skysight-inc/HackerNews huggingface dataset:
Simplifying Elixir Releases with Edeliver
Maybe there's an opportunity here! "Chef needed, Remote work welcome"
Heh, I'm actually 100% ok with that for single-player games. The people who don't want to cheat won't, and other people can skip ahead to hold their interest.
Ethel Voynich also inherited the misterious Voynich manuscript[1] which is one of the most studied texts in the history of cryptography: https://en.wikipedia.org/wiki/Voynich_manuscript

[1] "In 1930, the manuscript was inherited after Wilfrid's death by his widow Ethel Voynich, author of the novel The Gadfly and daughter of mathematician George Boole. She died in 1960 and left the manuscript to her close friend Anne Nill" - from the Wikipedia page linked above.
Some stuff will survive that, like a proper noun that doesn't translate in either direction and is given a characteristic misspelling, possibly combined with other hints. Sentence order will survive too, as well as higher-level structure. There are so many places in a document that is several dozen kilobytes large to hide bits that it probably impossible to ever be sure you've scrubbed them. Especially since it won't take that many bits to identify the source. Hiding the bits doesn't even have to be done via clever textual manipulation; it is a standard part of the intelligence game to make up entire facts with no basis in reality and then see where they leak out, then trace back. No amount of cleverness will save you from that.
Addendum

To be completely honest: Only reach out if you have solutions for any of the problems or can reduce what you want down to something that is solvable with these problems in mind.

If your solution does not live on the web, you'll have a hard time finding allies in the standards bodies that work on the web :)

You'll have a hard time convincing spec editors and browser vendors already. The working group mailing list is https://lists.w3.org/Archives/Public/public-webappsec/

If you have minimal edits to the spec, we can take it straight to Github. SRI spec contains a link to the repo.
Hack Google works for all my peers in high school. Or with the gradebook. Then I hit f5 and watch their smile fade away when they realize the 178%they just gave themselves in math won't stay
This is an important point to make imo. The human brain works better at knowledge retention on the "why" category more than the "how" indeed.
You want a hipster stack

GraphQL / Couchbase / Node.js / React / Redux

Personally, though, I am a fan of ASP.Net Core + Angular 2,
I wanted to give an overview & awareness of all performance areas, not just the focus of the book (systems). So topics like runtimes (and GC), queueing theory, etc, are summarized in less than a page in a 600+ page book. A big problem with performance is gaps in people's knowledge (unknown unknowns -- which I referenced in the intro), so I wanted to at least create awareness of them (to become known unknowns). But I bet that's frustrating if I've hit an area you want to know a lot more about.

Areas like systems performance methodology I've written a lot of new material for in the book in more depth.
The point is that there is a subtlety -- the difference between a price, and a signal that other people use to set prices. Libor is the latter. Colluding on a signal is not the same as colluding on the prices themselves, the argument goes.
The article on solar power on page 316 is really interesting. Especially the artist's conception of a surprisingly modern looking solar panel, especially given that this was long before semiconductors were really understood.
https://github.com/technion/mod_randpad (an Nginx module that injects padding as a comment into returned HTML documents) is likely the correct layer to add random padding; the performance hit would be negligible.
I worry about that as well... and don't think companies coming together is going to solve that issue.
Yes, you should most definitely take steps. The main thing to look out for, and easier to prevent, is 'persistent intrusion', as opposed to 'incidental intrusion'.

'Persistent intrusion' involves long-term monitoring to gain psychological and behavioral insight. The industry has evolved, it's not always just about running a keylogger and capturing some files, anymore. Some example of what persistent intrusion is about: running a 'wmctrl' equivalent every 12 seconds to capture classes and titles of windows currently opened, which is then uploaded and assessed. Keyboard typing patterns are also captured. Your music collection is captured, including which tracks you listen to and how often. Over the course of months/years an large amount of information is ultimately collected which is then sent to a team of data scientists and psychologists for data mining and analysis. The wealth of information allows you to predict the target's thought patterns and movements.

