skysight-inc/HackerNews huggingface dataset:
If an attacker has physical access to your device, you're already screwed.

I'm no security expert, but is this true?

Say I use full drive encryption, with whatever
the popular Linux distros are offering at install time, and Say I use a strong password of 30 random characters.

Is it feasible to break this encryption in a reasonable time frame?
Best to be the owner on your own device.

There’s a reason we modularized drivers on other systems, which allows people to customize the OS however they want it, because the firmware, drivers, main OS, UI layer of OS, and applications are all properly seperated.
I think you may have missed the sarcasm in the parent post.
It sure is, but it still happens a lot.
Horizon 2.0 Beta
If you want to lose a few weeks hacking away at something kind of fun, then turn around and try to implement the Fortune's Algorithm[1] Voronoi region/Delauney Triangulation method that underlies Amit's map generator.

Somewhere I have a WinForms app I built a while back that animates the process and draws everything out step by step.

[1] https://en.wikipedia.org/wiki/Fortune%27s_algorithm
Ah, the fine art of rationalization...
Find out why credit card is leaking for PHP application magento
This is a good idea. Go for it.
The secret to better collaboration and better CX
This depends on your definition of scaling.

You're creating (relatively) heavyweight servers to handle multiple instances and hiding them behind a reverse proxy.

And this is for a very specific use-case. Not everything is HTTP, and not everything HTTP is handled (well) by a LAMP stack.

Certainly, as pcwalton points out, a LAMP stack will not handle scalability of your graphics (while hitting desired performance characteristics, at least). A LAMP stack is unlikely to be appropriate to the sort of scaling that map-reduce can perform. A LAMP stack won't handle, in the case of my office, handling an arbitrary number of connecting radios.

===EDIT===

> Threading is hard and I'm sure will always be hard. But threading is the wrong way to scale or parallelise.

Threading is an implementation of concurrency/parallelism. Spawning multiple servers behind a reverse proxy, like you seem to be suggesting, is one method for handling scaling issues.

But the models used to make effective use of threaded concurrency (actor model, CSP, even shared memory done well), also work in designing larger systems that need to scale beyond a single computer/CPU.
I'd hate to work at a company with a blanket prohibition on dirty tricks like this. On rare occasions, there are good reasons to use hacks, and I'd hope my coworkers would at least be open to an attempt at justification. Sometimes silly newbie mistakes actually end up being the right thing to do in rare, specialized circumstances and in experienced hands.
Text of article ties pessimism, not bad temper, to higher earnings and longevity.

Ideally you have a full emotional toolbox. If you're always optimistic you'll blind yourself to risks. If you're always pessimistic you'll blind yourself to opportunities.
Silent failure or not, the page still doesn't work.
Is it wise to aspire to work in any non-tech corp IT department? Unless, I suppose, you are willing to relocate to a low COL country and join the contracting agency your job gets outsourced to.
Not only that. I believe the main purpose of the whole war agains flash is to kill the online games ecosystem, from which neither Apple nor Google make profit, and move gamers to appstores.
Why apps should be built like planes
>Representations are easier to learn for highly-correlated data. Paper forthcoming, but conceptually so obvious that quantifying it is (apparently) non-novel.

I know what you are saying, but I don't think it's true.

Imagine a hypothetical language that is so compressed, so non-redundant, so little correlated, that it's indistinguishable from random noise. Learning this language may seem an impossible task. But in fact it's very easy to produce text in this language. Just produce random noise! As stated, that's indistinguishable from real text in this language.

Real language, of course, has tons of statistical patterns, and is definitely not random. But I don't see how it is harder to learn than, say more redundant audio recording of the same words, or a video recording of the person speaking them. That extra information is irrelevant and will just be discarded by any smart algorithm anyway.

>The best available neuroscience and computational cognitive science says we do.

Most people do. As I said some people don't, and they function fine. See this: http://www.bbc.com/news/health-34039054

>Our external behavior is determined by the internal states, insofar as those internal states are functions which map sensory (including proprioceptive and interoceptive) statistics to distributions over actions. If you want your robots to function in society, at least well enough to take it over and kill everyone, they need a good sense of context and good representations for structured information, behavior, and goals.

