skysight-inc/HackerNews huggingface dataset:
I'm sorry you feel that way. Google does work really hard to ensure every user's settings are honored.
As to data privacy, if one of your customers is on a reservation then you really should check to see what the data rules are for that reservation. Making an assumption that only the state and/or federal rules are in effect could be costly.
Schneier's post is hardly prophetic. The idea that "china is attacking the internet" is so well ingrained, that this 2-year-old fake security attack map has "china mode", to make most of the attacks seem to come from China (part of the mockery of such maps): https://github.com/hrbrmstr/pewpew
Why, exactly, would NIST standardize GOST? What other ciphers should it standardize? So far, it's done DES and, to replace DES, AES. Why GOST and not Salsa20 --- which people in the real world actually use?

Standardizing multiple ciphers defeats NIST's whole purpose. The whole point is to have one standard block cipher. That, incidentally, is also the point of GOST.
A few days back I see (yet another) article about Stephen Hawking's concerns for humanity and AI's potential for harm. Today I see we're teaching AI how to scare us.

Super :)
It’s official: Venezuela is a dictatorship
You're right, I thought this was deprecated with thin manifests.
Still I don't see a point in this. We should discuss cryptographic algorithms based on technical arguments, not on algorithm origin.
Funny you should say that, because I loved Columbia House. Not just the cheap initial CDs, but the "surprise" CD picks they sent my way (94-99). Come to think of it, most of my CD 'collection' came from CH. Once listen.com launched (later Rhapsody, now Napster), I never bought another CD again.
https://jolla.com/jolla/ is still a thing
This page is completely wrong.

`curl | sh` is insecure if you're using an http url, although as has already been said here, it's not really any more insecure than "download this script and run it", unless you're expecting all of your users to actually read through the whole script first. But if you're using an https url then you should be ok since the page cannot be hijacked or modified en route (unless the attacker actually has a trusted certificate for the domain, which is an attack that's way out of scope of this discussion).

The biggest risk with this approach, which the page doesn't even mention, is the danger of the connection being terminated before the whole script is downloaded, as the shell will still evaluate what was sent. But this can be handled in the script by making sure that an early EOF means nothing is actually run (e.g. you can wrap the whole script in a bash function, and then the last line executes the function).

So if you're using an https url, and the script is written to be resilient against early termination, then this is a perfectly reasonable way to install things.
YC won't do your homework for you. There's great resources out there tho - start by spending a few hours on EdSurge. I literally started the company to inform folks like you entering the space to learn what's going on, who's doing what, and how ed is different from other industries being impacted by tech. It's the best resource out there.

The main takeaway I have after seeing so many enter this space in the past 7+ years is that the incurious never get very far. Be curious and seek to understand the paths of others before you, and you may find your place in it all.
Xamarin is a great alternative.
No one has said Thiel shouldn't be able to speak his mind.

It's the fact that YC and FB continue to, implicitly, "host" his message that Ellen Pao and others have called into question.
Haha, that was my comment! Glad you liked it. Never thought it'd show up on HN. I normally don't comment on Quanta, but there were so many half-informed remarks propagating misinformation that I felt compelled to make not one, but two, comments in that thread (and formal verification isn't even my domain of expertise!)
Dont know about books, but there's

http://cppcast.com/.

Also,

Rusty Radio and New Rustacean if you want to explore Rust.
I switched to Fastmail about 2 weeks ago and their POP retrieval feature made it really easy to get all emails from from my old account. I just updated my email address with a service when first using it after making the switch. And I reply to emails from my new address.

I was looking into ProtonMail and Riseup as well. There are lots of good alternatives to Gmail.
You mean like `brew` for macOS, or the many other options like it?

