skysight-inc/HackerNews huggingface dataset:
Just FYI, it's good for finding routes/times and indicative pricing, but sometimes going to the airline's website can yield savings of hundreds of £s (I've personally encountered this >10 times this year on non-LCC long haul routes).
With some more testing I found out it only has 1/5 of the functionality in the video. The overall experience is bad, like waiting several seconds after clicking somewhere and lagging animations.
Thank you for your answer, I'll definitely look further into SubgraphOS and grsecurity. I nevertheless believe that the kind of attacks you describe, specially the one against hypervisor in NetVM to break isolation, are quite unlikely in Qubes.

Could you also answer my question about SubgraphOS main use case and threat model?

Is it mainly for anonymous and pseudonymous usage?

If it is designed mainly for everyday use (including non-anonymous use cases like banking, social media, personal/work email, etc.) as it seems to me I don't quite understand the design choice to enforce all traffic via Tor by default. That seems unnecessary as anonymity is not needed and even dangerous.
> much works

Much worse?
Windows 10 "the most secure OS in history" still hides file extensions by default, so that virus.pdf.exe appears as virus.pdf!
From a quick skim, that seems like a very biased account. It leads with counter-arguments from the principles and does not include the more provocative evidence e.g. the triangular sign which matches the FBI pedo alert and they have cropped the images the redditors created to remove the actual evidence linking the owners of pretty much every business on that street.
/*
*	Author:	Avadis Tevanian, Jr. */
*/

Avie Tevanian did go on to leave quite a legacy. He was Apple's software CTO up until 2006 and was responsible for much of the Mac OS X we know today!
Please don't post someone else's personal info. Let's not turn this into a witch hunt.
They're not looking for actual terrorists or criminals. They're looking for people like Occupy Wall Street protesters, who actually pose a threat (ie. redistribution of wealth) to those in power. Then as soon as they do something like pirate a movie, they can be thrown in jail (ie politically neutered).
Operationally, the CEO should probably not have write access to a master DB.
Spoiled food makes no sense indeed. However, what this guy does makes definitely business sense.

People do not care about the truth.

+ Fake news goes viral.

+ Medium tells people that the ones who passed away still love and talk to them.

+ Religion in general.

+ Advertisements about medicines with fake doctors.

+ Advertisements in general.

+ Gossip.

+ Sensationalized scientific breakthroughs.

And then there is a lot not true, but it is at least within a context clear that it is not true, like fairy tales and literature. All the other examples are however disinformation and people doing business using it.
Perpetual Pencil
This might mean a change in the programming industry. A move to a more regulated industry, where programmers must have some sort of certification to practice. Much like other professions, such as accountants, lawyers and doctors.

This will be a hurdle but it might mean better pay and less having to clean up after cowboy programmers pumping out rubbish.
It seems to me that during this election the right got tangled up in many more fake news stories than the left.

One factor is probably that the majority of newspapers (both left and right leaning) endorsed Hillary. If you wanted news that confirmed your decision to vote for Trump, you turned to alternative "news" media. Those were more likely to run fake news.

Another factor is that Trump was actively encouraging his supporters to reject traditional media and was promoting conspiracy theories himself.
Eh. Not exactly the personality fit for running a comminity site such as reddit:
https://www.youtube.com/watch?v=uSVqoW1rz6w&feature=youtu.be...

Pretty obnoxious person to be honest.
Visualise Postgresql explain queries
XAnalyzer Reviewed – x64dbg
> While an abuse of power, I'm not sure I see the outrage.

I don't see it either when something happens on reality TV (direct analog). It's fine and dandy that reddit mods post about liberal values, which is purely political posturing, not technical or legal limitation. That kind of lip-service doesn't mean anything to me...insofar as I'm not counting on it being true any more than a politician making promises about their platform. I'm certainly not surprised (or outraged?) when there are cries for forgiveness after acting against those political statements.
Deseat.me
> this would be only relevant if Fukushima was the epitome of nuclear disaster

Isn't it? I thought what happened at Fukushima was the worst case scenario for a nuclear power plant of its type. What is the worst that could have happened?

