skysight-inc/HackerNews huggingface dataset:
Yes, but being the man in the middle is much easier when the target willingly places you in the middle of his connection...

The whole situation can be worked around by using a custom prefs.js that disables auto updating addons (there are various other attacks that can be prevented by tweaking settings in about:config such as the webrtc related ones) and there are various websites providing privacy oriented prefs.js. A better workaround would be for the TOR browser maintainers to ship such a file with it, and a solution would of course be Mozilla fix things on their side.
I'd venture that at that scale you don't really have much of an option except going active. Passive is essentially swimming with the stream, but what if you're big enough to affect the stream...you're kinda active in a way already right there.
And why is that? Because they have a yearly revenue of $86B. It's like a country getting nukes at that point, the rules change. It's sick, but we apparently don't care enough to attempt to change it.
https://oeis.org/A166623
Στοιχημα: Με την χαρά των γκολ
I haven't live in a lot of oppressive regimes, but usually this is not how it works. I lived two close examples

When i was a kid a friend of my grand mother was arrested because a neighbor said he was a communist. He was tortured for a week and his party, kind of center/right wing took him out as they were a close party to the current government. Oppressive regimes usually don't need evidences.

A friend of mine was arrested for two years, accused for terrorism. The proofs? a war and peace copy (not even a photocopied book) and a guns and roses poster. And this was in "democracy"... so stupid proofs are also used, and whatever can be a proof, like a book about cubism was considered that was a book of cuba's ideology.

Tor has been for years looked by "regular"/"normal"/"common" people as a tool for drug dealers or child molesters. The switch to a human rights tool doesn't seem to really put it more into the illegal line.

Anyway, oppressive regimes do whatever they want, Tor can avoid some of the spying but if the state is already taking your computer you are screw up with Tor or without it.
> online journals with comments sections so the community can discuss any potential flaws

Check out PubPeer: https://pubpeer.com/
Sticky keys are the big one for me. I have Ctrl mapped to act as Ctrl when pressed at the same time as another key, or to act as Esc when pressed alone.

It's not currently supported by Karabiner-Elements; I haven't found a way to do this on macOS Sierra yet.
Will that be the reason why Germany has one of the lowest home ownership rates?
Yes, most companies have tighter margins than the average person.

Somebody earning $100k/yr might have, say, $30k/yr left after taxes and expenses, but most companies don't have 140% profit margins.

Most companies aren't Wells Fargo, though, since they don't have $20bn in cash savings, and don't make $36bn profit on their $86bn revenue: a 40% margin.

The numbers only need a slight alteration if we scale the fines by relative disposable income/profit. The $185m fine is about 0.5% of Wells Fargo profits, so for our hypothetical person with $30k/yr left over, it's more like a $154 fine, but he also has a savings account with $16k in.

I'd say the analogy basically checks out in this case.
Step 1: shut down Facebook.
This reads like fake smoke and mirrors to trick investors/data providers/participants instead of anything that's real cryptographically.
ADA Lawsuit spurs DOJ to kill Berkeley on-line courses on YouTube
But with your junk food analogy, there are still alternatives and it's up to you to decide how you live your life.
> If your attempts to realize your perfect idea destroy it, it is because you discovered the flaws in your idea in the process.

It doesn't have to be. I think my main disagreement with what you're saying starts with how you allude to the idea of idea possession. What is "your idea"? What does this mean? Many perfect ideas appear universal. Who "came up" with the idea of the perfect sphere? Or the idea of love? Or the idea of adventure? Notice how, when you try to realize any of these ideas, you fall short.

People who created this, for example:
https://en.wikipedia.org/wiki/Pioneer_plaque

are betting that universal ideas do indeed exist, and that intelligent enough creatures are bound to have them.

When you realize something imperfect, you are bound to lose some connection with the perfect idea that you started with. This does not mean there was something wrong with the original idea, that it was "bad" or "wrong" in some sense. You cannot create a perfect sphere, but is the idea of a perfect sphere bad or wrong?