It's not the wrong issue, because I believe the main goal here is to raise general awareness that piping to bash with untrusted data is a bad idea and we as developers should frown on it not promote it.
Incorrect, a lot of people don't know but it was the NATO and the united states that was actually actively hostile to russia. (long family history of military folks who had EYES only access.)
That's a good point. Space travel was something whose principles were well-understood with plenty of worked examples. Quite unlike the Johnson investment we're talking about but let's continue. It was mainly hard to engineer on a budget due to all the variables and components involved. I was really excited but cautious about that company. I really wanted them to succeed.

So, lets test your theory by having a look at one of their regularly, successful launches that 14 years investment brought them:

https://www.youtube.com/watch?v=arIc1NlHvV0
If you're talking rendering some VPS's, sure that's possible.

But that's a fraction of the cloud. It's hard to integrate every service the hopeful equivalent of every other service.
I'm surprised they couldn't find a buyer over in India (and still keep the engineers on board).
curl|sh isn't the least bit less secure than downloading a software distribution and just running it.
I have no idea what that stands for. I've exhausted a Google search and 30 seconds of memory probing for recent events/people/places/governments that match "WL".
Perfect answer. Wrapping the entire script in a function is a clever idea to protect against connection drops as well.
GIT IS THE DATABASE...
Isn't that the meaning the having multiple AWS regions? :-)

If you want HA at local level you'd go with AWS AZs but if you need real HA you need can do the same at region-level.

Of course not everyone has the money/need to go down that route, but it's possible and even advised for some AWS services.
> everyone will think twice about this sort of thing again and we will all be safer because of it.

Sure. Respond to an cyber attack on infra by starting a physical war that will permanently remove all infrastructure. Its the equivalent of burning down your building because a neighbor cut your cable.

War should always be a last resort - only when all other options are exhausted. Especially nuclear war.
In the US, passenger rail has always been neglected. This is not uniformly the case around the world.
This is a very good question but its also a leading question :)

Datanet provides a level of abstraction such that business logic does not need to be framed in commutative operations rather you just do normal data manipulation on JSON objects and under the covers there is a bunch of commutative operation magic.

CRDTs data guarantee is called strong eventual consistency (SEC), so they are not fit for certain use cases (e.g. take $10 out of accountA and atomically put it in accountB), but the vast majority (~70%) of use cases can be accomplished w/ SEC guarantees (google Peter Bailis' work).

If you can explain a specific business case I can show you how to determine if it is OK to do in SEC
Hard-Line Prosecutors Face Rejection from Voters in Elections Across the U.S
Aside from the fact that this is a plaintext markdown file, the tone of this page is an immediate turn off.
"Download this executable"

"Add this repo and key"

...so on.
Sorta. When I changed phones I cut my micro SIM down to nano size. Cut a wee bit too much off and it now can slide off contacts if jarred... gotta get a new SIM.
In my opinion, some of the images I've seen NNs produce without trying to be scary, were scarier than this. There is something really unsettling about things that look almost real, but aren't quite right.

https://raw.githubusercontent.com/torch/torch.github.io/mast...
Who's being a moral scold or hampering "American Dream"s now?

There are reasons, good and bad, that states and municipalities have regulations about zoning for commercial, residential, mixed, and other use. There can be a discussion about how well they're applied, misapplied or whatever.

Here's my opinion: I think you, and other transient-rental aficionados, have the burden of showing sufficient reason for allowing you and AirBnB to avoid civil and possibly criminal (depending on circumstances) sanction for breaking the laws. You also have the burden of showing why the rules should be changed to permit your activities subsequently.
Yeah, they both do it. US has been doing it for decades, however.

https://en.wikipedia.org/wiki/Operation_Ivy_Bells
Azure and Bing are two different departments.
It was very sane in the 1990s, when hash combiners were invented and designed by Paul Kocher into SSL 3.0. The hashes we had to work with then were basically first generation designs, preceding the first wave of major cryptanalytic results against hashes. An MD5/SHA1 hash combiner made sense.

It is less sane now, I agree. With the possible exception of PQ schemes, cascades of all kinds are a silly idea.
>As well armed as Trump's followers may be, I don't think they want to come to blows with the U.S. military.

