skysight-inc/HackerNews huggingface dataset:
"...as is often the case, the "greedy corporate oppressor" narrative is too simple."

What part of the things you describe aren't done with the purpose of making the company money? I mean, "we're risk-averse so we force the risk onto you" is kind of the same as "we don't want to spend money so we inconvenience you".

Of course, companies are in business to make money and will tend to use whatever avenues are open. When a company starts using a monopoly position to impose legal restrictions on customers (whether to avoid risk of losing money or just to make money), sympathy for their money-making efforts tends to lessen.

Edit: Note that the approach of Deer is not warranty voiding if someone hacks the software but a license agreement which effectively terminates the ability of the farmer to use the vehicle and thus the defense above is pretty disingenuous.

See:
https://www.wired.com/2015/04/dmca-ownership-john-deere/
Anyone knows how this compare to iron functions https://github.com/iron-io/functions

Looks similar. Docker image with entry point but the entry point is a server instead of process and it reuses the docker container instead of shutting it down

Would be great to get a quick comparison between the two.

Another tool in the same category is hook.io microcule https://github.com/Stackvana/microcule

both iron functions and microcule are battle tested by companies
As the bug seems to rely on a maximum instruction length that is present in hardware x86 but not in QEMU's x86, the reach of this particular bug seems to be just the software emulated mode.
It pre-dates Brexit. It's coming into force now, but legislation passed in Nov 2015, and was being developed for some time before that
It often depends on people who run the restaurants as anything. They have to find a good supplier who knows beef and they have to be able to cook it correctly. Mostly it's about getting a cut that has a good balance of fat and muscle and cooking it to where it's done, but still tender.

In the case of roasts, mostly it just takes time as even a modest cut can come out very good if you give it enough time and care.
Types of edges involved in DFS and relation between them
Before they were using a custom AES-based key derivation function which had not been strongly peer reviewed so Argon2 is a big improvement there in my book.

ChaCha20 over the existing AES-CBC... not as much, I feel more comfortable in that it's harder to screw up the implementation of it, but that's about it. CBC mode especially can have unexpected side effects unless used very carefully, ChaCha20 or any other strong stream cipher, even AES in CTR mode is somewhat easier to understand the side effects of.

So overall, not concretely in terms of known vulnerabilities, but in terms of predicted risks, I'd say certainly. Before this change I was erring on the side of known algorithms with solutions like LastPass at least using standardized PBKDF2. With this change, KeePass went behind or middle of the pack, cryptographically compared to competition, to the frontrunner.
Thanks for the sentiment. We are major sponsors of PyCon and have donated to PyPy.

What I'm trying to suggest is that the amount they've received to support Python 3 ($250,000 from Mozilla, $66,677 in public donations) is signal that there is major demand for this.

Could they use the infra that is building binaries for PyPy2 for PyPy3?

I understand where they are coming from "Existing project are using Python2" but I'd like to see them focus more on the future.

I love what PyPy is doing and I want them to succeed but I can't imagine their success coming out of Python2. I see them more competing with more modern performant languages that are currently stealing from Python (i.e Go/Rust).

If they focused on the future they could directly compete in that market of projects that are rewriting in other languages for performance.
Tell me why you think I should watch it?
I will get down voted for this but its how I feel. I have not been excited for an app or a new website in a very long time. I think we are in a rut. None of these ideas sound very interesting or exciting to me.
Sure, and ad-networks asked sites to use their solutions appropriately on the users browsers.

You're giving your customers tools to abuse the internet commons. You should be called out for it. Afterall your revenue is an exact function of user's bandwidth. Quoting from your pricing page:

> "Only data delivered via P2P counts against your plan."
Remember the "3M" computer ideal? Mega-Herz, Megabyte, Megapixel, for speed, memory, screen, to make up a new capability of workstation?

https://en.wikipedia.org/wiki/3M_computer

I now think the next target ought to be latency and power defined, in particular with IOT requirements.

