skysight-inc/HackerNews huggingface dataset:
Re #1, it's way more likely you are visiting a site you've already been to on a new wifi hotspot, so the TOS page will refuse to render if they hijack the domain like that. They'd have to work around that themselves otherwise no one would be able to use their wifi. Maybe a https downgrade attack followed by a redirect to another domain so that they can give you a key that doesn't interfere…
good ones! as an english speaker, some things that gave me difficulty in a second language (see if you can guess it):

- some digits are pronounced differently for counting than as part of a larger number
- some digits are pronounced differently when reciting the individual digits of a number, like in a phone number
- phrasing like "one hundred 2" means 120, not 102
- large numbers not grouped in thousands, but in ten thousands, ie having a single word for 10000, a word for 10^7, etc, so a valid spoken number is "13 thousand ten-thousand" -> 1.3 billion
It's not so much pressuring founders to behave better, as choosing better founders. The "play hard", "meritocratic", "hashtag winning" douchebag seems to be a good choice because they work hard to appear to be a good choice and seem to have the drive to do big things. But if it all falls apart before they can achieve greatness because of the inherent douchefail, then that's a lesson investors need to learn. Don't bet on douchebags.
I do use it as interpreter on embedded boards! Preprocess/trim the headers you need, and add #!/bin/tcc -run at the top of your .C file, add a +x to it and it'll run just fine!

I love tcc, in fact I added a firmware instruction translator to 'JIT' AVR code to simavr a few weeks ago. Takes a AVR binary, translates it to C, and compiles it on the fly with libtcc to run it :-)

https://github.com/buserror/simavr/tree/jit-wip
Schumann resonances
not landing

that's cool, but kerbal-easy
I was reading this while remembering my time at Nokia and how I gave up putting ideas forward because of so much bureaucracy and political infighting. The few times my ideas got traction they were whole sale lifted into other products with zero credit going to myself.
I don't think Wordpress will be going anywhere for quite some time however I also don't think it's market is expanding. I'm far from an expert on the matter but this is the impression I get from speaking with people here and in various development related Slack channels.
Cyberwar, US, Russia and the Non-State Actors: Frenemies with Benefits?
This article seems to miss the point that a website rarely serves content from a single domain. If it pulls content from 30 different domains, all TLS protected, would the user get 30 popups asking it to allow them each?

The current TLS/PKI allows for much better UX, users would reject the proposed solution.
> Should you ever really trust kiosk machines? They could easily be setup with MITM eavesdropping software.

I should have the choice. This doesn't even give me that.

> Presumably there could be some sort of <meta> header that listed the public key fingerprint/IDs of any subdomains that the page was going to pull in. This would make the UX better.

This would make the UX barely passable. If any of these domains change the content at all so the hash changes, how does it get updated?

> AFAIK, revocation isn't very good even with the current CA infrastructure[1][2].

I completely agree with you, so lets not make it any worse.
Ideologues of all flavors frequently diss HN like this. Someone needs to stand up for the community, so I guess I will. This was a slur, and your prediction turning out consummately wrong illustrates this nicely.

I think it's in poor taste to diss a group with grand rhetoric whilst participating in it, since you're as much a part of it as anyone else. If you think so poorly of your community, perhaps find a different one and post nastily there. I hear Twitter is good for that.

The reality of the HN community is that it's divided much the way that society at large is. The comments here inevitably reflect that. It's a mixed bag, a lot of what's in that bag isn't great and a small portion is awful, but (a) this community does manage somewhat better than most of the rest of the internet and (b) far more of the participants here are thoughtful and decent than otherwise.
Almost, but now you only have to trust one third party, not 189 (/etc/ssl/certs).
The problem is HR ignoring sexual harassment reports. Fire whoever needs to be fired in HR, and implement a real HR policy.

