skysight-inc/HackerNews huggingface dataset:
I think a while ago someone on HN suggested emoji as a joke as a more information-dense and internationalized alternative to numeric or alphanumeric verification codes. I don't know about security, but if this uses all 1,088 emoji from Unicode 9.0, then four emoji have about 40 bits of information.
Those codecs have tons of parameters to tweak (source: private conversation with Pavel Durov)
Protesters raise more than $200K to buy Congress’s browsing histories
Analyzing the monetary component of employee benefits at leading US startups
How to Get Management on Board with Simulation Software
It's open source indeed [1] and was recently audited for the quality of the crypto protocol implementation [2]. Not sure what questions you specifically have but I'm happy to answer as I'm part of the team.

[1] https://github.com/wireapp
[2]https://medium.com/wire-news/wires-independent-security-revi...
How come https://riot.im (Matrix) manages to sync between devices AND have E2E, while also being federated?

That's not what you get when you have a secure system, that's what you get when you design a system that can collect (and possibly monetize) the data of millions of users.
It's really easy to criticize. Why don't you rewrite curl yourself? Instead of talking do something. In language that is memory safe + supports all the platforms that curl support (good luck with that) and same time is as efficient.
There are also some demands that will be placed on local governments and municipalities. For example, what will autonomous vehicles do when encountering huge potholes ? This is something that is widespread in the northeast US in the spring. Today, drivers will often swing slightly into the other lane to avoid them, provided that there is no on-coming traffic. So, either the autonomous vehicles will be able to deal with them independently, or local governments are going to need to be a lot more proactive about road maintenance. That's going to be a hard sell for a lot of municipalities that simply refuse to raise taxes and often fund most of their operation via punitive speeding/parking fines and other types of regressive taxation, much of which will probably also go away, based upon this blog post.
Motorcycle miles are <10% car miles in the US. Also, autonomy will make roads safer for motorcycles, bicycles, and pedestrians.
Enjoyed reading the article. More specific and practical than far-reaching Kurzweilian forecasts. I also liked that each paragraph provided links to associated data sources, e.g. crash stats, convenience store sales etc.
They say they are using 333 emoji to represent ~34 bits.
For an independent and serious comparison check https://www.securemessagingapps.com that focuses mostly on the security/privacy aspects of various messengers.
Ok, admittedly my example was bad. However, the replies are all basically assurances of the form: "Don't worry, a human at Amazon made that decision, so it's ok."

I'll repeat that ML is useful, and I'll add that it's useful in human systems, but its utility is constrained because for the really important stuff you eventually have to have a person check its work.
> Plain cheaper, sure. But the government isn't a for-profit corporation.

Spending money efficiently and helping disabled people more than modifying every building would, doesn't in any way imply that the government is a for profit corporation.
HTTPS will not protect the URL of the request, just the contents though.
Casperjs to capture screenshot of every site, do a image match of the results for confirmation.
Inequality.

The problem is, nearly never, access to resources: modern society (including in poor countries) puts necessary resources (food, clothing, shelter and even transportation) available to all at a very small price. Our material needs are 100% guaranteed.

The problem is that most of the goods that modern society produces are unavailable for most of the population. By reducing inequality, we could improve life quality for the masses.
Well, now PVS-Studio has more code to check and to entertain the readers with reports. :) About the analysis of various open source projects by PVS-Studio Team: https://www.viva64.com/en/inspections/
Its even more obtuse whey back seat drivers exclaim, we should try and stop you from doing that! Its unsafe!
> a traffic light system is set up at the pier. A red light requests residents to limit their usage; a green light, normal usage.

That seems like a dystopia.
Well stated. All of the arguments above amount to "sure inequality is happening, but that's just capitalism so what can be done?" This.
>the government very much uses us.

No, we put the government and the rules it has to follow in place to ensure that it has our best interests and nothing else in mind. They are a tool we use to make sure the state is run the way we want it to be.
> Copper IUDs [...] are ethically troublesome (eggs can be fertilized after ovulation, but the copper IUD prevents nidation)

That's only if you have some outdated religious beliefs (to put it kindly).

