skysight-inc/HackerNews huggingface dataset:
Rich Harris also created rollup and buble.

He's an inventing and implementing machine.
I assume they are using XCode to package the bundle because of signing so the app is able to be packaged for the app store?

If you just need to create an .app bundle you can manually create the folder structure and .plist files which allows you to run the rust binary directly while looking the same to a user as an XCode bundled app.
The PPM250 levels in Dehli are worse than Beijing. The Indian government needs to regulate air quality or deal with a generation suffocated by its failures beyond the remains of the license Raj.
that would really hurt the point of using an android phone for me.
DRM never did stop "would-be pirates with penchant for reverse engineering". Ever.

Plus, the owner of the Android/iOS device is paying for that content anyway, why would it be in any way a problem if he can open that downloaded file in another software?!?!
That's genius. I feel like I need to create a blog documenting stuff like this. We could compare the cost of the tooling used vs. the cost of the replacement part.

Except nowadays it is more like "I just went over to my uncle's job that night where we used a $1.5 million CNC machine his employer owns to make a replacement from solid stainless"
If the company culture is supporting this attitude, then sure - you will have developers saying that. But it isn't the developers that create that culture. This is something the management is responsible for.
Just to be clear, they didn't obtain any passwords, but auth tokens. This would potentially allow them to log into accounts, but only as long as the tokens are valid.

Also, they don't reveal which "third party app stores" served infected apps, but they do provide a list of infected apps, and searching for these yields some real shady download sites: http://imgur.com/a/0luW3
Thanks for making this comment. This post is a wonderful example of the rampant marketing that has given the security industry a bad name.

- The title is technically accurate, which is the best kind of accurate for clickbait. This is not a novel vulnerability representative of an application security flaw within Google - the malware campaign specifically targets older devices using previously known vulnerabilities.[1] There is no new exploit research here.

- There's a logo and cute name for something which is, again, not a novel vulnerability.[2]

- Scaremongering tactics are used throughout to hype up the finding.[3][4] Deliberately ominous language like "...for now" is perhaps tolerable when it's coming from a media outlet, but it's certainly unacceptable from a firm conducting original security research.

All things told, this is closer to "threat intelligence" than real security research. A much better source for this news is the blog post by Google's Director of Android Security, Adrian Ludwig (first footnote, linked elsewhere in this thread as well). In particular, notice the succinctness and the serious, yet detached professionalism associated with the post.

In any case, there are legitimate arguments to be made in favor of extending software or device support lifetimes for vulnerability patches, but the onus is on device manufacturers to coordinate this. In the meantime, it would be great if fewer firms practiced this sort of manic self-promotion, but unfortunately there's little incentive not to.

-------

1. https://plus.google.com/+AdrianLudwig/posts/GXzJ8vaAFsi

2. http://blog.checkpoint.com/wp-content/uploads/2016/11/goo_bl...

3. http://blog.checkpoint.com/wp-content/uploads/2016/11/info_4...

4. http://blog.checkpoint.com/wp-content/uploads/2016/11/info_2...
Exactly, and, in my own humble opinion. The capitalism thing just started.
Depends who the business is! You can find out about some from googling.

Sometimes you just have to take a chance. For example, if you're working as a project manager then their will probably be a 'Director of x' then a 'head of x' > 'team leader of x' > member of team and so on. I say, why not send an e-mail to them all?

Some will discard the e-mail. But one may pass it on. If you have the resources, hand deliver this stuff to someone 'senior enough'. A director may ignore it, but a 'head of' or 'team leader' may take it more seriously.

I'm not talking about harassing people frequently. Just playing a numbers game.

In terms of what their e-mails are.. it, again, is a guessing game. However, most businesses use the same format. So start by looking for one individuals e-mail. For example, if you can find john.smith@company.com you can guess that joe.bloggs@company.com will also work.

Just remember that the team you will be working in, probably has people who hate being there. Managers of these people would kill to have someone as enthusiastic as you may be.