The microphone is NOT captured for standard targets.

Persistent intrusion is easier to prevent:

- Prefer Linux to OSX/windows. Prefer Arch or similar but Ubuntu is infinitely better than OSX/windows.

- If you are using Ubuntu, never download apt-get packages over http (the default), switch to a mirror that uses https. The reason is there is MITM monitoring on the packages you are downloading in order to look for packages they need to find exploits in, and to gain information about your system.

- Obviously, never connect to a website unencrypted. The connection will be MITM'd, a 0day will be injected in-flight on the return path from the remote host and your browser will crash.

- On Linux, in the event of a normal crash, never use the crash reporters to send a crash report. The connection will be MITM'd, a 0day will be injected in-flight on the return path from the crash acknowledgement server.

- Routinely reinstall your operating system every 2-3 weeks. It's easy on Linux and you can automate the install using scripts. Additionally you can mount your home directory seperately. Physically change the installation drive.

Unfortunately, incidental (one-off) intrusion is more difficult to stop since assumedly a single attack is all it will take to lose your data on disk, if this is the resource you are trying to protect.

Even if you are not a high profile target, any connection to a VPN or TOR is monitored, and your IP address is added to an array and entered into a lottery for penetration.
Regular people don't get to "diversify" like that. He should be treated no differently. You get one country for citizenship.
> Landline broadband providers have no technical limitations on how much data their infrastructure can carry

I don't think that's true? There are limits they're just farther from being hit.

> there are limits to how much data can be squeezed into certain bands of the spectrum and some bands aren't conducive to cellular data.

This still doesn't explain why some kind of traffic should get preferential treatment. If there is not enough bandwidth, add caps and/or prices increases so supply matches demand.

> The second reason is that most people don't have a choice when it comes to home internet service - meaning no competition. There are plenty of choices with wireless carriers as long as the government doesn't allow consolidation.

Yup this is probably the most important point. Although competition in wireless is nonexistent outside of major cities too.
Shimmers are the newest tool for stealing credit card info
Launch HN: Peer5 (YC W17) – Serverless CDN
Try Color Picker for Mac for Free
I don't think hacker news is the right place to ask this question - I suppose you better try stackoverflow.com.
I am feeling the opposite. For awhile, I figured - This is kinda routine. Democrat, republican - action, counter - and then that "this week at the fed" floated around Facebook and it read like dire predictions of the future.

My expectation is increasingly "it is routine that he will do something stupid."
Download Beat Making Software (Similar to FL Studio)
Similar tricks[0] can be used on Win32 applications.

Although, I never got Intellisense working in VS if I declare #using <windows.winmd> in C++/Win32 projects.

A simpler and a lot more interesting alternative (for Win32) is the excellent cppwinrt library[1]

[0] https://software.intel.com/en-us/articles/using-winrt-apis-f...

[1] https://github.com/Microsoft/cppwinrt
How TCP Sockets Work
I enjoyed this even though it wasnt at all fun...

maybe thats the point?
>Emails sent to participants and scheduled speakers did not explain the reason behind CDC’s decision. Nor did the agency offer an explanation in response to a request for comment from The Washington Post, saying only that it was exploring the possibility of holding the event later in the year.

>The meeting now planned for Feb. 16 will take place outside of any government circles. Rather than at CDC, it will be held at the nonprofit Carter Center in Atlanta. It will be a one-day event rather than the three days originally planned.

It saddens me when government suppresses science.
How to Add SSL Support to Your Incapsula Protected Site
I have a palo alto networks firewall with URL filtering.I can observe destination URL's on https sites without performing SSL decryption. please see eff website showing certain information that can be observed by onlookers[0] when you are using Tor or HTTPS or both

https encrypts the contents... not things like source/destination often only a destination IP address is required to get URL categories for many Proxy/URL filtering technologies.

[0] https://www.eff.org/pages/tor-and-https
Neuroscience: Big Brain, Big Data
That's like saying that the Internet was created to connect military computers, and therefore it's not reasonable for civilians to complain when governments spy on their internet activity.

