skysight-inc/HackerNews huggingface dataset:
The airplanes don't so much have low impact, rather they have a high sales price. Divide it out and it works out well enough. Airplanes have a lot of IP going into them.

Also, there is a good reason Boeing setup originally in Seattle. The smelting of aluminum is much cheaper when an abundance of surplus hydroelectricity is available.
Makes me wonder if Tor had an automated way to spin up servers and outsource admin if more servers would be around.
> As soon as you make your door much more hardened, there are other points of entry that will be used instead. It does you little good to transform your door into a foot thick slab of concrete if your window is still just a couple panes of glass, or someone can just take a sledgehammer to your wall next to the door and it's just a few sheets of plywood and some 2x4's.

Well sure, but like in all security it's about adjusting the attacker's effort/reward ratio. As I recall [citation needed], most burglaries are less than a few minutes, in-and-out affairs. Make it harder than that, and you can deter the low-effort attackers.
ha, sorry, i swear i started composing this before 0x0's comment :(
Yes: a number of non-profits exist, who operate high-bandwidth Tor exit nodes. In Europe and North America, many of them partnered with the German TorServers.net: https://www.torservers.net/partners.html

There are several reasons one might want to setup a non-profit for this:
- we can pool resources (money, but also technical expertise, availability to reply to abuse mails, access to legal expertise ...);
- it gives you greater (but still not great) media visibility for advocacy/outreach and running donation campaigns;
- it puts you on better footing if/when contacted by law enforcement agencies;
- it makes it easier to find networks that aren't heavily represented in the Tor network yet, and are willing to host exit nodes.

Full disclaimer: I am on the board of directors and sysadmin team of Nos oignons [NO], a French non-profit that operates Tor exit nodes.

[NO]: https://nos-oignons.net
Well, you can contribute, and it will only cost you about 5$ / month! Tor, by design, has some latency issues, and can also have exit node bottlenecks. I think people only run intermediate relays because of a "myth" that you'll get raided at 4 am if you run one. It has happened in the past to some operators, however, in this blog, I wanted to show that it's not always that way.
You'd judge a 1000+ word essay by just two words early on? Perhaps that is exactly the point the author is trying to make about the state of things these days...
"You could conceivably share an entire C++ class between two processes using these primitives."

Not really. May be just memory mapping a plain class/struct, without virtual function tables, etc. (pointers are not necessarily valid from process to process)
No, it might be a conversion from a database to CSV that's doing it or something similar.
The believe that you can accomplish anything, just divide and conquer.
Including "null" is one of the most unfortunate things about Go. I'm glad to see that other modern languages (Swift, Rust, and so on) are avoiding it.
If you "buy" music to "own" you are downloading a file, not streaming it live through a web browser which is the topic of this HN discussion.
> I founded and help maintain a very large Clojure codebase and to be honest, I am sick to death of not having a real type system to help me.

What sort of size is the breaking point in your opinion?

I've recently made the move from f# to Clojure and I'm significantly more productive but I'm worried that when I get to larger projects (10-100kloc) I will come unstuck.
TO be more specific, a US college psychology major neither trains nor qualifies one for any job whatsoever in the psychiatric care field. Neither is such a major helpful in gaining admission to a trade school where one can learn to be qualified for such a profession.

Psychology is simply the default major for many students that have no specific interest in studies.
This is an opportunity to plug my private project "WSL" [1] which is a clean text serialization format for relational databases. The scope is somewhat different and it's not really released (but beginning to stabilize), but I'll be happy to hear what you think.

[1] http://jstimpfle.de/projects/wsl/main.html
> Whatever happened to making a grocery list before you leave?

What happened is "not having to". Maybe you like walking to the bus stop and looking at the board to see when the next bus is coming. Maybe you've never gone to the store, seen something that you've forgotten if you have, and then wondered if you should get it because you just remembered a recipe that needs it. Maybe you've never wondered if your stove is off or if you set the thermostat off before you went on vacation.

