skysight-inc/HackerNews huggingface dataset:
Exactly the way it was described. People are on board the rocket for the minimal amount of time before launch and not during the most risky operations in order to mitigate the risk of explosion. While the people are on board the rocket there are systems in place to increase their chances of escape, again mitigating the risk.

e: I realize you are saying none of this reduces the risk of the rocket exploding but at some point that doesn't matter because there's never going to be an absolute guarantee. The mitigation of risk that the rocket explodes is the further test flights the new rocket will complete before a manned mission to the moon.

Two lost rockets in a year is a lot better than previous years.
He seems to have enough money to not need to be in a leadership position again. I'm sure he can find some other use for his time.
World's first full atlas for the blind
>> while Rust is fairly young based on the 1.0 release date, there was a large amount of time prior to that where the language underwent a number of changes.

Both Rust and Java had similar intervals between start of development and 1.0 release, which is what I carefully referenced my claims to. The comparison is fair; deliberately conservative actually given Java 1.0 in 1995 (now 22 years ago.)

>> I don't see a reason that both Rust and Java's results can't be impressive in their own right.

The state of the art has moved on. There was a time when Java pulling to within 50-ish percent of a 45 year old programming language was impressive; back around 2005 or so. It's old hat now and there is little evidence the gap is going to close much further.
From these comments, I can't tell if Uber is a scrappy startup where everybody knows everybody, or it's a huge global corporation where nobody knows what's going on elsewhere.
Code: https://github.com/ctford/african-polyphony-and-polyrhythm
I don't think this counts as official, but a Mozilla employee replied to a Reddit comment stating that it'll be open source too.

https://www.reddit.com/r/firefox/comments/5wio45/mozilla_acq...

[edit] also nnethercote is a Mozilla employee :)
There probably wasn't any way to know. Guessing someone at Google just leaked it, perhaps related to the Waymo feud with Uber.

Or perhaps his accuser, or someone familiar with her, saw the timing would have been optimal to shoot an email to an Uber board member.
Aren't they buying high tech firms left and right?

Like uber?

When I think about it.

Is the culture there linked to the investors?

Just food for thought.
All MITM proxies I know require an enterprise CA trusted by the end-point. If that CA is on your machine the endpoint is probably owned by your employer. It is legal in most jurisdictions for your employer to monitor the usage of resources they have provided, be it computer or network.

I would never trust a company device, or company network, with anything I consider sensitive. Use your own device and keep it on cellular.

Also though I don't like it, employers in the US do have the right to open mail addressed to you personally if delivered to the office.
They're mostly equivalent to the FBI, except they have personnel which handle local police services in counties or regions which would not otherwise have local police services.
>Anything short of this would leave Uber as a silicon valley pariah. Top engineers and managers would be reluctant to join the company

In the era of alt-right ascendence and president trump? That would be nice...
Fix TLS – Let’s Get Rid of Certificates
Interesting pattern in these:

In times when we're clearly in crisis (financial crisis of 2009, stagflation in the 70s, Vietnam & the Civil Rights movement of the 60s, and WW2 in 1941), the graph is dominated by a single issue that takes up greater than half the plot. In times when things are basically humming along smoothly, everybody complains about everything, and the poll reflects a huge variety of problems.

This would tend to suggest that objectively, we're actually in pretty good times right now. This doesn't preclude us facing a crisis in the near future - notice how "Keeping out of war" was a relatively small but noticeable box in 1935, but absolutely huge in 1941 - but it is fairly likely that if a crisis does occur, it'll come from a box that isn't a huge problem right now. It's unlikely that "immigration" or "dissatisfaction with government" will be a massive crisis in 2021, but we could easily see "unifying the country", "environment", "unemployment", or "civil rights & race relations" become a huge issue in the next election.
Interesting.

I've just started speccing out some thoughts on how document references (files, URLs, URIs, ...?) might be improved. A sort of api / multiple-attribute interface strikes me as useful:

1. Meaningful titles / filenames.

2. A content hash. Not exactly human-friendly... I'd prefer something shorter to longer, though there's the collisions problem. Still thinking on this. Could tie into VCS (git, Hg, etc.)

3. Various standard metadata: author(s), editor(s), publisher(s), and their relation(s) to the doc. See various bibliographic or MARC 21 formats.

4. Dates: Initiated, published, modified, accessed, read date(s).

5. Classification schema. Here with time I find that working with extant rather than de novo or ad hoc schema is most likely preferable. Dewey Decimal is apparently more logical than LoCCS, but the Library of Congress classification is nonproprietary. That may well be what makes it win out.

6. Workflow indicators. Unread, read, deep-archive, to-process, etc.

7. Reputation and ratings. Associated with works, authors, other contributors (editors, fact-checkers, etc.), publishers. Some form of distributed assessment here would be useful.

