skysight-inc/HackerNews huggingface dataset:
Ask HN: Mobile phone for pragmatists
My Samsung S4 LTE recently died, I'm looking for a new phone and find it hard to cut through all the marketing speak.

All I really need is a phone for light to medium use. I'm a developer, so it's sitting on my desk most of the day, no heavy duty features needed. I don't play games, I don't do anything special with it, mostly messaging and taking the occasional picture.

So what I'm looking for is an affordable, just all around solid phone without bells and whistles and without a 200 € markup for a brand name.

If you could point me in any direction, thanks.
It's obviously have been noted elsewhere in the comments, but aren't those essentially cafes? Of course, in some countries, it became normal not to talk to strangers in cafes — but wouldn't the same in the end happen in the same public living rooms? After all, many cafes and restaurants now are using giant tables to bring people together, and we're still reluctant to talk to one another. May be the problem isn't with spaces, it's with us?
According to the report, they supposedly underestimated methane production by 25%.

What surprised me more though was that even going be the previous value (which I'll simply assume to be 1.5%/1.25=1.2%), that sounds like a _lot_ of greenhouse gas contribution for a resource which in 2014 "only" contributed 3.8% to global energy consumption, according to [1].

[1] https://en.m.wikipedia.org/wiki/World_energy_consumption
>> If this is so, do you think it can be reason for a lot of insane things that is going on in this world?

I think that its more the lack of fear that leads to such "insane things".
The front-end ecosystem is a clusterfuck, but most people don't want to admit it.

Here's my take:

- Angular and Ember are horrible messes of complexity. Steer clear of them.
- React is awesome, and supports writing more functional and less buggy code. Use it.
- WebPack is a necessary evil at least until native JS modules are widely supported. Ignore other build tools.
- Learn about "streaming", and "observables", and see where that leads you.

Don't use something just because everyone else is using it. Question everything. Be conservative and pragmatic.
Sure, although not in mainstream browsers if there's HSTS + HSTS preloading, which can be easily adopted by any site. Outside browsers, HSTS is usually not supported. It was actually implemented by wget, but without preloading, so it only works after first use which is much less useful.
I was thinking the same thing, but I think that is manageable. The only thing I can't swallow is escluding the escape key as a physical button.
Modern PHP (which LastPass almost certainly isn't using or writing) isn't really worthy of disdain.

https://github.com/paragonie/halite/blob/master/src/Symmetri...

(Disclaimer: My project.)
I used lastpass in the beginning for a long time, and I was OK with the fact that I don't know most of my passwords.

Until the day I forgot my 'master password' (I don't know what happened... I just couldn't remember it)

And almost all my passwords were gone. Resetting everything was a real pain
For the benefit of people not familiar with php, can someone please clarify why the author's findings reflect badly on lastpass?
> Telegram sends messages in plain-text by default.

This sounds like everyone has access to those messages. Better: Telegram sends messages client-server encrypted by default and since you can't run your own Telegram servers, this is a problem.
Sleep and creativity
Ask HN: Overwhelmed with learning machine learning, how do I proceed?
Inspired by this thread and the excellent answers (https://news.ycombinator.com/item?id=12882816), I felt courageous enough to open ask myself.

I've completed Andrew Ng course on Coursera but now I feel overwhelmed by the variety of information on machine learning out there. How do I start a new project? How do I choose what problem to pick and what algorithms to apply?
Chevy starts manufacturing the Bolt
Signal is not positioned as a tool for possible TAO targets. Never was, and never will be. Don't use it and please stop spreading the FUD.
It just shows bad (old) coding habits that might indicate the kind of code quality running lastpass
It seems to me it says more about their website quality, which is different.
Arent those typical middle class venues?
If you've been looking at things like DSpace, take a look at my company's open source information management platform: http://haplo.org/

Very strong on metadata, good file handling, integrated workflow, extensive API for scripting.
Depending on what type of medicine you're wife is interested in, she may want to avoid SF for completely different reasons.

I had a roommate who was an ER nurse. She worked shifts at an SF hospital and also commuted over to Oakland (Highland) to work shifts for lower pay. I asked her why she'd drive all that way when she could just pick up more shifts for higher pay in SF. She said the experience she got in Oakland was so much more valuable. In SF, it was lots of concerned parents bringing in their children because they'd had a fever of almost 100F for over an hour! At Highland, it was gunshot victims, illegal immigrants with obscure tropical diseases and just a much larger variety of medical needs. She claimed that on a per hour basis, the experience in Oakland was 10 times more valuable than in SF.