That is: Things grow beyond "what they were created for". To say that any such use is fair game for abuse is both unreasonable and unwise.
Apples to oranges. China, while communist, does not have a centrally-planned economy like the USSR had. They began a series of extensive economic reforms in 1978, leading to privatization of industries, opening to foreign investment, allowances for entrepreneurship, etc.
Hi HN, I’m Shachar, co-founder and CTO of Peer5 - A P2P CDN for Video

We started Peer5 4 years ago, when we heard about WebRTC, and thought this is a ground changing technology that fundamentally change the way the web could work. Yea, and also because we’re geeks that love cool technologies like that.
I’ll be here to answer any questions, and get feedback from you guys.

We've also just announced the YC investment (W17) and our new native Android SDK on TC (https://techcrunch.com/2017/01/26/peer5-y-combinator/)
Thanks!
Maybe it has changed but I have vivid memories of training lots of spam a decade or so ago and still getting half-assed results. Google was the first email provider that really did a good job blocking spam.
Agree, and thank you for pointing those additional considerations out!
Gates Foundation Emerges as a Leader in Fight for Open Data
I, as someone who worked on the SRI spec find this incredibly disappointing as well. We've tried to reduce this to "must be publicly cachable", but attacks have proven us wrong.

And unfortunately, there are too many hosts that make the attack you mention credibly silly:

It is not uncommon that the JavaScript served by home routers contains dynamically inserted credentials. And the JSON response from your API is valid JavaScript.
Yes, it's all here: http://standardfile.org/#encryption
In fact the sticker was probably there as a red herring, to give false confidence to the leaker that he had countered the fingerprinting!
I think the technology discussed and preferred at HN is often skewed towards heavily promoted SV based tech, large unicorn backed tech or a technology stack that currently pays well. And often is not reflective of the actual quality of the technology.

I don't think this is how how it should be in a tech focussed community. Things should be judged on merit not value added to resume or potenial for well paying jobs.
A significant part of the Tesla autopilot is powered by nVidia X1 based processors. The board is known as Drive PX1 or PX2 [0]

There is a lot more to autopilot than lane-keeping and auto-brake. Tesla use a database of road conditions, and predictive models, that are separate from the MobilEye technology. What MobilEye chip provides is basically a video processor, customized for Advanced Driver Assistance Systems(ADAS) applications with a relatively low power consumption.

The biggest counter to your "Mobileye and a Radar" is that several other manufacturers use MobilEye and even nVidia boards, yet do not have Tesla-level automated driving.[1] The pushback from MobilEye after the Florida crash is another key sign that Tesla has more advanced autonomous driving [2]

[0] http://www.nvidia.com/object/advanced-driver-assistance-syst...

[1] https://arstechnica.com/cars/2016/05/from-audi-to-volvo-most...

[2] https://arstechnica.com/cars/2016/09/mobileye-and-tesla-spat...
so, after taking such a course our VP should see it as a natural thing the exponential growth of the bug log...
Some Apple docs for comparison: https://developer.apple.com/library/content/samplecode/Metal...
"Give them simple partially completed programs that they can modify. ... Do NOT lecture to them or try to do long demos."

YES. I wish I could upvote this more. Curiosity is a powerful drive for learning, and when kids are allowed to pursue their own line of questioning and tinkering, the questions asked are more "personal" and the information learned IMO is more likely to be retained.

The "zero-entry pool" that Scratch provides is also important (how many kids want to spend a lot of time setting up their development environment?), but I think the tinkering is key. Kids who are simply content to tinker with what is provided will stay at that level; the ones who are truly interested in going beyond that stage will begin asking questions and driving beyond what has been provided.
The additional risk is the assumption of protection. Someone who doesn't use this site and knows they are under watch may decide not to leak the information because they're aware of their risk. They could get a false sense of security from this site and leak information they otherwise wouldn't have, and are likely to be caught.
"Better ten dead men than one live slave." Don Juan, GB Shaw's Man and Superman
MetalGameOfLife: Data-Parallel Programming with the MTLComputeCommandEncoder
Fair point. For enterprise the transition will likely take 3-5 years minimum before Dot Net Core really catches hold.

