skysight-inc/HackerNews huggingface dataset:
> English06 - who compares the moderator role to being a forum janitor - explained that to properly solve the problem, the volunteer moderators need more tools, or admins (Reddit staff) need to step in more.

> "There's always something to be done on the politics subreddit. And it's just, there's just a lot of volume. As far as stopping everything, there's nothing the moderators will ever be able to do. We can only see the user history. That's going to have to come from the admin side of things. There's just nothing we can do.”

When I read this, I get really enthusiastic about seeing what sorts of big-data analysis is technically possible.

And then...

> I presented Reddit with my findings and asked it if it’s doing enough to combat fake comments, threads and upvotes. But in a bizarre response, the company’s representative - Anna Soellner - didn’t bother to address any of these questions, instead providing a statement that seemed to be a response to my previous story.

> “In order to write your story, you and your co-author engaged in multiple levels of impersonation, violating the terms of service of Reddit. Our users recognized the stories you posted as fake and community moderators removed the links in a very short time frame. We are continuously working with our users and moderators to ensure the integrity of our site to promote genuine conversation.” Soellner said.

When I read stuff like this I get simultaneously really angry and incredibly sad at how vacuous and maliciously agenderized this incredibly popular website is.

This response is clearly a massive dodge, but from what? Why do they need to run and hide? I don't get it.

I can't help but think that Reddit (Inc.) itself is a massive, massive ivory tower, with only just enough of a connection to (and interest in) its userbase to know how to monetize it so the company can keep surviving. It's like the worst possible cyberpunk scene.

And obviously I don't want to help the admins!
Actually, my fortune is increasing due to inflation! See, I have this huge loan (mortgage) and every year, due to inflation, this loan effectively becomes smaller and smaller.
A lot of Pro are also moving from Mac Pro to iMac. Where the current processing power fits their needs. But Video / CG Pros seems to have infinite appetite for CPU and GPU processing power, and Apple's line up are not catering for them.

Not only do I wish they could rethink the Mac Pro trash can, I wish they could design the Mac Pro with Server Rack in mind.
What do you mean exactly? Grothendieck universes correspond to the some inaccessible cardinals, but the axiom that every set is contained in a Grothendieck universe (which is stronger than just saying that there are omega-many inaccessible cardinals of increasing size) is itself weaker than the existence of a single Mahlo cardinal...

And (afaik) you need a Mahlo cardinal for every type theoretic universe that is closed under induction-recursion. My point is that induction-recursion is a very intuitive notion from a computational perspective, yet its encoding in set theory is anything but intuitive...
How confident are you in your legal shield that, although you know your service is being used for child porn, you're claiming not to be responsible for it?

Edit: I see you're behind whoisguard but hosted in Bulgaria, which is probably uninterested enough in chasing you.
I agree with you except for "Linux has been rock-stable for a very, very long time". This depends on what you mean by "rock-stable" but things begin to get really annoying really quickly once you move on from relatively simple tasks. Even basic stuff like getting good battery life on laptops, or waking up from sleep/suspend/hibernate, using >1 monitors can be flakey or unpredictable. If they've worked fine for you then congrats, but when they don't it can be infuriating.

This is not to disparage the kernel developers, package maintainers or the distributions themselves - there's a lot of people doing excellent work without being compensated at all. However let's not kid ourselves - linux can still be tough.
Norwegian Air's $65 fares to Europe: What’s the catch?
How a Security Company Learned to Recognize the Sound of Fraud
I got hit with this last night, has anyone seen any more information?
> and with it the majority of voters get overridden because of those flyover states. I don't like this argument because you are arguing for exactly the opposite as the better way.

Urban voters have the benefit of living in a densely populated area. There's something to be said for safety in numbers.

> Personally I think a popular vote would just result in more moderate policies because you need to at least split the cities, and then the rural areas are still valuable to put you over the top.

Campaigns would visit fewer areas than they do now. Voter fraud could become more easier to commit. Swing states would disappear.

