skysight-inc/HackerNews huggingface dataset:
Yup, and the same thing happened in London, UK. Simplified history: The Royal Mail (USPS equivalent) used to have a monopoly on mail and small parcels. They charged a flat fee to mail/ship to anywhere in the country. Then other couriers were allowed to start operating in locations of their choise without having to serve the whole country. They could cherry-pick the profitable locales (.e.g Metro London), undercutting Royal Mail's prices.

I remember seeing an analysis of price and delivery quality:
Royal Mail: 100% price, 85% happy delivery
Other Courier: 66% price, 66% happy delivery

Without going down the rabit hole of the wages these different workers were earning, as a consumer had a choice: subsidize cheaper shipping to the whole country, or get cheaper shipping.
Deep learning startup Skymind (YC W16) raises $3M, launches enterprise AI distro
This would work in many more contexts: The window sticker on my car can include the value they placed on passengers' lives when making cost-benefit trade offs.
I'm not sure how "whites aren't accepted" is positive in any sane meaning of the word. For me, the situation is very clear - either you say "discrimination on racial basis is prohibited" and then "whites can't apply" must be prohibited too, or you say "discrimination on racial basis is OK, as long as it's against right class of people" - and then this should be in the open, not "can't discriminate".
It seems like a major influence in the price of oil is the US Dollar, [1][2] rather than geopolitical issues.

[1] Price of Oil Chart: https://fred.stlouisfed.org/series/DCOILWTICO
[2] Dolar Chart: https://fred.stlouisfed.org/series/DTWEXM
Smoke & mirrors. Art Berman has shown that none of the Tight&Shale producers are/has been profitable. They are largely there because of credit/debt (which of course can't grow for ever)

"Tight oil companies outspend cash flow by an average of 120%: spend $2.20 for every dollar earned from operating activities."
"Tight oil company debt-to-cash from operating activities ratio averages 3.3: would take more than 3 years to pay down debt if all cash flow was used."

Please see: http://www.artberman.com/wp-content/uploads/The-Shale-Revolu...
Have you actually tried buying a flagship phone that doesn't do things like phoning home to Google or Apple lately? It is absurdly difficult to buy and set up any modern smartphone so it is reasonably secure and private and it just functions as a good phone with some extra connectivity.

Even for geeks like the HN crowd it's difficult to determine reliably what is really happening on your device and what you can trust, and the average customer has no chance whatsoever. Thus we see the kind of sentiment that started this discussion, where some people want to get away from the mess and the creepy factor and go back to having a device that just worked.
Length does not trump complexity.

"Internationalization" is 20 letters long, but it will be cracked in seconds by even a moderately sophisticated attacker. (zxcvbn gives it guesses_log10 of 4.34708)

The only way to measure password strength is to estimate the number of guesses necessary to crack the password. That means figuring out how many possible passwords could have been chosen for whatever method you are using to pick your password. In the case of "SophisticatedpwsRock!!", the method is something like: common adjective with a common transformation (capitalization), relatively common abbreviation, common noun with a common transformation, common punctuation, common punctuation. The number of possible passwords using that pattern is what you should be interested in, because that is how the attacked is going to get your password, not by trying every possible combination of characters.

For a simple example, the passwords "i like salt" and "you like pepper" should be considered equally strong (or equally weak as the case may be) since they follow the same pattern for generation. Any system of determining password strength which gives them significantly different strengths is misleading. In this case, if we followed the method the author used, we would say "you like pepper" is 26^4 times stronger, which is absurd. (zxcvbn by comparison gives them both almost the same rating: guesses_log10 of approximately 8.)

You cannot take a password picked by one method (common words) and score based on another method (characters). Passwords are only as strong as the easiest possible way to guess them. If you generate 8 random characters and they happen to spell "password", your password is still weak because it can be guessed by a much easier method than going through every combination of 8 characters.

Find the easiest way to approach guessing a password and see how many tries it would take using that method. That will give you the strength of the password. Counting characters will not.
You seem to be repeating these weird myths that have no basis in reality.

