skysight-inc/HackerNews huggingface dataset:
You're an outlier. Everyone I've observed trying VR for the first time (even Galaxy Gear) has been impressed. I've watched hundreds of people try VR because I love seeing their reactions. VIVE and HoloLens get the best response since they are the most immersive but even Galaxy Gear usually gets a shocked response.
Interesting perspective. I completely agree with most of your sentiments but I just can't shake the feeling that this kind of attitude is much more difficult for people who are non-knowledge workers with more labor intensive work (i.e. cleaning etc).
Fair enough and very true! I suppose web-components are 'react like' in a way though so maybe it's already happening.
ZeroPhone – A Raspberry Pi smartphone
This is really cool, I gave up on Clojurescript partly because the weight of tooling combined with everything being bleeding edge when I didn't even understand Javascript tooling buried me at the time.
Nope. Professional security people have been using binary diffing tools to solve this problem since the early 2000s.
There is/was an internet news website 15seconds.com iirc, that was so named because that's how long the average person would wait for a page to load. Back in the 90's when dialup was common. I think people should try setting chrome in devtools to 2g speed now and then, so they know the pain they're causing for a lot of people on wireless without a good/stable connection.
If you don’t finish then you’re just busy, not productive
The Illustrated Guide to Law
Of course. But these projects exist in addition to a rich standard library.

C++ takes the approach mentioned of having a rich standard library (Boost) that is a separate project from the core language. It (IMO) does not work very well. Many C++ programmers don't use Boost and generic C++ libraries are unable to use Boost as a dependency.
> Snowden tried to responsibility report the issues and he hit a wall. He realized that the option to handle it internally didn't exist, so he did not have any other choice.

I uh... no that is just not even a little bit true.
If he were working for Russia, wouldn't it be more plausible to give them the secrets (just "forget" your USB stick in a cafe in Honolulu, which Ms. St. Petersburg sitting next to you will find...), and at the threat of discovery, go underground, and let himself be smuggled into Russia?

Why go to the trouble of trying to contact Greenwald, and Poitras. He tried to get Greenwald to set up mail encryption, it failed, Glenn ignored him for a few months until he managed to reach him through Poitras. A man who's sold state secrets and afraid the Men in Black are about to come would not wait that long.

But anyway, you deal in absolutes "There is absolutely zero reliable information on Snowden's motives.", so you probably know best.
OpenRC is the first option in the install guide, but you can choose systemd. I cant think of a good reason to do so.
The moral of the story is that some web people don't care about things which, had they a deeper understanding of what they do, they would intuitively grasp they should care for. QED.
Except that if you use a western keyboard you still need to learn Pinyin or Romaji in order to be able to type the language. In my own attempts to learn a little bit of Japanese I've noticed that it is indeed difficult to associate the 'new' characters to the correct sound without using Romaji as an intermediate representation but my hope is that the more I learn and interact with the language the less this is the case.
I think that, especially when using online learning tools, learning Romaji is inevitable and don't think that learning the phonetic system 'from scratch' makes it easier (if it is even possible to completely forget about your own phonetic/alphabetic system).

In short, as a starting learner of Japanese I acknowledge that the problem you describe exists but think that 'really bad' is an overstatement and it is almost inevitable that your brain associates your old knowledge of English (or other languages) to the new language.
We actually have a pretty good estimate on the orbit[0], though not necessarily where it is in that orbit (afaik at least). Your point is correct- there's no where to go until we get a fix on it- but your description is technically incorrect.

[0]https://en.wikipedia.org/wiki/Planet_Nine
The ACME server absolutely does generate the end entity certificates for their subscribers (e.g. a certificate on your web server). Code which does this is part of Boulder, the Let's Encrypt implementation of an ACME server so you can go see for yourself (obviously their production system config is not on display but it's the same code)

You are correct that Let's Encrypt don't generate the subscriber's key pair. This is (or should be) true for every public CA offering Web PKI certificates today. The subscriber puts their public key in a Certificate Signing Request, and signs it with the corresponding private key. Let's Encrypt receives the CSR, verifies that it is correctly signed, establishes that the requesting Let's Encrypt user account is authorised for all the DNS names listed in the CSR, and other parameters are acceptable, then it creates a signed certificate for those names, with the public key from the CSR.

