skysight-inc/HackerNews huggingface dataset:
John comes by and says, "Jack, you shouldn't play Overwatch. You are wasting your time and energy."

Jack responds, "I know, but just this one match."
I'm curious - where, exactly, do you see room for, uh, nuance?

I can think of some extremely limited circumstances in which DRM may make sense. None of those apply to general-purpose computers in our homes, pockets or most businesses.

As BoingBoing (certainly annoying in a number of ways) is a fairly typical blog format - mostly reacting to news - it seems inevitable that mentions of DRM are going to be about general-use DRM for, e.g., music, movies, etc., they aren't covering the extremely limited circumstances in which DRM makes sense (classified information, extremely locked-down corporate secrets, a couple others[1]), and precisely none of those stop copyright infringement, add value to the content or make paying customers happier.

So it seems to me that what you see as knee-jerk is actually just the reaction of a person knowledgable on the topic to a stupid idea.
I have been on both sides.

> You get maybe 1 in 10 people that you can pass from one stage to the next (i.e. resume review to phone screen, phone screen to interview, interview to job offer).

Where I currently work I have not been involved much in the early screening. My understanding is that resume to screen is about 1:4 and screen to interview is about 1:10. I have been involved with the interviews, and our interview to offer is somewhere between 1:2 and 1:3. Our screen includes a 2-hour timed coding test, though, so I think it is fairly effective at filtering the poseurs. Prior to this I didn't have any visibility into the results.

This is tangential, but I often wonder how much of the phone screen and on-site failure rate has as its root cause a poor resume filtering function. When you say you only screen the top 10% of resumes, are you really screening the top 10% of candidates? I know it's a really hard question to answer, but it seems like many companies don't want to try to answer it.

> Worse, most folks who do interviews are unwilling to acknowledge how difficult a task it is and how bad they are at it.

This is one thing that really bothers me about this industry. So many companies think it is acceptable to just yank semi-random engineers out of their daily routine to go interview a candidate. I came from the traditional engineering world, and we got training before we were assigned to interviewing candidates. Furthermore, for our first interviews we were always paired with another interviewer who had significant experience.

> It's very unfortunate because hiring is one of the most important things anyone does at a job, and hiring well (especially finding competence that other companies have passed over) is a major competitive advantage.

What is ridiculous is the number of people who treat hiring as a distraction from their real job. If you want any sort of management responsibility, hiring is part your job.
The corollary being: if your boss doesn't understand what you do, he's always going to assume you're deliberately sabotaging him. And for most of us, our boss doesn't understand what we do.
Fair enough.

I should point out that I've seen lots of comments lately that actually are absurd. Forgive me for the mistake?
Removed?

"User agents must treat xmp elements in a manner equivalent to pre elements in terms of semantics and for purposes of rendering. (The parser has special behaviour for this element though.)" — https://html.spec.whatwg.org/multipage/obsolete.html#require...
Thanks for the feedback, I just updated the animation to pause at the beginning and end to make the completions clearer: https://github.com/bamos/bamos.github.io/commit/f6a152851355...
Maybe that's part of their sabotage plan.
I loved when big companies complain about it work ethic not being like "the ol' startup days." Well no-shit. No one here is on the cusp of a huge IPO payday.
From having worked on addressing in Nairobi, Kenya for the past two years, I can tell you the precision problem is worse than you think actually. You're making the assumption

* someone knows how to use a map to a very high degree of precision (not true often)

* GPS is accurate enough, and this is a double whammy - on initial assignment of the GPS point (i.e. it's the GPS of their door/gate, not of their living room couch, and it was collected with enough precision) and on usage (i.e. the GPS antenna on a $30 smartphone)

* plenty of other issues

There are a couple startups trying to solve this beyond what3words mentioned in other comments - they'd suffer from many of the same issues I mention above. Some encourage people to put a placard outside their door/gate with the code to make last-mile arrival easier.

