skysight-inc/HackerNews huggingface dataset:
a laptop you are actively using, connected to the internet? Assuming the NSA really wants to get you, there's nothing you can do. Here's how they would do it:

First they need an RCE, probably for your browser, maybe your TLS library. For a state actor, this is not a problem. Let's assume it's your browser. They need you to visit a page with their malicious payload. They can use phishing, they can take over a site you visit. Or they can take control of some machine in the path between you and sites you visit. From there they can MitM a TCP connection to inject the payload. (They might not even need to be in the path, but most exploits to MitM a TCP connection not in your path only work for long running connections). Now all you have to do is make an un-encrypted connection to any site, and they've got you.

Now they have taken over the browser process. Maybe you decided to be safe and do all your browsing in a VM, or use something like Qubes. Then the NSA has to break out a virtualization escape from Xen/VMWare/whatever. Difficult, but not impossible, and entirely within the NSA's capabilities. Once out of the VM, they can use an OS exploit to get into kernel space, or just do some privilege escalation and load a kernel module.

From here they've got complete control of your machine. They can do disk and memory capture, capture all your keystrokes, record your screen, etc.

All of the above can be done without leaving a clear footprint in network traffic or on disk. An analyst could find it, given time, but I wouldn't trust any sort of AV program or network monitor to catch any of this automatically. Exfilling data is a little more complicated to avoid leaving a giant footprint in the network traffic. Probably the best thing is to take advantage of that staging server they set up in your path: your machine can make a TCP connection to an innocent-looking IP address and get the connection MitM-ed. Break the data into pieces and hide it in innocent-looking requests to generic places and have it intercepted.

Notice everything I've described can be done completely remotely, without any physical access, and can be applied to basically any setup you have. The bottom line: once you're dealing with a adversary sophisticated enough to be able to use multiple 0days against ubiquitous programs, there's not much you can do. Your best defense at this point becomes security through obscurity: force them to have to figure out what setup you have to progress through your system. This might slow them down enough that they get caught.
Unless the user is trying to bypass the shadowban (by verifying anonymously), they should see "what they expect" whereas others won't see it.
I tend to agree with this analysis. Not only is the cost per click going down, but the amount of money they are paying out to get traffic is now at a staggering $7B a year run rate. Paying for more traffic and getting less in revenue per click shows up as a higher 'cost per revenue $' value which has gone up from 38% to 41%.

I have felt like the easy pickings have been behind them for a while but given enough money you can buy a lot of traffic. Not great traffic mind you but a lot of it.
That doesn't bother me at all. It's being involved with the incoming administration at the same time that I find questionable. I haven't heard that he's changed his mind and sent the passport back to NZ (so to speak), and yet his activities as a member of the transition team (and possibly others in future) have the potential to impact me in greater ways than if he were a private individual.
I'm curious if you've tried the new Daydream headsets?

http://www.theverge.com/2016/11/10/13578012/google-daydream-...

Seems like a much improved design.
The design of the website does not tell us who the maintainers / creators of the library are. At times it feels like a blessed library by the react-team. Most likely this was not intentional. It would be cool to have an about-us page where they talk about the maintainers and the "react-community".
This is a reasonable solution for many people.

I don't think I could stand keeping track of it in a spreadsheet:
- You can only access the data from the computer the spreadsheet is on
- Can't share with other people
Lastly, and most important to me:
- I find it ugly to look at spreadsheets or enter data into spreadsheets

The post is a useful list for people who want to create a todo list app about some potential features.
I think that even if there was an app that addressed all this (and I think there are apps that do address most of these points), the OP wouldn't be convinced to use it because a spreadsheet is just much more familiar to the him and he doesn't find them ugly.

I personally have my own todo list app that I created and always use (along with paper for more free form notes). In fact, there are 4 different versions of a todo list for different purposes.
I like it because it works exactly how I want it to work and I can change it as I desire. I suppose there's also a degree of pride in using my own app.
Animal testing is used for some initial toxicology and indicators that a treatment is worth testing in humans but you can't use animals to "prove" a treatment is effective for people.

Once a treatment is through animal safety trials, they will give it to patients with very advanced stages of cancer, who are considered unlikely to survive very long. This is both to minimize harm, and make it easier and cheaper to tell whether a treatment worked.
That doesn't follow.

I would have voted for Hillary because she is slightly less ugly.

What was that thing P.J. O'rourke said? Something about how he was going to vote for Hillary because he preferring the incompetent over the truly awful.

I can't vote in the US anyway because I was fortunate enough to not have been born there.

Edit: I can't remember now if it was O'rourke or Zizek who said that.
What is a blessed library?
How to Turn New Customers into Loyal Customers (the CLV experiment)
Interesting. I, like many stereotypical nerds have smoked weed and played Magic the Gathering.

