skysight-inc/HackerNews huggingface dataset:
> Many seem to criticize this adaptation for not exploring the same themes or reaching the same conclusions as the original

It didn't need do that. It could've told a totally different story and been set in Rio and it would've been fine if the script wasn't in Hollywood formula 101. I saw this movie before and it was called Robocop. And the dialogue was beyond awful. Arrival took a chance and assumed that the audience wasn't intellectually sterile. Pacific Rim (which I love btw) and its intentionally bad plot was better.

The whitewashing bothers me not so much that the Major needed to be Asian per se. It's that Hollywood just doesn't think an asian person can be a lead in a movie that doesn't have kung fu in it.
The default telemetry level is "Enhanced" though, so it's not what they're collecting by default.

It's just evasive on Microsoft's part.
Of course, there are multiple ways to optimize it (like storing stuff at a CDN), but I'm pretty sure 95% of the people do not precompress their assets.
> in CA

The .ca TLD. It does not mean what you think it means.

This town is in Ontario, Canada.
Why couldn't microsoft offer a Windows 10 "developer edition" allowing telemetry to be set to "security"? Make it cost $200 more, so typical users won't buy it, but why not make it available at all?
On https://status.digitalocean.com/ they report everything working and suggest to open a ticket, but https://cloud.digitalocean.com/support is down, too.
> If you decide to make it impossible to "fire" customers, what does that translate in terms of who has what obligations?

Are you actually defending the practice of a company damaging or destroying private property, remotely, in retribution for a bad review?
Darn it! You got me :-)

What's most interesting to me is that if the human is picking the random number, there are heuristics you could use to guess it. A birthday, for example. A favorite number perhaps. But perfect play is easy and requires brute force search.
It was more of a rhetorical question ;)
If I haven't broken a build in any given day you know I haven't written any code that day.
You can do that by using Google clouds https load balancer.
That is what people think they want when they do not understand the tradeoffs involved, typically.
Does the intuition hold if violations are sufficiently rare, large, etc?
There are browser extensions that will beautify source code:

https://chrome.google.com/webstore/detail/javascript-and-css...
Stripping out comments would be one, but eventually remove all useless code and optimizing it using tools like Google Closure Compiler is way more effective in most websites that use a single bundle for everything.
Is there a traffic pattern I can block on my home network that will disable telemetry but won't mess with updates?
The page gives solid rationale against PBKDF2:

Although PBKDF2 is more widely available than bcrypt or scrypt, it doesn't offer the GPU resistance that we need from a password hashing function. If you must use PBKDF2, make sure you use at least 100,000 iterations and a SHA2 family hash function.

To reiterate: PBKDF2 can still be secure. It's the least secure of the acceptable password hashing algorithms on this page, so we aren't going to provide any example code.
Facebook addresses revenge porn with tech to prevent re-sharing intimate images
"Telemetry gives users a voice"

Guess what mine is saying...
I'm glad they've gone back to a relatively clean and legible environment design and aesthetic. Some of the environments in Doom 2016 are really hard to look at, and consequently hard to play competitively because they devolve into a mist of brown/red details that obscure both the level geometry and other players.
The current alternative is to plan your day and drive family members around (or get more cars, and car insurance up here is both mandatory and quite expensive, at several hundred dollars per month)

Buses are a great transportation solution for metropolitan areas, but here you're looking at a half million dollar bill per bus line per year for a rural town of 36k people. There's really no economic benefit to running such an expensive public service. Subsidizing a taxi-oriented system makes a lot more sense here.
Now that science is backing benefits from fasting, and that bone soup are recommended for long fasts (> 48 hours), they should advertise towards that market!
Not even a drink, but: reading The Lion, the Witch and the Wardrobe as a child led me down a similar path with regard to Turkish Delight.
Well, for the, ahem, people who can't see the humor... Trying to prove the Reimann Hypothesis is like trying to talk to God.

Now, it may be possible, but for those who have tried similar tasks - for instance, "Fermat's Last Theorem", often it has resulted in madness before success.