But a more successful approach from research I've done is what OkHi (http://okhi.com) is building - use a photo attached to GPS. From n>1000 tests, we found that the photo drastically decreases time over the alternative, even reducing average time to find the location by over 50% in the last 500m for some addresses.

(Full disclosure - I was worked on the addressing problem for the two years in Nairobi at OkHi, so I obviously believe in their solution or wouldn't have dedicated that much time there :)
The first link discusses the changes in Ronald Reagan's speech, especially unscripted press conferences over a number of years. They compared the number of unique words used, number of repetitive words used etc.

I don't think you could do the same analysis on Trump's tweets because people can take more time to compose their tweets, choosing apt words for the context. Plus tweets are much shorter, so you'd have a smaller corpus with fewer unique words to begin with.

Still, definitely an interesting idea that you had there.
It is good if the compromise is not large-scale or is recent (e.g. only one of the mirrors was compromised, or the compromise is recent enough that search engines and such don't know much about the hacked version).
Facebook's targeting of seconds rather than milliseconds and their reasoning behind it ought to serve as a template for companies with similar requirements. Discussions of latency in Spark often center around micro-batching and just how low you can go. In the context of Spark, that makes perfect sense. If your system needs to guarantee sub-80 millisecond latency, you don't want to commit to a system that isn't designed for it. But in the larger context, there are plenty of systems that can provide close to ideal performance with a latency of a few seconds. We've actually divided up our realtime stream processing infrastructure in a similar way - we have features that require milliseconds of latency and they actually go through a completely different pipeline than the realtime features that require heavy processing and provide all of their intended benefits with a few seconds of latency. What really matters is knowing which is which.
We used to be much more relaxed, welcoming and tolerant. I blame the polarizing politicians.
He is being completely honest. Which is what the article espoused. The article also said do not hide your emotions. John is mad about the fact that his friend is wasting his life. I displayed that.

If you are defining honest as some midpoint between a white lie and an asshole, then what is being honest? Not being completely honest, but just somewhat honest?

Then your "honest" is a healthy mix of white lie and complete honesty.

That's Steve.
Public -vs- private spaces. Big difference, and super relevant to privacy. The contents of my electronic systems were never public.
Envelop VR: Virtual reality desktop environment for Windows now in public beta
My University's (Minnesota) mascot is a gopher, but the physical mascot is a chipmunk/squirrel (debated) name Goldy Gopher - but it's definitely not a gopher. These rodents can be confusing!
Tabby's Star Gets Weirder
If you come across any information on the accident, please post it as a reply here, I'd like to see it. Thanks.
The New Face of Segregation in Schools
Download here https://www.envelopvr.com/download
I've been to a psych and he has never actually suggested that my issues are caused by my work place but he has suggested I take short-term leave on several occasions. I have refused to do it thus far but that seem obvious that he thinks work is causing or increasing my issues.

I've also talked to a therapist's but in general have no other major causes of stress in my life. I make more than double the median income in my area, my family is all healthy and close, etc. Work seems to be a major cause of stress. I've tried to find another job but the interview process in tech is more stressful than the actual work. So many rejections just wear you out over time.

To your point I would say the only way they could really tell if it was job related would be talking to each person and ruling out other causes.
> I don't think the Port Authority would like it if you looked at this photo

Fortunately for them, it's on Google Plus.

I kid. Kind of.
Again, you see these people as "the places they work for".
He wasn't "handed a position".
He applied for a job, got interviewed, and took it. What favor do you think happened here, or anywhere? What evidence do you have of this?

No, i can't see a general problem with antitrust lawyers, or really, any lawyer deciding where to work.

Private law firms hire people with government experience precisely because they know how it works. Not because they want favors, but because they have experience. The same is true of Google, Microsoft, Facebook, whoever. This is no different than hiring from "industry". The industry of antitrust lawyers includes government lawyers. You try to hire the best, regardless of who they work for.

