skysight-inc/HackerNews huggingface dataset:
You cannot be serious.

Suggesting this is somehow equivalent is way off the mark, at best it is grasping for straws.

Trump not sitting down with MSNBC to discuss immigration would be equivalent. Barring media outlets is completely unprecedented, because we have freedom of the press in the United States.
By the way, every time I've noticed the FCC has come up on HN in the recent past, an aged account has always posted a pro Trump's FCC comment with an argument tweaked for HN's biases, as seen above, and if that is the only comment you read in the thread, you'd falsely conclude that they're right and believe that Ajit Pai's version of the FCC will be better for business than Tom Wheeler's.

Ajit Pai's FCC will be better for business, incumbent businesses like Comcast, AT&T, or Verizon, who'd rather not actually pay for network engineers, sysadmins, or software developers, and just sit there raking in cash, without owing anything to the communities they're in.

Reduced-cost access for people that can't afford it was the first thing on the chopping block, as well as for schools and libraries. Next up is net neutrality; this is undoubtedly the first move of many on this front.

In other news today, laws subjecting ISPs like Comcast and AT&T to get permission from you, before sharing browsing history, location, and other sensitive data. Don't be fooled, Ajit Pai's FCC is a friend to big business.
As another has said, who is your vendor?

I'm sure they would like some more customers :)
Ah. That interpretation makes sense. I just couldn't get over the fact that using Russian avionics isn't going to happen under ITAR.
OK, we've switched it back to that from “SHA1 collisions make Git vulnerable to attacks by third-parties”. We detached this subthread from https://news.ycombinator.com/item?id=13725850 and marked it off-topic.
(not OP) I understand why the requirements are strict so I can see why s/he was being downvoted, but I do agree that samples would be nice. Like, do I have to go search for some images with these requirements just to see if it really works (since it was supposed to take $100k)? By now someone mentioned it works in the comments though, so I guess I'll trust them.
Facebook’s mobile prodigy launches video charades game
It was known for a while to move away from SHA-1. Any TLS certificates using SHA-1 were supposed to become invalid on January 1st.

But I wasn't expecting that google's 110 GPU-year work meant that we could create colliding PDFs on demand.
One sided. The side of truth and sanity. The man tells a steady stream of blatant lies. He doesn't even care if they're readily objectively disprovable. The media should have been shredding him like this for over a year now. That's literally their job. I have major, major differences with every one of his opponents in the primaries, but they're all reasonably sane and professional and I wouldn't be complaining terribly if any of them won(even the equally inexperienced Carson). Only Trump is a pathological liar with a total disregard for the institutions that have kept our country safe, prosperous, and democratic for two centuries. We're not overreacting. I have literally had an acquaintance who is a huge Trump supporter and annoyed at the protests tell me that maybe Trump should have the military run the country and then things would be a lot better. Normally I would have been shocked by that statement, but that seems to be pretty much par for the course in Trumpland.
We just had a meeting this week where we did just this. We are also going higher up the program management chain.
So says my dad as I told him this news: "That is not a news briefing, it is a friendship."
I've seen E3's in low end servers like the Dell T20...
Here's what I got: http://i.imgur.com/d0lzPv9.jpg http://i.imgur.com/NBIKKRX.jpg

The tool gives me two pdfs that both hash to b8d36cccd01e5a4569ba01f9d15b54efedcd5d9f. It works... scary!
Renegade MBA Manifesto
It's easy to find evidence that it's a scam/bad idea. It's also easy to find evidence that it's not a scam and that the place that told you that it was a scam is the real scam.

Just having access to a lot of information does not produce an informed population, especially when there aren't really any controls on that information.
I think the US gave away too much democracy to too many countries lately, they seem to have very little left for themselves.
Why aren't we smart enough to figure out defense? We massively overpay per capita on health care and we massively overpay per capita on defense.

https://en.wikipedia.org/wiki/List_of_countries_by_total_hea...
https://en.wikipedia.org/wiki/List_of_countries_by_military_...
Day, not days.
Congratulations on burying the lede. Nowhere in the article's phrasing is an intent to mislead. It clearly states that some organizations were not allowed to attend --- which is the real story here --- and some were allowed to attend.