With real cards, I kinda find the game irritating, but didn't feel a skill drop. Just would rather listen to music or just look at the pictures on the cards.

With MTGO, the official online client for Magic, I made a number of bad mistakes. No purposeful misplays, just lots of misclicks, accidentally skipping phases, etc.

But I am talking about being actually high here.
How to build a million core RISC processor
Tesla is suing Chris Urmson, who never worked for Tesla. He worked for Google.

Tesla didn't have any good autonomous vehicle technology. They bought a Mobileye and a radar, hooked them up to get lane-keeping and auto-brake, and hyped that into their so-called "autopilot".
TL;DR It sounds like Tesla's ex-employee broke his non-solicit by soliciting employees he worked with at Tesla.

The complaint is clear. This is about more than non-solicitation, and Anderson was not an ex-employee at the time.

From the complaint:

"Anderson worked to recruit Tesla's engineers, eventually making offers to at least a dozen people — all in direct violation of his contractual non-solicitation obligations and the duty of loyalty that he owed to Tesla as an employee."

This is about breach of duty of loyalty, and interference with contracts.

edit: phrasing
>>we can make enough of them fast enough to counter the disappearance of honeybees

Black Mirror Series 03 "Hated in the Nation"

http://www.imdb.com/title/tt5709236/?ref_=ttep_ep6
> This is being exacerbated by the increasing factionalism within the US itself.

The increasing factionalism recently in the US is arguably (barring perhaps some overshoot directly connected to Trump, on both sides) return to the long-term norm as the major political realignments resulting from the New Deal and Civil Rights movements upsetting the pre-existing alignment of the parties completes, and the parties return to a state of cohesiveness.
Robot beats “I am not a Robot” Captcha
I interviewed at Amazon once. A few months later, I was contacted by another recruitment agency completely unrelated to Amazon, using the custom email address I'd registered only with Amazon (I use it to catch people selling my email addresses).

I asked the recruiter contact at Amazon why they had sold my resume/details, or if they had a security issue. Of course they said they'd look into it (still waiting for that response a few years later...).

It is shocking that a company of Amazon's size with so much confidential information can't keep a hold on private recruitment data. I refuse to interview with them again based upon their complete disregard for my personal information.
That correlation simply implies that brilliant people perform well at IQ tests. It certainly cannot be used to establish IQ as a prerequisite, that's just not how statistics work.
The question is whether it ever does, and since (US, at least) domestic policy is to cut the social safety net and say "you're on your own" after a child is born, I'll take the "never" position. THat is, [US] government policy is that its needs outweigh the parents' only during gestation.
I know from a few years ago that there was some work at doing GPGPU-type work on the Raspberry Pi's video hardware. This is a project that I remember reading about, but didn't look into deeply: https://www.raspberrypi.org/blog/accelerating-fourier-transf...

There's another one that goes into more detail on the "how" of running other algorithms: https://rpiplayground.wordpress.com/tag/raspberry-pi-gpu/

I'm not sure if there are limitations that would keep it from being interesting for TF or not; I don't know enough about it.
Blessed Library: Something that is not part of the core offering but is the recommended way of doing certain things by the core maintainers. The main reason it is not in core is that it is probably not needed by all users of core.

:)
"Please drink a verification can"
Formal verification will never catch on, because it's silly and prohibitively difficult for all but the simplest programs.

On the other hand, formal construction is an idea whose time is long overdue. Rather than asking if program text T satisfies predicate P, instead start with P and then construct a T mechanically such that it must satisfy P. The latter is a much easier task than the former. Sort of like how it's easy to know N is the product of two large primes if you just multiplied two large primes together to get it.
The finale was weird for me, kinda anticlimactic (back to "hello world"); is that how it's expected to behave? No "finished" message or something? Or is my NoScript interfering somehow?

She is betraying us! Russia alone must save Europe.
Our gracious sovereign recognizes his high vocation
and will be true to it. That is the one thing I have
faith in! Our good and wonderful sovereign has to
perform the noblest role on earth, and he is so virtuous
and noble that God will not forsake him. He will fulfill
his vocation and crush the hydra of revolution, which
has become more terrible than ever in the person of this
murderer and villain!
# Correct!
# You have a new challenge!
# Print "hello world".
# Hint: There are many ways to print text on
# the command line, one way is with the 'echo'
# command.
#
# Try it below and good luck!
#
bash(0)> printf "hello world"
hello world
# Correct!
bash(0)>
As others have said, I have a problem with folks championing large social experiments and then leaving it to others to clean up the mess.

I also have a problem with the notion that the only freedom that matters is economic. As I see it, the goal of Thiel and his fellow-travelers is feudalism.

