skysight-inc/HackerNews huggingface dataset:
So then it depends on hosting country and viewpoint - since mention of Taiwan as an independent country is illegal in China, for example.

My issue is that I see no reason why they need to grab geolocation data from my mobile GPS device (in the TOS).

Plus, they openly acknowledge that they provide any/all info in the event of what they consider 'legally actionable' activity. Which is SUPER vague. So - there's no point in yet another online network that's just like all the other ones.

We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to respond to claims, legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal or legally actionable activity.
> An additional library e.g. OpenSSL (heartbleed), HTTPS crypto attacks (e.g. beast), an additional business processes that can be compromised both from the CA/issuers standpoint and from the website admin POV, and an additional resource to protect and securely distribute(private keys).

If these things are attacked, your security is not worse than HTTP.

HPKP and HSTS fix the problems you've described.
I disagree 100% with you. I love comments like GP. Any new tool should be considered in comparison to the other tools one might use for the same job.

Is Grafana "barely related even tangentially"? No it is quite related.

Have the creators of Cyclotron considered how it compares to existing tools? Probably, and they should come forward and be open about it.
The amount of hardware issues with the new MBP are kinda staggering....

USB-C issues, GPU issues, image corruption, now this.
Startups that take care of the unpleasant neccessities
Laundry time - fun times? Most certainly not. This chore is one which more and more people find less and less time to do. There's the sorting and changing over. Lets not forget those items that cannot be laundered either, so there is also logging it down to the local dry cleaners, waiting your turn, awkward friendly but not friendly chat only to repeat it a few days later on the turn-around. Tech companies have revolutionized how we order food, get round town so why not this as well. That was exactly our thought at Simply Laundry where pick-up from your doorstep (or concierge) launder/dry clean the clothes and drop off within 48 hours. And apparently its a growing industry, just look at Rinse (and others) in the US and HelloDhobi (and others in India). At Simply Laundry, its our goal to ensure that worrying about doing your laundry becomes a thing of the past. If you're in Toronto give us a try.
Just do it in HTML(with functioning links), not a text document on gopher like this article.
To get an idea of what people might mean when they say that LaTeX looks more professional, see this: http://www.zinktypografie.nl/latex.php?lang=en

Oftentimes, I can (correctly) correlate "weird" looking documents with MS Word or Open/LibreOffice, eg: when reading papers. It's a surprising subconscious estimate and I don't know what throws my sensibilities off! Maybe I'm used to a higher standard of typesetting, or maybe it's just that I'm used to reading LaTeX output. I have heard the same from multiple academics who have spent some years looking at LaTeX output.

I wouldn't be surprised if people spent more time looking at beautiful documents, compared to uglier counterparts. Just like any other UX. As always, the document creator has to decide whether it's worth the extra effort.
Yeh, I imagine another Bezos directive is coming soon. "automate it all or close down!" like he did with service api's so where's his smarts on this?

the conspirator in me thinks maybe he figured out its better to hire lots and fire lots churn/burn em out. amazon is always having those hire-events where you go like cattle to get filtered for a likely bad job b/c you won't appear all that selective to them.
First, it just will convert it the word "convert" is in the email subject.

Second, this is almost useless for multi-columns PDFs. It just works fine with very simple PDFs. Everything with a minimal of complexity becomes junk.

Reading PDFs in the kindle is a terrible experience. The text doesn't reflow. You get lost in multiple columns. Even the next doesn't work fine.

Since it is something open, with the original content published in GitHub, I thought someone should have generated a mobi file.
Is Firefox and Chrome "extremely limited" support? Sure, it isn't supported by many browsers, but it isn't rare either.
Well not anymore.
I need G+ for this ? Skip.
Chai means Tea in Hindi language.
> Writing latex is painful to say the least.

One feels that the pain was worth it when their existing .doc files render differently using another Word version.
I don't agree. Good advice is to optimize for a high salary to save for and support your eventual family.
None of which removes the fact that Martijn is incredibly helpful to Python questioners.
Perhaps. But when you consider the platform each targets (Denny's on Tumblr - younger, values visual content. Merriam-Webster on Twitter - older, values witty shortform word) this is excusable.
I have the second version, and it is also terrible. You shouldn't buy kindles to read PDFs.
I recently got the following text message from Verizon:

FREE VZW MSG: The security
of your Verizon account is
extremely important to us.
Your personal identification
number (PIN) or password does
not meet our new security
requirements. Please log
into your My Verizon account
and select a new 4-digit
PIN as soon as possible.

My PIN was not in the top 20 but probably in the top 200. But how is requiring a 4 digit PIN at all compatible with "security is extremely important to us"? And how many PINs do you suppose they blacklist?
> made more typesetting

Agh, I keep on making the mistake of doing homework directly to LaTeX. It seems that you're able to think directly from the page but it ultimately slows you down. I know way too much about mathematical typesetting as it is -- before I start making up rules about how Expectation should be \mathsf{E} and writing huge custom command files.