Popular voting sounds great until you realize those who live away from larger voting blocs would get the short end of the stick.
A > 1-hour dissertation on a comic.

https://www.youtube.com/watch?v=NAh9oLs67Cw

That's performance art.
Show HN: Simple fixture loading for Elasticsearch on Node.js
Good luck with that, people have been requesting for TOTP support on Namecheap for the past 3 years.

https://www.namecheap.com/support/knowledgebase/article.aspx...

https://blog.namecheap.com/two-factor-authentication/

Here's a list of alternatives someone asked a month ago:

https://news.ycombinator.com/item?id=13484739
One thing I've never understood: what, exactly, is the advantage of a space fountain over just lobbing stuff into space only when you need to?
OSX is very convenient do develop on. Got the command line power of linux while beeing more userfriendly (personal opinion)
I have an iPhone because it works nicely with my Mac.

You might be thinking "well all phones will work well with your Mac" but before I started with iPhones I had Nokias for years and that they didn't.

I've had generation after generation of iPhone because of my Macs.

If Apple give up or continue to put out poor value machines (they don't have to be cheap they just have to be good value to my business) then I'll move everything to other vendors.

If that happens I'll probably never return to Apple's ecosystem regardless of which segments of the market are most profitable to Apple.

It's like the halo effect in reverse.
I think it's a myth. He didn't need to import any cigars to Cuba and if they could get as close as slipping cigars into his supply they could have killed him anyway.
Quoting from the wikipedia article here: https://en.wikipedia.org/wiki/Voter_ID_laws_in_the_United_St...

Research has shown that the type of voter fraud that would be prevented by voter IDs is extremely rare; research is mixed as to whether voter ID laws reduce overall turnout or minority turnout; and research has shown that Republican legislators in swing states and districts with sizable black or Hispanic populations push the hardest for voter ID laws.

While I personally suspect that both republican and democrat concern about voter ID laws comes from a (mostly overblown) fear of being disenfranchised- I wouldn't really call it common sense any more than it's common sense to believe that the people who aren't going to vote for your policies shouldn't be able to vote at all.
Civilizer – personal wiki or note-taking app
Happened to me an hour or so ago. Notification on phone suggesting I log in again. I ignored it like I ignore everything that doesn't seem pressing. Then hangouts refused to send a message, which made me think the login suggestion was legitimate. Must say, like you, I probably ought to have scrutinised it a bit more..
Show HN: WebGL planetarium
This is my open source project and it's for personal knowledge management or personal wiki;
I've been using it myself for quite a long time, and it's stable... I think :-)
It's a good tool to organize your knowledge or todo list or idea or anything

( I admit that this is a little bit promotional stuff, but it's not commercial purpose at all; )
The damage is still yours even if its not your fault
But that is just people in your surrounding. Anyone amazed by Surface (tablet and touchscreen things) switched but that is ok, it is not so much of Apple's loss as of MS's gain. I do not want touchscreen, I don't need it, I need classic laptop and many Apple MacBook users want just that, a laptop, no touchscreen.
Detailed Read-Through: Wasserstein GAN
He's not going to jail, he's white.
thats stretching it. if you could convince anybody to pull from you then why even bother to go to a great expense of creating a collision.
Infinity Multiplication – Optimised the Code – Java
That depends on the size. Smaller ones just never make it to the ground - take a look at this table:

https://en.wikipedia.org/wiki/Impact_event#Airbursts

One they get big enough, they slow down from ludicrously fast to still ludicrously fast. The smallest impactor shown in that table enters at 17 km/s, loses 90% of its energy traversing the atmosphere and smacks the ground at nearly 5km/s. You'll probably want to take your titanium armour and stand somewhere else.
Same here. Both primary @gmail.com and on-domain accounts were logged out (not at the same time though)
Correct me if I'm wrong, but if you're letting untrusted people push to your git repositories, you're pretty much screwed anyway.

