skysight-inc/HackerNews huggingface dataset:
There are two things to consider - the legislation itself, and the legislative history.

If you read the legislative history, that is, the testimony and claims of lobbyists, the floor debate, the PR releases, the statements made by congressional representatives, and so forth, I do think it's overwhelmingly clear that this legislation was presented and sold as a program to bring highly skilled, highly paid workers into the US who were supplementing rather than replacing the existing US workforce.
But then, unbound is not a "real, public DNS server".
> And while it might feel good to pretend full words add entropy, if you assume the attacker knows your system - it really doesn't (hence "guaranteed" entropy).

It does: munroe's proposed scheme operates on the assumption the attacker knows it. The 11 bits of entropy refer to a dictionary of 2K words to choose from. The reason to type full ones is you're not hamstrung by the "no common prefix" limitation, which allows larger (and easier to remember) dictionaries.

Also, we're talking theory. Typing them blindly is an artificial implementation limitation imposed on us by bad software. Just like "you need at least one digit", "maximum length 16", &c. If you're going to consider those, that's fine, but then you're not talking about actual password theory anymore--you're just discussing how to cope with bad platforms.

Case in point: many good PW forms (OS logins, &c) have no such limitations, and offer a "view password while typing" option.
Trusting WhatsApp == trusting Facebook

I can't think of a company I trust less than Facebook.
Open source software can be verified.
Economic Principles
I do find it strange that such a large project isn't using a better VCS. SVN seems to be very antiquated.
Go Montreal! woot.
Lieberman was an independent, though he caucused with the democrats.
First, nobody is paying tens of thousands of dollars to a doctor, because there's an out-of-pocket maximum cap.

If they have insurance. Without guaranteed issue they may not. With guaranteed issue they may have "access" to insurance but can't afford it, or the insurance they can afford may exclude the procedure they need. Retroactively. And even with insurance they may pay 25K a year in premiums plus that 10K max. Then 28K and 15K the next year... It's a system designed for optimal profit, not efficient (or moral) distribution of resources that every person will require. Debating whether it's insurance or insurance-like, or how the underwriting works, begs the question. Insurance companies should not be involved.
Ok, a very interesting way to analyze maps. Like a lot of engineers I enjoy different maps. It wasn't until we replaced our wall sized US Map this year (we got a large format US Map, World Map, and Globe when homeschooling our kids) that I realized how different maps could be (both good and bad).

In my fantasy science fiction imagination I've got a map on an large format HiDPI screen that I can drop a Surface Dial on to and turn it to pick out the features I want from Pilot to Topographic to Road Atlas to Political Districts. We have the bandwidth and storage to do that now, just need a designer and business case.
Yes! Alternatively: just make everything computer mediated, don't tell the humans who else is participating (blind), and also not how many other players are bots or humans.
I take this blog post as confirmation that:

1) ANY one message can be intercepted even if the sender exhibits ideal levels of alertness [Whatsapp server drops message to recipient; sends a rekey request with a fake key; message is intercepted since fake key was generated by server. Sender will see a warning if they turned on that setting (default is to show no warning), but it's too late].

2) Only Whatsapp has this vuln, not Signal app.

3) Depending on sloppiness of sender, more extensive interception is possible. [E.g., server not supplying delivery reports + sender doesn't have warning for key changes + sender sloppy about noticing lack of double check mark => full transcript can be generated]
The mandate -- i.e., forcing healthy people to carry insurance -- is the only way to make the risk balance out. Otherwise, no insurer would stay in the individual market.
Making microservices more resilient with circuit breaking
The problem is that we can't trust open source software either.

Software being closed source doesn't make it impervious to analysis. Software being open source does not mean it has been analyzed.
Yeah.... let's see it replicated first.
I think you've confused your out of pocket with deductible, and misunderstood what type of plan you should be on.

You should only focus on a low-deductible plan if you know you're going to be in and out of the hospital (e.g. elderly, chronic, etc.). I also don't think you know what your out of pocket maximum is now compared to what it was before.
Why don't we have two systems? One of guaranteed healthcare for the expensive conditions and one of insurance against everyday issues and accidents. So single payer towards things like cancer and insurance for getting checkups, having a cold, going to the ER, etc. Could some middle ground solution like that work?
Nope, we closed shop
The 95% confidence interval would be about 40-60%.

https://www.wolframalpha.com/input/?i=binomial+confidence+in...
2016 VR sales were below almost everyone's predictions. Rift and Vive under 500K units. PlayStation under 1M (with market analysts backtracking on their estimates last month).

For FB, I see it as a moonshot project much like the various things Google does. Being a moonshot project doesn't guarantee you success.

As for investments, I think we've entered an era where everyone is afraid of being disrupted by a startup or missing out on a unicorn. Now, you have large companies putting money into VR projects and VCs scrambling to fund anything VR-related. I think a similar thing happened with smart watches and wearables.