You don't need to be an expert in distributed systems to use microservices. It's literally replacing a function call with an RPC call. That's it. If you want to make tracing easier you tag the user request with an ID and pass it through your API calls or use something like Zipkin. But needing formal verification in order to test your architecture ? Bizarre. And I've worked on 2 of the world's top 5 ecommerce sites which both use microservices.

And HTTP is used for many reasons namely that it is easy to inspect over the wire, is fully supported by all firewalls and API gateways e.g. Apigee. And nothing is stopping you using a typed, serialized format over HTTP. Likewise nothing is stopping you using an message bus with a microservices architecture.
But if they just released a single solid high-end Android phone with a real BlackBerry keyboard every two years, that product line would quietly print free money forever.

Android doesn't sit well with me, and I've given it several good runs. I'm also at this point firmly entrenched in the Apple ecosystem (AppleTV, Macs in the house, etc.)

And I'd still pay full retail price for such a phone. Seems to me that's BB's once last true shot at remaining a going entity. But, as already pointed out, Chen just seems incapable of getting it.
Well, being a programmer and open source enthusiast, I was curious about the possibility of development. I haven't done much except fix a few bugs here and there. A lot of Linux audio software is made by very small, rolling teams of dedicated individuals. It's a testament to the architecture (Linux, Jack, LV2, LADSPA) that so many eclectic pieces of software are able to work together as well as they do.

If more organizations/companies were to invest in Linux as a serious audio platform, I imagine it could really blossom. The foundations are all there. It's the user interfaces, the workflows and the software design that needs work. And the presence of developers who get non-linear, modular, audio workflows and musicality.

As for plugins, there are a few VSTs that have been ported to Linux via (distrho)[http://distrho.sourceforge.net/]. Bitwig has amazing internal instruments. So I'm set for now. It'd be amazing if more plugin developers made VST/LV2 builds for Linux. Now that Bitwig is around, maybe more will start showing up. U-he has some public betas of linux versions of their plugins.

I wish there were something like a Blender Institute for Linux music software. Or... if the Blender Institute just started making linux music production software :)
"The first thing you’ll notice on rebooting is that the trail of cryptic boot messages has (mostly) gone, replaced by a splash screen."

The boot messages were carefully crafted to be easy to read by children and evocative of the 8-bit computing days when we could see the computer actually working. I think they are part of the magic of the Pi that you could show kids, look the mouse is being connected now, and such. Booting an iPad is a black box, the Pi by comparison is there to pull back the veil and inclusion of a splash screen for aesthetics does the project a disservice.

TLDR; Splash screen is a step backwards, otherwise congrats for all your efforts.
Last week there was also some news report regarding skeletons of chinese origin having been found from Roman cemetary. These were dated to 200-400 AD.

http://www.dailymail.co.uk/sciencetech/article-3803648/A-mee...
UN: U.S. owes blacks reparations for a history of racial terrorism
The US is basically a single market for goods and labor.

Individual banks have branches all over the country. It's one currency. There's one federal set of trade laws with minor state limits on some goods. Shipping goods across state lines or selling digital wares across state lines are covered mostly by federal law. Contracts may or may not, by their own language, invoke state laws in interstate sales with few exceptions (some states don't allow a seller to waive certain of a buyer's rights in a standard sales contract).

There's no government interference moving from one state to another for work (unless you're a felon or a sex offender or some other special case). There's one set of immigration laws. There's one set of passport requirements.

Yes, you could say each state is its own market. But then you could say the same about each city and town. For some people individual cities in the US compete directly against one another more than state vs. state. Am I likely to find work in my field in any little farm town in northern California, upstate New York, rural Georgia, Texas hill country or scrub desert, or in downstate Illinois? Not at all. In San Francisco and the Valley? In NYC? In Chicago? Houston? Dallas? Austin? LA? Atlanta? Sure.
I have a similar story. I wanted to get a copy of my birth certificate sent to me. In order to do so, I had to answer some security questions, which were apparently drawn from public records.

E.g.: "what was the name of the person you bought your house from?"

