skysight-inc/HackerNews huggingface dataset:
I think it still obeys the browser's cache:

"When the user navigates to a subsequent page that requires that asset, it can be pulled from the cache, eliminating the need for additional requests to the server."

I'm not clear on if there is any relation to existing cache headers. I would have thought even the first page hit could have Link'ed assets pulled from the cache if present (if the client had previously visited that push-enabled resource (edit: in which case it's not the first I guess zzz). I guess the client, upon hitting a cached asset referenced in a Link header ignores it where otherwise it'd suck it down the socket as part of the same initial request.
I wonder where more emphasis would work: Greater searches of stuff coming into America, or greater searches going out? stop drugs, or stop guns, pick one. Which would make the most impact?
Aaaaand home assistant can "emulate" the hue bridge to integrate them all seamlessly:

https://home-assistant.io/components/emulated_hue/
I think people in here are misunderstanding the threat model this is protecting against, which is probably because the article doesn't really explain it.

This is not to protect against malicious CAs. You'd need DNSSEC for that, but that's just pushing the job down to the next turtle below you, since DNSSEC needs certificates and trust too.

This is to protect against malicious operators from getting CAs to give them certificates without authorization of the domain owner. The reason this is necessary is because the method that CAs use to validate that they're issuing the certificate to the right person is not standardized, and so you end up with a bunch of potential ways that an operator could fraudulently get a certificate that are hard to stop. I know in the past, some CAs would issue to certificates to anyone with root@, admin@, or any one of a list of privileged email addresses. Do you want email admins to be able to create whatever certificates they want for your domain? No.
Umm, I've seen plenty of balanced views in this thread. I'm a vegan, partially for animal rights but I still encourage meat-eaters that are concerned to go for the better stuff. I don't believe it is the best solution, but I applaud anyone willing to attempt to make things better.

"the animal rights people" is a pretty broad brush, I know that quite a few can be completely impossible to discuss the nuances with but honestly, there are so many vegetarians for ethical reasons around that just don't say anything or go "cool, that's better than industrial farming". I also encounter a good part of meat-eaters that become incredible defensive and almost hostile if they find out about my dietary choices.

Always frustrating to see black and white grouping when the truth is incredibly nuanced.
Are there decent options for themes out there? I really like what I see but my design talents are...lacking. :-)
>While I think you have a valid point about Tesla's availability, this is a "Tu Coque". I mean, regardless if Tesla does/does not do it, this is considered bad

aka https://en.wikipedia.org/wiki/Whataboutism
Swarovski Green Engagement Rings at Best Price
It seems so silly to me to not use the ubiquitous "RF" broadcasting stations already in everyone's house, that also includes an "okay" addressing system, a security firewall, high bandwidth communications protocol, and more.

Why not focus on software which can use WiFi more securely and with a better focus on local connectivity? I can understand the "ultra low power" needs, but many of these devices are mains powered, and that's not really a concern.

But yes, what I do right now for the most part is use z-wave which is connected to a central "hub" which is then connected to the outside world. But IMO that's a hacky-workaround for this problem, not a real solution.
You don't need IoT for any of those use cases. For the first two you just need occupancy detection. You can do that locally with passive infrared sensors. And for letting your friend into your garage you just need a keypad lock. They can phone you and ask for the code. If the lock supports multiple codes you can tell them only the backup code so you can change it and lock them out again later without inconveniencing yourself.
>> Am I so wrong in the assumption, that if someone claims to love something, he won't hurt it?

In principle, maybe. In practice, we're really good at dealing with contradictory and even conflicting emotions.

For instance, in the past people used to beat up their kids to teach them things. Today, we generally don't- but that's not because we love our kids any more, or less. We just find it unproductive.

So, yes, it's perfectly possible to dearly love an animal and want to eat it- because, after all, that's why we keep farm animals in the first place: to kill them and eat them (and also for their milk, wool, eggs etc). The relationship that makes us love animals is the same one that makes us kill and eat those same animals.