Good luck!
If you have time and are fine with it being a bit dry, you can read RFC4880 [0], the RFC for OpenPGP.

This is something I have done some work on (I wrote a basic implementation in an attempt to understand a while ago [1]), but I don't have a nice writeup.

An OpenPGP file, whether it is a public key or encrypted file, consists of a list of packets. Generally it is a binary file, but an armored file consists of this binary in base64 and then a checksum.
You can get these packets with
gpg --list-packets <file>

Example output from a signed and encrypted file

gpg: encrypted with 2048-bit RSA key, ID 09FBFEF359DD186F, created 2016-11-30
"asdfas <sdfasdfasd@asdfasd.asdf>"
# off=0 ctb=85 tag=1 hlen=3 plen=268
:pubkey enc packet: version 3, algo 1, keyid 09FBFEF359DD186F
data: [2047 bits]
# off=271 ctb=d2 tag=18 hlen=3 plen=377 new-ctb
:encrypted data packet:
length: 377
mdc_method: 2
# off=293 ctb=a3 tag=8 hlen=1 plen=0 indeterminate
:compressed packet: algo=2
# off=295 ctb=90 tag=4 hlen=2 plen=13
:onepass_sig packet: keyid 0D3B106118D1EFBE
version 3, sigclass 0x00, digest 8, pubkey 1, last=1
# off=310 ctb=ac tag=11 hlen=2 plen=19
:literal data packet:
mode b (62), created 1480523012, name="file.txt",
raw data: 5 bytes
# off=331 ctb=89 tag=2 hlen=3 plen=284
:signature packet: algo 1, keyid 0D3B106118D1EFBE
version 4, created 1480523012, md5len 0, sigclass 0x00
digest algo 8, begin of digest 05 c4
hashed subpkt 2 len 4 (sig created 2016-11-30)
subpkt 16 len 8 (issuer key ID 0D3B106118D1EFBE)
data: [2046 bits]

The pubkey encrypted packets contain a key used to encrypt the data. The encrypted data packet includes that symmetrically encrypted data.

When I have more time, I may do a more useful writeup on my site, but currently I am too busy.

[0] https://www.ietf.org/rfc/rfc4880.txt
[1] All I could find was my file parsing code, I dumped it at https://github.com/artemist/mupg
Show us several people that are in this enlightened state right now, thanks to a specific psychedelic. Let's see that there are no downsides, no unwanted changes in those persons' personalities.
I don't see a '/s'. I'm pretty sure the majority of users on portable devices connect their primary accounts to it.
Even bringing developers (or anyone really) into it is like blaming the prisoners for having a dilemma. It's the nature of software that it does not fit inside one person's head, and this leads to problems.
I was working on a live streaming app and considered using FB but their API docs weren't accurate and when I did manage to get in touch with support their reaction was kind of "oh well." At that point I realized it would be a bad idea to put so much effort into something that could be shuttered by a 3rd party.

For the record, FB live docs are pretty clear about not allowing streaming from mobile devices.
Not every Netflix Original is available in every region. This can be either because Netflix was producing the show before they were in that region, and so signed over the rights to the show in that region to a different provider, or because they have agreements with other producers that need to be on board as well. The same idiosyncrasies will probably apply to downloads.

For instance, in the case of Luke Cage, maybe Marvel needs to sign off on delivery changes like this? Hard to determine without looking at Netflix's actual contracts.
I don't believe the problem will go away, but I do believe that if enough of us stand up against it, then the bullies won't be so brazen.

If I see a bully insult someone, I'm not going to sit around and tell the victim to just accept it as "free speech."

And if a bully does that in my house, I'm going to kick him out of my house.
That sounds interesting. More info?
Are there any alternatives to TodoMVC out in the wild?

