skysight-inc/HackerNews huggingface dataset:
I read the article. For a pasta that is so technically difficult, listing ingredients without quantities and no description of the dough at its most elastic state is not a recipe.

Even if we assume a standard pasta recipe, what's in the sheep broth!?
Agony, Alarm and Anger for People Hurt by Theranos’s Botched Blood Tests
Eh, those that make and enforce the law could easily make it illegal to track them for 'security reasons'.

Also, does anyone think of the poor, respectable paparazzi? This tech would totally disrupt that industry or it could drive them to install surreptitiously cameras all over the place, hastening the ubiquity of mass surveillance.
My knee-jerk reaction was to want this, but the more I thought about the product, it really would be for someone wanting a good camera on the go, but not enough to warrant a better separate camera, AND willing to deal with a worse smartphone experience.

That's not me unfortunately.
The first have committed perjury and are ineligible to vote.

Because they are felons? There's 3 problems with that argument. Some states allow convicted felons to vote, the people in question have not been convicted and it's a bad law to disenfranchise felons.
Some things are infinite time sinks. The customer always argues that the contract implies more features or that they should have higher quality. Or even worse, you're in the unenviable position of working on a legacy project where each bug fixed creates a new one (or close). Fixed-cost can be a drag sometimes. And it incentivizes the sloppiest possible implementation.
WikiLeaks releases messages from Obama
>Also, does it have a standard 3.5mm headphone jack?

I can't tell if this is serious or not, but this continues to make me chuckle.
But the OP is saying that they might genuinely consider a huge range depending on who applies.

Honestly I think he'd be better off just listing multiple positions in this case.
The central subway doesn't even get to the caltrain station underground. It under delivered on both ends.
> The way internet works currently is not scalable

News to me.
Ask HN: I'm learning React. Which projects should I build?
Hi! I'm looking for advice. Can you suggest some simple project ideas I should build as I'm learning React?
The alternative being ?
> Thousands of cars out there collecting data is a huge advantage over groups working with a handful of prototypes.

I'm not sure this is true. At least for Google, it seems like the main bottleneck to progress is engineering time to fix the problems that arise. The problem is not a lack of vehicles driving and finding problems.

I say this because Google has made very little effort to expand their fleet of testing vehicles. The last big expansion, from 28 to 48 vehicles, was in Sept. 2015. Since then they've expanded from 48 to 58, but it doesn't seem to be a priority. [1]

[1] https://docs.google.com/spreadsheets/d/1v0BBTDOXvD8JdhrySFy6...
Hehe, yes. Me neither.

But my girlfriend would probably like it.

She always has junk smartphones, but high end cameras.
I get notifications about that from Facebook sometimes. It is a bit unnerving to hear that someone is attempting to repeatedly log in with my email address, but it certainly prompts me to make sure my accounts are locked down well.
Who here cannot say that no aspect of their own lives is not a "long con"? Not I.
Nobody wants to touch a political issue with a stick. The US election is a nightmare now, you get no good choices. Well, i think it was similar this couple of years across many places. Democracy is just not compatible with huge masses of not-so-well-educated people millions of who are dependent on the social security programs.

I don't have a better solution. I just see that all this corruption, this waste and idiocy is almost scary. I cant wait for AI or something similar to help sort this out. People fundamentally cannot make good decisions about so many complex issues all at once.

But if you don't talk about politics here, that's ok too. I enjoy the high quality of conversations and don't want to lower it.
Just saying that, in this article telcos are the weakest link. In some other cases customer support has been the weakest link.
Angular evals text stored in the DOM. If you alone are in control of the DOM (like in a normal webpage), there's no issue. If someone else is in control of the DOM (you're running Angular in a higher-privileged extension running on a random webpage's DOM), then they can put code into the DOM which then gets picked up by Angular and executed within the extension with the extension's full permissions. This isn't an issue inherent to the language or browser at all. This is an issue just comes from that Angular 1.x is designed for use-cases where the DOM is trusted, and that's not the case for browser extensions.
AMD announces revenue for the Q3 of $1,307M, operating loss of $293M
Working alone vs. working in a team
This. This whole study is actually based on the work of SF Supervisor Scott Wiener who is currently running for State Senate representing the Bay Area. If you want transit improvements in the Bay Area...vote for Scott Wiener.
In this fictitious world you're describing, I should not be paying full prices for the car. Instead it should be more of a rental agreement, which I'd be totally fine with. However, if I'm paying $100k for a vehicle, it should be mine to do what I want with (within the bounds of the law).
Well, yes, but that's not terribly illuminating because your algorithm Y just has to encode the permutation for I and then check that the result is sorted before falling back to another algorithm. So in another sense you can say that this is true for any problem where the NTIME complexity is less than the DTIME complexity, which is an incredibly large set of problems, because you can just encode an oracle into your machine for a chosen input.
Buses seem to work fairly well in London and Singapore.
When it will be possible to use Tesla having no driving license? So I just get in the car as a passenger, like a taxi, but without a driver.
The same attitude is common in England, where buses are often infrequent, inconvenient, uncomfortable, and used mainly by the poor.

