skysight-inc/HackerNews huggingface dataset:
Congrats on the success so far Greg. Watching the progress has been great. Being a bit involved with gym and also the unconf has given me a peek in to how things are run and I have to say - it's a startup. It evolves fast and isn't afraid to take calculated risks. That's a great thing to have for something as open ended as what you guys are trying to do.

It looks like a blast and I will continue to keep an eye on things.
I used your previous post to help define a lot of the scope of my position for myself. I look forward to seeing more of this story unfold.
> So 10% margin [citation needed]
Could you elaborate? Although your eyes are receiving light from a source that is centimeters away, they are not focusing on an image centimeters away.
The joke is if this specific "Backdoor" would be used widespread it would generate a lot of noise (eg. random key changes, keys that don't match) and would cause massively bad PR for WhatsApp. No way are they doing that.
And FYI: I campaigned for BHO in 2008 primarily on his platform promise to reform healthcare.

I helped get him elected. I wanted reform. I wanted better outcomes. I wanted people to participate.

Consider me disillusioned.
Indeed. I'm working under the assumption that the client itself is sound.

The question is: how many users will actually check the Security Number, and recheck all the security numbers now that they were made aware of having to turn on the notification.

What WhatsApp is doing here is like using a self signed certificate to do TLS (your own fault if you did not check the cert yourself using whatever out-of-bands method available) and on top of that the TLS client later by default will not tell you when that self-signed cert changes (and you therefore need to recheck it) and for added bonus routing all traffic through them.
> That way the server has no knowledge of who it can MITM without getting caught.

What exactly do you think is the worst thing that could happen if you "catch" them doing this?

Now what do you think is the worst thing that could happen if they receive a subpoena or NSL or whatever that tells them to do this regardless of whether the user finds out or not (because the government wants the message contents that badly)?

Which do you think will prevail?
But trying to force me to buy something that is against my conscience isn't a nasty form of oppression? Trying to regulate my behavior based on your non-religious views is just fine?

Pot, meet kettle.
'Given the size and scope of WhatsApp's user base, we feel that their choice to display a non-blocking notification is appropriate. It provides transparent and cryptographically guaranteed confidence in the privacy of a user's communication, along with a simple user experience. The choice to make these notifications "blocking" would in some ways make things worse. That would leak information to the server about who has enabled safety number change notifications and who hasn't, effectively telling the server who it could MITM transparently and who it couldn't; something that WhatsApp considered very carefully.'

Why not have every client show up as having safety number change notifications on and just choose whether to display them client side depending on user settings? i.e. if you have them off, no message will display and the message will automatically be resent using the new key?
If this was an isolated case I'd give them the benefit of the doubt, but then there's also stuff like this, where they literally say it's illegal for you to possess the leaked emails but it's OK for the media: https://www.youtube.com/watch?v=7DcATG9Qy_A
Hard to explain well. Let me try another way.

Thinking through this more right now, it seems like the default way of computers to solve this penalizes them. Every time they get more depth it hurts them unless you account for more breadth.

So lets say the programers know this. This STILL probably doesn't help much because...well idk. What's interesting is Tensor Flow is supposed to be massively parallel (breadth) and abstract the software/algorithms to do this. But if you follow this logic the answer must be gradient decent algorithms also get stuck somewhere... This must have to do with hyper-sensitivity to really having the full decision tree before optimizing.

The answer seems to be if computers are modeling this exactly as humans do, (using neural networks which then simplify this problem with heuristics), it just takes this much computer power to simulate 1 human brain optimizing for this.

Alternatively if they model it in a more brute force way it must take even more computer power because this is proving to be less efficient.
And it runs on iPhones!
I would think it would be both safer and easier to just never bother to implement those drivers in the first place.
But the sender would receive at least a notification of key change by the recipient. It is up to them to confirm the validity of the key.
I didn't think it could be much, but my first experience using the gear for a game of keep talking and nobody explodes convinced me otherwise. Even seeing the pixels and with the awful control method of that implementation (a classic iPod esque scroll wheel on the side of the headset which didn't map to the game that well), it was easy to get immersed.

Go up to using a rift or vice for Elite with my hotas and i can see it being awesome. Planning to get either a rift or vive this year.
These all sound like things that benefit heavyweight desktop environments and don't really impact tiling window managers at all.

I use DWM, no graphical glitches, no tearing, no jankiness, absolutely consistently quick (which actually kind of removes "smoothness" from the equation; everything is pretty much instantaneous).

