skysight-inc/HackerNews huggingface dataset:
What I don't get about this is why trigger warnings and safe spaces always seem to get lumped together in discussions like this.

It's really hard to actually create a safe space. You have to actively intervene to prevent (or provide redress for) the "wrong" kinds of speech. I can totally see why a university would not think safe spaces were worth it, or even consistent with their goals.

But trigger warnings are a really simple common courtesy. There was a popular meme spread around the Fourth of July to be considerate of veterans who may be distressed by the sound of fireworks. If you think this is a consideration worth extending to a veteran, it seems perfectly consistent that you'd want survivors of rape or abuse to know that a discussion of rape or abuse was coming up.
Isn't the big issue the fact that individuals typically don't have the resources to find copyright infringement and thus issue their own DMCA requests? At least, not on the same scale as companies.
> Two copies would not help to determine which bit is the correct one, you would need three. Once you have these, I guess you would be able to detect corruption. Am I guessing correct that duplication beyond 3 times would just help with read speed and in the case when a drive fails while one is already dead (e.g. when you are rebuilding)?

You're confusing two topics. Integrity vs. availability. 3x copies, RAID4 XOR, RAIDZ (a form of RAID6), etc are about increasing the availability of your data in the face of device failure/partitions.

The integrity of you data is computed different ways in different systems, but you can safely think of it in your head as a pile of checksums on top of eachother. There is a half decent blog entry[0] on Oracle's website, but you can mentally model it as having checksum on disk for each block, which then is combined with other blocks into some larger object that is also checksummed, and on and on until you have "end-to-end integrity". It is a feature of all serious storage systems.

I'd love if someone who was more familiar with ZFS could respond with how ZFS's internals work for you.. I worked at a direct competitor of Sun's that sued eachother over this stuff, so I actively tried to not learn about ZFS. I regret this.

[0]: https://blogs.oracle.com/bonwick/entry/zfs_end_to_end_data
The main selling point apart from privacy is that the voice calls works really really well.
What are you missing with Signal?
Federation and security is a hard problem. The code is there for anyone to use, but it's an entirely reasonable and prudent security decision to announce your lack of support for a forked version using the same servers.

(Also, does Telegram have a version without Google Play Services?)
Less can certainly be more. However I feel like Slack's usefulness:distraction ratio change greatly depending on the type of team or company using it. These suggestions are good ones but every situation is different. Is your team disciplined, focused, and/or collaborative and to what degree? The answer will tell you how Slack may get used or abused.
> The chances you will get approval from banks and regulators are zero. To have a halfway decent shot, you would need years, significant industry connections, expensive lawyers on retainer in New York and Washington, and the ability to prove you have cash on hand in the high 7 figures.

Full disclosure, I work for Capital One now. So... C1 has stated publicly it's interested in this space and some of its prominent employees are in prominent public technical groups trying to make it happen. The liability and fraud stories are really unimaginably complicated.

For people looking to make a product today, I've decided to add a quick primer:

Finicity, FinancialServices, and Plaid are all financial aggregators that you can use in combination with novel (read: quasi-legal) mechanisms you can use to provide financial services within the confines of the beleaguered law.

In general a financial product's engineering cycle looks like this:

1. Find a data aggregator you can partner with and give most of your profits to.
2. Work very hard on experience driven products.
3. Find a good lawyer who can help you produce a novel interpretation of the law that works with a specific financial product.
4. Still have limited success because fintech products have linear adoption curves (even Mint).

Examples in this space of novel mechanisms that use existing payment services, data aggregation products and very clever lawyers: Acorns, Digit, Tally.

I was one of the founders and the founding engineer of Level, and worked on Simple. My general observation is that most of the challenge is around data quality and aggregation on the technical side of things.

A lot of the challenge of making these apps work is balancing your fraud risk with your customer experience. Customers are apathetic and inclined to ignore the space, fraudsters are diabolically clever and very engaged.
I'll forget to do it if I wait until the third time. I can't keep track of everything, you know.
I don't see that I ever get any compromises. What I see is that decision-making is usurped.

I don't see many people in society particularly happy.

I don't criticize Stallman, doesn't mean it's the only way to go.
And watch your friendships grow stale, lose touch with your family members, opt out of knowing about upcoming events...

The phrase "network effect" exists for a reason. Where people don't think about keeping in touch with others in any terms other than Facebook, refusing to play along with Facebook comes with serious consequences.
RAID generally does not protect against bit-rot (i.e. undetected errors); it only protects against detectable errors / catastrophic disk failure.

ZFS does protect against undetected (at the disk level) errors. To a first approximation, it does this by keeping block checksums alongside pointers so that it can verify that a block has not been changed since it was referenced, by keeping multiple checksummed root blocks, and by having enough redundancy to reconstruct blocks that fail their checksums. Naturally, there are information-theoretical limits to the number of corruptions that may occur for detection/correction to be guaranteed.