Hmm, really? My fellow liberals would do well to recall that the U.S. military is, by and large, composed of people who have a conservative viewpoint. All that demonization of the military and police that the left has unwisely been doing these past years might just come home to roost in a most unpleasant way.

http://www.militarytimes.com/story/military/election/2016/05...

http://www.militarytimes.com/articles/this-poll-of-the-us-mi...
> No one will build affordable housing when they can build expensive housing instead.

This problem is due to restrictions on supply. Consider the statement, "No one will build affordable cars when they can build expensive cars instead"
It's oscillation all over again:

http://airminded.org/2015/09/30/the-oscillation-of-r33/
"The man doesn't owe you a goddamn thing, and doesn't have some moral obligation to save you from shitty payment processing."

That's compatible with my comment. It proposes alternative to the path he took that other bootstrappers with utilitarian bent might find interesting. It doesn't require him personally to do anything. I even said his success was "good for him" in terms of efforts in and result achieved.

"You act like you rose him out of the ashes to save humanity"

You made that up. I explicitly said he didn't. His goal was to get rich. It would take more selfless individuals to do lasting things for humanity. It will take majority of humanity working together to save humanity.
we may end up generating our own cthulhu
The standards don't need to be raised much. Banning the sale of internet-connected devices with non-random default passwords doesn't seem too intrusive for the benefits it will bring.
"And in a troubling development, the attack appears to have relied on hundreds of thousands of internet-connected devices like cameras, baby monitors and home routers that have been infected..."

Is that really confirmed or just the reporter writing gossip.
That is true, but that doesn't protect you from the server being hacked and the script replaced by a malicious one.

If you execute unsigned code from a 3rd party without sandboxing, transport encrytion doesn't help you much.
Why rely on end devices? The infrastructure itself should be designed so that it cannot be broken that easily. Maybe we should return to metered connections, maybe we should implement a protocol to control routing.

The Internet has grown without proper planning using a lot of "quick and dirty" hacks (for example NATs, peering agreements) and today we just see the result. It reminds me of poorly designed email protocols that resulted in spam being the biggest part of email traffic.
Thank you, missed this piece but it was interesting.

I disagree with him on the point of "Who would do that?" He might be right about state level actors, but I think he discounts the motivations of crazy/disillusioned people, bored and curious people, and especially teenagers.

When I was a teenager, the Internet wasn't a thing yet, but we sure dreamed of all kinds of crazy schemes for taking out the phone company, power, anything really. We talked about anarchy and many "taboo" topics I can't mention here. The thing is we were good kids at heart and we had the discretion and morals not to act on those things. All of this happened in a time where our instant communication was the phone or meeting up in person. Today, it is infinitely easier to seek out like-minded people and to replace those who drop out. The ability to seek out confirmation and push is easier than ever as well.

Unfortunately, there are plenty of people that don't have that. Just because someone is a misguided teenager or crazy person does not mean they do not have intelligence, organization, and skills. Many of us certainly did our share of things and had the power, but I wonder what might have happened if we didn't stop ourselves in some cases. While perhaps the organization and probing nature likely hints at something else, it's really not that unusual for people to just mess around. Some people as they say also just want to watch the world burn. A couple of rough years in my teens, I certainly felt that way at times. I did plenty of things I'm not proud of, many people just have no shame and will take it that much further.

In the end I probably agree in terms of who is most likely, but I am kind of surprised that there were not more possibilities mentioned. Even 20 years ago, attacking Internet infrastructure seemed an obvious thing to do to us and we used to love talking about fun ways to ruin things over a burger at lunch. I mean is it really that hard to fathom people would think about attacking targets other than some organization, government, or other kind of company's servers?
If I had to provide some sage piece of wisdom that summarized the learnings of my life, it would be this:

"Never, ever underestimate the power of convenience."
If that's the TL;DR, it don't make a lot of sense.

