skysight-inc/HackerNews huggingface dataset:
If you don't want people to buy into the narrative that the humanities doesn't produce anything of value these days, would it not be best to mention something that has happened in the last century?
Not only the apps's interface, but in my experience it also installs adware as browser extensions.
The most important operation in QNX is MsgSend (2015)
Do we overlook “reverse” or “hidden” gravitational lenses?
Galaxy Makers: Design Your Own Universe
I like Deluge, but I really wish its default API (protocol) wasn't so difficult to use. It's bencoded Python objects as far as I can tell. If you've never heard of bencoding, that's because it's only used by Deluge.
Thanks for the detailed response! I think you and others on here are right, there's a better way to do the ranking so the results closer represent what we're looking for. I think I need to better define what question we actually want to answer with this data and then establish the metric that best measures that, and your ideas definitely give some hints for some directions that measurement can go. I especially like the idea of "boosting" cities that have a rare topic the user is interested in. Thanks again for the interest!

-pH+
I was looking for a windows version of zstd. On the github page, I could only get the version 0.81 version of the windows tool. Can someone release the 1.0 version of zstd for windows ?
>if you detect the seed, e.g. from the sort-order,

Good luck with detecting 128-bit secret key from sort order.

>State-recovery.

>A simple strategy to attack SipHash is to choose three input
strings identical except for their last word, query for their respective SipHash
outputs, and then \guess" the state that produced the output
v1 ⊕ v2 ⊕ v3 ⊕ v4 for one of the two strings. The attacker checks the 192-bit guessed value against the
two other strings, and eventually recovers the key. On average
d2^191 evaluations
of SipRound are computed.

>Internal collisions.

>As for any MAC with 256-bit internal state, internal collisions can be exploited to forge valid tags with complexity of
the order of 2^128 queries to SipHash. The padding of the message length forces attackers to search
for collisions at the same position modulo 256 bytes.

https://131002.net/siphash/siphash.pdf
Add Facebook Popup Like Box in Blogspot Blog (V2) – Help2blogging- Blogger Tips
I'm having some servers at Hetzner (beside AWS and DigitalOcean) for the last 15 years and never had 8 hours of continuous downtime, so this really astonishes and scares me.

Could you point to a Hetzner post where this has happened?
(so I can reevaluate if I might move to OVH).
Interesting question. According to https://developer.apple.com/support/certificates/:

>> If your membership expires, users can still download, install, and run your Developer ID–signed applications. However, once your Developer ID certificate expires, you must be an Apple Developer Program member to get new Developer ID certificates to sign updates and new applications.

What I understand is that codesigning costs $99 a year, which open-source projects may want to skip, but this harms their credibility if their downloads are compromised.
Ask HN: Submitting HN comments
Hi,

I've just submitted https://news.ycombinator.com/item?id=9872640 as a test.

I wanted to explain in the comments that I believe that older, longer comments with lots of technical content might be a good discussion starter, and that I wouldn't do it again if the submission was flagged to death, but it looks like I can't comment on a ycombinator.com submission.

So let me ask you here: Do you think such submissions are acceptable?
LOL.
Always found two a little too dense personally.

And yeah, meaningful tab characters in Makefiles are a real sod...
Their biggest problem may be the size of their user/usage community, it may not be so "Everything is rock-solid and just works" for you and you should probably expect that some features may not be so tested or used outside of the developer using the code for their own purpose. On the plus side, it allows them to fast move forward and break backward compatibility for the greater good, however keep in mind to follow their mailing list and read the change log very carefully to avoid surprises.
How exactly do you expect them to send an email to an address they only have a hash of?
Even if you would "turn it off" and fb would not recommend it to you, they would still know the connection, and those same people would get you as a recommendation. So "turn it off" only would mean "hide the underlying connection".

