skysight-inc/HackerNews huggingface dataset:
Sure, let's say that. Let's say I have, for all practical purposes, infinite money. And every single day I park outside your house, in a way that it blocks your parking garage. And I do that illegally, knowing it's illegal, and accepting the chance that I'll get fined, knowing that any fine has absolutely no consequence.

Is that morally wrong, in your eyes?

Uber has been consistently breaking the law (or parking into society's collective parking space, if the metaphor is lost). And your response is that they are wealthy enough right now to do it, so no big deal.
Indeed, I spoke with a pathologist friend about this. Non-experts assume its black and white (cancer or not) but there are many many shades of grey and other variables. Its very complex.
> In reality they allegedly hacked computers of people related to a single party and brought to light the illicit activities that party was doing.

My understanding was the Security professionals expected that the most likely scenario was that both parties were hacked: one side was revealed and the other one used for leverage.
Please let us know!
Ask HN: What are the alternatives to CloudFlare for DDoS protection?
Given the recent security incident at CloudFlare, I'm wondering what alternatives there are for DDoS protection. Until CloudFlare came to the market, equivalent DDoS protection could cost you $xx,000 per incident. CloudFlare offered protection for nearly unlimited-size attacks. For $200/month. What's the best way, in 2017, for a web application to protect itself from large-scale DDoS attacks?
I wouldn't call France 'western'
Feels like a third world country nowadays
> According to the statement from WikiLeaks, government hackers can penetrate Android phones and collect “audio and message traffic before encryption is applied.”

This a perfectly useless bit of information in that it says nothing about how this penetration could occur. Pretty much anything can be cracked with a trojan. Something like a currently valid remove exploit would be a much bigger deal.

I could say that all the secure apps are broken because I can stand behind you and look over your shoulder while listening to anything you might say.
Is this for Android only or iOS also? I can't find an option for addons in iOS Firefox.
Visual studio already supports this in 2015 and older iirc, at least for C# and SQL projects, but it's an undocumented feature. You have to close and re-open the project if you add/remove a file so it notices that it's different.

part of the new project system that grew out of the ill-fated project.json is to make this a first-class experience, but again that's focusing on the .csproj, I have no idea if it applies to C++.
Facebook's completely automated forecasting project
drop.io?
How does it work for different variety of pulses used in Indian cooking? For instance, I use x whistles in a conventional pressure cooker for one kind of daal vs y whistles for another kind. How well does the whistle semantic translate here?
I'm more thinking of something like Vaadin/GWT where you compose the GUI in Java code, in a similar style as e.g. JavaFX, and the framework takes care of displaying it in a web front end.

Or, if the application is not strongly coupled to other server-side systems, make it standalone with a Swing, JavaFX or whatever front end.
Well fortunately with the major influence Gmail has in the personal email and work email space these days, your wish is somewhat true.

Having said that, Google certainly run many many mail servers, as such an outage that impacts delivery for one group of people does not necessarily impact everyone. This is the difference between robust systems and those with critical lynch pins that create system wide outages.
Two frequently used system calls are ~77% slower on AWS EC2
No, danielsamuels has manually changed that setting. The default is to only encrypt saved passwords: https://www.spinda.net/files/chromesync.png
Oddly enough, that was the first thing that popped into my head, when seeing the title.
Isn't the modal number of prescriptions 0?

As far as Medicare, they don't pay "whatever", they pay what everyone else pays or less.

I shouldn't have just said cancer drugs. Lots of specialty and small market drugs have enormous prices. Meanwhile, statins cost $0.30 a day: https://www.goodrx.com/lipitor
>hangouts is broken

Hangouts is broken because Hangouts uses NPAPI, not WebRTC

Hangouts will be fixed whenever Google actually ships the WebRTC version of Hangouts
That misses the point. Security is one thing, features are another. Regardless of whether a user should update regularly for security patches, the Internet should support 3-year-old technologies, or gracefully fail otherwise.
> Google at least pushed Amit out as soon as the allegations were substantiated.

