skysight-inc/HackerNews huggingface dataset:
Thanks. It is clear that most organizations don't want to invest effort in doing what is right. If there is some ready-to-use extension/service that is proven to help, maybe we can convince the browser developers to include it in their default installation.
PoC Exploit for Nginx packaging on Debian-based distros [video]
I'm an adjunct instructor. I'll do it for half that.
Isn't how certain uranium refinement centrifuges were compromised? USB drives entering a building contrary to security rules.
Batch attacks: https://blog.cr.yp.to/20151120-batchattacks.html
Onboarding non-US users to Facebook (Brazil & India particularly) & using address book contacts & metainfo from encrypted communications to create social graphs.

I've never really understood the argument of well its Facebook so obviously they are lying. They are getting a lot of value out WhatApp, and the blowback on Facebook would be pretty significant if they were lying and found out.
The email doesn't say that Stripe has stopped supporting Alipay. It says that Alipay doesn't support your merchant category anymore.
Have you considered highly targeted value based cold emailing?

The HN community may be weary of sending / receiving unsolicited email but if you provide massive value upfront and only contact prospects who would get 2x+ ROI from your product/services, you will not be seen as spam and will convert a good % of the prospects.

I've run a lot of these type of campaigns and the key is to:

A) Only target prospects who have a real need for your product/service and have the budget for it

In your case, I would go on different grant websites and add their grant recipients to your prospect list. This way, you only target organizations who actively use grants.

B) Do a bit of work for them to provide upfront value in your cold email

In your case, research a list of grants they're eligible for (you can share the same list to nonprofits in the same space) and provide unique insights about these grant givers are looking for based on your experience. Your value upfront + value ideas will open the conversation and naturally lead to prospects asking about about how you can help them.

You can get an idea of what the initial email could look like here: http://www.artofemails.com/sales-freelancer#writer
I'm the OP, I run a SaaS that uses Alipay via Stripe.

I only have a few customers on Alipay (aprox $200 MRR) so not a big impact I suppose. But very short notice and a bummer.
I often read people complaining about library size, but is there any numbers about the actual impact on the user's perception?

i.e. how many milliseconds are we losing in parsing time or download time?

I imagine it may matter in a mobile browser but for a desktop app my intuition tells me the difference is not noticeable.
You're operating off of an observability bias. The ones who spend all day writing op-eds in the NYTimes or WSJournal are more likely to be using a thin veneer of economics to shill for a particular policy.

The ones doing actual actionable economics are publishing and working on policy in non-sexy journals you're never going to stumble across. Or working in invisible, non-controversial advisory roles.

So yes... the economists spend their lives _not actually doing economics anymore_ are probably pushing politically motivated actions. Shocking! Scandal!
Even better if you have a circular bed, no edges so long as it is at capacity.
Hmm, I always assumed bugs bunny was a hare.
How is this attack meaningful with the random AES keys generated by the TLS KDF?
Mapping GraphQL types to Swift
"Once a merger is approved, nobody studies whether the consultants’ predictions were on the mark. The Department of Justice and the Federal Trade Commission do not make available the reports that justify mergers, and those documents cannot be obtained through public records requests. Sometimes the companies file the expert reports with the courts, but judges usually agree to companies’ requests to seal the documents. After a merger is cleared, the government no longer has access to the companies’ proprietary data on their pricing."
Or just get a Thinkpad or Inspiron where the hdd, DVD drive, wifi card, battery, and ram all just snap into place. Apple has never been good at that, but in return you get a bit more solid (physically) piece of kit.
True, will update the title! (I don't know what my merchant category is btw, it's not listed anywhere on my stripe account)
Do you have any evidence you can provide of concrete behavior showing Bannon as racist?

I don't mean responses like "duh, CNN, Maher, Oliver, etc. say he is so duh", or "duh, he was the editor for Breitbart". I mean actual behavior that you can point to.

These accusations come off as "He plays for the other team, and calling him racist will marginalize and demonize him, so that's what I'll do". Willing to be proven wrong though.