Now I wonder, if my aunt had balls, would she be my uncle?
I think several companies have started on that premise. Cygnus comes to mind, but there are probably others, too.
Team events and clothing are usually done by a female administrator or HR for engineering teams
Actually Hasura is something that might be the only thing out there that is anything close to touching postgrest in this space (respect :)).
The only thing that worries me a bit is that the client can generate any type of query, meaning it's easy to generate an unoptimized join that will kill the db (did i get it wrong? how do you protect against that?).
The other thing i do not understand is why are you not relying on "reading" the schema and require to go through a gui to define the schema. Why did you not copy the queries from postgrest that introspect the database schema and the relations?
If you guys want i can send you a single query that you run and get the structure of the database and all the relations and use that as your "metadata" :)

(I'm from postgrest core team, probably competing with hasura in the future here https://graphqlapi.com)
Documents Indicate Germany Spied on Foreign Journalists
Now I'd like to know how the French word for "shampoo" (the noun) came to be "le shampooing".
Your GCE startup credits [1] or something else? Have you been in contact with our PMs about Pgsql?

[1] https://cloud.google.com/developers/startups/
Ask HN: Where do you order your startup merch?
Are there any slick bay area companies that have come up with an affordable and stylish product printing shop where you go to a website and upload your startup logo to get hats/shirts/sweaters/hoodies/mugs made?

Been poking around, but I'm curious if there is a go-to for this stuff.
spot on. I work on a database tracking the help given by the State to maaaany refugees, poors, whatever you call them, etc. The situations in which those people are very often extremely complex, confusing, etc. If one focus on money only, or self-determination, then you end up with a very tough, unfriendly, non human system...
It does and you don't even need real 2FA for it.

Any non-trivial auth token comes with device or host fingerprinting. That's enough to stop this attack scenario in most cases.
1) Why avoid using a password manager, like 1Password?

2) Why avoid everything Apple? From what I hear from trusted individuals, Apple has some of the most secure data practices in the industry.

3) Avoid posting anything, anywhere? That's not practical for me and most people. Much of the internet's upside centers around posting and sharing content.

4) I agree with purging information from databrokers. What's the best way to do this?
Previous discussion (500 points, 250 comments) from 1 hour ago that has been flagged off the front page: https://news.ycombinator.com/item?id=13726886
George Burns? (kidding - Morgan Freeman does a great job too).
Completely the opposite for me in Canada, PC parts are now somehow 20-30 bucks cheaper when ordering from Amazon than the local retailers (NCIX/CandaComputers etc)
Is this length extending [1] the already existing Google attack?

[1] https://en.wikipedia.org/wiki/Length_extension_attack

Edit: yes, looks like it is.

As sp332 and JoachimSchipper mentioned, the novelty here is that it contains specially crafted code in order to conditionally display either picture based on previous data (the diff). I can't grok PDF so I still can't find the condition though. Can PDFs reference byte offsets? This is really clever.

Edit #2: I misunderstood the original Google attack. This is just an extension of it.
I would think that any many decently populated areas, it's at least a "duopoly". You would have the cable company and the phone company competing. I have a choice between Comcast and AT&T.
AT&T and Comcast are required to report this information because they are large. So providing the data would not differentiate small from large companies. Furthermore, if small providers will voluntarily provide information, what is the point of getting rid of the regulation? Beyond that, maybe you can find me some examples of companies which are under the previous 100,000 threshhold which do provide this information? That would be a great boon to your point.

>But even if they weren't open and transparent, wouldn't technologists like ourselves push to find the limits and publish them online? We can hold them accountable just as well without piling on more regulation.

Or we could just make the company itself spend time equivalent to less than 1 work day of 1 individual and get all the data... "Piling on regulation" makes it sound as if this is incredibly burdensome which it's not. It's basically zero work from the perspective of the company.

