skysight-inc/HackerNews huggingface dataset:
They should be much more careful in how these types of reportings are done.

You were doing a public service of already-explited machines that are snarfing credit card numbers. And that is of great importance for anyone who buys stuff online (Like... all of us).

It also goes to show, that we need to further develop P2P type technologies like IPFS and similar stacks, to rid ourselves from monolithic companies dictatorial hands. Because what they find "unsuitable", you are no longer welcome. That's a problem, for all of us.

I had a similar problem with a VPS provider 2 weeks ago. I run IPFS on all my nodes, and comply with good netizen and compsec principles. They ToSsed me, because "my machine was scanning :4001 and they received a complaint". Bullshit. That is the chatter IPFS uses when maintaining the DHT. However, I was actually using a machine and what I paid for... and they didn't like it.

Fortunately, since all my data is via IPFS (and /ipfs and /ipns thanks to filesystem mounting), my data was already backed up and distributed. Filing a dispute with Paypal and purchasing another VPS provider was simple.
The benchmarks game is one thing. Doing well on real code that isn't ridiculously microoptimized is quite another.

It makes zero sense to write a new backend for Rust from scratch because Go does well on a few microbenchmarks. Go's compiler infrastructure is across the board worse than that of LLVM (in compile-time performance too; some of Go's algorithms have worse asymptotics than the more sophisticated ones in LLVM). LLVM doesn't do things like SROA and alias analysis just for fun.

> my (very possibly entirely wrong) impression is that Rust devs have been struggling with getting the full performance potential of Rust through LLVM.

I'm a Rust compiler dev and I have no idea what you're talking about. LLVM is working wonderfully for us. If we had done what Go did, we'd quite possibly have failed.

I have a different proposal. Instead of reinventing the world for no reason, let's treat bugs in LLVM/rustc as bugs, and fix them.
Interview with F-Secure CRO Mikko Hypponen
In this case, it is actually vector space mathematics (word2vec + the metric space approach they used) and not linear algebra.
> I would be nice if they would continue to maintain the big endian PowerPC branch of Go

Who is "they"?

If you are referring to the Go project, big endian power is supported.

> as that appears to have atrophied in recent years.

What exactly has atrophied?

> Apple PowerPC [...] highest performance big endian systems available

???

POWER8 (and soon POWER9) systems are available today, in big endian mode. You don't need obsolete hardware.

Modern MIPS64 is also faster than old Apple G5s, albeit it can be tricky to get one.

ARM64 is available in server grade hardware, with current level of performance. Unfortunately, even though ARM64 supports big-endian, nobody deploys in big-endian mode. When I did the ARM64 Go port, I did run my ARM64 hardware in big-endian mode for a while, but as that required created my own distribution, I never committed big-endian ARM64 support in the Go port. If a big-endian ARM64 distribution ever appears, we'll definitely add ARM64 big-endian support to Go.

> The only other BE systems out there of comparable performance are SPARC systems

FYI, I am working on a SPARC64 Go port. It's in a very advanced stage. I hope it will be ready for Go 1.8. I am using a S7-2 system, 4.13GHz, 128 threads, 256GB RAM, very good single threaded performance. I can assure you it's very performant, but yes, it's more expensive that POWER.

In any case, thanks for your support! We definitely need more awareness of non-x86 architectures.
This really doesn't tell me anything about Unity, especially in respect to other solutions.

- Unity is only for games

Who said they were? You can find lots of examples of game engines being used for other applications, such as in Archviz, non-game simulation areas, interactive art, etc.

- You can only do small games with Unity

Again, who said this? If an engine is free and well supported you might find a lot of smaller games on it, but that's not indicative of the engine as a whole. If you're planning on making a large game, the question you'd be asking is not whether you can make a larger game in Unity, but whether it's appropriate for your larger game in particular.

- Unity is worse than Unreal Engine

Now that's a opinion if I've ever heard of one. Also, you don't need to use C++ to use Unreal. UE4 natively supports Blueprint scripting out of the box (I wouldn't recommend making a game completely in a visual programming language to begin with, anyway). Support for interacting with Unreal through other languages (JavaScript, Nim, etc.) has shown significant progress in the community.