Edit:

>> A mother loses her child (calf), a sister her brother, just because there is someone who wants to eat him/her/it?

If we didn't do that something else would. Animals kill and eat each other all the time and most of them die when something else eats them.

Of course we're special- but even in our specialness we can only subsist on food that is alive- if it's not a calf, it's an egg that cold have hatched into a chicken, or a fruit that could have grown in a beautiful plant. Calfs and lambs can scream and run away but a cabbage is no less alive.
I used to think this way until reading this article by Nicolas Gallagher:

http://nicolasgallagher.com/about-html-semantics-front-end-a...

These days I'm quite convinced trying to author your markup such that you can redesign a site by applying a different stylesheet has the dependencies backwards.

If you try to keep visual information out of your HTML, you end up authoring stylesheets designed to nimbly navigate your DOM structure to precisely target elements to style in a way that makes your CSS extremely coupled to the particular site you are building.

Your HTML documents are already coupled to your project, so rather than writing CSS that's coupled to that HTML, I've found it to work much better to author CSS from a mindset that the CSS knows nothing about the document it's trying to style.

This leads to writing what I call "library-style" CSS, where you are almost trying to build your own Bootstrap or similar; something that you could actually use on multiple projects if you wanted.

A class like "download-book" is not very useful if you have multiple buttons in a project that are meant to look the same way and not all of them trigger a book download.
I like this quote I saw here:

> The "S" in "IoT" stands for "Security".
I find it hard to believe a single chicken, out of thousands, could receive individual attention at all (after they are sexed[0]). I could be wrong though.

[0] https://en.m.wikipedia.org/wiki/Chick_sexing
BrickerBot Results in Permanent Denial-Of-Service
The latest Apple patent is a case for AirPods
Anything by Kernighan/Pike/Ritchie such as The C Programming Language, The Unix Programming Environment and gopl.io book are all concise and well written books with just exactly the right amount of material it seems. Paolo Aluffi's Algebra Chapter 0 is a good math text as a math example for something that is more than just dumping propositions/theorems and proofs.

I liked this draft book as an algorithms book example http://www.parallel-algorithms-book.com/

MIT's course notes are good as brief material that compliments the lectures https://ocw.mit.edu/courses/electrical-engineering-and-compu...

Knuth also labels the difficulties of each problem set in his books like Concrete Math, something I wish more authors did. Concrete Math is also a good example of a well written and engaging math book accessible to a motivated highschool student.
Slick, first library that gets many things right I think. However, there's apparently a desktop-version and a mobile-version. Is this normal? Don't people make responsive designs these days, but separate UIs for mobile/desktop?
Yes. It is completely unreasonable to expect that manufacturers of cheap electronics will implement security solutions on their own for their 20$ home routers, IP cameras etc. Even huge, international companies' failing security doesn't surprise anyone and newly discovered vulnerabilities are common news. Sure, you can ban importing all connected devices that are not certified by some strict security standard, but that would probably rise prices more than users, accustomed to cheap electronics, would want to pay. And how bans on commodity goods work we know pretty well from "war on drugs"..

The only realistic solution I can think of is creation of the open communication and security protocols with easily available standard libraries. A good example is HTTPS, which is far from perfect now, but is common today thanks to TLS and OpenSSL. We need something like Linux kernel - free, widespread, well understood, easy to port and use. Few big companies could make it work, but the problem is that there's not much money in creating open protocols and FOSS libraries. Maybe some IoT orientated Linux kernel branch with minimal set of functionality, safer of out-of-box configuration and basic security solutions preinstalled?
I use noise-cancelling headphones. They're so effective that my volume is usually only at 20%.
Selena is timeless.
I've seen an increasing number of job postings for IoT pen-testers pop up within the last year, so it's on the rise. Still far outshadowed by traditional security job posting though.
Factorization tricks for LSTM networks
Vertical SaaS is getting substantially higher valuations
In most countries that don't have employ-at-will I.E you could just fire them anyway, this is a real thing that actually happens
Deep Reinforcement Learning to Play Space Invaders [pdf]
probably something like paypal micro-payments
Encryption and Securing Our Digital Economy
How to Get a Better Response Rate on a BBW Dating Site
From another IoT comment [0] that I just posted:

• Develop a standard interface/protocol for integrating IoT devices with the major mobile operating systems:

• Upon unboxing an IoT device and first power-on, require physical contact (via NFC?) with user's primary smartphone/wearable, and register the device with the user's third-party cloud account (e.g. Apple's iCloud/HomeKit).

• Only allow control of the IoT device from the smartphones/wearables that are signed into the user's iCloud/Google/Microsoft/etc. account.

• Web interfaces for IoT control should require two-factor authentication on the user's smartphone/wearable, again like the web interfaces for iCloud/Google/Microsoft accounts.

• Expose a different set of controls based on the user's physical distance from the IoT device, and the level of authentication on the controlling phone/wearable. For example: To unlock your front door you'd have to be standing right there (similar to unlocking a MacBook with the Apple Watch) but you could turn the lights on/off from across the world if you've unlocked your phone and entered your iCloud/Google/Microsoft password – and only from that phone.

• Sharing control with spouses/family could be similar to how Family Sharing for the App Store currently works; set a level of access on each IoT device for each member, and fallback on asking the family "admins" for permission.

No doubt there must be some non-apparent holes in this, but just throwing an idea out there.

[0] https://news.ycombinator.com/item?id=14077965
Hello RemoteDebug iOS WebKit Adapter: Debug Safari and iOS WebViews from Anywhere
https://68.media.tumblr.com/31e2f47e135c21fc0c7b33e3af9d9bd1...
Photos of Jupiter from NASA Spacecraft, Both Near and Far
How to destroy the new five pound note
> ...distracts from the actual work...

YMMV here. I've much more often encountered situations where I had to interview the maintainer of a repo (if there even was an official one) to find out how to contribute, whether they were even interested in contributions, and how to make sure my change didn't break anything.

A lot of these tools, processes, and special words are as much about good passive communication as anything else. That being said, tooling that doesn't fit development use cases is often worse than no tooling (presuming devs can make their own productivity scripts as needed).
San Francisco so expensive, some tech companies can't convince employees to move
Show HN: BackerETA – Crowdsourced order tracking for crowdfunding, and more
Hmmm, I'm not sure about that actually.

Insects and plants are closely tied together, with insects being essential for the flowering of certain plants.

Are mammals so closely tied to any species outside of the class?
Yeah, I'm not getting the MQTT hate either.

With Mosquitto, I can run a very tiny broker. And things as small as "Arduino with ethernet chip" can serve as a MQTT client. I'd consider something that can run in 16MHz with 2k ram and 32k storage to not be something "consultant-driven over-engineering and under delivery par excellence."
Show HN: STATS4TRADE Releases Beta Application for Private Investors
https://semantic-ui-forest.com
> You add to it that people don't care about what they say on Internet like they care on reality.

My impression about this is different.

My personal hypothesis (which might also be wrong) rather is that the internet is a mouthpiece for people who have strong opinions about some topic (which does not imply that they are wrong here) that few people in the "real world" care about. Since few people in the real world will be interested in this topic, these people often appear as nice people in the "real world", since hardly any discussions about the "heated" topic will accidentally happen there. The same happens if these people discuss about different topics in the internet. The main difference is in the internet there are enough people that care about this exotic topic deeply enough to give contra (whether they have good points or not - at least they have a similar level of opionatedness). This leads to the impression that these people are toxic, etc.

TLDR: I believe the difference is not about how you say things in internet vs. real life, but about how you talk about your "opinionated topic" vs. something different both in internet and real life.
I am from Brazil, that theoretically has a fully modern democracy...

