skysight-inc/HackerNews huggingface dataset:
> it would be the only way that makes sense to do research
There will certainly be more than just one way, although I hope cloud labs are the front runner. Also cloud and automated are two separate concepts. We do both, but there's no reason that you can't just do one or the other. The automation is critical for reproducibility for many reasons. But I think the cloud aspect is mostly helpful from a business perspective -- it makes it easier on everyone to get up and running on our system. But there are many in lab automation solutions that are helping fight the reproducibility crisis. And on the flip side, there are cloud labs that aren't automated.

> do you see a way to add the extreme versatility of the biology lab into a cloud service
We let you run any assay that can be executed on the set of the devices that we have in our automated lab. So in that sense, yes its very flexible. Also, there's no need to run your entire workflow in the cloud. You can do some at home, some in the cloud. Some people even string together multiple cloud services into a workflow. See https://www.youtube.com/watch?v=bIQ-fi3KoDg&t=1682s

That being said, biology labs can be crazy places. Part of what we do is put constraints on what can be encoded in each protocol to reduce the number of hidden variables. Every parameter that counts must be encoded in the protocol, because once you hit "go" on the protocol, it could run possibly on any number of different devices each time it runs. The only constant is that the exact instructions specified in the protocol will be run on the correct device set.
List of Sites Affected by Cloudflare's HTTPS Traffic Leak
Good point: if you don't need any local storage at all, then r4s are a bit cheaper. Still, an extra $576 / year (the price difference between i3.xlarge and r4.xlarge) for 950 GB of SSD really seems quite cheap, especially as that's the on-demand price.
If only there were a systems programming language, offering c-like performance with memory guarantees and well suited to high throughput network servers that would catch this class of bugs at compile-time [1] [2]

[1] https://www.rust-lang.org/en-US/
[2] Self declared rust fanboy
When you early exercise, don't you pay the 409a price? Why would you owe taxes at the time of exercise?
Companies that care about data security typically disable write access on USB ports.
>I'm not ready to throw out the baby with the bathwater because of one issue.

Extreme centralization of the Internet is not a "baby", except maybe in the sense of a cuckoo's egg.

But I'm willing to bet the mentality of this comment is highly representative of many web developers and service providers. They will not seek to fix anything, because they don't see this state of things as a problem in the first place.
Very serious. I have other work to do and my own customers to serve, and they pay me for my work.

If you'd like to volunteer yourself to do the work on OSM, go for it. You can do some of it remotely by researching coffee brands in my city, going to their websites & finding contact details for each of the stores. Telephone each store owner and ask them to confirm details you're not sure of. Then contact the city council for lists of local cafe businesses (probably already on their tourism website) and do the same process with those cafes.

I'll give you a head start: my two favorite cafes in the Gloria Jean's Coffees chain are both missing from OSM, if you'd like to add those.

[Edit: Actually it's missing 19 of their 20 stores here, so there's 19 POIs you could add for that cafe chain in my city. At 15 minutes per POI, it's about 5 hours work.]
Yeah, it's pretty painful to read. If they are anti-webfonts, I think Georgia could be a good option.

For me the monospace text is difficult to read for longer text because I can't chunk as effectively.
This attitude of "either you really need the security, so make do with whatever inconvenient method is necessary, or just forget about it" is what keeps secure methods out of the mainstream, and thereby from widespread usage. This in turn means that anyone actually using those methods is immediately suspicious. Carrying multiple devices at the airport, or is there a Tails on that USB stick? Let's interrogate!

Also the notion that only journalists/whistleblowers by today's definition need this level of security is wrong. Your "normal", politically active person of today may be the whistleblower of tomorrow. E.g. after a regime change, or just by voting some crazy people into government. I'm living in a country where bloggers are sometimes arrested because of some alleged nonsense. But even in the West, it's nowadays all too easy to just be labelled "terrorist".

