skysight-inc/HackerNews huggingface dataset:
> So, 'jailed' is a reason to mark it as 'requires attention'? Well played, well played..

Yeah, that's pretty dumb security theatre. If the device is rooted, it can fake your root checks. Just ask Blizzard.

Better to figure out how to operate even when that happens.
Coloring 3D prints with DIY computational hydrographics (and Blender)
"Chromebooks are still largely a US K-12 story."

This is for reasons that were unique to US education market.

http://www.theverge.com/2016/5/19/11711714/chromebooks-outso...
> otherwise there would be a lot of things just dumped out there.

There are.

https://en.wikipedia.org/wiki/Marine_debris
I visited Philly a couple of times last year while staying in NJ. I was really impressed with the downtown area, it was clearly a nice city with tonnes of potential. Then we went for an excursion to somewhere on the west side of the river and wound up driving for a few miles through a hellscape of run down poor urban neighborhoods that were depressing, and frankly scary. It blew my mind that an area like that existed. It surprised me such a well laid out urban area right on the fringe of a major city would be in such bad shape, I expected it to be full of hipsters.
Except that alot of her image was modeled on Steve Jobs, who was a confident male figure, though not the same image as a more traditional CEO.
I've made the source files are available for people to experiment with: it's not a perfect process yet, and I think with some crowdsourced effort it could get a lot more refined. The application would be coloring any 3D print that has a diffuse color/UV map: figurines, product prototypes, that kinda thing.
Because that's not what that sentence means.

Jargon in academia is definitely overused, but in this case the terminology they're using has specific meanings, that this is meant to communicate to people within the field, that are lost or obscured when you attempt to simplify them.
Plastics are good, but you need to have tubes going into the thing, as well as some means of accessing the inside even if you only access it on a ship/land. That means rubber and metal will have to be on the exterior somewhere.
Overview that explains the problem this is meant to solve:
https://upspin.io/doc/overview.md
The March for Life [0] is not now, and never has been, "the Women's March for Life", even in its own organizer's propaganda.

[0] http://marchforlife.org
Woah I tried it again and it seems like it's working perfectly! It seems like the initial release for windows wasn't compiled with optimizations, so perhaps that's the issue I was observing.

https://www.reddit.com/r/emacs/comments/598iot/on_windows_em...
Generally the RTC in a computer is not as accurate as a typical wall clock or wristwatch. Although the RTC usually uses the same type of crystal as a watch, the circuit is not usually calibrated (tuned) as part of the production and test process. I have seen drift rates of up to 5-10 minutes per month on systems that aren't using NTP.
Getting banned from Club Penguin is now a speedrunning competition
Trump is running on "the concern for the voters", but in my humble opinion none of his solutions are going to be good for workers.

There will be less healthcare, less worker protections and less taxes paid by rich people.

The TPP is interesting in that as I understand it was meant to be a big political bargain to fence in China with a lot of concessions give to large cooperations.

Another thing is that free trade in general is good for poor workers somewhere, but unless it comes with some agreement on worker protections they will all be eroded in the long run.

Both left wing and right wing people can find something to like there, it depends on how it is implemented. Kind of like UBI which the far right and the far left in theory agree to, they just use the same name for widely different things.
Funny because I'm in IT and sometimes I feel like switching to embedded systems for almost exactly the same reason.
That does sound very promising. I, too, hope it succeeds.