> Their perfection wasn't destroyed by creation -- it never existed in the first place.

About your example with Lloyd Wright: that perfection existed in a sense. It existed in his mind. Maybe not the plan for the house that would actually be executed, but the idea, the feeling of living in such a house. Where do you draw the border between pure concept and practicalities?

I remember being a kid and wanting to create computer games. I had very clear ideas on how the best game ever should feel like. The things I actually created were shit, and ended up destroying my ability to preserve these initial feeling of an ideal game. Don't you see how doing can be destructive in the realm of ideas?

It is funny that what I am saying here does not feel controversial to me (famous thinkers said this sort of thing millennia ago), but it does feel blasphemous in current western society. We worship productivity, and forget to question the very idea of productivity to begin with.
When I used to have a keg setup, I just filled it at the industrial CO2 supplier.

I never had any issues with dirty CO2, neither did the dozen or so other people I know who also kegged. Carbon dioxide is carbon dioxide as far as I'm concerned.
One would roll one's eyes if someone promised to fix every single bug in a vast, buggy, fifty-year old software project.

But just ending cancer would essentially be a project for externally ameliorating, not even fixing, the bugs of 4 billion years of (genetic) code, code that "just happened" with "bugs" that survived because they weren't selected against.
Hello, Klara here. I should have probably put in my answer that I would not join a startup without healthcare. I was recently offered a job that I was seriously considering. The caveat was that I'd be paid as a contractor and they would pay me the extra money for me to buy my own healthcare.

Healthcare for my husband and I would be $700-1000 a month. If we had a child, it would be closer to $1500 a month. Husband works at an early startup and doesn't have healthcare. ($1500 * 12) / (1 - 0.4) = $30k of extra income I would need to break even.

I cannot just buy Aetna insurance (in NY) because they don't sell individual plans. I'm not convinced that my other choices are good coverage (Oscar, NYS MetroPlus, etc).

Someday, we'll start a family and I want the best coverage possible.
Use npm is easy, is the huge dependencies that it install and the headache of manage that that I wish to avoid. I'm npm/bower/etc free in my web development, so is possible the same with native?
If the parents can't figure out what to do, they shouldn't have had a kid. It's not rocket science. I've seen some of the dumbest people with tons of kids, still alive and kicking.
It's what inevitably happens when the balance between "owner-occupied housing as investment" and "housing as cost of living" gets out of whack.
Accelerate Web Test Automation, Part 1
Apple wants to patent a paper bag
What I mean is that the public communities seem to have lost whatever participants they had originally had. Now it's a lot like reading the comments section on the local paper's website, only with names which are more difficult to pronounce. Lots of trolling, lots of spamming, lots of Pe0PLe Wh0 ++don't__ knoW h0w to Wr1te!!!1!11!eleven!!

I still have some affection for G+, but … it's kinda like the affection one has for an awkward family photo from one's youth.
Brewing in Beats: Dashboards for containerized processes
How I made Rodeo render ~4x faster in React
Come on dude, he is saying read Kissinger for a different perspective, is wasn't endorsing it. It is narrow minded of you to mock reading things you disagree with.
"Zen Buddhism and Taoism's idea of "nothingness" is not about inactivity but about keeping the "self" out of activity."

I often wonder how much more popular quietism would be if it did not contain the seeds of its own destruction. Quietists would presumably not want to be active politically, socially, or militarily.. thus effectively not opposing any oppression they are likely to receive at the hands of the forces representing the challenged status quo. Maybe in some future utopia/distopia where all needs are taken care of by machines and one is perhaps safe in distant star systems or in VR, quietism could thrive without being driven to extinction by competing, aggressive/active ideologies.