It's not about being careful. It's about not having to be careful. Life's great, and now we're going to make it effortless. And like everything else, the last 20% is going to cost as much as the first 80%. And maybe it won't be worth it for people like you but when it's finally made in a safe way, it's going to be great for the rest of us.
All web browsers support the downloading of FLAC files.
If you're referring to SAN certificates, Let's Encrypt supports them (with up to 100 names per certificate).
It seems like many or even most dynamic programming languages fall in this category: Python, Ruby, and Perl.

GNU bash has been maintained by Chet Ramey for decades (although he isn't the original author.) Most of the GNU projects probably count, although some of them have changed maintainers much more often.

R was started by a couple of stats professors, and I'm sure it wasn't their main line of research (as opposed to Lua, Haskell, and OCaml, which are definitely labors of love, but they are somewhat funded, if you consider an academic salary funding).

Julia seems to be a labor of love, although it has had some amount of funding.

Clojure and D both have or had some commercial element, but you can tell it's mainly the love driving it, not the business.

Java and JavaScript are probably the big exceptions, in that they were started by big companies. As well as C and C++, which both originated at Bell Labs.

-----

And if you are really looking for single person projects, sqlite is probably one of the best examples. If I recall Richard Hipp has actually paid people to work on sqlite occasionally, but he's written almost all the code, and doesn't really accept patches.

Though I'm not really sure if "not accepting patches" like Knuth, Bellard, or Hipp is something to be admired... I have tend to want to control things too, which is probably a bad tendency.
This is also horrifying, as it indicates that they're taking wildly destructive precautions but still putting user input into SQL queries.
Evidence says that bureaucratic skills have become more and more valuable in the digital age. Fewer and fewer good jobs are available for qualified skilled people and more and more reward licenses, certifications, and connections.
Tamra Judge Struggles to Keep Her Mouth Shut
Yes, see http://www.cs.kau.se/philwint/spoiled_onions/ and http://www.leviathansecurity.com/blog/the-case-of-the-modifi...
This was a very engaging, high effort piece of journalism from an org I've never heard of before. Content like this is not cheap to make which gave me the something's not right here vibe, so I tried to find out who paid for this. Their about page says they received a grant from the The German Marshall Fund of the United States, which was founded during the Cold War as a way to promote ties between the US and West Germany. Some digging shows the org is funded by the German/US governments and has at least $200m in endowment. So be aware this journalism is funded by US interests.
Good point. To answer you directly---in short they like whistleblowing.

More long-form they like some of the protection features---e.g., protection against corporate espionage from China/USA. They probably also like to use such technologies to spy on their neighbors in efforts to leverage that information to negotiate better trade deals.
Is this similar to how QlikView's in-memory engine works?
You could just buy a vps and install tor there. I imagine it wouldn't take 30 minutes to set it up for life. For very low costs too, a 1tb of traffic goes for about 5$ with some memory and 1 core.
Well, one single person running 1000 exit nodes would be potentially armful.
Same for 1000 exit nodes running on the same network.

That's why it's not very practical to simply write a deployment script for some major cloud provider and let people run with it. (Also, bandwidth tends to be expensive there)

However, if you mean for 1000 HN denizens to start operating their own exit nodes, then by all means go for it :)
(Be aware, though, that some people can get quite obnoxious, regardless of the actual legality of running an exit node.)

PS: As already mentioned in this thread, for the sake of full disclosure, I run a non-profit that runs exit nodes.
2,892 pins, 16 memory controllers. Hm. How much is shared? Is this a cluster of 4-CPU shared memory multiprocessors on one chip, with inter-system channels? Or are all the caches linked, so that it looks like one giant multiprocessor?

This setup has lots of memory boards in sockets, some distance from the CPU. If you're not sharing memory, it might be faster to have fewer CPUs per chip and put the CPUs and the memory on the same board.
Just posted 5 minutes earlier: https://news.ycombinator.com/item?id=12427073
> Does every FF feature has to be 'parity-chrome'?

