skysight-inc/HackerNews huggingface dataset:
That is very cool. And a nice way to make it happen. Any ideas how to include direction they are facing? Or general direction? Something like the compass data plus the angle of the camera in the photo?
Critical Android Vulnerability 'Drammer' Impacts Millions of Handsets
this is my favourite part:

>let us consider that being ‘blocked from making changes’ can actually be a very good and necessary thing. It’s something that the senior engineers of yesteryear once had the power to do. They sometimes did it out of spite, yes, but more often to keep code over which they had stewardship from being compromised by short-term thinking. Blockers were put up to ensure that software could be developed at a sustainable pace with the minimum of human suffering involved, and to be used as a check and balance against a management team not in a position to understand or learn about engineering trade-offs at stake.

Every time I've been blocked from immediately merging in my changes I've learned how to be a better developer. Yes there's a few times where it's been out of spite but the majority of the time it's led to conversations that have significantly improved my understanding of the code base and how to approach it and the culture of development at the company.

Have a spine and be willing to say no to plain old bad code.
Funny how someone can criticize trump but say one bad thing about Hilary and your comment won't be posted.
It seems to me that Apple wouldn't have recruited Angela Ahrendts if it wasn't serious about following this strategy.
Calling them "flighty" and "rigid" (and aren't those antonyms anyway?) is a lazy ad hominem attack, ignoring even the possibility that there's logic in their actions.

To wit: If you think that the political platform of a potential business partner would do long-term harm to your own business, then you might want to re-consider the relationship.

If a Presidential candidate advocated policies that would for instance harm the United States' relationship with China, and business in China are major partners of yours, you may feel the need to shy away from business partners who are actively working to elect that candidate. This is just normal business self-preservation, not a character flaw.
Looking forward to it! Can't go wrong from a user's point of view, like this we get both FA4 and FA5.
There's a bit of a formatting issue later on in the article, apologies for that, it's the <> html issue ;/
AN IMMACULATE CONCEPTION HAS TAKEN PLACE BEFORE WW3 IN JERUSALEM,
> none of the new features are very optimized

I think for-of is getting pretty good. It's a bit of a pain to optimize because the iteration protocol in ES6 is designed in such a way that you have to do heroics (scalar
replacement) to have any hope of optimizing it well. But engines are getting there.
As your responses say, you can't have it both ways. If you tell us the material was all well known then it doesn't deserve to be called classified, and it isn't a crime to leak. If the information is classified and contains evidence of ongoing crimes, then it must be leaked if the crimes can't be stopped in another way.

> he didn't tweet out the wikipedia link

Obviously you don't know how classified data works. The Wikipedia pages in question were written based partly on earlier leaks, meaning that they count as classified for this purpose. Had Snowden sent you the WP page on the NSA and said "Read paragraph 3" it would have been an illegal disclosure, but it wouldn't have had any impact.

> The guy revealed government programs that ANYONE who cared to look knew existed

Without proof that knowledge was essentially a conspiracy theory. I knew of ECHELON but there's no way I could prove it to anyone else. Snowden gave us data we could use to prove it.

> Does anyone else think this Snowden as a hero stuff is a bit much?

No, heroism is essentially concern for others / concern for self. He put himself in much risk, for no personal gain, so he's pretty clearly a hero.
Yes, agreed.

That said, Peter Thiel has said and done offensive things in the past on many occasions. Support of a Trump candidacy should not be surprising for someone who has said that women's right to vote is a threat to democracy, or who would bankrupt a company to retaliate for an employee outing him. I'm happy to see Thiel start to have repercussions for his actions, but the same tech community that forced Brendan Eich out of a job for a $1000 political donation has taken years to start forcibly taking a stand against Peter Thiel. Clearly, Thiel has tons of money and business acumen, which a lot of people want more than to "do the right thing". I imagine all of this -- if it is significant at all -- dies down after the election anyway.
VMWare ESXi: Passing Through an NVidia Graphics Card to Windows
>Can we talk about BGP flowspec instead? Filtering offensive traffic early and often can end DDoS once and for all.

