skysight-inc/HackerNews huggingface dataset:
I was commenting that buying instagram followers was relatively innocent, not that the act of cheating in a race was innocent. Sorry, I thought that was clear from the context.

> To call this "trivial" seems like maybe you have no interest or experience with marathons? It might be trivial to you,...

I never used the word trivial in my comment. You've successfully made a straw man and beat it to death :)

I hope you don't mind if I take your double mis-reading of my comment to make a broader point: I think your reply is an unintentional but apt example of the righteousness that can get whipped up in these types of stories.

Righteousness does some messed up stuff to our thought process. It filters things in a way to amplify the negativity of the behavior in question, crowding out nuance in the quest to reinforce belief.

It looks like you latched onto the use of the word "innocent" and started your reply, and each follow-on sentence in your reply is your thought process reinforcing this emotion, which is increasingly divorced from the original post's point (how we police behavior in the age of the internet).

Sorry to make a bit of an example of your post, but I recognize it because I've done the very same thing myself - it's something we're all susceptible to. I think the environment of internet comment threads supercharges this, as threads gain steam because they're public and can have many more participants dropping in to make a point or build on something someone else said. There's often no feedback loop to this bottom-up aggregate behavior, which can outsize the real world effects (the 'punishment') relative to the person's offense.

This site [1] has a good summary of the emotional chain of causation for why we feel this way:

* Intuition focuses the mind on a single strategy. An angry person can only see the reasons for anger.

* Anger is an unconscious choice by the system. The whole body responds to the emotion.

* Indignation also gains its power from the territorial instincts.

* The amygdala triggers the anger emotion.

* LTP (long term potentiation) makes the amygdala sensitive to imagined offence.

* Self righteous indignation permits anger without guilt.

Within the context we're talking about, this is really instructive. There are examples that describe each one of these points. And the sum of many people's anger without guilt can be fearsome.

For what its worth, I'm in full agreement with you - it bothers me too seeing people cheat, or stolen valor, or any of these types of reprehensible behaviors. What I hope for is a society that polices bad behavior by giving appropriate punishment - where we find the right response that prevents future activity rather than simply seeking to satisfy our emotional desire for revenge. I worry internet shame posts may be more the latter than the former and may have terrible unintended consequences.

[1] http://www.effective-mind-control.com/self-righteous-indigna... (I have no idea about the rest of this site and cannot vouch for all of it, but this one page was pretty darn good)
Lead Mobile Developer
"as google, we spent two years to research a way of generating sha-1 collisions and made quintillions of computations to generate an example" <- not very convincing or practical. It's like those japanese animes where the nerdy kid boasts about having computed your every move.
Unsure, not my job. But I read stuff along those lines. A modern OS plays all sorts of games to delay doing work. Allocate a couple of megs of memory and the OS sets up some pointers in a page table. And yes it'll keep already zero'd pages handy. And mark pages as dirty to be scraped clean later.
Does Google use cloudflare? Don't they do everything themselves?
One thing they don't mention is that it's built against libcrypto. They make it seem like this replaces OpenSSL, but it really only replaces half of it (libssl).

Still an exciting project, especially since the API looks dirt simple to use, but it doesn't live up to the awe I felt when I, at first glance, thought they had given a big middle finger and left OpenSSL behind entirely.
I like being able to plug in a thumbdrive without mucking about with my power cable.

Or plug in to a monitor without mucking about with my power cable.

Or... Just about anything, really. I don't get the choice of a single port over 2 or 3, besides they wanted to push a "unified" (read: confusing) standard but didn't have the board room to operate 2+ of the ports (eg, if they had two, you probably couldn't charge from both).
Having only a single port on one side is indeed a horrible idea; and the MacBook is in no way an entry-level machine (at well over a thousand dollars). Try and step out of the RDF.
That's still pretty much as silly as a tshirt. When a vulnerability was found in my hobby project I paid 200 to the reporter as a thanks. From my own pocket for my own open source program.
Think about economic stats -- there are a ton of numbers (GDP, inflation, unemployment, etc.). They are somewhat useful, but they are also highly politicized which limits their usefulness.

