skysight-inc/HackerNews huggingface dataset:
We recycle our K-cups -- it's a bit of effort but it's not really that bad.
Half a day is a bit of an exaggeration - I've been making the best beef stews of my life in under an hour, including prep, warm up, cook, and steam release.

Likewise pulled pork in just a shade over an hour, perhaps 10 minutes actual prep time.
Ask HN: Command line UX resources
While developing backend services and tools to be used by developers, it's often hard to decide what would be the most seamless experience.

There are ton of resources on designing web sites. Is there something equivalent for command line interfaces and backend systems?
Managing State in Angular with ngrx/store
I don't think your argument about less secure services is helpful to layman. By arguing that Whatsapp is more secure, you are giving people a false sense of security. A good way to phrase it would be "all messaging services are equally vulnerable to these kind of attacks, regardless of encryption."
ARM cores are much weaker, crypto performance without NEON is absymal across the board. Of course, compared to hardware-acceleration software always seems slow; Haswell manages AES-OCB at <1 cpb.
This guy gets it. But hey if the NSA wants to provide free hosting that is private and secure -- or apparently so until the drones level your neighborhood -- that's fine.
The drug was then unaffordable regardless of intent. You can't separate the two. Again, your solution doesn't stop this.
Why People Still Starve (2003)
Same FireBeyond. Even worse, I've gotten feedback on a take-home project where the solutions had errors in it and I had the correct response! This, btw, was from one of the huge tech-companies in SF. Since it was the recruiter who went through the solutions, I couldn't nor cared to correct their mistakes :)
It's misleading by omission. Until I read the article I was under the impression that they had found a flaw or something exploitable in the OWS protocol.

If the problem was with Signal or Whatsapp, as the headline suggested to me, switching to another messaging service is the natural reaction. If people understand that the problem is with the platform, and that all platforms are compromised that solution doesn't work, and using signal is still better than SMS because it still protects against other forms of surveillance.
Am I missing something? The actual headline is "WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents"
> I try to heavily caveat any statement I make about the law.

That is appreciated, and you are in the minority.

I'm taking this advice, btw, and being more circumspect when I post in the future.
I've created a few interpreted languages over the years:
1) A C and Lisp hybrid called "Frame" that was an expert system development language; it looked like C but ran like Lisp, with functional programming like code modification capabilities. Created over an 18 month period around 1988, with lots of statistical and 3D rendering capabilities. For proof of concept, it had an accounting system built with it, which generated 3D cash flow animations for analysis purposes. After that I wrote a bunch of "agent AIs" with it as back then AI was all about actors and agents.
2) At Philips Media during the early 90's I wrote the ASLAN documentary production language, which enabled a team of people to create Ken Burns style documentaries. This was a "distributed language" with different people operating in different roles having different syntax for their portion of the overall documentary being created. Audio people, video editors, screenwriters, other coders, graphic artists, and 'builders' all had their scripts that when combined and executed, would produce a ISO disc image that was a "cut" of the documentary. I ended up being the production engineer for 13 documentaries, which we repeated in 8 languages. Philips also sold ASLAN to other production companies, which I then supported their use.
3) At Sennari Games, under contract to EA, I wrote the front end UI and control language for all the Tiger Woods PGA golf titles. This was maybe '94? It was the first Tiger Woods Golf, which was then ported all over the place. When I checked back 10 years later, they were still using it for golf game front end UIs.

I seem to make mini-languages quite a bit now. I operate as an integrator between logical systems of complex software. I've found mini-languages, often nothing more than a macro text replacement engine, is all that is needed to enable fluid integration between vastly different technologies. The KISS principal 1000%.
Isn't this more a distinction between science and science reporting. Coffee is complex and interacts in ways that can be described as good and bad. The press reporting blows by the wind of the press release that day. Hence the Daily Mail and others reporting lots of common things both causing and protecting us against cancer.
I feel like this behavior comes from the riders -- people give bad ratings if they don't get picked up exactly at their door, double parking be damned.
I created an IVR scripting language back when premium-rate billing was in its heyday. We were in a very successful business (so successful that we didn't need a salesperson). Our Achilles heel was that we were dependent on a company for our IVR language. I asked why we hadn't written our own and was told that they guy who wrote it was really smart and took 2 years to bring it into existence.

