skysight-inc/HackerNews huggingface dataset:
One way to address this is to create different standards of evaluation and to adjust the legal liabilities accordingly.

What I mean (very roughly) is something like:

Untested => you are on your own, don't imagine you can sue anyone if something goes wrong, this is the default
Conditional => some basic efficacy/safety protocols have been evaluated, some limited liability for the drug companies,
Approved => full suite of evaluation done, liability still capped but at a much higher level then Conditional

There would still be legal safeguards around fraudulent or negligent practices of course that wouldn't be constrained by the capped liability I suggested above.
Is it really this difficult to create a custom launcher?
You know what, this is a-ok. Everyone got what they wanted.
This is a lot like a bug I found in Heroku's system a few years ago. Basically, if someone doesn't claim the wildcard subdomain for their primary domain and has a wildcard SSL cert anyone could (can?) claim subdomains. A quick google search yielded hundreds of exploitable domains. At the time it seemed like a pretty big vector for phishing.

I have no idea if they fixed this and they gave me a t-shirt.
What's interesting is that growth has accelerated since September 2016.

http://apps.axibase.com/chartlab/e8635882/13/

Any good reasons behind it?
try this, as simple as in chrome
https://addons.mozilla.org/en-US/firefox/addon/profilist/
You are very confused if you think both "royalties" are the same thing.
Ah, but can it tell when I'm trying to be witty?
Fake profiles – Facebook not even trying
I now have had a half-dozen fake profiles of people I know set up with the same name, basic information, and profile pictures.

Facebook is, allegedly, an amazing company with some of the best developers ... that don't have a basic check if a new profile has the same name and profile picture of an existing one that is clearly fraudulent.
EDIT: And the thread sinks quite rapidly, which is the usual response after an unpleasant term like "academic industrial complex" is mentioned.
Yeah. The article makes a case that people have come to a newfound mistrust for statistics.

But, that mistrust has been around for a very long time.

A big part of the mistrust is not in the numbers themselves, but in the people who trot out the statistics and the way they carefully cherry pick numbers that support their cause, ignoring other numbers.
Signed packages from trusted repos should not need firewalling, at least not if you're using a serious distro rather than a hobby project.

Software has security vulnerabilities. So, even if the software is trusted, there could be a zero-day vulnerability that is exploited. I'd rather have software stopped in its tracks. (For this reason I think something like Little Snitch or Douane is not enough, you also need sandboxing.)

will generally break as soon as they can't do their snooping because they'll segfault or block waiting for the answer that never came to the package that was never sent anyway.

Maybe macOS apps are different, but I never had this experience during while using little snitch for almost 10 years. I recently started using Little Flocker (which is like Little Snitch/Douane, but for filesystem access) and so far no program has crashed as a result of denying access[1].

[1] Including the JDK installer, where I denied writing launch agents and Java itself trying to write to ~/.oracle_jre_usage.
I was on the fence about leaving SG, now I'm for sure out, thanks.
My first thought was that this kind of technology will eventually put police artists out of a job. Given a verbal description from the witness such a system should be able to generate several possible photorealistic images of suspect faces.
Torsimany: translate any JSON file to stylish, human-readable Markdown
And why would do that? Those two groups are keeping the lights on over there. You aren't exposed to anything you don't wish to be. You can have a feed entirely composed of whatever echo chamber you please. Democrat, Stalinist oh I just repeated myself. Pornography is ripe there. As are Islamic terrorists and other criminals.
In a world where we break down monolithic applications into smaller services it's clear that the JVM memory model at startup is way bigger than any other language, I'm not sure how one can argue about that.

Since those "micro services" have just a few features, their memory won't grow up that much over time, so the startup memory is an important factor.
If you want to say "John has a flower", saying "his flower smells good" is fine.

But try it with "Someone has a flower. Their flower smells good." Sounds right to me.

There's no need to replace one with the other everywhere. For example, why would you use "ain't" if you are trying to sound formal and a suitable alternative exists? Just say "No one has time for that."