- You don’t need programming knowledge to use Unity

Many of the popular free engines nowadays have some form of visual programming feature. You'd be severely hurting yourself trying to accomplish a bigger problem using visual languages only, however.

- All Unity games looks the same

Some gamers enormously conflate a game's art with its engine, which is completely wrong. Bad art will look bad in any environment - any developer would know that.

- Unity has a lot of bugs

That's an incredibly vague statement that you can apply to just about any large software project, not even just game engines.
True, but they'd probably be better with a hire/fire fast attitude than draw out the interview process... Interviews take time away from the people doing the interviews that can be spent doing other things... do you really want to allocate more than half your company for weeks vs. getting stuff done.

I mean, have a trial period of a week or three... That will tell you far more than a gauntlet interview process with a lot of false negatives.
FWIW, if GitLab sees this: Well done. We were planning on buying their hosted service (GitHost) for my employer next week and after this story initially broke I was going to table that and use something else. This has restored our faith in GitLab as a company.
There's always a clever solution to anonymize any data. Post a description of the data and the problems with anonymizing it, and someone out there will always find a clever way to handle it.

You don't have to solve everything yourself. That's the whole point of a peer driven scientific community.
I worked at target too. Conclusion? Retail sucks.

I think the difference for me between the two is the opposite of yours. I leave it to different store management and cultures. The statement "each store is different." is very true
Sorry for our mistake Willem, we reinstated the snippet. Also see our blog post about this on https://about.gitlab.com/2016/10/15/gitlab-reinstates-list-o... TLDR; The owners of web stores have a responsibility to their users. And it is in the users interest to have the list published so owners. We currently think that the interest of the user weights heavier.
I read the comment as saying C++ is the hardest language to implement, not the hardest language to make fast.
It doesn't matter if I agree or disagree with a position taken by Penn, I always enjoy the way he explains his thoughts. He's a very interesting person.
Dribbble Invites
I got a few Dribbble invitations that I'd love giving to the right designers/teams out there, so if you're interested, let me know through my email moadmohssin@gmail.com
I still have a couple boxes of Amiga floppies. Including the source to NewTek DigiView capture software in 68000 assembler hilariously enough.

Anyone know if there's a way to read them?
> I wish we had much better consumer laws

We have excellent consumers laws in this particular regard. If only consumers fought for their rights instead of paying the mafia!

> Hire a lawyer for $400/hour?

You don't need a lawyer for small claims court.
Thanks Charlie, glad to hear that. For reference our response blog post is https://about.gitlab.com/2016/10/15/gitlab-reinstates-list-o...
Thank you guys for all these feedback for using website on mobile, we fixed index page, video should work now on phones, so as price list and also footer. And now fixing signup page for mobiles :)
How do you meditate?

I took a stab at it when I was 18 (24 now) and I'd do it by essentially trying to make myself feel pleasure. You're working out now, so a workout high is an easy start point. Try to expand the feeling and you'll notice it in your gut (un-incidentally, this is where your adrenals, a majority of your serotonin and a good percentage of your dopamine is located).

If you're interested, injecting that into your routine can be a fun experience.
> I only wish for there to be an implementation of the signal protocol that fits my needs.

...and which most of my friends used.

I'm OK with Signal's UX, but the problem is that I know exactly two people who use it too, everyone else is on WhatsApp. I mean: Writing this implementation would be hard, but still tremendously easier than getting enough traction to make it useful.
Elon Musk's house of gigacards
How Classical Liberalism Has Shaped the Evolution of the Modern Family
Engineering is not writing code. Writing code is what you do to implement something you've engineered. Ops may not be better at writing code, but in every organization in my career they've been stronger engineers.

Of course that's just my anecdote.
I'm not sure this is for real. Can anyone find any other journalistic or other confirmation?

The OP here links to a Bloomberg article, in which the only mention of drone advertising is the caption on the same photo.