I decided to try to work out a proposed architecture on a pad of paper during a transcontinental flight. I created a mockup simulator that seemed to work and then borrowed some hardware to see if there were any problems. There weren't any that weren't quickly fixable.

I brought in my language to my company's owners, who told me they were going to buy the language they used for $300,000. I told them they could have mine for free.
Also if water levels rise due to global warming it's like a hydroelectric station :V
Since "Enabled multi-process Firefox for Windows users with touch screens" is in the Firefox 52 release notes, it should be enabled now. I don't understand how else that note could be interpreted.
And that's exactly why I like work to hire. The biggest factors that contributes to whether you like your job or hate your life are your boss, the people you work with and the state of the code base. You don't get a good impression of any of them until after you've been hired.
That's an interesting thing: in basketball, fouls are part of the game and used in the last minutes to get the ball back

In most other sports, doing that would be "breaking the rules."

Not sure how such a division arises. (Maybe if the authorities make no attempt to "close" said loophole?)
Using technology to address gender bias in film – Google
Noted, and thanks. Your feedback is much appreciated.
If you ever buy anything with a CC, use a "membership" card anywhere, or have anything delivered, or for that matter purchased online, then there's a greater chance than not this data was shared by the merchant, transaction provider and/or the credit card company themselves.

If you have an online profile, with any friends that aren't paranoid, and allow your friends to see any private information, then this can be collected/correlated by the various bot farms.
When Ian and I built Founderkit, we wanted to give founders tools to save time, make fewer mistakes. One of the things in YC that was always helpful was credits for services like Heroku, to help get started. We wanted to give this edge to more founders, so when companies reached out to us after launching, we asked them to help our founders get started by adding a deal. This is just a tiny start, and look out for a Heroku deal shortly, but we'd love feedback and suggestions.
The US is paying for "ask your doctor about X" ads, which in many places are forbidden. That's just wasted money.
Nope, not sure, sorry.
I’m going to assume that the response would be that there are no such thing as Vault 7, a digital capability or even the CIA.
It's at times like these when silver linings are most important.
I'm assuming you mean HPE? HP is a separate company.
Yea, also we sometimes remember only bad things. E.g. if we play in poker, we may lose with two aces for a number of times in a row. And because of the emotional frustration we start thinking that two aces are not that good.
I found none of these revelations surprising. In this era, you have to assume that someone is monitoring you. You're naive if you think otherwise.
Love inform7, thanks!
Sadly no mention of any improvements to their C compiler :( The C99 support is still incomplete and it looks like MS has given up on C.
Sontarans also make an appearance: https://wikileaks.org/ciav7p1/cms/page_524426.html
Yes, CodePush can be used with Mobile Center - here is a demo video (https://www.youtube.com/watch?v=lfqZ8Uy2p3U)

CodePush will also be integrated into Mobile Center, so that you can also making CodePush a part of your CI process.
We are also working on adding support for Authentication, storage, testing and Push notifications.

[I am the PM on CodePush and React Native Mobile Center stuff]
Personally, I write games a lot, and I write apps with rich UI behaviors. Both have a lot of inherent statefulness and imperative behaviors that are, in my opinion, modeled better using a a language that at least supports imperative structures. Both also benefit a lot from OO principles.

I also use functional concepts, and my code also ends up with lots of nice, composable blocks, but being in a language that forces functional concepts where they don't fit is a recipe for unneeded complexity and unintuitive code.

Functional isn't a silver bullet. There Is No Silver Bullet.
You're missing a strategic consideration. If Wikileaks operates with ulterior motives, it could have an interest in dropping obsolete or even valid information for a variety of other reasons besides wanting people to be informed; to destabilize or distract, for example. Likewise, other parties could exploit Wikileaks to those ends, feeding low-level intelligence to Wikileaks for second-order purposes.

