skysight-inc/HackerNews huggingface dataset:
The US has at least one mechanism against that: the first amendment. Content and format are both matters of speech, so the choice of format and the decision to broadcast noise as a statement are both protected.

I expect that will come under attack, but it's a very fundamental part of US law used unambiguously. So we might also see civil war 2 before they get that legally changed.
Here is the news coverage: https://techcrunch.com/2016/11/22/shopifys-experimental-prod...
Respect your point but... Alcohol is a physical item, pornography is just data. We're going all out to make data freer because of all the benefits that brings. Are kids going to see information you didn't want them to? Hell yeah.

It goes way beyond porn though, if we allow gov to block anything it doesn't like then we're on a road to a bleak future (hint: we are already).

IMHO it's far, far better for families to actually deal with this new reality by being honest and educating their children. Honestly, I try not to really worry too much.
SQRL Presentation Slides [pdf]
It's simply horrible to work with. It's a mystery to me how people actually review code through that cumbersome interface. Tracking a larger patch series is just painful, and I usually had to use other tools for doing the actual work. To me, Gerrit is not a tool for doing reviews, but more like a bureaucratic behemoth from project management where you have to click the right buttons and fill out the necessary forms, so that things somehow get merged. It's more like applying for a mortgage or doing taxes.
It actually works as comedy! Try reading it out loud at dinner parties.
> All my encrypted traffic to my overseas based VPN will be logged (legal). Then you'll demand my keys so that you can decrypt it.

If the VPN connection uses ephemeral keys (IIRC, at least IPSEC, SSH, and TLS 1.3 always use ephemeral keys, while older TLS uses them when possible), by then it's too late: the keys are gone.
The UK rejected requiring identity to purchase a phone since that just means criminals steal a phone, when they know they'll need good anonymity.
Google's DeepMind and Oxford are working on a lip-reading system
You're right. It still works in Chrome though...
> How many native apps are even compiled natively? Webasm actually has the potential to be faster than many native apps at the same time.

If non-compiled native apps end up slower than web pages, they'll start using webasm as well.
I'm all for any kind of advances in cancer, but if this is focused on deep learning won't the process be kinda black box.

use xyz therapy on abc type patient with edf symptoms...why?...not sure...because the computer said to...
I skipped the section "Enjoying the ride" since I get motion sickness when I read in a car :(
>...it establishes a dangerous new norm, where surveillance of all citizens’ online activity is seen as the baseline for a peaceful society. Collect evidence first, the government is saying, and find the criminals later.

Sounds like something right out of 1984. Who is Oceania at war with again?
Many people would not be permitted to attach their social accounts. My workplace requires that we associate our accounts strictly through things they will be able to access after employees leave (IE a company email address).
I hate it when law enforcement just assumes that everyone is a criminal and just gathers a bunch of data and searches everyone. This is different because they are targeting a group of people that they already know are guilty of a specific crime
If you are on the fence on professional proofreading due to cost, I think that a thorough review by a native English speaker (maybe a good friend) that is at least somewhat technical would be enough to correct a lot of the issues.

I find the way you write enjoyable, free-flowing and absolutely understandable, but there are quite a few instances of expressing things in an subtly unnatural way, which detracts from the otherwise great experience. Perhaps this isn't the best example (and some things are subjective too), but to illustrate what I'm saying:

> You’ll even know how to show your CPU usage and memory via the status line.

I would rewrite that to:

> You’ll even find out how to show your CPU usage and memory via the status line.

Or even better:

> I'll even show you how to display CPU and memory usage right at your status line.
> Any serious criminal/terrorist will use a VPN

Or just plain old stenography in very public forums.

Basically impossible to detect.
Delphi is still my favourite ever development environment even though I haven't touched it for over a decade.