I'd like to say that I'm basically always in support of forcing companies to publish more consumer-relevant information. Remember that the perfectly-competitive model requires that consumers have perfect information. More information means more informed choices means more quality competition.
In a weird way, that's sort of the reason to read Taleb. It's about 90% posturing and sophist bullshit and 10% legitimate insight, but at least the insight is "90% of the time intellectuals are just posturing and spouting sophist bullshit." Maybe he's making some meta-demonstration, though more likely he's just really self-unaware, but I've still found it worth reading enough until you realize why you can discount most of it.
Average wage can go up while national income goes down.

Even if national income goes up, too, changes in the distribution of income still may make things worse for large groups. If you pay your robot maintenance team of 10 each $100k a year to be able to fire 30 workers who used to make $30k a year, total wages go up, average wage goes up, but the group of workers feels worse. Even if they could do the new robot maintenance job, not all of them can get one. Moreover, they now know that others make $100k a year. That makes the $30k they can make if they are lucky enough to get hold of one of the remaining 'worker' jobs look less.

This more or less already has happened for blue collar workers. They make more money as individuals, but there are far fewer of them.

Yes, there are replacement jobs and, historically, many of them payed better, but that isn't a guarantee that that will keep happening.

For me, the big question is: will there be replacement jobs this time, and will they pay well enough? If not, taxing capital (aka a 'robot tax') for me seems the best solution.

So, what are those replacement jobs? I wouldn't know. On the other hand, I doubt people knew at the start of the industrial revolution, either.
I do find it amusing to post under my username, but perhaps it is a bit caustic.

I found the incident a few months ago when I simply tried to collect a bunch of data on voter fraud in order to estimate how prevalent it is. Because the issue is so highly politicized, you have to dredge through an excessive amount of bullshit just to find references to specific elections. That election is mentioned in this article (which I, incidentally, recommend reading in full) about Hans von Spakovsky in the New Yorker, albeit in a VERY different guise than two relatives of the candidate: http://www.newyorker.com/magazine/2012/10/29/the-voter-fraud...

A much more interesting election is that of Loretta Sanchez to the House of Representatives in 1996. That resulted in a Congressional investigation that lasted for over a year, whose findings are worth reading if you're interested in analysis of voter fraud. For a quick link to an article from the time, see for example http://www.cnn.com/ALLPOLITICS/1998/02/13/cq/sanchez.html
Disney Research – Wirelessly charge devices anywhere in your room
No, no one actually thinks they can get away with it given the current media climate. Donglegate is a reminder for everyone that even the smallest comment can bring the heat on you
Seems like it works successfully as prophylaxis. It's only poisonous in larger doses, far below what's necessary.
no. there is a service level agreement so if they don't meet the promises there is repurcussione. it's also not an apt analogy considering one can easily switch to Azure or Google Cloud or Self hosting whereas most people are stuck with one ISP that has a monopoly in that area
Yep I know that :-) My comment was a bit "anti" :-) But sure, it works as long as there's someone knowledgeable in charge (or at least a bit) :-)
Reading the 5-star reviews is usually a waste of time. That's why I skip straight to the 1-star reviews to see if I can live with the product's most glaring defects.

For instance: "Not compliant with industry standard; may damage your hardware before failing." is one review that might make me steer clear of a product rated 4.5 stars.

"Product is counterfeit. If you examine the thingummy on the wowjammer, you can see a plastic tab that is not present on the genuine product, but clearly visible on this unbranded AliExpress listing..." is another that would scare me off.

Also, many of the crap-sellers will bend over backwards to get you to remove or update a negative review. Don't do it. You would be complicit in tricking your fellow customers.
I have to disagree. Those invested solely in cultivating karma are the reason to institute systems like "earned privileges". Any forum with a voting system will always be misused and abused by those who don't have the priority of the community in mind.