I see the same thing happening here. They shouldn't be dismissed, but not taken at face value, either.
Fear might be shared email/passwords since thats really common.
how does it differ from pastebin?
Despite what others think, I am not a CEO
Again: According to video footage, it does seem to work.
How functional programming saves hours of debugging and ramping up to new code
"it's really not related"

https://bugs.chromium.org/p/project-zero/issues/detail?id=11...
Thank you for your thoughtful reply and realize the difficult situation you are in.
Using Monte Carlo Simulations in R
> developers next,

Why would developers switch from mac to windows? If they're alienated by what Apple is doing, they're unlikely to be happy with Microsoft. Linux, sure.

Of course, I think this is exactly the sort of misprediction people on HN tend to make, where it turns out that (surprise) Apple actually knows more about market demands than random internet commentators. Remember how we were predicting that the new Touch Bar MacBook Pro would fail hard, but it ended up being the best selling MBP ever?
That's incredibly short sighted. This way they will lose many of their pro users which might not matter. But then they will tell their friends when asked what to buy to not get a Apple computer. I believe pro users is what made Apple big and it's a large part of what their success stand on.
I would say it's "clear" in exactly the same way the privacy slider within the Tor browser is clear. Why not set everything to its max value always? Because there will be limitations arising from it. In the CF interface it's pretty obvious adjusting the settings in that way will increase filtering and captcha challenges for users.

I think the decision that goes on in the minds of most site operators is "fuck convenience and sleazy Tor users, I want my site to be as safe as they can make it".

It's worth noting that other reverse proxy providers I worked with when freelancing expose the very same controls to site owners. Based on anecdotal knowledge, I'd say anonymized users accessing a site behind CF are subject to less hassle than those accessing a site behind something like X4B with comparable settings.
Yes. They integrate as a proxy for Google's cloud stuff.

https://blog.cloudflare.com/cloudflare-is-now-a-google-cloud...
If you can't think/find an example of this happening, that would confirm the assertion that YC does this quietly and privately.
Ultimately I believe CF is sustaining its business by filling a gap in the Internet, namely DDoS protection. Until somehow the gap is closed we will see CF-like services continue to be popular even after this incident.
I don't think it takes any special NDA protected knowledge to say that a new instance type was "worked on a for a while", given how rarely they release new instance types (the i2 family was announced in Dec 2013). Likewise, the i* family is their "I/O intensive workload" family, so again, it's clear that gains in I/O performance was a goal when designing i3's, the i2 family was definitely showing its age, even compared to a modern laptop.
That murderer was probably a white supremacist Trump supporter trying to make America White Again
In the meantime:

> Apple reports record profits in first quarter

> It was Apple's most profitable quarter ever, raking in $78.4 billion. It also sold 78 million iPhones in the three months leading up to New Year's Eve — more than any previous quarter.

> Net income was almost $18 billion. In other words, a license to print money.

http://www.marketplace.org/2017/01/31/tech/final-note/apple-...

So, tell me, why should they make an extra effort? They're good as they are.
Massive Google Wifi outage
Google is having some sort of issues with accounts today, and apparently that caused[0] a lot of their mesh routers to reset to factory defaults. Not sure how widespread this is, but there are a TON of people who are not happy.[1]

For my part, I reconfigured my routers this evening, and then a few hours later, they reset themselves again.

The beauty of cloud-managed hardware...