If your goal is to prevent favors from being done, prevent favors from being done[1]. I don't see why that has any general relation to job mobility.

People either have integrity or not. Either they make decisions and voice opinions without regard to future career mobility or not.

If they generally don't, you are pretty much screwed no matter what you do here - you need to fix people, you aren't really going to fix the process[1].

If they generally do, than you should just worry about the outliers..

[1] Imagine for a second, you go so far as to have a neutral committee review every person who changes jobs, including all correspondence, video tapes of interviews, whatever.
Do you believe this would fix it?
No, of course not, it'll just drive any bad behavior further into the dark. It would literally not stop any problem.

If you ban job mobility, would that stop any problems?
Given the number of senators/congressman/etc indicted for having their houses renovated for free, etc, i'm going to go with "no".

If your problem is integrity, people without integrity are going to be much more creative about the favors they get, how they are done, etc.

Changing job mobility will not change this.
As evidence: It literally hasn't, in the past 200 years.

The only thing it does is hurt the honest people.
I don't know if it's necessarily easier to read, you are introducing a lot of ambiguity. When you say "Julia's writing on their blog," it sounds like she's writing on a blog that belongs to other people.
That's why I like Erlang and Elixir. They were built to handle concurrency down to the core. Currently only languages on BEAM VM provide a set of mature, built-in fault tolerance features (code reloading, isolated concurrency units -- processes, immutable data, sending messages between processes instead of acquiring lock).

I often see some frameworks which claim implement Erlang in "language $x" by adding a queue to a thread. But that is still very much behind what Erlang does, because it is missing these other components, namely fault tolerance.

Sure you can spawn OS processes, or spin up multiple machines/containers. But that is not built-in, so have to manage the additional stack for that. Java has code reloading, but it is not quite the same and so on.

And this is not just talk in generalities, these properties translate directly to benefits and profits -- faster development time, less ops overhead (some parts of the backend can crash and restart, without having to wake everyone up), less code to maintain and dependencies to manage.

Just the other day had a typical distributed systems problem -- didn't add backpressure and so messages were piling up in receiver mailbox. The simplest solution I tested was just switch a gen_server:cast to a gen_server:call. It was a 2-3 line change. Hotpatched on a test cluster and problem was fixed in a few minutes. Ultimately I did something else, but the point is using a language which was built in for concurrency is that it was just a couple of lines of code. Had that been a custom RPC solution, with some serialization and some socket code, it would have taken a lot more to write, test and deploy. All that adds up quickly and can make or break the project.
lets look at how not to design an http API
The ultimate dream (IMO) is to use CHICKEN Scheme for everything. You can use it on the web [1], transpile to JS [2], run on Android [3], and since it's so portable, you can basically use it anywhere C code can run (embedded, etc.).

In practice though, it's not so glorious. CHICKEN still lacks strong numerics libraries (think Numpy, APL), and SPOCK, while useful, isn't as rugged or battle-tested as say, Clojurescript. It doesn't transpile to the greatest JS code, and I don't believe it works with all browsers (docs seem to indicate it needs work [2]).

I think it could be reasonable to eventually get this level of support, but the Scheme community is already quite small and needs people to work on these sorts of things. Right now, I'd say it's unreasonable to write everything (JS and numerics are the big problem) in CHICKEN, but we're getting close.

[1] http://wiki.call-cc.org/chicken-projects/egg-index-4.html#we...
[2] http://wiki.call-cc.org/eggref/4/spock
[3] https://github.com/chicken-mobile/chicken-android-template
Is it just me, or does the crashes data look really noisy? Yes, since 2001 the maxima are clearly lower, but in the period 1974-2001 I don't see a lot of difference with the period 1950-1974.
XHTML failed because doing the old, broken, tag-soupy mess still worked exactly as well from the user perspective. You just can't get people to work harder for invisible benefits. In a sense, it's a reason, but it doesn't mean that tag soup is a good thing.