Leaking cherry-picked names to the press and scapegoating will not calm things down.
Why aren't Bolt batteries nearly as affected as Tesla batteries? It seems like they would be bound by the same physics laws?
Thanks, that video was pretty good and helped me understand buffers. If you'll indulge me a bit more though, why does Vim warn you while switching out of an unsaved buffer (and make you use !) if it's still going to keep your changes when you come back?

> However, the latest release of Vim now includes a built in plugin system, does that satisfy your need to have one blessed version?

It absolutely does. I'm going to try it out!
Haiku Is Back in Google Summer of Code
I can totally imagine AI knowing the truth, by the virtue of throwing lots of compute at Bayesian inference.

The more difficult question, I think, is: why should an average Joe trust the (presumably government or corporate) AI over their favourite worldview-confirming sources?
You would have loved the seebotschat experiment on Twitch where two Google Homes hooked up to Cleverbot were listening and responding to each other. I watched for hours on end.
> I completely disagree with this. Public key pinning has some well known problems that make it very dangerous to implement at scale

I don't know what you are commenting on, because the author of the linked article suggests we use Trust On First Use, not HPKP.
Apple’s Next iPhone Will Have a Curved Screen
Also worth checking out is the author's talk at this year's StanCon:

https://youtu.be/DJ0c7Bm5Djk?t=16810

Title: Everything you should have learned about Markov Chain Monte Carlo.
I disagree. People wanted to get rid of it, because they viewed it as an untrustworthy component, which it now is not anymore. The few kB that it takes up are really not a problem that anyone could rationally complain about.
There was something about the visceral nature of the tc environment and editor and toolset that just felt like you were very mentally close to the code you were writing. Perhaps something about the bare simplicity. I can't help but feel i've been chasing it ever since in emacs.
A lot of the bad travel advice I've seen reminds me of legal conspiracy theories in general: there is an underlying belief in the existence of magical incantations or ingenious solutions that will stop law enforcement agents in their tracks.
ICBM development is basically a space program with a different budget code though, right?
Not related to Japanese, but to large numbers in general: I just learned that there are to scales for billions - https://en.wikipedia.org/wiki/Long_and_short_scales
I'm not sure how dishonest it is, as I can't imagine he stays put in the house for PR value.

Beyond that, I wouldn't assume that he's had an incredibly out-of-the-ordinary level of work done on the house. It's time-consuming, disruptive and messy.

Adjusting for his budget, I can only imagine this would all be made worse if the upgrades include holodecks, teleporters and a subterranean command center.
Thanks for the work you've put into Store.js.
How to Recover Deleted Photos from Motorola Phone Memory
I think there's a dividing line between plot-driven and character-development driven works for lack of a better word. I think plot driven stuff should pretty much follow very common heuristics (the horror story, the heist, the serial killer novel...look at 20ish from each genre and you'll see very common structure) and only deviate ever so slightly. King follows this and an excellent book that goes into more detail on it is "The Story Grid" (teaches you to become your own editor, uses Silence of the Lambs as a running example)
In Chrome, there is no such thing as a permanent exception. In Firefox, the permanent exception includes unexpected certificate change.
> I should have the choice. This doesn't even give me that.

I don't understand why you say this. Can you explain more?

> This would make the UX barely passable. If any of these domains change the content at all so the hash changes, how does it get updated?

Not a hash of the contents, just the sub/external domains' key-ids. Yes, the main page would have to change if you updated the keys. Doesn't seem too onerous to me.
IMO it's kind of weird to buy a frankly absurdly expensive laptop that locks you into using it's OS to then go and setup a bunch of virtualization to make your code/dependencies work when you can just run the OS you are virtualizing.

