skysight-inc/HackerNews huggingface dataset:
Could replace the batteries with fuel and we'd have the same story, I've seen some horrific car fires from conventional combustion engines.

You're always driving around with a lot of energy - when it all gets released at once people die.
Most of what you are saying makes sense, except this bit:

> "Maybe the HTTPS site is just broken right now."

In the case of a bank, it's extremely unlikely that they are falling back to HTTP. It's much more likely that sslstrip is in place if you had this. The cost and hassle of someone having access to your whole bank account, is likely much higher than the fines for a late payment.
> There's a one smoldering on in Germany[2], but it's getting almost no press - most probably because Google are suppressing any mention of it in their results or in Google News (Crazy? Maybe, but you can't disprove this either).

I agree with a number of things in your post, but I don't think this is a likely explanation. A couple of months ago, a German newspaper published some data about their traffic sources[1], showing that 20% of their visitors came from Google. Some others released similar data (see the linked thread - note that it's mostly in German). I don't think that's anywhere near enough to effectively suppress these reports (though the whole echo chamber thing is a problem of its own), so I don't think it'd be worth it for them to even try and risk possible legal ramifications.

I think the more likely explanation is that just about no one cares, which is much more worrisome.

[1]: https://twitter.com/zeitonline/status/781779996473958401
Nice to know all that second hand smoke my dad exposed me to probably will wind up giving some kind of cancer. Thanks for the mutations dad. /s
The search for biologically plausible neural computation
It's intellectually dishonest to claim something isn't happening while, in the same breath, fighting against any reasonable way to verify it.

Here's an intellectually honest argument:

> Voter fraud probably happens sometimes, but not on any significant scale. Admittedly we don't really know because there's no way to verify. What we'd lose in preventing that isn't worth what we'd gain.

That's different from:

> It only happens 31 times in a billion votes because they didn't find evidence otherwise. There's no way to get evidence, and I'm against any measure that would allow it. Any argument against me is likely racist in nature.

This is what we're reading here.
Show HN: Datamo – upload data, create graphs, share
Android as a useable system is not open at all. If you attempt to install say a native Debian system onto a phone it will fail because of unsupported hardware (I don't consider useable something with no audio or networking, touch screen etc), so you must rely on precompiled binaries ripped by some Android ROM.
At the same time, if you strip Android of all closed source code, the resulting image could probably be installed only on a virtual machine.
So though technically we can agree on Android being mostly OSS, that "mostly" part alone would be unsatisfactory for about all users.
That makes Android a closed system to me.
Can a firefighter explain to me how this crash would have been different if it had happened in a Maserati? Because otherwise there is no story here, except that weird, horrible accidents now happen with electric cars, too.
I smoke (trying to quit) and I don't think cigarette manufacturers are doing anything immoral. I enjoy smoking! Why else would I have ever tried it when I knew all the risks?

Nobody is getting tricked, here. People are selling a product that other people want.
Don't know about mainline, but there is some OpenWrt support for other boards with the MT7688 e.g. https://wiki.openwrt.org/toh/seeed/linkit7688
I think it's the economics of attention post-social media. Old NPR was in depth, slow, boring, and wonderful. That does not play on Twitter.
The cars were given a really high safety rating. That makes me assume that the speed and severity of this collision far exceeded those used in testing. If that's the case, nothing can save your life in that situation.
The big difference is that apparently Google is a Silicon Valley sweetheart and Microsoft never was.
The problem with checked exceptions is nothing more and nothing less than they didn't work. Yes, in theory, or at least some theories, checked exceptions ought to be awesome. But they aren't in practice. Go's error handling in practice works better than Java checked exceptions. Where fact and theory conflict, fact wins.