If you look at nature ~50% (various research points to 40% to 60%) of fertilized eggs are lost before a woman's menstruation cycle. So half are lost without attaching to the uterine wall and anybody noticing it.

There is also IVF that fertilizes many more eggs then end up being used / viable.

So the whole ethical concern about copper IUDs and preventing nidation is a misguided at best. And more realistically, it is a harmful and outdated belief clocked in arbitrary religious rules ... meant to exert control over women and families.
Are we supposed to cry for the capitalists now?

That's your free market. Enjoy the ride.
How come https://riot.im (Matrix) manages to sync between devices AND have E2E, while also being federated? How come I can use both WhatsApp and Signal on both my computer and phone (and they stay in sync)?
> "The £1.66m project largely was financed by the European Union’s European Regional Development Fund,"

perhaps that explains the desirability of "for show" elements
Features mostly. I mean, you seem to absolutely need the Gmail app. While I, too, have a Gmail account, I like the simplicity of the native mail app in iOS. I don't need any additional features. I get mail, I read mail, I can write mail.
Except this is missing from WTFPL:

> Unless expressly stated otherwise, the person who associated a work with this deed makes no warranties about the work, and disclaims liability for all uses of the work, to the fullest extent permitted by applicable law.

If you don't explicitly disclaim warranty then you can get hit by this in Common Law jurisdictions, see [0]

[0]: https://en.wikipedia.org/wiki/Implied_warranty
The ever elusive brand exposure. Another scam of the ad industry.
Angular (2) Universal Server-Side Rendering Example
This problem existed far before the ACA so while some stuff in it really needs to be changed I don't think it's fair to blame it for this scenario
FCC to halt expansion of broadband subsidies for poor people
This is why healthcare is such a huge political issue in the US right now. Tons of people are going into bankruptcy over medical bills, and tons of people are dying that shouldn't be. Many democrats want a single-payer system, and many republicans want a free market. Since we have a two-party political system that is behaving more and more partisan with each year, everyone is just yelling at each other and no solution is being found.
iMessage does not allow for any out-of-band key verification. It's correct that that Apple (and anyone compromising them) is in a position to change the recipient's key or add new ones without the sender noticing anything's going on. I think iMessage limits this to new messages. (I believe syncing is done through iCloud, which doesn't use E2E-crypto but is optional.)

It would still be possible to implement this in a secure way (including out-of-band key verification) by having the "original" key (the one you've compared out-of-band) sign keys for new devices and have the server deliver that signature (which the sender can then verify). I don't know if there are any implementations of this.
Also, the Netflix prize data set was used to identify individuals from only a handful of movie ratings.

http://www.cs.cornell.edu/~shmat/shmat_oak08netflix.pdf
Greek characters require a few manipulations (loading babel and using \textgreek{}), but for accents you literally just need to add two lines to your preamble:

\usepackage[utf8]{inputenc}
\usepackage[T1]{fontenc}
Was The Deck still invite only and if so can someone explain the value in that? That elitism could be a selling point, but if you are charging monthly, it just seems a turn off for expansion because they won't grow with you but only come in when you are established.
...addendum: there's actually a huge pile of small power generation facilities springing up all over the Western Isles and nearby mainland. But the purpose of most of these is to produce passive income.

e.g. in Applecross on the mainland nearby, they're just finishing installation of a community-funded hydro system. It'll produce 90kW, with an income of about 100k GBP a year going towards the community and small shareholders: http://www.applecrosshydro.scot/

90kW is a toy, though. It's not going to provide energy independence for anyone. Rather more significant is the estate across the loch from my father's village, which is installing 3.5MW of private hydroelectricity: http://www.hydroworld.com/articles/2016/06/gilkes-begins-con...