What about spoofing? Until broadband providers get serious about BCP 38, this is just cat and mouse.
A lot of malware and ransomware is hardcoded to ignore Russian IPs as per Brian Krebs. The malware runs, does a quick check to see its public IP, and if its Russian it exits. A list for China's IPs could also be put into these devices.
Does anyone know a way to see an overview of past wirecutter recommendations for each segment? I'd like to know which used/refurbished products could be the best option.
Technically, the world's first artificial nuclear reactor. Some eyebrows were raised (and some alarms—was someone stealing enriched uranium?) when they found the resting place of a natural nuclear reactor in 1972.

https://en.wikipedia.org/wiki/Natural_nuclear_fission_reacto...
Oh ok, well I think I just edited my comment to basically agree with you. There is no well-defined line here, it's as subjective as most moral questions. I just don't think private companies should feel any obligation to allow everything because of freedom of speech. The constitution is supposed to be a last resort, not a set of universal guidelines.
Right, hack wasn't the right word. Anyway, thanks for the info.
439 being a prime would be an issue if you were up multiplying a lower frequency to generate it, for example using a PLL. However it is such a slow signal that it would be generated by dividing down a higher frequency. For example you can divide it down from an 18 MHz clock.

So, nope his claim doesn't make sense.
A coworker at one of my jobs (I work 4 menial job / gigs, make 17k a year, live in parents basement, have no friends or lover, was top of my class in CS but left after a professor openly helped a student cheat to no consequences and another prof revealed CS grads from my school had less than a 50% postgraduation employment rate for ANY job, much less a CS one) had an idea she wanted to patent that would be helpful but would essentially be a metal pole in a specific shape. I had to be a downer and tell her of this story:
http://qz.com/771727/chinas-factories-in-shenzhen-can-copy-p...

You're damned if you put your idea on the net and damned if you don't and it's all getting disheartening. I just want to find a career so I can go out and court someone but even the people with CS jobs that I know are constantly complaining of work / life imbalance and not getting to see their loved ones in person enough. Everytime I try to start studying some topic in the hopes of pursuing a living the shellshock of robophobia and the likelihood I will be too late overwhelms me. I can only cry at that leaked Clinton speech where she says we know what to do with the 120 IQ kids, but not the 100 or 80 kids. Well here I am at 145 mopping floors and literally shoveling shit despite only ever being excellent in school I guess it's just bad genes because my uncle could solve a Rubik's cube blind and built all sorts of electrical contraptions and has been a homeless drunk for decades. Here I am, another sandwich eater in front of thw trash pile as in Godard's weekend.
I understand what you mean, but not everyone's nationality is an accident. Some of us moved to a now-home by choice as adults. We chose a governance and society, and work to maintain it.

Also, in a democracy, the current state is based on the decisions of the local ancestors. I identify with those decisions more in some places than others.
Leave it to STEMlords to reinvent Christianity
>Even the least patriotic people generally prefer not to be murdered by terrorists.

What exactly in Snowdens leaks would increase the chance of terrorist attacks on the US ?
When your browser runs JavaScript, it downloading and automatically executing untrusted, unsigned, ephemeral code. Even if the site is over SSL, only the _party_ is validated---the resources themselves are not signed.

If your browser instead presented the JavaScript as a program itself, and listed the programs it executed, and from what sources, users would have a wholly different perspective. JavaScript has the illusion of remote execution; most users don't think of it as executing programs on their computer.

Addons like NoScript are essential security precautions that mitigate a host of attacks. Unfortunately, even security-essential software like the Tor Browser Bundle leaves JS enabled by default because it'd "break" the web.

There's other reasons---as a free software user and activist, I won't run non-free JavaScript programs.

I gave a talk earlier this year about these problems and some ideas to solve them: https://media.libreplanet.org/u/libreplanet/collection/resto...
Argh-P-M – Dissecting the RPM file format
> Is it just me, or is Javascript (and more generally, all front end technology) more susceptible to these trivial holy wars?