Which yoo1I tells us analyses as photoshopped: https://news.ycombinator.com/item?id=12715479

I think someone photoshopped it, then Bloomberg News googled for a photo to use for the story and found it, and just put it in without checking it.

Now other people are going to start 're-blogging' it as news, with Bloomberg as the source, as in OP.

I'd think this would actually be pretty big news if it was going on, but doesn't seem to be mentioned anywhere else.

Shoddy job, Bloomberg News. If this what happened, and I think it probably is, Bloomberg has failed at journalism.
Since What'sApp uses textsecure, can we be sure that they are blind to the content of our messages? Is there any way for them to get the key, still claim it's e2e encrypted, except for when they want to hand the key over to various states etc?
The only thing that would render economics capable of reliable prediction (beyond the most basic stuff) would be genetic engineering to turn humans into rational actors.
> "I'll tell you outright that a non-commercial license is a no-no for research institutes."

That makes no sense. Software licencing and product support are two completely different factors. You can have software support agreements with open-source software, that's how companies like Red Hat and Canonical make their money.
I highly recommend not using this, it has a variety of weaknesses and vulnerabilities. https://bitmessage.org/forum/index.php?topic=1666.0 is a pretty thorough analysis. The biggest problem IMO is that there is no encryption when passing messages between peers, so a passive adversary can easily determine who's sending what message.

There's over 30 years of papers and academic research on anonymous mailing systems and Bitmessage incorporates not one of those concepts
It's possible, it's just not legal.

Someone could set up a Wikileaks type site for scientific and medical datasets and then what the law says becomes irrelevant.
Major airports handle departures at the pace of 30-40 per hour.
Really?

- Hillary and her team deliberately trying to trick the FBI by giving them a "slightly broader" set of emails [1]:

"What that means specifically is that they are going to turn over all the Blumenthal emails to the Committee that they hav along with some other HRC emails that include a slightly broader set of search terms than the original batch. That of course includes the emails Sid turned over that HRC didn't, which will make clear to them that she didn't have them in the first place, deleted them, or didn't turn them over."

- Purposefully witholding all emails that were between HRC and POTUS [2]:

"Think we should hold emails to and from potus? That's the heart of his exec privilege. We could get them to ask for that. They may not care, but I seems like they will."

- Evidence that the DNC purchased craigslist ads in attempt to frame Trump [3]

"We’re proud to maintain a “fun” and “friendly work environment, where the boss is always available to meet with his employees. Like it or not, he may greet you with a kiss on the lips or grope you under the meeting table. Interested applicants should send resume, cover letter, and headshot to

jobs@trump.com<mailto:jobs@trump.com>"

1. https://wikileaks.org/podesta-emails/emailid/9272

2. https://wikileaks.org/podesta-emails/emailid/9545

3. https://wikileaks.org/dnc-emails/emailid/12803
In summary: A group of people who work in the same field get together periodically to talk shop. Just in nicer digs than your average Meetup.
As the article talks about Mohawks, Iroquois, Cherokee etc and European colonies at "the East Coast of North America" the meaning is quite clear.
I'm firmly Class 2, although I weaned myself off the need to know to precise implementation before I went mad (I still have to understand it more or less). But I cannot stand "magic." I hate Convention over Configuration, and can't stand Rails because of it.

Why am I like this? I think part of it's inherent. The rest of it comes from years of having software break. My assumption is that sooner or later, something will break, and I'll have to debug it. And if I know how everything works now, I'll at least know where to start when the time comes.
And neither of your comments had anything to do with my original point. Why is the hack of a private political organization justification for a war footing from our federal government?
Ask HN: How do you make Windows sufferable?
Hi HN! I was just reinstalling windows 7 and this time I decided to try out Cygwin with apt-cyg and ConEmu and I am blown away by how awesome a combo it is. Having primarily used linux and osx for the past two years it is really nice. I can't understand how I could live without it.

I know there is the new ubuntu thing in windows 10 and all, but I didn't get to upgrade in time.