Why add layers of complexity when you can just run the OS you want?
I don't know why this is downvoted. This is standard practice by many people who travel, especially if traveling with the whole family.
I've tried Wox and other launchers that include Everything several times and I always go back to having a launcher for, well, launching and using Everything for searching. For me the compact design of a launcher is not well suited to show a couple of file search results. But of course that also depends on what files you usually search for, how many results there will be and what you do with them. If, for example, you often search for documents it's fine. But I usually search for source code files and what not and there it's different.
For most people that's currently Google due to search-based location bar.
I personally find those results really dubious. How accurate were the measurements from the mid 19th century? And even then, the leverage on those scatter plots is huge. (eg: http://cs.wellesley.edu/~cs199/lectures/one-outlier.png)

Additionally, because of a lack of a data, they used means instead of medians on highly skewed data. A few individuals could have a much larger effect on results this way.

Finally, just because we measure good correlations between IQ and RT in modern times doesn't justify extrapolating these conclusions to the 19th century.

P.S. I find this a little dubious "The Victorian era was characterized by great accomplishments. As great accomplishment is generally a product of high intelligence. . ." Sure the 19th century had better innovation than came before, but so did the 20th and 21st century. This doesn't have much impact on the findings, but it still bugs me.
Solar is not a magic wand. People who couldn't afford to get hooked up to the grid for the last 36 YEARS were gifted a limited solution that cost far more than their little village could afford. The wealthy celebrated by hooking up more appliances than the system could handle and then all the recipients of all this free stuff complain that johnny can't study by the light of the silvery cfl.

When some are just plugging in a lightbulb and a phone and others are plugging in "energy-inefficient televisions and refrigerators" perhaps either the wealthier should abstain from doing so or should instead invest in more capacity.

On a larger scale this would be accomplished with meters and prices that would make using 100x more juice than your neighbor either uneconomical or at least costly enough to build infrastructure but on this scale it would have to have been solved by common sense which like electricity appears to have been scarce.
Samsung’s Lee to Be Indicted on Corruption Charges
True but when we talk about nuances in English numbers, we do have to consider the other common ways. For someone who is learning English numbers and watches, say football (soccer), they would often hear 1-nil in commentary. If they are restricting themselves to just U.S. English numbers, they would be left confused in this example.
I don't even know Python, but after looking at it for a couple of minutes, I had a sense:

1. mutating the `methods` parameter directly, I don't even care if it works, is a bad idea

2. naming the thing methods and method might trip something up

By just changing the code so that we declare the local methods array (name it methodsX or something else) to be empty, this fixed the first 3 problems (where the function is empty). I don't know enough of Python syntax to make it accept the second parameter being a array of functions.
> In other words, they have no qualms with racism -- only with racism against Han Chinese.

Reminded me of the reaction to Peter Liang's indictment. From https://en.wikipedia.org/wiki/Shooting_of_Akai_Gurley#Chines... :

More than 3,000 Chinese-Americans showed up at
New York City Hall in March 2015 to support Liang.
Thousands walked across the Brooklyn Bridge to
Manhattan's Chinatown in April, feeling that Liang
was being used as a scapegoat, and demanded the
charges to be dropped, as other, white police officers
were previously not charged.

And earlier today I read the following excerpt from the press conference of Sunayana Dumala, the widow of Srinivas Kuchibhotla, the Indian man shot dead at Kansas.

"I was told that that guy very proudly went to another bar
and told that he shot two Muslim guys. How did he decide
that by the color of a person? Does the color of the person
state that he is a Muslim, a Hindu or a Christian? No. So
how did that guy decide that?"

Apparently, the grievance seems to be that Srinivas Kuchibhotla is not Muslim, but was mistook to be one unfairly based on his complexion.
Id like to see a corporate war between male dominant uber and an all female ride sharing competitor.
https://news.ycombinator.com/item?id=13750889
I love this feature. My only concern was being tied into Pocket and wondering what might happen to the company. I imagine that being acquired by Mozilla makes that future a bit more secure.
My favorite aspect of this topic is that amputees long jumpers jump on their prosthetic leg.

I don't think we are past the threshold though. People, including coaches of able-bodied athletes are still viewing prosthetics as balancing the odds.

To me the real threshold will be when a double-amputee will break the 200m or 400m World record. I thought it would happen last year but I guess a few more years will be needed. It will happen.
It is not a threat now either. After a month, everyone will forget and move on with their lives.