I often wonder how different the internet would be if Postel's prescription never gained traction and fail-fast behavior were the norm instead.
Is this some reference I'm not getting?
RC5 does exist and I think was patented by RSA Data Security. Needless to say, it failed.
link to videos:
https://www.youtube.com/playlist?list=PLnfidBe0mwswzhAjRLRLM...
What about the third option, where a hacker can't install a rootkit even if they have physical access? That's what MS tried to build, but is now completely broken.
I wish there were a clearer delineation between developer downloads on PyPI and automated builds, since it seems there's been a bit of a cultural sea change over the past year or so in favor of Py3. I'd love to know which version humans are downloading.
Amber rocks.
Is it common to use DNS or some other name resolution system to get from 'abstract service name' to 'concrete IP'?

Just thinking through the remediation steps in the case of compromised keys; how would you propagate the change-of-identity information?
Obama now has a Facebook Messenger bot
Just wondering, why do you think so?

(It wasn't obvious to me why, given a first read of the docs; the fact that applications run in VMs in Flex seems more like an implementation detail. Am I missing something?)
Beyond CRISPR: A guide to the many other ways to edit a genome
JHipster (Spring Boot and AngularJS Project Generator)
Throughout history, some risks when doing activism as a privileged member of society:

- Oppressing one group while championing another
- Oppressing the group you are championing
- Acting in anger and alienating potential allies
- Acting in anger and discrediting potential allies
The term "head transplant" bothers me. Surely "you" are in the head, so what you're transplanting is the body, right? Or is what is transplanted always the smaller thing of the two?
> This shouldn't be the status quo in America.

It will be, as long as people take this attitude:

> Its just easier to just accept the bullying and go away.

You have to decide what's actually important to you.
Does anyone know how step #1 works in practice? How can you detect which addresses correspond to same cells in neighboring rows?
This is just one of many reasons one should switch from RSA to ECC.
> The only way to access that code legally is to pay the private company for read access.

You can usually also get access at public libraries. Not terribly convenient though.
I've worked on security (with commit privs) both in FreeBSD, briefly, and OpenBSD, slightly less briefly.

How about you?
The IRS designated it as property because they do not have the authority to designate anything as currency, only Congress does.

FinCen is not limited in congressional currency designations to carry out its regulations. Only services that exchange national currency to bitcoin are regulated under FinCen. Bitcoin is not regulated by FinCen.
I really appreciate the user-friendliness of Rust's error messages -- I can't remember seeing a compiler tell me "maybe try this instead?" before (perhaps something from Clang, but never with the specificity of, e.g., a suggested lifetime annotation). And from a parsing / compiler-hacking perspective, it seems really hard to get the heuristics good enough to produce the "right" root cause. Kudos to the Rust team for this continued focus!
there are websites where you can upload files such as images, but they filter html for security reasons. if you can present that html to someone (eg. through deeplinking an iframe to the document), it could contain (or load) javascript that runs in the context of that site...
No it's not. People shooting random police are bullies as much as police shooting random people. Stand up to both. Police aren't the only people who get away with murder.
If you like this stuff take a look at those:

https://www.youtube.com/watch?v=cQD8EVx5LZM

https://www.youtube.com/watch?v=sFSxxi7D4mM
2016 Tech IPOs Up 89% from Offer Price, 33% from First Day Close
It was looking fine on my end, but I realized I wasn't setting an encoding on the page. Should be UTF-8 now and not cause any more problems. Thanks for pointing it out!
I mostly meant personal risk; I'm less likely to be severely harmed, physically or financially.
I studied in Europe, but I was specifically referring to industry candidates.
Very nice article. I am itching to play around with Scala.js because of it.

I had chosen Purescript over Elm, since I have read about Elm being constricting once you move outside of most of the examples use cases.
Personally, all the jobs I quit were because of salary. None because of bosses or work conditions. (I've had bad bosses, fight them and saw they being let go. My satisfaction was indeed very dependent on them, but none become reasons for quitting.)
Malformed HTML? None. Browsers attempting to be lenient in what they accept? Loads.