I think it is a strawman argument to equate "there is an alternative word that can be used" (like they or ain't) with "one must use the alternative exclusively" (see how "one" was chosen over "they" in that sentence?)
The very next line of Matt's blog post explains this:

> I mean, it’s not impossible to unroll loops (if you know the maximum number of iterations), but the resulting circuit is not likely to be practical. Moreover, this isn’t purely an issue with the use of circuits, but rather with the use of encrypted data. No matter what computational model you employ, you’re always going to have difficulty with things like control flow changes that depend on input data that the executing party can’t see.

If you want to add in interaction, then you have other far more efficient schemes for achieving such FHE, like garbled circuits
"Their" is not always plural.
There are no sources when the only official source is unreliable. You are left guessing for your self, relying on a disparate set of numbers, "hunches", and wild extrapolation. The 4% I think is based on the "Li Keqiang Index" that estimates real GDP based on electricity usage and freight traffic.
Previous discussion: https://news.ycombinator.com/item?id=11273240

Unfortunately with zero comments.
Appears AVG used to have an estimator called PrivacyFix, but site is now dead. Here's a story covering it:

http://adage.com/article/digital/worth-facebook-google/29304...

Author claims the tool estimated that their value to Google alone would have been $200+ and explains why too.
I've been using DuckDuckGo for the past year and love it. But this also gets me. I've been trying to evangelize with my colleagues and friends and the whole duck thing makes it hard for them to take seriously. One friend said the logo reminded them of Aflac.

And then all of a sudden we're talking about a duck instead of why private search is important.
Does that 10-100/day/surface number refer to 'feedback' hits, or webapp/site usage? I'd think if that's 'feedback' messages it'd indicate a much larger amount of visibility-inducing traffic using the page the widget's made available on. And IMO, small orgs (of which I'm a 1x/shop), are & can be freelancers, or real jobs, that are/can be more than 'side projects'. To me, saying 'side project(s)' infers a less-than-professional implementation. Maybe not to everyone, but that's where my mind goes with that term. As a budding freelancer myself, my jobs are more than 'side projects', but rather 'sporadic contract employment'. I guess maybe I equate that term with more along the lines of 'for fun'. -So that's my 2 cents...
Thanks for saying this so eloquently. I saw the headline and rolled my eyes, because as a consumer, I have absolutely no recourse for Apple's extortion.

If Apple loses this suit, then we could feel smug that they have tasted their own damn medicine. But that doesn't improve the situation for consumers.

The only recourse we have is to sustain a boycott, or change the laws to protect consumers. Neither option seem very plausible.
From the README: "Learn a lot and have fun"
>CDMA doesn't seem to be better than GSM in any technical respect.

CDMA is vastly superior to TDMA in spectrum utilization, although OFDMA (LTE) fairs better than both of them. For this reason all of the 3G standards including GSMs own UMTS were CDMA-based.
You're not alone, I hate theses processed added frames ! Sometimes it even introduces weird blocking artifacts. I even suspect it sometimes fail to recognize a scene cut (and try to interpolate movement..)

People can't see this because the answer to oculusthrift's "At what threshold does the human eye no longer notice an increase in frame rate" depends on people. Most people around me can't see above 30 fps. I know I can see the difference between 25 and 50 fps.
I agree that the focus on memory size is misguided, but I do think that startup times are critical even (especially?) in production. Compounding the startup time of the JVM w/ classpath searching and reflection heavy libraries and frameworks really impact dynamic scaling and deployment. When I can setup monitoring that dynamically scales my application fleet in seconds, having to eat the cost of both a large binary (JDK + all of my various libraries) and then the startup cost of that application hurts.

I'm not saying that Java applications can't be built to be small and fast, but its not how most of industry had thought about building them. Golang has the benefit of not having that legacy to begin with.
Discord is using Elixir, and is pretty large.