[Edited to add: If you use Certbot or similar to just issue a certificate all the CSR creation and signing is done for you. But it still happens, and Let's Encrypt are still the ones actually making and signing the certificate]

It is essential that Let's Encrypt create the certificate. Under the current Baseline Requirements they're obliged to ensure that the serial number is unpredictable yet unique across all their issued certificates. The only practical way to achieve these goals is for them to create the certificate from scratch and sign it.

The situation where a tbsCertificate (the certificate document before it is signed) is transmitted anywhere is unusual. The only example I can think of recently was where Symantec were arranging SHA-1 exception certificates and Google's process deliberately involved showing everybody the tbsCertificate before it was signed so that we (the community) could examine it and ask for anything unusual to be explained. If you go back and look at those discussions you'll see it was me who first asked for the weird OU value in certificates for TSYS to be explained or removed -- they were subsequently removed before the certificates were issued.
its mainly the acetaminophen (tylenol) that its cut with that would damage your liver the most. when people overdose on oxy, the biggest concern is the tylenol.

I'm not saying its great on the liver, but under normal dosage and (provided you dont have liver disease) its safe. about as safe as having a few beers at the bar at least.
Why does this imply VR in general is garbage, and not just the current state of VR?
IBM's motto in Brazil is "Think", they didn't bother to translate it...
Like the french, it would be "Pense" (imperative form), or "Pensez" in french, or "Pensemos" (let's think), in french "Pensons".
Interesting and fascinating.
Torts exist in the civil system, not the criminal system. The driver in this scenario would likely be criminally liable for negligent homicide, manslaughter, or one of their many legal equivalents in state law.
That's different. Your parent was referring to indulgences, a pay for sin scheme. There's nothing wrong with religions choosing morals to preach - that's their raison d'etre - if you don't like what they choose, you can leave the church or attempt to change their choice (this is why we have freedom of religion).
Hugged to death. Cached version: http://webcache.googleusercontent.com/search?q=cache:http://...
Tip o'Niell liberal or The Economist liberal?
I entirely agree that safe-driving speed depends on numerous factors. Some specific to the driver and vehicle. Some general. But the problem is that speed differentials are far more hazardous than speed per se.

In some places, there's a requirement for slow drivers to pull over, allowing other traffic to pass. In Mexico, slow drivers tend to use the shoulder. But even on multi-lane roads, speed differentials are hazardous.
That these companies still make a huge profit here (after research).
It's cheap in much of the US too. As little as $7 for a liter of 80 proof in my state (liquor regulation varies by state).

A liter of Smirnoff is $17.
What difference does it make?

ALICE
When would you
like to meet?
BOB
Tomorrow, 19:00, by the
north tennis courts.
ALICE
Sounds good.

!!! BOB's key has changed !!!

BOB
Actually, could we meet
at my place? I'm going
to be super busy tomorrow.

If Alice and Bob are doing something that needs to remain secure, Alice would be a fool to trust Bob's messages after the key change without manually verifying the new key with Bob. How does withholding messages help, aside from telling the server which people have enabled the setting and which people have not? [edit: I just realized you were talking specifically about the case where manual verification is enforced for all users; disregard the last phrase.]

Admittedly one angle I can kind of agree with is that layman users may not understand the implications of a key change and the importance of out-of-band verification, and blocking messages until verification would be a way of signaling the significance of the key change. But... counterpoint to that is that users interested in security are probably already dead in the water in that regard if all they have is a layman's knowledge of how crypto works.
Disincentivizing taxes are usually very profitable, because they're targeting goods that are considered overly desired. Their effectiveness is not too clear, but it is commonly accepted that they do reduce consumption. For example, a recent study on soft drink taxes concluded that retailers absorbed half of the extra cost to keep consumption high.