I don't know enough about the state of VR interfaces for work, but it seems ideal for specialized industries (medicine, military, etc.).
A little. Without reading the Guardian piece, I wouldn't even guess that delivery notifications have anything in common with security properties.

In other words, the messages are secure only when there is a double checkmark, not just a single checkmark. How am I supposed to know that?!? I am not even sure what do the checkmarks mean.

Frankly, that's not a "backdoor", that's just a poorly thought out GUI (in my opinion), that might eventually lead to backdoors with an evil server.
Medicaid.
> Just because you don't understand the difference between a penalty and an incentive doesn't make your analogy suddenly correct.

There is no difference between a tax penalty and a tax incentive (more precisely, a tax incentive is exactly identical to a general tax cut plus a tax penalty for everyone who doesn't qualify for the incentive, and a tax penalty is equivalent to a general tax increase plus a tax incentive for everyone not subject to the penalty; so, except as concerns the general level of taxation, penalties are exactly the same as incentives.)

> If you don't own a mortgage, you cannot be fined into the negative

Since having a mortgage or not can make the difference between owing net income taxes or not, if you have $0 net worth before a particular year's taxes are considered, you absolutely can be "fined into the negative" for not paying interest on a mortgage (lenders, not borrowers, own mortgages.)
Adobe Acrobat Reader DC security update installs Chrome spyware
Source code can be verified. Binaries distributed via app stores may or may not have behavior different from the published code.
It wouldn't be a conversation. The attacker would have to rely Alice's messages to Bob before switching the key. But then if the attacker let Alice (the target) receive Bob's messages they will learn theirs got delivered and the attack would fail.

So it only works once against a string of messages with no replies. That's not a conversation.
related previous thread https://news.ycombinator.com/item?id=13386879
As another commenter pointed out, gas fuel times are so short that you typically don't wander off far. Additionally, there are some safety concerns around leaving the fuel hose attached when you're not there.
Empirical topics should be debated with empirical evidence. To the degree to which an objective reality exists, we consider scientific facts to be objective. At this point the empirical evidence for climate change and AGW is beyond debate; we have ruled out alternative theories. Similarly, gravity and the germ theory of disease are settled science; they are not going to ever be overturned in any meaningful way. If you are not willing to concede that objective facts exist, that must be your own business, but otherwise I'm afraid you're going to have to accept that AGW has been conclusively proven.
For that, you can just play the pot odds, and don't even need to model the other players very well.

(The challenge is of course to find table that only have drunken humans.)
This is the source from Guradian paper, so you can test it for yourself. https://tobi.rocks/2016/04/whats-app-retransmission-vulnerab...
Have a public track record (company policy, actual actions) of preemptively dealing with the topics that those groups care about (sexual harassment, glass ceiling, transgender friendly accommodations, etc). I don't think that falls under any of the three items from above, unless you feel like taking those actions, and having those people seek your company out is a form of "get lucky".
Paying to keep seniors out of the hospital
Fortunately there are useful tools that'll help navigate binaries, like IDA Pro. They'll produce control flow graphs in addition to letting you annotate things. I've done this in a professional capacity a few times, though I'm not remotely an expert and barely know what I'm doing.

In Java, it's even easier due to JVM restrictions. I wrote an obfuscator for .Net, but Java offers less capabilities in it's bytecode. I even used a commercial product that had been obfuscated. The obfuscator broke something on Mono. It took about an hour to write a small script to go through the binary and fixup the broken bits so other tools would work on it.
New framework uses Kubernetes to deliver serverless app architecture
No: don't enable the extension in Chrome. Or don't use Acrobat Reader at all.

I hadn't heard of this before the Acrobat Reader security patch was pushed, but my gut reaction when seeing the confirmation dialog for that extension was "hell, no way". Adobe's track record with security is not good.
The problem is that it doesn't store "unit" meta-data for stderr, so you can not see stderr logs with journalctl -u nameOfUnit or systemctl status nameOfUnit
I'll posit an additional theory—that people with gastrointestinal problems don't eat spicy food because it causes discomfort.

But the other part that the article mentions—eating more vegetables and meats—well, most of the spicy foods I can think of are basically vegetables + meat in a spicy sauce.
See my other comment. That was a specific reply to the notion that:

> Virtual reality does not merely replicate reality ...

He/she is saying "VR replicates reality and more", while I'm saying "no, VR doesn't even replicate reality, let alone anything beyond it"

No need to get pedantic about the grammar.
Even at 80% under market rate living on ramen (presumably, in the Bay Area as a developer), you may be over the income cap for Medicaid.