So the only sensical way forward is to popularize secure communication methods so that they are normally used by everyday people (including "professionals") with their everyday systems. This increased user base would likely increase the demand to close the existing holes and insecurities of the rest of the system, thereby creating a market force in this direction. And for this purpose, I agree with the author that PGP is not the way forward.
Is the chemistry of VX well enough known that countries without access to it can recognize it when they see it?
Snowden Ambassador to US??
Algocracy as Hypernudging: A New Way to Understand the Threat of Algocracy
Templatize the language, toolkit version and that could just about describe every binding of every c++ toolkit ever made.
A note about when it's raining.

Don't put out any outgoing mail. Even if yours is dry it will get wet when it comes in contact with other mail that is wet.

If you can hold off sending a letter in the rain do so
MomentFeed raises $16.3M to help brands with social media marketing
160 bits are still quite many. You could have done what Linus suggests and use a better hash but truncate it. If it's a good hash, a truncation of it should still be good (modulo the fewer number of bits, of course.)
That and the reversal on federal use of private prison.. Time to buy private prison stock...
Some day, the world will wake up to the fact that we've taken the beauty of a decentralized internet and willingly traded it in for a single-point-of-failure design.

I will refrain from any criticism of Cloudflare and what I think about this because they're going through hell as it is. But everyone else is fair game. The higher a level of service you centralize, the more you stand to lose.
Yeah totally, but my point was a lot infrastructure still revolves around Bitcoin, not alts.
Linux server in your pocket
> The consensus seem to be that no one discovered this before now, and no bad guys have been scraping this leak for valuable data (passwords, OAuth tokens, PII, other secrets).

This is literally as bad as it gets, anyone trying to palliate the solution has something to sell you. You'd have to be an idiot to think that $organization (public, private, or shadow) doesn't have automated systems to check for something as stupid simple as this by querying resources at random intervals and searching for artifacts.

Someone found it. Probably more than one someone. Denial won't help.
Please don't make the mistake I made! I was working my first software job, and I started developing tingling and numbness in my feet that would gradually move up my legs if I continued sitting throughout the day. I tried to ignore the symptoms and push through it, and after a few months the buzzing/tingling in my feet and lower legs became permanent. I now live with constant tingling in my lower extremities, and I've had to reconsider career choices. I simply can't sit normally in a chair anymore for any extended period of time, due to discomfort. A career where I'm on my feet moving around a significant portion of the time is probably best for me.

I have what is called small fiber neuropathy, and I can't say for sure that sitting caused it, but I am certain that sitting and trying to ignore the problem at least exacerbated the symptoms and allowed them to become permanent. Unfortunately, my neuropathy is idiopathic, meaning the cause is unknown despite a 'million dollar' workup involving multitudes of tests, imaging, and various specialists. It's still not completely clear whether my case is a circulatory problem, a nerve entrapment problem, or both.

While I don't think you necessarily need to give up a career in software, I urge you to prioritize your health! I developed depression, due to both the health problems and the realization that working in software may not be a good idea for me. I still feel a bit lost, and a bit bitter, but I've improved, and at the end of the day, my health is more important. If you continue to have pain, keep trying different ideas to try to correct the problem, and seek out help from others, including doctors, physical therapists, ergonomists, etc.
Is this made clear in their UI? Do they have something saying "this setting will screw over many VPN users" and "this setting will screw over with all Tor users"? If not, it's in large part their problem as well.
So, does the t-shirt say:
"I found a zero-day bug in cloudflare and all i got was this lousy

X-Uber-token:

X-Uber-latitude:

...
"
Here's another example of a person getting the scenario completely wrong. The adversary here is aliens and they're lobbing meteorites to take down planes. Get your head out of the groupthink people! just because it's difficult to conceptualize the foe, doesn't mean that the foe Isn't targeting you! Collanders on!
Don't you cover for this doing up the laces properly? That should at least help. Obviously terrain will influence how much of a problem smashed toes are.
Those interesting issues could be their own post. For this one I think that interesting tangents would be a discussion about the magnitude of the lethal chemical weapons industries, and the possibility of large dumping operations allowing people to sequester small samples.