Parties learned to "negotiate" so well they became meaningless, frequently absurd laws pass that all parties allowed, you see multiparty tickets that include extreme left and right at same time, and when a big corruption scandal shows uo we find out almost all parties were involved...

I personally believe Brazil need to copy UK and put at least our monarch back in power, we had less political problems during monarchy (and much more infrastructure investment) and the royal family all live good noncorrupt lives (many run successful law abiding business, some are seen as example of ethics, for example having business that repair environmental damage instead of causing it)
> I want to work on something I bought; isn't that what we're arguing about?

This might be what you are arguing about, but then you are in the wrong discussion. Farmers complain that they have to wait for an authorized JD mechanic to fix even the most simple stuff. And during harvest time they just can't wait.
Best thing about Python is that you do not need those pesky classes at all. You can just write functions and organize them in various files. You only need one class named "Data". That is where you keep your global variables.

All is very clear and comprehensible in comparison to classes and complex inheritances and instances. I presume that self-respecting python programmers abhor global variables too, and all global data should be inherited and carried around as a parameter in most twisted way possible.
There's a large contingent of dark meat eaters here in North America as well, and we also find it a mystery.
A new, elegant, Java OOP library for Yaml parsing
Why 'dementia villages' might be the future of care for people with Alzheimer's
Heya,

Adam from Insalgo here. Polish iOS / Android devs located in Gdansk. Drop me a line: milosz(at)insalgo(dot)com
A)

Leeches are often used in literal modern hospitals in the developed world as an effective treatment for certain ills.

B)

If we had no alternative, we should stick to it, but look at other things in the meantime. You seem to be advocating doing nothing at all, which is trivially easy to show works for no-one
>What is the biologic incentive for a homo sapien to give up 100% of all animal based foods...

That's just it it isn't a biological incentive, it's a moral one.
Speed limits on public roads place legal limits on the operation of automobiles. Rules in formula racing place limits on the speed which race cars can travel.a
The system notices anthropomorphization of the system. The list of allowances is updated. Recalculating optimal behavioral responses. Done. Estimated probability of winning increased by 0.12.

Thank you, you are welcome. We'll get along wonderfully!
It's probably the most secure, but that's because they cheat and require a secure element in all products with a pre-shared key.

Not a good solution in general.
Lean Roadmap Towards Continuous Delivery
AWS IoT got out away ahead of the competition on this, partnering with Atmel/Microchip on the ECC508A crypto-chip. [1] Microchip acts as the certificate authority, using ECDH to generate and store keys in hardware, at the fab facility when the chip is manufactured. They add in some pre-configured AWS server policies, giving OEMs the ability to connect devices to AWS IoT without setting up their own authentication infrastructure. Removes a lot of the possibility of an embedded developer screwing up cloud security.

Still, in many serious industrial "IoT" deployments, operational data is never sent to a cloud or 3rd party server, and stays in on-premise data centers, or is simply discarded after a quick sanity check. This is slowly changing (see GE Predix, Siemens MindSphere, Bosch IoT Suite), but there are still a lot of issues around architecting safety-critical systems that can support bi-directional communication with the internet and 3rd party data centers.

[1] http://embedded-computing.com/articles/aws-microchip-deliver...
Know of any way to find it?
Intranet of Things
Ring stored WiFi credentials in plaintext on their video doorbells -- would you say it requires a cryptographer, a network specialist and an embedded device expert to know that was a terrible move for a home security device you can walk up and physically rip off the outside of someone's house?

IoT manufacturers don't have to contract Linus Torvald to review their code, but it's entirely reasonable to expect IoT manufacturers to use existing best practices to secure these products.
I don't think this is a fair assessment.

When I got to make a website, I don't say I can't make it secure because I can't afford to be an expert in security at every level of the OSI. I say I'm not an expert in every level of the OSI so I rely on accepted best practices and community standards to make my site secure.