Microseconds, Milliwatts, Millions of endpoints.

or, for storage, Microseconds, Millions IOPS, Multi-Parity

or for computer, efficiency, IOT goals:

Milli-watts as a constraint for a benchmark of compute
Millions of endpoints / processes or cores on a network topology
Microseconds as a measure generically of access to resources, whether memory is sat on another node, or local store, the delay ought to be inside the same order of magnitude as a target.

My purpose in all of that, is, should there - in fact, can there be - consideration of architecture and topology that avoid .. rather can we aim for linear cost in addressing complexity at all, as a goal, or has that been lost already?

I mean "that" and "lost" very vaguely, being non expert, but my question is really should I imagine that there are no effective gains to be had, designing for a IOT style or massively networked future, from the way memory is addressed, or has the complexity that we have, been introduced out of necessity, so will be here to stay, for practical reasons, so the idea of low latency, low power, IOT "grid computing" on a ad hoc basis, is smoke in my pipe?
The program looks like Excel except it isn't. In some cases you have to enter the data in a different column, in some cases you have to enter 0, in some cases you leave it out.

It could be SAP or some other old fashion ERP system. Or some old Java/C# application built for the hospital. These have usually in common a very crude old fashion UI and things like changing a record is overly complex.

Often also the workers don't know the program good enough. So they only know the standard use case. If you fall out of the 95% use case, you get into a lot of trouble because of their inexperience with the application. If they try new things put to mitigate the issue, it's better to ask for their boss or things can go worse.
>I wish I could find the link.

Eric Grosse at 5th RISC-V Workshop, 2016:

https://www.youtube.com/watch?v=0knR6vXba7g

Slides: https://riscv.org/wp-content/uploads/2016/12/Tue1330-RISC-V-...
Also, I do not keep the encrypted volume in the cloud. It's only on my trusted device. If it's important enough to secure the password, it's important enough to bring the device.

Further, I've used variations of the same password for the past two decades for >90% of my accounts, e.g., the ones where my threat model is "do not give a fuck." When I sign up, I mentally consider whether I give a fuck the account is compromised. If I do, new random password for the list. If I don't, use the 20-year-old password.
Indeed.

An often overlooked point is that good SQL optimizers generate different versions of queries depending on the current state of the database and the actual parameters to the query. That is, the optimal query plan for finding the sales to "school teachers" is probably different than for "astronauts" and the optimal query plan for reporting on "todays orders" is probably different at the start of the day than late in the afternoon. SQL query planners try to do the right thing with this sort of data variability and generally (but not always!) do a good job. It would take an immense amount of work and insight into the data and all the potential use cases to approach this with custom coded queries.

Before there were relational databases these sorts of access path, query strategy decisions had to be made by developers and were reflected in the schema and physical design of the database. This was inflexible and very labor intensive and it made many kinds of applications and or even routine changes uneconomical.
Apple, definitely Apple.
> Can we start dropping the SSL part now? Generally SSL v2/v3 is disabled so it is all over TLS anyway.

It's the same certificate though. So can we start calling them X.509 certs which is more proper than SSL or TLS cert?
>…I've spoken to many right-libertarians, and they all self-identified as right-wing and libertarians, and don't reject it.

This might be an American vs European difference. I have known plenty of libertarians and I can't think of any of them that would classify themselves as "right wing". As an example any of the libertarian positions I listed in my first response would be anathema to any group that is considered to be "right wing".

>…I would opt for (non-libertarian) social democrats over right-libertarians, for example, and would opt for (non-libertarian) classical liberals over right-libertarians too,

Again, maybe an American difference, but I would have to say that many libertarians I know would consider themselves to be classic liberals. For example, here is a quote from a professor at NYU:

"...I consider myself both a libertarian and a classical liberal. … So there are important differences among liberals and libertarians but I view these are differences along a spectrum. Some are principled (“Never, ever, initiate the use of force”) and some are empirical (“Many public goods can be provided privately”) and some are hard to classify (“The NSA should not collect masses of meta data”). Some people will want to take these differences and harden them into different political philosophies with different names and so forth. But I suggest that libertarians and classical liberals have too much in common for any divorce."

https://thinkmarkets.wordpress.com/2014/02/05/libertarianism...

