skysight-inc/HackerNews huggingface dataset:
I'd actually say it's relative easy to find privacy information about a product or company. Independent researchers and organizations (like EFF) are exposing privacy violations all the time. It's oftentimes just a search away.

Case in point: Pokémon Go. It didn't take long at all before they were exposed (http://adamreeve.tumblr.com/post/147120922009/pokemon-go-is-...) for requesting full access to your Google account. The subsequent outrage caused them to take a more privacy-minded stance.

My point being, this information is and can be made available to consumers without requiring government or regulation. A whole new non-profit organization could be established that does just that: researches and publishes privacy-related data on products/companies. It could even have a program that rates and awards gold stars to those that pass their requirements, like EFF's Secure Messaging Scorecard (https://www.eff.org/node/82654).

> This isn't holding the market back...

Regulation always makes it harder for new entrants to the market, while simultaneously keeping incumbents in power (because they're often large enough to handle the time and money required to comply). And with less competition comes less choice, poorer service, and higher prices.

It sounds backwards, but not regulating privacy actually makes it easier for privacy-minded companies to enter the market and find success.
As a user I struggle to stay engaged with twitter - the moment I try to read, I am flooded with irrelevant content, yet the platform is the best place for niche interest information and fast niche information. The Signal-to-Noise ratio is too low. Here is how I would fix engagement and revenue:

1. Consider twitter a user's portfolio of interest channels and let us tab between our chosen channels immediately (multi-select box at the top where I can pick VCs, medicine, Design, Oscars, whatever - and it blends my feed for me)

2. Encourage floods of content and monetise curators filtering for quality - I can pay for subscription a feed of world news from WSJ, NYT, and other paid sources, and my subscription fee is distributed to them based on consumption. The best content wins and the quality editorials get rewarded for earning loyalty, not writing clickbait.

3. Enable paid advertising-free feeds.

4. Enable premium, niche feed advertising that is hyper relevant (If I have a spine medicine feed, an ad from Stryder would be very appropriate, but one from herbal remedies providers would be irrelevant). Building the curation mechanisms would draw top engineering talent in machine learning too.

5. Allow co-watching experiences during media events.

6. Allow me to filter out topics I want to avoid (and by doing that, you get more engagement and better ad targeting capabilities)

7. Open your developer ecosystem again and this time pay attention to what works and provide guarantees that you won't kill developer efforts. Those developers build bots for Facebook now and help their user engagement instead of yours.

The gist of it is: make your revenue model reward and improve quality. The moment you let advertisers lead you by the nose and dictate for obstructive anti-user product decisions, you will permanently lose your market to Facebook and others. I lead a hyper-niche collaboration network so happy to do a longer brainstorming session with Twitter people.
You can't win. That hard.
Target's stock price absolutely tanked today. I bet that, while the s3 outage will have a negative effect on AMZN, Target reporting way under estimates is probably creating a positive effect that evens it out.
The manager is not the bad guy. They are doing everything they should do in the scenario I presented. Checking into an outage affecting a critical system. Criticizing the sysadmin's findings based on the evidence that Amazon's status page disagrees. I don't expect a non-technical party to believe me over Amazon.

The bad guys are the providers who report false positives to preserve metrics.
Sounds to me like you have a problem with the over-zealous enforcement of the rule, rather than the rule itself.

While I agree the enforcement can be over-zealous (I've seen it first hand), I think if it wasn't produce it would just be something else they'd nitpick. It's the mentality of the guards that's the problem.

And what type of system would you propose as an alternative? A threshold based on actual risk? Well then every type of produce is going to have different limits. And what about different sub-species of the same fruit? If Macintosh apples are a bigger risk than Red Delicious, surely they should have different limits. It's only fair. Now you're counting on a traveller (and border guard) to be able to know the difference between a myriad list of produce types. Good luck with that.

I'd argue, that such a system would lead to slower crossings, higher costs, and less focus on more important matters like security threats. The rule itself may be extreme but makes a lot of sense in the context of processing millions of travellers efficiently.