(I emphasize "checked" because there is a much more robust and interesting discussion about exceptions in general, and then of course a number of sidecar discussions about other error handling mechanisms like Either/Option, etc. I'm only making this claim about checked exceptions. Which is kinda shooting fish in a barrel; arguably C's error handling worked better than Java's checked exceptions and I think C's "error handling" isn't even worthy of the term.)
It beats me why Node.js is anywhere near as popular as Elixir if real concurrency and error handling are a priority. Is programming just a fashion industry? What's popular certainly doesn't seem to have any connection with engineering principles.
The vast majority of onsite interviews I've had were exhausting Google style interviews. Generally speaking, the ones that haven't been were the ones where I got the job (exception is the current job, that was a two hour sit down exam where I was left alone. I made it, but I'm surprised I did. I've seen dozens of people come in and fail at the test since).

My favorite interview, in fact, was one were a grizzled veteran (he was the Lead Programmer on NBA Jam), asked me a couple questions on the code sample I brought in, showed me an example (uncommented) class from their actual code base (I verified later) and asked me to interpret what it's doing, asked me a couple more questions, then said "Okay, I know you can handle the job, now let's see what you really know."

And he proceeded to ask me deep questions about memory and graphics, which I could only partially answer most of them, and then he proceeded to teach me about the details.

It felt more like a mini-lecture at that point than a pop quiz ("Do you know this? No? Well tough! Better look it up later. Next question!"). I legitimately learned things from that interview that I can still recall today.

Then I had a friendly chat with the president of the company afterwards, who used to work for Midway and designed many classic arcade games, most notably Rampage, about what they do at the company. I played that game a ton when I was a kid, so I was happy just to be chatting to him like we happened to run into each other at a family BBQ.

I was in and out of there in about an hour, and there wasn't even a weed-out phone screen.

Then I got a job offer a few days later, which I ended up accepting.
This is a very reasonable point, and I have some real questions about the recent failure to redact in the Wikileaks releases. That said...

> The question is not whether we should give corrupt organizations a pass (we shouldn't)

The majority of the criticism I've seen absolutely misses this step. It treats "Wikileaks is shady" or even "Assange might be a sex criminal" as a rebuttal to "this thing in this email you sent is incredibly unethical". Time and again, the discussion of Wikileaks ethics comes up only when they embarrass someone, as a defense for the person embarrassed.

I'm not sure what to do about that. Ideally, I think we'd do it the opposite way - the published emails that weren't ethical embarrassments are a way bigger violation of privacy. I'd like to see Wikileaks held to account for publishing harmless and personal messages, while seeing the leak subjects held to account where the things they did were actually bad.
Take a look at Rancher also. It is a bit more mature project, and it did save me some headache. To be honest I didn't use Docker everywhere and everywhen but where I did, do real issues.

Also there is DCGC from yelp!
"when we smash together Muons and nucleons that there is a certain chance that we will produce Kaons."

I don't think that is a fair comparison. My description had much more content than this, it was a high level overview of the proposed process. In contrast, your example does not explain anything.
I will have a contingency plan in place that will likely involve open sourcing the API so that it can be self-hosted.
"I do not know" is not normally acceptable as an answer. The OP still does not know whether the participants were compensated.
My company is cool in that it has unlimited vacation, but you are mandated to take one week off per quarter.

I would be lying if I said that even that gets everybody taking 4 weeks off, but the founders have made themselves very clear, so I feel quite safe following the rules and then some.

The development team actually has come up with an (internal to the team) target of 6 weeks. I'll probably be successful in hitting it by the end of the year.

In addition we have most of the holidays off that you'd expect.
critiquing grammar on the internet is generally a bad idea these days because:

1. typos

2. not everyone is a native anglophone. the web is global.

3. nobody is an actual grammar expert, including you.

4. avoiding actual discussion is obvious
Why does every single company want to become my annoyingly nosy personal secretary? I don't need anyone to do that for me, and I won't use your app if you insist on doing it.
That counterargument only flies when sellers are repeatedly selling to get yet another upgrade. First time buyers rarely think about resale value.

But giarc's point wasn't so much about resale value (despite his claims of the opposite), it was about an active second hand market due to (1) confused first time buyers and (2) a reputation of ruggedness.