Moreover, jfc has valid points about negativity and unhelpful responses, but it remains anecdotal. As a counter, my own anecdotal experience has largely been positive on SO, and I rarely run into those problems. I am definitely not part of the cohort that was there first, and think it's a rather fair system. For example, preventing downvotes until a certain level of reputation is reached is a small check on those looking to farm karma by blanketing out competing answers. Obviously it isn't foolproof, but it at least ensures that you have actually contributed to the community at least a few times.

Perhaps his comment speaks more to the quality of the userbase than to the efficiency of the voting system?
If you want to do a simple test, you can just generate some images with ImageMagick:

$ convert -size 512x512 canvas:red canvas_red.jpg
$ convert -size 512x512 canvas:blue canvas_blue.jpg
>Instead he replied that if Uber paid a little more for the women’s jackets, they would have been beneficiaries of special privilege. This is standard bigot’s code for denying people protection from discrimination because of their gender, race, religion, or sexual preference.

I think the jacket issue has Uber clearly in the wrong, but it's a huge stretch to claim that opposition to giving a minority group special privileges is always "standard bigot's code".
How to Get Back to the Moon in 4 Years--This Time to Stay
The value `r` above is off by a factor of 10^9. It should be 0.5 AU or 7.48x10^10 meters:

http://www.wolframalpha.com/input/?i=distance+between+Mars+a...

The current gravitational force between Mars and Earth is 2.832x10^15 N:

http://www.wolframalpha.com/input/?i=(gravitational+constant...

For comparison, the current gravitational force between the Sun and Earth is 3.614x10^22 N:

https://www.wolframalpha.com/input/?i=(gravitational+constan...

P.S. My favorite Wolfram Alpha feature is being able to use natural language descriptions of various quantities!
I'm rather surprised that you are getting "Open Source is bad because anyone can put anything in it", especially if you actually are working on high levels. There's DoD guidance on using open source actually.
Tech companies are filing a brief supporting transgender youth
> Sure but I'll leave it as an exercise for the reader.

You seem to think you're a professor we're all dying to listen to. Make a point or get the fuck out.
We detached this subthread from https://news.ycombinator.com/item?id=13727188 and marked it off-topic.
I believe the hoop stress vs. longitudinal stress question is approximately true specifically for thin-walled pressure vessels. However, it is many many years since I would have been able to prove that--probably about the time I took the final exam in that particular course :-)

Especially given modern computer tools, I'm actually not sure how many mechanical engineers would be able to derive that sort of thing in an interview. I wouldn't have been able to but you probably didn't want me designing rockets either.
As Bannon said "The media here is the opposition party." I hope they do their best to oppose the alternative facts and misinformation.
No it isn't. The "up to" is because the last mile is over copper wires which are variable so not everyone will get the same speed.
How are you quantifying this value to weigh one issue against the other? It seems like you're saying the potential profit is the defining factor for you, so I'm wondering where you consider the stakes to be valuable enough to override other considerations.

I don't see how people outside the team are supposed to call out bad behavior if they have no information about what's going on within the team because confidentiality is contractually enforced.
This was a good explanation of what's happening here from a previous thread: https://news.ycombinator.com/item?id=13715761

The key is that essentially all of the data for both images are in both PDFs, so the PDFs are almost identical except for a ~128 byte block that "selects" the image and provides the necessary bytes to cause a collision.

Here's an diff of the 2 PDFs from when I tried it earlier: https://imgur.com/a/8O58Q

Not to say that there isn't still something exploitable here, but I don't think it means that you can just create collisions from arbitrary PDFs.

edit:
Here's a diff of shattered-1.pdf released by Google vs. one of the PDFs from this tool. The first ~550 bytes are identical.

https://imgur.com/a/vVrrQ
I started and found Python easier then R. Python is a lot more 'english readable' while R is more like the code you see on Hollywood screens, somewhat indecipherable with magic incantations.

As a starter, you probably need something like dataquest[0] or udacitys[1] data courses.