What constitutes holy wars are often the most accessible[1]

[1] https://en.wikipedia.org/wiki/Law_of_triviality
> Apps owning their own data in Android should make you happy, not sad, because it's what prevents a malicious app from hoovering up all of your Tinder messages, or your financial data from Mint.

That's well and good, but it also prevents YOU from hoovering up all your data.
It is a good reason to deemphasize such prosecutions. Federal prosecutions are expensive and take resources away from cases where material damage is involved. It's not like writing a traffic ticket.
The sentence was a bit ambiguous. I should have written "or other indirect investment, like carried interest" to be clear.
Did anyone else read "sputtering startups" and think physical vapour deposition?
> const vs let is an "immutable by default" vs "mutable by default" type of difference

Sorta. I mean you're right but at the same time if you're using const for an object or array then it doesn't really matter without `object.freeze()` because it's not immutable only the reference is and I don't think most JavaScript developers understand that (at least not most of the ones I've run into).
Just this morning I read an article in Bloomberg news magazine about UK regulators being avant-garde and promoting competition in banking by allowing branchless/app based banking. There was reference to Monzo as well as an example of new age bank.
Right. The scenario I'm considering is not a hostile attacker but simple an overzealous analytics script which also tracked hash strings. Heck, since some sites used to do AJAX navigation that way it wouldn't surprise me if some analytics services were configured to track hash strings.
Perhaps he meant to say the BBC made that choice for that reason. Not that they're necessarily right to do so.

Or perhaps seconds are relevant in the way sound was broadcast.
5 star hotel treatments for lifers seems a little bit silly. Why should they live as Kings after what they did to their victims?
This is what objects were supposed to be for. When you have some consistency requirement between some variables, you make them private to an object and only export methods which maintain that consistency requirement.

Somehow this seems to have been lost.
Sidenote, while a band-aid won't help a sucking chest wound, an occlusive dressing to halt the progress of the pneumothorax can be improvised with a piece of plastic laid over the wound and tape on three sides.
It's not like the grandparent is advocating DDOSing, he is just pointing out that doing so is trivial for less popular content. This is something that IPFS doesn't address, but that their marketing fluff implies would IPFS would take care of.

Good luck adding all DDOS bot IPs to your null route.
60% of small companies that suffer a cyber attack are out of business in 6months
Darn! I just returned from a trip to Washington. I wish I had known about the reactor. I guess I have something to look forward to during my next trip!

Link for the curious: http://manhattanprojectbreactor.hanford.gov/
The Bureau of Labor Statistics (http://www.bls.gov/) is just fascinating enough and just badly organized enough that I never seem to be able to get to the same useful piece of information twice. And thus I constantly find myself looking at other interesting facts about the US labor force.
Ask HN: What are the best resources to learn Python for Web Development
What are the best online courses, books, blogs for learning Web Development in Python?
one quick way that comes to mind would be to check a web archive for past versions of the page in question
Laptops are irrelevant to this discussion since nobody builds a laptop from off-the-shelf parts.

The issue I'm talking about is gaming performance. Apple sells Mac Pros starting at $3000. These machines use workstation class Xeon processors with ECC memory and workstation class graphics cards designed for double precision floating point computation. These features are irrelevant to gamers. It is not hard at all to build a cheap machine that can beat one of these workstations in all your favourite games, especially when you consider the abysmal state of OpenGL drivers on macOS.
To common ways to produce precise oscillating signals are tuned crystals or RC oscilators. In both cases, you're looking at common parts (i.e. standardised to x Hz), and then multiplying or dividing by integer multiples to get to the frequency you want. With a prime number, you'd need a component specifically tuned to that or a multiple of it.
There's also a big difference between supporting a candidate the way a normal person does—donate a little money, stuff some envelopes at their local campaign office, that kind of thing—and lending them your substantial business reputation very publicly, and donating large amounts of money to their campaign. Said reputation and the fortune backing those donations become fair game in the field of politics when you do something like that. Acting the part of the big-money political oligarch-influencer draws heat and has consequences, and it ought to.