Of course, choosing to accept work for 80% under market rate in a place where the high market rate for labor drives high cost of living is going to have short-term negative economic consequences.
I remember reading an article on marginal revolution about how wasteful are charities: The paying customers are scarce and the competition is so fierce that a big sum of the money you donate goes on advertising to gain new donors. In the worst cases most of the money goes into that ...
When Libermen was able to get the public option removed from the ACA it's survival chances took a serious nose dive -- after the last election there was no chance it would be restructured/fixed
Oooh, people are comparing native and Electron apps. Then yeah, in that case native makes sense.

I thought they are talking about the chrome app version of telegram, which I am using right now.
I liked all of the steps taken except this one:

>They developed a compensation philosophy that was conscious about not rewarding aggressive negotiators, nor punishing those who were conflict averse.

I'm all for compensating employees fairly, but being able to negotiate and advocate for oneself is an incredibly important skill both in the workplace and in life. I think we as a society need to focus on reversing any cultural pressures that lead women to be conflict averse, as opposed to dumbing down the process for everyone. The way this is worded seems to imply "women aren't good at negotiating for themselves, so we take that out of the process to keep things equal".
Typescript doesn't need babel since the typescript compiler supports es6.
To do this you must not only verify the open source code, but that the binary was built from this code, and that your operating system and every layer below it is also trustworthy.

I stand by my claim that using software written by a malicious developer is game over in the vast majority of contexts.
Yes. Richard Stallman calls these “Universal Back Doors”: https://www.gnu.org/proprietary/proprietary-back-doors.en.ht...
Because Republicans hate Medicare too and want to privatize it as their compromise? If they didn't have to compromise, they'd destroy it along with Social Security. But they know full well they'd pay too high a political price, so that's why their policy is to make government programs suck as much as possible so they can keep up the government blame game.
DRAM latency then and now: How old DRAM-synchronous 8-bit CPUs worked
I'm not sure if you're being downvoted here, but I think this is the right answer. The major problem in the system and with the ACA is that it continues to try and operate health care in a capitalistic free market. Due to the lack of choice by patients and the fact that they cannot reasonable refuse needed care because of price, the system falls apart.

I believe the only acceptable solution is a single-payer system where the government is able to set pricing limits on services - like medicare/medicaid already work. This is the only way the costs can be reasonable for the consumers of the care.
You can be for civil rights without being a libertarian. It's a weird US style of view that only libertarians are for civil rights.

Interesting, isn't it, that you've panned the other Anglo nations because of what amounts to a relatively small amount of censorship of literature, but don't pan the US, where there are a number of significant political offices you cannot legally hold if you're an atheist. Nevermind also that the other Anglo nations have never had anything like "Free Speech Zones". Or that their police follow Peelian principles, and don't routinely send SWAT teams into people's homes. When it comes to civil liberties, Peelian police are far more preferable than US police.

It doesn't really matter what the constitution says - what matters is how it's applied. Freedom of Speech is the big one in the US constitution and it's great. But Australians have a strong social expectation of freedom of speech (have a look at the Andrew Bolt court case, for example), and freedom of political speech is legally protected. Don't get misled by the blocking of ThePirateBay into thinking Australia is some sort of Orwellian 1984.

And, holy fuck, the US also has a history of censorship, despite that constitutional amendment. Stuff that would fly in the UK has been blocked in the US on obscenity grounds (see Carlin's "Seven Dirty Words", for example). And let's not forget the birthplace of the DMCA, which is just another form of blocking places like ThePirateBay (of which there is no US analogue). Or the National Security Letters, that have HNers crapping on about the pros and cons of warrant canaries.

In short, the 'constitutional protections' don't play out much differently in practice. They're a good thing to have, but free speech in the US is a lot more complex than that first amendment would lead you to believe.
No, it's not raw GIS data. Even the vector tiles are generated for a certain scales (or set of scales). They contain only data that should be displayed at given scales and also the geometries are being generalized depending on the zoom level.

What Mapbox can do, is to _remove_ data that are not in stylesheet - but as I understand it, that is being done server side (https://www.mapbox.com/blog/style-optimized-vector-tiles/). So in theory you could put more data into generated tiles, users could create their customized stylesheet (would have to be found out how, the server needs to have it accessible, it does processing based on it) and it could work - for a few of them. If everyone would do it, you are back to square one. This is usually usable for a defined roles (what group can see what in your data), not for picking and choosing every possible object at arbitrary scale.

The thing is, you usually cannot put all the data in the tiles and just serve them - most users won't use them anyway, so you would just waste bandwidth. That one guy who wants something special usually wants other object than that second guy, who wants also something special.
For non-locals: Reading (town) and Reading (verb) are pronounced differently.

(And don't even try to guess how Leicester is pronounced from the spelling.)
State laws require certain vaccines [with exemptions] before you attend school: https://www.cdc.gov/vaccines/imz-managers/laws/state-reqs.ht...