Despite phenomena like "engaged Buddhism", Buddhism and other Asian religions such as Hinduism are still accused of quietism, for their turning away from the world and "navel gazing", and for tolerating social injustice because of their inward/spiritual focus, sometime their belief in karma (which some maintain justifies unjust/unequal/exploitative conditions as deserved for actions in a previous life), and their belief that the material world (and thus material/social circumstances) are an illusion.
Glad to see this work was updated so that the comparisons are now equivalent. I would like to see their next paper on multi-GPU. CNTK would likely do quite there as well. Note: I work at MSFT.
Live in San Francisco, actually. (Maybe NYC). Otherwise, you're not going to get there just programming.
There was a talk at the recent (quadrennial) DTrace conference from someone at Bloomberg which gives some numbers instructive of what at least some staff in tech there do: https://www.joyent.com/about/events/2016/dtrace-conf/videos/...
I usually avoid most of the comments on here because of the negativity. I'm loving the declarations of endless love for the show on here though. I've been convinced this season that Mr Robot is my favorite show of all time and these reaffirmations make me confident in my position.

Amazing monologues, realism, extreme tension, brilliant writing and acting, Mac Quayle, Sam's directing work, an attractive cast, the unreliable narrator, good story arcs and wonderful narrative styles. This show is pure art.
It's not taxes I object to. I think taxing income is much better than taxing property. I believe that we should have a right to our own property - I don't believe we should have to "rent" the right to keep what belongs to us from any government.
Hey, so gamma is not a logarithmic response. You claim that the delta you use in Figure 2 is a ratio, but your code, https://github.com/johnnovak/johnnovak.site/blob/master/blog... uses a fixed power. These are not the same thing.

f(x+eps)/f(x) ~= eps f'(x)/f(x) + 1

f(x) = x^2.2
f'(x) = 2.2x^1.2

f(x+eps)/f(x) ~= 1.2 eps/x + 1

Human response to light is not particularly well-modeled by a logarithmic response. It's --- no big surprise --- better modeled by a power law.

This stuff is confusing because there's two perceptual "laws" that people like to cite: Fechner-Weber, and Stephens's. Fechner-Weber is logarithmic; Stephens's is a generalized power-law response.
Apple in talks to acquire McLaren
$185 million in penalties and $5 million to customers.

SO the government is profiting $185 million, those impacted receive $5m.
How many times on HN must this topic come up?
And chickens have two legs. But it does not make you a chicken, does it?
People have done it before. It has always turned out to be luck. Fantastic track record until they cease being lucky.

So, cynicism and economic orthodoxy aside, that sounds like a really cool company. Has anyone tried just tossing a big dumb neural network on stock data and investigated whether it can make money? It sounds very obvious, but a quick googling returns little. But I guess the investment industry is pretty secretive by nature.
I get this same unnerving feeling from most video games, and once I notice it, it's hard to want to continue since I get the feeling of being "duped". Most modern games follow these same principles and it's really infuriating. The games I really enjoy are the ones where the "rewards" are subtle enough that I don't notice that they're consciously trying to addict me. Or games where the "rewards" are self-generated (open-ended games like Minecraft come to mind).
what and then blow your companies secret position on a response to a user query, knowing that if found it would very likely endanger your continued employment with that company....

You honestly think that's more likely than, someone made a mistake or said something to close a support call???
My main tips:

1) Read a lot about what is out there. Reading viewpoints helps prioritize what you want to learn next. Talk to opinionated, passionate people and understand why they hold strong views.

2) Experiment with things well outside your comfort zone. Eg., a language that you may never get deep into, but can give you a new perspective.

3) Figure out what NOT to learn. There are so many new things and the rate is increasing. I feel I cannot afford to spend a long time learning the wrong things. So for example I focus on python instead of python+c#, postgres instead of postgres+mysql, linux instead of linux+osx. Spreading me less thin. But to do this you have to know why you choose X over Y, the reading and experimenting infom you for this.

4) Learning "technologies" is not enough imo, you need to couple that with theory to produce really powerful systems. Machine Learning, Crypto, Controls, Discrete, whatever you are interested in. You can learn this alone, but sometimes a course or two is the best way to beef up your theory.