IDE power, the VCL, amazing documentation, rapid builds, clean OO language, it had it all.
> "It’s mad that we regulate such material that aren’t even criminal acts," said Prof Clare McGlynn

This summarizes the UK at the moment.
We, The Citizens, obviously.
Millennial discovers budgeting

Blog post at 11!!

I track all of my spending. I spend $0.088 per day on ground coffee, of which I drink 500ml every morning in the week and two extra on Weekend days.

That's over £2 per month !

Starbucks sells expensive boiled water.
I've made the same set-up us well for private services hosted on public IPs which we couldn't put behind a VPN, but I have to say admit this process is not without its own pains.

Nginx for one, didn't have client-certificate support for proxying until fairly recently, and many HTTP proxies and tools still don't. Even when there is support, you might run into some interesting corners cases, since this is a niche functionality, e.g. if you combine an Nginx with an Azure-hosted web app. Both work great in isolation, but not together, do to the strange tricks Azure is doing with TLS renegotiation.
Surely self-incrimination laws make this a non-starter?
Remembering Condé Nast’s Holiday Lunch: Fake Smiles, Blowouts, Social Terror
that would be a good system to add to google glasses...or tiny drones with cameras...
I wonder if we can mitigate this by rolling keys regularly. Daily perhaps? As far as I know there's no requirement to store encryption keys personally, only to give up the keys on request if available. Something that you can't do if you never store them on physical media.
An elevator door must always be closed prior to going up or down in a building.
Pip will sometimes install from Pipfile, sometimes from requirements, sometimes from another command line argument. What if both Pipfile & requirements.txt exist?

Requiring a user to say what they want from a command line tool (that takes barely two seconds to type) is hardly an exhausting task.
Yup. My VPN takes cash in the post.
IANAL. But in general yes. I have sold 2 different companies and with them the Twitter, Facebook and Linkedin pages, names etc. My attorney said as an asset of the business it is legally transferrable to the new owner, and in fact it usually must be transferred.

I am sure if you read the T&C's of each of those sites there will be a statement along the lines of, you are not allowed to setup names/pages for sale. If there, that statement is to prevent "name squatting" not stop a legal transfer of control over an entity. I think it would be nearly impossible for them to prevent the legal sale of an entity and therefore the assets that entity has, nor IMO would they really want to get involved.
Intern Jobs in Australia
Also that language Jonathan Blow is working on https://www.youtube.com/watch?v=HLk4eiGUic8
Agreed. Listening to movies without watching is generally enlightening. I drove Scouts in a van with a TV for the passengers, for years. I heard lots of movies without seeing them. So many are crap. The only one I remember that held up was Liar! Liar! surprisingly. Intelligent dialog; engaging and well-written.
Buddy looks nice as service, nice job. It doesn't seem expensive so that's also a bonus, I guess the real test is the reliability of the service.

How long have you been working on the service?

Also, sorry for this, but my OCD is taking over:

> Wait, their could be more // their -> there

> your Pipeline got you covered // got -> has (unless you want to use slang, which could be an option)
Schiaparelli landing investigation makes progress
Sounds like a great plan, enhancing skills in a cool environment!
The fact that we keep re-implementing ideas like this means that there are a lot of valid use-cases for this kind of tool. The same applies to (JSON|XML)RPC, xpath|jq, and schemas. There are even folks currently developing namespaces for JSON!

I think it's human nature, as often as I see it repeating throughout history (and not just in the tech industry). Just wait, there will be a new JSON just over the horizon which will close the circle and bring back a very simplistic serialization format with a minimal number of built-in structures.

Perhaps it would be better to create a C++ of serialization formats, all the features out of the gate, so you can pick and choose from the beginning. Again, I think human nature means we can't go back to XML (too much horror associated with SOAP and WSDL), or even continue with JSON (custom and subtly incompatible parsers being built around the core to handle missing features).
Show HN: Diabertie – Your personal diabetes chatbot
You can use the <embed> tag to do that and it will largely work, or at least it used to.
The Manhattan Project Fallacy
Hi all, I launched Intern Jobs on the 14th November directed at interns looking for positions in Australia. I value all your input! Thank you, Kosala
It already does that
> When the Australian minister for communication introduced record keeping laws for ISPs he encouraged people to bypass it using VPNs. Said thats what he was doing.