It basically boils down to: more people buy gopros than there are people with a real usr car for them, this is why the second hand market exaggerates market saturation effects more than usual.
That's quite a romanticized stereotype of a mechanic. It's also the wrong analogy. The computer, in that analogy, is his tool. It may be the "best for the job", but the mechanic isn't usually mucking around in its internals. When the hydraulic ramp is broken, he calls someone.

There is absolutely no need for someone writing software to ever open up his computer, or to compile the kernel they're running natively (if you're actually working at kernel-level, you'll do most of it in VMs). All that stuff can be fun, no doubt. But it's your hobby, and really no reason to feel like a superior "professional" vs. the lower classes of "prosumers".
It's already very simple for the end user. Google, $prouctname $version crack, download.
Life doesn't relent. Even young, rich, beautiful people are susceptible to feelings of unsatisfactory-ness that leave them reaching for the booze and hard drugs or just feeling all around unfulfilled and miserable. Humans are built to run on a hedonic treadmill, not to be content in the moment.

Meditation is a tool so that when your life scks, your boss is an ssh*le, and your personal relationships are a mess, THEN someone cuts you off in traffic you take a minute or two of breath awareness and open monitoring instead of running them off the road and karate kicking them in the head.

It helps you relax into feelings of anger, pain, or depression instead of running from them and chasing your addictive behavior of choice to escape. Also like every other tool out there it isn't 100% effective.
Millenials are attacking the $18B funeral industry
I had similar experience myself.
I wouldn't attribute the risk to the retreat itself, however, but to the vipassana method, which tends to evoke insight experiences as quickly as possible, without first calming the mind using single object samatha practice.
If someone were to just use classic anapanasati even for 10 days, I think the results would be somewhat different, as when properly praciced anapanasati calms the body and essentially turns of thinking first, which leads to much calmer and more pleasurable transformation of the mind. Insight experiences with active mind during vipassana practice always feel to me like open brain surgery. With some increasing understanding of not-self, however, it gets less and less scary with time.
> For REQ/REP HTTP/2 and other QUIC-based approaches are reigning supreme

Oh? I implemented something recently using req/rep using pyzmq and then ported it to grpc. grpc was an order of magnitude slower. Then I updated the zeromq code to do pipelining via router/dealer and that was even faster.. by sending pipelined batches of 100 items it can do 160k lookups/second. grpc+batching I think maxed out around 20k.

Could have been protobuf that was the cause of the performance hit though.
One thing I like to do is with anything addicting/I deem as necessary, every now and then I cut it out of my life for a duration. It helps increase my independence by avoiding decisions based on what I misbelieve are necessary.

I'm not sure if it's applicable to all, just something that I feel helps me a lot.
Your commment makes it seem like you may not be aware of nessus?
I'm not sure the algorithms would have changed between then and now.
Why do they sell richly marbled steak when we know it causes high cholesterol?
Still doesn't solve the bigger problem - that neither designers nor publishers actually embraced the digital medium. They've been treating the web as if it was a poster - something for the designers to show off on. The only thing the current "responsive design" fad brought up is that the poster now changes its layout with size in a somewhat intelligent manner. But they're still drawing posters. We're still getting only text + pictures + occasional video. What about interactive descriptions? Embedded simulations? Models that we can explore, or play with? Nowhere to be found, except in occasional essay by Bret Victor.
How did the math change from 50,000 successful suicides to 31,250 suicide attempts?
Build a Simple FB Messenger Bot with AWS Lambda
It's a local news story posted to HN at this point. Local news always covers these type of events, especially with theatrics like a fireball caught on video. It doesn't seem like something that would become national news based on that report.
Creator here. We're trying to simplify and speed up the process of creating graphs, whilst also providing a place to store data (public or private) in the cloud. Our user datasets are modelled on GitHub/GitLab repos, so you can add descriptions and update them over time.