How much time have you spent on set theory or discrete mathematics?
Here is Nature's policy on embargo: http://www.nature.com/nature/authors/policy/embargo.html

They argue that

> [the] embargo serves scientists, journalists and the public. Our policy is to release information about our content in a way that provides fair and equal access to the media, allowing them to provide informed comment based on the paper that is to be published. Authors and their institutions' press offices are able then to interact with the media in a well-ordered fashion ahead of publication, and benefit from the subsequent coverage.
No problem, I managed to learn something new!
Because the data I linked to?
To be fair, the way to reference remote files like this is hardly novel. For example the Unix rcp(1) command has supported a very similar username@example.com:path/to/file syntax since at least 4.3BSD-Reno (1990): https://www.freebsd.org/cgi/man.cgi?query=rcp&sektion=1&manp...
Other people have cited numbers, but in my opinion, most software project (greater than 75%) end up:

* Over budget in dollars or time or both

* Fragile

* Insecure (sometimes profoundly so)

* Having major UI issues

* Missing major obvious features

* Hard to extend

* Full of bugs, both subtle and obvious

Pick any five of the above at least. Keep in mind that most software projects are internal to large companies, or are the software behind APIs, or are otherwise niche products, though there are certainly plenty of mobile apps that hit 4-7 of those points.

Who is proud of ignorance? Original author:

> There is no point in giving me binary-tree-traversing questions; I don't know those answers and will never be interested in learning them.

He proudly states that he will never be interested in learning these topics. These topics that are profoundly fundamental to computer science.

Why should it be considered harmful? Because anyone who is writing software should always be learning, and should never dismiss, out of hand, interest in learning core computer science concepts. They should be actively seeking such knowledge if they don't have it already. It's totally Dunning-Kruger to think that you don't need to know these things. His crack about learning "object oriented design" instead made me laugh: As if knowing OOD means that you don't need to know algorithms. To the contrary, if you don't understand the fundamentals, you can create an OOD architecture that can sink a project.

It's like the people who brag of being bad at math -- only worse, because this is the equivalent of mathematicians being proud of their lack of algebra knowledge.
Real hardware regularly fails and you need to recover or people will think your device is flakey. Consider running a program for 20 years on a single chip without someone rebooting ever. Now, consider 100,000 people doing this and everyone thinking something is broken if it fails.
http://www.newyorker.com/magazine/2016/07/25/donald-trumps-g...

https://newrepublic.com/minutes/133566/-

https://www.washingtonpost.com/politics/-/2016/07/17/d2ddf2b...

http://www.hollywoodreporter.com/features/-898465

https://www.youtube.com/watch?v=bd79UsXSLWg
> I think there are things "every good developer should know" such as knowledge about how cpus work, how OS'es work

Considering the complexity of modern CPU's and OS's, does college go into enough depth to tech them well or does it just let students think they know how they work?
I think Chrome's behavior is the most sensible choice. If you are in an environment where traffic inspection is required by policy, than the browser should obey that.

If Chrome enforced pinning with local roots, then the outcome would be:

1. Those sites simply become unaccessible
2. Those networks require you to use a different browser
3. Those networks deploy a modified version of the browser which disable that behavior
4. Websites avoid using HPKP in the first place because it may cause problems

or some combination. Those outcomes seem worse than Chrome obeying the desires of the network admins.

Is there some risk that malware or other bad actors could abuse this? Sure. But Chrome's devs considered that and decided any other number of bad things could be done with the same access.
> But, it still is a very unique cultural work that is definitely more valuable than something created by another group of people with access to the exact same technology, but producing something of lesser value

Human cultural value != market-value. This is what I'm getting at.

What was the incremental cost to you to watch each episode?

How much did you pay to watch ET? Buy a Twin Peaks box-set?

> The secret sauce is the people involved and their life experiences, knowledge, and expertise, none of which are "free".

You can find free life-experiences (Medium, Twitter), knowledge and expertise (Github, Wikipedia, Quora) all over the internet.

I'm not saying that people don't need money to exist, or that as we're able to produce more, cultural exhanges are worth subjectively less to other humans (quite the opposite).

I'm saying that the costs of people producing things is decreasing rapidly. What is increasing is the net share of value which is captured by distribution platforms.

It's relevant that you can only watch Stranger Things on Netflix --- you can't 'buy it', you need to pay a rent in perpetuity to watch your favorite shows at your own discretion. This is only possible due to the power which the distribution platform (Netflix) has accumulated.
ThreatPinch Lookup 1.0.36 adds support for Censys.io
the basic reason is that ASR33 teletype machines have a backarrow character, whose ASCII code is the one more commonly associated with underscore.