Interestingly, it's not true of London, where just about anyone will get the bus, especially for journeys where the tube and rail connections are difficult. The buses are extraordinarily frequent in the centre, serve a wide network, and are full of a wide range of citizens.

For all I'm a big fan of rail, bus service can be both excellent and popular. It normally isn't, though.
“Most serious” Linux privilege-escalation bug ever is under active exploit
>If the state is watching us, why can't we watch them back?

Because they're going to wear riot helmets.
> This pattern seems like something security software should be able to detect: a password reset with incomplete information, followed immediately by a change in recovery email, name, and two-factor-auth settings, coupled with a “my account has been compromised” help request is highly suspicious.

This series of events could easily occur in legitimate cases. Say you lose or destroy your cellphone. Since you only ever logged in via your phone you don't know the password. Your recovery email was attached to a service you don't use because you normally use gmail. I'm not saying this scenario is a good idea just that it's probably quite common.

As a software developer I often hear from well meaning users that are appalled that software didn't do-the-right-thing in some complex scenario that appears to have an obvious solution because the desired outcome in obvious. In reality, handling the corner cases is complex. Adding these obvious solutions to the code easily leads to even worse situations.
Even if that did, there might be a community that pops up to take on the burden instead of G.
There is no accounting issue. I review the SFMTA budget before it is approved by the mayor and board of supervisors every 2 years. In it, there are line items to fund the free Muni for Youth and low income seniors out of the SFMTA budget (iirc, $15m/yr).

What I am saying is the programs to help those in need (low income, teens, low income seniors) come out of the budget to run the transportation network, but it would make more sense to take the money out of social services and school district funds.

As an aside, the free Muni for youth program was paid for via a grant from Google for 2 years. After the grant expired, the SFMTA picked up the tab from their budget.
Two factor auth using SMS us increasingly becoming a risky option. For not I have it on my personal accounts, but I'm considering changing over to Google Authenticator.
That's a thread on terms of use for Tesla autopilot.
I believe that bittorrent works by splitting a single file into thousands of small files, so this may, in fact, be ideal?
Great idea, thanks! Will definitely consider this as a next step.
I'm not sure how this is a counter to the human analogy? I'm assuming you're assuming probes reproduce and propagate perfectly, but if we assume a 'human reproductive unit' (be it a pregnant individual, a couple, a minimum viable population, whatever) has perfect genetics which can be perfectly replicated, then 'it just takes one' as well. While some sort of b-vn scenario seems plausible, at this point in technological development the practical contingencies of such a scheme are pretty up in the air. I mean, look at it from the other end. If we assume arbitrary technological progress, it's possible probes are everywhere, but we wouldn't even recognize them as technological artifacts if we were starring directly at them.
They do provide a microSD card slot. 32GB onboard may not be stellar (for photography in particular), but the ability to easily get the data off to a memory card easily offsets that limitation. And makes it more useful for travelers who may not be able to (frequently) sync up with a laptop or cloud service.
Evidence? Counter-argument? Anything?

Just a flat-out denial of a seemingly-true statement does nothing to advance the conversation.

(Why do I call it a seemingly-true statement? Because if a local ISP, say, will answer questions from the police, without a warrant, then the police are likely to feel free to call the ISP and ask questions when they don't have a warrant. Human nature likes not having to do the extra work.)
The non-phone camera market is more diverse than that; beyond DSLRs there's also mirrorless cameras (for people who want near-DSLR performance in a lighter body) and point-and-shoots (for people who want better-than-smartphone performance but don't need swappable lenses).
I'm going to disagree with one particular point - microservices are not better than monoliths. They introduce whole new layers of complexity, latency, and points of failure that no amount of tooling can overcome.

The primary reason microservices have the opportunity to shine is that they are easy to scale horizontally.

Having been repeatedly burned by microservice complexity and failures, I'm firmly of the opinion that you should do Monoliths until you can't do them anymore. If you compose your code thoughtfully and have well defined API boundaries from the beginning, it won't be that hard to start breaking it out into microservices if you find that you can no longer scale vertically.
In a technical sense, that's a positive feedback loop.
You are right, but any systems programming language that comes from the Algol or ML family doesn't suffer from "every line of code is a possible memory corruption" that C and its derivatives suffer from.

Rust or any other memory safe systems programming languages don't make all type of programming errors go away, but at least they make the memory corruption ones less likely to happen.

Also most of the C tools that help reduce memory corruption, if not hardware assisted like on SPARC v9 and Skylake, are mostly limited to having all source code available.