Do you have a source for that? If true I find it very bizarre.
When a non-doctor tells a doctor what to do, that's sort-of trying to practice medicine without the requisite training, skills, and license.
They actually didn't target any people at all. They targeted hardware that some people potentially used for a crime. Other people (in the same household?) could have had legitimate privacy concerns.

No its still blanket invasion of privacy.
Jpeg2000 is sort of an open standard, but OSS doesn't and can't use it because it's patent-encumbered.
I loved geocities too, and I always wished I"d had a CORS backend to call from my HTML pages. I built a service specifically to be a CORS backend for neocities. You can signup, and start making CORS calls from your neocities pages to a sqlite database on my service. I tried several times to contact the owner of neocities about this but he never responded. Since then I implemented static file hosting and pivoted to a "Single Page App One Stop Shop" model. We offer custom domains and free ssl (Lets Encrypt) for early adopters. Link in my profile.
How an attacker sees your website
I've said a couple of times that new language designers should thank their lucky stars that C++ has set the bar for "fast compilation" so low. Coming out of the gate with a compiler that's "faster than C++!" is pretty doable even for a relatively compile-time heavy language. If you had to come out of the gate with something as fast as Delphi to be taken seriously, we wouldn't get very many new languages.

(I mention this in the context of my observation that the minimum bar to be taken seriously for a language is going steadily up. You certainly need a standard library that is powerful out of the gate, whether or not it is necessarily "part" of the language, and we're getting perilously close to the language being required to ship some heavy-duty HTTP stuff, possibly a server implemented in the language, before it stands a chance. Rust may have snuck in under the wire on that, though of course that stack is developing apace even so.)
Thank you, we'll definitely fine tune as we learn.
I use telegram on a day to day basis, but calling it "secure" is quite a bit of a stretch. But it is quite possibly the best app I have used in regards to user expetience.

But until signal actually produced a usable (to the average person) app, people will continue to use telegram and other insecure chat platforms.
Unfortunately in the UK you can be prosecuted for not handing over an encryption key the authorities think you have:

http://www.theregister.co.uk/2008/10/14/ripa_self_incriminat...

It is up to you to prove you don't have it anymore too.
True. But they actually sell a service, right? We all pay for services and like it. In fact America has been called a 'service economy'. Software folk could be said to be selling electrons or something.
It's a suspension, not a deletion, which implies it's possible to resume the account. It seems logical that the state of the account would be entirely preserved for later restoration.
On the downside, it's just a loop of Bender saying, "Kill all humans." Kidding aside though, the last bits of the article seem to spell out a future in which, for better or worse, we don't really understand what's under the hood, completely. What exactly is the implication, crazy extremes aside, of systems which essentially build their own black boxes?
You can find roughly that here, unfortunately mixed in with everything else though:

http://perf.rust-lang.org/
Show HN: Golang fixed versions tool for your private and public dependencies
Great Resources to truly understand what growth means for a startup
I don't see any reason why jquery should have been in the original library in the first place and you can still use jquery on the front end with this, so really a good improvement. kudos!
The feds gave batteries and rooftop solar panels access to energy markets
I have no idea whether you truly are 75j, but if you are your comments are getting way too bizarre...
Got it, we'll revise it sure,
We've been using client certificates at MIT for more than a decade. Many people like them. But, most people hate them. As others said, the usability is the primary issue.

The specific issues are:

1. You have to install a client certificate on every device you want to use. And, you have to keep that certificate up to date. If you use multiple web browsers (for say UI development testing) you have to install and maintain the certificate it each one. MIT currently issues client certificates with a validity period of slightly less than one year. That makes for a lot of lost time every year for students, staff, and faculty, spent re-installing client certs.