Only way to prevent this is to hide/obfuscate/limit information that fb is accessing about you. And that would be a huge feat in an of itself.
I don't think the primary barrier to open access is the willingness of the researchers to self-publish, as long as they can still publish in any journal that they want. Seems like a very sensible trade-off to make the law easier to pass. I'm somewhat worried about what publishers might try to do to dissuade them, but everything I can think of would involve messing heavily with the peer review process which is fairly dangerous.
Gotcha. I'll keep this firmly in mind should I ever find myself inclined to refer to Dr. von Braun as 'Professor'.
Amazon has almost 100% been using the local Prime Now drivers to deliver boxes - which is great because they come next day. Down side is drivers are always new and have no experience delivering mail. It's gotten a little better but I had to call amazon and request that their drivers not call me to tell me to meet them at the corner of the block for my package.

I've figured out that if I want something tomorrow, I check the prime now site and see if it's available there. If so there's a very good chance it'll come overnight.

What I wonder if how are the drivers compensated for delivering a box vs same day? Same day you tip them. So does that mean they're getting screwed for normal deliveries? Knowing amazon, probably.
My guess is that it wouldn't be too bad, but that at the volumes Facebook are doing, I suspect a lot of their speed is coming from custom optimisations they can make for their use-cases, which Big Query wouldn't have.
Attitude – The Only Thing You Need
As usual for headlines that contain phrases like "takes apart," "utterly debunks," or "totally destroys," the tax expert's response does absolutely none of the above. Not a single factual assertion in Cook's letter is contradicted.

There should be an axiom comparable to Betteridge's Law for this sort of headline.
Compare it to the Opus patent license (also including a retaliation clause), which includes grants from Broadcom, Mozilla and Microsoft.

Using zstd gives Facebook a free license on ALL your patents.

Using Opus gives Facebook only a license on patents that apply to Opus.

So no, large tech companies can and have given MUCH better grants for compression tech, than Facebook is doing.
Sony’s new e-paper watch runs for weeks on a charge
What about the assertion regarding how much of the profits are taxed in the US?
As a logistics manager - I would constantly switch between the two, depending on who could get me the best rate for our most common small package parcel sizes, etc.

They constantly alternate between "the best" and "shitty".
And let's assume most programmers don't changes their editors auto-indent default. How does this affect the result?
Why not this?

curl https://gist.githubusercontent.com/kaizensoze/ca96d039b295db220951d42ca7c83d89/raw/ | bash
We all know nothing.
I've had boxes at Hetzner for 9 years and have never had that much downtime.
It seems hard to defend Apple's position. The pushed their tax avoidance strategies as hard as they could in Ireland until they were paying 0.005 percent in 2015. It would be wonderful if tech companies took this moment to push for clear and transparent international taxation laws. Some of the tax avoidance measures currently practiced can seem particularly unfair from a layperson's perspective.
I'm a German citizen, and I learned French in school, my level of proficiency was very low when I arrived though. Getting around using English was quite easy, and the application process was straightforward even with a German Diplom (M.Sc.). For an US degree you'll just have to make a translation and possibly have it's equivalence assessed, that shouldn't be too hard though. The UPMC (Paris VI) has a quite good PhD program for example, and is open to international students.
I think it is much better these days
> No they are not.

How do you know?
B..b..bbut! I thought Macs were _secure by design_ and didn't get infected! Did they lie?
[parent commenter complained about 8 hour long downtimes and otherwise bad experience with Hetzner. He/she has since replaced the comment with insults to other HN users.]

Counter experience: 4 years with Hetzner from small VPS to huge machines and based on traceroute servers in different sections/buildings of their datacenters. No hardware issues or hourlong downtimes you describe (other than myself messing up software RAID configuration).
How I keep my whole company in the loop in 10 minutes
It's more like a botched update from Microsoft, Apple, etc. will be noticed by lots of people within one or two days.
Official announcement: https://www.hetzner.de/hosting/news/hetzner-online-bietet-um... (german)
Thanks for your post - I appreciate the constructive criticism - and agree the video isn't much to anyone with an aviation background.

I guess what I was trying to say, is that if you are an air-<whatever> business, you ALWAYS have to be an airline first - with all the Regulatory, Union, personnel, hardware, etc issues that come with it - and whatever else you want to do SECOND (air freight, passenger etc).