It feels like moving from Assembly to an higher level programming language.
You don't have a right to take pictures granted anywhere that you can walk into. That makes even less sense than the way I interpreted it.
I noticed that as well.
For the one in the article, the after photograph has fewer clouds too.
If Tesla is truly going to build trucks in the future, then stuff like this will scare off quite a few buyers.
Unfortunately a year is never an argument.
You should be able to visit https://myaccount.google.com in a mobile browser to check your 2FA setting.
i always failed to see why adding a phone number would be somehow more secure. However, i also knew this kind of attack was somewhat common for German online banking accounts using SMS TAN because service providers were easily convinced to send a new (second) sim card to a new address they would never heard of before.
The first electric streetcar in the U.S. was actually in Richmond, VA. Philly and Chicago built street car networks roughly contemporaneously with San Francisco. E.g SEPTA's current street cars date back to Philly's 19th century network). Between the 1880s and 1930s, it was Chicago's streetcar network that was the largest in the world.

As for bike lanes, nobody is looking to San Francisco to see how they implemented Amsterdam's bike lanes.
PurpleJS – An alternative to Node.js for Java projects
Meanwhile the number of owners of the company who believe in the company's values remains steady at zero.
Does this include the self-employed?
Speaking as someone from another country involved in urban planning the key things i have heard SF mentioned for on a modern transport side are:

- technological uptake (uber, variety of sharing options eg scooter sharing, new developments proposing to pay ongoing uber rather than provide parking)

- using technology to measure and understand transit issues

- Your cycleways are also a good example of implemntation in a western country. One thing i particularly like is the categorisation system of cycleway quality.

- a little futher back the tearing down of the embarcadero freeway

Of course thats not to say there arent issues as well. Central SF seems far more progressive than other areas from a governance perspective.

My personal understanding is there is a lot of local politics at play. Here in Sydney Australia the state government has taken a lot of power away from local governments on these issues (with strategic gain but also ignoring real local issues). The uk 'city deals' model is another strategy aimed at the same issues
>That might provoke something like the Bork Video Privacy Protection Act.

Which oddly has be weakened by subsequent decisions and legislation to allow tracking of consumers while still keeping politician's records off limits to reporters.
The specific flaw exposed in this story is not exploitable with providers like Twilio and Google Voice, because they don't assign phone numbers to devices with SIM cards.

Verizon is the bad guy here, since they agreed to re-route SMS traffic from the account holder's device to a new device without properly confirming that the request was coming from the account holder.

Technically there's nothing stopping a motivated attacker from attempting the same social engineering attack against a Twilio or Google Voice number, but getting those providers to re-route SMS isn't as simple as just calling and saying "my iPhone broke, I need you to assign my number to my new phone" like you can with Verizon.

The attacker would need to know some particulars of the SMS routing protocols of Twilio and Google Voice to achieve a similar result.
I don't. And a quick Googling of "usability design for mission-critical systems" didn't come up with much. But here's some of the salient points I have learned:

1. Minimize different fonts and colors. Perhaps three fonts and 8 colors (and I don't mean font families)

2. Screen should be intelligible from 5 feet away

3. No "chart junk" or equivalent [1]

4. Dark grey backgrounds (very dark grey is superior to black)

You will find those characteristics to be true in the systems I mentioned.

[1] https://en.wikipedia.org/wiki/Chartjunk
It looks like the Switch also has Skyrim, though.
"Super 8 video recorder?"

The big plastic thing around the small lens to Make It Look Like A Camera is kind of silly.
Are Today's Engineers Worse?
Computational Imaging (Berkeley CS294, Fall 2016)
Yes, you can write vulnerable code in plain javascript:

eval(document.querySelector('.foo').textContent);

In a regular web page where you don't allow the user to insert arbitrary HTML, it's a perfectly fine line allowing you to store code in the DOM.

If you do that in a browser extension where the DOM is controlled by the web page, then you've got a big security vulnerability: the webpage can put anything it wants into a foo tag and then your extension will execute it with its privileges! Your extension will be taken down from the Firefox Addons Marketplace if it's reviewed and this line is found running. If lots of extensions added this line, then Mozilla would probably automate blocking extensions from containing it.

Angular 1.x does something like this line. It's perfectly fine in web pages where you control the DOM, but is insecure if the DOM comes from an untrusted outsider!
Scott is the supervisor in my district and has been responsive to my citizen requests (broken benches, crime, etc). I support him for Senate.

As indicated earlier, Kim is not pro-transit. I have tried to collaborate with her on transportation advocacy and been unsuccessful. I'm not sure if that disqualifies her for Senate but it makes me unhappy.
Sure, assuming that we find life that is significantly different than life on Earth. If all we find is microbial life that is genetically similar to that on Earth, then you might be inclined to believe we brought it there, but it seems possible there might be no way to know for sure.
I like the subtle f*ck you to MGMT 101 classes here .... or the attempt to.
A 1/3 stop is ... not much. With different cameras with different lens designs and most importantly different sensors it's unlikely to be a significant contributor to a difference between two products.