Given a case where someone with permission to push gets compromised and a malicious actor can pull this sha-1 attack off, aren't there bigger problems at hand? The history will be there and detectable or if they're rewriting history, usually that's pretty noticeable too.

I may be totally missing a situation where this could totally screw someone, but it just seems highly unlikely to me that people will get burned by this unless the stars align and they're totally oblivious to their repo history. So I guess I agree with the "the sky isn't falling" assessment.
Does this remind anyone else of The Interview?
I got bounced from iOS gmail app and can't sign back in in that app only. Logging in works everywhere else
I think - sadly - you're right about this.

There doesn't seem to be anyone at Apple speaking for creatives any more. Certainly no one who gets really excited about working with musicians, artists, film directors, and so on, almost as an equal.

Cook has the mindset of an accountant who is a media and trinket consumer, not the mindset of an inventor with creative aspirations. Likewise the rest of the executive team.

To be fair, there aren't many people like that around. But it would cost Apple virtually nothing to host some product focus groups with creative talent to ask "What do you want...?"
The internet is horrifying.
Phone alternatives are so bad today, that I think iPhone is not endangered whatever they chose for their computer. Android just sucks. If you have no plans to root your Android phone (and that's like 95% of people) then there really is no advantage of that famous "Oh but I want to do with my phone what I want".

It's hard to believe but security is where Apple won the war. My friends with android phones are still rocking Android 5 Lollipop and that tells you something.
Yes I was talking about short lived allocations.

I don't discount the power of being able to cheaply create (short lived) highly dynamic data structures. I do miss it in C++ and alloca never feels right.
Yes, that's what I had in mind. Another thing I seem to recall is that Turbofan used to be a lot slower than Crankshaft and spend a lot of its time in scheduling and register allocation. Has this changed recently?

In any case, I'm looking forward to the more in depth post. :)
Developer on HN still count. You know that Apple is at least losing some developers. Then there are the people like me that skips this upgrade waiting to see more clearly Apple plans.

So the only question is to know if they are winning some that were on other systems. Objectively, the MBP has more or less stagnated on a performance point of view, it has regressed in autonomy and the new features it gained are at best neutral for developers. Developers is typically the slice of the population that will be affected by reviews, and the reviews are not favourable to this new MBP. Last but not least, competition has not stagnated either. I don't believe there is a better laptop on the market for my usage pattern, but it took me much longer before I came to that conclusion.

It is reasonable to think that the new MBP is less successful than the previous one with developers. It could still grow in raw numbers even with the developers, but it is reasonable to think its growth has been dampened a bit.

I'm not strongly disagreeing with you, but you are not making a better point than parent. I do believe that if Apple has a spec bump release of the MBP ready end of 2017 and is back in the regular 1 year cycle the whinging will die and you will win the argument.
I thought we were already working on immortality. On the other hand, waiting 80 years doesn't seem like much. It's not like we are going to be 'out for lunch' if there is an answer.
news.ycombinator.com ... OMG!
If anything, it should make you trust reddit more! I don't know the exact details as to why your account may have been locked, but generally it will be because we're being proactive and have some signal that your account is using a weak or reused password.
So, the problem still stands, theoretically.

Not only do you likely need to populate your host with packages not from your host. But also, your host will also still be connect to a public net, even if only indirectly (e.g. private net), and hence potentially manipulated.
libstagefright for the win!
Could this be the reason behind having to reauth my Google accounts in the past couple of days? I.e. did Google invalidate all auth tokens in case they leaked via a third party website via CF?
From their blog post: https://blog.cloudflare.com/incident-report-on-memory-leak-c...

"Because Cloudflare operates a large, shared infrastructure an HTTP request to a Cloudflare web site that was vulnerable to this problem could reveal information about an unrelated other Cloudflare site."