I rather like https://github.com/staltz/flux-challenge myself, but I wonder if there are any other projects that are focused on more complex examples.
It sounded Castilian to me too. I just had no idea what was meant by "American Spanish".
Show HN: ToroDB Stampede: Automagical MongoDB to PostgreSQL, 100x Faster Queries
While I agree - people from western world live way over what is needed - there's an issue with demography also in Asia. Kaya's identity [1] shows that the factor P, global population, is by far the most important. Control demography, you will raise the Quality of Life. At least while we have high EROI energy sources (like fossil fuels); without high EROI energy, demography will become (again) a dominant energy source.

[1] https://en.wikipedia.org/wiki/Kaya_identity
Have you tried the jobs section[1] of HN?

[1]https://news.ycombinator.com/jobs
If it is just auth tokens instead of email password, should google be able to invalidate all these auth tokens in their backend immediately? Force those uses to re-login and get new auth tokens?
5 Technical Considerations for VARs Looking to Provide Hybrid Cloud Services
URL scheme for source code
If notes are not legal and you do not want to pay penalty then you can sell them to scrap dealer. The current rate is Rs 8/kg.
ahem https://www.google.com/search?q=Upcloud
Agree. It is useful insofar as you can quickly get a sense of what working in a given framework feels like, but the community could use some alternatives.
Dave Steele's blog:

https://davesteele.github.io/gpg/2014/09/20/anatomy-of-a-gpg...
https://davesteele.github.io/gpg/2015/08/01/intermediate-gpg...
There are limits in the US as well, but I think there are ways around them.
https://studentaid.ed.gov/sa/types/loans/subsidized-unsubsid...
How do physical resources factor into this?

Suppose we practically eliminate labor and manual production processes using machines. Consumers won't be able to trade their own labor for resources as most of them do now (since automated labor will be cheaper).

It seems that he who owns the resources is king in this world. What could any else bargain to resource owners with?
Let's put your thoughts into perspective.

There is no drug drought currently. Anyone that wants to get high can. Current market is not regulated. Anyone can become a seller with a little effort. Sellers are not regulated.

We do not see an addiction rate of 60%, even with the ready availability of drugs from an unregulated market.

Rat Park [1] was an experiment that revealed that everything we know about addiction is wrong. I recommend reading up on it.

[1] https://www.youtube.com/watch?v=ao8L-0nSYzg
A similar comparison would be learning Bopomofo and using that when knowledge of the characters fails.
I agree, tired of elitism but

> When you write Javascript and use first class functions (ideally without side-effects, but who the fuck really cares), that's functional programming.

Sorry but no. Functional programming requires a whole set of new skills that most programmers don't have.

Learning the basics, pure functions, higher order components, immutability, second order functions, first class functions, lambdas, partial application, currying and point-free style. That's functional programming.
I'm vegan. I ride public transit when possible, and moved next door to my job so I don't need to commute on a daily basis, I buy used whenever possible, and try not to buy stuff I don't need. I take carbon into consideration when making holiday plans (a few plane rides can double a persons carbon footprint). I compost. Future changes I'm trying to make include going to local farmers market and growing more of my own food, switching to solar power. But, realistically, I'm only one person. If everyone went vegan today, gave up cars (for bikes) and planes (for electric trains), and we started growing 51% of our food locally we'd be well on our way to meeting carbon emission reduction goals. The technology has been around for awhile. The will to make the choices has not. Which is why, I'm a pessimist on these issues.
How could you possibly be correlating Netflix supporting downloads and phone screen size preferences?
So you don't access your gmail from the phone?
I am using "Here WeGo" https://here.com/ (originally developed by Nokia), quite a good alternative to Google Maps. It does not need any Google services installed. Downloaded it directly from the Google Play store with Raccoon.
San Francisco’s Official Response to the Election of Trump
> By financing loans, aren't they already trying to do this? Building and operating more schools just adds more cost.

You could say they are doing this but in a super inefficient way. With plentiful student loans you end up a lot of actors that capture the money that should be going to eduction (the goal). This includes schools (and their growing administrative departments, lenders, expensive sub-standard housing).

You know when college was the most affordable in the US? It's when the states contributed the biggest part. http://fivethirtyeight.com/features/fancy-dorms-arent-the-ma...