Aren't new designs even safer than that?
Irish Police Commissioner broke rules with Gmail use on Police business
Pretty dumb move, he may end up resigning over this. Also there's no reason a CEO should have this level of access.
The politics of Reddit don't really touch most subreddits. Most people are there to talk about their interests and passions.
It would be suicide for them to do that.

Not ruling it out, but if they get caught one time it calls into question everything they've ever released.
Had genuinely blocked it out, my memory being merciful to me.

Tried it a couple of years ago, and it was terrible - bad interface and heated up the phone like it was an FPS. Deleted and got Bernardo Zamora's Solitaire, which is much nicer.
Why an American-Made iPhone Will Not Happen
Some people, when confronted with a problem, think "I know, I'll use Java". Now they have a ProblemFactory.
Flying drones
I can highly recommend Graeber (been working my way through 'Debt'). Not because he's right - I can't tell - but rather because his view interesting and quite different from what I'd heard before.
If you prefer downloading the files the good old fashioned way. ;)

In the browser console:

$('.js-start-download > a').each(function(a, b) {
console.log($(b).attr('href'))
})

Paste the URLs in list.txt and run wget on the list:

wget --content-disposition --trust-server-names -i list.txt
>He wrote one fake story for NationalReport.net about how customers in Colorado marijuana shops were using food stamps to buy pot. "What that turned into was a state representative in the House in Colorado proposing actual legislation to prevent people from using their food stamps to buy marijuana based on something that had just never happened," Coler says.

Amazing.
In the blog post that's an breakdown of ms project, yes. Used to show how ms is doing with open source? yes. because .net framework (and implementation of runtime,compiler/blc) was owned by ms (mono is another implementation of the runtime/compiler/bcl).

But for some components is ok to contribute there:

- mono(xamarin) was already migrating to use open source components like the bcl (corefx) after the initial open source of code by ms. It's like dont write two times the same stuff.

- coreclr: the .net core runtime

- corefx: the standard library (base class library like io etc), used by .net fw (win) and .net core and partially by mono

- roslyn: that's the c#/vb compiler, also mono is trying to reuse that

- cli: it's the sdk for building projects. Can the project system changed? yes, but not needed now (.net core it's boostrapping another xplat runtime so need tools). as a personal note, the cli team doesn an awesome job to make it easy to contribute

and some notes:

- asp.net is a web framework, it's used a lot, nice ppl contribute. who like servicestack/nancy/suave, use that instead.

- fsharp (http://fsharp.org/) was and is already driven by community, and lang decision are in repo https://github.com/fsharp/fslang-design by community and lead by @dsyme

And you should also check dotnet foundation pulse and community projects (like Nancy/Nunit/Akka.net/mbrace).

Lots of the work done by ms can be useful for others, see Kestrel server (damn fast) who can be used by other web projects like Suave (https://github.com/SuaveIO/suave is a lib, not a framework :D)

- dnx was the predecessor of cli, and replaced by it (good job by aspnet team to boostrap xplat on netcore)
You can even use one as a game engine!

http://www.gamasutra.com/view/feature/3563/microsoft_excel_r...
Of course most people don't believe the pedo stuff. However, they're totally on board with slandering the DC power-brokers, especially the ones who exemplify the class-culture of the "liberal elite." That's what this is really about: the attacks on art are the main giveaway.

That's not my read. I think the art is key, but I think the majority involved genuinely believe they have discovered evidence of pedophilia, and consider the art a strong part of the evidence. Consider how the imagery in the Heavy Breathing videos would be received by the authors and target audience of this: http://truediscipleship.com/ten-scriptural-reasons-why-the-r....