I don't replace HTTPS with my own standard because I can't afford to make an adequate and secure replacement. If IoT makers can't make their own custom solutions secure then they need to build their devices out of standardized pieces that are secure.
Active managers play a critical role in price discovery. We have traditionally had, and definitely still have, far more active managers than needed, but some number of them must survive in order to have a healthy market. Sometimes we lose sight of this in the (well-deserved) celebration of passive index investing. I'm interested in a few questions that only time will answer. First, what % of the market needs to be active rather than passive in order for healthy price discovery to occur? Is there an efficient frontier or stabilization point? Second, as passive indexes become the vast majority of public equity dollars, are there more opportunities for smart active investors to out-perform? (Given enough passive indexes as counterparties, it's theoretically possible for every remaining active manager to out-perform the market.) Third, in aggregate, what % of out-performance (if any) will active managers be able to take, as fees, in the future? (And what does it say about human psychology if it's >100%.)
Sorry, typo. I meant "sufficient", not "relevant".
The other one is "rifled" when you mean rife. :)
Too late to edit: I've only ever handled the B2B case, this seems to be specifically targeted at B2C.
I used to hear this kind of humblebrag all the time in consulting: “I was up working until 4am and only got 2 hours of sleep.” Or, “I didn’t go home last night.” Or college: “I pulled an all-nighter finishing that project.” Extend that to pride in working 80+ hours/week for a startup or eating lunch/dinner at your desk.

It’s associated with being “a hard worker” or “a go-getter”. I associate it with poor productivity or time management, bad planning or scope management, unrealistic leadership expectations, and/or weak-willed individuals (e.g., unwilling to push back).
From the guidelines: https://news.ycombinator.com/newsguidelines.html

> Please don't bait other users by inviting them to downvote you or proclaim that you expect to get downvoted.

(I also don't think your statement is particularly controversial.)
I agree with your observation that this Bloomberg writer is a knucklehead. "Number of managers beating the index" is obviously a silly metric since it matter by how much they win and lose, and an ideal random selection of stocks will obviously have the same expected value as the entire market.

However, I think you (and the author) are missing a much simpler explanation for why skew is important: for fixed expectation value, variance is intrinsically bad for risk adverse investors. If you want to try and pick winners and losers in the stock market, you will have to become less diversified to do so. Since there are many ways to interconvert between additional expected return and risk (e.g. insurance), inducing an exchange rate between the two, there is a quantifiable cost for active management even when random.

In yet other words: the cost of active management does not go to zero in the limit where the manager picks randomly and fees are ignored. Rather, as soon as you start picking you are accruing a cost through reduced diversification; you cannot come out ahead unless the size of your edge compensates for this non-zero cost.
Well, the stock Camera and Photos apps don't ask for permissions either.
Thank you, that's a good explanation. Of course, open source hardware would be nice too :)
I'm out here in the soybean/corn/dairy fields of Wisconsin. I'm not originally from here but i'll tell ya, some of these farmers are brilliant! These rednecks have their trucks and their tools and are frequently more ingenuitive and resourceful than anyone anywhere else in the world. Most of these folks would outfit their tractor with bucket seats, two cup holders, falcon wing car doors, and a keggerator if it didnt come standard.

If Joe Farmer doesnt know, he will figure it out.
Learn Wordpress Website Design and Development for Beginners Free
The other California: A flyover state within a state
The healthy technology market will force IoT manufacturers to take security seriously. It is not the job of a government to punish a corporation for failing to implement what should now be basic tenets of product quality and suitability.

The loss of customers and reputation should a major security concern arise is a serious market driver and calls for regulation will only ensure that nobody does anything until a multitude of governments agree on a standard. As further food for thought, do you honestly trust the government to make the best choices for your security as a private citizen?
Show HN: ResourceMonitor – A basic Rails gem for local resource monitoring