When I read this I said "huh?" because I used ASR33's quite a bit in my youth and I didn't remember that.

But, sure enough, the 1963 version of ASCII had the backarrow. It was replaced by underscore in the 1965 version. The backarrow would have been current when Iverson first developed APL.

https://en.wikipedia.org/wiki/ASCII#Printable_characters
Yeah, I noticed that David Presotto, another major Plan 9 developer, is contributor #4.
To me, they key point is that "Kelly" did not apologize. If she had honestly failed to notice the author, she would have been mortified of the faux pas, and would have apologized during the meeting or in person soon afterwards. The lack of remorse, even during the later meeting with HR, makes a deliberate racist snub by far the more likely explanation.

That said, there are circumstances where a person with dark skin tone is hard to see. I once came very close to running over a pedestrian with dark pants, dark jacket, dark hat, and dark skin crossing a poorly-lit suburban street on a dark winter's evening; fortunately for both of us, the roadway was dry.
Odd, I moved into the opposite direction. But now I'm using git bash.
bradfitz has already replied, I just wanted to add what seems to me to be the focus of both projects, because they are different:

Camlistore aims to be your repo of all your stuff that you may want to share with other people at a later time. It wants to be the repository of all your life and everything that happens.

Upspin aims to be a unified protocol for all applications to access (and possibly modify) data, wherever it is: maybe it is your website on your server, maybe it's a NASA dataset on some S3 tenant, maybe it's an imgur gallery, maybe it's an OpenStreetMap dump of their DB; the goal AFAICS is to give any application access to data regardless of where and how it is stored, so that applications can do what they're best at.
Holy advertising Batman!
At this point it's totally inexcusable. Just buy the SSL cert already, or get a free one from Let's Encrypt.
I completely agree with you.
Are you using an insider build or a different shell than Windows' cmd? I find myself using Putty to connect to a Linux subsystem ssh server just to get a decent terminal emulator with full colour support!
I'd love to try it, but I'm not in an environment where the build of windows I'm using is new enough yet.
Oops! I'll fix this shortly, thanks for pointing it out.
> 1) Maybe I know what I'm doing (honestly .. I consider myself capable and still have cringe while writing this)

My example kinda covers this, phones really are getting faster... It's no longer a case of "I know what I'm doing" when it now comes down to human recognition and reaction time. In other words, you clicked allow before your brain had time to stop you. How do you prevent this?

> 2) Your software isn't immediately compromised in its core functionality if _I_ own my _own_ device.

100% agreed. For the Google Pay example, fair enough. It's your credit cards, and it's harder to come up with a counter point.. For the OP / Netfix example, it's not your data, and likely not your device - or - by connecting to company services, you've basically agreed it's not yours (This could be a whole sidetrack on it's own! :))

> Android Pay and whatever else might try to be your wallet (I'm a huge fan, as you might notice in this thread) should be able to withstand that. Otherwise it's just a crappy payment system.

Credit card companies are generally responsible for theft of money where you remained in possession of your card at all times. Sure, they really hate admitting it, and gathering the proof is hard, many times impossible. But that doesn't change the responsible party when the proof is found.. Given this, it's easier for them to accept less secure alternatives (e.g. the US's reliance on signatures).

The rise of NFC credit cards has changed this somewhat, if a credit card hands out all the details needed to make a purchase to anyone who bumps into you on the street, possession is now not the only factor, and banks have built safeguards around this (e.g. max transaction size, max NFC transactions before being required to enter your PIN).

Google with Android Pay must prevent that same bump on the street from stealing their customers money. The cell phone payment version of this comes in the form of other apps on the device, hackers breaking into the phone remotely, etc. With a rooted device, or a device using unknown firmware[1], all bets are off.

> I can pay stuff from my PC (various operating systems) and I do have root (or the equivalent permissions).