One of the discussions that surprised me was genuine concern over a picture showing someone next to a cardboard cutout of the Pope. My guess is that most of the participants don't attend a lot of parties that display potentially blasphemous portraits of religious figures, and tend to make assumptions about the other amoral practices of those who do.
I bet you voted for Trump.
Fair enough. My reason for inserting myself in this conversation was primarily boredom and/or a desire to have an opinion of some kind heard :-).
> How could evidence gathered by police be used in a court of law? It could be fabricated! We are just trusting they found those drugs in that car! They could be from anywhere!

I think this sarcasm is misplaced given the number of scandals surrounding trust in police and the evidence they put forward.

For example, the mishandling or tampering of evidence in crimina labs:

https://www.washingtonpost.com/local/crime/forensic-techniqu...

https://www.bostonglobe.com/metro/2016/11/16/sjc-hear-argume...

http://photographyisnotacrime.com/2016/03/02/new-jersey-lab-...

http://www.theatlantic.com/politics/archive/2015/04/csi-is-a...

And of course there's fabricated police reports and officers lying under oath - http://www.salon.com/2016/01/06/perjury_usa_rampant_police_l...

There's also the tons of Brady violations which are lies by omission - http://www.abajournal.com/news/article/epidemic_of_brady_vio...

A lot of these situations have the same parallel of trust - we trust prosecutors to produce all exculpatory evidence, because it is very difficult to determine that they haven't(since the defense doesn't have access to the evidence like prosecutors do). We trust labs to not tamper with the evidence, because the defense does not have the resources to challenge every lab analysis. We trust police officers to not lie under oath, because they are often the sole "untainted" witness of a crime, especially in controversial police shooting cases. When that trust is broken, it is difficult to rein in the backlash - there is no way to know just how often it was broken in the past without us knowing.
They're both pretty bad.
If you're a state actor (Russia, China etc.) that has a sufficient funding / motivation to take a dataset like this and systematically blackmail people in it for information, it seems naïve to think that those states haven't had this sort of information for decades already through traditional espionage methods.
I'm very sad about it, too. The Metro Design line was a good mobile platform that's being gradually degraded and left to rot.

I have trouble believing that a 90%-10% duopoly in mobile platforms is an healthy steady state for this market.

Probably something else - not as good - will come in and occupy the vacuum.
bro imma let you finish but

"the government should be part of he solution?" Hahah wtf

Bro

the gov't regularly "hacks" all the things(including the internet of things) legally that I literally couldn't give a shit if some random fucktard script kiddie decides to hack my router.

the government literally does it on the regular legally.

that's the actual problem. get a mitt bro.
FOX has never been a "real" source, and CNN isn't that far behind, so your argument sort of confirms what you're arguing against.
Brogue is one of the few roguelikes that kept me playing, and perhaps the first that made me 'get' roguelikes. I can highly recommend it especially to people who don't see the appeal of this genre.
this post is more popular https://news.ycombinator.com/item?id=13027031
How to Negotiate for the Fees You Deserve
I paste a previous comment of mine, from an old HN thread:
https://news.ycombinator.com/item?id=10947013
"RDF has no adoption. JSON is the winner. Let's try to understand why: Because JSON.parse() is instantly available on the client. On the contrary, RDF.parse() (or more precisely N3.parse()) is available on the client only if you use that obscure library I mentionned above. Noone knows the library, so noone uses the N3.parse(). Ok. End of discussion.
Now my own feeling: RDF (and especially its N3 dialect) is the only description language I know of that serializes and deserializes graphs with no specific code, and has a good JS lib for client-side consumption.
JSON (or XML, or any other tree descrption language) requires extra effort whenever you use it to serialize/deserialize/traverse a graph structure. That is why i think they suck. And that's why I prefer RDF/N3."
If you want to use python I would give web2py + intercooler.js a try. It is "good enough" for most CRUD pet projects. Reading here the comments about Django's advantages an inner voice always says "fine, web2py has it too" except the excessive documentation and the weird non-pythonic syntax.