Robots are never going to have exactly the same internal states and experience as humans. They could be very, very different, in structure, to the human brain. Being exactly like humans isn't the goal. Mimicking humans is an interesting diversion, but it's not necessary, or the goal in and of itself.

And you may be right that a robot without vision would be disadvantaged. I think that's mostly anthropomorphism, imagining how disadvantaged blind humans are (and in fact even blind humans can function better than most people expect.) But even if it's true, my point is that sight is not strictly necessary for intelligence.

In fact I think vision may even be a disadvantage. So much of the brain is devoted to visual processing. While text, and even language itself, are hacks that evolution created relatively recently. A brain built purely for language could be much more efficient at it than we can probably imagine. Ditching vision could save a huge amount of processing power and space.
Styling React Components in JavaScript
why gingers eat more mayonase than some?
ECDH doesn't give you authenticity, i.e., you can't get a certificate for that.

When you look at ways to generate ECC keys, there are classes of vulnerable numbers for which you need to test.
Developer oriented machines are a different market, however, this market has changed; the needs are different and nowadays even most developer oriented machines don't need the ability to upgrade parts. The issues about keyboards, screens and beefy hardware remain, but the actual need to replace hardware is much smaller, and most developers do buy hardware that prioritizes other things.
press the issue https://www.youtube.com/watch?v=N8pbnjvypQ0
Ask HN: What are your crunch mode tips?
Do I understand correctly that since this is in the current nightlies, it's slated for 1.12? So, sometime in October?
This intrigues me. I wonder why the router would be meddling in such affairs.
I think a top down approach is much better, practical and actually interesting than diving into theory directly. To that end, there are two books that I recommend - Programming Pearls by Jon Bentley & Algorithm Design by Jon Kleinberg and Eva Tardos. These books cover a wide variety of important CS aspects starting with extremely practical problems and scenarios. They are more narrative in style with very limited maths formulas and diagrams, but don't be fooled by that because they are expository, which is often superior to simply following a dry mathsy problem solution theorem proof style. (The Klienberg book says in the preface that it is meant for students who have completed two semester standard CS course, and even includes some proofs, but you may skip those without losing any insight into the solutions or techniques.)

These books really pique your interest, and after finishing them you will see the big picture and find sufficient motivation (problem solving wise), and may venture into following proper undergraduate courses with proper textbooks. You might even like to quickly read through Skiena's The Algorithm Design Manual as an intermediary step. This book is a proper 'engineer's book' as in it is basically a catalog of algorithms and data structures with advise and illustration of where to use what.

With this approach, you won't be needing a tutor and can gain a lot by self studying at your own pace.
The best Intel iGPU I've found by far is the Intel Iris Pro Graphics 5200, which came onboard my system76 galago pro. Runs perfectly on my Linux system, plays far more games than I could on my previous laptop (Intel HD 4400 as well, I think).

I even managed to play Borderlands Prequel(?) with a manageable frame-rate.
Macports launched a new binary build system for packages
General Assembly acquires Canadian code bootcamp Bitmaker
See Evil Maid Attack https://www.schneier.com/blog/archives/2009/10/evil_maid_att...
"Work environment", "culture fit", etc. are usually just euphemisms for "your boss."

As in, if you're interviewing and an applicant says they left their previous position because it was a "bad work environment" or a "bad culture fit"—they're saying they had a horrible boss. And if someone says they're looking for a place with a "better work environment," what they're looking for is a place where their boss will defend them against outside interests, won't micromanage them, won't force them to waste their time on work that won't get used, etc.

I suppose that the people saying this may not even realize they mean this—most people don't put much thought into how much of the everyday experience of "work environment" is controlled by what your manager does or doesn't do for the team.

But this is why people will describe places that might seem cloying and unappealing as having a "good working environment": they mean that you're likely to work under someone that knows what they're doing.
> A backdoor that requires physical access isn't a backdoor. If an attacker has such access, you're already screwed.