In another thread, their CTO claimed they have more users than Slack.
I thought so, too. Uber pays its full time employees some of the highest salaries in the Valley. This exploit could have easily fetched 10x the money on the black market.
> The listed Symantec certificates were issued by one of our WebTrust audited
partners. We have reduced this partner's privileges to restrict further
issuance while we review this matter. We revoked all reported certificates
which were still valid that had not previously been revoked within the 24
hour CA/B Forum guideline - these certificates each had "O=test". Our
investigation is continuing.

So Symantec are letting third parties issue certificates using their root? Seems like a pretty bad idea when it's their own reputation that is on the line here. And also don't we have a system in place for that by using intermediary CAs that wouldn't require the certificates to be issued directly by Symantec?
Ask HN: Citus/Postgres as an alternative to NoSQL
Is using the Citus extension to Postgres a sensible and scalable alternative to NoSQL databases? DynamoDB seems really expensive depending on the use case and managing Cassandra seems harder than Postgres.

I'm wondering if my hunches here are valid.

Note that Citus MX is in beta and will eventually be open source. It allows fully decentralized nodes (no master node bottleneck).
Dgraph Custom Encoding: Go implementation in net/rpc vs grpc & why we switched
Neil Postman's "Amusing Ourselves to Death" [1] is a great torchbearer for McLuhan's POV, bringing it solidly into the era of one-way video media (cable TV, VHS, etc) that dominated 80s/90s public discourse.

The internet, though, is kind of a different beast than radio or TV because it is so interactive. It's not just 1-way, 2-way, or many-to-many; it's all those things simultaneously. I'd love any recommendations on books/authors that pick up the torch from McLuhan and Postman, and try to cast some light on what "the medium is the message(/metaphor)" means in the hyper-connected age.

[1] https://en.m.wikipedia.org/wiki/Amusing_Ourselves_to_Death

edit: Just a thought, it's not only the interactivity that makes the internet unique, it's also its infinite flexibility: it can emulate print, radio, TV; but it can also invent its own versions of those media (podcasts, youtube, twitch, etc). It can invent entirely new kinds of media too: VR, AR, etc. So maybe the internet is a kind of "meta-media", which makes the analysis much more difficult; but promises some real gems of insight - if any can be found.
I do not think that Arch is a newer branch but a framework that uses the standard fable compiler.
This comment breaks the HN guidelines in a somewhat interesting way. Your second paragraph is edgy and glib, but still borderline ok—it's possible to see a substantive point there (one that I'm sure has crossed many minds when reading about this topic), even though you expressed it more rhetorically than thoughtfully. On the other hand, your third paragraph clearly crosses the line and points nowhere good. Please don't post like that here.
That's not what I'm talking about at all.

My issue is that the original commenter listed "resistance" to bit errors as an advantage to using Elixir vs. other languages for web dev.

The question then becomes: who the hell needs bit flip resistance when building a web app?
Yes, it is about 20 cents to open a channel, and 30 cents to close it.
They had a lot more than that at the time of acquisition.
Given how events played out, I think this went exceptionally well.

Also, nowadays with the cloud and co. it's easy to forget / fully appreciate how much complexity is abstracted away for you.
simply,
pip install torsimany

JSON to Markdown converter - Generate Markdown from format independent JSON Edit
I'm not sure what specific scheme you have in mind, but while FHE for Turing machines does exist, it is really, really hard to instantiate. A construction with some restrictions and requiring a massive amount of preprocessing is given in Goldwasser et al.'s famous paper on reusable garbled circuits, and it already uses succinct functional encryption as a building block; and for the stronger notion of FHE for TM you basically need obfuscation. So thinking about implementing any of this seems somewhat premature to me.
Welcome+to+Blockgeeks-+New+Members+Introduce+Yourselves+Here
I've had some problems with DDG's bang searches on some sites where the sites' search URLs moved or could use better search parameters. Where can users report broken bang searches or suggest better options?

DDG has a lot of open source code on GitHub. A list mapping bang search terms to site URLs could be maintained as a simple text file on GitHub so contributors could test them or suggest improvements.
Show HN: Torsimany, translate any JSON file to stylish, human-readable Markdown
No in the case about academic fraud I'm with you, i.e. I do feel that it should be exposed if it existed (but on that theme I actually have a lot to say, because I see it as a failure of the publication methods and evaluation above all... but that is not related to this theme).