Just as with software, simple, easy to understand paradigms are usually better.

>If you're going to forbid apples you might as well forbid those otherwise it is inconsistent.

The line has to be drawn somewhere. In the interest of balancing risk and expediency "no produce allowed" seems like a perfectly reasonable rule to me. Even children can understand it. Heck, even non-English speakers could be made to understand it with some well designed signage.

Anyways, there are way bigger issues with border crossing rules and procedures. It just seems like an odd issue to be so passionate about in this day and age.
Ask HN: Building a streaming website
Noob programmer here. Any advice on how to build a simple streaming site (think Twitch.Tv)?

I'm new to web development and would love to build my skill set by working on a video hosting website.
https://cloud.google.com/storage/
0.1% of 28 days is 40 minutes, so it seems likely to happen.
I wonder if anyone has a formula to convert estimated $ loss if a password is cracked to a suggested level of password entropy.
In other words, you could probably calculate that a given password format (say, 8 random characters with about 70 possible values each) would require X CPU cycles, with Y% certainty. Then, you could convert the CPU cycles to an estimated opportunity cost to crack that password. That would be the maximum value that this password format would be sensible to protect. Drop a couple orders of magnitude if you want to err on the safe side (or adjust Y). I expect you'd reach a number beyond all economic activity on Earth before you hit 100 characters, 15 probably exceeds most people's net worth, and 8 characters probably suffice for the majority of sites requiring a password.

I think the bigger win of using a password manager is being able to use different random passwords for each site, rather than using particularly long ones. That alone gives you sufficient entropy to beat brute force attacks and isolation of your other accounts from a single site leaking your password from their end.
A well designed assembly language should be targetable by any well designed IR. When the Go team decided to work on their own compilers instead of writing frontends for existing compilers, they chose to take on that effort.

What assumptions is wasm making that will prevent Go from targeting it, and why are those assumptions fundamentally harder for Go to target than LLVM IR?
Twitter does need to continue engineering. It needs to do exactly one thing: re-order the timeline so that coming to Twitter becomes fun and engaging again. Right now, when I open Twitter ( mobile or desktop ), I have a huge flurry of random things I don't really want to read, or don't want to read now.

Re-ordering the timeline promises the solution - but it doesn't work yet.

I would think you need "auto-group", which FB, Google, and others have tried and failed at.

But in any case - twitter is the place I feel like I have to go, but don't want to go, and I think I'm not the only one.
I can't stream music from my iCloud library.
> In my experience the fastest way to kill productivity is to measure it incorrectly & incentivize bad behavior chasing the wrong thing.

In my experience this is almost always a management driven attempt to turn 1x engineers into 1.2x engineers.

Can you provide some examples where this is the norm in a company culture which focuses on building and enabling high performers?
Same related flaw as Three Mile Island. Fail closed and measure the output, not the intent.
> It's a fascinating difference in paradigm, and I wish more games would explore the idea of actors in the world being chaotic/free agents which will only somewhat prioritize your wishes.

Sounds like current config management software
Leap day bug?
I'd love to write C++ in the browser, but only if they fix timers. The power of C++ and manual memory management is completely useless if some independent overburdened thread gets to decide when you are scheduled and for how long you run. If you have to just take 5ms breaks in your thread execution, you might as well just get a garbage collector that stops your world for a couple of milliseconds once in a while. Performance and any resemblance of real-time programming is lost anyway.
It's been a couple of years now, but I still load up A Bridge Too Far every now and then! It's the only 20-year old game I know that's still fun.

It's getting hard to run on current machines, though, with its hard-coded screen sizes and a scroll speed that's unusably fast.
Open up a cloud services arm that uses the Twitter infrastructure to host long-running business processes with broadcast-ability. Offer twitter feed integrations, human workflow steps, workbaskets/inboxes, and external partner API calls.