You don't need to be using this feature, or to be sending malformed HTML yourself - just to be in memory for this Cloudflare process.
I would also expect that regularly performed fuzz testing would be able to catch such a bug?
Especially if ran in combination with dynamic memory analysis like Valgrind. So were they not doing this?
I am a Windows, Linux and macOS user (plus some PcBSD for good measure). I wonder why you much prefer macOS over Windows? I would agree that Apple have got 4k/retina displays done and that is much, much better than Windows. Is there anything else that you can identify as an advantage?
https://github.com/cr-marcstevens/sha1collisiondetection implements a hash that is compatible with SHA-1 for all non-nefarious purposes, and has no known weakneses.

Somebody already submitted patch series to (optionally) use it in git in place of SHA-1:

https://www.spinics.net/lists/git/msg296714.html
https://myactivity.google.com/myactivity

>10:44

>Visited Sign in using backup codes - Accounts Help

I don't recall signing in using backup codes..

Nothing odd appears in https://myaccount.google.com/notifications?pli%3D1
apt-get can (and do) check signatures of repos

But yeah, you could put an unverified repos to be used
In practice, when it comes to outside investments, I don't think the artificial separation between Google Ventures (GV), Google Capital (Capital G) and Google Corporate matters that much.

FWIW, David Drummond, longtime Chief Legal Officer took a board seat after GV's $250m investment in Uber in 2013 but eventually stepped down last August [0].

[0] https://www.nytimes.com/2017/02/23/technology/google-self-dr...
No package management on Windows?
Even if they somehow managed to do an app-store, that wouldn't be tailored for developers.
India police arrest 'world's cheapest smartphone' firm boss
This list is misguided. It's just a dump of sites using Cloudflare's DNS, a hugely popular and (mostly) free service. The vulnerability only affected customers using Cloudflare's paid SSL proxy (CDN) service. The latter is a much smaller subset. Even then, only a subset of the SSL proxy users, those with certain options enabled that caused traffic to go through a vulnerable parser, were really impacted. I'm not sure a list as broad as this is helpful.
I would say cloudflare should hire them to try to find them. It's really not on google IMO (unless caching has some implications regarding storing sensitive data).
This cuts the other way too. Uber may be able to hold drivers accountable but I can't even count the number of shitty, dangerous drivers I've had. I've been down one way streets (into heavy traffic) the wrong way more than a few times. I've been driven in the wrong direction adding 10-15 mins to a 40min journey because the driver was blindly following GPS. In my experience licensed drivers know where they are going and tend to be above average drivers. And again, ensuring a car is licensed - at least where I'm from - is pretty simple. I use Uber in certain places and licensed taxi's in others but pretending that Uber gets you a safe ride is ludicrous.
For what it's worth, as part of work on the effects of DNS on Tor's anonymity [1] we visited Alexa top-1M in April 2016, recording all DNS requests made by Tor Browser for each site. We found that 6.4% of primary domains (the sites on the Alexa list) were behind a Cloudflare IPv4-address. However, for 25.8% of all sites, at least one domain on the site used Cloudflare. That's a big chunk of the Internet.

[1]: https://nymity.ch/tor-dns/
I guess they are more popular with ordinary users, so they are focusing on that audience. No problem with that.
> All you've got is regulations, human-based reputation ranking, and public shaming.

Indeed - so we should be applying all of those against CloudFlare, and any other organization that offers or uses a "Flexible SSL"-like product, as firmly as we can.
This list seems to be missing any sites that are using custom nameservers, which would be common on top sites using the enterprise plans. A better way to detect if the proxy is being used would be to resolve the IP and see if it lies in Cloudflare's subnets.
yaourt on archlinux
Redis on the Raspberry Pi: adventures in unaligned lands
Suggesting linux as a viable desktop is not equivalent to predicting that $CURRENT_YEAR is the year of the linux desktop. You being dismissive of the idea on this ground is illogical.
I've been having the amusing thought lately that one possible solution is perhaps making the system a bit more chaotic. Maybe with the safety of levels through tricameralism or maybe even tetracameralism.