We don't have any evidence that the allegations were substantiated. We have some internal, anonymous leaks that claim that Google found the allegations were "credible".
Make is declarative. It has rules that you declare; it figures out which ones fire and in what order.
So you're saying that my definition of the term "fact" is wrong...

http://www.dictionary.com/browse/fact

Fact: a truth known by actual experience or observation; something known to be true.

So... are you saying that a fact isn't something that's known to be true? Because my understanding of the word "fact" is that it means something indisputable, an underlying truth upon which you can base other truths and know them all to be true. If this is the case, then what can we possibly know with any sense of conviction?
>What conspiracy theory? Assange, the person most likely to actually know what happened

In no way is Assange most likely to know what happened, in the same way that a Tor exit node is not most likely to know who originated a message it delivered. Those with actual intelligence assets are far more likely to know who the ultimate source is.
From what I'm hearing from the talk, there's a heavy focus on making the individual components faster, but my biggest performance problem si that slow things lock up the whole IDE. I'm okay that some thing take long but when they mean I can't edit anything, even completely unrelated stuff when you're grinding away opening the lousy table designer UI in SSDT, that's a big problem.
Drone Registration: DJI Calls FAA Data 'Poorly Chosen' and 'Deeply Flawed
Maybe this is a stupid question but how does one go about verifying the information wikileaks releases is accurate?

I assume the people who submit info are verified in some way, does wikileaks then pass on that verification info to the public or are we supposed to just trust that they are providing truthful information in an unbiased way?
Or, in a lot fewer words, we're dumber than pigeons [1].

[1]: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3086893/
YC W17 Launch: Lively, Scaphold, Marketfox, Floyd, ServX, Fibo, and Wifi Dabba
Creating a plausible site that looks like a Google password reset workflow may be a few minutes work for hackernews reading front end wizards, but it's not really the domain of disgruntled washington bureaucrats.
'==' or '===' is not an equality operator when used on objects (including arrays) in Javascript. It's a reference equality operator: are the two variables referencing the same object?

There is no builtin object content equality binary operator in Javascript, at least as of ES5.
Although the idea is great but I'm not comfortable with the legal implications of "seeding" the stuff I view. It might work in some legislations but I'd be putting myself in too much risk under my local law.
Your phone can record, video too.

Letting fear of privacy boogyman control your life is a sad waste of living.
Your show of virtue has been noted by the Ministry of Statistics. Thank you for the data point.
Headline does imply the issue was with the messaging services and not the phones.
Meet Farewill, technology's new face of death
Sadly, while the building may be nice, the original track layout will remain (although I'm not sure it's feasible at this point to rework it). Some tracks, especially 5-8, seem to have fewer exits and it can take five or more minutes to get off of the platform during busy times.
Good to know it's up to you to pick and choose which laws inconvenience you, I mean which laws are there to make those fat cats at the city office the big bucks.
2,500-10,000 Indians Die Every Day from Lack of Uranium Access
...and proved to work in real life.

"If an argument uses valid reasoning, it would not be identified as the slippery slope fallacy,[2] and the term "slippery slope" may be used without an implying faulty argument."

https://en.wikipedia.org/wiki/Slippery_slope#Non-fallacious_...
Canadian citizen denied entry to U.S. told she needed visa to get in
If you're new to containers, I recommend starting by learning all about Dockerfiles. You can build them on your own machine, or with GCCB (using the `gcloud` command-line tool).

Dockerfiles make it challenging to keep your build-time environment separate from the run-time environment. For instance, you need the JDK to build your java app, but only the much smaller JRE to run it. Or maybe you want to use bazel.io for building, and have a completely different base image in mind for your deployment. Or maybe you want to bring in a unit testing harness and not publish the image unless all the tests pass.

Once these issues start to matter, GCCB has a great story. In essence, GCCB runs a series of containers with your source mounted in. So, you can run one step to run unit tests, another to build a binary, and a third to package everything into a container image.