If not Wikileaks, whom do we trust for this sort of info?

Nobody. Open-source espionage means institutional reliability is a chimera. The more credibility you invest something with, the better of an attack vector it becomes.
Situation Escalates at Panamanian Border. 300+ Venezuelans Left Stranded
I made a programming language called Earl Grey a couple years ago: http://www.earl-grey.io/

It compiles to JavaScript, but it has a Pythony syntax, macros and fairly advanced pattern matching. I wrote an essay about the why and the experience: http://breuleux.net/blog/my-own-language.html

I think it's a pretty nice language, but I'm biased. I use it for my personal projects (including my own markup language, Quaint: http://breuleux.github.io/quaint/), but it didn't really catch on for anything else.
I think it's a little more nuanced than that.

I think the more likely objective (assuming the Russians were behind this, which for the time being is a fair assumption) is that they wanted to delegitimize a President Clinton. Everyone thought she would win. I think it's a bold claim to make that the Kremlin set out on a campaign to elevate an obtuse philanderer in a field of 16 who ignores any semblance of political norms. Rather, I think they just wanted to further tarnish Clinton's image, as President, as a corrupt establishment figure.
You can do that, but without pushing it down my throat using people who are clearly are not interested in participating in said activities.
https://en.m.wikipedia.org/wiki/Kris_Kaspersky
Just like a guy named Jack Burkman. https://en.wikipedia.org/wiki/Jack_Burkman who offered $105,000 against the $25,000 from the Metropolitan Police Department, for information about his death. With all parties having reasons so see Rich dead, I'd say it may become semi-relevant part in the cinematic workup of the Trump era.
Before I die I want to
"CIA bypassed secure apps on Android" would've been nice. Sure, there are hacks/implants for other platforms too.
Some of the instructions seem unsafe--how do you "heat oil in a pressure cooker until it's smoking"? You're generally supposed to only heat stuff with the lid closed, and at that point you leave it closed until it's done.
I don't think that's a fair description of the information. Comments GP refers to include e.g. SEP -- iOS' threat model includes kernel-level 0days.
One issue that the article overlooks is how many jobs the Microsofts, Googles, Apples, Facebooks, etc. outsource to the H1-B outsourcing companies such as WiPro, Cognizant etc. I have met many consultants in the Silicon Valley who work for Apple through a firm such as WiPro. These contractors salaries presumably would not show up in the salaries for H1-B employees working directly for these large, high-profile companies.
Here are a few I can think of off the top of my head:

* Tutor

* Create some online content (ebook, course, blog) and either put ads on it or sell the content

* create a side project that you want to productize (this will take more time and may not lead to any money)

* become a secret shopper.

* Get a part time job at a local place of business (retail, restaurant) this would be the "easiest" of them but may not be the most rewarding

* buy a site/app that is already generating revenue and either maintain it or fix it up

* put your skills up on fiverr or other similar site
"should hell ever freeze over and I secure funding some day"

Your low self-esteem is sabotaging you.
See this: https://github.com/TokTok/c-toxcore/issues/426

Long story short: if someone obtains your Tox private key, they are able to impersonate you in the conversations with other people without you realizing it.

Tox developers admitted this was an issue. Fixing this means changing the protocol itself (which will affect everyone).

Tox is still experimental (which they admit here: https://github.com/TokTok/c-toxcore/issues/426) and it is not advisable to use it.
> people should assume

What I assume is that the bill of rights will not be subverted just because I use technology. The right to not be subject to search and right to not self incrimate.
True. But Play Services is effectively a part of the OS (from Google's perspective).

As you say, in both cases (iOS and Play Services) it's a commercial closed-source bundle. shrug

I don't personally spend time worrying about that, given that Google and Apple's code is probably better reviewed than some random open source app, but some people like to nerd out about such things.