So.. in the house of rep districts you allow for popular vote to recall reps and also to hold popular referendum in said districts on whether to split them. If people are upset enough with their representation and can get enough to vote to spit the district then the district is split. This would intensify the situation some however you enable merging so when the popular will exists to merge then there is the chance as well.

A lower level would exist under the house of representatives in which instead of people in the district voting for that lower rep, people from a random generated district that votes differently would have the ability to vote someone in. Essentially San Fransisco would be able to vote for a lower rep in some random super conservative district and vice versa. The entire point of the lower rep is to essentially troll the house of rep. We'd give them powers such as being able to call for a town hall meeting twice a year, a direct debate twice a year, petitions without the usual required permits, an an ability to freedom of information act everything the house rep does.

The upper end of the tetracameral system would be two senators appointed by the state legislature prior to the 17th amendment restoring some state power. The mid level would be directly elected senators, however states would gain a few more based on population.

Nonetheless, the districts portion is what I wanted to cover but felt I'd share most of the idea so there would be more background around the concept. The ideal would be both on the state level and federal level, the lower houses would be open to recall and open to popular vote for district splitting or merging. With a lower house rep voted on by outside parties to try to curtail silo thinking. While the upper chamber returns state interests back to the federal government; some populist sentiment I personally feel needs to be curtailed and think our biggest constitutional mistake was that of the 17th amendment.

It'll never happen of course. But it's fun to think about.
You can sign commits and tags. If you do this you can still offer some guarantees about your repo even if non-trusted people are able to access it (say, if you host your repo on github but don't necessarily trust them or something similar). If I have Linus's public key I can fetch the kernel from anywhere and just make sure to validate the signature of the tag I want to use for instance.

If you were able to forge commits with the same SHA-1 you might theoretically be able to rewrite the history without invalidating the signatures, which would be a problem. We're not there yet though, but it's one step closer.
No. Only Cloudflare customers using a subset of features of the SSL proxy service are impacted.

Cloudflare has a lot of customers who only use the free DNS service, for example.
Well, let me rephrase- Linux is as stable as you want it to be. If you want an ideal linux laptop experience, you need to do the research and get a model made with linux in mind. Otherwise, you're just rolling the dice.

That being said, I only use Linux for server-side work, and I can easily say that it is every bit as stable as any other server OS I've used, and has been for a very long time. There are plenty of weedy areas to play in if you want to, of course. But if your goal is It Just Works, you can do that, too. Perhaps most importantly, you can do it easily, with just a little foresight during the spec stage of planning your project.
https://txt.fyi/+/33ffa358/
err modern windows has many good security measures and in many cases Microsoft are ahead of the curve in adopting new security techniques.

For me "insecure windows" is an old trope and not particuarly accurate any more.
That list isn't that useful...
First of all, there is a LOT of pages hosted by CloudFlare @taviso acknowledged that in the original bug report. (https://bugs.chromium.org/p/project-zero/issues/detail?id=11...)
Furthermore, you can't say which sites were hit by this bug and simply listing all CloudFlare sites is more or less fearmongering. If you are a verified victim of this bug CloudFlare will contact you.
Lastly, if you want to be sure to mitigate effects of the attack just do it... If you want to be absolutely sure that your session keys etc will remain uncompromised simply repeal all active session cookies.
Happened on mine too. In Chrome I had to re-auth with 2FA, in iOS I just had to pick my gmail account from the account list without even reentering the password. Very strange.
I can agree it strictly limits the type of attacks that can be done, but it doesn't appear to be any practical increase in security. It's like arguing for adding another step in the manufacturing process of bulletproof armor to add a few extra atoms to the armor's thickness. Sure it theoretically adds some protection against some 0.000...1% of bullets that would have just barely had enough force to get through, but it wouldn't have made a difference to any single previously observed successful attack of a similar nature. The fact that someone would argue that this increase in defense is good enough to obviate the need of switching to a different type of stronger defense seems to imply a misunderstanding of hashing.
The future of not working