This one exam I started doing all the exercises in the book into LaTeX. As an aspiring mathematician, I need to learn to better appreciate pencil and paper.
Meet ALVINN, the self-driving car from 1989
My Chef-Y Todo List
Being a bully was never acceptable, not recently or before the era of political correctness. I don't envy their capability of moral distortion. For the white grande superior nationalists it seems as if it's a time where critiquing and calling them out for their bigotry and moral incoherence is willingly confused with attempts of censorship and proto-fascism. When he says "shove it", it's a bitter sign of relinquishment from someone who has nothing to lose because he has no arguments anymore to fight the system that doesn't seem to exclusively cater to him anymore.
Again you are talking about 2 different attack vectors here, the GP was talking about compromising the website, an attack against the traffic between the website and the client does not compromises the website in any case.

And no if these things are attacked, at least as far as the library goes things aren't no worse than HTTP because it's a completely different threat scenario which can actually compromise the website/host rather than just poison a single client session.

For example https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6309 which poentially allows for RCE if you use a vulnerable version of OpenSSL exposes your website to completely different threats than if you would only use HTTP, not worse, not better just an additional and quite different threat.

This is why when you implement HTTPS or any other additional service you need to understand how it changes the attack surface of your service from both a technical and operational perspective.
> (“This vending machine uses pizza as a verb; I thought you should know.”)

I have to wonder:
1: How?
2: Vending machine pizza?
The solution to the problems of echo chambers and walled gardens is not to build another echo chamber or walled garden, but to build something that returns control to the user.

In this respect, decentralization is the key. A decentralized network cannot easily be censored, but people can choose not to view the content they don't want to see on a decentralized network.

Gab just seems to me to be another walled garden. If it's anywhere near as successful as other networks, it will encounter the same problems. If it's not, then it won't matter.
I think there are already quite a few ports of early Bioware/Black Isle RPGs (Baldur's Gate I and II, Icewind Dale) on iOS.

Also the new Shadowrun games (isometric/turn based) are worth a look.
In the video they demonstrated that they're NOT local admin. The machine was set to automatically install updates, all they had to do was hit the "restart" button to start the automatic installation.

They were then able to use a key combination to give them SYSTEM level access from a normal user account. This is absolutely an elevation exploit, and the fact it bypasses Bitlocker during in-place upgrade is a little disturbing.

This bug likely isn't impactful for home users, but for enterprise-style systems (in particular in education) it has a big impact. Now every regular user can trivially become a local admin user. Problematic.
Cloud Computing in 2017: The 10 Most Important Trends to Monitor
Hi Mark,

One of the authors here. Great points especially on the "No victim cache" aka insertion failure. This was mostly a test implementation for us to see how cuckoo filters work, but agree that it is critical to have these issues fixed.

I'll check out your library for improvements.

thanks!
Practical Naive Bayes – Classification of Amazon Reviews
Simple for the kids? How about simple for the screenwriters? I know if I were involved I wouldn't want to be expected to read hundreds of novels before I could even start on what ought to be a very simple, straightforward script.
The silly thing is that the Raspberry Pi that is used to implement this, is actually a far more powerful computer than the C64 to begin with.
Show HN: Hyper.ai – An AI News Aggregator
A body with properly functioning kidneys will keep the amount of potassium in it constant
What's the current state of the art in keeping track of passwords and PINs? I have a folder in my house full of various papers and cards with passwords and PINs dating back to the mid-nineties. Surely not the best solution, but at least I don't carry the thing on me or put the data online.
My bad, it was 26 partecipants looking at 6 faces; still, a way underpopulated study.
When I was in high school my father made me work as a janitor in our family's office building. At that point I had been an independent IT consultant a few years, so the position frankly felt like an embarrassment and a waste of time. There was also a condition; I couldn't tell anyone my last name, or that I was related to the building owner.

At first I thought it was to teach me a lesson about hard work, which seemed foolish, as hard work was already my life, or humility, of which I probably did need a dose.

A few years later, he told me his true reason. He said,

"If you want to know who a person truly is, don't watch how he treats his friends or his boss.

Watch how he treats his janitors, his handymen, his surveyors, his receptionists, or his waitresses.

The measure of a man is not how he treats his supposed equals. It is how he treats the least fortunate among us."

Morality is not contingent upon income.
I believe there is a difference between murder and manslaughter without intent. Negligence crime can possibly be compensated. Intentional murder should never have that option.
>Can you point to a source for this? All x86 assemblers that I know of map one assembly instruction to one machine instruction.