I'm personally in favor providing an option at decent post HS education to almost everybody for a modest cost (so people do take it seriously). This shouldn't be just college or generic 4 year university but also vocational training (HVAC, nursing, electrical). If you want to go to a private institution or non public-private partnership, that will always be an option.

I also think there's a lot of room for redesigning the 4 year university. I did enjoy some (but not all) of my required electives courses like History of Theater, Early American Literature, History of Africa (you could pick an area), but I don't think it's ethical to shove down a year of classes that may or may not be helpful to people in their life and saddle them with additional debt for that so smugly we can claim they will be more rounded.

You can also look at this from a selfish long term angle where we equip people with the tools for the future so they are more self reliant (less reliance on government programs) also offset with higher tax recipes in the long term.
LXD does at least (unlike docker) default to unprivileged containers
Show HN: Linguaquote – Work with professional-level translators, with confidence
I'd also point out that my experience of taking a few semesters of Japanese was that it's pronunciation is very phonetical, at least compared to actual romance languages, which lends itself well to romanized representation. I actually found it easier than a course I started that purported to teach us to read French, but had no emphasis on the spoken language. I had no idea how the words were supposed to sound as I tried to read it, so I really struggled to read it. I dropped the course because the idea of learning a language without speaking it seemed stupid to me.

I would like to hear your arguments against romanization if you feel up for it.
Isn't it a bit overkill? it's not like you can access them from the internet if they're on the local network. No?
I've never had an issue with Netflix subtitles, what exactly is your problem with them?

And yeah, it would be swell if Netflix could snap their fingers and expand their catalog, but they can't.
Rather the opposite : start to campaign that corporations in size and influence as FB and Google aren't a public utility, nevertheless they're marketed as being such.
Does 2FA help in this situation? If the token signs in from a previously unknown device/server wouldn't it prompt for authentication details?
I think we can all agree that another mass extinction event and chaotic weather pattern upheavals are both bad things.
Damn, should have thought of that. I assume it's not possible to transfer the few purchased apps I already have? I'd probably be willing to ditch them.
Without DRM, it's super viable because P2P is a piece of cake, and Netflix would only have to seed and host less-frequently-used content.
I had done some back-of-envelope calculations[1]
when I saw it on Reddit

My conclusion was that it seemed like the file size would grow fairly quickly

[1](https://www.reddit.com/r/javascript/comments/5fcwhz/svelte_t...)
For me, a couple things I'd like to see more of from some of these smaller VPS providers... block data storage that can be mounted to the filesystem, offering redundancy and backup space to target. DO now has this as an option... outside the big players (AWS, Azure, GC) I haven't really seen it.

Beyond this, is managed SQL option... I mean, I'd prefer PostgreSQL + plv8 at a minimum, but open to others. I really don't want to manage this.

The fact is, I'm not willing to dedicate hundreds a month to hobby and one-off projects, so continue to DIY, but would really like to see more options out there... maturing docker management is pretty compelling as well. It feels like AWS, GC and Azure aren't really even trying to compete, because the additional services they offer have no real competition.
You imply that there's speed throttling when streaming. There's not and it makes no difference if you're connecting to a streaming endpoint or just getting a downloaded file.

(Which you can confirm by fast availability of streamed content on torrent sites or if you actually test the streams.)
Oh so it's not Counter Strike running in Docker. That makes much more sense.
As a sib points out, it's unfair to attribute the destructive negative effects you're describing to the drugs themselves.

Think about it this way: the two main ways people are harmed in relation to drugs is via a) addiction, and b) the illegal drug trade. The latter only exists because of prohibition (ok, even if all drugs were legalized, there might still be an illegal trade, but imo it would likely be a b2b black market rather than street based retail, so the violence would still be significantly lowered). As for addiction, it's thornier, obviously many people are addicted to legal drugs, but the criminalization of addicts severely exacerbates many addicts problems: they don't seek medical help due to fear of legal repercussions, they're forced to interact with illegal drug dealers, they often hide their addiction even from their friends/family because of the social stigma attached to criminality.
The entire Schiff connection is bogus, and you'll see that the sites that talk about him tend to be one click away from outright anti-semitic conspiracy pages.
Announcing ToroDB Stampede 1.0 beta
That's an absurd restriction that would waste a vast amount of public money only to defeat the entire point of legalisation.