Microsoft/Google/whoever is going to use what makes the most sense for a given set of applications/etc they have, whether it's CPU's, GPU's, FPGA's, ASIC's, or massive armies of intelligent pigeons.

I'm not sure why one would think all of them don't do all of them :)

(in fact, i'd pretty much guarantee it)
Feel free to do short term rentals, but get a zoning variance and meet the same standards as hotels and real BNBs.

You can't make subjective judgements about small vs big landlords because frankly, lots of landlords, big or small are scum and can only be managed with a stick.

I don't need to knock on your door -- if you want to be a hotelier, buy a hotel.
Well because a lot of the companies that went down today, addressed the problem by now running a blend of different dns providers.
Show HN: I made Hacker News hover profile cards
2017 Rust Roadmap
There was a post on HN a while ago where somebody wrote a server side tool which can detect curl -> bash piping and delivered different content if that happens.
> Enable private consultants and companies to provide this as a service.

If I am an AWS customer I expect AWS to handle/prevent DDoS, same way as they do with S3 to achieve 11 9's availability (the files are saved in multiple AZs in the same region - Glacier IIRC copy files on different regions to avoid data loss in case of physical disaster).

One of the reason for choosing AWS is because AMZ has deep pockets and has the means (financial and technical) to fight against large DDoS attacks, while a smaller provider might not have to do that. Putting clients in a position to have to buy that sort of protection doesn't sound very smart to me.
We all value our safety. Many, many buildings have doormen to keep people out to help protect safety. There is a lot of crime in big cities. I don't know anyone that wants transients in their building.

The people AirBnB is referring to are simply those who want to rent their places out for additional money.

I think AirBnB could care less about the safety of children, elderly, women, and others. I have seen no acknowledgement that people living in apartment buildings value their safety.
I think the causation goes the other way: Cities with high growth get high housing prices because people want to move to cities with high growth.
The website could be compromised though, and you'd have no reliable checksum to compare against (unlike a proper repository).

Similarly to what happened to e.g. https://transmissionbt.com/keydnap_qa/ or http://www.classicshell.net/forum/viewtopic.php?t=6441
Some cities/states are effectively or actually forcing all new development to include a HOA as part of the developer opening up that tract of land, under the auspices of reducing the cost of maintenance by foisting that upon the HOA/community directly.
There's a few subtle differences you haven't mentioned:

1) If you attempt to read the script in your browser first, and everything's great, then go pipe to bash, the server can send alternate content based on your user agent.

2) You'd have a hard time proving the first point, or reviewing to see if a script acted poorly, if you didn't have a local copy, which piping to a shell like this normally prevents you from doing.
> to me it was just too unbelievable and silly

Uuh... Have you seen our reality?

http://qz.com/506490/the-black-mirror-episode-that-imagined-...

http://www.dailymail.co.uk/news/article-3242550/Cameron-pig-...
You realize that project cost billions of dollars with insanely huge teams of smart people working with established principles of physics, chemistry, and so on rather than mostly unknowns in neuroscience?

No practical comparison between this and Apollo despite me wanting an Apollo-style effort put into certain problems we face. Including understanding the brain although maybe communications infrastructure, cheap computing, and MOOC's first. That will give us more brains for Apollo-style endeavors.
At least you have an option to download the script and glance at it before running it if you're worried. Compare that to "Save and Run" an MSI in Windows, which is putting the same level of trust in the product you are downloading except its much more opaque to what is actually happening.

RVM and Homebrew are two big projects that also do this method of installing. They are a breeze to setup. There's something to be said about just getting a job done and going home for the day.
I made a Chrome extension for viewing HN users profiles by hovering over usernames. It is open source: https://github.com/sungwoncho/hacker-news-hover-profile.
> I think the FPGA approach is generally more usefu

Intel agrees with its purchase of Altera.
This is a perfect example of dogma over logic. I'm not sure if the author just prefers we all use the Mac app store. Three rules for any installation process:

1. Make sure you trust the vendor

2. Make sure you trust the delivery (TLS)

3. Think twice before you sudo
I didn't know IDNs were a thing until today, and I see those two links as identical in Chrome.