The question is how to make these visible. My thought is to treat the parameters as, essentially, search. It doesn't matter what name you use, so long as the set characteristics is unique or determinable. E.g., returning 3 items would allow me to manually determine which I'm interested in, returning 300 would make that difficult, returning 3,000 would probably require some programmatic determination (or further specification).

A URL scheme, say, URI:/au=clarke&dat=lt:1980&ti:=imperial&ti=earth ... could, say, return Arthur C. Clarke's Imperial Earth.

A filesystem / virtual filesystem approach might work somewhat similarly locally, either from a CLI or graphical approach. I'm thinking of how that might work....

Very early stages.
Exactly, it would be nearly impossible to figure out. Unless you were in a particular long running event with hisotorical data.
Bad generalization - in many countries, it's illegal for your company to do content inspection.

There's a good argument that it's unethical too. There are many ways where your company has to trust you instead of pervasively monitoring your doings and communications, and this should fall in the same area.
Yeah, why did they build computers so big and expensive and slow in the WWII? They could have waited for a Skylake Intel, and it would be not only better, but also cheaper...
They probably have a massive prop 13 subsidy.
Musk did not invent PayPal. He founded x.com which merged with PayPal two years after PayPal was founded.

He has also been clear that he had three goals:

1) Expanding solar power use.

2) Popularizing electric vehicles.

3) Making human life multi-planetary.

I am paraphrasing and perhaps understating his desired level of success.
Also keep in mind that even the mighty Google has some rusty and pointy internal tools. There's no reason to mention any crappy things in a book about good practices ;).
I appreciate your thoughtful response.

I was careful not speak to "belief", which is unfortunately ambiguous; one could interpret "belief" of this testimonial as supporting millions in damages being awarded to the author right now on the basis of nothing else, which I hopefully have been clear about not supporting.

It surprises me that you have no compassion for an anonymous grievance, though, especially one that is (at least currently) asking for nothing else. Speaking for myself, at least, even (or especially) though there are usually two sides to every story, I pride myself on usually being able to have compassion for both sides.
That's not how I read it at all. The author is saying that non-password tokens can be vulnerable if you don't treat them the same way you'd treat passwords and is essentially suggesting that they be split into username-like and password-like fields.

There's another unrelated solution to the problem: make the tokens be AEAD [1] output from a scheme with a global (perhaps rotated) secret or signed output from an asymmetric cryptosystem. Then you're protected by the usual AEAD or digital signature guarantees as long as you properly verify the token before doing something silly like looking up the ciphertext in a database.

[1] Strictly speaking, encryption may be unnecessary depending on what's in the token.
A common anecdote from East Germany is that teachers would ask children what the "sandman" looks like (an evening TV show for children). The seemingly harmless answer then revealed whether their parents secretly watched imperialist West-German television. So yeah, children are pretty good at implicating other people.

(No real source, but a random German article that quotes this anecdote: http://www.badische-zeitung.de/panorama/der-freundliche-herr...)
Kaziranga report gets BBC banned from tiger reserves for 5 years
The false equivalence was deliberate!

This is one of those subtle things that can be problematic, we don't have a good moral calculus on where to draw the line. Slippery slope or reductio, your choice.

Large companies often run a simple financial thought experiment:

"How much liability does this expose us to (a.k.a. how much to make this go away -- hence the popularity of confidentiality clauses in settlements)" vs. "What is this person worth to us"

If we accept that he left Google before they forced him out, then (cynically) Google must have decided that the liability was greater than his value.

But when we consider this from the perspective of someone who has been abused at their place of employment, they may be facing a career change, PTSD, you name it. Both of the women that have written about their experiences at Uber describe stark psychological responses to their experiences - these can/will have lifelong impact. Does a track record of technological innovation excuse even one instance of that?
Sounds pretty close to me, why would you think that's far off for a $1M/yr couple in CA? Certainly within 10%.

High W2 income earners are heavily taxed in the US.
> We opted to disable usb mass storage since cavity searches seemed a little much

This is missing the point. Someone could plug a SATA drive directly into the motherboard, or otherwise compromise their work computer to disable the restrictions, or take pictures of documents with a camera, or bring their own computer on-site, or bring a line-of-sight wireless network device on-site, or send the data over the internet as an encrypted file or via ssh or using steganograhy and so on.

The point is that preventing data exfiltration is not a trivial task, and if you're at all serious about it then the network containing the secrets is not connected to the internet. And if it's less serious than that then it can't justify a high-risk TLS MITM device.
I agree. Mid-range $700/mo insurance plans on health exchanges have deductibles approaching $12K, meanwhile 62% of families have less than $1K in savings.

This means that even after paying $8,400 per year in insurance premiums, a moderate illness automatically puts an average insured American family into a medical bankruptcy.