No, this is "parity-web". Web browsers usually simultaneously decide to implement or enable features. Firefox isn't copying Chrome; they're implementing the same feature at roughly the same time (presumably after discussing it first), so as not to cause further web compatibility rifts.
CVS versions files, not directories.. and it also doesn't support renames or moves, not without some repository hackery. The historic purpose of src/gnu/ is irrelevant now, it's just a common place for "Gigantic and Nasty, but Unavoidable" software.
Don't some Intel Xeons have 128MiB of L4?

But L3 is another story, for sure.
The Hungarian Tiger: Tibor Fischer on Viktor Orbán
The whole unit is just a motor that actuates an existing deadbolt's thumbturn on the opposite side of the door (i.e. not accessible from the outside world). So failing open/closed is a question for the existing deadbolt, not this device.
"Types", sounds like someone doesn't understand dynamic languages, which are some of the most popular languages today.
Yeah, I loved BeOS in the old times, and I'd really love Haiku would get more mainstream and productive for daily use. Its combination of speed, lightness, simplicity and cohesion is something to envy from other OSs. I love it.

I wonder what's the reason of its slow acceptance..
America's problem is institutional racism, not conversational racism.
Python's mistake is not including a default-coding-style formatting system with the language (or if it does, making it so obscure I don't know about it).

The formatter should ALSO, when cleaning up the code, see if it compiles with four spaces equal to a tab, and then if not, if eight spaces is a tab.

I'd prefer that levels of intent be a tab (not space; if you're going to make presentation of indent important make it something the client CAN modify without changing the meaning of the code).
I think formal education is a personal vitamin and economic good with inherent diminishing returns, and one that cannot indefinitely require additional years for each societal advancement (since we do not live indefinitely).

Perhaps we should find a better way to distribute education; not just among social economic class, but by span and duration ("doses"). Otherwise we might see unnecessary educational inflation (which I think may be the case now), rather than an educational deflation.
Makes you wonder why Tor doesn't replicate this and send the nodes ghost traffic, poison pills, block the IPs, etc.
Well... paracetamol is a modern day denaturing agent. Under DEA influence, paracetamol is included many opiate painkillers to "deter abuse."
Derek's writing feels sincere, dry and witty. He's well versed in making those mundane, yet profound insights. The kind of stuff that always seems obvious in hindsight. If you're an aspiring writer, I highly recommend you to read his other posts. His bit on Vonnegut is one of my favorites: https://sivers.org/drama.
Isn't this technically wiretapping and illegal in some countries?
Is it though? There was an article posted last month (sorry cant find the link right now) pointing out that there really isnt much to be made from ransomware, because infection rates are relatively low, and people who actually pay up are even fewer.
Some of the most secure residences are in cheaper public housing. Reinforced concrete walls, metal doors, metal doorframes. Here's a police SWAT team banging away with a battering ram for 12 minutes on an apartment door.[1]

[1] https://www.youtube.com/watch?v=ET9SNXpeORY
Two weeks ago, when I applied for a new passport (in Germany), I was asked to make sure that my personal information on a printed out form was correct.

Immediately the line saying "Artist's/Religious name: null" caught my eyes. I told the officer: "Well, the info about my artist's name is wrong. I don't have one."

As I was expecting beforehand, I was told: "That's exactly what 'null' means here." To which I replied: "And what if my artist's name was 'null'?". To which I got no satisfactory response. I guess these problems are only apparent to programmers...