And this is a security hole, granted it's one I wouldn't want to see shutdown, but it's still security hole. I don't have any good answers here, but I do look forward to seeing a solution that works while letting me keep root access on my Linux box!

> Why is the CC secure, but a rooted phone isn't.

I'm think I've mostly covered this, but you're looking at two totally different landscapes. They just cant be compared in the same way.

> Ignore Netflix, they're brain-dead and content related DRM isn't what I'm going for.

While I'm no DRM fan, this entire article is about Netflix's corporate employee device security, it's nothing to do with DRM or content..

[1]: Unknown firmware in this case means firmware google doesn't trust - unrooted AOSP built from a unknown manufacturer can't be trusted any more than rooted firmware from Google itself.
We detached this flagged subthread from https://news.ycombinator.com/item?id=13698220.
I've read about amateurs detecting them with their instruments, like 12" SCTs. I don't know when I'll be able to afford it (probably a small Meade, SBIG CCD, etc.), but I'll definitely be writing my own algorithms/code to process the data!
> b) Isn't marine biology highly sensitive to heat pollution?

Impact on the marine environment is briefly mentioned in the last couple of paragraphs of the article, although they're a little dismissive and don't provide any evidence supporting their claim of negligible impact.
In particular, all the checked by default boxes to install things like the Ask Toolbar.
It's a lot harder to attack at scale when targeting credit cards than an attack that targets mobile devices.
This is money and time. Great if you have it.
Your comment perfectly encapsulates my experience doing embedded development for a military contractor.
How is this relevant ?

I was commenting on the availability of Linux games. There are very many and they generally don't suck. Avoiding Linux because of a lack of games is not a strong argument, if it ever was.
>If the device is rooted, it can fake your root checks. Just ask Blizzard

What happened with Blizzard and rooting?
"Oh, so this feature is just totally broken, then? Cool."

Always read the errata, folks.
We detached this flagged subthread from https://news.ycombinator.com/item?id=13698201.
Thank you for this. It definitely stimulated my imagination and creativity.
Snowclone of "make ___ great again" is literally the most contentious snowclone of 2016

I mean, are right-wing folks going to flock to SGML? Is this an American partisan deal?

edit: cool beans, they changed title

it is one of the most partisan phrases in recent decades
iPhone 6S Plus.

https://cl.ly/160K0O3R2I2l
Calling Bullshit in the Age of Big Data – Online Course
True. I think the author was a bit hasty in how he phrased things here. Given the context of the rest of his writing it's pretty clear that he's talking about the overall supply chain of content as opposed to the demand side.

Basically the insight is that, for a lot of industries, the internet has caused a general shift in the center of power from the supply side to the demand side. Fifty years ago you could maintain a strong and powerful position by controlling the supply chain for media content. Largely this was because supplying media was pretty hard - you had to find and organize the writers/artists, physically manufacture it, and distribute it across a given geographic area. Because it was challenging to supply media, there were relatively few options that consumers had access to, so if you managed to bring something to market it was relatively easy to find people who would be interested in buying it.

The internet turned that dynamic on its head. Now all those challenges with getting media into peoples' hands have evaporated. Of course it's still really hard to produce great content - and individual creators can still do fantastically well - but there is much less money to be made by bringing the content that creators create to the market. Instead, the more powerful position is to control the consumer relationship and let the content creators come to you. In a marketplace where there is a massive supply of different things for consumers to consume it's hard for any one creator/supplier to stand out and get the attention of consumers. So a company that does hold a lot of consumer mind-share and can act as a kind of entry-point to the market for consumers, like Netflix or Facebook, has a ton of leverage over suppliers.

And these companies do add value for consumers. It's overwhelming to have so many different options to chose from. It's nice to have someone help me navigate the choices, or even just present me a steady feed of content I might like.