I think a lot of weapons are poorly thought out when it comes to the long term, such as land mines. However, since the purpose of chemical weapons is often to murder enough people that you can take their land, deterioration in a natural setting could be built in.
That's because HTTPS allows that. Whether it's cloudflare, or your own servers and load balancers, it's all legal. So it would be unfair to single cloudflare out. You could take some measures to identify their flexible-ssl traffic, and that's a grey area, but their regular ssl is fine. If it weren't for them, you would roll your own solution, which wouldn't be very different.
Perhaps they are worried about active oauth tokens having leaked?
It's interesting that you can fly without ID ( airlines in the UK closed that hole years ago to prevent ticket resale ) but I'm confused why that led to additional pat-down scrutiny.

Surely the thoroughness physical screening should be orthogonal to identity? Otherwise it suggests that someone who does have ID to fly receives less scrutiny, which is a security vulnerability.

To invert: everyone boarding an aircraft should be physically screened to the same extent.
while the internet archive / wayback machine do spider, I think archive.is only archives a site "on demand"
Sure. I just searched for "ddos stresser" on three different search engines. The first 1-3 results were ads for Cloudflare and similar services, followed by organic results for several of the sites mentioned above. One could make the same dubious argument that it's a protection racket (free exposure for the "bad guys" while profiting from mitigation).
I have actually started going to Digg again. It's actually quite good in comparison to Reddit lately.
this reminds me of when team-teso had their stuff on their website directly accessible over https.. so they used a self-signed cert, so that no govt or corporation could require a MITM with a valid signed cert from any trusted CA.
You've always been able to get more bang for your buck with a Windows machine

Actually, Apple has been selling price competitive or even cheap machines compared to other offerings with similar performance for years. From 2007-2015 Apple consistently had the best prices for pro laptops and desktop machines among offerings with comparable build quality.

The $300 price bump for equivalent machines in 2016 and disappointing spec upgrades in 2015 and 2016 are a new deviation.

The price performance advantage of Windows machines is returning from a very long hiatus. And for Mac users it's unwelcome.

Tim Cook's Apple, of course, is all about high margins and raising average selling price. They're eating the seed corn to squeeze out more short term profits. We'll see how long it lasts.
I also doubt that airports have this on hand in many parts of the world. Maybe in the US where fears are stoked about a chemical attack.
You got the point.. all Apple want to its pro line is having enough computing power to develop apps for mobile... For Apple, developing laptops systems/applications is not economically interesting anymore.
All said, Apple wants pro developers as long as you are a mobile pro developer.
Whew, that's fortunate. The robot programmers of the future will know how to invert a binary tree, but not how to write a CRUD web app full of boring business logic.
Or where you find the best "you'll never believe what she did next"
This is scary stuff. Any key/password that you used on a cloudflare site should be considered compromised.

That's a crapton of keys.
Apparently it's a general architectural proposal.

https://en.wikipedia.org/wiki/Merkle%E2%80%93Damg%C3%A5rd_co...

Maybe I should consult a textbook (or a cryptographer) to understand more.

My intuition is that Merkle and Damgård may have thought that you get the greatest efficiency (or "bang for your buck") in some sense by simply outputting a digest that is as long as the internal state, since for some properties related to the intrinsic strength of the hash you would prefer that the digest be long. However, Lucks was apparently explicitly concerned about length extension and wanted to have some hidden state in order to prevent such phenomena, and hence proposed deliberately engineering it in.

But I'm not sure if that accurately presents the reason why the internal state and digest lengths have typically been the same in the past.

Edit: https://en.wikipedia.org/wiki/Comparison_of_cryptographic_ha... lists the internal state size alongside the output digest size. According to this chart, these functions have the same output and internal state lengths: MD4, MD5, RIPEMD and variants, SHA-0, SHA-1, Tiger-192, GOST, HAVAL-256, SHA-256, SHA-512, WHIRLPOOL.