So, if you can see inside the joke, it is actually an allegory:

"A story, poem, or picture that can be interpreted to reveal a hidden meaning, typically a moral or political one."

The intention is to perhaps provide the following sentiment, "The very best of luck, but it might bite you in the ass"

As for whether humor is allowed, well I'm sorry but just as I believe that LGBT is acceptable, so is someone with who can make a few people laugh.
Quick sites:

* PyCon Crypto 101 - https://www.crypto101.io/ (and if you use Python, please use Cryptography library for encryption/decryption please, Python built-in provides sha and hmac already though, and please adopt your framework's security implementation whenever possible).

* Mozilla Web Security Guidelines - https://wiki.mozilla.org/Security/Guidelines/Web_Security

* Mozilla Secure Coding Guideline - https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines

* Mozilla Server Side TLS - https://wiki.mozilla.org/Security/Server_Side_TLS

* Mozilla Intro to Cryptography (slide: https://april.github.io/crypto-presentation video: https://www.youtube.com/watch?v=bg32spD2mB0)

* Mozilla Web wiki - https://developer.mozilla.org/en-US/docs/Web (understand CORS, Cookies, CSP, etc)

* Google's course on security - https://google-gruyere.appspot.com/ (original course page has been taken down by Google already)

Book recommendations:

* The Web Application Hacker's Handbook

* The Tangled Web: A Guide to Securing Modern Web Applications (written by the famous Michał Zalewski working at Google, and lately known for developing the American Fuzzy Loop AFL which has been used for uncovering many new CVE bugs).

* Hacking: The Next Generation

* Securing DevOps (to be released soon)

Publications:

* USENIX - https://www.usenix.org/ (tons of free high quality conference talks, I like USENIX over ACM)

* Real World Crypto

Getting real

* Go find bug bounty program out there, many well-written posts how one discovered bugs

* Follow a bunch of security engineers / security-minded folks on Twitter (e.g. @matthew_d_green would be a good start)

OWASP is a great reference, you read it as an index page. But like others have pointed out, the Wiki is often outdated, but concepts almost always remain the same. Use multiple resources before implementing a solution, and never just copy and paste solution posted by others on Stackoverflow. Sorry for so many Mozilla stuff definitely there's some bias from me but I trust folks running the sec team there.
Ask HN: Is there any investment in pilotless planes?
I am referring to big commercial planes carrying passengers (or cargo), not drones.

There is so much hype on driverless cars, but I would imagine that is technologically simpler to build and deploy a pilotless plane. Comparing to a car on a road, the traffic and encounters with other vehicles are much more predictable (and avoided), terrain is much more known and permanent, and there is much more external monitoring (from the ground).

It may piloted remotely or even self-piloted by a computer.

Is there anything I am not aware of? Being it around technical challenges I did not antecipate or serious investments already happening that I don't know about?
I would be very interested to know if anyone is using that in practice. It seems like a promising concept.
Gottlieb at the FDA
Wasn't Quake Live just a recompiled Q3:TA anyway?
Ask HN: Startup for Startups
Looking for thoughts beyond what startups feel they need (and would pay for) that doesn't currently exist.

If you post, please explain "who needs what and why" and how you currently solve the problem.

Have my own thoughts, which I'm happy to share, but really interested in what everyone thinks needs to be done to make it easier for startups to find success.
Public peer services can handle the availability problem
Making Image Maps F.U.N
Python List Comprehensions: A step-by-step video tutorial
You could build an app on top of the Big RSS data channel on Satori. Just have it filter all RSS feeds to surface only what you want to read by subject, focus, etc.
Ask HN: What makes a good place to work?
For some time I've wondered what makes a place of employment more than just a sweat-to-cash conversion machine, something you can enjoy. As a developer, I know I have my preferences, and I know my current colleagues more-or-less share them. But do others? Are there any universal developer-values that make one place more attractive than another? Besides fat stacks of cash of course.

Couple years ago on a whim I started studying for MBA, and now that it's drawing to a close, the school is asking me to do some research. I've decided to tackle this question - what makes a good place to work, for a software developer?