The honorable American corporate tradition to have company-wide fundraisers to support the families of (insured!) employees who have gotten sick is... terribly out of place in a 21st century / 1st world country.
Nasty flu this time of year, or so I've heard.
How Magento helps you nurture your e-commerce business?
It strikes me that the people who crow about "facts" the loudest are the ones most likely to be conflating facts with their own opinions.

I'm a scientist. I don't believe in facts. I believe in models, explanations, measurements with appropriate error bars, provisional theories and educated guesses, but never facts. When somebody comes to me claiming that they know "the facts" I put up my defences.

Perhaps what people really need is not a better appreciation of facts but a more realistic appreciation of uncertainties. Perhaps if we could all stop arguing about whether the probability of disastrous climate change is 0 or 1, and instead accept that it's somewhere between 0.01 and 0.99, then we could make some progress on the issue.
gRPC-gateway looks very attractive. Thank you for posting this for the rest of us to learn from, a brilliant effort for sure.
> Slack has a standalone app? I've only ever used the web version. What more does it do?

Chew up a bunch of RAM and glitch display compositing if my experience is typical.
> Keep your backups up to date.

Seconded. I've got a Time Machine disk both on my personal office as well as at the client's site.

My new 2016 MacBook Pro failed to charge on a Saturday morning. Brought it in for service, bought another one for the time being, restored from backup and bam -- ready to work on Monday morning.

Making (and restoring) backups is ridiculously easy with macOS.
Indian Developers Are Not Good in India but When They Reach USA They  CEO
Also discussed here: https://news.ycombinator.com/item?id=13747177
I echo the same sentiment. Call me old school, but I'm always a true believe of putting content first and accessorizing everything else.
> still doesn't protect you against (...) malware written by people who have SSL MITM proxies in mind

Exactly this is what I don't get. Since these abominations are becoming ubiquitous, surely malware writers are starting to work on workarounds? And in this case, it's as easy as setting up an SSH tunnel and running your malware traffic through that, which is a few days of work at best for a massive ROI?
Interest isn't the only cost to own a home.

http://www.nytimes.com/interactive/business/buy-rent-calcula...
Store.js was originally released on HN in 2010 :) https://news.ycombinator.com/item?id=1468802

It's live on tens of thousands of websites (like cnn.com!) and has seen lots of improvements over the years.

Store.js version 2 is a full revamp with pluggable storage (it will automatically fall back to one that works in every scenario by default), pluggable extra functionality (like expiration, default values, common array/object operations, etc), and fully cross-browser automatic testing using saucelabs.com.

Feel free to ask any questions! I'm going to sleep now, but I'll make sure to answer in the AM.

Cheers!
> Unless you're NVIDIA, Intel, AMD, or Qualcomm, Apple, Samsung (you get the idea) why would you ever want to build anything besides "small and/or highly regular chips"?

What's your point? The ASIC emulation market exists, there are several companies that build and sell ASIC emulators, and Xilinx and Altera cater to that market with dedicated FPGA devices. I'm not sure why you're arguing here.
Its documentation is horrible for getting started. Lmk if you have issues.
I agree with this, it is easy to tell others what they should do. You should never quit rashly over something like this anyway, figuring out a long-term exit; maybe.

Also you are very right it is hard to say for anyone if we would have done what you have, very easy to imagine ourselves doing the right thing but so much harder in the moment.
Well considered he built Uber Taxi two decades ago and then Uber almost a decade ago, this means a lot to him for sure. He must have waited years to get this rich get this much of influence.
It's interesting to see the degree that opinions have changed in time, the contrarian relationship between economic expectations and economic performance, and other fear mongering issues that don't tangibly affect people's quality of life. For the latter, these include National Security, Terrorism, Immigration, Government Satisfaction, Budget, ... really most of this stuff.

I wonder how the graph would look if the same question was posed to a set of 'experts'. Say a set of economists at top business schools, or really a spattering of economists from reputable universities.

My suspicion is the issues would suddenly become much more consistent. Especially with a focus on institutions, economic growth, tangible quality of life metrics, and efficacy of government redistribution programs among others 'real' measures.

It's not to say that fears over government functioning, or the economy, or morals are irrelevant - these factors shape how we perceive the world and subsequently how we feel. This graph displays how resilient we are to these emotionally charged 'issues'. The average poll respondent will likely continue following the general sentiment from media, conversations, etc. Meanwhile, tangible issues will continue to be acknowledged by a very small sliver of the population.

These sorts of results make me cynical of voting in general. Our current system with the electoral college, special interests, lobbying, advertisements etc. is already a clusterfuck. Ignoring experts opinions and focusing on emotionally charged issues is probably worse off for the country as a whole.