You remember that girl who made a blog post about sexual harassment at Google? Neither do I.
More like Amish C++
Right, but it's possible (and I would say likely) that their self-driving program is behind everyone else and their disengagement rate is atrociously high, which is why they would go to great lengths to delay reporting this information and happily decamped to Arizona, which doesn't require disengagement reports, while they try to catch up by whatever means they can. According to NYT reporting, their software failed to identify six traffic lights during the brief time they were testing in SF, which suggests they are pretty far behind. Kalanick has correctly identified self-driving technology as an existential threat to Uber, and given their lofty valuation, they absolutely cannot afford to be perceived as being behind in this area.
What is the primary storage used? localStorage?
> a lot of people woke up to the idea that the very fabric of a large part of the US was a kind of conspiracy of wealthy elite versus everyone else

and so what seems especially insane to me about this election is that our president is indisputably part of that particular elite. he is, much more than HRC's early 90s inner-city bogeyman, the super-predator that his own constituents should fear.

> For example, racist bias of the kind exerted upon African-American citizens since the days of slavery is a kind of social, systemic, tacit conspiracy.

yes, just want to agree with that and say thanks for pointing out a fact that many still try to gloss over or deny.
Yeah. This is a firable offense. The solution to your company MITM your traffic is not to use your work computer for anything personal that matters. It's not like if we had a shortage of devices to connect to the internet.
And it's the user's prerogative to build and use tools to circumvent artificial[1] limitations.

[1]: reminder: technically, streaming isn't different from download, what your computer does when watching a video in streaming is downloading. Forcing users to delete the video they have downloaded (which is exactly what's happening with streaming) so they pay the premium service for off-line use, is not a legitimate way to do business. They can do it of course, if people are willing to pay for something they can have for free it's fine, but people who don't want to pay aren't doing anything wrong.
>> I should have the choice. This doesn't even give me that.

>I don't understand why you say this. Can you explain more?

Not who you replied to, but with this system, I need to trust everything between the kiosk and the website server to not be MitMed. With the certificate system, I only need to trust the kiosk itself. Specifically, I need to trust the browser does TLS right, and I need to trust the installed root certificates are correct.
GDPR: Killing cloud quickly?
I like to think that if your idea is truly good: It's your responsability to gather data, calculate metrics, do small tests and to find an iterative and lean way to implement it. It's hard, and in reallity intuition in itself can be quite powerful, but in a company it's all about measuring what is the best next move.
I understand how it is sort of a detail of how python works. But I also can't understand why someone thought "hmm. this is rather unexpected. Let's keep it that way". It would be trivial to have python re-create an empty list.

Or is this pattern actually used? It seems rather perl5-y.
They can't, really. So much of the Web has fortunately moved to HTTPS that then they should just forget about Web access.
Cobol will. /s
I had a bear like that (not CloudPets, but looks like an exact clone). Thankfully, it was only used by my daughter with my supervision, so I know exactly what has been said. Unless the mic was enabled remotely, that is.

I assumed that the security issues might be bad, but placing the voice on unsecured Mongo facing public Internet is beyond shit.

Thankfully, I have disabled the bear long time ago. But now I worry about my NetAtmo station, which contains an always listening microphone to "measure the noise pollution". Yeah, right.
A good take on this from a writer friend of mine: the people that "pirate" the book were likely never going to pay for it. But they could very well recommend it to people who might prefer buying it. The more it gets "pirated" the better as that means it's likely to be a decent book. I kind of agree with this and my gut says avid readers (which are always your #1 target due to word of mouth etc.) are generally fairly likely to pay for books.

I also once saw an author online who had a similar sentiment and offered a "did you download this book somewhere" button where you could donate a freely chosen amount of money to "ease your mind" and support future releases that worked rather well (to his own surprise). Trying to think of the name but can't I'll edit if it pops into my head.
Nailed on the head!
My vote goes to Dart
There needn't be a lot of difference, if that single trusted party still signs a lot of other CA certificates.