As you say, the FBI was eventually able to get access to the San Bernardino shooter's phone. But this isn't exclusive to the highest levels of government; it just depends on your budget: http://www.reuters.com/article/us-apple-encryption-fbi-idUSK.... It's not surprising the CIA would have a stockpile of unpatched 0days, found or bought.

I don't believe I'm worth $1m to anyone, so I feel pretty safe using both iOS and a recent, patched Android.
> "trying to cover the entire problem surface area"

Could you elaborate on that?
You mean the slippery slope fallacy, codified into a story?
Moreover, one of Uber’s other “scandals” — the fact that Kalanick asked Amit Singhal to step down as Senior Vice President of Engineering after not disclosing a sexual harassment claim at Google — reflected far worse on Google than Uber: if Singhal committed a fireable offense the search giant should have fired the man who rewrote their search engine; instead someone in the know dribbled out allegations that happened to damage a company they view as a threat.

It's not clear when Uber learned about these allegations of sexual harassment. I'm not willing to give them the benefit of the doubt and assume they acted immediately after all the other cultural problems with harassment they seem to have.
> No encryption was harmed by capturing the keystrokes and audio before it reaches the application.

Exactly, and some people including me thought about this possibility years ago.
The most secure system in the universe can still be hacked very easily by a malicious closed driver because device drivers have the highest access level to the underlying hardware. Every information being produced: (virtual) keyboard writings, data, contacts, sensors data, GPS, audio, files, etc. I mean everything can be accessed a lot before it reaches the encryption code and be relayed to a 3rd party without the user even noticing.

This plague won't go away, not until enough people with enough influence will require hardware manufacturers to document their hardware in order to create OSS and trustworthy device drivers.
> Americans subsidize drugs for the rest of the world.

Complete nonsense. I see this regurgitated again and again with nothing to back it up and it falls apart under the slightest inspection.
If all startups need a Greg and there are only so many Gregs to go around, can new Gregs be deliberately created?
Well yeah. If you conflate those things or tie them together, you've basically declared your intent to demand a mile if they give so much as an inch. Which means the only sensible response is to fight tooth and nail every step of the way.
> I don't think a disgruntled washington insider did that!

Quite the contrary: If I definitely know that my target is too incompetent to check what he clicks on, or that he forgets his password every week, it's waaay easier for me to achieve my goal.
If you don’t think sexual harassment exists at your company, it’s not because it’s not there, it’s because you aren’t paying attention.
The usual answer to this question is Because we can

The more helpful answer, though, is: Because it's fun (at least to some people)!
> but on the other hand it makes me think of compelling you to give up encryption keys because well, they're not "papers" like the 4th amendment refers to (an argument which HAS been used before).

That makes me think, what if I wrote the keys down on a piece of paper, and then told you I always copy it from the paper because I don't remember it. Then would I be protected by saying that my papers are protected and therefore so is the key?
Wikileaks offers that possibility, but you can always include self-identifying documents in there.

I’m a lot more puzzled by the fact that Assange would say anything about the uploader, even if it is negative. I guess denying it’s the most likely suspect re-rolls the dice in most people’s head.
NYT corrected/changed the title. I don't get why they are getting the heat when wikileaks leaked the information.
This is entirely a non-issue.

If group with the massive funding and pervasive reach like the CIA can operate with impunity it does not matter what app or what security you think you have.
I have the same aversion to such products, but sometimes those "As Seen On TV" things aren't so bad. My parents' Ronco Rotisserie Oven is still kicking after well over a decade and makes some boss kabobs and roasts.
This is a good point, but I think regardless reform is in order.