But a 3.5MW plant, if we assume it runs at 100% capacity for a year, is going to produce 0.02TWh of energy, which is about 2 ktoe (kilotons of oil equivalent). In 2015 the UK used 140000 ktoe, of which only about 20000 ktoe are electricity. (https://www.gov.uk/government/uploads/system/uploads/attachm...)

These systems are important locally, but they're not going to run cities.

Edit: misread one of the graphs, corrected the number above. (The stupid graphs all have lines in slightly different shades of bodily function. Maybe they were trying to make a point.)
Signal has this as well. I trust their security (personal bias), but unfortunately the call quality is a non-starter at the moment.
Teacher Certification Exams Are Way Too Easy
> The thing which is really sad is that there are no end to end encrypted group chats.

In iMessage specifically, or in general? WhatsApp/Signal do use E2E-crypto for group chats.
Espionage Barbie? Hacking Tech Toys Bring Whole New Meaning to Youth Privacy
Here’s Who’s Celebrating the Death of Trumpcare: The Chronically Ill
I don't know where you live, but where I live there is no choice for which ISP you use. This is true for many, if not the majority of people in the US. I am unable to use the ISP I want to use because it is blocked in my building by a building-exclusive contract with Comcast. So no ISPs have any chance for an opportunity.
One thing comes to mind is the personally identifiable information (PII) that is in the passport/ID. Usually it will have ID numbers but also name, address, etc.

Look at what the EU is requiring for this - it used to be called Safe Harbor.

A few things I remember about those requirements:
- data encryption at rest and in transit
- no onward transfer to third parties
- opt-out methods for users to not allow you to capture the data

You may want to look into any restrictions on using a cloud provider or specific configurations you may need (i.e. no failover to a non-AU AWS farm).
The article attempts to define it, but he word "generous" here is a little vague. If I'm making above market rate in salary, I don't really care about 401k match. At a previous employer, I had five weeks of vacation. Salary was lower than what I made when I left, but I valued the extra time off more.
We've gone from arguing "the security issues for C are overrated" to now arguing either "security issues don't have solutions I like" or "real programmers should be able to deal with these things" (I'm not sure which).

In addition, you're arguing a strawman. Nobody says that direct memory access should be taken away permanently. Many 'safe' languages allow you to directly access memory when you need it.

> A computer is a tool for computation not an adult diaper designed to prevent leaks.

This attitude is why we can't have nice things. It would be great if you cared more about the security and safety of the things you make than whether you look cool while making them.
What confidence is there to lack in the WTFPL? Saying I license you to use this source code/software however you see fit seems pretty straight forward to me.
They're a startup that has been working away on this for quite a while, very under the radar. They're a small team of talented individuals who've done some pretty remarkable engineering IMHO.

And yes, while it's still a little rough around the edges (it's still a beta) it works as advertised.

Disclosure: I'm the author of the article mentioned.
They've rolled out a new version of video/voice calls this month[1] which supposedly improved the quality quite a bit. I haven't personally tried it yet, though.

[1]: https://whispersystems.org/blog/signal-video-calls/
Possibly (certainly not here in the UK), but the majority of motorcycle accidents involve another vehicle, and my experience (as someone who's ridden on the roads for nearly 30 years) of other road users is that it's often a lack of awareness of the presence of a motorbike that creates issues. I treat everyone else on the road as if they are actively trying to kill me, and it has worked so far.

I'm sure that autonomous vehicles will be much more bike-friendly as they won't fail to look at junctions, and also will be much better at assessing the speed of an oncoming motorcycle (which many have problems with due to the size, apparently). And hopefully bikes will have some of the safety elements added to them by this time, making them inherently safer.
What does it mean by the patent clause? What kind of stuff does that cover, and in what scenarios does it become relevant?
As the author also noted, the MPL is a rather rare license, tho I always ask myself why.

I use the MPL for most of my projects that aren't under MIT simply based on the fact that it feels like the GPL but without infecting any larger projects that want to use my code.