Scrolling a document in Chromium very rarely pauses, but only ever when there's some bad JS blocking the UI, which isn't related to the window manager at all.
Your eyes can't distinguish between light coming in from really far away and light coming in from nearby that's been bent to appear as if it's really far away.
Markets work well for those things, they don't for healthcare, that we're here is proof of that. There's a good reason civilized nations have socialized medicine, it's the best solution to the problem. Markets are not the correct solution for every problem.
I strongly dislike you've obfuscated all your code. But as far as I can see, it's a HTTPS proxy, WebTorrent, FFmpeg and Electron. It's look really nice, so kudos for that.
Yes! Got this when I was in Belize a few years back and loved it. Was thrilled when I realized you can actually get it back here in the states too.
Right, as the article says:

> The only question it might be reasonable to ask is whether these safety number change notifications should be "blocking" or "non-blocking." In other words, when a contact's key changes, should WhatsApp require the user to manually verify the new key before continuing, or should WhatsApp display an advisory notification and continue without blocking the user.

You seem to be arguing that they should be blocking. While I agree that's definitely the best choice from a security perspective, I kinda doubt most users would appreciate having to manually re-verify keys every time someone reinstalls WhatsApp or changes their phone. In this case, WhatsApp decided to prioritize usability over security. You and I are of course free to criticize that choice, but it's hardly a "backdoor".

I'd add to the author's statement above and say another question we might reasonably ask is whether the notification should be on or off by default. While my gut reaction to that "On, obviously!", upon giving it a bit more thought I think it's actually understandable why WhatsApp chose off instead.

They're not designing WhatsApp merely for security conscious people, but for the masses. The average user is unlikely to understand or care enough about this warning to manually re-verify keys every time they see it, especially when the vast majority of the time it's just going to turn out to be the result of something mundane, like one of their friends getting a new phone. Honestly, I could go either way on this one.
This is an excellent resource for modern PHP development: http://www.phptherightway.com
That wouldn't happen to be Pepper would it?
>They developed a compensation philosophy that was conscious about not rewarding aggressive negotiators, nor punishing those who were conflict averse.

If aggressive negotiators can't get raises at this company then they'll just go elsewhere when they get better offers. If it's true that women aren't able to negotiate as aggressively as men then they'll just be stuck at one company instead of moving around a lot. The pay disparity will remain, it'll just occur between companies rather than within them.
How to Excercise and Work Out Lower Back Muscles While Sitting at the Office
Seems something of a straw man argument. Women have been saying that this is an issue for a long time, across a number of companies and industries, which points to a systemic issue, not an individual's responsibility.
Why 5x?
With a reused nonce: can you reverse the key used? Decrypt that packet? All the packets with that nonce? All packets?
"Compilers are usually not networked, concurrent, or timing-dependent, and overall interact with the outside world only in very constrained ways."

Are there any parallel compliers?
> Further clarification could be achieved by making the X button actually say "Disallow" and giving it a border separate from the word "Allowed."

I agree. An X usually means "close" or "hide this thing," whereas here they're using it to change a setting. It really looks like there should be a toggle switch there.
Which is essentially meaningless right? My EU iPhone still has a Lightning port, but sure the other end of the cable is USB.
No, first and foremost, I argue the notifications should be ON by default and feature a lot more clear and understandable text than what is displayed now.

The auto-resending of unread messages is another issue next to the potential of MITM due to no or unclear notifications about key changes
Poll: What IDE or text editor does HN use?
What IDE or text editor do you use most day to day?
Vi/Vim
Visual Studio CODE
Jetbrains-family editor
Politics. SF Police Chief and District Attorney roles have been frequent stepping-stones to higher offices.
Huh? Isn't that exactly how it is now?
Right, the author is priming his audience with the lens color through which they want their readers to see the rest of the story.

This is more honest when it doesn't involve an unrelated (especially negative) connotation.
Welcome to the world of journalism. If you want something stated with absolute certainty when the facts don't support that maybe you want to read propaganda.
Just 58 neurons? That sounds pretty ... Small.
> The notification that you see in WhatsApp, Signal, SSH, PGP, or whatever is the defense.

That defense, which happens to be the only defense, is turned off by default in WhatsApp.

You seem to argue they do so because it's bad UX to present such notification by default. That's - in my humble opinion - like suggesting browsers should turn off TLS chain errors by default because it's bad UX and just proceed with the connection as if nothing happened...
Bootstrap is a GUI framework for the web. It's like WPF or JavaFX but for HTML5 and JavaScript.

I wouldn't want to build a marketing website with Bootstrap but it provides web applications with a consistent look and feel.
The light is coming from an object inches from your face, but is the focal point of your eyes actually inches from your face?
> A cheap, catastrophic insurance coverage plan for young, healthy people addresses all three of these reasons.

No it doesn't. This is insurance, if the young healthy people aren't paying more than a bare minimum, there isn't enough money to cover the sick. You can't mandate care must be given and allow those unlikely to get sick to barely contribute, that's not the purpose of insurance which is to spread the cost and risk across the whole pool. What you propose does nothing to solve the actual problem, providing care for those who actually need it.
https://en.wikipedia.org/wiki/Elizabeth_B%C3%A1thory

The stories of her serial murders and brutality are verified by the testimony of more than 300 witnesses and survivors as well as physical evidence and the presence of horribly mutilated dead, dying and imprisoned girls found at the time of her arrest.