So, if anyone wants to cause confusion, now you know how.
I don't think the suggestion was that the policy is created because the data is going into sql queries. The policies are often in place because the people in charge of the policy flat out don't trust the developers. Say the policy comes out of the CTO's office, they have two options: 1) liberal password policy, risk a crappy developer screwing up, or 2) conservative policy, not have to worry at night.
It's how config is shared in, say, .gitlab-ci.yml or .travis.yml. So, it is used and a widely documented use case at that. Not recursively, of course.
How the blockchain is changing money and business
I love the example at https://github.com/crdoconnor/strictyaml/blob/master/FAQ.rst.... Convinced in 2 seconds that full YAML is idiotic.
Wow, exactly what I was looking for. It's interesting that "Valet Mode" also limits the performance of the car and governs the speed to 70MPH max.

Maybe there's a way to disable that?
I'm not familiar with the term "social contract", but maybe you could enlighten me? I found it was an interesting way of describing quirks about our world that aren't readily describable.
> What exactly does Mr. Crockford need to be "vetted" for,

For the ability to appease randoms on Twitter.

> with whom

With @nodebotanist and @nexxylove apparently.

> how exactly did those people gain the authority to decide who gets to speak and who doesn't?

Great question.
Do you have a cite for that?

Most combination meds try to get synergistic benefits - the combination allows you to use lower doses of both active ingredients. (This probably doesn't work, but that was the intent when the meds were created.)
FWIW, he say's Apple is the worlds largest tax payer.

But perhaps they should still be paying more - but that's a discussion for another time.
I've been saying that there are three "scammy" markets which tend to have a higher ratio of overpriced, scammy products, and they're the following:

* Health

* Education

* Office productivity

And now,

* Home security (New!)

The reason that I think these markets tend to be scammy is because their quality is mostly based on perception. And there's no easy way to drastically improve these, people tend to look for a magic pill. And you're right, security is certainly going to be one of them.
I would like to contact you.
Port mirroring means you can only be a passive eavesdropper. Attacks like SSL mitm wouldn't work because you actually have to intercept and modify the traffic
You're kind of suggesting people go in reverse. Ratings were the initial way these things worked but then they moved to more implicit signals. Netflix used to be all about star ratings back in the day; now they want to measure what you're actually watching.

I think the issue of a system determining whether you like the steampunk genre vs the quality of only that particular steampunk video is separate from the issue of ratings.
There are many close collaborations between product and research, as well as direct exchanges between different product areas. Close collaboration is key because those working directly on the product understand best the data, serving system and fundamental constraints.

A recent article [1] revealed how engineers are trained in ML across Google.

[1] https://backchannel.com/how-google-is-remaking-itself-as-a-m...
China will have to get there on their own, however; no one is willing to share such fab technology with them, or sell them equipment like Germany does for much of their manufacture base. It will take a while with the current mindset of cheap/cut corners work, they are having the same problem with jet engines (more careful and precise, less cheap!). They can't really just throw money at the problems either...not when management takes huge cuts and then outsources to the traditional cheap/cut corner vendors.

Or they could just invade Taiwan for its fabs.
Quote of the day.
Public key crypto is exactly what should be used in this application.

Specifically, symmetric crypto would require exchange of secret material between the keycard and the lock at least once. Whether the lock is telling the keycard what secret to use, or the keycard tells the lock what secret it's using. Both scenarios introduce vulnerabilities if someone is able to listen in on that exchange, and one of those scenarios means the keying material in the keycard needs to be dynamic, which introduces problems.

Public key crypto on the other hand is dead simple, hard to get wrong, and a perfect analogy for this application. To enable a keycard you just have the lock read its public key. To auth, you just verify a signature. No secret material is ever exchanged which means no MITM and the keycards remain static devices which means it's easier to make them unclonable.

RE: DESFire EV1. I don't trust MIFARE. Old habits die hard, and MIFARE has very bad habits. Plus all the above.
Very clickbaity headline. I thought a professor has quit academia to open a real candy store
I can't wait to see these in Pittsburgh. If they can merge into traffic going into the Liberty Tunnels after a Pens game they can handle anything.