In any case, the Trump program seems to have little to do with freedom, even by that stunted definition, for very many people[1]. To the extent that we're seeing much coherency, it seems the program is to restrict the movement of labor, further free the mobility of capital, attack freedom of speech and give the hard-right a free hand for their social-engineering plans to attempt to construct a 1950s that never existed.

[1] I'll probably see a small tax break, but I'm likely the only one in my family who will. Most of them are regaining the freedom to once again do without routine medical care. Any tax break I do see will be donated to Planned Parenthood.
The paraplegic in question can now ride a bike!
http://www.bbc.com/news/health-35660621
A calculated sum based on an objective analysis of the needs of the situation to fit the financial requirements of specific action items.
If you're used to reading the financial news, the headline is fine, since you know what they're talking about.
I interviewed at Amazon (bad experience), got rejected (long story), and then TWO MONTHS LATER got contacted by an Amazon recruiter: "We need people like you!"

¯\_(ツ)_/¯
I just switched jobs 5 months back and a Pandora recruiter emailed me a few days after Pandora announced layoffs.

a) Emailing people that just switched jobs is a waste; most people will stay a year at least.

b) Who wants to go work for a company that is having layoffs?

Fortunately I'm happy where I am now but I was astounded at the brazenness.
Why should he? It's diversification.
I would be very interested to see a citation for this.
It's broken that device owners can make them behave according to their intentions?

Shall we eliminate software freedom too? Otherwise companies can just install a fork of Firefox/Chrome with MITM support added back in to their managed endpoints.
I don't see how that's so bad. They took a bit of time to mention some of your projects. Obviously they're not going to study them in detail.
That was a tough one. In the end something like this:

< war_and_peace.txt tr -s '!' | sed 's/!\([a-z]\)/\1/g' | sed 's/!\( [a-z]\)/\1/g' | sed 's/!\.!/./g' | sed 's/ !/ /g'

However, I don't think I learnt much from that. :-)
Don't forget racism - reefer madness was invented to further joint stigmatize minorities and MJ (pun intended).
Looks like Donald and Co. are giving up our intelligence assets now.
we don't even need markdown. Groff and less are already there and already handle formatting and reflowing just fine.
Yes, and people who run the robots will get experience in setting up and running said robots - they will also understand the direct requirements for the design/deployment of even more advanced robots. So if you hope to have an automation industry, you also need that feedback from the factory to effectively iterate products. Is this impossible at a distance - no, but it's a lot slower and less effective.
Then just cache the actual page. The cached version refers to some possibly old versions of the static resources, so your server needs to be able to serve old versions for a period of time.
I'm not sure why this is a problem
>Because it's pretty clear that's why it is?

It really isn't. The onus is on you to explain why it's so clearly an escape plan, when even the article acknowledges both that NZ is a tax haven and that Thiel gained citizenship before the election.
Why should he throw US citizenship away? Dual citizenship is cool.
Quora.com - Infact you can ask top writers of certain topics like Android, Secuerity to answer your questions. SOF lacks that feature.
I roll my own home automation with a combination of things. Once it is up I don't know that it I'm any worse off than anyone else. The worst I had was the weather API I was using dried up. 20 minutes later I had weather from somewhere else. I like that if I end up with a pile of useless junk it is my fault, not the decision of company that decided to stop supporting their hardware and shut down their cloud servers [1]. I don't need the cloud and I don't need a 3rd part to have control of my garage door opener. I'm still waiting for the hack that opens a half million garage doors around the country! (I have no idea how many doors these big companies control, but it would make great news.)

This may be the biggest reason I go DIY on my automation - it gives me a chance to learn things that I wouldn't get into at work.

[1] https://www.theguardian.com/technology/2016/apr/05/revolv-de...
The React team has avoided blessing any specific libraries, beyond things like Babel for JSX transformation.

React-Router is not an "official" library. As far as I know, neither is React-Navigation.

That said, I also don't know much about the ins and outs of React Native, so there _may_ be some semi-official-ish overlap between React-Navigation and React Native.

(Also, this totally causes an abbreviation clash, as "RN" now has multiple meanings. Oops.)
> When Google's CAs start issuing certs to non-Google parties, we can revisit the 'eggs-in-basket' question.

I'm not really seeing the problem there, either. Unless we trust Google to do this less than we trust every other root CA. All evidence I've seen points to Google caring very much about internet security.
Looks like they only give up the very best assets. Lots of intel. Gave them up bigly.
I usually have a Comments first approach. Read the top 3-4 comments and if I find the subject interesting I read the post. Sometimes the comments are so interesting though that I have to read them all before clicking the post. Sometimes I skip the post.

