skysight-inc/HackerNews huggingface dataset:
I have an account with DigitalOcean (and several competitors) and I'm not going anywhere or moving any sites around because of this. Sure, they could have handled things better and the security researcher could have too. I don't see any malice or incompetence here, nor do I see a reason to make the effort to switch to another provider.

Where are you going to run off to? How is their security better over there? How many hours of work does that involve?
It saddens me when people don't get the point of a metaphor, and instead lean on the metaphor to discard the argument behind.

In this case, the point of the metaphor was to say that something obscure and barely sold/marketed is not a valid candidate for the "first X", where X, like "home computer" implies adoption.

Whether the parent used inflatable sheep or VCRs or thermometers as their metaphor is besides the point -- as the core of the analogy (the argument) remains the same.

It's also obvious that he used the sheep analogy for extra color/fun.
> Hmm, I got that slightly backwards, Win10 will not work on older CPUs

That makes more sense.

I remember that years ago, there was this tongue-in-cheek conspiracy theory floating around that Microsoft and Intel had some kind of deal that new versions of Windows would pretty much require one to get a new computer so it would run decently, in order to boost Intel's sales. Maybe there was something to it? ;-)

OTOH: "For example, Windows 10 will be the only supported Windows platform on Intel’s upcoming “Kaby Lake” silicon" - that does indeed sound like one could run into trouble trying to run older versions of Windows on new chips... I wonder if there are hard technical reasons for this. After all, both Intel and Microsoft had put a lot of hard work into preserving backwards compatibility.
I find it interesting (and a bit disappointing) that while github.com gets an A, a static page I host on github pages received an F. Would be great if Github would help pages hosted there be more secure by default.
Ernest Hemingway's relative makes beautiful handmade mechanical pencils
Ask HN: What's your preferred VPS service for personal projects?
Sometimes I feel spinning up a whole AWS band of services isn't necessary for small projects like a personal blog or a small web app. I've been looking into Linode and DO.

What services do you use for small personal projects?
See my comment elsewhere in this thread.
It would be awesome if in case of emergency, WIFI AP could build up a cognitive network to assist rescuers. We can even think of phones workings a relays to an available Internet connexion.
Time is actually quite simple if you have a good mental model of what you're trying to represent and don't try to mix different concepts into a single value.

This talk explains it VERY nicely: https://www.youtube.com/watch?v=2rnIHsqABfM

Basically just decide whether you're trying to store an absolute time (a timestamp will do) or a civil time (year, month, day, etc.) and treat them as two separate data types.

(If you just use "civil time + offset from UTC" like RFC 3339 does, then you can convert it to an absolute time, but you can convert only that one specific value using that offset, and not any other - i.e. that offset is not a substitute for an actual timezone identifier.)
I think I failed to represent the scale in the example. That's a heavily modified function from a code base I'm working on, and the inventory, book, cell etc. dictionaries and lists containing them are all over the place, with similar looping logic (e.g. find item with given label) and combinations are all over the place. Adding the objects to the above function would of course complicate it in the sense that it would get longer, but it would improve the actual example considerably. I will try to come up with better sample code that represents my worries better.
Sure, but it's not much of a difficulty to master it.
JSON significantly predates ES 5.1
How to use breadcrumbs on websites
"Steve – it is Steve, right? You say this gadget of yours is for ordinary people. What on earth would ordinary people want with computers?"
You mean `ps aux | grep` which I am also guilty of using every time ? You might be interested in pgrep (http://linux.die.net/man/1/pgrep) as well.
The rescuers in Italy are asking people to remain completely silent once in a while to try to communicate with trapped victims. I wondered if in a similar manner it would be technically possible to detect signal from phones that belong to trapped victims, if all not trapped people were asked to turn off their mobile phones.
How to Recover Deleted Contacts from Android Phone
Movfuscator
In Germany you have a very nice service if you want price transparency before buying a car: http://www.meinauto.de/

Basically, car dealers register their offer on the portal and you can shop without knowing about the dealer. Just at the end, you sign a middle man agreement and the website is forwarding your request to the car dealer.

