skysight-inc/HackerNews huggingface dataset:
I actually thought one of the car manufacturers had released a evolutionary version of the V8 car engines...
I don't believe that's true.

I'm googling to try to find how Homebrew uses checksums and where it gets them. But not everything homebrew installs comes from GitHub, so I don't see how checksums for all of it could come from 'Changes made by GitHub pull requests'.

And it looks like homebrew checksums both source packages and pre-compiled binaries. There's no way an upstream dependency would be providing their own checksum for a homebrew compiled binary. Homebrew also switched from using MD5 to using SHA1 recently (https://github.com/Homebrew/brew/blob/master/share/doc/homeb...), obviously all of their dependencies didn't switch in unison too, which suggests the checksums do not come from the dependencies themselves.

Looking for more info about this, having trouble finding it. To have confidence in homebrew's checksum system, one needs to know how it works and where they come from, but having trouble finding it.

Or did you mean the checksum is made in a PR to homebrew's own repo? Right, but the question is still where it comes from. If it was generated from bad source obtained from upstream, it will of course be bad. It's just verifying that the package as installed matches what homebrew maintainers meant to install; but that's no guarantee that what homebrew maintainers meant to install wasn't bad in the first place. Since transmission was distribution bad packages itself due to a hack, I'm not following how homebrew providing a checksum means that it can't re-distribute bad packages from upstream. It does mean that homebrew itself is harder to hack than transmission, but doesn't necessarily help when transmission is hacked.
The paper acknowledges this right there in the first page (footnote 2).

"The German telecom auction subsequently raised even more in cash terms (although less per head of population) ..."
Not unusual though. Many people have holding companies with the sole purpose of separating the them and their "actual" company, in case of bankruptcy. Holding companies like that seldom need an internet presence, or any presence really, they only exists to provide legal protection.

The company I work of is actually owned by a series of individual holding companies, each one hold some percentage of the shares in the operating company. The holding companies mainly exists to protect the owners from bankruptcy.
Disclaimer - I work on PukkaTeam
You don't have to do everything in a local economy to unlock value. The majority of vehicles in developing countries aren't manufactured locally, but their presence makes other lines of business possible. It might even provide impetus for civil society to improve infrastructure that...(hopefully!) pushes that country up the value chain.
Bruce Mesnekoff
You forgot

3)Believe in the wrong God and go to Hell anyway
> Scaling that up - if I'm not logged into Wikipedia, and simply searching and reading articles, why does that need to be served under HTTPS either?

Because a malicious MITM could modify the content you are reading (and thus affect your perception of a subject). A bit of misinformation here and there can go a long way.
I'd like to offer some quotes from the book "Economics in one lesson", a book from the 40s that is still very relevant today. Specifically, from the chapter called "The curse of machinery":

Among the most viable of all economic delusions is the belief that machines on net balance create unemployment.

Let us turn to Adam Smith’s Wealth of Nations. The first chapter [...] is called “Of the division of labor,” and on the second page of this first chapter the author tells us that a workman unacquainted with the use of machinery employed in pin-making “could scarce make one pin a day, and certainly not twenty,” but with the use of this machinery he can make 4,800 pins a day. In the pin-making industry there was already, if machines merely throw men out of jobs, 99.98 percent unemployment.

Arkwright invented his cotton-spinning machinery in 1760. At the time it was estimated that there were in England 5,200 spinners using spinning wheels, and 2,700 weavers - in all 7,900 persons engaged in the production of cotton textiles. The introduction of Arkwright’s invention was opposed on the ground that it threatened the livelihood of the workers, and the opposition had to be put down by force. Yet in 1787 [...] the number of persons actually involved in the spinning and weaving of cotton had risen from 7,900 to 320,000, an increase of 4,400 percent.

[...] Technophobes will assert: “That may have been all very well in the past, but today conditions are fundamentally different; and now we simply cannot afford to develop any more labor-saving machines.”