GCCB also will build as many containers as you want in a single execution, so if you have several microservices that are all versioned together, you can build them at the same time and give them a `:${REVISION_ID}` tag - useful for production rollouts.
If they have a much better performance/$ than Intel, which they likely will have, it sounds like a good opportunity for AWS to significantly undercut Microsoft and Google (which recently bragged about purchasing expensive Skylake-E chips).
>Which is irrelevant if the runtime is compromised, which appears to be the case.

You're under the false assumption that these exploits are current - they're not. In fact, they're very old.
Fyi... I just tried the offline download and after 34 minutes, it is hung and won't finish.

The command line I used:

vs_Enterprise.exe --layout z:\VS2017_RTM --lang en-US

last lines of the console:

...
Download of 'https://go.microsoft.com/fwlink/?linkid=823168' succeeded using engine 'WebClient'
Download of 'https://go.microsoft.com/fwlink/?linkid=833503' succeeded using engine 'WebClient'
Download of 'https://go.microsoft.com/fwlink/?linkid=833501' succeeded using engine 'WebClient'
Download of 'https://download.microsoft.com/download/B/5/5/B55373E5-8948-41DF-B1D5-F60896104294/WinSdkInstall.ps1' succeeded using engine 'WebClient'
Download of 'https://go.microsoft.com/fwlink/?linkid=838828' succeeded using engine 'WebClient'

stats of the target directory so far:

2,631 Files, 1,005 Folders total 14,444,652,261 bytes

I previously got the offline download to complete with version RC1 in November 2016 but RC2 in Janurary 2017 always hung in the same spot. I didn't pursue RC2 troubleshooting since RTM would be available a month later and I hoped whatever problem with RC2 would be resolved in RTM.

Well, it still doesn't work. Please let the MS team know that there's something about the offline download ("--layout" option) that's fragile and prone to hang. I don't believe it's an issue with overloaded servers because when I tried multiple times with RC2, it always hung on the exact same file whether it was morning/night/ weekday/weekend. I suspect the current problem is similar.

I took a screenshot of the hung process for RC2 in January and it seems to hang right after downloading WinSdkInstall.ps1 which is similar to RTM behavior:

RC2 hung in January: http://imgur.com/a/uwfoj

RTM hung in March (today): http://imgur.com/a/QxqC3
Absolutely no one intelligent thinks that. And rally size means literally nothing.
https://www.wired.com/2017/01/fbi-says-democratic-party-woul...

fun fact, it is the same private company the government paid for evidence that North Korea (yeah, right) was responsible for the sony hack.
I am not an expert, but I have bought a couple of small emeralds (in Bahia, Brazil) as a tourist. Part of the spiel that the seller had regarding why emeralds were special was that it is tricky to cut the gem without causing unwanted breaks. See https://naturalemerald.wordpress.com/2010/02/02/durability-i... for some info.

Also, like many other gems, the price of a gem varies wildly with its clarity, etc.

So the worst case scenario,I suppose, is that it could be that the stone is only worth its weight as rock dust. But generally I agree with you that it seems unlikely, and it's probably just hyperbole.
Downloading...i pray to god that intellisense finally works for large c++ code bases such as Unreal Engine.

Wishful thinking?
This sounds very similar to Clickteam's Klik & Play [0]. Here's a screenshot of its event editor: http://media.moddb.com/images/engines/1/1/29/krnl386_003.png

[0] https://en.wikipedia.org/wiki/Clickteam
Equality for objects means reference equality. That's precisely the problem with object-oriented languages: you can't manipulate the values that you really want, you have to manipulate objects whose state is hopefully the value you want.
You may need to add a user-agent spoofing extension. Certain sites will not serve plain H.264 video to Firefox correctly, unless you pretend to be Safari mobile.
16 hour Forth to replace everything and solve our problems.