So not only is the city pricing itself out of existence, as you mentioned, but it's pricing itself into a monoculture that takes away a lot of the diversity of the people there. And doctors might want a bit more of that diversity during their training. Then again, if she's studying for a specialty in treating carpal tunnel syndrome or interested in doing Lasik surgery, there's probably no better place on earth to be :-)
Cyber Threats and Vulnerabilities to US Election Infrastructure [pdf]
The code quality of their website and the code quality of the application they sell might be two different things, but the overlap between both topics is "code quality", which is what I said.
Primate Paradox of Circuit Psychiatry: primate research both crucial and unethical
You should avoid lastpass (and similar services) because you are giving all your credentials to a third party to be remotely stored.

Also lastpass has a history of security issues: https://en.wikipedia.org/wiki/LastPass#Security_issues

If you want to use a password manager, you should use something like pass[1].

[1]: https://www.passwordstore.org/
i do not advocate for lastPass, you should not allow ANYBODY handle YOUR passwords.
but.
the premise of your argument is utterly and completely wrong.

"I got redirected to lastpass.com/update_phone.php ... I get redirected to a php file in the root of the webserver?"

no and no.
by looking on a URL you can not say anything about the "root" location, whatever you mean by the "root". and you was not redirected to any "file" at all, there are no files in the space of URLs. and
".php" part is not telling you anything about the server's internals (i have a couple of servers written in Erlang, i can create a couple of ".php" URIs for you if you wish.)

YOU MAKE UNJUSTIFIED ASSUMPTIONS -- this is THE primary reason for the mistakes you alleged in your article -- WHAT AN IRONY!!!!
I took a tour of the Recology plant there (highly recommended!) and asked the same question. Apparently there's a development plan in place and they expect to start building housing soon, though the person I spoke to didn't now the timeline.
If we don't invent a nightmare machine then the Soviets surely will, and then where will we be?! A nightmare gap, that's where!

My opinion is we need to invest more funding in nightmare-generation research before it's too late.
Reinforcement Learning Designed NNs Equal Human Performance
Go to https://www.kaggle.com/, pick a project, and apply all algorithms to the problem to see which one is the best.
Some thoughts on asynchronous API design in a post-async/await world
Php (generally speaking) isn't "secure by design".

Which means writing Php code that isn't as insecure as an ugly girl on prom night requires significant effort on the part of the developer to make applications secure.

The guy notes they haven't even put in the basic effort required.
This is still wrong, you're inferring that the website code and the application code share the same code quality. But chances are this is not true (unless there is only one dev at lastpass which would also be admin of the webserver.
I don't disagree (although I prefer KeePassX), but let's be charitable:

- What LastPass gets is ciphertext, not your unencrypted
passwords. Important detail.
- There are opportunities for LastPass to receive your
master password (i.e. if you enter it on their website).

I haven't audited LastPass. After Tavis Ormandy looked at it earlier this year and published his findings, I wouldn't be surprised if the crypto was totally and hopelessly broken.

But to eschew the fact that their app does encrypt passwords before sending them to their servers isn't fair.
the irony is that these findings do not say anything about the website in question. URLs are ARBITRARY strings, they have no connection to the server's internals.
Epson Stylus SX105 Printer Driver Download
> Consider all communication via Telegram to be on public record.

Just because the protocol has flaws, doesn't mean everyone can exploit them.

On the other hand it's possible for Google to read every communication because they have root on your phone. So using Telegram [1] with a custom ROM without Google services (e. g. [2]) will make it harder for Google at least. Not easily possible with Signal.

[1] https://f-droid.org/repository/browse/?fdfilter=telegram&fdi...
[2] https://copperhead.co/android/
I've grown tired of getting killed by some vastly superior player every time I undock. Otherwise, pretty good game.
Elon Musk thinks universal income is answer to automation taking human jobs
I generally prefer a specific font, but will fallback to sans-serif, serif or monospace depending on what I'm styling... I also tend not to have a bunch of fallthrough fonts... ex: specifying helvetica and/or arial should be an offense punishable by a mild beating.

Another thing I hate is when people don't specify the weight for black/bold fonts... which makes the fallback even more hideous.
> Has anyone encountered other trains in exile?

IIRC old narrow-gauge Spanish trains are being used in San José, Costa Rica as they have opened a small number of train lines in these last 8-10 years.
> But chances are this is not true (unless there is only one dev at lastpass which would also be admin of the webserver.

This is an unknown, and we can argue until we're both blue in the face about whether or not information about app A tells you information about app B, if produced by the same company, but you don't know if the same people within said company produced both apps.

But I say that point doesn't really matter: Their quality controls are either lopsided or inadequate. Neither is a good outcome for a security company.
Well, to be fair, the standards (PSR 0/1/2) are different and fixes different things, they are not about fixing the same issues, in different ways. So at least that's good.