If you want to make something really professional just ignore the words of a n00b.
A little bit of backstory from r/outoftheloop on this issue :

To explain what's happened to anyone not wanting to dig through the threads, Spez, the CEO of Reddit, has admitted to editing some comments on The_Donald. Specifically, he changed mentions of his name in insults to the usernames of The_Donald moderators. According to his comment, he did this for about an hour before stopping. His comment states that he was very stressed over dealing with the removal of r/pizzagate and being called a pedophile for it, resulting in him going out of line and making edits to comments. He also says that he won't do it again, and that the community management team is angry with him.

The Reddit admins have had a strained relationship with the moderators and users of The_Donald, for multiple reasons. For a lot of users there, this validates some beliefs about the admin's treatment towards them, specifically that they make an active effort to censor their content. Other users on the site feel like this sets a dangerous precedent, as it demonstrates the admins can and have edited comments without disclosure. Further users feel like, while Spez made a mistake, he was unfairly treated and harassed by TheDonald and his response was an understandable outburst.

Now, people around the site are wondering what the repercussions of this will be. Some question if Spez will be removed from his position over this. Some wonder if the admins will come forward and admit they've edited comments in the past. Others wonder if a significant population from The_Donald will migrate to Voat, a Reddit alternative.
Well the current statu quo is just unacceptable. A major data breach every week, and that's what is being discovered. I suspect most data breaches are not advertised or even spotted. We are discussing how to best store passwords for when they will be stolen, taking that it will be the case pretty much for granted. And the big players are being hit as much as small fly by night shops.

I just don't see what technological change is coming that will change that. Not only that, but because of the big data buzz, even privacy concerned companies feel the urge to collect and store ever more personal data. How is that going to end well?

I mean the only reason lawmakers and regulators are not all over this issue is because they don't realise how bad things are.
Raising capital for the first time: I challenge you to do worse
User-Friendly Goals Hit with Graphic Design – Design4users
One of the reddit employees/admins leaked Slack conversations... it's all over Twitter now.

https://twitter.com/Cernovich/status/801680245631766528
No... it really isn't. This is abusing power to attempt to manipulate public opinion on a message board. Stalking is a horrible invasion of privacy that has a tendency to escalate into violence. And even when it doesn't, it results in drastically increased anxiety and fear for the person being stalked if they find out.
Sure, but until that happens you've got no idea if Facebook ever showed it to anyone (whether it was shadowbanned by evil foreigners, or they just didn't deign to stick it on anyones news feed).
our government doesn't give a shit because we "hack" foreign nationals/governments so regularly that 130k accts doesn't register as an issue.

it really is child's play
The answer is don't outsource things like this to Booze Muhkidney
Sublime HyperClick: Quickly and easily jump between your required/imported files
Can you buy a TV that isn't internet connected now-a-days? AFAICT they are very few and far between :(
The Brief Guide to Testing Mobile Interfaces
OpenWRT IS a proper firewall appliance and will run on just about anything. I basically have your solution in place already...
A third possibility, one that I find more likely and advocated by Schneier before, is that government regulates the device manufacturers rather than the devices. For example, if a company sold more than X amount of Internet-capable devices, the threat to society will have to be addressed in form of liability and insurance. Insurance companies will then enforce standards and best practices, and economics will ensure that security teams get funded. All the regulation need to do is to limit the scope of limited liability disclaimers.
How to fast forward life on habitable planets? Seeding microbes in the Universe
OverTheWire [0] has been my personal favorite for many years. Some of them are really challenging!

http://overthewire.org/wargames/
I don't know really. I live in the same country you do. Maybe you could class my closet with a PC and a Mac Mini for remote compilation as a local desert of sorts. It gets pretty warm in there.
I had money problems so I started a business
:)
https://en.wikipedia.org/wiki/Avie_Tevanian
I have a good load of OReilly and other publishers books in dead tree format and I find them immensely more practical compared to digital ones. DRM (which would be a stopper for me anyway) is not the only problem but finding a good reader which doesn't require ages to draw a page if contains diagrams, is readable even with multi column pages with graphics (therefore 10" minimum) and doesn't cost a fortune.