At the end, you need to travel maybe 300km to get your car, but you get it from a normal dealer with standard guarantees. If you still want to buy at your home car dealer, this gives you a good idea of the discount you could try to negotiate.
What was his/her flagged follow up if you don't mind me asking?
One feels that there is a certain ... tension between your

That cannot be accepted as an
'axiom' without proof.

and your

Proving this is nearly impossible
This old US Navy training film on mechanical fire control calculators (called "computers" back then, used to calculate firing solutions on warships) is pretty fascinating:
https://www.youtube.com/watch?v=s1i-dnAH9Y4
I agree with you on iOS being the better choice, which is why there's a wink to my owning Android. I am obviously not a high-valued target.

FWIW - I only journal with ink and paper. I never trust digital files, and I sometimes forget how many backups I have of the same photo or other file.
Hmm.. The example put up on the github README is a bad test case(for performance comparison), as it does almost no processing on the actual subprocesses. A better one could be creating thousands of small files(with dd or something in a directory, though it's io-bound not cpu-bound). Best might be some kind of repeated floating point exponentiation repeatedly.
Suitable for use today is a low bar -- people still use C for systems development and C++ for apps/dbs/games/compilers/etc.

That's not because either is particularly suitable for today's needs (or even 2 or 3 decades ago needs), but because the industry hasn't managed to come up and invest in valid candidates -- plus the whole backwards compatibility baggage.

It's more of "the devil you know", "this language has all this libs we can reuse", "this language has 3 decades of tooling" etc that determines "suitable for use", instead of any inherent value in the language (syntax/compiler).

Just ask Alan Kay...
The second part basically says "don't use JSON for config files, use some unspecified JSON superset".
Proposal: TLS library for Servo
ISIS have neither popular support nor superior weaponry? Are you sure? ISIS is supported by Saudi Arabia and Qatar (who are probably money laundering fronts for certain other states that shall remain anonymous).

Pizarro had one cannon, and cannons at that time were awkward, especially in the mountains.
Is ‘hustle’ a new buzzword now?
All we saw was Australia, Australia is like that today anyway.
There's a web development Slack channel. Great community, check it out
What happens if you deny it those permissions? (Android >= v6).
Not everything that supports WAP has to be a phone. It could also be a standalone device, or sensor, or whatever. And with WAP push you can control it.

For me the strange thing is that it is on by default on user phones.
> (Speaking of leap seconds, who thought seconds going from 0 - 60 rather than 0 - 59 was a good idea?)

Who thought February going from 1-29 instead of 1-28 was a good idea?

I don't understand why everyone seems to believe that the phenomena are so inherently different.
Thanks, original parent, never occurred to me to do case-insensitive searches, but I can see them being useful in some cases.

My main beef with ag was probably due to some older distribution or worse packager (tried it a few years ago), because I tried it again now from "brew" and it's pretty much just as convenient as pt -- and with some more features.
This is one of the few online communities I have joined where the people are genuinely friendly.
Analysis of bubcon “secure” messenger (translated). TLDR: Don't use
Right, 270+ people dead and counting and you are disappointed. I don't know, maybe a bit of reality check sometimes?
Sorry, I thought that I was asking a question and not promoting a claim. In any case, thank you for answering it, though perhaps not in the manner intended.
CPU is most likely the bottle neck. So my comment should have read if you have a fast cpu you may benefit from ZFS compression.

On modern CPU LZ4 should enable about 400MB/s current PCU write compression
https://github.com/Cyan4973/lz4
"ITT is no longer allow to new enroll students who rely on federal loans and grants"

washington post is no longer allow to cheque there articles.
Girls exposed to electronic babies more likely to become pregnant
The candidate has to bring their own laptop to work on during the interview, at their place of business?