What other tools do you use to make windows more sufferable as a dev? Is it worth paying for the windows 10 upgrade if you are stuck on 7/8 and don't have any newer hardware?
Fedora/RISC-V reaches initial goal
You don't have to be sorry Willem. We just made a mistake and corrected it. Thanks allowing us to correct it and for posting about us fixing it here and on Twitter. And thanks for making the internet a safer place.
After Intel adding deep-learning instructions to its processors, I guess they could add BrainFuck extensions to the x86 ISA, too.
I've written a Java compiler, and a friend of mine (Steve Russell) wrote the JIT for it (for Symantec). It was the first JITting Java compiler, and took only a few months to complete.

Of course, I should have said "front end". Working on the optimizer/codegen is an endless process.
Awesome!

Just last month I developed an algorithm to solve performance issues related to traversing a large graph. The algorithm required an array of hundreds of millions of structs and performance was very important (as one might assume when using a lot of RAM!). Allocating on the native heap worked like a charm!

My solution was too-coupled to the specific problem I was working on, I'll be looking to use Span<T> instead as soon as I have time to convert.
Another book that's really good it Types and Programming Languages. It goes over how to define the operational semantics of a programming language, and then gives examples of how to implement them.

It pretty much just glosses over parsing etc., and focuses on the semantics of a language, which IMHO is much more interesting.

Sure, if you're building a real language implementation, you will need a parser, but in a lot of ways it's the least interesting part.
They meant do not infer it to be an easy class.
I mean if it works for your as a business with happy customers, more power to you. We'd certainly all like to work less but still make enough money.

I just don't like it in combination with the marketting suggesting he'd providing this as a public service only charging enough to pay server expenses, when that ain't true.
I'm all aboard the existing use cases for Span<T>. I said that when I said "interesting value add inclusion." for the Span<T> inclusion. Not sure I get your comment.
Apple Pay online is great for convenience and security, from a practical point of view, but on a more abstract point of view I think something is deeply flawed about the payment industry if the solution is to add yet another middle man.

I want a world where payment is convenient, security is excellent, and there's no mandatory mafia of middle man between my electronic money and the merchant. It's fine that people chose to use banks voluntary, banks provide many services people want. But it should not be mandatory to use banks, if you chose to do so, and most certainly it should not be necessary to implicate yet another 3rd party to the transaction (VISA/Mastercard). And now we are adding a 4th party!

Whether to use a 3rd, 4th, 5th party should be users' choice. Some people value security, others privacy, others convenience; some people want 2FA for every transaction, some people hate PINs and want just to swipe a card, etc. All this should be client side; user's side. Open payment protocol with multiple implementations. Merchant just uses the protocol. If some new payment revolution is coming, merchant should just update his software.

We have technical solutions to do all this, but most people do not understand that this is possible, what the existing system entails; and the people in charge of this don't want to lose the power.
It doesn't matter when you merge, it matters how.
Intel Open Source driver enables OpenGL 4.5
Different path for me

Cps degree (pre Microsoft): work (overpaid) at large monopoly until cell phone penetration was 35% and displaced.
Air Passengers with Samsung Note 7 Phones Face Fines in U.S
- we don't have access to the source code, so who knows what they have implemented?

- even if they have implemented it faithfully, you should compare fingerprints. If they don't line up, you might be subject to a MITM attack
The first million-selling computer book, 101 BASIC Computer Games by Dave Ahl
Relentless Justice
I was excited about it once, but this project doesn't seem to get a traction, so probably it's not worth to use it for real secure messaging. Awesome concept, though. I hope, it'll reborn somewhere. Spam problem is a huge problem and most other messaging systems don't bother.
Oh, just clarifying for people that it's not just unusual apps with large blocks of memory that will benefit. Even mundane apps that do a little string manipulation will see the results.
I think the problem is that you have two sets of people when it comes to this topic. Those that know that the best time to merge is at the end, evenly dividing traffic in a 1:1 ratio. And the other group, which thinks it's best to "merge" early.