The notion that you can throw in with a campaign in this manner and expect people to act like this is somehow disconnected from every other part of your life, and especially your business life, is absurd. They're obviously tightly linked. It reminds me of the outrage a kid expresses when they think they've found a way to be a jerk and not get in trouble for it, then get called out on it by an adult.
As someone with two siblings he loves dearly, never has the phrase "brotherhood of nations" seemed so apt as UK/France.
Not sure if this is valid C syntax, but in C++ you can do something like:

type const * const

Which is a const pointer to a const type, making both the pointer and the data immutable.
Good considerations that shed light on why your experience with a new car salesman (representing a car manufacturer that is vying for your loyalty) can be so different from a salesman on a used car lot.

See also those late night infomercials that pack as many "parlor tricks" as they can into an ad, for a product from a fly-by-night company that you don't even know the name of.
Pilot predicts movie box office
Any plan for supporting hyphenated domain names?
Again, untrue. Please take the time to read: http://fontawesome.io/accessibility/
"he was rather proud of his ignorance, actually"

Can you give me an example of this? I'm a Johnson fan, and I've never perceived him as being proud of ignorance at all.

In fact, I thought his response to the Aleppo gaffe was spot on. I think the media was really unfair with that, as they give Clinton and Trump passes on much more egregious errors.
We don't need any libraries to solve this issue (please don't bring in libraries to do weird stuff like this; that's a dependency that you'll be stuck with forever over your entire codebase for essentially zero reason IMO).

Just use `const` + `Object.freeze()`; it'll get you 99.9995% of exactly what you want.
New York Times Company Buys the Wirecutter
The difference of a fixed percentage on a variable cost is very minor. If you're recommending a $100 monitor with a 4% affiliate fee, that's $4. A $150 monitor is $6. Making good recommendations (i.e. stuff people want to buy) will easily outweigh the payment difference.

Still, it's important to have a policy about it and be transparent - which Wirecutter (and the NYTimes surely) has.
We have IP cameras (Axis) on a dedicated VLAN that doesn't have access to/from the WLAN, and things work pretty well. I don't trust VPN's (NSA clearly watered down the IPSEC standard and can definitely compromise most IPSEC connections [not sure about IKEv2]; OpenVPN is a messy pile of shit that is undoubtedly swamped with vulnerabilities), but do allow a VPN into my camera network. The compromise I made is to send a notification email for each established VPN connection, regardless of how it was established, so at least I'll probably know if someone else connects.

With Nest, you have to use their "cloud" for it to be fully functional, which to me makes it a no-go for anybody like you who is actually concerned with his/her security/privacy.

The most popular IP camera on Amazon is a Chinese camera gets your Wifi password through their app via the "cloud". Fuck that.
Would it not just have been created natively using an appropriate osciallator, given that the reference was from 1939?
This is a shitty version of Newgrounds, curated by the same people who've already made a mockery of the news (and not in the good way.) Stick with sites with real people, not these ridiculous shills.
Legally, I would be very surprised if your friend has a leg to stand on. It sounds exactly like a warranty issue. IANAL however.

It's also hard to argue anything other than inconvenience, it's not like the factory fault means the car is unsafe.

TBH if she really wants to try to get some compensation, probably her best bet would be to bring it up on Twitter/Facebook and try to get some publicity. You may be able to embarrass Vauxhall into responding that way, especially if you highlight the community nurse bit. I'd be a little surprised if it worked but you never know.
Or the attack just skips the secure hash check on the server... This example doesn't seem to hold water either.
From other sources it doesn't seem clear if this actually was considered in the decision, but it describes how they got the tone:

> The B.B.C. tuning-note is derived from an oscillator controlled by a piezo-electric crystal
that vibrates with a frequency of one million Hz. This is reduced to a frequency of 1,000
Hz by electronic dividers; it is then multiplied eleven times and divided by twenty-five, so
producing the required frequency of 440 Hz. As 439 Hz is a prime number a frequency of
439 Hz could not be broadcast by such means as this
(http://www.wam.hr/sadrzaj/us/Cavanagh_440Hz.pdf)

Since 1000 Hz also was (is?) a broadcasted test tone, it makes sense that it is much easier to get perfectly matching 440 and 1000 Hz from the same high-frequency source than it is to get 439 and 1000 Hz. A more precise way of describing the problem is then that it's hard to generate since it doesn't share any divisors with other desired test frequencies.

If they only required 439 Hz they could have just used a slightly differently tuned source oscillator, yes.
Another source of information about this subject (PDF): http://www.wam.hr/sadrzaj/us/Cavanagh_440Hz.pdf
The tragedy is that, with non-critical software that can't kill anyone, users are happy with most bugs most of the time. Therefore we will never have legal quality standards for most types of software.
This seems successful because It's less a rewrite and more of a build a different solution that actually fits the need.

Which is a good reason to dump something that isn't appropriate any longer. Or, worse, never was appropriate. :-)
> issues of privacy

I'll definitely give you that.

> ads embedded into the OS

If it's the lock screen ads, I have to say as ads go, I think they are actually the most unobtrusive ads I've ever seen. I actually just had to look up what they were, because I keep seeing them getting mentioned. Turns out, I have seen them, I've just ignored them every time, because when I'm looking to unlock my computer it's generally because I'm about to do something, and spending time futzing around with a small text overlay on the lock screen image isn't it.

So, I don't particularly feel like the lock screen ads are especially egregious. Though, I also got the free upgrade from Windows 8, so maybe that effects my opinion.

> forced updates

I am fully for this. We've seen what a world without forced updates looks like. The only reason the recent major DDOS attacks didn't have a bunch (or as many?) of windows PCs participating is because MS has gotten really serious about security, and making sure it's actually applied.

Also, there is a way to disable forced updating, and that's through a registry hack. You might think that's too complex, but I think that's the perfect level of complexity for what we are talking about. If someone isn't comfortable finding a specific location in the registry and manually changing a value, they definitely have no place determining whether their system should opt out of auto-updating.
This is like pulling teeth. If you don't want to defend the proposal you probably shouldn't have brought it up in the first place.
What I do is I start a session on password reset page. I send an email with the reset link. User visits the link. The web page checks wheter the requester is same with the session identifier. Only then the user has a right to create a new password. So, in other words, if the user tries to visit the link with a different browser a warning says "use your browser that you used to reset your password".
> Rent increases can only be performed every two years in Ireland from Dec 2015. And you must have 90 days notice of a rent increase. More info on this link:

Yep that's a new law and step in the right direction. But it doesn't really limit the amount. So landlords can just batch up 2 years of increase in one go.
ECTF'16 Retrospective: Prep, Play and Hindsight
So untrue that I actually had to spend time correcting this on a project already to avoid your massive CSS bloat and to properly support someone's reader. World class, indeed.
Software development is hard. The first few years out of uni as a software dev can be awesome (if you're lucky enough to land a decent job)... Fast forward 10 years and you will be mentally exhausted.

If you were hard working, ambitious and curious, there is a point (for me it took about 12 years after I started programming) when you realize that you know pretty much everything that there is to know about software. Anything that you don't already know is just tedium.

Being a software developer is tough, but then again, most jobs are. I do think that among the jobs that require advanced education, software engineering is definitely one of the toughest psychologically.

Software engineering damages you psychologically. The best software engineers that I know are also the most cynical people I know - All atheists, nihilists and pessimists (and sometimes downright depressed).

Being a software engineer can subject you to the full, ugly complexity of life.
Yes. That is what I am saying, to my mind ownership is vastly superior to renting. Renters are second class citizens in their homes.
Thanks for your input. Good to get different perspectives when I've just been getting wound up by the whole thing on her behalf.