>> Well it is good we agree on something, but you continue to use this one dimensional model throughout.
>Because it is still relevant, given that it is what people are familiar with and define themselves by, no matter how flawed it is.

Since no one can even describe the variable that underlies the left-right line, it is a pretty useless model and in American political campaigns, "right wing" and "left wing" is now simply used as a pejorative to paint someone as an extremist (there are plenty of extremists out there, but not everyone who doesn't register with the 2 major parties is one).
Lbry.io – decentralized digital library
Yes, I get that. I was wondering how widely used is qemu in x86 software mode
When I think of a great SAAS idea, I'll implement it with my team.
If it's really ultrasensitive, it's 12+ character random ASCII string committed to muscle memory only. No horse battery stapling bullshit.
Gave you an upvote. I understood where you were going with that (clearly others did not).
Also the funny thing is that most of these fakes have extra-ordinary specs :). So the real ones have lower but true specs and are listed at much higher prices. The consequences is that you can't even see real item until you get to 4th or 5th page!
Why Facebook's next big move could be a hardware strategy
The warrantee issue I mentioned was fraud--that is, sinking costs into investigating additional warrantee claims which turn out to be due to user manipulation. I suspect this is less of a concern compared with the legal liability of injury resulting from modification--I imagine it behooves the company to be able to point to the EULA and say, "look, we're doing everything we can to make sure this doesn't happen". This is complicated by the fact that they have to comply with laws in virtually every second and third world country, not just the US. It's just easier to be conservative with a blanket EULA. They could probably devise a more nuanced approach, but it would probably be costly and they probably have better (read: higher customer value) things they could put that money toward.
I understand their value-prop well enough (saving broadcasters CDN $$). I just find it shitty that their bottom-line is based off of the end-user's bandwidth without their opt-in consent.

The only way to tackle this is public denunciation of their model, hand in hand with browser based blocks -- either easylist/uBlock, or Chrome/Firefox/et-al modifying the browser protocols/UX to disallow this leeching without the user's knowledge.
6 Reasons SEO Is Still an Effective Technique
Autofill requires a browser extension. There are at least three major risks associated with this:

1. Giving code running in your browser access to your password database carries some risks. Browsers have a massive attack surface.
2. Autofill extensions use heuristics to map secrets to forms, and sometimes put secrets into fields they shouldn't.
3. Autofill extensions cause your browser to prompt for your master passphrase. Other extensions may be able to emulate this behavior or otherwise intercept your passphrase.

Anyone who isn't using a password manager should do so. A password manager with autofill is a huge step forward from nothing. But disabling autofill offers some further benefit.
This sort of thing is becoming the norm, and will become the norm with IoT. When every device is connected and has a computer, it can and will have the ability to be locked down, intercepted and monitored remotely.

People don't know or care about privacy, that's been amply proven, they just want rhetoric.

This is basically lending equipment while paying full price. We've gotten used to it with software, phones etc. Its absolutely ridiculous they have to sign agreements that exempt the company from any wrongdoing, and aren't allowed to perform basic repairs.
This might be the only reason why I give Docker another try.
Your yearly dose of is-the-universe-a-simulation
http://www.audible.com/pd/Business/Amazon-FBA-Blueprint-Audi...
Wow, I was thinking about building something like that but this looks very good!

Is there a way to map query parameters and / or http headers to input JSON? (a la API Gateway).
How about some vitriol?

How about not? Bad actors can be found in all domains, DBAs included. Painting all with such sweeping brushes does little to suggest people should take your comment seriously or advance the conversation constructively. There are also plenty of DBAs who know the strengths and weaknesses of many different data models, engines, and platforms, and work with developers to make decisions to ensure efficient data storage and IO for a successful application.

Edit to add:

Your profession, since you have proudly identified as a DBA, you are an Enterprise DBA, is a disgrace.