So, half the people merge early, creating a vaccum in the soon to be merged lane. And then the other half, fills it, which promptly causes the first half to think that they're taking advantage.
Depending on the clock speed, it may be accurate enough?
The problem is the AI community is treating itself like non-experts. Explaining that AI needs to be controlled by telling horror stories of robot domination is good to motivate research work to lay people, but is a distraction for professionals.
> In August, more than 60 people were hacked to death with machetes about 35 miles from Schluter’s local office. “When do we say: ‘Stop working,’ and when do we decide it’s a normal risk?” said Mr. Suter.

Or when do you say "What Congo needs is not us taking it's coffee to sell to Americans." Or when you do you say "pay off the warlords to keep Americans safe, fuck the people who live there." Now we can have blood coffee too, great, thanks capitalism!
It's deja vu of the classic TI99/4a, complete with the wonders of GOTO and GOSUB! What great times. Hunt the Wumpus, anyone?
There's nothing preventing Whatsapp from releasing an update that has a flag on your phone number/id that turns off e2e for messages that you send. If their software was open source we would be able to verify what we are running but as it stands, it's not and I doubt it will ever be.
Seattle recently passed a law about scheduling designed to address some of these issues - http://www.seattle.gov/council/issues/secure-scheduling You could start by getting in touch with the groups that campaigned for it. I think your chances of starting an activist group are pretty poor if your exposure to this issue is entirely second hand and you would do better to find existing groups to support and help organize, even if they are not primarily focused on this issue.
If you store the keys, sure, that's less secure for sure.

But just because you encrypt server side doesn't mean you store keys.

What's the difference between:

1. Get key from user on client
2. Encrypt on client
3. Discard key
4. Discard unencrypted data
5. Send encrypted data to server
6. Store encrypted data

and:

1. Get key from user on client
2. Send key and data to server over SSL
3. Encrypt on server in response handler
4. Discard key
5. Discard unencrypted data
6. Store encrypted data

There are some differences, but I don't think it's clear which one is "better". I think it would depend on the details.

Big picture: either way the developer sees the key and the unencrypted data. Either way, you are completely trusting the competence of the developer at implementing this scheme, and their trustworthiness with the key and unencrypted data.

There is no such thing as "host-proof" encryption as long as the client is provided by the host.
Borrowed Time – Pixar Short Film [video]
Wire seems fairly fully featured, open source, and claim to have a feasible "freemium" business model, i.e. later selling premium services on the platform.

They claim they use the Axolotl double ratchet, though Moxie/OWS claims Wire uses a variation of the protocol they don't recommend.
C2 wiki closed for remodeling
The difference between decriminalisation and legalisation of sex work
I see it as I'm also paying for their time and expertise in selling me a thing that won't malfunction in ways which might take me hours to troubleshoot. I also like what they do and their contributions to the community, and me buying a esp8366 through them with good-quality docs, tutorials, and working examples is worth the extra few dollars for my personal enjoyment of my hobby.

I also can't feel good supporting fakes / copies and China's mistreatment of the environment for profit.
Adam Savage Incognito as Totoro at New York Comic Con
Open source is a red herring. You're downloading WhatsApp from an app store (or, at least, the overwhelming majority of users are). If you can't verify what the binary is doing, the source code doesn't make a difference.

Beyond that, despite the repeated claims of open source advocates, there's nothing preventing people from taking the app store versions of things like WhatsApp and reverse engineering them.
Picture of the first computer mouse, made of wood
1. Anyone who can read a control flow graph.

2. Yes.
Ask HN: How do you collect training data for Machine Learning
I am curious how small companies (or resarchers/individuals/hobbyists) get their training data.

Do you Amazon's Mechanical Turk. Do you use any other service.

What do you find lacking in those services.
We have news from Ward. The c2 wiki will be moved over to a federated wiki, whatever this means.

Discussion here https://news.ycombinator.com/item?id=12715560.
Who are "they" and "he"? What part of your politics is so offensive to them? You aren't in Russia now?
But not from the title - I assumed it was talking about India, not North America.
reCAPTCHA Mailhide API