However, what is funny, is that Symfony chose their own standard instead of going with the rest of the ecosystem. But I come to expect that from Symfony
"Things like knowing the box model, closures, map/filter/reduce, object vs array, prototypes, bind/call/apply, event delegation. These made up almost ever single first phone screen interview I’ve ever had."

Seems pretty hefty for a junior-frontend-position.
Wow, looks amazing. However I thought of finding my own niche / domain. This seems very structured on the one hand but would prevent me from finding my own small world to apply my new acquired knowledge on.
Also noise and ride comfort. In Warsaw we have some really old Soviet subway cars and a mix of western/homegrown ones

While the bumpy ride is just a nuissance, the noise of those old junkers probably should require everyone to wear heavy hearing protection, if one had to adhere to workplace regulation.

When their crooked boogies start to screech and grind in turns, the noise is physically painful
Most people don't adjust their system fonts.. then again, most defaults are reasonable.

And to anyone who reads this, for the love of $deity, stop specifying Arial or Helvetica before sans-serif. It's one thing if you want a specific default, but the fallback should be whatever system's sane choice.
Tip: if you have another browser, turn off JS in Safari. Use Safari until you really need JS, copy paste URL, Chrome, go to clipboard link, retry. It's laborious, but it beats getting bent over the knee by mobile ads.
Sparql can scale significantly beyond local memory size. As it is really a relational algebra. Especially for the pattern matching style queries that most Cypher and sparql queries really are. Traversal depend on locality and depend vastly on the implementation of they scale of of ram or not.
Pass doesn't solve the most important issue: passwords available on all devices, most importantly mobile.

Credentials being "remotely stored" would be the case regardless of if you run any other viable storage such as Dropbox. I suppose you can remotely store on your own server, but I'm about a million times more likely to screw up than even a bad cloud company or password manager - so that's a non starter.

I'm sure there are alternatives to LastPass/1pass and similar, but storing encrypted passwords in a local file solves only a small part of the problem.
The Sky Runners – Play This Game Please
The point of CopperheadOS is not that it lacks Play Services... and Play does not provide more secure updates than an app store like F-Droid. In fact, Play abuses system privileges to bypass the signature system used by Android. It will happily clobber an app with another with a different signature. It moves all the security checks for that into the cloud... completely bypassing the standard trust-on-first-use signature system. Official builds of Signal could be hosted via an F-Droid repository, although there's no point when it depends on Play.
If the social media of the past decades teaches us something, is that when given the chance, people tend to form cliques and tend to stay in their bubble when they find one. This persists in large cities where people have adequate and constant exposure to alternate cultures. Maybe people have gotten tired of trying to be tolerant to everyone, maybe they don't see enough value in having to resort to lowest-common-denominator communication and cultural memes. Maybe in the future the physical layout of cities will come to represent its ideological /cultural layout. As loneliness is a physical thing, maybe bringing compatible people closer together enhances communication.
>"In fact, the result still needs significant guesswork to decrypt."

I have never heard anyone other than the author of this piece suggest otherwise. Ironically, this result is trivial. That said, I have a pretty serious classical crypto habit, so my conception of what constitutes 'crypto folklore' may be poorly calibrated.
The Market Street Railway [0] in San Francisco has a fleet of restored streetcars from around the world that run regular service on two trolley lines.

[0] http://www.streetcar.org/streetcars/
One of the problems that must be solved one a larger project is that you want to put your code in many small files,like put each class in it's own file (similar to how you would do it in other languages) , because you do not want to import each small file you need a tool that will merge them in one big file and for production maybe also minify it, also you will want source maps to be generated so you can debug your code. So to solve this problem in larger projects you need a tool, I am not familiar with all tools that exists to solve this, the project I am working one uses gulp (I did not made the choice so I did not done the research why gulp was the best solution then, and now something else may be better)

Other problem in big projects with jQuery is caused by the fact that data and UI are combined(what I mean is I often see data set as attributes on UI elements ,hidden fields with data in it), this can be solved if you use jQuerry better though, if your UI is not very dynamic I would continue generating it in server side but if you want something like an infinite scrolling list, or a very huge list then it is more smouth to implement it on client side and implement some tricks to have it work efficient(react would work better in this case then jquery and maybe you can find a good component that you can use),React is used for UI.