If it were indeed true that the introduction of labor-saving machinery is a cause of constantly mounting unemployment and misery, the logical conclusion to be drawn would be revolutionary, not only in the technical field but for our whole concept of civilization. Not only should we have to regard all further technical progress as a calamity; we should have to regard all past technical progress with equal horror.

There is also an absolute sense in which machines may be said to have enormously increased the number of jobs. The population of the world today is four times as great as in the middle of the 18th century, before the Industrial Revolution had got well under way. Machines may be said to have given birth to this increased population; for without the machines, the world would not have been able to support it. Three out of every four of us, therefore, may be said to owe not only our jobs but our very lives to the machines.
Conversely sites such as Carphone Warehouse who buy a certificate, would get advertised by Chrome to the uninitiated as "Secure". Despite woeful backend security: http://www.bbc.co.uk/news/uk-33835185.
>”You know where this goes: the dogs that had to sit — exercising self-control — gave up on the puzzle much earlier than the dogs that were just hanging out in their crate.The dogs that were NOT burning cognitive resources being obedient had more determination and mental/emotional energy for solving the puzzle. Think about that next time you ask Sparky to be patient. His cognitive resources are easily-depleted too." //

I'd have thought a better hypothesis was that the dog that it's free has other options for how to spend their time. The incarcerated dog doesn't have anything else to do. So whilst in both cases they maybe realise they can't get the treat - evil humans - the dog in the cage only has alternatives asking the lines of 'lick scrotum'.

If you lock me in a cage and give me a Rubic cube then I'm not going to be able to go down the pub instead.
Crappy (free, obsolete) webcam, fm-receiver, tv-receiver + sha512? - Define cheap.
Languages are part of the ergonomics of code writing.
Great. Now they should offer the same for the search engine.
Well, if he'd written an article saying a larger workspace area is nice, would it have hit the front page of Hacker News?
It seems recently like anything inbound to Google goes into /dev/null!

A number of us have been trying to get a response regarding Google Apps accounts with Play Music, and we're paying customers. There's no response to the forum https://productforums.google.com/forum/m/?utm_medium=email&u... nor when I put it on Twitter and when a load of us tried direct feedback via the app, that still hasn't got any response.

Clearly their model needs to rely on limited user support and that's okay, provided there's a good service with some human presence. But it's getting to be a problem...
Lessons About What’s Holding Back Solar Technology
Private music torrent tracker member here:

I pay for Spotify for convenience and functionality (syncing between devices, perfect tagging/catalog/artwork), not because of any potential risks surrounding piracy.
Tesla Netherlands investigates fatal accident in Baarn
That's about right.

(For conferences with proceeedings, even normal publishing is not free - part of the conference fee is to pay the publisher.)
What's that? Google? Poor support? Poor service? Say it isn't so.

To be clear, #Sarcasm :)

Google's genius, isn't so much what they do. It's also that they've lowered the bar when it comes to expectations. They understand that designing and building products is relatively easy. The unknowns are in time knowable.

On the other hand , reality-based humans drive Google crazy. They are, evidently, to be avoided at all costs.

In that context, it's "interesting" how it's working out for Google+, eh. Surprised?
I don't read Snow Crash as a Neuromancer parody. Stephenson has too many of his own ideas for that. When it comes to ideas, Stephenson is unusually playful. (See also the Enlightenment philosophers in the Baroque cycle.) He's not great on plot or characterization, or structuring a novel in general, but Stephenson can write one hell of a sentence, and he often keeps it up for a paragraph at a time.

Gibson, whose books I also adore, has basically nothing at all to do with Stephenson. The only thing connecting them is that some of their books are set in dystopian near-futures. Gibson at his best is bracingly bleak. Cyberpunk was a marketing term for publishers and critics who couldn't get their heads around him. Early Gibson is pure punk. Even more than Neuromancer, read the stories in Burning Chrome for their hard, angry edge.
> if I'm not logged into Wikipedia, and simply searching and reading articles, why does that need to be served under HTTPS either?