[0] https://www.dataquest.io
[1] www.udacity.com
Oddly enough I an a doctor of sorts - qualified in medicine 25 years ago, but left immediately to do other things. Thanks for the link. I'm pretty sure I'm not hypocaloric. I make sure I eat enough during the 9 out of 14 days on which I eat, and I haven't lost weight. And yes, none of my comments refer to diabetes.
Once-in-a-decade heatwave melting the Arctic for the third time this year
No. I hope nothing I've said indicates that. And fwiw I concur with the suggestions in many other comments that diabetics should take medical advice before doing anything as drastic as I'm doing.
Looking for the Jedi of iOS Engineers
Adventure. Excitement. A developer craves these things and Coffee Meets Bagel delivers.
---

You are an industrious developer with a keen interest in iOS and a penchant for design/UX. You are passionate about your work and hungry to make a real impact at a growing start-up. We are a tight-knit team of talented engineers looking to make a world-class app, with your help.
---

Requirements:

- 2-3 years experience working with Objective-C and/or Swift (knowledge of both is not required, but a willingness to learn one or the other is)
- Willing to relocate to San Francisco / Bay Area
- Penchant for delivering high quality products
- Deep sense of personal responsibility
- BS in Computer Science

https://jobs.lever.co/coffeemeetsbagel/4f404064-3c3e-4acf-a885-da8d60c8615b

---

Poor coding is the path to the dark side. Bad code leads to anger. Anger leads to hate. Hate leads to suffering.
I don't really like when computer games are called video games. It kind of lessens their value.

Computers allow implementing a lot of different features in gaming, and not all of them are visual.
You are being Gaslighted[1], that's why you express doubt about your own feelings/bias.

[1] https://en.wikipedia.org/wiki/Gaslighting
Am I overlooking it or is there no source or attribution of this effort? Who in the DoD is supposedly working on this? There is really nothing preventing DoD from using existing licenses. I'm not even sure I understand why this is even necessary, nor does it seem they are margin the case for the need.
Use Tor? Use applications that offer end to end encryption?
In all seriousness, with the way certain cities, states, and a political party so ardently defend illegal immigrants, why is anyone bothering come here legally? If you live in SF, no one's gonna deport you. If you have a kid while in the country, they become a citizen. They'll get to use our public schools. When they get older they'll get in-state tuition for college. When you get sick you can feel free to go to any hospital you'd like, free of charge. And if you wait long enough, you'll probably be the beneficiary of a blanket amnesty act.

Doing it legally is for suckers. There, I saved anyone looking to come to the US a lot of trouble.
Yes; by definition using something with X possible values to represent something with Y possible values will always have collisions if X < Y.
State of the CF union 2017 results
Sure! We operate in the toys and games space, but regardless of the space I'd follow the same process:
1) Locate a mid-popularity product with a ranking of < 4.3 stars and what appears to be profitable margins
2) Look over the neutral and negative reviews looking for improvement suggestions and complaints customers have
3) Figure out an improvement or a way to fix the issues

People will tell you what they want in the reviews. The hard part is figuring out a way to fix it for a price they are willing to pay. Price wins on Amazon every time, unfortunately, so you have to be prepared to sell for less or equal to the competition while at the same time having a superior product. We sell a product for around $20 when the competitor is priced around $18. Our product is 4.9 out of 5 stars with ~400 reviews while the competitor has significantly more reviews but only around 4.5 stars. It's obvious to customers that they're paying a slight premium for a better product when they purchase from us, so we're able to compete. That being said, there's one direct competitor that sells a 3.8-star product for $12 that outsells us 4:1, showing once again that price wins on Amazon's platform.

If you have a superior product, the rest will take care of itself. The marketplace may change and the market may change, but if you have a great product and you offer amazing customer service you'll be fine.

Of course, I'm glossing over tons of details here, but that's the gist of it. You're welcome to ask questions here or follow up with a PM. I'll be glad to help in any way I can.
As someone that doesn't use the program but does own an etf that covers the market, it's weird to think that I benefit from this change - at most a penny or so.