An alternative income source might be luxury taxes. There are a number of luxuries where consumption correlates positively with price - but it would be politically difficult to implement a tax on extravagance.
Author should fix that bug, by changing it to #define OpenAI_CTO
At one point I saw a job posting for a Linux admin to go there for the summer. It's certainly possible.
Thank you for the post, I couldn't find enough information on what would differentiate these devices from e.g. these https://catalog.azureiotsuite.com/ ?
Interestingly your comment is the only google result for "suerentinarians"
All modern ARM chips support secure mode, it's a set of modes, in AArch64, we colloquially call them EL3 (Exception level 3, highest privilege level above EL2, the hypervisor level).

Most ARM cores start in secure supervisor mode, which can transition to secure monitor mode at will (secure monitor being a special version of secure supervisor). Most bootloaders including Allwinner's will exit secure mode by setting the NS bit in SCR and therefore enter user provided code in non-secure supervisor (or hypervisor mode) which would be called EL1 (or EL2 for hypervisor) on AArch64.

EL3 has nothing to do with ROM or Allwinner or anything else, it's an execution mode defined by ARM themselves, the core is reset in that mode.

(Secure mode is also known as TrustZone, if that term seems more familiar though TrustZone is usually "the whole package" including support from the CPU and the corresponding peripherals)
You mobile phone == dial up. Just less reliable and drops more packets.
It sounds a bit like 80s-style speech synthesis:

https://www.youtube.com/watch?v=sV3pYZZ2jEw

(This example is the Dr. Sbaitso demo that shipped with Sound Blaster 1.0/1.5 or so and onwards.)
>"anti-open source CPU cores"

I take it you're talking about the SoC rather than the CPU. In this case, open-source drivers for ARM SoC weren't exactly common when the RPi was launched. For example, I can't think of a single open-source GPU driver (used with ARM SoCs) that was available at the time.
As a European watching from afar I feel like the US government should rather come after the insane pricing schemes of hospitals and pharma companies that make insurance so expensive in the first place.

Need your appendix removed? Better get a loan from the bank. Just because they can.
> So you invent an essentially new language

It’s still the same language, just new ways to write it down. It’s no different to writing Russian or Greek using the Latin alphabet.
Certainly it's important to realize that the english text is a merely an approximation of the actual pronunciation, but this isn't really that different than any other language that uses the western alphabet. The same thing applies in French, Spanish, German, Italian, etc. The student will quickly learn that even though the letters look the same, each language has its own idiosyncratic way of vocalizing them. Any textbook or teacher that does not emphasize this is not a very good one.
I don't know what "(at best) research level stuff" means. Here's a well-regarded LLVM lifter by a very well-regarded vuln research team that's open source:

https://blog.trailofbits.com/2014/08/07/mcsema-is-officially...

There are a bunch of other lifters, not all of them to LLVM.

Already, with the idea of IR lifting, we're at a point where we're no longer talking about reading assembly but rather a higher-level language. But this leaves out tooling that can analyze IR (or, for that matter, assembly control flow blocks).

Someone upthread stridently declared that analyzing one version of a binary in isolation was hard enough, but that the work of looking at every version was "staggering", "capital-h Hard". But that problem is in some ways easier than basic reverse engineering, which is why security product companies and malware research teams have teams of people using BinDiff-like tools to do it. "BinDiff" is a deceptive name; "Bin" refers to compiled binaries, because the tools work based on graph comparisons of program CFGs.

Part of the problem I have talking about this stuff is that this isn't really my area of expertise --- not in the sense that I can't reverse a binary or use a BinDiffing tool, because most software security people can, myself included, but in the sense that I'm describing the state of the art as of, like, 6 years ago. I'm sure the tooling I'm describing is embarrassing compared to what our field has now.

Open vs. closed source is an orthogonal concern to verifiability.
>false. It's a tort

They're not mutually exclusive. Criminal negligence exists throughout the common law world.
This so much. That's as rigorous as a study of the most gas efficient automobile using only data provided by Volkswagen.