2. The certificate can be stolen just like a password. But, there is no easy way for the client to revoke a stolen certificate. Many CRL list implementations are lacking or fully absent. There for, organizations that depend on client certificate authentication typically depend on certificate expiration to re-secure compromised client accounts. (See #1 above)

3. Client certificates are not supported by all web servers. The major players support it pretty well. But, there's been a proliferation of specialized, micro, and nano web servers over the last several years.

4. You have to invest in securing the signing key for the client certificates. This usually means a decent HSM which costs on the over of $x00,000USD. At MIT for example, there is a web site where anyone can go at any time to generate a new client certificate (again, see #1). This site needs to be able to perform signatures constantly which means the signing key needs to be accessible 24/7 online some how.

5. Proxies are a problem. If you try and terminate the TLS connection early, the client certificate related operations are not "proxied back". Some proxies like HAProxy will allow you to pass back environment variables set during the client certificate authentication process. But, that is obviously not the same as having the final destination webserver performing validation. This has become much more of an issue with the invention of ClouldFlare's TLS proxying CDN.

6. If you implement logic to expire certificates at the end of a customer's subscription or enrolment period, it can cause significant headaches with processes where it would be helpful to still be able to authenticate them. For example, if a customer's subscription to your SaaS site expires and you want them to be able to review with out inadvertently sharing details of their account with others. Or, if a student has graduated but they still need to pay some unpaid parking tickets. MIT runs into this issue often due to its use of client side certificates. If you extend their certificate well beyond the end of their system authorization, you have to put a lot of complex authorization code in all of your local apps and websites. While client certificates only provide authentication and not authorization, many implementers use client certificates for both simultaneously. This is especially true when protecting web content and web sites with client certificates.
I've seen NSFW posts show up on /r/fountainpens - which I'm sure would be enough to cause problems for Reddit under this law.

How is the internet used? By Adults, by a broad majority. And adults have been drawing penises and breasts on cave walls since the beginning.
> they will have to outlaw inability to decrypt.

The UK's already done that - the Regulation of Investigatory Powers Act 2000 already made it an offence not to divulge encryption keys when asked. [1]

1 https://wiki.openrightsgroup.org/wiki/Regulation_of_Investig...
We should worry more about Obesity, which kills 300,000 people each ear in the U.S. alone, and costs nothing to treat. Just eat less. Start taxing fat people and make money until the problem is solved.
Or what if someone, say on an innocent blog, places an invisible iframe pointing to a flagged website? Now every visitor has that website in their logs without ever willingly visiting the URL and seeing any of the content.
I've published letters in The BMJ so I am familiar with the audience, which is worldwide - particularly the letters / editorials.

I don't disagree in any way that policy reform is badly needed and the war on drugs has failed: My point was more that the messaging seems to be very conflicted these days for physicians in the United State. To me - as a layman - there appears to be no "middle ground" for both policy reform and bringing the opioid addiction under wraps. That is the disparity I am trying to point out and what I find to be conflicting / frustrating.

If there is a middle ground I'd love to hear it.
Here's a way to by bypass that- point the FF dev tools soley at the iframe, then use the scratchpad to run the alert. It will accept that and let you move past.

I spent 20 minutes thinking I had something horribly wrong until I read this comment.

(This works in FF 52.0a2)
There is a third option: that 1B Chinese are given uncensored access to FB.