These functions have a larger (hidden) internal state: RadioGatún, Tiger-160, Tiger-128, HAVAL-224, HAVAL-192, HAVAL-160, HAVAL-128, SHA-224, MD2, SHA-384, SHA-512/224, SHA-512/256, BLAKE2 variants, SHA-3 and all its variants, and PANAMA.

Sometimes the larger internal state is achieved simply by deliberately truncating (limiting the length of) the output hash, so the end user (and attackers) don't know the full original output hash and hence can't deduce the full original internal state.

I didn't know about this distinction before, although I once heard someone mention it in connection with BLAKE and SHA-3 candidates.
It's not so inconceivable, after seeing the PDF collision, to contribute to another project a commit whose hash has a collision with another malicious commit you keep up your sleeve. Not saying it's easy, but now it's on the horizon.
Errr... you didn't parse the context of what I said, did you? They wouldn't have an ID to check.

My point was that if you're not carrying any form of identification, there's no way for anyone to prove you're not a US citizen. And that that's a good thing, because the perspective of American law is that you need positive proof that someone is an illegal immigrant to arrest them, rather than just a lack of proof of them being a US citizen. Because—crucially—it's perfectly customary for US citizens to walk around without such proof, and so the law can't work any other way.

This creates a loophole for those who lose, forget, or never had green cards: if you just avoid carrying any ID, you can, when questioned, say you're a US citizen who left their ID at home. It's then up to the other party to prove otherwise; until they do, they can't detain you, because you're presumably a US citizen without their ID and there is no crime in that.

This didn't used to be a feasible thing to do, because you are required to carry some form of ID if you want to operate a motor vehicle, and the US is a big sprawl that requires most people to be operating motor vehicles at least some of the time. But as the US gradually builds up metropolitan areas with public transit systems, this becomes less of a concern; for many Americans, there's nothing they do on an average day that requires an ID, and they'd be fine without it.

(Also, re: "something you yourself would not stand for"—I'm not an American myself. I just like contrived discussions of law.)
Happened to me too, pain to log back in on google play (not allowed to paste password in)

It initially gave me a message that something had changed and I needed to log in again, I can't remember if that was on outlook (yes, I use outlook to get my gmail) or on google play.
I can not find any sources for this article, and this seems to be too big of a news to not make splash, is this really true?
LastPass uses local encryption to enable LastPass to have Zero knowledge of users passwords. This means that user's passwords aren't passed in the clear even inside a TSL session.

So LastPass isn't the password manager mentioned in the post.
I think google tries to get/guess your location and then gives you the language of that region.
Cryptomnesia
Just deleted my LastPass account - have been converted to KeePass for over a month.
Is that a rhetorical question? The reason given for requiring voter IDs (while possibly not the primary one) is to prevent voter fraud. Are you asking if there has every been a case of voter fraud? If so, here is one example [1].

[1] https://www.texasattorneygeneral.gov/oagnews/release.php?id=...
I actually thought that some sort of fishing attack is going on because my old password didn't work and I have to reset it.
Despite the damning alleged evidence, I get the feeling that all the offenders knew that they would be found out ahead of time, evaluated the risk reward trade-off and decided that they could somehow get away with it.

Are there any lawyers here who could make an educated guess how they could?
Personally, I've never had an experience with valgrind that could be reasonably characterized as "quick". But YMMV.
It is constitutionally impossible to disband the House of Representatives and switch to proportional representation.

There are multiple kinds of proportional representation. You're focusing on one kind called a party list system, but it's perfectly possible to have PR within a constituency with a transferable vote.
I once seen this [1] lecture by Swami Sarvapriyananda on Flow. I found it very interesting and easy to understand.