This is not an independently controlled dataset.
I learned Chinese in Taiwan with Zhuyin, as a child. The first thing the teachers got was instruction in Zhuyin, and the way our books and teachers taught Zhuyin was by giving latin characters and English words with corresponding letters. Just looking at Zhuyin did not tell my English-trained brain I was learning new sounds from scratch.

In college I was taught Pinyin and we were given instruction on the correct pronunciation of each phonetic sound, positioning of the tongue etc., and the teacher spent time drilling us on that.

What matters is good instruction. Using Romanization doesn't encourage more correct pronunciation. Roman and Cyrillic alphabets are used for all manner of languages with completely different phonologies.
5 Big Ideas in Education That Don't Work
I learned Chinese using Pinyin it's the first thing you learn and it was a total epiphany. RIP.
I'm opposed to using it for beginners who aren't familiar with the phonetic system of the language. Once you learned the phonetic system properly, and you know the character's in Romaji and Pinyin don't represent the sound you know in English, of course it's then helpful for learning how to type Japanese or Chinese.

Don't get me wrong, Romaji has useful purposes, such as representing place names in Japan for foreigners, etc. But as a learning device for learning Japanese, it's not a very good one.
this took about 30 seconds:

http://www.politico.com/story/2016/12/edward-snowden-russian...

https://www.theguardian.com/us-news/2016/dec/22/edward-snowd...

https://www.washingtonpost.com/news/fact-checker/wp/2014/01/...
Google plugs severe Android bootmode vuln that exposed devices to spying
the heat and quantity matters. If you experience bleeding and severe symptoms, capsaicin intake will decrease mortality.

fresh vs processed or dried also matters.

the key finding is to eat fresh red chili peppers everyday. It should be hot and mildly uncomfortable but not the point where it's burning and bleeding
I wish the RPi could net-boot without an SD card inside...
... under my desk.
Do You Really Get Classloaders?
Draco: library for compressing and decompressing 3D, C++ and JavaScript decoders
I apologize, but I don't understand the project.
The first leaks where the collateral murder videos.
how do you figure pharma profits are one of the reasons for the crisis and to what extent is that reason?

also out of curiosity, did you read the article?
谋 is more like "strategize" and "scheme" than "think", there's a certain connotation associated with it that limits its scope.

Both 思量 and 考虑 as suggested in the blog do not work too well as mottos, I feel, as they lack in simplicity and elegance and work better as part of a complete sentence. 思考 is OK, but just 思 (as mentioned in one of the blog comments) could be even better.
Could you recommend a learning resource for Python 5? I also tried learning it years ago but eventually went back to 3.0.
I worked at Red Hat when SELinux was made mandatory. Every single customer was hit with 'avc denied'. Having to explain that avc was 'Access Vector Cache' and that 'Access Vector Cache' was part of SELinux, and trying to convince somebody to patch the messages to just say 'selinux denied' was nightmarish.

That said: SELinux is one of the only things that can make shared Docker hosting (ie, where the containers are actually isolated from the host and each other) possible.
I agree that there are better alternatives out there. Angular simply has the advantage to be "by Google", which will give it always the upper hand for non technical "deciders".
It's always the same Idealism vs Realism dichotomy. Thinkers and Doers. Design and Implementation.

In order to achieve anything non-trivial, you need to aim a step above. You need a direction, a vision that's bigger than what can be achieved in the short/medium term.

My skill as an idealist/thinker/designer is to come up with pure, abstract, and consistent models. I try not to consider reality (the present) in order to keep my models pure. I try not to consider implementation details as this will introduce exceptions and inconsistencies that will weaken the model and dilute the vision. I come up with the what, not the how. Anyone who doesn't strictly adhere to these methods will ultimately produce mediocre and short-sighted models. Sadly, it seems like those people are often the ones whose models are adopted.

We don't really care about living to see those visions become reality. We are selfless and do this out of moral duty. Even if things improve, we will inevitably remain unsatisfied with reality as we discover additional problems. We care about the process, not the result.