You should refer to the relevant wikipedia pages if you want more detail than that :p

edit: To answer your actual question, yes, you should be able to leave a ZFS box in the corner unattended for years with reasonable confidence that your data is safe and uncorrupted (tune redundancy settings to your taste on the space efficiency vs. error tolerance trade-off). Two caveats: 1) the machine must have an effective means of communicating a catastrophic disk failure for you to resolve (this should hold for any made-for-purpose NAS device, but you'll need to do some work if you're DIY). 2) ZFS does not actively patrol for corruptions, it fixes problems when it encounters them. If your data is not being periodically accessed, there will need to be some provision for walking the filesystem and correcting any accumulated errors (the ZFS scrub util exists for this purpose, but it has to be used)
"iOS 9.3.5 provides an important security update for your iPhone and is recommended for all users"

I can't help but think at this point we've totally lost control of our devices..
In my last project I used,
ng-admin + postgrest for the administration panel, postgrest behind a small gateway with oauth2 (nodejs rocky + oauth2) to feed the user facing app.
Uploads are done directly to S3 that automatically triggers lambda functions to update the database.
In the old times I would have done all these with Symfony and it would have been lots more of code.

I also learnt to appreciate more unix command line tools, I think twice if need to write an script, for instance to do webscrapping, sometimes you can get what you need just using curl | pcegrep | uniq | sed, and move on, if you then have the need for more scrapping then yes, it makes sense to invest the time on using a library, scripts etc.
> None of this is different in any other language, including C.

Really? Because NPM is the only dependency system I know of that doesn't verify packages in any way.

> If you run a C app that uses outside libraries, or a Python app that uses outside libraries, or anything else, you either devote well more than a week out of every year to updating libraries, or everything is super old and frozen and impossible to change, or everything risks breaking when you upgrade your OS distribution (or other source of packages).

This hasn't been my experience. Unlike the Node community, the C community tends to feel strongly about reverse compatibility. The Python community has become a bit more diluted in recent years, but as long as you stick with mature libraries, upgrades are usually no more than updating some version numbers in the `requirements.txt` and running `pip install -r`. In cases where Python packages break dependencies, they're usually pretty decent about giving deprecation warnings.

In NPM, mature libraries break backwards compatibility without warning all the time, sometimes without even a version number change (by virtue of the dependency's dependencies).

Can you point me to an example of a mature library in Python breaking like Babel did when left-pad happened?

> Can you present an ecosystem that does this better? All I've heard you claim is that Node is bad, in ways that are not specific to Node.

The ways I mentioned are absolutely specific to Node.
David K Michaels, VP Engineering, Mint.com
27.2k Views
For passwords to Mint itself, we compute a secure hash of the user's chosen password and store only the hash (the hash is also salted - see http://en.wikipedia.org/wiki/Sal... ). Hashing is a one-way function and cannot be reversed. It is not possible to ever see or recover the password itself. When the user tries to login, we compute the hash of the password they are attempting to use and compare it to the hashed value on record. (This is a standard technique which every site should use).

For banking credentials, we generally must use reversible encryption for which we have special procedures and secure hardware kept in our secure and guarded datacenter. The decryption keys never leave the hardware device (which is built to destroy the key material if the tamper protection is attacked). This device will only decrypt after it is activated by a quorum of other keys, each of which is stored on a smartcard and also encrypted by a password known to only one person. Furthermore the device requires a time-limited cryptographically-signed permission token for each decryption. The system (which I designed and patented) also has facilities for secure remote auditing of each decryption.

https://www.quora.com/How-do-mint-com-and-similar-websites-a...
Direct links to other resources:

Technical analysis: https://info.lookout.com/rs/051-ESQ-475/images/lookout-pegas...

CitizenLab analysis of the nation-state side of things: https://citizenlab.org/2016/08/million-dollar-dissident-ipho...

Apple update: https://support.apple.com/en-us/HT207107
How Parents Harnessed the Power of Social Media to Challenge EpiPen Prices
i guess if we are hacking wifi, we probably know approximately which continent they are in. but even if they are typing say pinyin, theres a spacebar between each word, and three characters per word, seems like an obvious heuristic?
This seems like a well-articulated point, written with a civil tone. Rather than downvoting, perhaps people could make a counter-argument? The approach of "thinking and getting things right" before writing code might not be common with this audience, but there are fields where it's the only way to work.

I think the idea of compile-time safety proofs is interesting. The number of runtime cycles spent on policy enforcement could be greatly reduced. Would it ever be possible, though, to derive such proofs for programs written in "unsafe" languages, or for arbitrary binaries?