5) I've come to think about digital systems having an "anatomy" similar to the human body. Different components are like various organs. Building complete, balanced systems requires understanding all the various types of organs. Assume you have blind spots, and seek to discover and master the organs (types of components) that are least familiar to you. You do this by inspecting other systems and seeing how they are composed and how that differs from how you compose your systems.

Very interesting to see what others say about this.
I'm not sure where this narrative is coming from. TOR was developed as an anonymous network by the US Naval Research Lab. It was designed for use by military and intelligence. TOR was never just some academic experiment.

TOR is still a valid tool. No, it wasn't designed to foil NSA level surveillance, because it was built by the US. But this vulnerability isn't even related to TOR, it has to do with the TOR Browser.

The Snowden leaks contain slides where the NSA clearly laments the use of TOR, so saying that it never has been trustworthy is simply not true.
analysis of https://news.berkeley.edu/wp-content/uploads/2016/09/2016-08... and http://news.berkeley.edu/2016/09/13/a-statement-on-online-co... builds on http://www.cato.org/blog/adas-assault-web-turn-congress
Trillion (10^12), not quadrillion.
It's so sad to see this. (This entire thread, and its comments are down-voted.)

Let me try again. New Microsoft is awesome! Old Microsoft never happened. Double plus good!
Elon Musk Will Soon Explain How He Wants to Colonize Mars
How We Got Here: DNA Points to a Single Migration From Africa
Show HN: Qoins – Pay off debt with spare change
> Or Lenovo and MS have a vast conspiracy to use disk drivers to block linux install..

That's not a vast conspiracy. That would be a pretty quotidian conspiracy. In fact, it would look a lot like the "Winmodems[1]" that were a thing before (and maybe around?) the turn of the century.

Those existed because they made machines marginally cheaper by emulating the modem in software. Which only worked on Windows and caused much gnashing of teeth back when.

I believe Winmodems came to be solely because of cost savings. I also believe that the fact that it was functional exclusively on Win was a second-order effect that approximately nobody in Redmond took issue with.

...As an aside, I'm going to assume consistency on the part of all those who are being snide about customer support folks, and assume you make a point of never calling customer support (I'm not referring to the parent poster here). After all, you can't trust anything those idiots say, so why would you bother?

[1] https://en.wikipedia.org/wiki/Softmodem
Personally, I'd stick with the vanilla js and perhaps use jquery as it solves a lot of headaches with different browsers.

You can waste a lot of time just learning frameworks that can be here one year and gone the next and you may only use 20% of what they offer. You will learn more from building apps yourself and with more experience, you will start building your own js library for common tasks. Build libraries, not frameworks :)

Get used to building your own framework from your libraries each project as each project is different. You will get good at it as it is like doing a 'kata' every job and your native js skills will become very good, good to the point that when you have to work on a project using a framework you should have enough base experience to work it out.

Also, look into Modules, they are great building blocks for library code.
cheers.
You're presuming that 100% of price level changes are due to changes in the money supply. That's simply not the case (see also: that graph in my original post prior to 1913, 1933, or 1971, pick your favorite of those dates). Changes in the money supply do affect nominal prices, but it's not the only factor. Housing prices would continue to increase even with a perfectly fixed money supply; saving at an inflation rate of 0% would result in diminished purchasing power for housing over time, as aggregate demand increases.

Historical record is not aligned with the fantasy that eliminating fiat currency would cause price stabilization and promote savings. It would eliminate long-run inflation, but at the cost of price stability and medium-run investment.
Honest questions: is this a complete re-implementation of libjpeg? (It was mentioned that this was originally based off libjpeg/SIMD, a libjpeg v6b fork.) If not, why can't this be backported to upstream libjpeg?
Hey there everyone, my name is Nate and I'm one of the founders of Qoins. (Pronounced "coins".)

One issue that's always at the back of my mind is the amount of debt that I have to pay back. Between student loans, a car loan and credit cards, it sometimes feels like I'll never get everything paid off.