Private schools can also require vaccines.

These are good things. We want people to be vaccinated and literate.

We want everyone to be able to receive medical care. In the US, that means we want everyone to be insured.
AR done properly should be a superset of VR.
And it'd have to work for other platforms, too. Android is Java right? Which is even easier to RE.
No, they can't.
Only once you scan the barcode, which contains an encryption key to use for your phone to securely ship /its/ keys to the browser. Only encrypted messages are transmitted between phone and browser
I don't think the Chris Lattner thing is a war at all. The journalist gave a reasonable effort to get a comment from Lattner, never got a response, so went with a story from a source they found trustworthy. Lattner issued a denial after the fact, and it's included near the top of the story.

I guess it's possible that the journalist completely fabricated the story, but I think it's a lot more likely that either someone at Apple overstated their relationship with Lattner to vent their own frustrations, or Lattner is trying not to burn bridges. At worst it's an avoidable inaccuracy, not a war.
"It is amazing what you can accomplish if you do not care who gets the credit."

It's also amazing what you can say if you don't care who's attributed. Anonymity or pseudonymity can be of great value here.

For someone of Livingston's stature, writing under a pseudonym may not seem as attractive an option. When sharing anything really valuable, via a pseudonym, there's no opportunity to leverage existing audiences, or build reputational equity for your 'true name'. And for the already-prominent, if a pseudonym is later pierced the blowback can be larger. So why not spend your time and words elsewhere, either on safe topics, or only sharing 'dangerous' thoughts privately?

Thus Livingston mentions, in her footnotes, increased sharing in controlled environments with trusted associates – as on Facebook. But most people may find pseudonymity the best strategy for collecting the benefits of freer, more honest speech.

I even suspect that a "right to create uncorrelated secondary identities" may be a crucial 21st-century freedom, worthy of encoding in law and custom.
The US has the highest healthcare costs in the world. There's simply no escape in the US unless the government steps in a regulates medical fees like the rest of the western world.
> This is true for basically all software that you use.

And hardware too.
If you're doing several interviews with different team members you might be able to ask them about different things.
Not if you can persuade/modify a fungus to do the same thing. This is basically the plot of https://en.wikipedia.org/wiki/The_Girl_with_All_the_Gifts
>Take this (slightly contrived) example: In Gnome 3 you can "zoom" out to panarama view all your running applications, while you have a HTML5 video running in your browser and everything just runs flawlessly, with almost no system-load, and no tearing or any nonsense.

Same with a good compositing X11 window manager. In fact wayland does not dictate gpu accelerated rendering nor compositing. And there is much more to look at when talking about wayland vs X11, many details and a few major things.

But in general, no, wayland is still not ready. The people leading the desktop wayland parade have to all take a step back and think, while nvidia needs to agree with kernel people on how to manage memory. Then we can start thinking about replacing X (start, as there are still many more details).
Certainly it's possible to remedy this situation simply by having the app author sign a checksum of binaries in the app store. Why this is not currently an option (to my knowledge) is a mystery to me.
>Women who are logical/mathematical go into medicine or law instead of programming because frankly it sucks to be the only woman in a room full of men

Medicine or law used to fill rooms with men, but like most other fields, that changed in the past few decades. The question is, what is the differentiator with CS that has led to the severity of the current imbalance?
This is an obviously optimistic question but, I will present it anyway.

Is it possible that through expanding the, what I believe to be, unconstitutional power of surveillance that they are actually weakening it and providing an opportunity for it to be fought against by the ACLU (or other civil liberty groups)?
I really enjoyed reading this journey! inspiring and motivating to hear people centered around a common goal with a unique and forward thinking team structure.

It made me reflect on my best moments in software development and how they have been similar short bouts of intensity.. weekend long to 2 week long periods of intense and undivided focus at progressing a task through to completion, time where every other concern fades away, a flow state where I will wake up immediately with new ideas or problem solve in the shower.

Sure, that level of concentration is unsustainable for the long run, but this article has made me consider that I may have to structure my life around being able to repeat these kinds of stints more often, 'embrace your funk' as some would say!
You're right. Everyone is fallible and I'm all for mistakes being made — We are all human. I also agree that the immediate snap response tells us nothing.

Based on the BI story, I know a few people that have actually already uninstalled WhatApp for fear of a backdoor. What I wish is that there was a better way for these two entities to communicate rather than finger pointing and name calling so that we as consumers of both media and technology can read a better more comprehensive narrative.
Nobody is making the media publish every tweet either. It's a symbiotic relationship.

> He's also a grown man who's responsible for his own actions, so blaming...

There's blame to go around. The electorate is ultimately responsible for putting this tweeting extremist in the White House, and if you compare Obama's statements and actions compared to past presidents, then you could say that the "class bar" was lowered enough to where Trump was electable.