An OS which only supports one language would be unlikely to be generally useful, although it might provide sufficiently compelling benefits for specialized use cases. I believe MirageOS represents an OCaml implementation of this idea, although it may in fact support other languages.
Our biases get in the way of understanding human behaviour
> "So we have cyber arms dealers now."

Yep. And even middle men who will clear 7 figures taking a 15% fee. A dated article, but it has a "price list" of sorts, which is interesting:
http://www.forbes.com/sites/andygreenberg/2012/03/23/shoppin...
This simply doesn't make sense. It violates the indiscernibility of identicals, which is one of the cornerstones of Western logic. I can accept different opinions on several matters (e.g., the extent to which using objects is a good idea), but throwing logic out of the window is just too much.
I just noticed you're the creator of bankbotsbank. We essentially have the same idea. We should collaborate.

I'm currently using protractor (webdriver) for my crawler but I would open to switching to nightmare to be compatible with you as long as I am able to get that stack running on a pi.
I agree on that point and would rather prefer something that is a viable business. But it doesn't seem feasible to implement because most people wouldn't pay for messaging anymore. As another data point, Signal doesn't have a monetization strategy either.

It seems like we (most humans who use communication devices) are doomed to be stuck in advertising-based-single-corporate-walled-garden solutions.
For iOS, $500k was quoted in HN-featured media recently. However, $750k was quoted on HN in response to a query perhaps two years ago.
The post begins:

> It’s surprisingly hard to give a good answer (the question was raised in this article). It depends on how you count, and the details are interesting (to me anyway).
New Programming Jargon
From looking at their architecture diagram it seems that this is different enough from Prometheus's single golang binary to "justify" a fork.

I haven't looked close enough, but hopefully they've done so in a way that common things (query functions, alertmanager integration, etc) can be kept in sync with upstream easily.
Sure, no one needs that source code anyway because they are not adding anything of value. But if they are not complying the GPL license they are legally not allowed to use the GPL projects.

As an example for their relationship with upstream, they market the btrfs feature (https://www.synology.com/en-global/dsm/Btrfs ) but don't have anyone working on btrfs (and btrfs could surely need the help). I can see one patch set from them which hasn't made it into mainline ( https://patchwork.kernel.org/project/linux-btrfs/list/?submi... ).
libgit2 is not official, not in-sync with the main Git tool development, and doesn't support many of the features Git supports. So no, it isn't a solution to the problem.

Separating the UI and machine interface is something that should have been done from day one. In fact, I've been told Git's codebase actually already does that (it just doesn't expose the machine interface to the outside world.) Human beings are not machines. They have entirely different needs.
NuGet and NPM news from the community
I am probably getting old. Having used irc as main communication channel for 8 years in a previous company, we now added slack on top of the mail and direct messenger methods at my new workplace. I can not get used to it, at all. It is nothing but a distraction of half wit and delayed misunderstandings. I even dislike the ui. May be the staff is not ready, maybe just give it a little time. Maybe I just got too used to email
Url changed from https://www.sciencedaily.com/releases/2016/08/160825084625.h..., since they're the same press release but this one seems more readable.
have you gotten any feedback from new hires on this process?
I think this should be a requirement for any university that wants accreditation and certainly all state-run institutions. This is a bold statement not for the Uni. of Chicago, but for every other university that does not have a similar policy in place. Sorry, but you cannot get a proper education with trigger warnings and safe spaces. Therefore, those institutions that do not have the courage to stand up for education should lose their accreditation. Until we start holding institutions and individuals responsible for their actions, however, this will not happen, and holding institutions and individuals responsible for their actions is not something that, at least in the US, we know how to do well or at all.
A cheap phone that is refreshed regularly will probably be your best bet.

Don't buy it traceably or in the same place, use the same model, use the same SIM, turn it on in the same geographic location, or call the same people!
So there are issues with using this to replace animatronics. One is that microfluidic logic has low operating frequencies, as in less than 100 hertz. This makes it hard to do fine control. Issue two is that elastomers do not have a great fatigue life. Even if said robot is really cheap, if you have to replace every couple of months, things will get expensive.

That being said, one could do things that would be hard to do with conventional animatronics. One could cheaply produce something with a huge amount of actuators that oscillate or go through some simple pattern. Which would be perfect for making a lovecraftian horror with thousands of writhing tentacles.

Cthulhu R'lyeh wgah'nagl fhtagn
Apple IIe and IIc. A friend's father had an IIe and I got a IIc for myself, later.
> Signal Desktop is a Chrome app

So yeah, the statement from parent still stands.
Just checked you guys out - clean + easy user interface....How long have you guys been up and running?
The Docker security philosophy is “secure by default”
https://news.ycombinator.com/item?id=12360137

https://news.ycombinator.com/item?id=12358751

https://news.ycombinator.com/item?id=12358205
I'm playing with https://github.com/euforic/banking.js right now, looks promising, sounds like other ppl have used it to connect via OFX to their respective banks (I use chase which requires a $10 per month fee to access)
> But the assumption that somewhere there are things "like us" seems to be both arrogant and very teleological

Well, "like us", inasmuch as an entity that is self-regulating, and capable of response to external stimuli. The most basic assumptions for life.