Forgive me, but I'm leaning toward siding with that CTO on this one.
That's great, but no. I can argue that they shouldn't break the law. The penalty is irrelevant.
I wrote a parser and interpreter for a game oriented BASIC with a 2D game engine and api inspired by old game consoles. Wrote it in C 10+ years ago. It was one of the greatest learning experiences of my life. Never saw the light of day :)
Yes, the comment was not nice (comment is now dead). However, I've stopped watching the video because the presenter's English accent was not easy on my ear. The problem reminds me about "Founders' Accents" article:

http://www.paulgraham.com/accents.html
The management process, every tab, every extension, and a pool for registered offline workers are all running by firing up chrome... I'd presume there's similar overhead for FF, but not process isolated, that was work in progress iirc.

It's not necessarily a bad thing, but can all add up, and it's hard to measuer/add up the separate processes.
Sorry, my intent was to show three phase electricity to the home in most European countries.
Until 20 years in the future when Firefox 66 (if Mozilla is still around after murdering the only reason people use their browser) when the new hotness is whatever WASM's successor is, after it's widely deployed and in use everywhere, people making snarky comments about how they're glad WASM is dead, and we get to piss away another tens of millions of man hours and annoy tens of millions of users by changing things for the sake of change rather than objective technical benefit.

Yes, I'm slightly bitter. I'm starting to think the Suckless guys have the right idea...
Eve operates in meat-space not a mathematical Flatland. Operationally, it does not matter how the message was read. The encryption system is compromised and users do not have practical alternatives.

The reality is that no matter how good the software engineers are; no matter how sound the algorithms; no matter how well funded the startup or open source project; it's completely outnumbered and completely out gunned. Nation states operate at a different scale and easily deployable encryption systems for novice users are white horse led brightly dressed musketeers drum marching to their general's firing line in the midst of a modern free fire zone.

To me, any secure communications systems that provides the convenience of app store downloads and over the air updates should be considered compromised. On the other hand, if someone thinks that a three letter agency might be interested in their communications and that person does not work for another three letter agency, they should probably assume that their signals are compromised if they are detected.
It is about Kafka.
Yes, but I imagine you never had the "pleasure" to use it.
High risk, high reward. Why would anyone take a higher risk for a lower reward?

Pharmaceutical companies in the S&P500 are so profitable because of barriers to entry, massive capital requirements, and a whole biotechnology industry feeding them acquisitions. Biotech startups going under with zero revenue after raising hundreds of millions of dollars from VCs and institutional investors is a regular occurrence. Since the brunt of the pure research is publicly funded and other investors chasing ROI take care of much of the R&D risk, big pharma companies benefit a lot from other people's money just for providing exit opportunities for smaller companies.
Going from easy dragnet surveillance of unencrypted communications to having to use expensive to deploy, develop, maintain targeted attacks that get patched (with, on iOS, ridiculously high penetration rates) does not seem like a moot issue.
As a newcomer to .net I was really confused by the lacking refactoring support in Visual Studio (yes, things we spoiled Java brats take for granted like extract method, extract class, move to separate file etc).

Is this available in VS 2017?

Edit: and live unit testing! I was looking forward to that until I found out it was only available in the enterprise version. (And yes, here you have an edge on Java anyway I think)
I'm glad that major sites don't support older browsers.

This way users will have to upgrade, and the web can move forward.

One thing is to keep supporting something that costs hundreds of dollars (like an iPhone), but there is very little sense IMHO to spend a lot of effort and—potentially—make everyone's experience worse just because some users won't bother downloading a 50MB free update.

A lot of things happen in 3 years in this field!

Google was smart in making Chrome updates automatic. I doubt the average user cares the slightest anyway.
No Fruit
This announcement wasn't targeted to just you individually. I don't see "Visual Studio 2017 Launch Video for overly sensitive romanovcode" anywhere in the title. Do you not think that the Corporate Vice President of Visual Studio would be a qualified person to be speaking during this event? No one is forcing you to participate in watching this video. The whole industry would do better without people like you. In fact, it is!
Working as a publisher and having channels to talk to each of our clients is amazing and increases productivity and communication way beyond just email and phone. But that's just my particular use-case :)
The news sources that Reddit prefers
What kind of demand reduction campaigns do you think can work for these carving enthusiasts?
Gotta hand it to the CIA, they really know how to give things badass names.
> I'm going to guess that he doesn't actually know very much about AOSP, the Linux kernel, or indeed GNU/Linux security in general.