So I'd like to ask you to take five minutes of your time and help me - would you please fill out https://survey.mikoss.lv/ ? The diversity of HN crowd should make for some interesting data. Thank you in advance!
I don't disagree, but they have published a lot of papers about their networking research and implementation of things like like B4 and their SDN work [1]. Hopefully there's a paper on Espresso forthcoming, although the absence (as far as I can tell) of a paper on Andromeda alone means it might not be.

[1] https://research.google.com/pubs/Networking.html
You're right, Qt is available under LGPL 3.0 now.

https://www.qt.io/licensing-comparison/
I don't real equate smoking the same as gambling or hard drugs. Yes, they aren't good and you can lose a lot/all but they are a few $100s a month habits. Hard drug/gambling addictions will take all your money.

If don't believe me ask your self would you loan a smoker 10k?(probably depends on there credit/employement) how about a gambling/mlm addict? how about a heroin addict?
Please see my above comment. As for boring reading, beauty is in the eye of the beholder.

I realize this is a "Professional" forum for "Professional" "Computer Scientists", but if we can't take the piss out of ourselves, that is not "Humanity"
We're working to fix it, status page should reflect this soon.
Sadly it's really hard to convince corporate entities whose web products are used by other corporate entities that they don't still need to support IE8.

Even more sadly, sometimes they really do still need to support IE8...

Although actually I haven't had to do something for <IE10 for a while now. Woohoo!
It's called Enterprise.
I don't see how this could decentralize web applications though. Wouldn't each client have to be running the server software? Someone has to pay for that, too.
The occult writer Arthur Edward Waite - of Rider-Waite-Smith tarot fame - used to work for Horlick's, a fact for which he was much mocked by Aleister Crowley.
Tor Project doesn't like people pushing HD video through its relays, because that degrades performance for other users. Torrent clients are very good at saturating links.

This project is about hosting generally. But if it were used for HD video streaming, Tor Project would be just as unhappy.
Fast and Simple React Testing with Enzyme
Great article - the drink backstory is just a good segue into the discussion about globalization and how it's changing with China and India.

> "In fact, many of the areas that will generate the most growth in future are currently unfamiliar in the West, according to management consultancy McKinsey."

Given that more and more of the co's in YC's recent batches are exclusively India focused, I am definitely on board with the next big unicorn being born in India and China right now.
https://xkcd.com/163/
I think it starts with a codified culture. At least, that was the case when I was at Netflix.
In a sibling thread on that page:

cperciva 3548 days ago [-]

That is my startup idea. I don't want to take this
thread even more off-topic (if that's even possible),
but please feel free to contact me at the address in
that first post to explain why you think it is a bad
idea.

dhouston 3548 days ago [-]

we're in a similar space -- http://www.getdropbox.com
(and part of the yc summer 07 program) basically,
sync and backup done right (but for windows and os
x). i had the same frustrations as you with existing
solutions. let me know if it's something you're
interested in, or if you want to chat about it
sometime.

drew (at getdropbox.com)
That must just be a mac thing... cant recall seeing it in a native ui, only games. Although at least a few wm have it, most devs have the good sense not to use it, much like the blink flag of yore.
Huawei Honor 8 Pro Review and Specifications; Preorders Begin Today
I loved the first crypto course.

I have been enrolled in the crypto2 class for several years now. I hope they finally offer the course, but I have low hopes.
Looking forward to it! I hope they also publish a CPMA mod! <3 :)
The challenge in a globalized economy is that what may be a monopoly in the US is likely competing against several global corporations within a given industry. Leveraging anti-trust regulations against that dominant US player may limit its ability to compete with global rivals, leading to the demise of that company and the dominance of foreign corporations in the industry.