Because we have already seen tampering that could really cause some issues. Injecting ads, snooping on search info to target advertising, things like censoring specific articles or specific topics.

Because of how global the internet is, regulation can't really solve many of it's issues (unless literally everyone can agree on the rules), so we need to solve them technically. Securing you to the server makes all of those things much more difficult.

>By forcing every site to go HTTPS not only increases the cost of ownership (in time, and optionally, cost) but also adds complexity for small site owners, and completely goes against the open web ideal.

Then let's solve those issues. Added complexity is not a reason to abandon TLS for most sites, it should be a goal to not only get TLS, but to make the process easier for the average joe to setup and run.

By starting to push in the direction of "TLS everywhere" we are encouraging more automatic and easy ways of maintaining this stuff (just look at how far let's encrypt has come in such a short time! How long until it's a GUI program that even my grandfather can use?).
> I received an email from Google telling me that my extension violated Facebook’s trademark

What did you expect?

Any service, not just Google, will shut down apps and extensions for similar reasons. This has nothing to do with

> I just don’t think it is worth it to put any amount of effort to build something on a platform that turned out to be so unreliable.
You can get a hostel for $25 in most places, seasoned travelers are not going to be taking unknown packages around. The people that do that sort of stuff are the people going on their first trip overseas.
Also worth reading:

http://geocalc.clas.asu.edu/pdf/SpacetimePhysics.pdf

https://slehar.wordpress.com/2014/03/18/clifford-algebra-a-v...
FBI Director: ‘There’s No Such Thing as Absolute Privacy’
That's what you get when you centralize things.

A better thing could be a community-owned store for the chrome extensions (and a community-owner browser). Something like the Mozilla Add-ons site but for Chromium-only extensions.

Or being able to add you own stores in Chromium, would be even nice for companies who want to distribute private extensions.
> I actually would know why you didn't simply encouraged random.randint.

Because it's not secure. Read the big fat warning in pink: https://docs.python.org/2/library/random.html
Does Minecraft Teach Children to Be Programmers or SysAdmins? (2014)
Senator Full Stack Developer of Awesomeness
Company Introduction

Blue Baboon is an exciting agency whose strengths lie in being strategic, creative and digitally focused. Our clients range from Rossopomodoro to the NHS but are always on the look out for the next disruptive innovator or challenger brand.

Job Description
We are looking for a Full Stack Web Developer responsible for managing the interchange of data between the server and the users. Your primary focus will be development of all server-side logic, definition and maintenance of the central database, and ensuring high performance and responsiveness to requests from the front-end. You will also be responsible for integrating the front-end elements built by your coworkers into the application. A basic understanding of front-end technologies is therefore necessary as well.
> I just want you to think twice before creating a revenue stream based on the Chrome Web Store.

This is probably not a good idea in general today anyway, with Google phasing it out for Windows/Linux/macOS.
Support costs money. Big money. Just as FB, IG, TW, etc. For the most part, they all suck.
we can also imagine that the people who get the message get a part of the money.

And the more you pay the more your message is higlighted or promote to these people.
Maybe a staff ASMR "artist".
Classic wet shaving is a bit like that.

I'm not sure if it's exactly the same as your examples though, as a lot of people into this particular hobby definitely do use and enjoy the different products. "Shave of the day" posts on forums typically show posters different set ups, with the same users having a vast rotation of gear. I guess it'd be like having lots of different pens or skateboards.

But I've also seen many different people say that they started using a DE safety razor to save money, but have ended up spending a small fortune on new gear.