Most people still won't do drugs even if they were legal, and of the ones who do, most will obey any restriction you put on them. So you'll spend billions in public money testing everyone who needs any kind of social assistance, only to give about 95% of them their money anyway.

Of course, some will fail. That doesn't necessarily mean they're an addict, any more than a glass of champagne at New Years makes you an alcoholic. Many will be occasional users who will see no benefit whatsoever from enforced rehab. That's taking valuable rehab spaces away from those who genuinely need them. Oh, and when you're forcing treatment on the poorest members of society, they probably can't pay for it themselves. That's more money from the public purse.

Then you've got new applicants who've just lost their job. Are they sent to enforced rehab, or just denied assistance until they can pass a drug test?

Some will be addicts. Unless they actually want to quit, rehab won't fix that. And the ones who want drugs are going to get drugs anyway. You're not going to stop that just by removing their money. What you will do is reinstate the very black market you just got rid of through legalisation.

Which brings us to the deeper problem with your plan. If you remove a persons ability to pay for food and shelter, what do you believe that person will do? They're certainly not just going to crawl into the woods and die quietly - they'll do what they need to do to survive.

Social assistance doesn't just help the person receiving it - it helps society as a whole by removing the need to turn to crime just so you can eat.
One of the big problems here though is thing like twitter's recent behavior(I'm using twitter as an example but other sites do it too).

You can say something hateful, disrespectful, and even threatening to/about a white person(or people) and twitter doesn't care even if you are reported.

However if you say the same thing about/to a black person (or people) [literally the same sentence with only those words switched out] then when reported you will be banned.

If twitter(and others) would actually apply their rules fairly, a lot of people would be a lot less upset.
You will still have a large app--instead of having MVC in the browser you will likely have MVC in the server.

And MVC in the browser doesn't need to be complex. It can be tiny as seen in this MVC lib for React: https://github.com/rajeev-k/mvc-router
I'm not sure what the solution is, but my worry with tying to an IP address is the mobile setting where I may transition from work wifi to bus wifi to home wifi, with a mobile carrier in between all of those steps.

Maybe something like a device ID, although I assume that that can be easily stolen and spoofed.
"The only way to smash this racket is to conscript capital and industry and labor before the nations manhood can be conscripted." This is a great quote. Never gonna happen. But what a change that would make. If we instituted a "draft" of the financial and industrial systems, e.g. made them pay for war the way drafted soldiers pay-- without profit-- without choice-- we wouldn't go to war. The powerful and wealthy would never allow their profits to disappear into that kind of a void.
> If your software handles personally identifying data, there's a non-zero chance that you could ruin someone's life through negligence.

And, at the scale you're discussing, if there is a non-zero chance that this will happen in any given instance, then there is a near-100% chance that it will happen in some instance.
How your startup can leverage infrastructure for less than $200/month
Enabling it doesn't work retroactively, just from that point forward.
I wouldn't call it 'ground-up' but you may find this useful:
https://www.gnupg.org/gph/en/manual.html
Now I want to build and sell a diamond nuclear battery-powered, Japanese LED light orb structured so as one LED burns out, a previously-deactivated LED is activated, and a motion sensor-based power switch. Stick into a gnarled length of Australian Buloke wood and presto, a walking stick/staff of light that lasts hundreds of years, shake it to turn on/off, and so hard you can take a massive swing at an orc (or fellow SCA combatant) with spectacular results. Since I can't turn off the battery, I'll make it extract, liquefy and store hydrogen for a bonus fireball shooting feature, but that won't last as long.