To take this article as an example, according to the HTTP specification, the `Content-Type` header is supposed to have the final say in what media type is being served. Internet Explorer decided it would be better to use heuristics. I think the idea was that if a web host was misconfigured, rather than have the web developer fix their bug, it would try to guess its way out of the error.

Which kinda worked. The problem was, it opened it up to abuse. If you had a web host that allowed untrusted people to upload images (e.g. profile photos), you could construct an image that tricked Internet Explorer into thinking that it was an HTML document, even if the server explicitly told clients that it was an image. The main difference between images and HTML, of course, is that HTML can contain JavaScript, which would now execute in the security context of your web page.

So all of these web hosts, thinking they were only giving people the ability to upload images, were now letting people execute JavaScript on their domain – simply because Internet Explorer tried to be lenient.

The workaround ended up being forcing downloads with `Content-Disposition` headers instead of displaying inline. That's why, for example, visiting the URL of an image on Blogger directly triggers a download instead of showing the image.

Other examples that spring to mind:

Netscape interpreting certain Unicode characters as less than signs. People were correctly escaping `<` as `&lt;` but the Unicode characters slipped through and caused XSS vulnerabilities in that browser.

Browsers ignoring newlines in pseudo-protocols. Want to strip `href="javascript:…"` out of comments? No problem… except some browsers also executed JavaScript when an attacker placed a newline anywhere within the `javascript` token.

Being lenient in what you accept has caused security vulnerabilities over and over again and there's no reason to think that it will stop now.
Vulnerabilities don't bother me! All code has vulnerabilities. Meanwhile, the opportunity to use code built around a different (BSD-like) mindset is why you'd use FreeBSD instead of Linux in the first place.

What freaks me out is simple problems of principle, like, "we won't disclose this vulnerability because we don't have a patch, even though we know there's an exploit available". Even if the exploit wasn't public, as long as you know it's out there, people need to know about it!
Denuvo, the strongest game DRM available, has allegedly been cracked
At first I was skeptical of 'yet another geocode', but the addition of the avatar alongside it (for error-checking and instant-recognizability purposes) makes this scheme intriguing, and in my opinion, far better than any other geocoding.

It's essentially a combination of an Identicon [1] (of sorts, but with actual clip-art) and hash wordlist, but transmitted together as a unit. This is a very good idea and exploits a lot better how humans actually memorize and recognize things.

It needs a better wordlist though. Better is subjective, but the current list is very anglocentric, not very distinctive, and laced with profanity, making it awkward for interactions between strangers.

[1] https://en.wikipedia.org/wiki/Identicon
I think just DIE's would be sufficient, definitely don't need accelerator table stuff.

I've actually considered looking more at the LLVM dwarf writing components. Do you have any experience with that?
I recently signed up for a trial and tried to use Google Cloud Platform. Oh my god the UI was amongst the worst I have ever experienced on the web.

Super slow and hard to navigate. Stupid "tutorial". I tried for a good two hours, tried to accept it but finally gave up on it.

Google, cut down on your Angular and material design kool aid and try harder next time.
PS4 3.55 Code Execution via Webkit
Yeah I have the problem of reading too many books at a time. I am in the last few chapters of an awesome but technically dense book, but I keep putting it off because it's more fun to spend an hour reading "The Two Towers".
How is it logical? It is 100% an emotional response, an angry response born of frustration. What is logically gained from dead policemen? You will suffer, since you'll be in prison, or possibly dead. Your community will suffer, since if the police were brutal before, they're certainly not going to hold back now.
Can someone explain in simple English how this works?
If they were iframe elements, they'd still be sandboxed from the parent page, and unable to phone-home with information, right?
Delta System Failure Marks Wake-Up Call for Airline Industry
Not using an IDE for JVM-based languages is sort of like using pliers to drive screws. You can do it, but it's tiresome.