So yes, at some level it is arrogant to assume there's anything else like us. Your view is very nihilistic. But, until we know of other sentient species, it is all about us. We are, as far as we know, very lonely, ex-nihilio orphans in the vast universe. It's only arrogance to nothingness to posit there might be more life in the universe. It is not arrogant to humanity.

So, yes, we are in many ways better than clouds of Jupiter. But of course it is us making that claim. So what? Allow humanity some slack. If we have offended some unknown creator with our supposed insolence, perhaps it should make itself more easily known.
WeChat integrated everything:

- Blogging platform? Yes. there are public accounts for enterprises and individuals to publish articles or videos.

- BBS? Yes. there are groups to connect every social circles for you. Every circles. Groups for little family(wife and children), bigger family(plus my parents), even bigger family(plus my brothers and sisters)... Groups for classmates of primary schools, secondary school and high school and universities. Groups for various working circles, groups for various special interests circles.

- Twitter or Instagram or Periscope? Yes. There is friends circle for it. I have thousands of connections on Wechat, and tens of thousands of followers on Twitter, hundreds of thousands of followers on Weibo. But more likes or comments (and from guys I know and real) on WeChat.

- And services you can imagine: Tickets for films, taxi hailing, food or flower delivery, online shopping...

I rarely bring cash or credit cards with me these days. I can pay nearly for everything everywhere with WeChat.

WeChat is for mobile phone as Windows for PC or browser for Web. Actually much more than that.

In China, you can find QR codes everywhere. And the first response for that is open WeChat.
> Sorry, but you cannot get a proper education with trigger warnings and safe spaces.

How so?
https://news.ycombinator.com/item?id=12360137
https://news.ycombinator.com/item?id=12358751
https://news.ycombinator.com/item?id=12358205
It's a self-selecting group, of course... but we're all happy with it! We've also gotten a lot of good feedback from people we've interviewed, since it's not often interviews feel encouraging rather than adversarial.
Good luck reading Thomas Mann or Hermann Hesse in German...

Any modern fiction. No chance.
Yep -- This is legit security research. Excellent research.
Uber's premise is that it is a mere facilitator of service providers and customers, and therefore it can scale like a tech company and not like some oversized yellow cab with thousands of employees and vehicles on the books.

It's a shell game. Uber may not call it's drivers employees, it may not claim ownership of the vehicles, but those drivers and vehicles represent overhead all the same. At the end of the day, the cars must be maintained. High quality drivers must be recruited and paid. If they aren't, Uber goes out of business.

At this point Uber is looking suspiciously like a large traditional company that provides a taxi service, with a nice app. Maybe a potentially profitable one. But worth $60 billion? Nope.
Most of those things appear in scheme. Slightly different naming, but the same, more or less.

To say that there's compatability between Scheme and CL, and no compatability with Racket is ridiculus: Racket has Scheme compatability modes.

As for the language being called Lisp if it's Lisp, two of the examples you list in the "non lisp" category do so: Clojure's website claims it is a "dialect of lisp," and AIM-349 describes scheme as "essentially a full-funarg LISP."

As make no mistake, all of these languages, from Common Lisp to Clojure to Scheme, are dialects. They have the same origins, and they share many of the same ideas.
Sad face. Right now, on my iPhone:

"iOS 9.3.5 provides an important security update for your iPhone"

40.5 MB. Great! Tapped "Download and install". It's greyed out. Huh?

Oh, "this important security update requires a Wi-Fi network connection to download". Really? It's only 40.5 MB. Let me decide, please, how I use my data.

Am I missing a setting that allows me to install an important security update on a network of my choosing?
I am curious, are there activities that you're capable in without the need for medication?

It may or may not be work-related, like snowboarding or board games etc.
I don't think this is hopelessly naive. History is filled with brave insiders who stood up for what was right. And this doesn't necessitate career suicide.

Oskar Schindler, Daniel Ellsberg, and Smedley Butler are some notable examples within the 20th century.

On a smaller scale, internal pushback has changed policies in government organizations and corporations. It is not always possible, but proposing an alternate, less-destructive method of accomplishing an organizational mission is one way to achieve this.

I think the best example of this in action is Stanislav Petrov, who defied protocol to launch a retaliatory nuclear strike against the Americans. It turned out the alarm was raised by a fault relating to weather conditions.

https://en.wikipedia.org/wiki/Stanislav_Petrov
here's some context: https://www.engadget.com/2016/08/25/amazon-vehicles-announce...