really point into the direction of an intentional backdoor.
Making Your Code Citable
Self-Driving Cars Will Improve Our Cities–If They Don’t Ruin Them
That's kind of nitpicky.
Yep, it's inactive. New URL is http://www.mozillalabs.com/en-US/demo-party/
Maybe, but they have lower karma on Hacker News.
Seems like an irresponsible article -- there were many credible reports, some even given by people who've seen identified themselves with real names, and this article casts doubt on two anonymous reports without mentioning the others and talking about their credibility.
Yes it's called sharding for MySQL.
Linux bug leaves sites vulnerable to serious hijacking attacks
Of course, the problem with a digital key is that once it's out in the wild, its out for everyone and forever.
“Joel Test” for Data Science
How China Is Changing Your Internet
How do I calculate the cost of complaints?
A backdoor is a backdoor = unauthorized access to a user's device. What does it matter if it's Microsoft, FBI, or the Chinese government using it? By definition, it can't be "just Microsoft" anyway, as the people who discovered this pointed out, whether it's up to Microsoft or not.

> and no one seems to be doing anything to correct the record.

Maybe Microsoft feels guilty about it? It reminds me of when a journalist asked them about Bitlocker being backdoored, and they refused to comment.

https://www.schneier.com/blog/archives/2015/03/can_the_nsa_b...
The OP actually cites that project as the method they use for initial polygon generation, and tells everyone to go read it.
No private keys were leaked; however a signed policy file, that lets you disable the protections within secureboot was discovered and repurposed.

Its not so much a backdoor key, but an overly permissive mechanism within microsofts secureboot implementation that could be used to implement a backdoor within the system.

A similar analogy in the CA world would be when the Microsoft Terminal Server Licensing CA (which accepted user submitted signing requests) was signing certificates that worked in other contexts (ie: https). This didn't break the CA system globally just one overly permissive implementation.
Haskell has gotten really good at more or less telling you what to do, it's a pretty common technique while developing to have the compiler run in the background whenever you change a file[0]. I've found it to be great when developing because you can just let the compiler tell you what type you need to put somewhere, and you can use something like Hoogle[1] to find how you can get that type.

[0]: usually people use this: http://www.mew.org/~kazu/proj/ghc-mod/en/ghc-modi.html

[1]: http://hoogle.haskell.org/
I can guess.

Pretend that you brought a take-out burger and fries back to the office for your lunch. As you take a bite of your sandwich, a hand snakes out and snags one of your fries, which then disappears into the smarmy maw of the boss of your boss.

He's not even hungry. He just wants to see what you do when he takes your food. It's a dominance test, and as childish and petty a test as anyone could possibly imagine.

I don't even know how anyone passes it, either.
I find his podcast relaxing (well, most of the time) to listen to even though I'm not a Mac user either. I think he mentioned Deck a couple of times, so I turned uBlock off to see, and hey, they really are reasonable and tasteful, so I left it open for them. They're not getting almost anything from me since I very rarely visit sites in their network, but I leave them on on principle. I don't mind ads, I mind being digitally and visually raped.
According to the article, there is often confusion about which building you're supposed to be in. So it's not always that easy.
How do clinical trial sites work?
Recently read it on my phone, which tells me it took 27.4 hours, or about the same as Scott Lynch's first two Gentlemen Bastards novels (also a good read, for different reasons), or a bit longer than the first 4 Dresden Files.
... we saw how register allocation and calling conventions — supposedly the exclusive concern of assembly-spinning compiler writers — occasionally pop their heads up in C ...

I don't know about "occasionally". At least on Windows, calling conventions used to be a constant headache. The C language default was cdecl, but the Win32 API default (most of the time) was stdcall. Then there was a variant (fastcall?) that tried to make use of registers.

Maybe it's all fixed now... But this being Win32, I rather expect they've managed to accumulate a few more "interesting" gotchas and edge cases as the platform expanded with 64-bit, WinRT, Universal Windows Platform and whatever.
Global GCE instances within your project, yes. Not every GCE instance everywhere, that would not be very helpful :)

If you wanted to have some instances that couldn't talk to your database, easiest thing to do is probably throw them in a separate project or create a new subnet that you firewall off and create your non-App Engine instances in that subnet.
I was impressed with the Labeled Faces in the Wild (LFW) facial auto-completion results, especially since the system was not trained on LFW at all! The results seemed almost too good to be true. Perhaps this is a testament that there isn't that much diversity in human faces?