But for startups or faster moving enterprise shops, Dot Net Core does present a more exciting (and flexible) ecosystem.
isn't one reason that RS-232 is an open protocol but USB requires licensing ? I thought it cost money to get an official VID/PID from the USB organization ?
My only concern would be supporting older versions of windows while utilizing features where available. Would have been cool to see an example of doing this in the article.

Just the same, it's cool that it can be added without having to completely migrate/rework an application.
That's what the VT100 did with SI and SO. It's been 30? 35? years since I touched a VT100, but I think I recall there being a configuration bit to enable alternate character set on SI/SO.
Erlang is purely immutable and doesn't have any "facilities for mutation" that I know about, although it does have side effects (I/O, but no Haskell-style effect system).
Cisco's acquisition of AppD shows coming changes in Application Monitoring space
To be fair:

> argue that the agency should have gone forward with the summit unless told otherwise by the Trump administration

Which implies that the Trump administration is not officially behind the cancellation. It could be unofficially behind it, or actors within the CDC could be utilizing the new political climate to cause this cancellation - whether that's in an attempt to help these aspects of the agency avoid notice, or in attempt to suppress... Further information needed.
There's a theory I read somewhere that laughter evolved as an "all clear" signal to the group - something has to appear weird or possibly even threatening, but then you see it's okay.
This isn't an option for anyone in the IC. Glad 4chan trolls have somewhere to drop bullshit though.
"When they have children, what are the odds for more trouble during pregnancy and more emotional pain."

What scientific evidence that these odds are significantly different than the general population are you basing your thinking on?

Why apply this only to newborns? Surely the argument translates to many other forms of treatment.

Finally, are you really prepared to stake a strong claim that reproductive success is a dominant metric of future worth?
I would imagine for someone who is to come back to an old job, the staffing or team may have changed as well. There's a really high chance that your ex-coworkers may have left as well. I never gone back to a previous job but I do keep in touch with previous bosses/project managers/ex-coworkers in which lead to them hiring me as a consultant for a different company.
> What tends to happen in the US is that issues tend to get ignored at the local level, and they basically go up the chain of authority until it falls in the hands of the federal government, not because they want to handle the issue, and not because they're the most capable, but because they can't pass the buck any further.

Counterpoint: the various states suing the national government for overstepping its authority in the case of the ACA.

Also, lawsuits over immigration enforcement show that the national government can pass the buck just fine when it wants to.

Regardless of either point, the case is that local governments should be empowered and held accountable. To the extent that they "pass the buck", it's because citizens don't care that more and more issues are national issues. That's the trend that has to reverse, especially given that almost everyone is unhappy with one of the last two U.S. presidents.
> (Tape backup systems are _still_ for sale and in use...)

LTO seems to tick a lot of boxes in the archive business. I remember people trying to sell a MAID (massive array of idle disks) some years ago -- something like 100 disks in 4U of space. They came of blades that each held about 8 disks, and there were about 15 of them in a 4U row. With a controller in the middle it meant you could get somewhere in the region of 1000 disks in a rack.

The power consumption would be obscene, but that was fine, as the disks were kept idle, in fact the system could only power about 25% of the disks at once. The idea was you don't need access to the majority of files, and a 10 second latency when you do isn't going to hurt (far faster than tape)