What I find hard to believe is that, after all the issues that German had with the team before coming up with those accusations, those accusations are actually true. Specially given the exact accusation, which is quite odd, German claims that some (not all) points are false about experiments where he wasn't directly involved.

Still, in any case, even without the issue of academic fraud and/or it's accusation existing, the previous behavior from German is not that of someone I would like to have my team as a colleague, much less if I was the PI. I never in my life had anything that amounted to this kind of trouble with any member of my team at work... much less with 5 of them. SO, on that light, I think there is a problem when the PI doesn't have enough authority to remove someone like German.
As the author, I can assure you that I personally do not think that Trump resembles Hitler. But the rise to power utilizing retribalization tendencies described by McLuhan that follow the emergence of new types of media might be comparable.

Anyway, I refrained from specifically mentioning Trump because he is far from the only individual who is capitalizing on the situation.
Agreed, but it's because the following, resulting in the mangling of the language. I'm referring to formal writing style.

Of course, my quote is starting a sentence with a preposition, which is also poor form.

>Because he is no longer accepted as a generic pronoun referring to a person of either sex, it has become common in speech and in informal writing to substitute the third-person plural pronouns they, them, their, and themselves, and the nonstandard singular themself.

https://en.wikipedia.org/wiki/Singular_they
I like that BuckleScript has chosen the module-by-module design, if only to explore more design space than what was previously done in Scala.js and ClojureScript.

I do not think this is what makes the 150 KB tax of Scala.js, though. The dead code elimination of Scala.js is really good, plus we combine it with Closure as well. But it faces a very difficult challenge: the entanglement of the Scala standard library. The collection library was designed when the JVM was the only target, and decoupling within the collections library was definitely not in the requirement set. This is why, once you touch the Scala collections library in Scala.js, you receive 150 KB worth of (non-gzipped) code. There is currently a large-scale effort to redesign the collections library for Scala 2.13 [1], with, among others, a desire to reduce inter-dependencies (while keeping most of user-level compatibility). This should hopefully significantly improve the situation of Scala.js regarding code size for smallish applications, as you will only pay for the collections you actually use; not the entire set of collections once you require one of them.

[1] https://github.com/scala/collection-strawman
You don't cite any data, you are just waving a degree that anyone can obtain.

But the "unruly hackers" here are always on the side of the status quo ...
Even the Steve Jobs example of a super-talented individual relies on luck.

In the universe where he didn't meet Steve Wozniak, Steve Jobs was probably consistently in the top 3 Mercedes salesmen in California.

Not to mention: merely being born in a wealthy country during a period of relative peace is so much luckier than the lot of humans throughout history that it is almost worthy of bad science fiction.
This isn't news to me, but I like having a handy little article that I can send to people to point to and say "See? It's not just me. Science."
Depends where you are. Here in Friesland, the local public transportation company has made deals with taxis in the area to reduce/eliminate inaccessible places by offering cheap connections between (e.g. your house) to the nearest bus station. I use this service frequently if I don't want to drive, and it costs 1.50eu - the same trip if I were to just call a taxi would run 20eu.
Having distributed consensus as a distinct service (as opposed to directly building it into each application) is beneficial to a lot of companies because they can invest resources to make it operate well (in addition to being correct) and reap the benefits across all of their services. By well, I both mean having competent operations around the service as well as making it more resilient and faster to respond to various networking failures.

the downside is that in order to use something like kafka locally (afaik?) you have to run zookeeper locally as well.
Nokia sued Qualcomm back in the day when they were the biggest mobile manufacturer. http://www.nytimes.com/2008/07/24/technology/24qualcomm.html Look where they are now...

Apple needs to win with technology and innovation, not lawyers
Dynamically scaling a Kafka cluster in seconds is generally not something you're going to want to do anyways, regardless of what it's implemented in.