Very well written overall, and I appreciated the author's thoughts on TensorFlow+torch at the end of the article.

Adversarial training is a fascinating idea, and I love the sound of it. I'd like to start applying that concept in the future.
More like "Beheadings will continue until morale improves."
In the US virtually all public places and people are fair game for photographs. One has no legal expectation of privacy in public place in the US.

That said, I am more qualified to be on commenting on petapixel than Hacker News. On photo web sites there are endless stories of overreach by individuals and institutions that attempt to limit a photographers right to take photographs in public. The situation in the USA is different than many other countries where photographing anyone associated with the military, any military installation and a great amount of "infrastructure" sites are off limits to photographers.

So while the Port Authority probably has no legal standing to limit photography it is interesting to ask if they have any logical standing for doing so. In numerous texts on the topic of physical security this issue is addressed. Security experts typically say that persons taking video or photos of secured locations with particular regard to photos of perimeter security, lighting security and cameras might be viewed as suspicious actors.

That common sense advice is taken to an absurd extreme here as it is highly unlikely that a threat actor would utilize a 4x5 camera, which is cumbersome, obvious and reliant on labor intensive film processing, on a tripod to take surveillance photos.

I experienced a similarly absurd episode when taking a photo of the weathered hopper control levers of a NYC garbage truck. A sanitation worker informed me that it was not allowed to take photographs of NYC vehicles. While I was tempted to inquire what the strategic import of the garbage control levers was, I held my tongue, finished my pictures and left.

As an example of how crazy people get at photographers check out: https://www.youtube.com/watch?v=97hfxth3aas
Apache Mesos – Mesos Containerizer
I think you're missing my point (and my poor wording probably didn't help).

A backdoor that requires physical access isn't a backdoor. If an attacker has such access, you're already screwed.

A backdoor that requires administrative privileges isn't a backdoor. If an attacker has such access, you're already screwed.

The so-called dev/test 'backdoor' really isn't a backdoor. It's a 'unlock' tool that's required for anyone who's going to engineer the device. My main beef is that this article appears to be re-branding the engineering unlock as a backdoor, and confusion is obviously ensuing.

Again, In my original post, I asked "What's the exploit"? and I understand that the existence of an exploit might not be the article's subject, but If you really think that there's a security problem here, I'll ask it again: "What's the exploit?"
Exploding Targets with AR15
As long as you don’t use any of the NIST curves, yes.
Very good! I always liked the content of Rust's error messages as it clearly explained the issue, but the form of those error messages was a bit problematic, they were very noisy and it wasn't easy to see the issue by simply glancing, you had to scroll up, find the beginning of the error and read carefully.
In general most providers are never going to read through a bunch of scanned pages exported from another provider's chart. They just don't have enough time.
Fortunately, in the amd64 Windows world, there's only one calling convention. (Edit: as cremno points out, there's now a new vectorcall convention. Dammit.) The 64-bit Windows ABI is a big improvement over the old 32-bit one. Other improvements are use of unwind tables for SEH and the requirement that all code be unwindable.
Elm has great error messages which do this.

F# is also adopting some of that style in F# 4.1: https://blogs.msdn.microsoft.com/dotnet/2016/07/25/a-peek-in...
Ask HN: How do you deal with the increasing global race to the bottom?
Perhaps the question itself implies too much.

But I feel that as time goes on, my competition will increasingly be not just those in my market, but across the globe. It's only a matter of time before programming labor is commoditized.

What are some strategies to deal with this beyond picking a hyper specialization?
Amazon was terribly run a decade ago, in 2006. At the time my manager had training to be a prison guard- that was his intended career. He didn't know how to run a spreadsheet well, and he was managing programmers. His boss was an ex-DMV employee, literally, and had carried the same sort of passive hostility over.