Some video-games also have this in spades. I know I've pored over weapon stats to see which gadget is preferable, when just getting good at the game would have had a bigger impact than 10 more raw power points or the slight speed bonus that a particular hat gave me.
https://en.wikipedia.org/wiki/Betteridge's_law_of_headlines
Not providing any meaningful support is Google's business model - you can see them talk about it at https://www.youtube.com/watch?v=bU0Z_HAzO3I

> Google estimates that they would need to hire over 20,000 customer service people to deal with 1 query every three years from each customer. So it has decided - as far as possible - to employ zero people and rely on algorithms.

https://shkspr.mobi/blog/2013/02/googles-customer-contempt-c...
Legislating noncompetes
I think your arguments were rational. Splitting hairs is not the difference between 4 or 8 years, but compared to life, or around 60 to 75 years depending on your incarceration age. I do agree with you pointing out that it was a multiple offense, and selling not buying to use. Still, life? And questions of mental health too.
Here’s How to Hack Windows/Mac OS X Login Password (When Locked)
What you are doing not only violated Facebook's trademark (good luck calling it fair use), but it's also against Facebook's ToS. They have actively gone after extension authors who alter the Facebook experience and even deactivated their accounts.

Rightly or wrongly, when you sign up to a service you are bound by the conditions they set out. In this case, making an extension to block advertising is probably not going to end well for you.
We try to make the use of Flat the easiest possible. I think it can give it a try anyway. Really depends if he is used to music notation softwares :)
View the analytics to make sense of this:
https://docs.google.com/forms/d/e/1FAIpQLSfjXJ8stnCoCd1TRZIW...
And this isn't a "it could happen some day" threat, it's already a thing.

There are simple one-click setup programs that can monitor a wifi network, and inject malware into any downloads of executable or zip files that it can find.

With things like Stagefright still affecting a scary large amount of android users, what happens when someone starts injecting malware into images which can compromise an entire phone without so much as a hiccup.
Hi tptacek,

We know that thorough review does not happen instantly.
I want to let you know that we have bounties and funds available for doing code review.
https://shadowproject.io/en/bounties

* That's indeed true, we will be including the IV in the HMAC. Will be patched in our next version. Thank you!

* ChaPoly by TweetNaCl - dearly noted. The thing is, libs need compatibility with our curve. TweetNaCl only supports Ed25519 :/

* secp256k1 is correct.

* Do you have any references to the "exploding like a pipe bomb" problem? We're using the ECDSA from the bitcoins secp256k1 library - which is constant time and should be secure enough. Function: RecoverCompact()

We initially paid for a cryptographic review but the guy, whom we know by real name, disappeared from the planet. We're scouting for cryptographers willing to do code reviews, for a payment ofcourse.

If you're capable and interested then you should reach out to us on GitHub or Slack!

We do appreciate you doing this in your free time, so we're sending Bitcoin tips to whoever makes good suggestions. Please post your Bitcoin address if you'd like to receive some.

---

Most code is inherited from Bitcoin, custom code with cryptography: smessage.cpp, ringsig.cpp and stealth.cpp
I'm sure it has a lot to do with how I use skype (strictly as a text-chat client...not my decision), but I actually really like the linux client. It's stripped down and doesn't have all that fluff the Windows client has. Plus, no ads.
My guess here is that the subset of users who would be willing to pay a monthly subscription is strongly correlated with the subset that advertisers are interested in targeting most. If a site got say 10% of users to pay a subscription, their value to advertisers - and hence their advertising revenue - might drop a lot more than 10%, leaving them with a net loss.
+1 for Don. Thanks for all your hard work on The Sims!
I do agree that any service might honor the takedown request for the registered trademark infringement.

But what the author refers to is completely another issue: the complete lack of support from Google. The extension author complied with the request. Tried to contact several times an only got canned responses. I guess Google doesn't care much about people that develop for their platform. At least that's what I got from the blog post. Therefore, author's conclusion about developing for that platform seens right.
First time I've heard that methane decays so fast. Doesn't this dramatically reduce the practical warming effect of methane?
"alien civilizations would need to network to forge a treaty to leave primitives, like us, in the cold"

Or they just need to think alike, with no need for a complicated assumption that they forged some kind of treaty with each other. Maybe it's hard to see now, but in a space faring era with enough alien contact it might just come out as an obvious thing to not trust others too much and thus limit the exposure as the first measure of precaution.
I get your point, but I'm not here to be trolled.
The global epic of data distribution
Since there is no possible way to know 'what is', we all must choose what to believe. To believe otherwise is to delude ourselves.
I'm guessing you wouldn't name a computer company "Apple", a search engine "Google", or a shopping site "Amazon"?