I know lots of people have a laptop already, but I'm sure I'm not the only person who doesn't (I just can't work on one; I get frustrated). Or is that part of the selection process; they don't want the kind of person who doesn't own a laptop, or doesn't bring it with them to interviews.
How a Brooklyn startup wants to help men turn their closets into currency
Princeton: New microchip demonstrates efficiency and scalable design
My point wasn't optimization. Just that the author was making it more complicated than was needed.

It's like discovering that "ls" is spawning 5 threads for internal communication.
Where did I say any of that? I didn't.
This is just nonsensical.

The main reason why the Spanish were successful was political: the Incas (which means "rulers") had forged their empire with violence and the tribes they subjugated were only too happy to get rid of the Incas, so collaborated on a case-by-case basis with the Spanish. In addition, the ruling family (i.e. the Incas) was quarrelling amongst each other, with some of them collaborating with the Spanish to get rid of the other side of the family. The idea was: (1) let the Spanish do the dirty work of getting rid of the other side, and (2) then get rid of the Spanish. Part 1 worked very well, Part 2 ... not so much.

It's pretty clear that Pizarro was in a fairly weak and tenuous position. If the Incas had worked together, rather than fighting among themselves, they would have defeated Pizarro easily.
> it'd become impossible to construct an unambigous parser/printer in Lua for this new format

How so? JSON is just text; you can parse it however you like. For example, I can write a parser that produces the byte sequence "It checks out." for any valid JSON input. A Lua JSON parser that represents objects with integer keys as maps with string keys, and a Lua JSON parser that represents objects with integer keys as sparse arrays, are both unambiguous and both correct (as to a hypothetical JSON which allowed integer keys). JSON is a format, not a Lua structure.

Even if your JSON data is

{ 10: 10, "10": "ten" }

there's no problem being able to write an unambiguous parser. Define what your parser does in that situation, and it's unambiguous.
Reminds me of the infamous "sleep sort".
Could somebody or a group who needed privacy implement a ground floor system like Menuet OS [1] or KolibriOS [2] running some sort of EC cryptography, and custom communication protocols off of a live CD or USB stick.

Would this even be practical? I realize TAILS is an attempt at bringing these tools to as many people who may not be technical, but for a smaller, more tech-saavy group, would this work?

[1] http://www.menuetos.net/

[2] http://kolibrios.org/en/
This is technically OT from this post, but let me try to field your question more satisfactorily than the web pages I'm able to find with DDG:

I think the initial struggle will be getting used to an RPN calculator if you've never used one before. (Some of them are a bit idiosyncratic.) But RPN notation itself is probably closer to how you actually solve many problems on paper. Long division is a good example.

In most modern "algebraic" calculators, the style often encouraged is to key in complete equations chock full of parens and notation (often represented graphically) from left to right with the expectation that calculator is smart enough to do the right thing when given your input values and the crank is turned (push ENTER). But there are sometimes surprising evaluation order gotchas even between different calculator models, even those made by the same manufacturer!

RPN is somewhat more rudimentary, making the user generally responsible for the order of evaluation by solving equations piecemeal. But as a result, you are rewarded with more consistency, fewer WTF moments with unexpected answers (since you're typically calculating intermediate values as you go), fewer keystrokes needed for solving most problems you'd typically use a handheld calculator for nowadays, intermediate values that can be efficiently (re)used on the stack as many times as needed (removing most of the need for additional registers), is more intuitive for making very compact and memory efficient algorithms (not the perk it was back in the day, arguably), and a keystroke programming model that closely corresponds to the way a user normally solves problems with the calculator manually. A simple but effective demonstration of the above features is solving a polynomial with an RPN calculator and a typical TI.