This is still quite new and any feedback would be fantastic. If you have any questions just ask. :)

edit: Here's an example dataset that I've created: https://datamo.io/james/premier-league-16-17-arsenal
Show HN: The Downside of Product Hunt, Not Everyone Is a Front Pager
Yeah... Or use basically any other OS and get shit done without every update degenerating into a day's worth fiddling.
I published a set of utilities that I developed for playing and to help myself learn about frequency analysis here, you might find them interesting:

https://github.com/0x09/dspfun
Again, I think you are wrong. Fujifilm makes extremely high quality professional lenses that are used on medium and large format cameras. Or at least did fairly recently. They've also announced a new medium format digital system with lenses to match. I have the Fuji "prosumer" X series system, and I can tell you that their lenses are very, very high quality - besting most of the Nikon and Canon offerings with metal construction and in some cases weather sealing.
Late reply, but:

I think this is one of a few areas where a browser or extension developer can create something that will force every other browser vendor to adapt, sooner or later.

Last time I feel that happened was with tabs, so IMO this should is a high-value target even if nobody seems to be interested ATM.
Mexico's Indigenous Groups Start Telecom Co-Op After Being Refused Service
Reaper then, even if it's not open a source, you can truly customize it!
Samsung washing machines recalled for explosion risk
Fair point. I'm honestly horrified that Wikileaks did that, and it should probably make prospective leakers question their judgement with material that could endanger private citizens.

I was speaking the to larger claim that Wikileaks owes us transparency to avoid being hypocritical, which I still don't accept. But at this point, they might well owe some transparency not as a public establishment but as some people who screwed up badly with the power they were given.
Oops, was writing on my mobile. Can't edit it now, thanks though.
I did some research and I think I may have found the solution to your problems:

https://en.wikipedia.org/wiki/Abstinence
I'm interested in Ubuntu LTS or Debian stable, not in school-rolled Arch that is known to be broken on each update. Second, it's wiki is filled with anecdotal tips (not even tips) that cover no real issues and provide no idea from which hardware to select. You should click on every configuration to check it, but no one will do. Because it is just words without any customer review or experience. Call it lazy, don't mind.

I'm watching local linux community for years despite not using it, and from what I see, Arch and blah-blah-wiki are still no Products. Curious if you really use this Arch and selected hw by its wiki, or you just googled for me, writing from ubuntu on 10-year old thinkpad. Locals can't really tell what to buy, because virtually everyone except those having ancient thinkpads have at least one issue. Some sit with charger always attached, some can't sleep, some have crashes because nvidia-blob, some because nouveau-blob, others just bought macbook and have no problems trolling linuxoids from osx.

5-6 seem to be not presented in my country.

I can spend some money on recent notebook (but don't get that 'serious' and 'pro' arguments, because we talk about regular user and regular hw) after just your hype, but what an idiot will I feel myself when it will lose wifi too often or fail to sleep on close. I understand you, arguing for linux on desktop is hard, because desktop is still few% of enthusiasts. Statistics prove it all.
> Ask where the research is on female birth control without those risks.

As far as I know scientists and researchers are free to research whatever topics they want. And similarly, there are physical means of birth control for which women do not need to take the pill. It's a choice.

And regarding the permanent infertility effect specifically, I seriously doubt the rate is anywhere approaching 1 in 320 at four years of 1 in 40 (8/320) after one year.
I am currently writing documentation and the product needs an admin dashboard so that things can be managed outside of the API, a la Stripe. After that I will run a beta to gather feedback before launching. I'd love to chat if you'd like to reach out to me at hello@keygen.sh to gauge what your needs are in terms of an on-prem license.
That kind of accidents are only possible for gun-type bombs. For an implosion-type bomb to initiate, the explosives really do need to all go off simultaneously, detonation from one side just causes the core to be sprayed out through the other side. Implosion bombs are designed to have the least possible amount of fissiles for weight/economics reasons, which means that even a sub-millisecond delay in the detonation of one of the slow explosives causes the core to completely fail to initiate.
One omission is https://en.wikipedia.org/wiki/Silicon_peach (Atlanta), which was perhaps omitted from this list because a peach is not a place.
They would just start obfuscating the data (with ciphers, word replacements, encoding, minification, etc.)