Last time I attempted to read The Art Of Electronics on a eink reader it required like 10 seconds for each page, so I gave the reader to a relative of mine who reads text only novels and stuck with the paper version of TAoE.
Wake me up when technology is there.
Wrong. Trump wants more dodgy deals with China and more H1Bs. Clinton is much tougher and wise to China's antics (it's what she'd been dealing with as secretary of state).
What does it mean when you look at that article and get upset that the illustration of the runway includes an upside-down 19? (It's supposed to be readable as 19 from the plane travelling at a compass heading of 190 degrees, south-southwest.)
and 2 sentences after describing themselves as someone "whose definition of "fun" includes spending 6 hours in the middle of the night figuring how to get dual boot working with UEFI."

So the author really enjoys debugging boot problems, but a custom kernel in a VM is just too tricky? Is there something I'm missing that makes that way harder than debugging dual boot?
I don't understand how this regulation will work.

Will all open source software have to be submitted to some government run or approved certification? OpenWRT? Linux? Random App that accesses the net? Raspberry PI python script?

Sure it matters that 1 million IoT cameras are secure and can be updated but what about a million servers running some npm library? Do those need to be regulated too?

I'm very concerned about the security issues but I'm not looking forward to no longer being able to write software because I need it certified every time I add a line.

Are there other solutions that don't require regulation?
Reddit comments and posts have been used in investigations. In the UK a teenager was sentenced for writing some "racist" comment(I'm not saying this is right or wrong, just that it happened).

Just think, the admins have the power to edit your comment as they see fit and you'll have no proof as your comment isn't even marked as edited.

It's a scary thought.
Yeah I agree. Actually I'm not traveling for Thanksgiving. If you're in SF and want to get lunch tomorrow send me a message at charles@geuis.com. Be happy to chat for a bit.
So who should Trump appoint to prosecute people who they judge to have written fake news?

SNL would have been charged just this week.

Its almost like the people who put free speech protections in place educated themselves on power, history and law and then thought about it for a bit.
Aww, that sucks :( Huffman always seemed like a measured and fair individual. I appreciated the way he communicated with the community when he took back the reins.

The act itself seems petty, the larger issue is the breach of perceived trust ... The_Donald finally made the frog boil over. Don't wrestle with pigs, they like it and you get dirty.

I do however have a hard time seeing a better replacement for spez so I hope him and reddit learned a lesson and put some measures in place to ensure this doesn't happen again. Everyone is allowed one major fuck up in my book as long as it isn't systemic, they admit it, and don't repeat it.

This seems to be another sign of reddit isn't quite mature enough both when it comes to leadership and technology to handle the scale of popularity they've grown to. They have all my respect but the league they're operating in provides a new set of unique challenges.

From a technical standpoint, it would be interesting if posts and comments could be signed so tampering wasn't possible and prevent even the temptation of doing so. Hard nut to crack in a user-friendly way though when everything is server-side.
where did you get the source to grep through?
> Of course old-school financial institutions get hacked too; blockchains have some features (good cryptography, distributed ledgers) that make them harder to hack, and some features (anonymity, irreversibility) that make them easier to hack. But I've said before that the main advantage of the blockchain over other ways to store financial information is not so much technological as sociological: It's not that it was technologically impossible to quickly settle financial transactions using shared computer databases before; it's that no one cared enough to do the work of coordinating a bunch of banks to set up the databases. The word "blockchain" has managed to make that boring back-office coordination work sexy, which means that it might actually get done.

Matt Levine, https://www.bloomberg.com/view/articles/2016-07-11/executive...
It's been there since 10.10: https://developer.apple.com/reference/hypervisor
There are few powerful technologies invented in the last 100 years for which the government did not eventually require a license to make or even operate. I do imagine a future where to own a computer that can truly "create" will require a license to own and operate.
I genuinely don't understand why that subreddit hasn't been suspended.