Sometimes the best way to reform a thing is to tear it down, and I think that's where Thompson's cautiously optimistic post about Brexit landed. (Perhaps this one? https://stratechery.com/2016/the-brexit-possibility/)
Does anyone remember the name of the file hosting platform that had a music player built into it? It was so goddamn elegant and easy to use, but was bought out by Facebook. It was a huge staple for me all throughout high school for my band, it's kind of shame that there was no way it could have been viable.
Wow, that is really neat. Dealing with JavaScript is one of the reasons I try to avoid front end work. Python, however, has wonderful syntax. I am bookmarking that page for future use. Thanks.
> I think a problem is that complex apps are made with scripting languages. This nasty practice seems to have finally become widespread habit in earnest with Perl in the hey-days of CGI httpd, and then of course came along Python and JavaScript and here we are!

Exactly, though the dynamic languages like Python did reveal some serious shortcomings with the "older" languages like C++ and Java. Which is why I'm so happy using TypeScript. It gives you the ability to layer static types on a language that still offers the flexibility and concise code that are unavailable in C++ and Java.
Interesting. It was my impression that Donald Rubin was the main instigator of propensity-score methods. Do you have some paper references in mind to give me a better sense of the timeline?
I meant less crappy among the usual "file hosting sites". Mediafire for one is a pretty good service with 10GB for free but some times has too many annoying ads

OP's site looks great!
I don't know why you think the home country of the drug maker contradicts the claim that Americans are effectively subsidizing drugs. The fact that the company is "Swiss" doesn't change the fact that it's getting disproportionate revenue from ("subsidized by") the US.

>4 of the top 5 for Sales and Marketing Spend (both on raw dollars and as a percentage of revenue) are US.

>3 of the bottom 5 for R&D spend (as a percentage of revenue) are US.

Say that $1 of marketing increases profits (exclusive of that $1) by $1.01. And you can do it 5 billion times before the effects cancel. In that case, it looks like virtually all of your money went to marketing, and yet there's no fat that can be trimmed.
I heard this directly from a higher up at MS during a conference afterparty. He said he couldn't wait for browser support for Web Assembly to go live so he can show the things they're working on.

And yeah, for C# to WASM, we'd need garbage collection support in WASM. That doesn't exist yet, though it's on the list of future enhancements[0].

[0]: https://hacks.mozilla.org/2017/02/where-is-webassembly-now-a...
Small nitpick: Lyme doesn't mimic Bell's palsy, it can cause it. Source: my face during initial onset of Lyme, September 2000. Thankfully I got and noticed the bullseye bite mark, and 21 days of amoxicillin took care of it.
Source?

I've always understood the FBI v. CIA conflict as a classic Red vs Blue security alignment. FBI aligned with Defense and CIA aligned with State.
AudioSet: A massive dataset of 2M manually annotated audio events
Most of the demand is in art made from rhino horn. It fetches a high price and holds it's value well over time. Usually just the scrap from the sculpting process is turned into traditional medicine preparations.

https://wildlifejustice.org/cn/overlooked-rhino-horn-demand-...
If the device isn't secure, all bets are off.

And in my opinion, if you require security that the CIA can't bypass, you won't find it in any mainstream consumer hardware or software.
This sounds like a bug. If you can reliably reproduce 32kb txt file taking up 1GB, would you mind filing a bug at https://crbug.com? Or I can file a bug if you let me know how to reproduce this.
He "sort of" implied that he works on Servo which is not Firefox.

I brought up my own personal experience because I've also had people conflate where you work with what you do.
So despite all those buttons it's too cheap to have a 7 minute timer?

Or are we excluding one unwatched time but including another unwatched time for some reason?
Man that sounds like a beast of a CPU... And if they nail the GPU usage, it could be a VERY good option for Windows VMs (where needed) and, not to mention, the GP/GPU workloads, though CUDA seems very entrenched in that space.
I don't think that confers any ability to bypass the sandbox. Again, not an Android expert, so happy to be shown I'm wrong.
Visual biographies
I don't know why Obama allowed this, could he have had the CIA shut this stuff down he was the Chief Executive?

I wonder what this administration will do with this knowledge. It will be interesting to see trump respond too, rather than manufacture news.
:)

Cheers.
Russian videochat – видео / Продолжительные  Bitch Flesh