I, for one, am glad that voter preferences currently represent the preferences of elites when it comes to contentious issues. (see Martin Giles' Affluence and Influence). Our 'every person gets an equivalent vote regardless of education for the minority that actually votes across varying demographics with messed up electoral colleges and voting districts and advertising influences' ... system seems inefficient to me. While a dystopian future of 'educated elites' controlling voting isn't the answer, neither is an equivalent, electoral college based system. It encourages appealing to the lowest common denominator, and a whole lot of people are unintentionally voting against their own interests.
>In fact, this specific thing is what TLS is designed to prevent, and new implementations of the protocol are only going to get better at preventing it.

This isn't true. The TLS protocol is not a philosophy; it does not have an opinion on who you should trust as a root certificate authority. If you trust a particular root, it is wholly within the design of TLS to allow connections that are monitored by whoever controls that root authority. Who is trusted is up to you.

>They may or may not mention that if they do it wrong it will degrade the security of everything on the network.

Right, that's why you don't do it wrong. This same argument applies for any monitoring technology, like cameras. An insecure camera system actually helps a would-be intruder by giving them valuable information. So if you install cameras, you'd better do it right.

As for your list of ways such a system could be circumvented, I don't understand the logic of it. So because there are ways around a security measure, you shouldn't use the security measure at all? There is no security panacea, just a wide range of imperfect measures to be deployed based on your threat model and resources. And luckily, most bad guys are pretty incompetent. But to address some examples you give, and show how not all is lost:

- A large encrypted zip file is sent out of the network. Depending on what your concerns are, that could be a red flag and warrant further analysis of that machine's/user's activity.

- Software trying to circumvent your firewall/IDS is definitely a red flag. You might even block such detected attempts by default, and just maintain a whitelist for traffic that should be allowed regardless (e.g. for approved apps that use pinned certificates for updates).
I'm German and I often notice fellow Germans (including myself) getting two-digit numbers wrong when under stress, when translating things, or when dealing with lots of digits at the same time (phone numbers...). This is not a cute quirk of our language, but a wart that needs to go.
So is it possible for them to launch multiple vehicles into Earth LEO, rendezvous with one another and then transfer to Moon LEO?
Where do you pull product reviews from?

How much views/income do you get?
>People like you are the problem.

Not exactly healthy discourse.
Is both SSH and USB key / USB DVD burner usage completely disabled on your corporate devices? If not, obvious workaround is obvious.
Ken Wilbur would say that the end result of post-modernism is narcissism and nihilism.
Much needed!
> but that they're not going to pay to replace your swelling battery

I don't think that's strange. Here in N/W Europe, warranties are quite good. However warranty on consumables such as batteries is only 6 months.
Quite a few jobs are created by demand for champagne, caviar, and cars. And also jobs with living wages for farmers, fishermen, production line workers, drivers, and even engineers. While I'm all for space exploration, I wouldn't make any judgement calls on what activities are "better" for humanity.
On EME in HTML5
If you want to avoid timing attacks on the username and pw isn't the easiest way to just hash them as if they're both passwords? (at least on initial login). Since the hashes are cryptographically secure you can't infer any timing information from incorrect guesses
Jesus effing Christ, how is this company even holding together?
The Future of Fintech
Some of the coding bootcamps have pretty detailed curriculum including intermediate and capstone projects. If somebody puts up useful mini-app backends in Rails or Django and shows they can unit test, branch/merge in git, do basic config/admin on linux db/solr/elastic/web etc servers, that should be a pretty employable. Or data sciency: spider and assemble clean datasets.

Look at meetups, there's fair number intros to python, R, rails, go, C# etc sessions in any decently sized city.

This is asking a lot, it might take 18 months, or a lot longer than those bootcamps. That's ok, it's like learning Mandarin or violin or the first couple years of college applied math, just take small steps, the simplest things that could adequately work.

Lists of basic skills: Uncle Bob Martin's book,

https://news.ycombinator.com/item?id=12829561

http://web.archive.org/web/20150417115543/http://samizdat.mi...?
How about giving people a second chance? One punishment for one crime or something... Or just give them off time. I think these are personality defects that can be corrected with counseling, does not make them a serial...
But I think most people overestimate how interesting they are.

Gosh, thank you. I feel people here feel professionally more important than they actually are. I mean I am sure a forum of Lawyers, Physicists, Surgeons, Truck Drivers would feel just about the same.
Journalists love writing this same article over and over again. Find some humble bragging buffoon willing to get quoted as talking about how hard it is to get by on some large amount of money, then farm the sputtering outrage of the readership for clicks.

I've never seen it done with a seven-figure income though.
> "洋鬼子" literally means "foreign devil". Are you serious?

Way to not take connotations into account. If you take everything literally, you'll be offended everywhere.

I call some of my best friends "bastards". Am I implying that they're born out of wedlock?
What is your OS?