So I'd say difficult mathematics will remain difficult. But the analogy that comes to my mind would be the difference for the driver of an automatic transmission versus a manual transmission. Or a black box that does too much, leaving the user unsure of the full breadth of its function. RPN prevents the user from becoming too distant from what (s)he is calculating, while still providing all the power and abstraction needed not to be bogged down (too much) by the mechanics of the calculation itself.
Cartoons that perfectly describe life in Silicon Valley
It's not because "Rob Pike says so". It just happens that I agree with him on this matter, which is why I mentioned his answer :-) Thanks for the link, including tptacek comments, which are very convincing.
> The PMs I read and act on when it's my Slacking time. I open up Slack and crank through them. Slacking time happens one or more times a day depending on my bandwidth.

At this point it sounds like slack is now just email at which point I question the value it is adding. Assuming everyone else does the same things in the same way you'll never have a responsive conversation over slack like this and may as well skip it entirely.
The stat() family functions for sure, BSD Sockets, user account, covering everything from "process environement" to "filesystem" functions.

"FAQ about lsof"[1] is very instructive.

[1] ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/FAQ
Very good point. I would say that if your object is doing e.g. validation, or if/then/else'ing on field values to normalize them somehow, it's already far from anemic. But the key point is that you should not put data in objects, and then put the business logic, as in the small code sample, into some routine that simply accesses fields. That's the anti-pattern.
Or maybe you're more comfortable on your laptop compared to a random pc ?
I do think it's reasonable.

If the domain is added to the account there is no PoC, it's only for domains that have been removed from accounts but still have the nameserver values(meaning the domain is not being used at this point, there's no zone file if it isn't added to an account).

So this is mostly only going to affect currently derelict domains. I'm not saying it isn't something to worry about, but I do think it's a reasonable solution.
WhatsApp, if you want to make your platform for business, just open your API.
Also be aware that the hash for each ApplePay instance of the same card is unique, so you have to use the same device when tapping out that you did when tapping in (or all day in order to hit the cap).

It's also worth priming your device (double tap home button from lock screen) and authenticating before you reach the gate. You don't want to hold up the 50 stressed commuters behind you fiddling with your phone.
I would love to see a screen share video of this. Can you make that happen possibly?
Have you had any contact with DO's support or security team prior to this? You are correct that companies frequently ignore or downplay reports but it's nice to at least make that first attempt for each new find (per company). This is only ever done as a courtesy, I'm not saying you must or even that you should have here.

Remember, it's just another nerd out there somewhere who receives your report. Sometimes they are super stoked to have it and will be very responsive. This can be more satisfying than a public disclosure without first contacting the company.
when in doubt just change your password
Show HN: Make Me Work – a solution to procrastination
The heat is on: this summer's unmissable outdoor installations
> I can see the appeal, however. Write once run anywhere is a hell of a drug.

It's not just that. It's that you're not paid to write good code, nor efficient code. You're paid to write any shit that works good enough to be sold to users, and to write it as quickly as you can.
San Diego Airport Hails Faster Cab Lines with BlipTrack
That turned out to indeed be the case after their first response :/

How would it have ended if you hadn't reached out to one of their security people after being banned? They'd have given you the traffic, locked your account, and congratulated themselves on a job well done?
> Or if not liable, you'd at least have an uphill battle to fight in order to prove that it wasn't you that did the thing that got you into trouble.

If everyone had guest networks, I doubt this kind of thing would even make it to court.
Dublin airport using sensor technology to track queue times
Or we cannot get better access. I'm in Melbourne suburbs and can only get shocking ADSL1.
Banning his account was totally unjustified since he approached them first with the issue. A less ethical person could have tried to make money or sold this off on the back market. People like him should be rewarded not have their accounts banned. For all we know he just saved DO a lot of headache in sorting this issue had it gone wrong. I really wish the response from DO on this was different.
I'm sorry, I didn't see it before!
I remember the times when they didn't, and I liked it better that way.
By that standard nobody would ever be allowed to criticize anybody who got in a position of success or power, though, just because "they achieved more than you, sucker".

Although I really think Woz is a great guy and that we historically owe him A LOT, one can't understate the fact that he's been operatively absent from the industry for a long time. His comments on Apple come from insights that are quite stale. He might have his own good friends inside the company, but he's certainly not an insider in Cupertino anymore. He often lets journalists paint him as such, though.