That being said, with the bulk of the reliable automation being on largely uninteresting well-labeled stretches of flat highway, doesn't it make sense to test these on long road-trips before we subject them to the volatile nature of city driving? I'd be interested in any insight into how engineers are tailoring these vehicles to their -at least by my standards- comparatively challenging urban testing grounds. Even if they've been trialed on road trips, this will be a very public and thus very decisive debut.
I think it's because people are used to listening to their Playlists. It feels more natural to check your "Discover Weekly" playlist then a whole new section within Spotify. And I think the decision to only update it ever Monday was pretty genius. Most people aren't particularly excited when Monday rolls around.. but when they think about the fact that it's Monday they are likely to remember they have a brand new Discover Weekly playlist to listen to. It's one of the good things about their Monday and becomes a habit over time.
It's worth noting that hitting that performance relies on hardware acceleration not available on OpenBSD. I've read it can still manage ~100 mbps on OpenBSD which should be good enough for most people. But keep that in mind if you want serious routing performance and OpenBSD.
> I know some people don't like eating eggs, but its hardly reason to complain about a presenter at a conference.

In case you don't know, heuvos is Spanish (or just Mexican?) slang for testicles.
This evoked memories of my time working in Japan, where at 24 years old, was the first time I had lived in the country.

I very much felt like a foreigner, and had never felt more "American" than when I lived and worked there.

Similar to the author, I saw my new grad colleagues getting their souls crushed by the corporate machine (mine was one of the hardest crushed), felt a strong desire to help, as someone who came from a culture with a healthier perspective towards work and life, but was entirely powerless to do anything.
10 years ago I worked for Jagex on RuneScape, an RPG. There are rules for that game about conduct and so on - no swearing, no scamming, blah blah. If you see someone doing something "bad" you can report them and the customer support team reviews the event and can allocate "black marks" on players who infringe.

One particular user accumulated thousands of black marks. We thought they were doing something incredibly bad. A black mark gets you banned for a short period of time, this player was banned for a millennium. But they kept sending messages saying that it was unjust, they did nothing wrong.

Turns out their playername was 'null' and half of other players' offences were attributed to them due to null in Java being cast to 'null' curing concatenation...
Pretty much any language that evaluates this as true:

"null" == null
torservers seems to be doing exit node.
Maybe just a stubby little syncstop[1], that you can then use with any cable?

[1]: http://www.syncstop.com/
You are being bias because of my views. They become de facto illegitimate because you do not like such views.
That's the sort of thing I was expecting. What's the pricing like for those modules?
>If they aren't, it's the IRS' job to enforce that and apply the appropriate penalties, not commenters on HN.

If the IRS doesn't do its job because e.g legislators leave loopholes, or are in bed with big corps, then it's up to "commenters on HN" to call both on them. That's what being a citizen is about.
Do you study the phenomenon of information bubbles at Google? Let's say, a German user just happens to watch some right-wing populist video claiming that we need to stop Merkel's refugee politics. The next day the user might receive plenty of recommendations in their feed that confirm the message in the first video. They happen to stumble upon a video of some party convention by an uprising German populist party, and everything makes sense now! Video by video the user gets dragged into a right-wing ideology.

That is an information bubble. The algorithm cannot detect low quality or populism, neither can it recommend opposite standpoints, and at the end of the day it has a real effect on a country's politics and the well-being of many people.

Do you have means of quantifying such effects? What are possible countermeasures?

If you cannot talk about that, then this would be my feedback: Perhaps you could train a language model to find opposing views in video titles and tags and then diversify the video recommendations based on that.
Correction: that would be low-latency GC. Realtime implies some guarantees, and I don't think OCaml's GC delivers that.
Recent versions of Android (I think anything >=4.4) also defaults to charging only mode, and makes you pick which type of data connection you want to offer.

I detest that MTP is the 'best' protocol offered for sharing the filesystem. I find it incredibly buggy and limited. (I would like to be able to use some of that filesystem for carrying around large files!)
Lessons Learned from Software Rewrites