> A backdoor that requires administrative privileges isn't a backdoor. If an attacker has such access, you're already screwed.

Then why bother trying to lock it down in the first place?
This is cool. Though the 133kb download size for the html isn't great.
Seriously, how would he do it? How would people respond? Would he keep eye contact the entire time he stole it and ate it to reinforce the dominance he had over them? Did he then tell them that coffee is for closers?
That's patently not true. You're far more likely to be harmed than, say, women or Asians, though the latter are oppressed.
Show HN: Daily executive summary of your Slack channels
>Prior to the DNCLeaks, Sanders supporters who complained about the DNC favouring Hillary were dismissed as 'conspiracy theorists'. After to the leaks, everyone said, "oh this was all common knowledge anyway"

Multiple times in this very thread, the argument is "this is how the DNC is supposed to operate, they can do whatever they want since it's a private organization". Which is frankly even worse.
I'm happy to hear that! With a fixed ABI, C++ 1x language features and UWP, it sounds like doing C/C++ on Windows could actually be fun these days.
Surely it is possible to have a too-egalitarian aircrew, even if this never occurs in practice. But this is the problem I feel like I encounter most often in Product Development teams, at least within the software realm.
Looks like https://google.com/finance didn't get the memo.

"Adobe Flash Player is required for interactive charts."﻿
Ask HN: Tech Job Boards in US Cities That Are City-Specific?
Hey HN, thanks in advance for any help! I'm looking to recruit full-time programming instructors in various cities in the US including Raleigh, NC, Salt Lake City, UT, Seattle, WA, Atlanta, GA, and Austin, TX. Are there any job boards in these cities frequented by developers that I could post to? I don't mind paying for a job posting if it will deliver tremendous value. Thanks for your help!
Cheat Codes for Contravariance and Covariance
That's because you're searching just in the documentation. Try going up a few levels in the website, like http://www.schaffter.ca/mom .
It's definitely not a "converter" for Flash but I really like the javascript framework Phaser for small games.
The other downsides are the deploys are slower, for now at least, and it's still in Beta. Beta means it has SLOs, which are like reliability goals, but it doesn't have SLAs, which means you get refunds for downtime. App Engine Standard does have SLAs:

https://cloud.google.com/appengine/sla

Beta products are also more willing to make backwards incompatible changes with shorter deprecation timelines. But overall it's certainly a lot more, ahem, flexible. Sneaky awesome feature is ability to install things like imagemagick , phantomjs, or ffmpeg, which to shamelessly self-promote I wrote about here:

https://medium.com/google-cloud/scalable-video-transcoding-w...

That's using a custom runtime, which won't be as officially blessed, but you can of course just extend from the official runtimes, since they're on Google Container Registry and open-source:

https://github.com/GoogleCloudPlatform/python-runtime

Just write a Dockerfile that starts with:
FROM gcr.io/google_appengine/python

Obvious disclosure again I work for GCP.
What do you think of Dart? I need to know this for reasons I can't go into.
If sandbox attribute is used and browser supports it.
I appreciate your reference to Maslow's hierarchy of needs. Assuming you have met safety/security (#1), general philosophy of living presently would ask "why measure at all?"
I hate to be /that/ guy but Big O isn't something to memorize. It's a way to evaluate algorithms. You can memorize Big O for certain patterns of code but there are ways to trip you up if you do this. (One example I came across was a for i < n loop, printing out a recursive Fibonacci function. If you memorize Big O you would be tempted to say O(n*2^n) but if you reason through it, it ends up being O(2^n).) So it's best not to memorize Big O.

I used to be in the same boat but after working past that initial anxiety and getting started in CtCI and Skiena's algorithms class to further my CS fundamentals, it turns out that the stuff being asked in interviews aren't that too hard. (this is a huge generalization)
At a certain point I wonder if OSHA complaints or calls to the local fire department would help at all.
In a consequentialist sense, isn't "fuck you money" the sort of singularity beyond which you can have your career any way you like? So any path to "fuck you money" should theoretically be ranked above a path that doesn't lead to "fuck you money."