They'd then claim it was for your security/privacy/protection. You know, like how Microsoft encrypts your Windows 10 usage data it sends them.

At least you could use the presence of such obfuscation as a sign there's probably something bad afoot. Presuming only a tiny number of extensions try to encode the data they send.
It's also specious to assign credit or culpability for things that happened 50 years ago to the organizations that exist today.

I mean, there are famous examples of those southern Democrats leaving the Democratic party and becoming Republicans. Like Strom Thurmond.

https://en.wikipedia.org/wiki/Strom_Thurmond
I've heard people recommend Raccoon in the past but my phone is something so vital that makes me worried about stuff breaking (the combination of using a lot of 3rd party parts like MicroG, Racoon, apkmirror, ...).

I wonder if it's possible to dual boot without root and also keeping encryption on, that way I can have a safe option if anything breaks.

Damn, why is it so hard to have control over your things these days. It wears me down.
Everyone has different needs. My 95 year old father is really into videography and 3D animation so he uses a max-out Mac Pro desktop. For me, I sometimes need large memory and a lot of cores, so I keep a beefy VPS handy. The actual computer I use is less important.
Aliasing the sudo command? Are you serious?

I dont even have sudo, let alone if I had it, I wouldnt use its dumb caching of credentials/session or "ask no password" "feature".

Just because my system is single-user doesnt mean I run every process with that one user, in fact I run firefox as its own user, chrome has its own, mpd as its own user, nginx is its own user and so on. This is basic security practice.

If you seriously think that it is so easy to get root just because you can run a process as a normal user - "by aliasing sudo command", then by all means run everything as root, whats the harm or big deal, right? Why do you even have a user which is non-root?

Why cant sandstorm run like lighttpd or nginx - as their own user, requiring no capabilites, in fact even syscalls can be revoked from them with seccomp and they will still work fine. All they need is socket api, file system api ( open close create), and some others, no they dont need to load kernel modules, ptrace or open_file_handle_at and so on.
The last few commits appear more about cleaning up some of the documentation.

I guess on Jeremy Ashkenas twitter feed he called Backbone "finished" in terms of API and feature set after the 1.0 version. When you look at the contributions graph, its practically non-existent: https://github.com/jashkenas/backbone/graphs/contributors

Add in the Google trends graph compared to Angular and React: https://www.google.com/trends/explore?q=backbone%20js,angula...

Then when you look at the other libraries in the ecosystem, its like a ghost town.

backbone.forms - Open Issues: 172, Issues closed in 2016: 14, Last Release: Jan 21, 2016

backbone.localstorage - Open Issues: 45, Issues closed in 2016: 1, Last Release: Jan 22 2015

backbone.paginator - Open Issues: 20, Issues closed in 2016: 7+, Last Release: Feb 3 2016

backbone.validation -Open Issues: 79, Issues closed in 2016: 1, Last Release: May 8 2015

So not only is interest waning, the creator has called the library "finished" with not much more in terms of features coming and the ecosystem surrounding Backbone has all but dried up. I would be hard pressed to say it still has a bright future.
Take Notes for Blockchain, Protocol, and Software Development
I think that is a good point. If you can codify your security checks, there is a good chance you can write automation to fix them with configuration management.

I think there may be some cases where you don't feel comfortable automating the full remediation, e.g., requires reboot, so separate audit system might be useful. There is also something nice about writing your audit rules, being able to show auditors "this is what we check for", and then running that across your infrastructure. In that case InSpec (http://inspec.io/) might be more useful for writing custom compliance controls.

It would be nice if there was a $CONGIG_MANAGEMENT_SYSTEM_OF_CHOICE module that did common security fixes, and you could just pick and choose which to apply.

On a side note: Holy ^&$% Lynis has a lot of shell! Like a crazy amount of POSIX shell code!