Seeing the confusion and clarifications in the replies to your comment, I think it may have been more clear if you had said (and you probably meant):

"Can you point to a source for this? All x86 assemblers that I know of map one assembly instruction to one out of a set of machine instructions (where the chosen machine instruction depends on things like the addressing mode (immediate, indexed, indirect indexed, etc. - I'm using older terms for addressing mode, not sure if they are valid now with newer processors. but the concept is the same).
That's precisely it.

Advertise to people who are already interested in your type of product in places they may be looking for something new. Games at Gamestop/IGN etc, specific subreddits, books at goodreads, camping/hiking stuff on hiking boards.
Striking Oil with Data Science: The Century's Hottest Career
I don't buy that unencrypted traffic is equally trustworthy.

Encrypted traffic cannot easily be snooped by a man in the middle. It's arguably the entire point of HTTPS. With HTTP, I have no hints, much less guarantees, that the website I'm talking to is actually who it says it is. There is no mechanism whatsoever to establish trust, and my traffic is up for easy analysis.

HTTPS may not fix that problem completely (CAs are the biggest weak point) but it does wonders to solve MITM type snooping of my traffic (a boon to me, as a user) and has the mechanisms in place for me to inspect the certificate chain if I need to be sure of the server I'm communicating with. I agree with a great many of your criticisms against the standard and feel like CAs in particular need to be re-thought, but don't dismiss the entire technology because you assume that the "user" is too stupid to know how to use it.
Still, it's extremely cool to see Slack being usable from a C64.
The damage here is much bigger than a few laptops. We have been trying to educate, encourage people to go and try everything ;) saying you can't write software damaging your hardware. This sort of bug violates that trust and IMO it's a big deal.
I mean, you can pwn coworkers with Python, too. I'm not quite getting this. Are people who use LaTeX not aware that the interpreter is... well... an interpreter?
I work for a coding bootcamp that also offers onsite corporate training. Our focus is ruby/rails/javascript/API not Java. We may not be the best fit but I can recommend New Horizons. Here: https://nhlearningsolutions.com/FindTraining/Java/tabid/2904...

Looks like they offer Java 8 training. If I remember correctly onsite 5 day training cost 20k-25k for 10+ people who already have dev experience. Pricey but a lot cheaper than hiring a team of Java developers.

Feel free to email if you have any questions or happen to be located in the Chicago/New York/San Francisco area and want to talk about what we can offer. taylor@actualize.co
>I don't buy that unencrypted traffic is equally trustworthy.

Neither do I, which is why I never made any such claims. Encrypted traffic even in ideal circumstances can and is equally untrustworthy especially under certain threat models ;)
If you want to play playlists from your youtube account - then - yes.
Otherwise - g+ is not required.
My brain initially misread that as 8086. I started to wonder if people might have an aversion to using processor model numbers due to their familiarity... but apparently not.
Hi; I work for Cloudflare so I just wanted to address some of these points.

We have sites of all platforms and types which are in need of caching services for a variety of reasons. We have e-commerce sites wanting to cache anonymous page views to improve conversion rates through improved speeds, through to services wanting to accelerate dynamic content using our Railgun optimiser.

As a reverse proxy, we do offer an incredibly powerful DDOS mitigation service. Over the past few months we have seen a dramatic increase in DDOS attacks - including multiple DDOS attacks which are greater than 400Gbps. Whilst not all sites will face such attacks, we do offer a service for those who are in need of protection (either as a precaution or to mitigate an active attack).

Our WAF can help protect against other such attacks from SQL Injection to XSS and beyond, for example; we have a rule to protect against XML-RPC attacks. We're constantly improving our feature set and adding more; one such product we're particularly excited to reveal is our Traffic Control solution which can help add extra layers of security to APIs and websites.
Regarding memorization and busywork, maybe a certain amount of it is valuable. I don't know if it's a great analogy or not, but memorization and busywork have a central role in learning to play a musical instrument. You can't learn to play music, solely from attending lectures and reading books. You have to program that knowledge and understanding into your ears and hands. This is done through memorization and busywork. To get past the most basic beginner stage, you either have to force yourself to do it, or derive some pleasure from it. If you do get past that stage, you can "hear" something in your head, and it comes out of your instrument automatically, so you have some bandwidth in your brain left over for thinking about higher level things, such as: How do I want to interpret this music? What are the other musicians doing? Are drinks on the house?

Is there something like that in math? I'm thinking of getting from A to B in a proof or solution by introducing things like definitions, theorems, common algebraic manipulations, and so forth. If you can't just see those things in your head, and write them down, then you won't have a reserve of mental bandwidth to think about the higher level structure of the problem that you're working on, and you'll reach a level of complexity and abstraction where the cumulative effect of small mistakes prevents you from ever getting to B.