The one thing we feel an urge to fix, is your ignorance. There is nothing worse than witnessing people being content with the way things are.
Actually, the kind of features ESR asks for are covered by github, IMO. It's easy to review code quality from there, the number of stars and forks reflect project popularity, the list of committers (how many they are and who they are) can help having an idea about long term maintenance expectations, etc. The cool thing is that it works for almost any language : github is "social coding", thus it's also social validation.

But this article raises an other question : if you want 10 years long stability, is it wise to rely on third party code? If you plan on maintaining your own project that long, it's probably acceptable to take time to write your own implementation and maintain it. Or you could even use a third party dependency, then progressively replace it with your own API compatible implementation.
I mean isn't there some psychological studies that show that people consume more calories when under extreme stress. And what could be more stress inducing than poverty and what provides the highest amount of calories ?

It's easy to demonize these people but they're under extreme stress all the time.
Momentum is an unintuitive thing. See, for example http://www.brake.org.uk/events/15-facts-a-resources/facts/12...:

A vehicle travelling at 20mph (32km/h) would stop in time to avoid a child running out three car-lengths in front. The same vehicle travelling at 25mph (40km/h) would not be able to stop in time, and would hit the child at 18mph (29km/h). This is roughly the same impact as a child falling from an upstairs window. The diagram below illustrates the impact at various speeds. The greater the impact speed, the greater the chance of death. A pedestrian hit at 30mph has a very significant one in five chance of being killed. This rises significantly to a one in three chance if they are hit at 35mph

Or the charts here:

https://one.nhtsa.gov/nhtsa/Safety1nNum3ers/august2015/S1N_S...
FDA clears first-ever ultra high frequency clinical ultrasound
The print statement is a little more convenient in the REPL. Otherwise there is little to complain about having a more consistent, extensible print without any magic. Every Py2 coder should be sticking in "from __future__ import print_function" to train themselves for the transition.
This seems to be blogspam ripping off the original https://meebleforp.com/blog/36/angular-2-is-terrible

See previous HN discussion: https://news.ycombinator.com/item?id=13081833
They look pretty good. Can be useful for gravatar like usecases. Good work!
Stolen from here https://meebleforp.com/blog/36/angular-2-is-terrible
I don't know if it's significant from a legal standpoint, but for as long as there's been an App Store, it's been a walled garden. Yet Apple still became the most profitable phone manufacturer, despite that. It's not like they took advantage of their position in the market to force some new anticompetitive/anti consumer behavior the same way Comcast might.
"It hurts when I move my arm." - "Don't move your arm then."

No one who uses dial-up wants to use dial-up.
How America Can Beat Russia in Cyber War, Despite Trump
I cannot disagree with this line of reasoning at all - the whole idea behind reckless is a disregard for danger or consequence, not the actual consequence itself.

I was younger and first got a license, for sure my friends and I would drive faster than we could reasonably react to a sudden change or would purposefully spin out or fish tail when there was snow; no one was ever hurt but I considered it reckless then and still do. Just because we were lucky and didnt hurt someone or cause damage it doesnt mean it wasnt a reckless maneauver. A single change, a patch of ice we didnt see, slipped the clutch, misjudged the stopping distance, and it easily could have been an accident.

Recklessness can't be judged just by "did anyone get hurt?"; that defies the definition of the concept. I'm not able to argue the data on speed limits, but we're certainly told they're not arbitrary. Likewise, it at least sets an expectation as to what vehicles on the road will be doing. I have seen and have been a person who felt 60 mph in a residential was a fine idea, but just because we didn't hurt someone those times doesn't mean it was a good idea. It's better to have some consistency than people just driving what feels right, and removing the limits removes the ability for us to correct judgement of those who are clearly erring in their judgement. (If there's no law, there's no consequence unless they cause harm, which is someone else paying for their lesson; hardly a fair proposition)

If we think limits are too low, the answer is "prove it with evidence and change the limits." Make a case, back it with data, and get it out there. It's not just do whatever you want.