gcc isn't particularly intuitive anyways; you have to learn what the acronym is, then you have to learn what another acronym is, and then after you learn what a recursive acronym is, you realize you have to research further to understand what it means...
I think shoehorning something nobody asked for into a browser that has historically suffered from bloat and performance issues was a good indication of what the reaction would be.
Higher-kinded types aren't an absolute necessity, and, in fact, they force you to pick between modularity (abstract types) and type inference: https://news.ycombinator.com/item?id=12331926 . Not a very pleasant choice, a programmer normally wants both.
The Foundation of Product-Led Growth: Create Products Customers Love
NO.

There are two limitations you did not take into account. The first is the rocket equation, https://en.wikipedia.org/wiki/Tsiolkovsky_rocket_equation . You need a thrust with a very high exhaust velocity - much higher than what an ion drive can produce - to get to relativistic speeds. Otherwise something like 99.999999999999% of the ship's mass will need to be propellant. I worked it out a few weeks ago at https://news.ycombinator.com/item?id=12281830#12282399 . The ratio of payload to propellant for ~0.8c using engines 10x better than an ion engine was 1 to 74 quadrillion.

The second is to have enough thrust to get to relativistic speeds for the human passengers in their lifetime. A engine with an ISP of 8000 s (about 10x better than the current best ion engine) would get there eventually, but long after any crew died of old age.

To get 4.25 lightyears in a year requires a continuous acceleration of a good sized fraction of a gravity. We simply don't know how to do that, outside of theoretical proposals like Dyson's "Super" Orion. Quoting https://en.wikipedia.org/wiki/Project_Orion_(nuclear_propuls... :

> At 0.1c, Orion thermonuclear starships would require a flight time of at least 44 years to reach Alpha Centauri, not counting time needed to reach that speed (about 36 days at constant acceleration of 1g or 9.8 m/s2). At 0.1c, an Orion starship would require 100 years to travel 10 light years.
Isn't every one of those partner lawyers a boss to one or more paralegals? And usually there are a bunch of new grad lawyers around trying to make partner, I'm sure they don't consider themselves equal.
Mainly news, yes. Rumormongering is big, though probably not as much as on other platforms where the origin of a message is hard to trace for ordinary folk, but again, if one has used this service for a while, and know the nature of the posts a handle typically makes, it becomes clear which is news and which isn't. Also, it is rare for all MSM people to RT the same non news without their colleagues raising suspicion, so it is not that bad. All that said, pruning is an indispensable activity for twitter.
Sony wins pre-installed Windows battle in Europe’s top court
Excited that this exists. I'd love to spend some time playing with it.

However, I was disappointed that the one of the first things I tried to do (play the "Super Mario Bros. Coin Noise" sheet) worked in Chrome but not Firefox. Maybe it was just a blip (another sheet worked fine), but I wanted to call it out anyways!
google does not sell your data.
this is such a tired canard.
Google Groups is a nightmare. It does some godawful overscroll-bounceback thing. My OS can handle scrolling just fine, thank you very much.
Learn Exponent – Cross-Platform React Native SDK
could this explain meditation, maybe you're not just rewiring your brain but the universe too.
Don't have to charge everybody. There can be a free tier ("pay with your data") and a paid tier ("pay with your wallet")
you refer to the blog as well?
[News] How huge Apple's San Francisco event is going to be?
Over the years I've seen the reaction to a lot of those "Facebook is going to start charging money!" fake posts and it's very negative. I can't imagine the outrage that would ensue if twitter or Facebook offered a "pro" experience. People don't respond well to free things becoming paid, even if the free version remains largely the same.
The main reason to use OpenSSL in secure-random is to get a seed - not all platforms have /dev/[u]ramdon. OpenSSL has code to initialize a seed from platform-dependent APIs