Or am I overlooking something as a IANAL?
In a world full of bloated Electron HTML5 / JS "desktop apps", I'm very happy to see Telegram on Windows is a native app (Qt). It feels so incredibly responsive compared to everything else.
I don't think the reactions and comments were meant as an attack on curl, but more as an attacks on C.

Most programmers who attack C have seen the consequences of a memory-unsafe, type-unsafe language dominating systems programming throughout the years. I remember the period during the early 2000s when "buffer overflow exploits" were an entire industry. I also remember the strange allure of C and C++ in beginner programmer circles. The logic goes something like this: "they are powerful languages, all of the big and popular software projects are written in them, so they must be the best". Their next step was to go on to start a new generation of unsafe and vulnerable programs and libraries, and so on.

Now that we have the tools and technology to do better, we should really be making some efforts to push for them. The goal isn't change right now, but starting the process early seems like a good idea.
I don't think the reactions and comments were meant as an attack at curl, but more as an attacks at C.

Most programmers who attack C have seen the consequences of a memory-unsafe, type-unsafe language dominating systems programming throughout the years. I remember the early 2000, and the period where "buffer overflow exploits" were an entire industry. I also remember the strange allure of C and C++ in beginner programmer circles. The logic goes something like this: "they are powerful languages, all serious software is using them, so they must be the best". The next step is to go on to start a new generation of unsafe and vulnerable programs and libraries, and so on.

Now that we have the tools and technology to do better, we should really be making some efforts to push them. The goal isn't change right now, but starting the process early seems like a good idea.
Link to the Slack "inviter" if anyone is interested: http://www.perfect.ly
You'd be terrified to know that some utilities will actually disable your AC or electric water heater remotely during periods of peak power usage if you've agreed to receive a discount for them to do so.

Signaling conservation requests isn't dystopian.
Client and protocol are open source. What more do you need?
Of course. That's part of the grey areas I mentioned.
Fault Tolerance doesn't come out of the box
"The EC's goal is to provide the police with a "swift and reliable" way to discover what users of encrypted apps have been communicating with others."

Uhm, I'm sorry, why only users of encrypted apps? What about people in cars? Isn't it about time police had a swift and reliable method to find out what car passengers say to each other? Do we really want to let terrorists and pedophiles use their cars as a safe haven, where they can say whatever they want, and the good guys are powerless to find out?

I also heard almost all terrorists and child molesters talk to others in their homes. There's many reports of terrorists getting together in someone's house to plot and exchange information. I think it's about time we gave the good guys the tools they need to find out what was said in a room. We wouldn't want to leave pedophiles and terrorists any safe havens, would we?

And don't worry about abuse - any time a police officer requires access to the recordings of microphones that will be mandatory in all cars and houses, a judge will have to approve the request, so the risk of abuse is minimal! Only privacy extremists would be against such common-sense precautions.
He did mention the grid and storage.
It is interesting to know that Bill Gates is still the world's richest. Thinking about how little I have directly spent with Microsoft is interesting.

I bought Windows 3.11 from a computer fair. I got Windows 95 from school (proper CD, not a pirate). I bought a computer that came with Windows 98 (and a lame Cyrix processor), got an XP licence from a case someone was throwing out, skipped Vista, bought Windows 7 Pro system builder from eBay (proper version, no pirate copy, I don't like pirating software). I then got a free upgrade to Windows 10.

Hardware, I think I bought an xbox 360 controller for the PC. I got given an old generation 1 xbox (since retired) and a load of games. Bought Office 2003 from eBay (proper version, OEM with hardware to satisfy licence) when Office 2007 was all the rage (so it was cheap). I think my brother once bought a Sidewinder joystick (had the footprint of a large dinosaur, such a big piece of hardware).

Then I used the Express editions of SQL Server (MSDE before that), Express editions of Visual Studio and now the Community as I am a Lone Ranger developer at home.

Oh and I bought a laptop that had Windows 10 on it so I guess they had a cut of its value.

So basically Microsoft have had very little direct money from me, despite basically being responsible for my employment for the last 15 years (I write apps under Windows).