You know waaaaay more than I do - this is just my oversimplified take I am sure. I just am always impressed at the stakes / volume of traffic that goes in / out of the FDX hubs daily.
Perhaps you'd have better luck using "industrial grade" SD cards; should have more robust firmware.

E.g.:

https://www.sandisk.com/oem-design/industrial/industrial-car...

http://www.cactus-tech.com/en/products/industrial-grade/sd-c...
Fool Me a Twice, Shame On Me
It does seem to use S3 behind the scenes based on URLs I've seen. The data loss incidents I've seen reported have tended to be after outages. Amazon Cloud Drive seems to keep an index mapping amazon cloud drive filenames to S3 objects, I suspect the index entry was corrupted/lost/rolled back. While the object likely still existed in S3 somewhere, that doesn't do much if users don't any way of accessing it.
Your line downloads and executes the latest version of the gist, it could have changed from a file check to a virus installer by the author (unlikely, but I have to point it out). To be a bit more safe (while trusting that GitHub is not compromised) pin a known, verified version:

curl https://gist.githubusercontent.com/kaizensoze/ca96d039b295db220951d42ca7c83d89/raw/a26e5a025ea21d3a0af536eeca49619272d0068f/quick-osx-keydnap-check | bash

(sorry for the overlong line)
Disappointed in Apple and Tim Cook, this is the typical amoral behavior one can by now expect from corporations and their CEOs.

It's always about the money.

What can we as EU citizens do to encourage these corps to behave? I'm thinking an e-mail to Tim Cook wouldn't have much effect.
Yeah, like the bit where he says that apple does not pay the "fair share". There is no such thing. Either you pay what is required by law or you don't. Especially if what they said about being the largest taxpayer in Ireland is true. I feel about it this way - if you rented an apartment for $1000/month, and you had a room mate that paid $900 a month, why does it matter that it's only 0.00001% of his income, while the remaining $100 is 20% of yours? Could anyone say that that other room mate is somehow not paying his fair share of the rent, since it's such a minuscule percentage of his earnings?
I'd be happy to give it a try. I suspect rclone is the wrong tool for the job, but I haven't looked closely at the rsync.net service.
How much does it cost to develop a mobile app
Question is, how implausible do we think it is that a developer's computer gets compromised?
I wonder if the checksum was changed on the website too.
App Agency Chimes in on iPhone 7 Rumors with predictions and commentary
Cloudflare is a major source of centralization.

The more providers offer something like this, the merrier. I understand that this isn't a layer 7 solution, but that has it's downsides as well - Cloudflare (or any other reverse proxy) will MITM all your TLS traffic, for example.

It's also time to address the elephant in the room: AWS. "Oops, you got DDOS'ed? Here, have a $50k invoice"
> Either you pay what is required by law or you don't.

And according to the EC, they don't
Advocate for unification of tax laws across EU - then corporations lose incentive to register in countries which offer them the largest tax discounts.
We often accuse authorities of going after the small, while leaving the big offenders free.

The average individual working person has no negotiation when it comes to what taxes they pay. The average business has to be very careful, fully aware that they are at an extra competitive disadvantage compared to the international mega-corporations who are effectively given huge financial subsidies by entire nation states.

It’s not personal. Tim Cook knows that what's happening is right, but nevertheless he is required to defend the tax advantage, same as the Ireland, as with the US where mega-business and corporations have a strangle-hold on government and law.

Every individual should support the EU. If the EU is defeated here it will be a loss to the small man and small business. If defeated it will enshrine by default the creeping imbalance of power that corporations have over the individual nation and people.
Ask HN: Admin girl wants to get into radio engineering
tl;dr: I'm a low-paid public sector administrative worker with some unutilised technical skills. I want to pivot away from admin work and go into RF/radio engineering, a field that I've had a long-standing interest in.