Low latency seems to be Twitter's thing, cash in on that and make some speedy low latency workflow thing.
Privacy Badger is made specifically to just block tracking cookies without impacting the user experience so it tends to be my recommendation. I believe it will indeed do local storage too as of 2.0 though I could be mistaken about that.

In the past I've had my browser dump everything on exit, every time I exit, but that can be a major inconvenience. SDC sounds like an interesting middle ground though.
Offensive Tools and Techniques
Interesting. Does that imply security-conscious tech companies would be better off running .NET services on Windows Server on Azure than a typical FOSS stack?
There will be a point where "software" will automate all of this stuff. 360,000 hours is a ton of full time employees. I wonder how they feel, and if they are typing up resumes as we speak. Looks like machine learning and similar skills are going to be more sought after than the normal finance or law skills!
Ah, Ok. I have been wrong to mention the VA suite of products in my original comment. I have only used VAJ and VAS then. They were (IMO) truly great. VA C++ sounds horrible. Perhaps the other products in the VA suite sucks :)

I used Delphi too, it was great. The VCL and the community/market around it was wonderful. I looked into BCB for a bit, but unfortunately never got to using it in anger..

Borland had a great run.
The outage was on us-east-1. If you are hosting mission-critical files in a single region, S3 is not the problem.
>key concept: inflation is a policy, not a rule of the universe

The money supply has to grow with the growth of the economy and population, and it's better to have excesses than shortages. Or should we infinitely divide a single dollar for everyone to use?
It does, but you still need to manually declare all the types and functions. And then, since it's C, you also have to deal with low-level stuff like memory management for strings and other buffers.

Whereas someone working with, say, C# or Java, can just go and find a library that's native to their language, ready to use out of the box (even if internally it wraps that very same C library).

It's the usual curse of a small ecosystem. Things were different back when Delphi was popular.
As others have pointed out, this is a special case of a commutator. I don't know if this case has a standard name, but elsewhere I've seen it called "U-process": https://www.quora.com/Can-a-Rubiks-cube-be-solved-without-it....

If you're solving using commutators now and are looking to upgrade to a faster method in the same spirit, check out the Heise method. It's also an intuitive method (no memorization required), which starts off with block-building and finishes using commutators. I made the transition from commutator-only to Heise and am enjoying it, and I'm still very far off the speed cap for Heise. (Its creator reports averaging ~30sec: http://twistypuzzles.com/~sandy/forum/viewtopic.php?p=45076&...)
No, not at all. One could argue that analytic philosophy and mathematical logic have some overlap and inform each other, but even then, there are deep differences in their goals and methods.
Well for one, there's no victory condition. At best, its do so well that you try to see how well you can survive is the face of stupid decisions/goals
Yes, I guess you are right in a way. One can become 10x game jam programmer simply by attending a lot of game jams, but be average in normal gamedev job. And Notch might be one of those 10x game jam programmers, I do not know his work in this area.
Autonomy or Authority: Why Microservices Should Be Event-Driven
Probably this one: https://www.gwern.net/Story%20Of%20Your%20Life
Are there any command-line tools like ltrace, ktrace, or dtrace on Windows?

Also, is there an executable for this tool? From a quick look at the github page, it looks like it's only available as source.
This. I have to hire another company, in order to monetize twitter, because twitter doesn't give me the tools itself. The other companies do a good job.
Could you tell me a bit more about why you want to write C++ in the browser? What things are you doing that are so CPU intensive that C++ is higher productivity then just JS?
Ryan Heise has a nice guide to solving the cube without memorizing algorithms (using conjugates and commutators).

http://www.ryanheise.com/cube/
Facebook Research:pre-trained word vectors for 90 languages
Any opinions you can post on http://wp.me/p7HKNy-5h as well
If I had the nuclear option I'd create a new account type, Twitter Business. Twitter Business has special features directly linked with their advertising core. A twitter Business handle costs $9.99 a month and includes "premium" business features such as engagement analytics, brand tracking, etc.
> although the additional evaluations near the mode would strictly add more cost.