This seems like a HUGE security fault.
The end result you get out is something like "if the prover n accepts the claim P, then prover 1 also accepts the claim P". In logical terms you can think of it as a relative consistency proof.

In practice, even much simpler theorems would already raise our confidence a lot. E.g., the inference rules of Coq can be stated in a couple of pages of text, but the kernel checker that you need to trust is 14k lines of OCaml. A proof that the checker actually correctly implements the inference rules would already catch the majority of the bugs that happen in practice. Because of Gödel we then can't hope for a proof in Coq that there is no way to use those inference rules to derive False, but that's less of a concern.
So your answer to an under supplied market is to try to control what is supplied?
This is one of the many reasons AWS and cloud computing in general are way overrated.

I know of a company that pays an AWS bill sufficient to buy the equivalent of their pre-cloud datacenter's hardware every 1.5 months. The extra staff required to perform hardware maintenance would also cost about 2 months' worth of AWS each year (that means they're paying ~3x more than they would with hardware). Yet they moved to the cloud because it's the hip thing to do.

Cloud has upsides and things that are useful, especially for smaller proprietors who can take advantage of cheap droplets from DigitalOcean et al, but for grown-up companies, moving off your hardware shouldn't be automatic.
Whatever happened to namecoin?
This is not a risk inherent to `curl | sh`, it's a risk that you run any time you download software from anywhere that doesn't have a signature using a key that you've already previously verified as trustworthy.
If you applied to 12 places and got 12 onsites, that's pretty good.

What are some good ways to improve one's marketing of oneself to get better results on the job hunt?
He didn't claim it had "real world basis" or "run it through Bayes' theorem". He just said he expects about a 30% chance he is right.
No, I wasn't using video. This is for a WebVR app, so the people are rendered as avatars.
That's a poor description of what is going on here. I suppose you'd argue that having to pay a property tax is the same as paying the government rent, and so that means one doesn't "own" his home at all as long as it's taxed?

Where does that argument end? At what point can we just call it what it is: advocacy for disbanding government entirely?
WikiLeaks I think
Actually p2p file transfer via an infrared port[1] was a fairly common feature on laptops back in the day (this was probably before bluetooth took off). If you're on Windows, have a look in the "Network and Internet" section of the Control Panel. You may still have an Infrared utility there if your computer has that functionality.

[1] https://msdn.microsoft.com/en-us/library/aa940293(v=winembed...
I'm really not a fan of this author's style. The content seems angry just for the sake of it. I'm no expert on it, but it's pretty unclear whether the complaint is even valid, as there are talented, non-"retarded" developers that disagree:

https://sandstorm.io/news/2015-09-24-is-curl-bash-insecure-p...

And for an egregious example of the author's approach of being angry without validating anything:

https://gnu.moe/petpeeves.html <- an angry post complaining about English mistakes that is itself splattered with basic grammar errors
Maybe WikiLeaks?
New york would whither on the vine if it weren't for visitors. Being a world class city means people have to be able to travel there with ease.
I _think_ WL == WikiLeaks.
Given national security interests, we need new laws: 1. IOT devices should not ship with default passwords. 2. Internet infrastructure companies should not be allowed to get "too big to fail".
WikiLeaks
This is why I dislike anti-discrimination laws. I suggest a compromise to only include certain kinds of jobs like manual labor under employment anti-discrimination laws, where workers are actually commodities that are measureable and interchangeable.
CETA – Summary of the final negotiating results [pdf]
How is this more of a security risk than having the user do wget https://example.com/whatever.deb and then dpkg -i whatever.deb? Or adding their apt repo & public keys? Sure, the project maintainer could include malicious code with a curl bash, but they could do in either of the ways I mentioned as well.

And maybe it's not relevant, but I find it really off-putting how the author calls these developers idiots and retards constantly.