Edit: curious, why downvote this instead of actually providing evidence?
Not to the user. The internals are a black box, and what's presented is taken at face value. But

In poker the user might expect the presentation to be based on probability (52 choose 5) and the 2nd example would result in more near misses than expected, exploiting the effect of a near miss. In slots there's not really such an expectation rooted in probability beyond what the machine presents on screen
> What's the place for Rust in the market?

A language that is better than C that isn't C++.

Calling C++ a single language is like calling Chinese a single language. The various dialects share characters and that's about it. :)

C++ is at least 3 fundamentally different languages over the course of 20+ years. The C++ you would write to the current standard looks vastly different from the C++ you wrote even 10 years ago which itself looks different from the C++ of 10 years before that.

The problem is that even if you only write the modern stuff, you must understand the older stuff as your libraries are often written in it.
>> Fairytale/Sexual Preference/Religion/Red Hair == Does not affect other people

Yes, it was. These things do affect other people. Negatively? That's a subjective opinion, but all of these things are unique by case anyways. What do I mean? The fairytales of one person may result in some delusion that affects their family and relatives, and they abandon their social responsibilities to chase the white prince/queen/whatever. Also, one's religion has an affect on one's actions. If your religion says "kill the infidel", then complete adherence to such religion endangers others.

I'm not arguing that people should be registered, but the idea that ideology != affecting people is incorrect.

>> I'm sure in this oversimplification I made bad analogy.

At least you can admit that. That's more than some people can say. +1
Unless they've updated this, they can but don't by default.
Is there an API that does anything like this?

As in: Converts primitive doodles into a guess of what it is?
That's odd given how easy it is to shim the Linux/POSIX socket API - most of it anyway - on Windows. I made good money back in the day by writing server software that had to compile and run on both Windows and Linux (actually it was never deployed on Windows, but on an embedded Win32 compatible OS, but they were planning to move to Linux, so I did all development on Windows, tested on whatever embedded platform they used and Linux) - the "compatibility" layer was a few dozens of lines in a header file.
This is a pretty good website and they also have a proprietary algorithm to determine the political spectrum of the source: http://www.allsides.com/

NYTimes is ranked moderately liberal while Fox News is ranked right (http://www.allsides.com/bias/bias-ratings)
I don't get what you're saying here.

- Without Rust you program to protect users assets without guaranteed memory safety.

- With Rust you program to protect users assets, with the addition of guaranteed memory safety.

Sounds like a win win to me.
Good point. If it works, maybe we can convince browser developers to include this as default similar to how security is done. We are putting more effort to secure our computers than securing our minds. Even if I were aware of being in a filter bubble, it takes time and effort to get out of that. We need to make it easy.
Well um, this is disturbing. Fun times!
The ad industry will never be "transparent" (i.e. clear and colorless), because it has falsifiability issues. Transparency would mean that they admit that most of the industry is based on guessing, that there's no science behind huge commercial transactions.
As far as low-tech tic-tac-toe "AIs" go, this XKCD map is my favorite:

https://xkcd.com/832/
Like I said, with Microsoft's help Wine could be awesome.

NT might be decent but it's not great. Why waste resources on it when they could be put to more lucrative use?
Sleeper photovoltaic cells?
> This isn't the limitation of free speech

I'm not talking about free speech. This is a company that didn't censor <x>, deciding to censor <x>. I'm sure the users that discussed/read/were-interested-in <x> will be thrilled. That is all.
Sorry, can you elaborate? How are lifecycle methods useful for updating the screen when data changes? Component lifecycle methods are componentWillMount, componentDidUnmount etc. But my data may change at any time, and I want to update the screen when my data changes, and I can't wait for the next component lifecycle method invocation.
Uhm, you're saying GNOME, the GNU Network Object Model Environment, isn't GNU?
PoisonTap hacking tool can compromise any password-protected PC
Mission Improbable: Hardening Android for Security and Privacy
Wow! You've got my attention!