[0] https://support.google.com/wifi/answer/7335595

[1] https://productforums.google.com/forum/m/#!category-topic/googlewifi/Wifi/38Q-v9lBDRg
> Of course, I think this is exactly the sort of misprediction people on HN tend to make,

Says the guy who suggests Linux as a desktop.
Well that's the problem, isn't it? A founder looking for your money is not going to go out and say that they want investors who give them a blank check. But the fact is if they're deciding between you and another investor that is more "founder-friendly," all else being equal, they are going to pass on you.
Actually ended up wiping my phone because this coincided with a weird set of text attachments I got from someone who didn't knowingly send them. At that point I wasn't sure that my phone wasn't being keylogged, so I wiped to be on the safe side.
Reducing React jank with (possibly hacky) use of WeakMap
In history mathematics was not for everyone[0], not in the same sense as isn't today. IMHO, having chance to learn mathematics is a privilege. Most people not even have chances to train "mental arithmetic", "mental survival" is more likely a thing. Sorry for not answering your question.

[0]: https://blogs.scientificamerican.com/guest-blog/mathematicia...
It's kind of annoying that these processes aren't niced and ioniced (or the macos equivalent). Especially when typing a password.
Yes to your edit, but I can see the ambiguity.
Did Lastpass use Cloudflare? That would be a disaster.
Yea totally agree in general -- in this case I just mean that its so obvious right now how much focus Apple puts on their money making products that engineers at Apple would see the writing on the wall and they too would not be that interested in pushing the product forward -- likely the people who worked on it if they were smart tried to bail out of that group long ago. So if both the management and the engineers both don't want to work on something, then both the money and effort is dropped on the product and its dead. When Jobs was alive, people could get Jobs to approve it as a pet project and they would get money and people on it and it would move along. But nobody seems to be pushing those pet projects at Apple anymore.
So is any CDN.
Yeah, Adobe Premiere or Avid. Premiere is a lot like Final Cut Pro 7.
The seeds of the idea of nationalism date to the Peace of Westphalia, but few of us would actually think of the Westphalian "states" as nations in the modern sense.

I'd date the modern nation-state to:

The American Civil War. (1865). There's a reason why this is called "The War Between the States" in the South - before the Civil War, it wasn't clear whether the U.S. was a loose confederation that any state could secede from at will, or a unified political body that would fight to maintain its integrity.

The unification of Germany (1871). This is geographically the same area as the Westphalian states, but people think of "Germany" as the nation, not Munster/Brandenburg/Westphalia/Saxony/etc.

The unification of Italy (1871). Again, we don't think of the Papal States as a nation, we think of Italy as one.

The Meiji restoration in Japan (1868), where decentralized power under the shogunate was centralized under the emperor.

Russification under Alexander II of Russia (1859-1882), which included both the emancipation of the serfs and a systematic campaign to promote the Russian language & culture within territories governed by the Russian empire.
Not sure why my links didn't linkify. Trying again.

[0] https://support.google.com/wifi/answer/7335595

[1] https://productforums.google.com/forum/m/#!category-topic/go...
The fact that these "algorithms" and "deep learning" and "AI"s are applied to facebook is exactly the thing that makes me not want to use it.

I want a chronologically ordered list of the things my friends post. That's it. I get that ads are a necessary evil, but I don't like some AI picking and choosing what posts I get to see and what I don't. I don't trust facebook anymore, and I want to move off it - I just can't because that's where everybody is.
You are right. I'm not saying Apple is doing bad. It's just short-sighted to let the Mac (Pro) die. They might need a more colorful palette of products in the future. It's easier for them to keep the Mac alive than having to rebuild it if they abandon it. It will take them years to get the professionals back if they do so.
Use ola if you are in India.
today is going to suck
Happened to me on mobile and work. And my @google account - we truly are dogfooding :-)
Hah, no, my situation is super easy; it is "partisan bystander." I don't work for Google.
It is not the fault of the language if you use it wrong.

CloudFlare is to blame here, nothing else.

As for the reason why C, I'm pretty confident they knew what they were doing, and had considered other tools that did not meet all requirements.
Banks and similar financial companies are extremely paranoid about data security. Working at one all USB drives were mounter read only unless they were specifically provided by the company and encrypted using provided software. Anywhere you could upload files was blocked as well.
Or obscuring the source. If I wanted to cause a Chinese-North Korea conflict, I'd do it in a way that gives me enough time to tie up loose ends and points in a certain direction.