It's not a field that's totally unknown to me, otherwise I wouldn't be considering it. I've had an amateur radio licence and been active since I was a teenager - a full UK licence, not the Foundation ones that they hand out now. I've designed my own antennas, built and repaired my own kit, organised DXpeditions, I'm experimenting with SDR. It's something I have a genuine interest in.

I'm not the sort of person who considers any kind of work 'beneath me' otherwise I wouldn't be doing this in the first place. Work is work, a means to an end. I just don't feel like insecure, non-technical, paper-shuffling public sector administrative work is really the best use of my skill set and aptitudes.

RF engineering seems like a field with a future and a bit more security. I mean, there's very little these days that doesn't have a radio of some kind inside it. I'm just not sure how to get into it as a professional career, what qualifications I'd need, that sort of thing. I have A-levels even though I have no degree, but my A-levels aren't in the sciences because at 16 I was convinced I wanted to be a journalist. Is it something you need to go to university and get a degree to do, or are there more vocational qualifications or apprenticeships you can do instead? As far as I can tell, the degree route would require a three-year BSc in electrical engineering or similar, followed by an MSc to specialise in the radio side of things.

Is this a path anyone else here has taken? What routes are there into this kind of career? It really feels like the thing I want to do to feel more challenged, more fulfilled, in order to get out of being everyone's assistant and into a role where I actually am something. Thanks all so much in advance for your help!
Maths and Conferences, Lanyards and Legibility
I think it's quite clear that Apple has a tax rate of 0.005% instead of the normal 12%.

Can I also get such a discount? What about if I start a company, can I get it then?

It's true that I don't hire thousands of employees, but I'm not rich to the tune of hundreds of billions either.

It's all about proportions really. Let's all pay 0.005% tax and see everything turn to crap around us. But we'll be rich!
I guess that would depend on the density of the language - I prefer 2 for clojure / common lisp and 4 for C and python.

At the end, we're trying to optimize for readability, and the horizontal indentation needs to be more or less in harmony with how tight the code is vertically... for example, see this completely random and subjective selection from two of my projects:

void consumeInput(gap * sudoku, inputQueue * q){
unsigned short int x, y, i, data;
input * ptr = q->head;
q->head = ptr->next;
x = ptr->x;
y = ptr->y;
data = ptr->data;
free(ptr);
if(!q->head)
q->tail=NULL;

if(DEBUG)
fprintf(stdout, "%d %d %d:\n", x, y, data);
x--;y--;

(defn username-from-req [ring-request]
(when-let [identity (:cemerick.friend/identity (:session ring-request))]
(let [[[:authentications auths]
[:current curr]] (vec identity)]
(when (and auths curr)
(str (:identity (auths curr)))))))

(My) C functions tend to be longer but with shorter lines, whereas with clojure, I end up writing denser functions with fewer lines with more meat, both in term of characters and semantics. Thus (again, for me), clojure looks better if lines are more "tight", and C needs more breathing space.
We had people in the same team with the same differing opinions 15 years - we compromised on a coding standard of 3 spaces, and anything else looks wrong to me now.
I'm from Germany but Online.net is the way better alternative to Hetzner for me. Server grade hardware, cheaper, no compromises, internal network, etc. etc. I think they even hired a lot new support people recently so you get an answer pretty fast. Hetzner always has this "cheap feeling" even though the hardware looks good on paper.
The only reason I accept why spaces should be used is that people are unable to configure their editors apparently.
I am Irish and work in tech BUT I do not know how to feel about this fiasco.

On one hand:

* Personal taxes and various hidden charges (and no we do not have free healthcare like the NHS, unless you are unemployed) are massive

* Small companies such as mine do not get any special treatment and have to pay corporate tax at 12.5%, its unfair Apple get preferential treatment

* 13 billion would go a long way to solving all sorts of issues this country faces (tho it seems other countries want some of this money...)

On the other hand:

* The EU seems to be overstepping its bounds and trying a powergrab, last two times I voted YES on EU referendums we had clear promises that EU will not involve themselves in a members tax policy, i feel I was lied to.