It's sort of the same argument people use for justifying ranking AI X-risk as the highest concern for Effective Altruism.
I think it is less about pictures being taken but a guy given a badge and now he is high on [perceived] power. Most of the time one can deal with them by a friendly request for clarification on which grounds they want one to do something. For the remaining few, if one has the time: Just let them call the cops.

I myself have handed out badges and walkie talkies to untrained "security" folks at events and my estimate is that I had to pull about 10% out during their shift due to abuse of power and tell about 80% to not come back after their shift. From a security perspective, the 5% or so we had as regulars on staff were the only ones you'd rely on; that were also the folks who spend most of their shift just sitting around, but when there are real problems they deal with them level headed but efficiently.

If it helps the OP: The guy's superior is probably just as annoyed as you are by his guard's behavior but he does not have the luxury to simply replace him due to crappy pay and therefore a lack of applicants.
The OpenBSD Project (1996)
This is actually what I did in my first internship -- generating Delaunay triangulations (or more often, tetrahedralizations) of points, and then adjusting the underlying sets of points to help ensure that the corresponding Voronoi cells have good properties (generally reasonable surface area to volume ratios).

We didn't use Fortune's for historical reasons (the first versions of the code were in Fortran 77, and written well before he published his paper). Instead we generated triangulations and then flipped edges until they were Delaunay, and then used the corresponding Voronoi diagram. It turns out that flipping edges to produce a nicer triangulation is reasonable in two dimensions, but intractable in 3D and up.
SummerSlam 2016 – WWE Summerslam 2016 Live, SummerSlam 2016 Live,
SSH Improvements to Bitbucket Cloud
This actually used to happen, to some degree. No error, but you would get a blank page in Netscape if you failed to close a TABLE tag.

They started making browsers more lenient since there was so much poor malformed HTML being produced
Teach a Dog to REST: Some great REST API patterns distilled into a simple presentation http://www.slideshare.net/landlessness/teach-a-dog-to-rest
You wouldn't want to use a browser so old it doesn't support ECDSA with P-256 (e.g. Android < 4.0). There would be a lot of scary stories in the media, but servers can switch to ECDSA (e.g. let's encrypt supports it). Devices which cannot be updated (e.g. credit card terminals) would need to be replaced.
In what ways does this offering differ from Microsoft's HealthVault? Is it that you do the gathering of health data on behalf of the patient?
It's all about LOCAL native plants - what grows in your area naturally, so it thrives in your environment without effort on your part.
If a terrorist attack occurred and it was clear that it could have been prevented if the authorities could have read encrypted information, would that change your opinion of backdoors? If not, why are you criticizing the other side for being just as steadfast in their beliefs as you are in yours?

The truth is that no policy is going to be 100% effective so I'm not sure why either side of the debate should overadjust based on a single failure
If you were posting this on Petapixel with a little blurb about being harassed then I'd agree with you. But you wrote this article with a civil liberties bent (that I wholly agree with), so while I'm happy you weren't arrested I'm not sure the 'core' of the story is you took a picture and didn't get thrown in jail for it. It's more like you took a picture and had to fear you were going to go to jail for it.
"They don't really live longer... it just feels like it."

-- Apologies to Sir Clement Raphael Freud.
> Chances are you are not running native IPv6.

Yes, that's the case since, as I stated, I got IPv6 connectivity through 6rd:

> It is derived from 6to4, a preexisting mechanism to transfer IPv6 packets over the IPv4 network
Kansas couple sues IP mapping firm for turning their life into a “digital hell”
It's important to note that standards other than C can place constraints on C implementations and make things that are "undefined" according to ANSI C perfectly valid in specific environments.

For example, POSIX now mandates that the NULL pointer has all zero bits: http://austingroupbugs.net/view.php?id=940
"John comes back a week later and says, "Jack, I am really fucking frustrated you are still playing that shitty game. I want you to quit right this fucking moment.""