Same with Litvinenko. We will never find out the true story. Was it a message? Probably. But from who to who? Might have been FSB, but there were plenty of other parties that really didn't like Litvinenko and could have used Russian Polonium either to blame the FSB or to tell the FSB not to fuck with them, because they had the means to blame them for random hits (or a million other possible reasons).
Don't you enter your destination before getting picked up?
Correct headline would be "Indian Engineer Killed in Terrorist Attack in Kansas".
DLL Files Fixer Crack 2017 License Key Full Version Free Download
Show HN: Ostrich – A Game Boy Sound System Player Written in Swift
It really shows that Tim is no Steve. There has been zero amazing news from Apple since Steve passed away.
I think it's probably referring to the Apple Developer guidelines. Quoting Apple directly:

"If your App is rejected, we have a Review Board that you can appeal to. If you run to the press and trash us, it never helps."

https://developer.apple.com/app-store/review/guidelines/2016...
I wonder if it has to do with the people that were kids when those were new being 30-40 now. Maybe it's a good time to stock up on GBA games before they skyrocket in a couple of years.
It's easier than that. Someone could create a benign patch and a malicious patch that collides the hash. But what could they do with that?

For example, let's say it goes (letter##number represents the hashes):

State 1:

Real repo: R3 -> R2 -> R1 -> R0 (note: R3 is the head)

Benign PR: B1 -> B0 -> R1

Malicious PR: M1 -> M0 -> R1 (note: M0 = B0, but the contents are different)

State 2, after merging Benign PR:

Real repo: R4 -> R3 -> R2 -> R1 -> R0, R4 -> B1 -> B0 -> R1

If Malicious PR was merged now, Git would, I imagine, just believe that M1 is a commit that branched off of B0, since that's where the "pointer" is at.

So, yeah, what would this actually accomplish?
But in an AMA, it's the audience that asks interesting questions, with you discovering that your stories are more interesting than you originally thought they would be!
There's also c), finance b) with a loan/bond issue using the savings from not doing a) to finance the payments.
waiting for Trump to complain about how the media isn't covering this terrorist act, again...
It does not appear that LP was using Cloudflare. Even if they were, at most, your master password is all that leaked. All of their encryption and decryption is done on the client.
Reddit just told me my account was compromised
That was litigated in the 1860s.
Sure. I was talking about the general purpose of bug bounties, not the specific value.
Bleach, you should really use bleach. It breaks it down instead of just mechanically rinsing it away.
I used to work at a small company that made a SaaS product for a niche HR function. One of our largest customers, a bank whose ATMs you likely see every day if you're in the US, decided to drop our service in favor of a solution built in-house. We were disappointed, but had to let them go.

Then, about 2 years after they'd canceled, our support department got a strange email from a user that was having problems. At first, the support rep didn't understand the issue and asked the user for screenshots of the problem. Sure enough, the screen shots looked exactly like our old product, which had been decommissioned over a year prior. It even had our support email address and phone number on it. It turns out the version of the software they developed in-house started by scraping our site, renaming all the .html files to .aspx and then making the dynamic parts be data driven.

When we called them on it, they basically threatened to use lawyers to put us out of business if we pursued the issue, so I guess our management decided to drop it. We did make them change the support email and phone number.
It only replaced half of OpenSSL, but it replaces the half which has been responsible for almost all of the worst vulnerabilities.
gg to project0
automation of software development is inevitable as there is huge financial incentive to do so. Businesses view developers as expensive middle men between them and the product -- much like the assembly line workers in a factory.
I am betting that typical crud business apps and majority of web development will be the first fields experience heavy automation, which also happen to be the areas where the vast majority of software jobs exist today. But this won't happen overnight, so lets enjoy the good times while they are rolling :)
From reading various discussions, it sounds like there are quite a few places that make implicit assumptions about the length of the hash, so from a technical perspective it might be a hassle to migrate to longer hashes.