I know a fair amount for a 'layperson', which you can (probably rightly) argue means I am unqualified for comment in these circles, and you are right that I am including too much speculation. I absolutely, inarguably overstepped. My bad.

However, with regard to Android being owned - this article is literally about the CIA tools that are used to compromise Android. The trove has been released. It is incontrovertible at this point: https://www.washingtonpost.com/world/national-security/wikil...

The issue is to what extent other fundamental assumptions are now called into question. Is it only android, or is Chrome now suspect as well? What protocols are compromised?

I suspect we will find out more in the coming days, and I should have been more circumspect in my own post. It was unbecoming.

In any event, thanks for your feedback.
Disgruntled Washington bureaucrats have money. Money can buy you black hat devs. A few minutes work for a chance at $[x-xx],000? Done and done. Payment upon successful phish.

There are plenty of people that value money over morals.
> How can we as a society fix this?

Don't mate with irrational people.
I have my doubts, at least I could disable plugins when I wanted to.

Now I have to disable dns entries.
> If we receive valid content removal request through our contact form then we will have to take the content down.

Have you considered how much takedown requests you will get if your site becomes popular? It could be hundreds to thousands per day (some ex file hosters ITT could tell how much).

You'll need a whole lot of premium customers to cover the costs of reviewing the takeodowns.
I have the feeling that a big problem with VS is less about raw performance and more about old school blocking code, ironic considering how good C/F# are for async programming. VS just tends to "freeze" where other IDEs would throw up a spinner somewhere and let you carry on more or less unmolested. It does seem to be getting better though, keep up the good work!
He has done loads of things he said he would

http://www.politifact.com/truth-o-meter/promises/trumpometer...

Promise kept - 5

Compromise - 1

Stalled - 1

In the works - 14

Promise broken - 0
I have a stovetop one and without the lid on it's just a big pot. You can brown meat and cook normally in it. The electric ones may have restrictions on that.
Most of the hard problems are extra hard because of the existing codebase, and the nature of it. Servo/Rust are definitely the way to go to fix those long term issues in stability and performance.

Sometimes you DO have to step back, and rewrite, but at least you have a better idea what you need based on the prior version, even in a separate language.
> In fact, if total downtime is constint, I would prefer they overlap.

So the people who are supposed to do work for you also can't work?
Do you ever exceed the speed limit? Pass on the right? Rip your music or movies? Download torrents? Take pens from work? Park inches over the line? Throw away mail addressed to the previous resident of your house (federal felony)? Participated in an office pool? Smoke weed?

If so, kindly do not speak from the glass house about picking and choosing which laws to follow. You do it, I do it, everybody does it. Society still functions somehow.
You won't convince people on this sub. They will quote some molecular theory. People don't realize that science changes, and current theories of molecules may be superseded.
I've been tinkering with a language I call beep for a couple years now. It's sort of my programming equivalent of the old hot-rod sitting in the garage. I'll disappear for a weekend while I work on it and then not even think about it for a month or two.

I made it/am making it mostly as an exercise. I like to know how things work, and there's no better way for me to learn than by doing. It's also just fun to make stuff. Last (and definitely least), it's an expression of a certain degree of frustration I have with the current offerings. My dream language—oh, maybe I should've named it "dream"—would feel like Ruby but have static types and no nil references. I wholeheartedly acknowledge the tension inherent in that statement; much of Ruby's power comes from its dynamism. But like I said, it's just an exercise. :)

Not sure if that qualifies as not-a-toy-language. Is a language's "toyness" based on its simplicity, or its intended use?
Thank you for reminding me that that book exists. It's been a few years since I last re-read it.