Really? Not only was that transaction about 15 years earlier, but I never even met the people. They moved out of town long before their house sold. Who the fuck cares what their names were?!?! Nowadays all that stuff is done through real estate agents and title companies.

So, while filling out an online form, I'm supposed to go rummaging through 15 year old records to find the names? And what if I stored those papers offline for safekeeping (e.g. at a bank)? How long will the question on the screen remain active before it times out?

There has to be a better way of doing these things.
If we were to create a new category including only nations of a certain area size or population then the US would probably get a high or at the top ranking. However, if the US seeks to become ever greater they, and all other nations for that matter, should aspire to rise above all nations and not seek to change the system in order to shield themselves from the truth of their issues.
I've had the exact opposite experience in every apartment I've lived in (like....10 now?). And USPS typically has a postal key to the entryway so they can leave packages inside. The best case scenario with FedEx has always been that they may ring a bunch of buzzers randomly before leaving the package on the doorstep and driving off.
Well, if one keeps calling a crash then eventually he will be right.

The trick is timing it. :-)
Here's a well-known Canadian Supreme Court case about transfer pricing that highlights the role of a Swiss subsidiary in a scheme to dramatically reduce taxes on income earned from selling pharmaceuticals: https://en.wikipedia.org/wiki/Canada_v_GlaxoSmithKline_Inc
I don't expect my 2015 LEAF to be on the road in 2035. The current generation of battery electrics do not have 20 year battery packs, and I don't know that it will be worthwhile to re-battery the car twice to get to the 20 year mark with good range and the way the battery tech is improving. (I'd probably rather buy a new BEV 8 years from now, even though I'm normally the guy who buys a 6-10 year old car and drives it 6-10 years.)

I do agree that people all but throwing away large SUVs when gas hit the mid $4 range was mystifying to me. I work with and hang around generally smart people and I saw people trading in 2-3 year old cars for brand-new fuel efficient cars.
KrebsOnSecurity Moves to Google's Project Shield for DDOS Protection
Note: 112 comments from the peanut gallery before someone looked at the code enough to submit the trivial fix.
Yes, cutting all calories works best. Just don't eat anything at all.
Considering that FedEx & UPS handover their "hard deliveries" to the USPS, I don't think Amazon is too worried. The USPS already handles Sunday deliveries for Amazon, they will probably expand that program if FedEx or UPS start getting too greedy.
There's ample opportunity to get enough fiber on a ketogenic diet.

This seems more like a negative side effect of your version of the ketogenic diet, not a negative side effect of the ketogenic diet itself.

However, if you feel you were still taking in enough fiber, perhaps you weren't taking in enough water? Not drinking enough water while eating/supplementing high fiber will result in some constipation as well.
Why is Babel a monorepo?
HK is a part of China, except when it isn't.

The Chinese border police don't look into money laundering or structuring that much. Much easier to go after the iPhones and milk powder.
Stating that it's what will always be done really dodges the question of it's what should be done.
Your mileage may vary.

What worked with one student won't work for everyone else.

Part of the responsibility of a mentor is to tailor the approach to one that works for the mentee.

I can say for sure: His approach would fail for many (most?) students. It's great it works for some, but let's not generalize it to everyone. I personally am glad I was not introduced to programming this way.

Python definitely can work better than C/C++.

Using an IDE can definitely work better than Emacs/vim.

His approach is almost the ideal - and the thing with ideals is that they work for only a few. It's a very tough lesson I had to learn. I had a very strong background in many technical topics (physics, programming, mathematics), and was known for it. People would occasionally come to me for guidance and advice.

I failed almost all of them by behaving in a manner similar to the author.

Why?

Because the ideal approach, where you must get all of the fundamentals really well before moving on, doesn't work for most. Heck, even I did not learn everything that way. I felt it was better than the way I learned and I was wrong.

With most people, you have to provide a more measured approach. Teach some basics, and then give them fun stuff. Then go back to some more basics, and then some more fun stuff. Insisting on C/C++, with pointers, on Emacs, delays the "fun stuff" quite a bit to the point where many students feel (incorrectly) "Maybe this isn't for me".