If you identify yourself as a DBA you must be an enterprise DBA? There are plenty of DBAs who are happy to dig into backend or frontend code as well, but have a lot of experience working with database systems. Many frontend and backend devs have experience working with databases, and similarly describe themselves to focus on their strengths. Are they enterprise frontend and backend devs?
It might be used for special applications, but not for your typical server that is connected to the internet, simply because it's horribly slow compared to the virtualization support (VT-x / AMD-V) most modern CPUs offer since at least 2010.
Swagger Codegen [1] is a free, open source code generator that works with Swagger 1.2, 2.0 and supports 30+ API clients, 20+ server stubs and API documentations:

- API clients: ActionScript, Bash, C# (.net 2.0, 4.0 or later), C++ (cpprest, Qt5, Tizen), Clojure, Dart, Elixir, Go, Groovy, Haskell, Java (Jersey1.x, Jersey2.x, OkHttp, Retrofit1.x, Retrofit2.x, Feign), Node.js (ES5, ES6, AngularJS with Google Closure Compiler annotations) Objective-C, Perl, PHP, Python, Ruby, Scala, Swift (2.x, 3.x), Typescript (Angular1.x, Angular2.x, Fetch, jQuery, Node)

- Server stubs: C# (ASP.NET Core, NancyFx), Erlang, Go, Haskell, Java (MSF4J, Spring, Undertow, JAX-RS: CDI, CXF, Inflector, RestEasy), PHP (Lumen, Slim, Silex, Zend Expressive), Python (Flask), NodeJS, Ruby (Sinatra, Rails5), Scala (Finch, Scalatra)

- API documentation generators: HTML, Confluence Wiki

Lots of companies are using it in production and the project is very active with 500+ contributors.

Swagger Codegen leverages another open source project "Swagger Parser" [2] to parse the Swagger specification (JSON/YAML) and the parser will later support OpenAPI 3.0 so eventually Swagger Codegen will support Swagger 1.2, 2.0 and OpenAPI 3.0.

[1] https://github.com/swagger-api/swagger-codegen

[2] https://github.com/swagger-api/swagger-parser
> the multi-display thing makes me ponder a RPi Android "desktop" or similar.

I think this is Google's response to Continuum.

If Microsoft comes out with a really good implementation of a docked phone, Google needs to have a response ready for their platform. Normal users probably won't care, but anyone who is interested in productivity knows how crucial a monitor and multi-window/tasking support is.

It usually takes 1 or 2 release cycles for Google to finalize a feature, so by starting now they're signaling intent to have some kind of mature feature by 2018-19.
I thought it was very questionable, but I was in debt and that was the only job I could get at the time. There's actually a positive use for browser fingerprinting in that it could theoretically detect Mitm attacks or stolen cookies. Basically, if you place a unique cookie on each device, and then a user/device shows up with that cookie but a totally different browser fingerprint, it's possible that the account was hacked. The client I was working for was a bank so I was pushing for it to be used in this way. But realistically, I knew it was probably going to be used for marketing or privacy invasion but felt like I needed to keep the job to pay the bills.
Consider these scenarios:

1. A user visits a website, sees a video player, and watches a video.

2. A user visits a website, sees an article, and reads it.

There may be some confusion about whether your technology will still force Scenario #2's user into your P2P network, and use their bandwidth. I'd argue that Scenario #1 is legit for your purposes, but not #2.

Are there any steps that can be taken to prevent sneaky behavior?
This time it occurs within a walled garden!
Install Python 3.6.1
Thanks for bringing this up. I was recalling more recent articles that did state there were modifications each night between matches. Perhaps those were in error; I would not have commented in that case. It's a shame nobody pointed this out sooner, I could have removed the misinformation.
Andrew Ng Is Leaving Baidu
We have quite a bit of people here on HN making over £100k in London. I wouldn't say UK is "particularly awful".
http://readme.io
I assume you meant Leap Motion instead of Magic Leap?
To add to this point as well; agile methodologies work best when everyone is a generalist and the business is onboard with being involved in the development process.