In the past, when the US economy was more isolated and the level of global competition was much lower than it is now, breaking up monopoly corps in the US wouldn't leave the resultant child corps vulnerable to foreign competition.
And then any site could check whether you've seen a particular image before just by including it and seeing how long it takes to load, yay!
Mexico's best method for relieving stress?
Yeah, I wasn't implying that you should have to "launch" anything by two months. Picking something small enough is important so you can say that part is "done". You can then iterate on v2 and keep building momentum or decide that it is too big or not interesting and start again with something else. I think the momentum of 2 hours a day is great but I think it has to have a goal. I think picking a goal that is 2 months out is a good size and will help you focus.
Maybe it was the right product, but the implementation was shoddy. We'll never know.
Huh? I was only just starting to get used to flexbox. Are CSS grids meant to be a replacement/alternative/addition to flexbox?
I'm currently working on a project for real-time server monitoring using websockets in python. Might have been a mistake to use Python for this sort of thing but regardless...

https://github.com/gmemstr/platypus/tree/tornado take a look if you want
If you train all of them on the same data, you will get similar answers. That doesn't mean that those answers will be more right than a less sure doctor.
"Start Small, Stay Small: A Developers guide to launching a startup" by Rob Walling.

really got me thinking about best ways (ie most time efficient + value) to vet an idea before lifting a finger building.
The Future of Acquia Cloud
Sure it has. For example, 42 is more likely than 48884566544542789. People play rock-paper-scissors competitively and good players win more often than a pure chance would imply.
FYI I think you're getting downvoted because NIST is known to have recommended a pseudo-random number generation algorithm that is believed to have been intentionally designed with a backdoor [1], presumably by some US 3 letter agency.

OWASP seems like a decent source for learning about security topics at a high level (particularly web app security).

[1]http://dualec.org/
What if the culture isn't like that to begin with?
“Strong pairwise relationships” encourage cooperation
Now and since decades ago also, see https://en.wikipedia.org/wiki/Hilbert%E2%80%93P%C3%B3lya_con...
Not sure if it was the "Beautifull", but it doesn't need two 'L's
I use DuckDuckGo, an ad blocker, disable JavaScript by default, and avoid services like Facebook. I've worked in online advertising. I understand what they can track, and I don't want to be a part of it. It's as simple as that.

Now I have to pay for a VPN so my own flipping ISP doesn't sell my data to advertisers even though I'm already paying over $100 per month for the service. I have to stop writing now, because my brain is filling up with expletives, and I fear I'm about to become incoherently angry.
> In the live action movie, she's the best solely because of the unique technology that she's given. She doesn't see herself even as having the ability for self-improvement.

Is that not how it's supposed to be?

I haven't seen any of the other works or the new live action movie, so perhaps this was retconned. But I did watch the 1995 original just last week.

In the original film, she talks and acts just as you describe -- that she's "the best" because of "this body", which she doesn't really consider hers. She seems totally aloof about much of the rote mastery she performs, and talks about her physical form as though it was just issued out like procedure, similar to the way a police unit might hand out badges and guns.
Uber is a broker.

Uber can't guarantee service.
The original from tqbf: https://gist.github.com/tqbf/be58d2d39690c3b366ad

It's definitely completely relevant today. Find out what you want to do and check that list.

A few things I would update:

* password handling -> Scrypt or Argon2

* Client-server application security -> TLS or Noise

* Hashing/HMAC algorithm -> Blake2/prefix-MAC or KangarooTwelve/KMAC

* Fingerprint -> TupleHash

* key derivation -> HKDF or SHAKE or BLAKE2X

And of course for each of these items, if a NaCL/libsodium solution already exist, just use it.
I need some service that will do all the government bureaucracy for me and let me just focus on the product.
Reddit is known for it's Elon Musk fanboyism, and at least the Tesla subreddit where heavily botting.
100% agree. it feels like its lost everything that made the show great. theres absolutely no illusion anymore that these guys are fixing or modding these cars themselves, they seem to have no investment in the cars (remember richards car Oliver that he actually bought and took home from the Botswana special?)

It barely seems like they are even interested in cars anymore, everything felt overrehearsed and written, even the little quippy jokes to each other felt like they were done multiple time for extra takes.

Im not sure what exactly made TopGear so special, but it seem to me that whatever it was has been lost. maybe the guys are just too old or too rich to put in the effort they used to.
That does happen. It's called a job.