Stories which ascribe to her vampire-like tendencies (most famously the tale that she bathed in the blood of virgins to retain her youth) were generally recorded years after her death and are considered unreliable. Her story quickly became part of national folklore, and her infamy persists to this day.

She is often compared with Vlad III the Impaler of Wallachia, on whom the fictional Count Dracula is partly based, and has been nicknamed The Blood Countess and Countess Dracula.
Amber Agriculture | Embedded Systems Engineer | San Francisco; Chicago| Full-time, ONSITE | $55K – $95K, 0.5% – 2.5%

Define food traceability. Program and design one of the world's smallest and smartest sensor systems. Interested in ultra low power sensing(we're talking nA,uA,and mA here!), mesh networks, and automation(IoT) - this is the position for you. As a core member of our startup team, you will help extend and create “bulletproof” firmware for robust, ultra-low power connected sensors and architect fault tolerant network infrastructure between our connected devices.

Position initially will be in the Bay Area of California for first year. Must be flexible to move to Chicago, IL. Come join our team on this awesome journey to protect our world's food supply!

Apply here -> https://angel.co/amber-agriculture/jobs/202432-embedded-syst...
Distributed Pandas on a Cluster with Dask DataFrames
Re your comment:

>how you really stand out as a brand today is by opening physical stores that improves customer experience and brand.

How you really stand out as a brand today is by being better and faster than what's on amazon, which is hard as nails and has little to do with physical retail.

Re what your comment misses:

A whole lot of people drive trucks, cook food, and balance books. Those people will be jobless in our lifetime. (if anyone has advice on how to bet big on this, please share)
I am not a trained statistician, so can someone help me understand why this is even publishable?

I read the abstract and found they quote their key statistic at P = 0.01. The "NHANES III" study that their data comes from has over 1000 variables. Can't you just cherry-pick a handful of "significant" variables at the P = 0.01 level, when there are 1000 variables to choose from?
You quoted the answer to that already. If these change notices are "blocking", then the sending device won't re-send the message until the user has verified it. If the user hasn't enabled the notification, then the sending device will re-send immediately. This makes it trivial for the server to figure out who's actually enabled the notifications and who hasn't, which means the server can be confident about when it's actually safe to MITM.
Virginia “Broadband Deployment Act” would kill municipal broadband deployment
Haha, I see. That's a blade center with 8 "PCs", each supporting one PCIe x16 card and some supporting an additional x16 card (with only 8 lanes connected).

It's not really comparable to this project.
Amber Agriculture | Software Engineer - Back End | San Francisco; Chicago| Full-time, ONSITE | $55K – $95K, 0.5% – 2.5%

Define food traceability. Program and architect one of the world's largest and smartest sensor systems. Interested in working with thousands of real-time data points, creating enterprise platforms, and machine learning - this is the position for you. As a core member of our startup team, you will help extend and create minimal, redundant, fault-tolerant industrial data management systems to support thousands of connected sensor devices (IoT) and front-end users.

Position initially will be in the Bay Area of California for first year. Must be flexible to move to Chicago, IL. Come join our team on this awesome journey to protect our world's food supply!

Apply here -> https://angel.co/amber-agriculture/jobs/202446-software-engi...
The Artificial Intelligence Startups Redefining Industries
EFF to Court: Don't Let California Gag IMDb
Perhaps they were working while others were making faces for a stupid photo.
As far as I can tell, this only addresses benefits based on length of residency. What about immediate residency?
How to Talk to Congress
No, even if you have the notification turned on, the message is still resent without your consent.
His point was broadly about the tone in which Trump has been described in the media, and how that contributes to the division that currently exists in America.

"How do you talk people down after spending a year telling them Hitler was coming to power?" vs. "How do you talk people down after spending a year telling them a fascist was coming to power?" isn't a very meaningful distinction to me in that context. Your mileage may vary. Many mainstream outlets have expressed that opinion for a long time, and it's a point of view I've seen defended here on HN many times in political threads. I don't think it's a fringe viewpoint at all.
Can you actually be screwed in such negotiation? Even the worst negotiators in the world end up reaching an agreement, or they walk away.
> AI will only have a will of its own it is designed as such

Humans weren't designed to have a will, and yet we seem to have them.

> it would have a reinforcement learning system on top of lower sensory and action modules.