Rebalancing partitions isn't fast.
Building out a network to do just that. Not live yet. Would you be interested in being a beta user for our campaign?
Please go to crowdraising.co
There's activities you can become pro later in life and other you can't. For instance for a pro musician, I remember piano can be started at 7 or 8, violin for instance is already late at 5.

Of course not every kid wants or needs to be a pro violin player. But if you don't make them give it a serious try in the first place , you'll never know if they'd want to be one or not.
My favourite example phrase to mess with NL parsers:

Buffalo buffalo Buffalo buffalo buffalo buffalo Buffalo buffalo

Stanford fails miserably on this one, even at the tagging step:

Buffalo/NNP
buffalo/NNP
Buffalo/NNP
buffalo/JJ
buffalo/JJ
buffalo/NN
Buffalo/NNP
buffalo/NNP

... but then, most humans also find that sentence really hard to parse.

Check it out:

https://en.wikipedia.org/wiki/Buffalo_buffalo_Buffalo_buffal...
It's a way more complicated story, and it's important to disambiguate between "CDMA" the standard and "CDMA" the channel access method.

The core issue was that in the 2G era, "CDMA" (the Qualcomm name for IS-95/IS-2000) was built on CDMA (code division multiple access), while GSM was built on TSMA (time division multiple access). CDMA (the channel access method) is more spectrum efficient than TDMA, and has some other nice properties. When the time came for carriers in many countries to deploy their 2G networks, it seemed like a win to use CDMA (the standard) because they could support more subscribers with the same amount of spectrum. Companies other than Qualcomm did make CDMA chips in this era.

In the 3G era, the GSM standard also moved onto CDMA ("UMTS"). But this was a pretty serious migration effort, so carriers that had already deployed IS-95/CDMA typically moved along to the 3G variant of CDMA (IS-2000), which required buying less new equipment.

As the 4G networks starting showing up, Qualcomm saw the writing on the wall so they (a) got on the GSM/LTE bandwagon and (b) started investing heavily in their SoCs, which could be bundled with their basebands for smartphones. Since they happened to also be the only remaining baseband manufacturer that was making CDMA support, they also had a tremendous selling point: use our chips in your smartphones and you can still support 2G/3G CDMA networks, which at this point were widely deployed. Plus Qualcomm has so many patents on LTE that you're probably going to end up paying them quite a bit of money even if you don't buy their chips. So today even companies like Samsung which make their own SoCs make variants of their phones with Qualcomm chips to support CDMA carriers.

Qualcomm fans/employees will often mention that this really all goes back to the 80s/90s, when Europe forced everyone to use GSM (which just so happened to be hugely reliant on Europe-owned patents). CDMA never really got a fair shake at world domination. Perhaps if the FCC had just picked one cell phone standard (perhaps CDMA) like they did for TV and radio things would have worked out differently. China briefly tried coming up with their own cell standard (TD-SCDMA) for similarly protectionist reasons and it didn't really work out.

As it is...well, the world finally ended up settling on LTE.
But some of the blocking artifacts are fascinating to behold! People have drawn from it a new aesthetic in the form of the Glitch GIF.

https://duckduckgo.com?q=!googleimages+glitch+gif+filetype:g...

http://0.media.collegehumor.cvcdn.com/51/69/9fc1f4a928590f14...
The "driver" is for adding a gui for doing things like customizing buttons and sensitivity and stuff, not to make the basic mouse work.
npm support is now available through https://scalacenter.github.io/scalajs-bundler/

I agree with your analysis on breakpoints and step-by-step in Scala.js. Usually it's a good idea to disable the Scala.js optimizer if you're doing that, using:

scalaJSOptimizerOptions ~= { _.withDisableOptimizer(true) }

But it's still not 100% perfect. I am toying with the idea that we should have a mode of the optimizer that tries to optimize for debuggability with step-by-step and breakpoints. This would try to arrange the generated source in closer relation with the source code (like, 1 line = 1 line). All of this is trying to work around limitations of source maps, and also of browsers' support for source maps. It would be so much easier if source maps were a little bit more powerful in what they can express (e.g., indicating what a "step" should be in the code).