An analogy in mathematics: In some universities (e.g. East Europe), mathematics majors are taught analysis before any calculus. Their calculus course is actually the real analysis course we have in the US. Start with sequences, limits of sequences, convergence, metric spaces, compact sets, Bolzano-Weierstrauss theorem, all of this leading up to limits of continuous functions. And only then do we tackle derivatives and later integrals.

I mean, after all, why should we teach people derivatives if they do not understand metric spaces well, right?

Imagine if all engineers learned calculus this way. Most would drop out.

The optimal education for the brightest tier of folks is suboptimal for the majority. (And perhaps vice versa, although I have doubts on that).
Spotify in Talks to Acquire SoundCloud
Thousand-year eggs? Stinkheads? Casu Marzu? Hakari? I'm pretty sure all of these were a starving person digging up their old trash, looking at it and making a hard decision.
Why would insurance companies do this? They stand to lose a TON by autonomous vehicles. Estimates are in the 60 to 80% of the market to go away.
"u" and "you" have exactly the same pronunciation /ju/. "2" and "two" and "to" and "too" all have exactly the same pronunciation /tu/. That is, phonetically there is no difference -- again, English has terribly inconsistent phonetics. These shortcuts arose due to texting applying negative pressure to the length of words, both in maximum message size and ease of input.

Compare this to Hieroglyphics, where the glyph representive of a loaf of bread could mean either an actual loaf of bread or the abstract phoneme /t/. Specifically, a logogram represents an idea regardless of its pronunciation. This is not what we see in "text-speak", where words were replaced with shorter methods of achieving the same phonetics. Or, in other words, reading the text "u 2" is /ju tu/, which is exactly the same as what you would read with "you too". The matched phonetics are an integral part of this replacement.
After Just 10 Days of Rest, Brain Benefits of Exercise Diminish
I wonder if they can make that response. I know Fedex has argued at least once in court that they are a common carrier, and to my understanding, common carriers have some limits on how they can discriminate price or service based on who the customer is.
Implementing and Using GraphQL at GitHub [video]
People weren't always such wimps as we are today :-)
You don't have to recompile everything. If your system keeps a cache of object files, you only have to relink everything, which is quicker.
11 Truths from Trump from Monday's Debate
I've raised the issue with Coinbase support before, and I don't know if it's fixed (this was probably last year sometime), but when I used to use Coinbase heavily, it was actually impossible to turn off sms 2fa. Even now, I have totp codes, but still get an sms with a code whenever I try to login to their service.

This was a real issue for me and an actual real reason that I stopped using their service for most of last year, as I use google voice / skype for my number, it's not really two factor.

I mentioned this issue in an e-mail chain with their support ( and their response was basically that I should use authy instead of totp (Google-authenticator), or some weird workaround involving installing authy / uninstalling authy in a certain sequence which didn't work for me. However- we see here in this post, that all the attacker had to do to compromise the Authy was to compromise the phone number! (I also raised this issue with their support.)

Their response to the Authy question was that since Authy / e-mail are running on two different servers, it's considered 2-factor by them... hrm..
OpenStack + cloud-init + SaltStack
Do you know where can I learn about designing a U2F key? Or any other similar token?

And I mean from the programming perpesctive not the harware per-se, like some sort of open source firmware for this.
The normal packet jitter on my connection is between 2 and 20 milliseconds. You could stream games to me with a fixed network delay of 120ms (plus 80ms for input/rendering) and there wouldn't be dropped or late frames.
This is quite nice to see, when I first heard about osquery, I thought "cool WMI (well WQL) for Linux"
OK but I was talking about Node, not JavaScript.

You certainly cannot say that JavaScript was NEVER meant to be a full-blown development language though because now it is since it has grown into that overtime. Just because it wasn't originally conceived as such does not mean anything. The same thing happened with BASIC and Visual Basic. It doesn't mean anything.

It's like saying that wheels have no value because the original wheel was never meant to be used in autonomous cars.
Along with the "Top 20 Startups to Work For in 2017" mentality.