Some people compare angular1 with react, angular is a full framework it contains a lot more, like translations support, ajax support,routing , If you want my opinion here it is, angular templates vs react : reactis pure JS , you can use JSX and you should use it but have a look at the generated .js files, when I started I did not use jsx so I can learn better what actually happens.
Angular templates feel to me as magic, there are no generated js files, the templates are compiled at runtime, I am sure eval is used too, in case of errors if you are lucky you get a printed stacktrace (not a real one)) if there are other errors you get a generic error message with a link to a generic solution and if you are not lucky nothing happens, no errors, no application loading. If you need to do something more complex you will have to get your hands dirty and have a look under the hood and maybe use the $compile. Also react can be used in existing jQuery projects, I have worked on such a project where we migrated some components to react and keep the rest using jQuery.
If you like languages like C#, AS3,Java then I suggest trying TypeScript , TS works great with React.
P.S. I am not a person that tries tools, frameworks and the latest shiny thing, I am working on web projects that were already started, so I seen what problems and what solutions we faced, until some of the solutions get standardized then there will be more alternatives, you will have to identify the problem in yourproject, then try to find the simplest solution for it and also try to not bet on the technology that is at the end of life(it is not easy)
You don't need to use personal attacks just because I'm trying to explain a point you don't like. I am only trying to help you understand.

GCC is run by a committee which stated role is to overrule maintainers (https://gcc.gnu.org/steering.html). It has nothing to do with Ring, nor does Ring have a steering committee. If ring had a steering committee, and if stallman was part of that committee, then he would be part of the technical-decision making process. But he is not, nor is FSF, and there is no such committee for Ring.
It also has an include.php file:

https://lastpass.com/include.php
Considering how hard it is to explain how Google Analytics works to the standard business owner, I imagine it wouldn't be hard to obscure all manners of data collection programs from oversight.

In times like this, the importance of civics education is highlighted. The very idea that people in law enforcement think it's acceptable to treat judges and the legal system with such contempt is scary. Even if you disagree with a certain law or system, you still need to respect it as a public servant.
That sounds a bit dramatic. How big would an asteroid need to be for the economics of bringing it to the surface of Earth to make sense.

That meteor that lit up the sky in Chelyabinsk was estimated to be 20m in diameter and weigh around 13,000 tones[1], it exploded in the atmosphere releasing the energy of 500 kilotons of TNT (about 1.8 PJ), about 29 times the energy released from the atomic bomb detonated at Hiroshima.[1]

Not sure I'd want to be on the planet when you crash your asteroid into a convenient desert or shallow ocean.

1. https://en.wikipedia.org/wiki/Chelyabinsk_meteor
Taliban used camera drone for the first time
> they have turned out to be places where you are expected to keep to yourself.

It's funny how different this is. In my country i would barely ever go to a cafe alone, as it's supposed to be a social activity.
What exactly is a TAO target?
Verified Voting
This says they have atleast 8 developers. https://lastpass.com/about-lastpass/
Really depends on your circumstances. I've been doing part-time gigs since I turned 18 and recently finished my PhD. When I searched for my first full-time job I interviewed with a bunch of companies in different industries in different countries. I got an offer from every one of them and it really turned into a search of where I think I would be the happiest.
I doubt it's going to be an inkjet, the "printer" could be simplified to punching holes on the ballot, which should be cheap.
Yes, that sums it up very well... Doing "good technology" can helps up feel better about our profession (and this is fine) but adding more tech to the problem is not going to help.

On the other hand, while doing tech we are building organizations and interactions between people. We can explore new forms of cooperative non hierarchical organization. Building coops and companies that enable people to survive without having to choose to eat or be eaten, and setting up examples that can inspire new forms of organizing other parts of society. This is something that motivates me lately.

I recently read Reinventing Organizations by Laloux, and although the book is very flawed philosofically, I like how it talks about alienation without even mentioning the word, with lots of examples that people without a political activist background can relate to. It also reminds me of the Anarchist Moral by Kropotkin, which more than a century before tried to show optimism by looking at all the emerging cooperative structures in our society that too often go ignored.
How do you now mitigate this?
In general, we can only predict ground state properties with accuracy. Properly predicting high temperature superconductivity requires generating information about the Fermi surface that is not just a matter of ground states. If this is standard BCS model stuff then you might be able to get away with some rules of thumb.
The Vulkan api comes to mind
You know what happens when a ruler's legitimacy is widely questioned. See the legitimacy question as separate from the question whether the ruler is popular or good. In the past armies have been raised against perfectly fine rulers whose legitimacy was questioned, and armies have been raised in defense of horrible tyrants whose legitimacy was not in doubt. My enthusiasm for representative democracy is that it has largely done away with these internal conflicts, without a need for repression.

The vices of voting that you mention are more an artifact of a first past the post, two party system: over time, any idea that has a plurality will get all of the influence. Any idea that never has a plurality will never have any influence.

In a system with proportional representation and a tradition of coalitions, over time, an idea that has 20% of the vote will gravitate towards about 20% of the influence. With many parties to choose from, the choice for your educational platform may not be automatically bundled with a choice for a foreign policy.