By implementing censorship FB will make such option even less likely to happen in future.
Python and Django vs. Ruby and Rails
Well you will get the same effect if, as I said, if your lotion is some combination of neosporin, Vitamin E and burn cream. Though cutting free aloe plant is more cost effective. Anyway good luck rubbing lotion on your grease burns and sunburns...maybe try that instead of sunscreen too.
Well, in reality, probably not. I was pointing out that homeopathy was originally 'fighting fire with fire'. Or at least, that is what the word means.
Yes it does, and it's evil when HN does it too.
Is this looking a lot like Angular 1.x to anyone else? I've heard it's actually more similar to React but I'm not seeing it... ?
This is epic. As a former-digitaloceaner I know how much work went into building the community (the community director at DigitalOcean is incredibly good at her job) and how well it as served the business. If you have the ability and time to build a community around your product, I highly recommend it, brand evangelists are something you simply cannot buy.
NASA Didn't Find Life on Mars–But It Did Find Something Very Cool
Every society or community has bans, but the good kind have public or at least explicit bans rather than shadowbans.
If someone has trouble making the exploit work in Chrome: The developer tools replace all ' with " if you inspect the element. Therefore, it misleads you into thinking that the website encloses attributes in " ", whereas instead it is enclosed in ' '.
I'm using the jquery simpleweather for a chrome extension at the moment. This looks like a direct replacement. I'm using jquery elsewhere in the extension, but as long as this works the same I see no reason not to switch, one fewer thing to worry about breaking my extension in the future.
You're wrong. This is one of many of my (75j's) older accounts. Scroll up for more details on why you're wrong.

Oh, and I don't need to white knight for anyone because I'm already married to an extremely attractive woman. How's life for you in that department?
I wonder how many of today's 'conventional' sex acts were 'unconventional' 100 years ago?

Maybe we should also put a stop to 'unconventional' music? Unconventional ways of powering your vehicle?

What this gets at is: what is the state's interest in doing this?
I wish for a dream world where every company faced with trying to drum up business in countries known for human rights violation instead focus on putting their own countries so far ahead economically that those latter countries have no choice but to 'play nice'. I'm aware a lot of people aren't fans of cultural exportation but this is just a half-formed thought.
Thank you feedback noted. We'll add email login and fine tune the UI soon
I want to add this here...very recently, my family was looking for a new chatting app to use (I tried to get them to use Slack, but they found it a bit too complicated). I really really wanted to use Signal (even with it not having a bots API), but the fact that you need a phone number to sign up is a no-go.

My question is..why do you need a phone number (which imo is way more personal, than say an email?). Being security focused...would it not make sense to have as much less info on the person as possible?

We have settled on kik for now. (although call support is lacking, i feel like it'll be added eventually)
Re-reading articles about it it seems his comments aren't as cut-and-dry as I remembered:

http://www.businessinsider.com.au/malcolm-turnbulls-sky-news...

> “If on the other hand I communicate with you via Skype for a voice call or Viber, send you a message on WhatsApp or Wickr or Threema or Signal or Telegrammer — there’s a gazillion of them — or indeed if you make a FaceTime call, then all that the telco can see, insofar as it can see anything, is that my device has had a connection with the Skype server or the WhatsApp server; it doesn’t see anything happening with you.

> “There are always ways for people to get around things, but of course a lot of people don’t, and that’s why I’ve always said the data retention laws, the use of metadata, is not a silver bullet. It’s not a 100% guarantee. It is one tool in many tools.”
"Which version of webp should Firefox support?": libwebp

Track the implementation here:

https://bugzilla.mozilla.org/show_bug.cgi?id=1294490

Build with '--with-system-webp':

https://bugzilla.mozilla.org/attachment.cgi?id=8808680&actio...
Or JavaScript. Json is just JS literal.
In defense of deterministic password managers
But is it coördinate or compound multilingualism?
Using AWS with Security as a First Class Citizen
That's pretty awesome, thanks for the tip.
Is it a matter of the interplay between algorithm and mix of data being too complex for a human to know and predict the state? All outputs of the system are still theoretically predictable and reproducible (given the time/resources to reproduce the inputs), right?
When South Africa had partheid, American companies disinvested themselves of the country. At that time, South Africans probably would have preferred to be able to buy Pepsi products. But economic isolation was the right thing to do.