As if for the same crop of... for want of a better term... "kids" who had the whole stack-ranking and "human beings are infinitely measurable and weighable" ethos so relentlessly and successfully drilled into them from pre-K up through graduate school -- there's not even a question of jacking up and scaling out that same system out into the professional working sphere. It's just the way universe works.

And so of course getting a leg up and "making it" means cramming one's brains out for however many months as necessary in order to graze whatever "bar" they set because... that's just what learning is, right?
It did really happen, but as I said I don't remember whether the other questions were tougher. Perhaps they allow one question to be unknown. For example, when you recover a Google account, they ask you when you've created it and the subject of your last email. among other questions. I'm pretty sure I had these ones wrong but they were apparently satisfied with my other answers.
> Since we require that requests be padded to 1KB to avoid becoming a DDoS amplifier

This is an interesting solution I've never seen in practice before.

Also fault injection is pretty novel. I haven't seen this anywhere before. Essentially a public "opportunistic fuzzing" system: https://roughtime.googlesource.com/roughtime/+/HEAD/ECOSYSTE...
Buy passports, id cards,driver's licenses,green cards,fake money
Data-based Registered High Quality Real/Fake Passport, Driver's Licenses, ID Card's And other Citizenship Documents

Genuine Passports,Driver's licenses And Other Documents Of All Countries For Sale.

Buy High Quality Data-based Registered Machine Read-able Scan-able Driver's Licenses,ID's,Passports,And Citizenship Documents.

Buy Real Passports,Driver’s License,ID Cards,Visas, USA Green Card,Counterfeit Money.

We are the best producers of genuine Data-based Registered High Quality Real Passport, Driver's Licenses, ID Card's And other Citizenship Documents.

Buy High Quality Data-based Registered Machine Read-able Scan-able Driver's Licenses,ID's,Passports,And Citizenship Documents.
Buy Real Passports,Driver’s License,ID Cards,Visas, USA Green Card,Counterfeit Money.

We are the best producers of genuine high quality documents.

Buy Passport British(UK) For Sale Diplomatic Canadian ID Cards Online United States(US) ID Card Sell Driver's License.

Buy genuine Green card Training certificates,GCSE, A-levels,High School Diploma Certificates ,GMAT, MCAT, and LSAT examination Certificates and credit cards, school diplomas, school degrees all in an entirely new name issued and registered in the government's data-base system.

Contact: newlifeidentity@outlook.com or visit: http://www/newlifeidentity.com
So they have reinvented Windows Management Instrumentation (WMI)? I think it even uses similar pseudo-SQL queries.

Thank you, I'll stay with the Microsoft solution that will still work in 10 years.
You could simple do a DoS attack with a local user using a fork bomb too. It would be even shorter than the command showed in this post blog.

So while this is a bug, the author is overreacting just to make systemd look bad.
I'm feeling confused.. like I've seen this in the past [0] [1] [2] but had no idea the project was affiliated with Facebook. Oh wait, I was thinking of envdb [3].. and meanwhile envdb is renamed to Kolide [4] and is targeting "osquery command and control".

Infinite loop detected.
Program aborted.

[0] https://github.com/osquery/osquery-python

[1] https://encrypted.google.com/search?q=site%3Anews.ycombinato...

[2] https://news.ycombinator.com/item?id=8528460

[3] https://news.ycombinator.com/item?id=9324717

[4] https://github.com/kolide/kolide
Imagine if BB would produce hardened-secured-enterprisey version of Android, rather than doing their 'not invented here'.

Isn't that exactly what the Priv was supposed to be?
Yep. The way I remember it is that until MSVC 6, everyone was still using Borland or Watcom tools. Even up until the early 2000s, Borland C++ Builder was giving MSVC a run for the money. There was also a plethora of quality but smaller-marketshare tools like the Digital Mars stuff.

The real reasons C++ "beat" Obj-C have more to do with a) AT&T aggressively marketing C++ for at least 6 years before NeXT showed up on the scene, b) C++ being a little older then Obj-C in the first place, and c) Obj-C offering all the expressiveness of C with all the efficiency of Smalltalk (thank you, James Iry).
Spotify reportedly looking to buy SoundCloud