I think the bigger problem would be external -- tooling and other integrations. I'm guessing if they did move to another algorithm, as part of the migration git would need to re-compute the hash for every single object in all of our repos and migrate all our refs over to the new hashes, so that repos created before and after the change would be indistinguishable. This would mean that every commit hash which appears in plaintext in commit logs, emails, bug trackers, etc. would be wrong. Not to mention 3rd party tools which make the same assumptions about hashes that git itself does. It sounds like a nightmare to me, and one that I would only want to force on the community if absolutely necessary.
You don't have to.
Context suggests a typo for "very bad idea".

Although I kind of like the image of tptacek thinking about using PGP for email and scoffing "Hmpf! The very idea!"
It seems like the Akitio Thunder 3 would work -- did you try that one? I guess you would need a MBP with thunderbolt 3 then.. so 2016 models from like 3 months ago then?
Account Action Required notifications and unexpected sign out issues
Cruise is the one you are looking for.
The easiest fix to the intermittency problem is to use electricity when renewables produce [1]. That would reduce the need for batteries in the beginning.

[1] http://www.co2signal.com
I imagine many rails developers were doing something like this anyway and just working around "the rails way" of handling frontend assets.
TensorFlow on Spark
My boss uses a desk which allows him to easily change its height. If he needs to stand for a while he just moves it up and can work while standing.

I think this might be a viable solution but depends on the company you are working at, as these desks obviously are more expensive.
Journaling filesystems don't "journal" all the activity in perpetuity. They typically just journal the changes until they're committed to disk, usually for less than a second.

See http://www.nobius.org/~dbg/practical-file-system-design.pdf, section 7.2 "How Does Journaling Work?".
> if the 'viewer' is highly motivated videos of any quality could be invaluable

That's what I meant. Just stick some cameras in the ceiling (or wherever is best) and capture what you can. It seems cheap and better than nothing, but I know nothing about biological research.
Show HN: Textsift – tools to visualize and analyze text data
You can surely apply on linkedin or email recruiters
Well, he said that it wasn't. But then refused to say more, and disabled comments.

Strange.
Author of Ragel here.

An experienced Ragel programmer would know that when you start setting the EOF pointer you are enabling code paths that never executed before. Like, potentially buggy ones. Eek!
Because they're resting on their laurels.

It's dangerous to coast the way they are.
Forgot about that, thanks. However we can use "integrity" attribute
Any chance you could elaborate on this? What about email is inimical to secret messages? Why are they less secret over email than through some other medium?
So there is no cheap in-house solution to DDoS but CF?
Funding the Room Xchange – a start up's journey to raising capital
Not a fool but ...
So sad. Incidences like these will undoubtedly occur more frequently due to the Trump administration scapegoating and demonizing immigrants and "the other" in their rhetoric.
First Principles for Job Search
SHAttered attack, Google and CWI conducted the first SHA-1 collision attack
This is entirely not related to what we're talking about here. It's not about trust, it's about good practice. If someone needs access to something, they request it, you grant it. Simple. But there should be common sense controls on data access, for everyone's benefit.

You're talking about a hostile work environment. I'm talking about a secure one.
> If anyone here is HIPAA-regulated or you have a customer who is

Cloudflare certainly does; I founded a health tech company, and Cloudflare was the recommended go-to for health tech startups who needed a CDN while serving PHI.

And this is definitely a reportable breach. Technically any breach is supposed to be reported to HHS, but in reality, a lot of covered entities (e.g. insurers) fail to report smaller breaches (which, as a patient, should terrify you). The big ones, though, are really, really bad, and when reported, the consequences can be very serious and potentially even include serving time, depending on the circumstances.

The reason I can be so confident that this is a reportable breach is that the definition of PHI is so broad that even revealing the existence of information between two known entities can be considered protected information. Anything more specific, like a phone number or DOB, or time of an appointment (even if you don't know who the appointment corresponds to) - that's always protected. And Cloudflare certainly has many of those.
Same happened to me last night, but only on my phone. It said something "had changed" in my account wtf.