No, one evaluation near the mode is more efficient than one evaluation at the boundary (because the density is higher).

I agree that the region immediately around the mode is naturally "avoided" (because the volume is small). But your paper makes it look like we increase efficiency by explicitely avoiding it and concentrating somewhere else. That's what I found confusing.
All websites that use Cloudflare were potentially affected by Cloudbleed which is what makes it such a terrible thing.

You will never know the exact damage, the only thing you can do to play it 100% safe is to rotate all credentials on sites using Cloudflare.

And you can't access HN without going through Cloudflare (unfortunately, but HN is having a hard enough time to keep up with traffic as it is, without Cloudflare it would perform a lot worse than it does).
You can see if something is worth reading within the first 100 characters. Twitter character limit doesn't work because people are posting images of text, or do "tweetstorms". If the limit made sense, the users wouldn't be doing this.
What a grueling (yet awesome) journey at a startup accelerator taught us
Disagree on Google Analytics.
The fruit just gets confiscated (and in theory, you could face a fine).

While I'm sure there are exceptions, it's not in any way common to be "sent back" for this.
> Why could this post not have been crafted by someone at Lyft?

After all the shady campaigns Uber has used against their competitors, even if this were true, I'd be fine with it.
Post your opinion on http://wp.me/p7HKNy-5h
The thing is, Telegram only owns portion of the copyright. There are also a few other copyright holders as a result of their commits having been pulled in. Telegram cannot legally relicense the codebase without first getting approval from those people. I really doubt that they have done that and if I'm true the app is still GPL.
Very true. My comment was not meant to suggest that I think Twitter should promote already illegal forms of speech like threats, etc.

To conflate speech with privilege is absurd. We are all equally empowered and equally vulnerable in a free speech society.

A non-privileged person is free to draw a cartoon of Trump that looks like Muhammed. In a totalitarian society nobody is free to draw cartoons of certain subjects.

To assume that a person of lower social status is more likely to be emotionally wounded from words is akin to claiming him/her to be less rational (and thus less human) than others.

Speech is dangerous because it can incite passionate behavior while also being nonviolent. That is why we must preserve our right to this freedom. It is far better than the many coercive alternatives.

Information is powerful, and it can empower and inspire people to act. But the idea that certain ideas are dangerous and must be suppressed reminds me of the embarrassing attempts during the 1980s by social conservatives to cast heavy metal lyrics as satanic and deserving of censorship.
> They can, at any time, serve JavaScript...

Firefox Sync functionality is integrated in the browser and not served on demand.
But only the logo image hosted on S3 is broken though. It seems to be preventable if they host the logo image together with their status page.
Other regions still work, but the web console relies on us-east-1 so you should use the API to create new buckets until the issue is resolved.
I'm a bit confused as to what happened here, were you trying to conduct a multi-million dollar deal through their community forums?

> My bid also would have been for lower specifications and a higher per-unit price than the official raspberry pi zero specifications and price, to further make fulfilling it easy.

Higher or lower, different specifications would have meant a lot of overhead in designing, testing and certifying a new design.

> Their official reason was that I was generating too much mod mail for them to deal with (even though throughout the site they encourage people to message the mods about anything and everything), since hundreds of people were extremely interested in ordering mass quantities.

Were you trying to corral hundreds of people into making a single bulk order of a new pi, but without the pi branding? That sounds like an enormous headache with regards to delivery, liability, etc. Also you say hundreds, hundreds of people buying need to be purchasing tens of thousands each before you're talking about x million devices. Were the hundreds of people all realistic purchasers with $100-200k ready to put down in advance?

> This is not true. If it were true, they would welcome a mass payment up-front as this would solve their "do not have the capital to make x million devices upfront" issues which you cite.