That is exactly what some people do in real life professionally in phycology, without the strong words(that denote lack of control). It works really well.

In order to illustrate this think on "Kitcken nightmares" tv program, or something like "Hermano mayor" on Spanish TV.

I use to do the same thing with friends and people that demand my help. Loner? Quite the contrary, help someone get out of a hole and he-she will be your friend forever.

I have taken people out of drugs, or gangs,prostitution this people will give their life for me. There are few things as rewarding in life(it is also a pain in the ass while you do follow the process but it is worth it).

Of course you need education in order to do that. You don't need to say you are "fucking frustrated", in fact if you are frustrated you can't help anyone.

There are masters at this, like in anything,and if you do that you will learn with every person you help. After some people you see patterns and being effective becomes easier.
Prohibitively expensive? That's how things have been done for decades. Only recently have manufacturers decided that everything should be redoable over the internet.
There's nothing wrong with some tolerance, like ignoring tags that it doesn't know. But if the syntax is wrong, it shouldn't try to fix it or guess what the user meant, just display an error. Accepting invalid syntax means all HTML parsing becomes vastly more complicated. Which creates room for bugs, exploits, and unexpected situations like OP's post.
It is painful that Palo Alto is getting very expensive. There are definitely two populations: Tech industry families, and old Palo Alto residents trapped in their homes. [0] For better or worse, the locals have decided to restrict supply of new houses to protect the value of their existing inventory. If if they opened up 5,000 new units in Palo Alto, it still would barely make a dent.

The scope of the problem, and the Not In My Backyard syndrome highlights that it's a regional problem, and not a city-wide one. State laws need to make it easier to build everywhere. (Yes - I buy that environmental impacts need to be studied, but when they're used solely as an excuse to stop development, the poorest suffer, and real environment issues get put to the side)

In the end Palo Alto will suffer if all the new building is done in Redwood City, Mountain View and Sunnyvale. In 30 years, the residents of Palo Alto will be living in dilapidated old houses while their neighbors have newer ones to choose from.

[0] This is due to CA tax assessment laws that restrict mobility. I can write more on this.
Bloatware in NPM Modules for Express, Ember and Babel
> Before you decide you want to work for these guys ask yourself why you want to work for a big company.

The bigcorps are the only people hiring here (Vancouver, BC) that pay anything sensible. :/
Stanford-led experiments point toward memory chips 1,000 X faster than today’s
Honesty is not exclusive of gentleness and kindness.
Yes, and what's worse is that the reason you're upset is not even that you miss your friend, but fear that your friend has decided that a game is more important than you are, and so you are demanding that he prove that he isn't rejecting you by making a gesture.
I agree transcoding all user content is a must, but even that can be dangerous :-) as with ImageTragick which lcamtuf discussed here: https://lcamtuf.blogspot.com/2016/05/clearing-up-some-miscon...
AI’s Road to the Mainstream
Don't complicate things: how to fight complexity as an engineer
Reminds me of Pied Piper for some reason :-)
damn... thats nice. Can't wait to dive into it.
That's exactly my point. Low barrier to entry allowed the web to explode.
That sounds fine if you want to get a job at (wherever) in three years. If you want (or need!) to get one in three weeks, however...
Olympic Bodies: Can You Guess Their Sport?
I got really annoyed at the poor science behind this study and wanted to compose a really good, original comment in response.

But I couldn't come up with one, proving the study wrong.

I just think that they have the causality reversed.

Care a lot -> Focus + Hard work + strong emotion

So the anger is a side effect of caring.

But that is a guess. I'd have to look at the study and I would flip directly to the page where they reveal the effect size and the significance first. That's what they should report.
If you can update the firmware over a network, you have an uncloseable exploit vector.

ROMs are not unfixable. They do require physical access, though, which eliminates nearly all of the risk.
Trump, Dilbert, Wizards, Fear and Testosterone
A Volcanic Eruption Hid a Critical Climate Signal for Twenty Years
There's an old saying: be kind so you can be truthful; be gentle so you can be honest
Well the first problem is trivial. The second seems a bit harder.