You don't just need to trust the root certificates intsalled, you need to trust all signed CA certificates those root certificates installed (except for public key pinning, which will ignore installed root certificates).
Can't find it. The use was as if it was "fuck it money", "it" being the fact you have enough so you're not counting expenses.
What if they ask for your online account passwords?! What should one do?
I believe web directories will come back, just like people are going for lightweight web pages (no css, html only). It is easy to use, and there are still some people using directories whether it is web or not.

The only hard part is to be objective about listing pages, or just list those who you see fit.
I guess this is a HN version of generic instagram comments used by bots (like "nice pic! where it was made?")
I read the story. I don't see how that contradicts what I said. He was effectively let go: told he could resign with dignity or be fired, same result in the end.
which will be composed of just one line: "just avoid the US for now"
For empty lists it would be trivial, yes, but for arbitrary objects it wouldn't be. And only the empty list behaving different would be weird.
>Google was prepared to dismiss Mr. Singhal because of the claim, Recode said, but ultimately he resigned on his own in February 2016.

Seems like he resigned before being dismissed. As for the party, it was organized by his friends at Google.
Setup your new phone on a trusted network, not at a coffee shop
Image resolutions are also pronounced as 19-20 or 10-80 and not the long way.
If you know more information, you can always change your estimates. Even if you're a surfer in a "sharky" place, what percentage of those are there at the same time as a shark? What percentage of those are chased by a shark? Bitten by a shark? If you're not one of the few that actually get bitten, then you're safe from death.
No ideological provocations in HN comments, please. The community is divided enough on such a hot topic as it is—we don't need flamebait making it worse.

We detached this subthread from https://news.ycombinator.com/item?id=13745607 and marked it off-topic.
Uber asks senior engineer to resign over harassment claims
The key difference here is in the probabilities. For every witch or communist accused, approximately none were actually witches or communists. That is simply not true for harrassers, for instance the estimated false accusation rate among rapists is around 5%[1]. Generally people have no motivation to report what is not true, reporting sexual assault of any form can be a long and tiring process, and often carries a lot of stigma with it if anything gets out... It shouldn't be so damaging to victims, but it often is. As such in these cases it is probably best to place burden of proof on the accused not the victim.

I mean, everyone does this all the time anyway. When was the last time you thought someone was guilty of something (speaking about you behind your back for instance) and you waited until they were proved guilty until you changed you behavior towards them? Innocent until proven guilty is for the courts only, people should and do act on reasonable evidence.

[1] https://en.m.wikipedia.org/wiki/False_accusation_of_rape
It's a common JavaScript interview question to ask about capturing variables in a closure.

What really frustrates me with go is that it doesn't have a mature debugger so I have to resort to inserting print statements everywhere.
You really need a link to Torvalds abusing people? Here's kernel dev Sarah Sharp https://arstechnica.com/information-technology/2013/07/linus...
Firstly, t his looks great! I really like just being able to upgrade/downgrade each component with just one click.

A couple is issues I found though - the cheapest graphics card is $448 and I was unable to specify 32Gb of RAM - the next option up from 16GB was 128GB.
If you go into a discussion convinced that the other side is filled with an illogical hatred for women, you're going to see what you expect to see.

In your case, you chopped off half my sentence which modified the meaning to make me fit your preconceived expectations, and then wrote off the rest of my comment. I might suggest that if that's your approach to debate, committing the energy is indeed worthless. You'll never understand the people who disagree with you like that, so why bother trying? Go back to believing anyone who isn't a feminist is a misogynist, it's wrong but at least it's easily packaged.
Edit: oops, my mistake. Carry on.

> Have some god damn ethics

Personal attacks are not allowed on HN. We ban accounts that do this, so please don't do it.

We detached this subthread from https://news.ycombinator.com/item?id=13750650 and marked it off-topic.