We're seeing this dynamic not just in markets for media but also in markets for things like furniture and even consumer financial products - Houzz and Credit Karma, respectively, are both trying to be consumer gatekeepers, which will give them tremendous power in their markets.
The Great American Streetcar Myth
Interviews are a two way street. For most companies you should be able to talk to the hiring manager and other developers that you would be working with. Ask yourself whether as a junior developer if you will be able to learn from them. This includes technical skills, soft skills, and personality.

From my own experience I interviewed with a small company right out of school where I would have been the second or third developer (I forget now). One reason I did not pursue it is that I seemed to know more about development best practices than their existing developers; for example they did not use source control at all. While I would have had the opportunity to make a big impact on the product, I don't believe I would have grown much.
A quick Google search shows this repeated talking point by Chomsky:
https://www.google.com/search?q=chomsky%20public%20opinion%2...
This release also adds support for the ChaCha20 AEAD cipher and encrypt-then-MAC modes for non-AEAD ciphers. Not sure why those aren't included in the release notes.
Just set something on `this`:

if (!this.mySettings) {
this.mySettings = { value: 1 }
}
I don't think we do any gravitational lensing ourselves. Unless by "we" you mean the Milky Wayans.

Edit: to be clearer, if I understand correctly gravitational lensing is a phenomenon that happens, not something we do :)
> So 57,000 are worse devs then you ?

Probably not. There's plenty of better workers than me who I wouldn't want to work with.
Has modern CS education been too little first principles knowledge, too much memorization or something else that detracts from understanding the fundamentals? Maybe that's the problem.
How is that supposed to help? Even if the legitimate binaries are Authenticode-signed now, a malicious non-Authenticode-signed binary substituted by an attacker MITMing the insecure HTTP connection will appear to the downloader to look just like the legitimate non-Authenticode-signed binaries of previous versions that they’ve been downloading for years.
>Build an app that some user wants - maybe a game. Make the user click a "Start" button to play. Time how long between presenting the button and receiving the click, after a few rounds of this, wait a fraction of a second less than the average time and trigger the sudo call which in turn usually triggers an allow/deny popup.

I would consider this a software fault. Your SuperSU-or-equivalent app should do something similar to what Firefox does for downloads (the button is greyed out for a few seconds before you can click it).
There is also a high cost to get something into space, a risk of it blowing up or crashing while heading to space, dealing with very, very long wires (space is ~160km-2,000km) as opposed to the 50 and 200 meters that'd be used for servers under the water.

Also is the issue of having these very long cables running through airspace. Airplanes would have to be made aware of these wires. I can also imagine a lot less electromagnetic interference going on under the water.

Also, heat transfer becomes more difficult. No longer is there conduction of hot metal to cold water. In space, you have one main option for transferring heat. Radiation. I think this is addressed in your edit, but yeah, there's the Sun adding energy while you're struggling to radiate out your own server heat...
OpenRC users can:

echo 'TZ=:/etc/localtime' > /etc/env.d/00localtime
Here's the problem I have with interviewing, speaking as someone already at a big 4 company and has gone through this process already. I know exactly what types of things I need to prep for and even as someone who's competed in competitions like ICPC and TopCoder, I'm always worried that I'll get the type of interviewer who will just ask obscure questions and not go to the level of depth you mentioned when it comes to working with the interviewer to assess their problem solving skills vs just checking to see if they know the solution to some trick question - the kind that most people not knowing the solution beforehand would almost never be able to figure out within 30-60 minutes.

I'm planning on interviewing with Google in a few months just because of all the great things I've heard about their infrastructure and engineering culture, but due to these concerns I've budgeted to use my current vacation time just to get back into prepping the way I did when training for ICPC just so that I'll have confidence knowing that most interviewers probably have never studied algorithms at that level and that I'll have more confidence in not being potentially tripped up by these types of interviewers.

Most of my friends, even those at Google, have tried to convince me that this plan is overkill but I just can't get myself to leave the fate of my future into the hands of some random interviewer and then regret not doing this level of preparation if I get rejected...