At the same time tape manufacturers were pushing LTO-5 and LTFS, arguing that was the better solution for archive, and after a misstep with LTO6 (launching at 2.5T rather than 3T), LTO7 recovered.
* Gates' law
Orwell's “1984” sold out on Amazon
If you go to https://example.com/some/directory?param=something, the firewall will only see a request to https://example.com. Everything else is encrypted. In this case, with SSL, a government agency not doing a MITM will only see https://www.niemanlab.org, and http://www.niemanlab.org/2017/01/how-easy-is-it-to-securely-... if they were doing a MITM.
I would suggest another approach:
1) Import the source android.database.sqlite package while renaming it to my.database.sqlite
2) modify it trivially to load your own instance of sqlite....
Indeed. I worked at a hedge fund that also traded bank debt. One of the loans we owned while I was there was offered at Libor + ~18% (yes, percent, not basis points), and the notional was a half billion pounds. The daily accrued interest on that loan paid my yearly salary twice over. This loan was also held in the same era that the article is regarding. The US dollar vs pound exchange rate was extremely volatile in that same period. That period resulted in lots of late night phone calls regarding wild PnL swings and what happened and why. I had never really paid much attention to FX rates until that period. But, when the daily question is why are we missing X millions of dollars, and the answer was due to a fall of the dollar vs the pound, I had to start paying attention. That year or so was the worst year of my professional life.
Important qualifier: (I only read up to the middle) the results were largely associated with African American subjects.
Well, in the most general case where x's value can only be determined at runtime, most any compiler can and will assume that the initial if could or could not be hit and will therefore assume that y could, conservatively, be uninitialized. Its not uncomputable, its just conservative.
Could you explain further, so x = 1 now, what exactly has all bits set to 1?
Give them LOGO (the language), teach them a bit of it, give access to the manuals / online help, and set them loose on it.

Stand back and see the fun :)

https://en.wikipedia.org/wiki/Logo_(programming_language)
Would a good analogy be the IBM of cloud services?
The power of “1-click”
Al Gore has done so much for climate change, almost as much as he's done for the internet
Are you sure it was a total loss? There are some pretty good open source programs you can run and try to recover the data as long as the drive still spins. I recently went through some of my own drives (old backups from many years ago as well as one 2 TB drive in my NAS that decided it wanted to start failing). Photorec[0] and ddrescue[1] came in handy. They can take a long time to run (I did multiple ddrescue passes on my 2TB drive and recovered all but 16 MB, but it took about a week's worth of time), but it may be worth a shot.

[0] http://www.cgsecurity.org/wiki/PhotoRec
[1] https://www.gnu.org/software/ddrescue/
The following table describes ASCII-1965, the version in use today. It used to be common knowledge that the original 1963 ASCII had been sightly different (lacking tilde and vertical bar) but that version went completely extinct after ASCII-1965 was promulgated.

Not quite true - early adopters like DEC kept using the 1963 version for a very long time, which prompted others to follow them. When the Smalltalk group decided to replace their own characters for ASCII in Smalltalk-80 to be compatible with the rest of the world, it was the 1963 version that they used.

Due to this, since I use the Celeste program in Squeak Smalltalk to read my email, I see a left arrow whenever someone wrote an underscore. The other difference is that I have an up arrow instead of ^. But it did adopt the vertical bar and tilde from 1967 ASCII, so it was a mix.
Can the bigger names like Digikey be relied on? Or do their suppliers sometimes give them bad parts, too?
If you where leaking a document that involved the NSA/GCHQ I'm not sure it would be paranoia or that there is a sufficient level of paranoia.

They aren't Godlike but I'll admit the Snowden revelations surprised me and I'd been following that stuff for years.
Same here.

I'm actually OK with the possibility of getting away from "everything is a file". Although I still think that's a good starting point and should probably be the default case for most things.

Where I am not a fan of systemd is the extent to which it violates the single responsibility idea. That is, it does too many different things, and it's basically a monolith. Make it easy to substitute alternative implementations of logging and the like, and I wouldn't necessarily object to it.
A lot of large loans are set to Libor plus an offset. You might think it is a signal, but is, in a very real sense, also a price.
Is IBM even relevant anymore? Amazon is the leader here by a huge margin, Azure is a distant second, and the rest don't even register on the radar.
Rapid 2FA
i just want audio on linux not to suck llama
this is awesome, you should turn it into a polished game and release on mobile :)