Most of the value is in the comments, specially during these times where a lot of content on the web has a commercial purpose.
Researcher Acknowledges His Mistakes in Understanding Schizophrenia
I have had a developer account for many years. That account is a member of several teams. I also have other unrelated developer accounts. None of them have ever gotten recruiting spam. I have never even heard of recruiting spam via this channel.

I don't know how a recruiter got your email but I doubt it was by trolling registered developers. If so they violated Apple's policies.
https://www.quora.com/Psychology-Do-men-have-a-wider-varianc...
There are tons, maybe not direct alternatives, but you are not looking for one. It's hard to suggest anything without knowing what kind of "junior dev" you are, but usually specializations, frameworks and even languages have their own communities (Slack, Gitter, forum, Discord, subreddit, you name it), you should look there.

Just don't forget about doing your homework first, amount of effort you put into a question directly influences answers you get. If you take time to do a research, share what you already learned/tried, build a good case with code example (e.g. minimal reproduction on jsFiddle or Codepen) and make it easy for people to help you, you will get help. Otherwise, everywhere you will experience what you did on SO.
I recommend reading Anatomy Without a Scalpel.

DLs are complicated, but you'll see a lot more uniformity when you take your advice from people who are strong themselves.
Been there experienced that. I realized that they are stupid, but after a while from their point of view, they don't want redundant questions. But still my questions were closed, but those were narrowly different from existing ones. I used this trick. create additional 3 accounts in SOF (have them in each browser like Firefox, Safari, IE) and you post your questions through your main account in CHrome. And then upvote from 2nd, 3rd and 4th account from all other browsers, to keep the question alive.
oh, my bad, didn't notice that
Everything on Netflix is available on Bittorrent.
Especially so when you consider that a player is much more likely to lose on time when the position is already bad.
The difference is that people have a very closely protected idea of 'normal' and seek to preserve that beyond all else. Ameliorating disease is acceptable to re-attain normal. Enhancement above 'normal' is just as aberrant, if not more so, as permitting disease to spread unchecked. This is woven into the fabric of our society and always has been. The FDA in the US, for example, is tasked with regulating things which claim to "treat, cure, or prevent disease." They do not permit anything which is intended to enhance or improve a person beyond 'normal'. Were a pill developed tomorrow which gave the taker the ability to lift 500 pounds more with no negative side effects, it would be banned by default.

A good concrete example and disproof of your expectation which starts your second paragraph is piracetam and other members of the racetam family. They're legal in the US, as well as in other parts of the world. They are well supported by research to provide cognitive enhancement. The side effects are minimal. Yet, it's not widely available in the US. It has no way in to a market which is regulated for the purpose of preventing or treating disease, with no provision for enhancement.

There are, make no mistake, substantial and very important issues surrounding the idea of human enhancement, don't misunderstand me. It's just that those serious concerns are not what concern the majority of people. The majority are concerned about preserving a fictional idea of 'normal'.
For me, it is not about sleep. If I disable Flux at night, it hurts my eyes.
Performance problem when using Parallel Stream with Files.lines (JDK 1.8)
How do you make an objective measure of the financing required to fix harassment problems to a reasonable degree?
That's interesting to read. Don't get me wrong, though, I'm not doubting the willingness of the individual end users to accept and get used to it. I'm wondering more about the support infrastructure. Like, do they have reliable enough data nationwide for this? Do they have enough techs and spare parts and such to keep their data networks running around the nation 24/7? Do they have enough people to fix or replace the devices that break? That sort of thing.
Children saved from deadly illness by using T-cells(virus?)... I think we all know where this is going...
This has been my experience as well.
The DB has a bike-sharing offer (Call-a-Bike) as well as a car sharing offer (Flinkster). Call-a-Bike used to be free-floating in a lot of locations, among them Cologne and Berlin, but that changed to a station/dock based system a few years ago. It's supposed to be changing back to free-floating again, at least in Berlin.

The bikes all have a distinct build and color and a Box with a simple touch display and a lock. Even before smartphones you could just text a number and it would send an unlock code. To drop the bike off you'd lock it and call an automated system to give it the displayed confirmation code. That was actually pretty nifty, I liked and used it a lot.

The CCC did a tear down of one of the bikes https://www.ccc.de/en/hackabike
Yes! My previous (A6) and current (S6) Audi's can basically do the same (and could for years!) without all the hype. Whenever I show it to friends they seem to be amazed it's possible and, until then, thought only Tesla was capable of such a feat.
Ah, I thought you knew seq had a delimiter option! It does actually. :-)

seq -s ' ' 1 100
27" at 2560x1440 is not high DPI and doesn't require UI upscaling. On e.g. a MacBook Retina you would not be able to read anything without upscaling because the pixel density is so high. It's the main reason I still use OS X on my MBP.
Set up your own community on Imzy. You're guided by the Imzy rules, and you can set your own on top.