Someone asking this question is trying to start a business; not just looking for work as an engineer.
From a quick skim:

There is still no "stop sending my personal information to Microsoft" switch, but Microsoft has published a list of examples of what data the "telemetry" subsystems collect.

There are other Windows 10 subsystems (cortana, start menu, etc) that silently collect data, and they are not covered by the list the article links to.
Beware of keeping notes without properly escaping them. :)
That's how cloud services work. If you buy a cloud service, then F up with the cloud provider, your cloud device is worthless.

And there's really no problem with it, since you can get your money back. You don't lose any money.

> are you affiliated with Garadget in any way?

Let's say it's true. Would I say it, after going so far of somehow getting a 2843 days old HN account for it? Or let's say I'm not. Why would I even bother to answer to anyone but a moderator (who would probably send me an email in that case)? So, what's your point? Trying to discredit a discussion partner because you run out of arguments?
Probably (until they change the telemetry traffic pattern). I don't know what it is.

Why engage in their game and try to whack-a-mole their software, if you have a choice.

I admit, for some, there is no alternative. And that's why there's the outrage.
Enhanced is being removed. Only full and basic will exist. This is in the linked article.
At my day job, I'm working on a project moving retirement and pension data out of a 30+ year old mainframe system into a replacement system that is still being built in .NET/Angular.

As a side project, I'm working on building a class to teach people ETL using whatever data integration tool we choose (currently Talend, but want to keep it agnostic). It's meant to be tailored to complete newbies as well as people coming from other backgrounds (software, BI, etc.) as part of a bootcamp.

Note that I'm a full stack dev. who got pulled into the data world as I've done so much of it, and am currently interested in bridging the gap.
Not anymore. You can disable most of it but not all of it, and only via Group Policy, which any Windows admin here will know only works maybe 70% of the time at best.
How to Prepare a Career for AI-Driven Automation
When the subject is CSS, dead code removal is a way more complex problem, and only possible if your usage falls within certain constraints. Best bet is a component system with scopes styles that ensures you are only loading what is required.
Then I recommend you change this:

What works is using Tor.

to this:

What works is using [Whonix].
Q3 had lots of mods and different types of player run servers. Quake Live also got 'balance' changes that Q3 didn't get (like changes to LG/Rail damage)
I can see that viewpoint but there are successful businesses that draw the line in a different place than you do.
Yeah every client have to run the software or you use a proxy. If you have a site with many spreads you don't need a running instance. But if you have a an unknown site you would have to run a little server permanently.
Echoing same sentiments as drusepth - would love to provide feedback and test things out if helpful (michael (at) michaeldempsey(dot)me
That's such a common one! It's even worse that there's a chocolate bar in the UK called "Turkish Delight" which is nothing like the proper "Lokum". It's not very pleasant :)
Yes, there are many.
I'm a developer at Wingify, an A/B Testing tool and we are using this library I created a few days back. We have something called heatmaps - https://vwo.com/features/#heatmaps-clickmaps

To view a heatmap, user has to enter a URL, select date-range(Optional), and select the segmentation(eg. Direct, Referral, Location, Device, etc.)(optional).

A new tab is opened up with the specified URL each time on clicking the generate button.

So, let's say, you have to view heatmap of your site for:

1.The last week and only for those who live in US
2. The last week and only for those who uses Windows
3. The last month and who came directly to your site
4. The entire duration of the campaign and for all users

Now, for each configuration, there's an opened tab with the specified URL opened in it and the data for the requested segments and dates.

To pass on the data to and fro from one tab to another, and to track the status of all tabs(active/close), to notify other tabs when one gets closed, to notify all the children tabs when the opener tab gets closed, to send a message to a specific tab(eg. change segment) and to send a message to all tabs(eg. fetch data for new date applied), this library comes in handy. All this can be achieved with its simple API.

Hope you get the gist now.
Not a model for socialism or communism either. Poor Russia.
Are mere mortals even allowed to buy the Enterprise edition, quantity 1? Somehow, I doubt it.