I have spent more money with Parallels Inc as they force me to "upgrade" every year (every other year if I can help it) despite Apple introducing a new virtualisation layer a couple of releases ago.

So thanks Bill.
Worth noting that helmets are mandatory in the UK, but optional in parts of the USA (as a Brit, I found this astonishing, the first time I visited the USA).
Millennials are obsessed with side hustles because they’re all we’ve got
Reproducible builds, and deploying my own server.
Audio book piracy is gonna skyrocket when you can generate a pleasant track from text.
Well when I started programming Windows 3.1 it was with Microsoft C 7 and the help of the Petzold book. At that time it seemed to be the main way of writing Windows programs, at least until Visual Basic 3 came out anyway. It wasn't just another programming language in the Windows world. It was the programming language.
Statically Typed Client-Server Communication with F#: Proof of Concept
In short, if anything in the code is patented, the license also grants licenses for those patents.
My question is how a source audit addresses the server trust issue...
I wonder how much their content providers moving over to platforms like Medium hurt their business? Aside from the fact so few people are clicking on traditional display ads anymore.

We really shouldn't be looking down on this business. They managed to outlive a TON of companies (10 years is great on the internet), and I'm sure provided livelihoods for a fair number of people both at Coudal and their partner blogs who they were monetizing. Kudos to them!
ActualVim: Sublime Text 3 input mode using Neovim
5 Best Ways to Increase User Engagement
> It's really easy to criticize.

Yes, that's the point of this discussion. We are not criticising some code for having one bug a decade that requires 24 steps to reproduce, we are criticising code for having numerous bugs that are easily preventable with existing technology. Its way easier than it should be.

I have no personal need for rewriting curl. Instead I am using libraries written in safer language. You are misaddressing my criticism. I am not criticising curl author for using C - just some of his arguments for doing so the way he does. They are not valid in my opinion. There might be reasons for distributing code as C source, there is no reason for networking library to be written in C directly.

> In language that is memory safe + supports all the platforms that curl support

There are languages safer than C that compile to C, supporting all platform C does. No luck is needed.
I dream of the biography of reference about John von Neumann
Thanks, glad you like it. Great for rented since you can take it with you when you move.
Even if these websites were legit, their traffic might be trash. If it's some sort of white supremacist website (the reason for restricting the # of websites), I am not sure that the sort of inbred white trash living in a swamp in Louisiana and consulting this website is a valuable customer base for Chase. Readers of wsj.com probably more so.
I'm starting to develop an instinctive "roll eyes up" reaction to whenever I see the expression "problematic" written unironically.

I'm all for better map projections, but there's zero need for the author's moral grandstanding in the article.
In case anyone is wondering what libertarian revisionism looks like, look above.
متخصصون فى نقل العفش بجدة 0535220955
It started with the Boston marathon bombing, four years ago. University of Washington
professor Kate Starbird was sifting through thousands of tweets sent in the aftermath
and noticed something strange.

“There was a significant volume of social-media traffic that blamed the Navy SEALs for
the bombing,” ...

Same thing after the mass shooting that killed nine at Umpqua Community College in Oregon:
a burst of social-media activity calling the massacre a fake, a stage play by “crisis
actors” for political purposes.

I have noticed that infowars.com, when I have checked, has aligned with the Russian narrative. I have observed it casually but it has been too noticeable to just ignore it.
I believe that making sync work with E2E bring either security issues or more burden on the user; I would like them in telegram, but I also like the "if you send this message you exactly the device it go to, not an old laptop i forgot in the office, just my phone". it is meant to be secure on a device level.
This video helped to grow my business from 15000$ to 80000$ in just three months
Statistics without calculus
I am a C# (mostly WPF) developer at work. Most of the applications I write communicate with an API written by another developer in PHP. As much as I dread PHP I learned to read his code(which is poorly documentation) and it has helped me learn quite a bit. Reading code that isn't yours opens your mind to a different style of thinking, it's very powerful; I would recommend it.