* Apple (and pretty much any large company you can think of) are here in Ireland and do hire boatloads of people, who in turn spend the money in the economy

* Without our low corporate rates Ireland would be yet another impoverished peripheral EU state (as it was for long time) like Greece, minus the sun and with loads of rain :(

So yeh I can see the moral and the pragmatist arguments being made on both sides of the debate, but can not decide yet where I fall.

tl.dr: Its complicated...
Well since we can't prove it isn't true, it must be true.

Just like invisible gods :)
:) You're just pushing the complexity into the validation of the algebraic type.

Look, a typed formalism does extra work of proving the type safety of the input. Checking a proof has a non-negligible complexity. If that cost could be ignored, then I have a computation model that solves NP problems in zero time: it has a type system that requires that the types form a proof certificate for the problem. All (obviously valid) inputs are then trivially reduced to "yes". In fact, you know very well that some type systems are Turing complete. If the complexity of validation is ignored, then those models can compute anything that's computable in zero time.

Types can prove things. The cost of the proof is well known, and is related to the difficulty of the problem. The universe doesn't let computational complexity slide. What, you think that God says, "oh, you clever boy, you chose a typed model so I'll let you have this proof for free!" ?
No,it's actually right. See my post comment answering the same question. It is the circuit models that actually pose a harder challenge, but even if you won't accept my reasonable zero-cost encoding where a misconnected input is interpreted as a constant 0,the cost of validation is still less than even untyped LC.
The article is trying to address a legal situation but uses terms like "that doesn’t mean they’re paying anything resembling their fair share" and "everyone is correctly saying Apple did wrong".

The moral/ethical viewpoint is being addressed here, not the legal one. If the law is out of step with the moral viewpoint (as it so often is), then folks on the moral side apply pressure to change the law. The law is supreme in our part of the world, and arguments that ignore it are simply beside the point.

An appeal is exactly the right way to test the law, so we'll see at the end of this process if the EU is actually challenging Ireland's tax law and its legality in the context of the EU, or if there was, in fact, some illegal activity on the part of Apple and the Irish government (as is suggested by the extant ruling).
The Most Anticipated Games: Issue #18
GitHub indirectly uses the Java bundle for TextMate, where I filed this issue: https://github.com/textmate/java.tmbundle/issues/45

Since the escape sequences have to be handled everywhere, it seems unlikely that this will ever be fixed completely, but I hope that something will be done about it.
Problem is that apps nowadays check for updates automatically. And if the release message says it's a security patch I guess the most of usrs will update right away. At least I do. And obviously if I was a hacker I would play that "important security update, upgrade immediately" card, it's a basic social engineering...
The benefit it has is that the 'shop.' subdomain can't be guessed from the DNS records. I get a lot of spam to <randomname>@mydomain.com.

Of course, if someone sees my email address, they could certainly infer a new one. But I'll deal with that if and when I get singled out. I don't think the spammers often actually look at the millions of addresses they use.

If I start getting spam on a particular alias, I can set up filtering rules to delete them.
The law says they have to pay 12%. They pay 0.005% because the Irish goverment is giving them special treatment.

No thanks, pay the 12% like everyone else or take your 6000 workplaces and shove them.
Can you recommend any? And something I want to investigate soon.
Question that may be obvious for those who have experience on the matter: is OpenBSD for server use a nobrainer? It's not that popular on that section even though everything looks so good, so well suited for serving.
Novelty account making pretty outrageous claims about some large service provider but can't back it up.

I'd not put too much stock in this, Hetzner isn't perfect but almost a full day of unscheduled downtime does not match my experience.
This must be partly cultural. I'm currently in China, and a ton of people who use WeChat speak into their phones to send voice messages, rather than type. They hold the phone so that the phone's mic is close to their mouth. When they listen to voice messages, you can see them holding their phones up to their ears to hear their phone's speakerphone clearly. And yet there I am, mostly typing my WeChat text messages instead of sending voice messages. Though I sometimes hold my phone's speakerphone up to my ear to hear someone else's voice message....

edit: clarification on holding phone