We built Qoins to tackle this problem. Think of us like Acorns or Digit, but for paying off debt. We round up spare change from your everyday transactions and apply them directly towards paying off your debt. For example, buying a $5.35 sandwich will send $0.65 towards paying off student loans, credit cards, and more! By using Qoins and having additional payments go out every month, you can become debt-free months or years early!

We support Instant Verfication for the top US banks, and we'll have access to thousands more banks within the next month or two.

Please feel free to ask any questions or offer any feedback that you might have!
And the fact that you think it's even remotely acceptable to dismiss the personal offense that a good 50% of the population takes to something as clearly passive-aggressively hostile as "ask a female engineer" is strong evidence that you should go about it a different way.
Engineering is about solving problems using well-understood principles and processes that have been thoroughly tested (as opposed to science, which tries to discover or invent new principles and processes). It has nothing to do with certificates, legalese, or unions.

Programmers have a lot of engineering work supporting them in different ways and sometimes they do actual computational engineering. I don't have a problem with calling myself a programmer. Patrick M does because he wants to translate his work into the language of corporate and marketing communication because he thinks this will make him more valuable. I'm not sure that's a good strategy except to create a kind of odd cloud around what he's doing. Programming is not so mysterious to management anymore. They know it's valuable. Those that don't, well, I'm not sure you want to work for them anyway.
No, according to your talk, Facebook's solution is that password validation is pushed out to the front-end servers, who use back-end KMS services to do some (but not all) of the crypto.

I think this is a suboptimal approach. Can you tell me what the benefit of your layered approach is over simply adding to your KMS servers the APIs for validate(user, password) and change(user, oldpassword, newpassword)?

If your KMS service did password validation directly, you wouldn't need any of the layers in this architecture. HMAC would add nothing (it would be tautological, since anyone who could directly attack the hashes must have also owned up the KMS service). I still don't totally understand the MD5 step. You could just use scrypt and nothing else, and you could probably ratchet the work factor up because you wouldn't be billing the front end servers for those cycles.

I generally like, have recommended, and have built a few times the "software HSM" KMS approach you're describing here --- but only for "seal/unseal" and "sign/verify" APIs.
Your response is cogent and well argued. You've taken the time to say what I should have, but these conversations quickly become circle-jerks.
> I want to be good at engineering. I'm not interested in the rest of it.

Being "interested in the rest of it" makes you a better engineer. Indeed, there's an argument to be made that that's part of what makes you an engineer.

How do you know whether you're creating value if you don't care to know what's valuable? How do you expect to be able to make yourself worth hiring if you don't know and won't learn how to make your paycheck worth signing? How do you intend to build tools that make people's lives better if you can't be bothered to understand what they need?
Actually, at the time I left for MacPorts, "brew analytics off" wasn't an option. Analytics was turned on without warning and without any obvious way to turn it off. They added an environment variable but still left it opt-out (on by default). I disagreed but users who complained were told that the decision was made and no further discussion would be allowed. [1]

> If you feel that way: please use another package manager.

I didn't like how it was handled. I think any sort of analytics, especially by third party companies with real capabilities for correlation and de-anonymisation should be strictly opt-in (off by default).

Opt-in doesn't really hurt users who don't care about privacy and security. Opt-out does hurt users who care about those things. Many organisations have security policies that discourage using software that "calls home". I'd trust the software much more if it didn't have that functionality at all.

The developer's justification was that if it was off by default, no-one would turn it on. I think that speaks volumes about how users feel about analytics these days. Some users suggested a Debian Popcorn style dialog ("We'd love it if you could help us gather some information about package usage, etc etc. Would you like to participate [y/N]", off by default but a question on first run asking the user if they'd like to help). We were told "no".

Overall, I thought it was a bad idea and the situation was handled poorly. For something as integral as a package manager I expect more.

[1] https://github.com/Homebrew/brew/issues/142#issuecomment-214...
Depends on the bar, but I definitely see bartenders and/or bar owners drinking on the job and socializing with each other and with their customers.