I mean, I feel many rust stuff (crates/dev/tools) seems to focus on high performance web so, as a low level guy enjoying bitwise ops and dynarec stuff I was wondering if rust what a good thing for me or if it would be better to stick in C. Can you tell me which kind of project you do in rust, what was your original language and why rust shine compared to your previous language?
Right on. Thanks!
> when you can run javascript on a pebble watch it blurs the boundaries

And yet Javascript can't access a network socket or my flash storage in any useful portable way.

Javascript is hampered by everybody trying to bolt on "security" after the fact and basically hobbling usage of the language.
Shopify erased our store
Yeah, it was a bad example. A better one: Preact lets you specify HTML classes using "class", React requires you to use "className". So it would be easy to trip up on that dev/prod difference.

EDIT: damn it, that's a bad example as well, because it would work fine if you use React for dev (which takes className) and Preact for prod (which uses either).

I still think it's a bad idea, though.
I signed up early on as I have an old OSS project that supports MySQL/PostgreSQL and MSSQL. I had originally tried to set up a full CI environment using Vagrant, but automating the Windows/SQL part became so much of a pain I gave up on it.

I'm really thankful that they released Docker containers!! I was planning on moving the entire CI system to Docker anyway and this totally fits in, plus it's super easy to accept the EULA and run the evaluation container.

https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-...
A quick look at the list tells me you don't know what you're talking about. First one: using cell network and GPS for more accurate positioning.

That has nothing to do with Linux or Android directly, and everything to do with ANY CELLPHONE.
Okay, but outside of self-serving fantasy, how does Trump getting elected relate to that?

Except for the odd wealthy white nationalist exception, it's Washington insiders and lobbyists all around.

Seems to me you bought a can of snake oil.
Javascript being bad does not make PHP any better.

There are more than 2 languages available for backend programming. Some even get both templating and IO right.
objects are just a feature of FP, pure object oriented programming just seems like the next buzzword OOP people are good at making; I for one would love to put "experience in POOP" on my resume.
Nasty Gal: What Went Wrong?
Thanks for the kind words and feedback! We are very interested in exposing Realm in the browser, especially in the context of Realm Mobile Platform to sync with mobile devices. However, right now we don't have any specific details. The Node.js SDK is first step in that direction since it can power REST API from Realm data.
Change that to opening a box of boosters. Same thing. "Open package, sporadically receive reward."
> Apart from the fact that his hosts, his own legal team, and Swedish prosecutors have all publicly vouched for having interacted with him in the past couple of days and even Pamela bloody Anderson has met him since his last "proof of life", none whatsoever.

Links? PA met him over a month ago. I have not seen the prosecutor state she has met with him.

> there is not cryptographically sound proof that I am alive

Well, to my knowledge you aren't being hunted by state government. You also didn't publicly state, build, and confirm a contingency plan and take pains to cryptographically verify most of your disclosures.

I am again not speculating further. I am stating that despite his extremely precarious situation and his quarters being in a major city literally surrounded by reporters and with a balcony and windows he has not made an appearance despite tripping of his deadmans switch. Further, he is a pretty arrogant guy so I would be surprised he wouldn't be not only commenting on his successful influence of the election, his potential to exfiltrate himself from this legal mess or just generally make some statements, it is seeming as if he is no longer able to do so.

When your dead man switch goes off, and you have encouraged people to verify your identity in this scenario, it is pretty fucking weird there has not been cryptographic proof. Believe what you want, but clearly something is amiss.
Sometimes unwrap is the proper error-handling behavior.
Steve Bannon Suggests There Are Too Many Asian CEOs in Silicon Valley
I attended a private (nominally Christian) liberal arts college and I find that I do agree with you on the suppression of discussion that many people found disagreeable. That's a legitimate problem.

I was a member of a free thinkers group there and we were derided for being open atheists/antitheists on an "inclusive" campus. I think there should be places for open discussion that makes us uncomfortable especially on college campuses.