[1] https://www.youtube.com/watch?v=BGswR0tMqCM
That has to be satire
I am in Thailand where their education system is crappy. IMO, west math is better when it comes to systematic thinking, less hacky, more stable. Asian is good at mess thing up in hacky ways (or in the black side, cheating!), system designed is not stable in general.

Chinese and korean are more serious about teaching in my perspective. It's probably not that bad that Thailand's education system is crappy, it's more relax.
Like mid2015 back in the day?
Fine with all this, and you are right: nothing to worry by now... but in the end we should trust the math, and nothing else. And so, we need a schedule for update it..
To be fair, you were kind of a fool if you actually let Uber have your location at all times. As soon as they announced that I blocked Uber from my location. I only allow it when I take an Uber (which is almost never now).
My thoughts exactly. Just close the popup and open any Google app to verify that you cannot access the app without signing in again.
My local butcher in London was killed by Gadaffi for similar reasons it seems http://www.independent.co.uk/news/gaddafi-hit-squad-linked-t...
I have a somehow different view on swap.

The issue is not swap or swap utilisation, the problem is worst case latency. Even for a database an OOM is usually better than a latency hit that makes it unusable slow.

As a simple example an app might start allocating and use memory in an infinite loop. How long will that take? How long will your system be unresponsive?

If you have more swap than you can write in 30s you'll most likely do it wrong (your system can be unresponsive for 60+s).

Another worst case would be allocating all memory, using it and then performing random reads throughout the memory space. Your swap to ram ratio defines how much misses and thus how much IO you are doing instead of direct memory access. This should stay way below your IO capacity.

As a result I usually try to use a small swap partition and monitor for swap-ins, not swap usage or swap out.

So that's my thinking around swap mainly due to the fact that I have seen too many servers causing issues due to swap related latency.
Skynet will kill us all by redesigning manhole covers.
Weird things going on with Google today.
Sometimes facts and logic can be extremely verbose - I feel many analogies are in place not to be condescending, but because the author has faith in the reader that they can make the connection between the analogy and the problem.

And to be quite honest abstracting ideas is core to problem solving, and I think it's a bit disingenuous to say that anyone misunderstood what Linus was getting at there.
Ask HN: Paid app but also want to open source?
I've just written my first small paid application and would also like to release the source code publicly on github as a few people have expressed interest.

There's some pros and cons I can see with it:

Cons:

- Potential revenue loss, people wont pay if they can get it for free.

Pros:

- Giving back to community.

- Potential free advertising when technical users use the free code and non-technical users catch wind and pay for not having to be bothered with code.

Anyone do both and can share experiences?
Dunning-Kruger and Modern Software Project Management
Grandeur Park Residences Singapore Official Review Tanah Merah New Launch
Padding a code commit with extra whitespace, in indentation, between operators and operands, and trailing the lines, isn't rocket science. As another commenter said, you then helpfully fix the style in the following commit.
This is why donations to ACLU are important. Also, Republicans are clearly misreading their "mandate". Trump won by a mere 70k votes in EC, but lost by 3 mn votes. They are in for a rude awakening. And not to mention that laws like this can be turned into its head when the opposition gains power.
I have been loving ubuntu. I still use windows for games, but I could never go back to windows for getting work done or running severs
I think that Apple forget that video pros are also consumers. And their families. Usually Apple products thrive in families where at least one member is a professional that uses Macs for work. It just fits the whole idea of an ecosystem, so these people and their family members have iPhones, iPads, an AppleTV and maybe an Apple Watch.

Once these people start working on Windows machines, the benefit on an iPhone is reduced. It's still a great phone, but they might go for an alternative. Same applies to iPads.

Apple should wake up quick. The extraordinary sales numbers of the iPhone seem to have made the company live in a bubble where there is just the phones that matter. But who knows for how long smartphones are going to stay relevant and if a new piece of technology is going to replace them...
> Hundreds of millions of people have lost their fortunes due to inflation.

Do you have any links or can you explain how people lost fortunes due to inflation? I've read a lot of economics and this is news to me.