Amazon is a retailer that thinks it is a tech company and so its management is the kind of management you want at Walmart to keep the "associates" from pilfering the goods.

At least in 2006 it was that way.

I think the really interesting thing is, how can a company that is so notoriously terrible still be able to hire as many employees as they want? How is it that so many young (eg: 19-24 year old) engineers think that getting Amazon on their resume (or Facebook, Google, etc.) is somehow a big feather? Are further employees really that impressed by the name of the companies on the resume?

When I was that age I certainly did think that a big name meant something but after I got to the other side- where I'm interviewing people- I realized that it's a huge mistake to try and judge whether you should hire someone with these kinds of correlations (including college and GPA).

Amazon was the most terrible work experience of my career. I strongly urge everyone I meet who is considering them to avoid them.
You're conflating "being honest" with "being a dick", here. John may experience anger at Jack's behavior, and he may express it in a way that doesn't have to damage his relationship with Jack or hurt Jack's feelings.

A good book on this subject is "Difficult Conversations", a favorite of my wife's, which describes strategies for doing exactly this: being honest about your feelings without ruining someone else's day as a result.

Being honest does not mean you cannot exercise tact and discretion in the way you talk to people.
SR-IOV support [0] ?

[0] https://en.wikipedia.org/wiki/Single-root_input/output_virtu...
Only me read it as openbsd project and thought, eee, where is (1996) about first homepage dig up from archives ?
Yes, Xaddress creates 2 kinds of codes, the short one is inmutable and does not depend from geopolitical boundaries, you can check http://ubicate.me for the short code implementation.
The need for more research into the climate impacts of “limited” nuclear war
Some browsers might try to sniff the mime type, so an additional header would help : "X-Content-Type-Options: nosniff"[1]

1. https://blogs.msdn.microsoft.com/ie/2008/09/02/ie8-security-...
I'm already in over my head with a bunch of other things towards Chicago, so I'm honestly going to pick my battle and let this one go. It goes against my usual policy, but the stress got out of hand there for a bit.
It's not a question or a doubt - yes, everything will be soldered to the frame, nothing will be replaceable, and no new versions will have that capability.
Here's an illustration; this may be somewhat dated (not sure how this works with e.g. shared L3 caches) but it should give you a flavor of why shared memory sucks for messaging.

Consider the simplest example of a busy-loop, which is likely close to the fastest you can get. Core1 sends a message to Core2 by writing to an address that Core2 is repeatedly reading from.

Core1 first has to gain exclusive access to the address, by broadcasting an invalidate on the bus. Core2 thus discards its cache line. Next Core1 writes to the address by modifying the data in its L1 cache (or store buffer or worse). Core2 then reads from the address. Since Core1 holds the modified cache line, it is required to snoop the read. Core1 tells Core2 to wait and then retry. This happens repeatedly until Core1's write lands in main memory. Now Core2 can read the memory.

So:

1. Messaging requires a round trip to memory, a bunch of cache line invalidation, and other nonsense. Messaging involves multiple transitions to and from shared state.

2. Your CPUs already have a very fast message bus to implement MESI, but it is unavailable to you as a client programmer.

It should be obvious from this that we could build a much faster CPU messaging architecture if we cared to.
I created a basic Windows service to do this (20 mins by default). Pull requests welcome.

https://github.com/jonashw/SpeedTestPingService/tree/master
> can't help but conflate numerous unrelated arguments from different people.

This is exactly how I would describe your comment, far more than the one you replied to.

The comment you replied to attacks a single argument-- that relieving people of IP rights is not the same as relieving them of physical property.
Intel acquires Nervanasys for 400M USD
Our current prototype only works with horizontal sliding windows given these are the most common types of windows on newer type of construction in the US. After launch based entirely on feedback from people like you we will decide what the next type of window will be. Thanks for reaching out internaut!
Interesting observation, do you have a source for that?
I would pose that "service to others" if reflected upon, is exactly ego. You can feel good being of service to others, and you can feel diminished by not being of service to others. When you lose the good feeling, you want to do more, to reobtain that good feeling.

"I am one who strives to live in service to others" (I am parahrasing) but if this is true, it is more clearly ego a.k.a. identification with form.