DBAs are specialists which makes them inherently siloed.
You can always opt out my friend. The problem we're trying to solve is a real consumer issue - there is no shortage of stories in the press about how poorly the streaming services perform, especially during the largest events (Superbowl, new eps of Game of Thrones, etc). And this is only the beginning of the streaming revolution.
By this logic, torrents are destroying the internet commons: this is basically running torrents in the users browser, but for content that they are legally allowed to consume. I think you need to step of your hobby horse here.
I don't want to just jump all over you like some people are doing, because I think you make somewhat of a valid point (to be honest, I don't think I'm knowledgeable enough to have an opinion there). However, it's my understanding that you can SSL any app by default using their wildcard for free. As a private business, is it really so wrong for them to restrict the free, automated LE certs to just paid apps? If so, why?

Just in case it's not clear, these aren't rhetorical questions - genuinely interested in your answers.
Right, if you're running on x86 hardware.
The use case is probably non-x86 hardware running x86 VMs.

For example, I remember using qemu to emulate RPi with ARM software emulation on my x86 machine.
I haven't seen any comment or quotes yet from Baidu (please correct me if I'm wring!). Amicable high profile departures like this are almost always coordinated between the person leaving and the company, with joint statements. Not saying it's not amicable, but I do find that, and the fact he's not sharing his next move, a little odd.

I also saw a FB thread that seemed to suggest this may have been a surprise to some of his colleagues. Take that with a grain of salt though - I don't know the people on the thread and they were vague. I just got the sense it was news to them.
With Peer5, Scenario #2 will never happen. Only users who are watching the same video (from the same broadcaster) will participate in p2p sharing.
Torrent users opt-in, by adding the magnetlink/torrent into the app.
Samsung makes the Bixby virtual assistant official
I'm sorry if this is the case, and I missed it. Can you please link to the information on how to opt-out?
Andrew left just after Qi Lu was hired as COO in Baidu. Hopefully, Qi Lu can bring some shining product out of those great techniques, encouraging the AI team left behind.
I don't think this is true. Keepass can do autofill without a browser extension. Or are we talking about a different feature?
What's wrong with "we won't merge code we don't understand"? I think a lot of people should hold code to that standard. I think almost everyone does hold code to that standard.
Great comment. What you are saying is spot on. I had a 2009 17" Toshiba satellite dual-core I upgraded ~1.5 years ago to another Toshiba Satelite 17" with a quad-core haswell chip. Now my mom is looking to upgrade her aging 2010 Gateway 17" dual-core machine but for Intel's latest lineup, most i7 laptop CPUs are only dual-core and only a slight clock speed bump above the i5 models. I guess they felt quad-core mobile CPUs consume too much power for laptops but still, since they were able to do it a couple years ago, why have we taken a step backward?

She also is a happy owner of a non-retina iPad mini which is still chugging along.
I appreciate your honesty, thanks for replying.
Pit.ai – a financial twist on reinforcement learning to outperform hedge funds
You can do that with keepass2android as well.
"Wright Electric hired a team that had been previously funded by NASA to investigate the potential for electric planes, which its co-founder Jeff Engler says puts the startup years ahead of the competition."

Airbus already have an electric prop engine fully tested as well as experience building prop planes with traditional fuel engines. So to say Wright is years ahead is misleading.
I wouldn't call rabbit red meat, but I second this. It's a common food in France, often cooked in stew with wine, and it's delicious and very lean. So lean that an over consumption of rabbit (read: eating only rabbit) can lead to rabbit starvation[0].

[0] https://en.wikipedia.org/wiki/Protein_poisoning
Pam-ussh may be tricked into using another logged in user's ssh-agent
Yeah, I find that kind of intimidating too. But don't forget that this is an entire company's worth of infrastructure that they're calling out. Also some of those in the middle of your quote are like saying "and we use Comcast for our ISP, and Microsoft Office 365 to create our documents, Google Drive to manage them, and Atom for editing source code..."
Sergi Constance – Hard Training Bodybuilding and Fitness
Habits of successful people