And while I do find demonizing people and shutting the door to conversation to be morally reprehensible, I find demonizing people and basing policy on such demonization to be worse.

I too hope that we can have conversations about controversial ideas (I hold many of them myself), but I don't think saying eliminating safe spaces is a way to accomplish that.
G2A CashBack Code and Coupon (Up to 52% OFF) – Gamer Bargain
Well, that's my point. If they aren't replicating the study, then that's wrong. It's like only validating input on the client and not server-side. It would be much more difficult for a company to fake both FDA results and their own.

And public health is what's at stake here, so there should never be enough tests.
Just tried this with HTC Vive. One of the best VR experiences I've had.
48 Hours in Facebook’s Unreality
Best Prepaid Cell Phone Plans
Thanks! It seems interesting. The problem I see is that - it's hard to pull people away from their news sources to something unbiased. We need to take unbiased articles to the people. Also, journals shouldn't be the only source. Every side needs to be heard and someone's voice may come from their own blog. I am not sure how it would work but we should at least give it a try.
Totally. I love when people make public bets. One of the episode ideas I drafted was along those lines re: AI.

What topics would you want to hear discussed?
So Airbnb founders for their grit and determination -- maxing out all their credit cards and even started selling political branded cereal boxes to keep the lights on.

Dollar Shave Club on their growth strategies -- how they posted a product video which went viral and got started their business.

I know, these are the success ones but would also love to hear from founders whose apps/startups did not work out.

Again, it is great to see someone from HN getting this involved in getting suggestions and feedback. Thanks.

Looking forward to the podcast.
It suffers from the same problem as Radar anything that needs to broadcast is easy to hit. Awacs aircraft for example are an evolution of this concept.

The first obvious solution is to have a separate unmanned 'pod' that's easy to replace. But, a manned and self contained truck even with armor based on this design would be a really dangerous place on a battlefield.
Wow. You are why united states citizens have such a bad rep overseas. For the sake of the good people of the US im glad you will now only travel in VR
So you're comparing a touch bar, which has already been done before and met with the exact same pushback, to a radical new form of transportation? Fanboy alert.

This is the next Apple Watch in the making.
From memory there is a related key attack on AES256 with complexity 2^99. So in that regard AES128 is more secure than AES256.
> I think they are magically 100% effective.

No, they are not. Even a continuous, zero-hole metallic bubble will leak some radiation inside, depending on frequency, nature of material, wall thickness, etc.

Start here:

https://en.wikipedia.org/wiki/Penetration_depth

then continue reading about absorbance, skin effect, etc.
Does "objective" here apply to the reporting or to the assessment that it's high quality?
The latency problem isn't caused by determining what to free, the latency problem is caused by actually freeing. Imagine an array with 2^31 pointers, and now fill it with with 2^31 distinct pointers to the remainder of the 2^32 bit address space. When that array goes out of scope, you can now enjoy 2^31 individual free operations, because reclamation for Rust lifetimes and reference counting are both proportional to the number of dead objects (copying collection takes zero time in this case).

If bounded latency is a goal, you have to bound the depth of of your ownership graph if you're working on a platform that doesn't impose global latency properties. C/C++ and Rust do not do this.
It would be nice with an SSL Labs Beta site that let you test your site(s) according to the upcoming grading rules.
This is not true. For example, consider this code:

if foo.is_some() {
let foo = foo.unwrap();
} else {
// other code
}

Here, I _know_ that foo is some. The extra error message from expect will _never_ be seen.

Now, this is a contrived example, and would better be written with `if let` in today's Rust, but this is the _kind_ of situation in which unwrap is totally, 100% cool, but the compiler can't know.
The sales and marketing tactics used by top B2B companies
I agree, I just tried to use an RDS instance that is within a VPC and is only available there. I am not able to use this RDS instance, unless I make it public, which I am not overly willing to do.
Quite fair! Thanks for elaborating.
HP I think it was just an example. In fact all platinum members pay $ 500K [https://www.linuxfoundation.org/about/bylaws] to be able to join the meetings and being able to participate in the ballotings.
Sure, but the question is how wide the "unsafe" boundaries are.