Isn't that what OpenAI is doing with Universe? It's simulated sensory/action modules now but I don't see why they couldn't be hooked up to real ones.
I'm sure there are bright enough legal minds in California to construct something that both legal and effectively equivalent for healthcare.
Because you really need to think of the reasons you were able to recruit those engineers with stock. Getting some value for that stock should be a consideration even for a flop. Success will probably take care of itself.
> What on earth do you mean by tech is 10x as diverse?

Diversity in culture.

Diversity in language.

Diversity in education.

Diversity in pay.

Diversity in location.

Diversity in religious belief.

For example my boss has no tertiary education and 2 of my coworkers only speak broken English.
What about users that reported bad battery life?
You could send a dummy message for those with blocking turned on and screen it out at the receiving client.
Learn Python...
QuickBuild7 – the continuous integration server aiming at flexibility
I'd say this demonstrates them being responsible: they're responsible enough to know that sexists like you are going to judge every single thing they do on the grounds of them being women instead of people, and they adjust their actions and behaviors accordingly. People can negotiate their salary aggressively. Women, evidently, can't.
> You need incentives to encourage the cheap customers to sign up

True. And the ACA now levies a tax penalty for those that don't sign up for insurance (2.5% of income, max ~$2K).[1]

[1] https://www.nerdwallet.com/blog/health/how-much-is-the-obama...
Ok, so what other mainstream product/technology went through a similar evolution as you claim VR is doing now? Recall 2 things:

1. VR has been tried in the past and went nowhere.

2. Adoption of mainstream things is usually pretty steep (cell phones, PCs, TV, Internet access)[1]

If you're saying current VR hardware are the "mainframe computers of the 60s and 70s" and we're still yet to see what the "personal computer of the 80s/90s" will be for VR, I can maybe buy that but I still have unanswered questions and would bet against it.

Also, current VR is also an add-on to a commodity product (PCs and gaming consoles).

You say niche for half a decade ... he says an "explosion" in less than 2 years. I don't get it.

[1] http://imgur.com/a/dr5rQ
New urine test can quickly detect whether a person has a healthy diet
As an engineer, I don't want to build something for a 0.3% (and declining) platform while my colleague is building the same app for a 80% platform in the same team. It's like you are writing codes which will be soon deprecated.

EDIT: market share http://www.idc.com/promo/smartphone-market-share/os;jsession...
I've yet to put a new one on.

I tried a wireframe VR headset game back in the `90's. It was a two player game where you tried to shoot each other. My wife was the other player and had a hard time time navigating the space. I moved right next to her and she couldn't find me, but what I could not do was pull the trigger. No way. Not even in VR.

I still don't do games, and I'm not really interested in wearing one of those headsets for hours no matter how "immersive" it is.

And to be honest, I really cannot imagine that people will do that on any large scale. I'm sure they will play with them, but I'd expect them to be more of a novelty than a daily use thing.

I would liken them more to a Segway. Awesome tech, but not near as popular in use as was imagined or predicted.

Same with "3D" movies. My kids don't like them all that much, but the tech is still impressive.
ResEdit was one of the things that got me hooked on programming because it was (1) so accessible and (2) could be used on real executables.

A few months after discovering it, I had jammed little hand drawn icons onto the menu items of damn near every application on my tiny hard drive. It was awesome.
Looking at SAT score, it does not explain why 90% of veterinarians are women, nor why 90% of men who graduate as a teacher end up in either math, physical education, or as an after school teacher like sport trainer.

Not only is it tiring to be a minority, but it is also much easier be in a profession that incorporates ones own gender identity into the work culture (a phenomenon that has become very common in the last 50 years). A man or woman who enters the opposite culture has two choices (as a study said), leave or assimilate a work culture which is opposite to their own. Data show a rather clear trend for both groups, which is that most leave after a short time, while many of the remaining tries to find a subgroup within the profession where they can create a local majority.

10% may just represent those that have yet to leave, or who for many reason aren't affected.
Your top comment on HN.

What's part am I missing that if we used hash(long_key pair + emp_key pair) protects us if the long term is known by an attacker? Why couldn't the attacker intercept the emp_keys.

I'm assuming there's no key signing done here.
Yeah, basically either get what value you can in the worst case. The best case will still get your people value even if you maintain control.
Actually, Phys.org is one of the few commendable popular science sites that quotes the abstract at the end of the article.
Unfortunately not, but I'd love for our country to be the first.
not really. ever wear a neckbrace, or pull a muscle in your neck? it really, really sucks.

i don't think physical movement will be a requirement of vr as a concept. you can sit and eat cheetos all day long if you want.

and in the future, i think we'll have instant-on instant-off see through LEDs so you can hit a button on the side and see through the headset into reality.
Interesting, but there are far better sources than "kitguru.net", which appears to be little more than wall to wall ads.

Better version of this news:

http://www.bbc.co.uk/news/business-38583001
It's insane because it just forces people who can't afford the deductible anyway to choose this plan for the low premium thus breaking the entire point of the system.