That would be just pre-ordering, which has other costs to a community. Letting the first people buy 10 for various hobbies probably doesn't help the community as getting the new device into 10x as many hands.
Thanks. I get genuine static on Mac; some issues with x86_64. I'll dig deeper this evening.
MaidSafe's SafeNetwork is a much more robust proposition.
Sia and Storj could be just simple apps in the SafeNetwork.
Using the Blockchain is not adequate for storage purposes, and proof of work is just as silly.

MaidSafe is rewriting all the OSI layers from layer 3 and above, guaranteeing extreme resilience, security and anonymity natively, besides of being totally distributed atomically, self-healing, self-encrypted and self-authenticaticated.

Both Storj and Sia are cute hacks compared to the massive architectural reimagining that MaidSafe is doing.

Read more about it:

Article in Techcrunch:
http://techcrunch.com/2014/07/23/maidsafe/

SafeNetwork explained for bitcoiners:
https://safe-network-explained.github.io/safe-for-bitcoiners
Interesting that they still host the cloudron.io site on Amazon platform

ping cloudron.io -> 54.192.7.94 -> server-54-192-7-94.dfw3.r.cloudfront.net (Amazon Technologies) [1]

[1] http://whatismyipaddress.com/ip/54.192.7.94
RPCS3 Progress Report February 2017
There's a joke: Mathematics is just applied Philosophy.

It bears some truth :)
Just to be clear...best practices with designing status pages:

1. ensure it does not depend on your infra (if your api server goes down - it should not take down your status api with it)

2. make sure your service reports to your status page instead of your status page looking for the service.

3. redundancy for your status page?

anything anyone-else wants to add?
the top answer really doesn't leave much to argue about.
The Pi Zero (and the new Pi Zero W) also takes standard USB 5v, not 3.3v.
In Video, Uber CEO Argues with Driver Over Falling Fares
Unless it affects Apple.
Creating controlled components in React
Red dot as a service?
This sounds like rank corruption. Surely such a thing is rare in the military?
Why planes don't fly faster (and maybe why Buffet is investing)
I like how HN (and others) handle this - there should be a static link to a 3rd party source, like a twitter feed, at the top of any status page.
stop banning the best accounts.
Today I learned a new reason to be disappointed in my projects.

Maybe the people who randomly message me about my projects months after I've posted them are secretly NSA.
"This 7-week course is designed for anyone with at least a year of coding experience, and some memory of high-school math. You will start with step one—learning how to get a GPU server online suitable for deep learning—and go all the way through to creating state of the art, highly practical, models for computer vision, natural language processing, and recommendation systems. There are around 20 hours of lessons, and you should plan to spend around 10 hours a week for 7 weeks to complete the material. The course is based on lessons recorded during the first certificate course at The Data Institute at USF. Part 2 will be taught at the Data Institute from Feb 27, 2017, and will be available online around May 2017."

http://course.fast.ai/
This is why:

https://www.joelonsoftware.com/2008/03/17/martian-headsets/
what if I told you that if you the status text didn't update?
AWS S3 is back up
This is why I always set up my own monitoring for services in addition to the provider's status page. Simple SmokePing graphs have saved me a ton of time when it comes to troubleshooting provider outages. It especially helps when I can show them exactly when there are problems.
Getting into StartX and Raised 4M
A Chinese AI Startup got a Stanford PhD as co-founder, promised her with significant shares of the company, and got into Stanford StartX. Immediately after acceptance into StartX, this guy S forced the student out if she wouldn't quit her PhD and asked his wife Y to be his cofounder and effectively controlled the company. They got investments from Stanford, a Sand Hill Road VC and some Chinese VCs money, totaling almost 4 million USD largely due to being part of StartX.
That's not a turn around scenario. It would be better to try to find a buyer at the current price.
I'm more excited for the possibilities it opens rather than the immediate effects
Show HN: AnyChart – JavaScript charting library (SVG/VML); source code on GitHub
Quora is down too. Getting 504. Gateway Timeout.

Is it related to S3??
Ask HN: Are we relying too much on Heroku/AWS? Thoughts?
Growth of economic activity and population is a collective choice we are making . We may eventually have less of economic activity, population, or both .