If I'm writing an application that uses the network in a standard way, I should be able to write a program with NO unsafe blocks.

As always, things have bugs. Rust, itself, may have bugs that get exposed over time once adoption starts to increase. Rust gets some "security through obscurity" for the moment.

Once they start pushing Rust code into Firefox, that will change dramatically.
The article should have been titled 'ember tooling vs react tooling' I guess. The explanation is only about the tooling rather than the framework. Good write up though. Intriguing to try Ember this weekend!
Or simply "Da Vinci" when using the nearly ubiquitous colloquial reference to the same individual.
Isn't if let similar to Swift's if let where it either unwraps safely or does something else? I really wish I could disable forced unwrapping as it mostly leads to mistakes by less experienced or overconfident programmers and the amount of extra code by using guard instead if you program smart is negligible.
Doesn't install on OSX 10.7 - not exactly a surprise, but there aren't any system requirements on the download page that I can see.
Note that this only is available to high volume senders (https://developers.google.com/gmail/markup/registering-with-...):

> Consistent history of sending a high volume of mail from your domain (order of hundred emails a day minimum to Gmail) for a few weeks at least.
Best analogized with computational astrology... Oh you used numbers? Then astrology must be great source of advice.
I think this would be particularly useful for Sandstorm applications. Since Sandstorm's grain-based model means that you have many small databases instead of a single big one (or a relatively small number of big shards), an embedded database like Realm seems like a particularly good fit here. I wonder if kentonv or any of the other Sandstorm developers have any thoughts on this.
Does HN no longer hellban accounts?
unwrap is proper error handling. It says "Try to do this. If it fails, panic". Its like an assert on an invariant that the compiler requires.

If my script depends on a database connection, I might connect to a database and unwrap() it so the script errors out if the database isn't available. If I wrote that logic myself I would just be awkwardly rewriting unwrap.
It's not that React doesn't "support" web components. React is a competitive alternative to web components. Custom HTML elements (components) done better, done now and without aggressive browser shimming. My understanding is that a significant driver for an alternative to WC was Facebook's view that no server-side rendering made WC a complete non-starter within the company.

Competition is good for the web.
Make sure they are using Typescript/ES6. JavaScript still has some oddities in behavior but I actually prefer some aspects of the language design now compared to python.
Makes sense! Have you seen http://www.chriskrycho.com/2016/using-rust-for-scripting.htm... ? Maybe something like that can be of inspiration.
> Dark patterns are a growth industry.

Like cancer.
I can't reply to steveklabnik for some reason. But I think if let would replace that unwrap he uses there.
It seems that you don't understand what safe spaces actually are. Safe spaces are places where marginalized groups such as LGBTQAI, racial and religious minorities, etc can express them selves without fear of violence
Here's a direct link to a PanoMoment - https://www.panomoments.com/m/grand-central
A USB port. I don't want to have to hunt for a dongle so I can plug in a thumb drive or a mouse.
Your idea is just that - your idea.

Term safe space is being perverted by people who can't cope with feelings caused by reality of every day occasions - they're "triggered" for every thing they feel non happiness.

It's a direct result of being pampered from primary schools on with "everybody is a winner" trope. America is specially obsessed with happiness and if somehow someone is causing icky feelings, these people scream about "safe space" - it's what they've been let all these years anyway.

When a YALE student can't debate with a proper tone with the teacher: https://www.youtube.com/watch?v=V6ZVEVufWFI
there is close to none twist in them, apart a couple, you really know where they are going
The latest episode of the Tim Ferriss show is a 2 hour interview with a Susan Garrett, a dog trainer and agility competitor. As a dog owner and someone who as gone through some dog training, and also as a new parent to a human puppy, I found it quite interesting and thought you might too.

http://fourhourworkweek.com/2016/11/14/susan-garrett/