Is it poorly taught? That's certainly a possible problem. One thing I noticed when I taught math, was that the kids were never given a higher level explanation of what they were doing. Memorization and busywork are necessary but not sufficient. My students did not understand what "show your work" means. What it means is that math is a mixture of theory and performance art, like music. Math has a weird social role too... by the time they are in high school, most kids know that they are learning math with no expectation that they will ever use it. Parents treat it as some sort of obedience training.
Actually heartbleed was a lot worse than using HTTP: attacker could steel everything in the RAM of the server with vulnerable OpenSSL.
Its not one sided, its a general statement that the people who love their job don't go jumping off buildings or having suicidal thoughts. They wake up, goto work and come home.

Also, where do you get a 50% of engineers leave before 2y?
Show HN: Secrypt, encrypt or decrypt text
I still need to see how this turns out in practice. But if they completely get rid of it, this will mean more headaches for game developers, and more gamers crying that stuff doesn't work.

Non-game related, this might actually be a good thing. But coming from a game development background, this is a huge step back, both for game developers and gamers who want to play straight in the browser. But as said, we will see how inconvenient they make it.
Modern browsers can have no localStorage available too. See: https://gist.github.com/JohnAllsopp/1470989
That's my guess. If you check out the Alexa that's built into the current gen Fire TV stick, you can see how they are already offering visual responses to go with the audio.
> if you're not privileged enough to be a software developer.

Being a software developer isn't a privilege, it's a choice.
So true, you got me on that one! I'm totally on board with this interpretation.
I was hoping that this would be a maintained fork of http://dashing.io/
Explaining blockchain  – How proof of work enables trustless consensus
You could, but it would be less than 10W of electricity, so not enough to power a lightbulb. The water tank is insulated, so the water just heats up slowly until it reaches boiling point. That doesn't mean it's a powerful heat source.
Shipping Flowtype Definitions in NPM Packages
Every few years there's a proposal for a new nuclear battery. This was the last one:

https://www.extremetech.com/extreme/190555-this-nuclear-batt...

The problem is none of these approaches solve the disposal problem or the dirty bomb problem. You can buy 1,000 of these and build a dangerous device that would require serious clean-up and, obviously, can hurt a lot of people.

So, this will never be in a smartphone or laptop, but perhaps power industrial items that can't be practically charged often like remote robots or sensors. Or applications in space to replace aging, expensive, and heavy RTG's.
The primary reason is SEO:

It also gives us other benefits such as a potential increase in
search results. For the reasons mentioned above Google has
announced that it will favour https content. It is also helping
us decipher traffic from secure and ‘unknown’ referrers.
Completely agree, I have only heard of a few stories so I don't think we can conclude about one company over another. Turnover rate does sound like a much better general indicator.
Its more a side effect. Everyone knows everyone cheats on the TOEFL yet it would be incredibly awkward in academia to discuss that issue, so its kinda glossed over to avoid massive interpersonal drama. But, yeah, any prof or TA you have who doesn't know English is a known cheater, violation of honor code, etc. It does make you wonder if their CV or transcript or reference letters or published papers are as fabricated as their obviously fake TOEFL scores.
Show HN: Twitter Auto Replies from Multiple Twitter Accounts Randomly
6 Reasons Women Have Terrible Average Retirement Savings
Pointing out that a lot of internet runs, in part, thanks to millions of lines of GPL code that people reuse and extend on a daily basis? Well, it isn't allowed, I'm afraid. It breaks the narrative that the GPL is old and busted garbage, you see, and we can't have that going on in these parts. Consider yourself persona non grata #1 with that attitude!

It's very simple. It would mean my soapbox wouldn't feel so tall when I speak, and that when I take other peoples code, I might, some day, actually have to give something back as a result. As opposed to just taking it, profiting off it (like ~80% of people who 'eschew' the GPL because they can't make as much money as possible off it) and never doing anything in return.

As I'm sure you can understand, those consequences would be utterly devastating. For me. I hope you can fully empathize with my plight, so we can reach a mutual understanding. Preferably in the form of you giving me things with no strings attached.
Family and mortgage? I'm single and live in Atlanta where everything is cheap.

Optimizing for happiness and career path seem like more ideal goals for me personally.

Just some different perspective.
And in almost half of the world ;) (e.g. all the red dots in the map http://wals.info/feature/138A#2/25.5/143.8)
who signs up for an account on porn websites? seriously, what does it even get you if you aren't paying for some kind of premium subscription.
PwC Releases Vulcan, a Regulated Blockchain Platform for Banks
Sensq helps you to setup twitter auto-replies with custom triggers in some personalised messages by multiple Twitter accounts randomly in 10 seconds.
Re: #1, that kind of depends. Are the B- and C-players at that level because they are incapable or because they've never been shown how to be A-players? If the latter, a well-bonded team can motivate and teach them how to become an A-player as well.
C'mon. Implement PPP between the C64 and a Pi, and then do the rest on the C64 itself.
The next big thing in online sales? Already here