I respect his insights on the industry at large, because he has certainly seen a lot and done a loto. Even those comments are a bit nicked by his shallow consulting jobs that in the last 10-15 years never really led to anything relevant, since they were probably well paid stunts payed by companies who wanted to enroll a big name to wow investors at pitches.

Edit - I want to be clearer: this is a friendly critic coming from someone who still loves Woz and has him on the personal list of "IT celebrities who would be amazing to hang out with". I also want to stress that I don't really blame him for this management of his late image. I just won't give a huge amount of weight to his sharpest statements as publications often do.
I was wrong about Pizarro. With the 'mistaken for a prophecy' bit, I was thinking of Cortés and Montezuma.

http://www.bbc.co.uk/history/historic_figures/cortes_hernan....
I'd never really considered this till now but all those "you must wipe the calculator's memory before the exam" rules are totally owned by installing a sufficiently deceptive custom OS.

Like another commenter, I wrote some of my first programs on a TI-84, amazing that the school encouraged us to buy them and then completely failed to teach anyone how to use any of the features :'D
Having read here about tracking people's key presses through walls using WiFi signals I was expecting something related to that. However, probably you'd want all WiFi off for that to avoid mixing up signals.
On a personal note, I'm far more comfortable with a proper keyboard and a big monitor (or two), and frankly, so long as the OS has a couple of standard editors and the standard build tools, surely everyone can start working pretty much instantly? How long does it take to find the terminal and start typing? If a candidate's laptop is some kind of security blanket, or they can't do anything without exactly their particular micro-choice of environment, that's not a good thing.

Provide a desktop for the candidate to use. Make sure it's got vim, emacs, gedit, and whatever the cool kids use now (sublime?). Make sure it's got a recent set of tools for the technology at hand. GCC and build tools or the equivalent standard. Job done.
Is there an option to disable sending that information? I.e. can I make so that people don't see that I'm typing a message?
BareMinerals Lash Domination Volumizing Mascara
Hey HN, creator here. I've been thinking about remote personal assistants for a while, but it's quite a bit to get off the ground. After publishing a book recently and realising how important the role of my editor was, mainly just in her role of checking that I was writing, and helping me set short-term deadlines, I decided on productivity assistants instead.

I hope to grow the idea into a full-blown PA service (people who can organize phonecalls and other admin tasks for you), but for now these people will be around to talk to you and help keep you productive.

Feedback on the idea, site, or anything else would be highly appreciated.

Specifically:

- Do you see the need for a service like this?

- Do you need a service like this?

- How much would you be willing to pay for a service like this?

As mentioned in the pricing page, I'm giving a trial of the service free for the first 5 members (1 month each), so feel free to be one of those five if you're working on a project at the moment and battling to find motivation to put in the hours.
It's so disappointing that apple locks away the NFC chip. NFC payments are widespread in Europe but the fees are so low that Apple Pay needs to make special deals with banks and they don't care largely to share a tiny share with apple who does not add anything.

I would love if my bank just had a way to provide their own wallet solution on iOS but currently there is no way :(
There are from 30-950 cases per 100,000 people per year.

Or an 0.03% to 0.9% incidence rate. That sets an upper bound on deaths. It corresponds to about 100,000 to 3 million exposures per year. If 10% of those were potentially fatal without treatment, you'd be looking at 10,000 to 300,000 deaths/year. Keep in mind I just pulled 10% out of my ass.

You'd want to see how many people or cases would be untreated at the higher price level. But the information certainly supports the notion of thousands of deaths.

At 1,000 deaths, that's about 1.6 million in profits per corpse for Mylan, based on $1.6 billion in additional profit.

http://rnspeak.com/case-study/anaphylactic-shock-case-study-...
What you just described as reasonable is not the scenario I asked about, which is just "pointing to someone else's nameservers".