The difference in transmission between two lenses with one having few (eg 50/1.x) and the other having a lot (eg superzoom) elements can get that large.
And this is just the one the found out about, mainly because of ShadowBrokers' public announcement that they have NSA's tools, which prompted the NSA to investigate the issue. But how many of NSA's employees may be selling NSA data silently to others and have been more careful about it?

Same thing with Snowden. They only found out about it when he went public with it. But they want us to trust them to store all of our data.
Did I miss something which I should be looking for?

Maybe, maybe not. While working at this large corporation did you develop work patterns and skills that are currently favored? (Agile being the code word most use) Are you conversant in the aspects of the stack that your employers are looking for?

So here is the thing, if you haven't, then you're coming in as basically a much more junior person than you might think. You are going to have to learn the new stack or the new skills, and as with any hire, there wouldn't be an existing track record to show how well you might do at it.

Here is the second thing, you're self labeling as a software architect / tech lead. One of the things that I have seen is that the idea of architect and tech lead varies quite a bit from company to company. If you're characterization of what your role is, is one that doesn't exist in the company where you are interviewing, then you're being slotted into the "we have to retrain this guy for one of our roles."

And the final thing, if your title is affecting your perception of your contribution, especially at a smaller company, then you've got to work through that. The only use for titles in a company of fewer 50 people is so that customers and partners can get a sense of your decision level. For you personally, your role has to come from inside yourself. If that is the kind of person you are, then you will be that kind of person in your new job and people will know you for it. What they call you in the offer letter is often irrelevant. In the Bay Area at least that is typically code for a salary range.

Don't get hung up on the title. Talk to the hiring manager about the kinds of things you would expect to be doing at the company and the ways you would expect to contribute. They will pick a title that reflects that.
I'm planning to build a CephFS cluster at this point. I've given up on finding a cloud storage provider that will work well for us. This will require a fairly high fixed monthly cost to get space and transit at a datacenter, but after ~10-30TB BW you start to save a lot of money.

There are trade offs. Aside from more upfront costs and a fixed monthly, Ceph is ridiculously complicated. Interface wise, they need some much better abstractions.

B2 was a strong candidate, their BW rates are a little high still but approaching reasonable. The one issue is that they seem to have inconsistent latency. Not a problem for most use cases, but I need nearly all requests to come back in <100ms consistently, as I'm using this for web hosting. Their use case seems more focused on "hot standby backup" than on high availability ATM. I'm strongly considering them as the backup provider for my storage cluster.

FWIW, GCS is not winning any best-of-show awards for latency either. S3 at the time I ran tests was doing a better job.
Actually, that's the system we have. The Federal ID that's not a passport is called the "Passport Card". The conforming state ID is REAL-ID. Implementation is blocked because many states are playing "chicken" with the federal government.
Ferry Corsten and Vocalizr – your chance to sing on Ferry's new album
Worth pointing out that I was working at an agency, so I was still an employee with salary: I just had to deal with all this other crap too.

But yeah, I prefer working in-house to working for an agency. Besides the fact that I think the work tends to be more interesting and generally done to a higher standard, I don't think the same dynamics exist. Maybe this is just my experience, but I don't find the boss <-> employee relationship to be nearly as adversarial as the client <-> supplier relationship. Additionally, I think most managers are just less penny-conscious about their employees are than most clients are about their agencies, probably because the budgeting processes are different.

I mention this, because I'm conscious that you can frame salaried employment in equivalent terms to client <-> agency dynamics. I just don't think that framing tends to be true, because I think there are other social and economic dynamics at work.
Great work. Looking through the documentation, I realized that this uses a modified version of webtorrent in order to associate torrents with urls rather than a page's content. I wonder would be necessary if BEP46 were implemented (https://github.com/feross/webtorrent/issues/886) in web torrent?
There is no viewfinder. It is mirrorless.
Where losing control of our technology and privacy, when people start saying things like we'll get the government to fix surveillance, we are introuble.
Eww that looks like the kind of thing you find in reddit's shitty HDR sub.
well, a sorting algorithm has to sort arbitrary input, so
def sort(ignore) = [1,2,3] does not count.
The details are complicated and i am not sure if i am ready to understand the proof, but i think you can even proof that there is no optimal algorithm even when you rule out trivial things like checking if the input matches a given list and returning a pre-sorted one or else sort manually.
I've been to the ER a few times. When you show up, they hand you a clipboard full of papers. When you show up saying "I think I'm having a heart attack", they take you straight back.
‘We’ve created a monster’: Publishers vent ad tech frustrations