skysight-inc/HackerNews huggingface dataset:
The way you take in consideration unknown unknowns is not by trying to think of every single possible thing.

It's actually quite the opposite.

You start from what you know and what you control. From that you can assess what you can mess up. The scale, the consequences and likelihood of it.

E.G: if you are using a very potent instable new explosive, you have much more unknown unknowns that if you are manipulating a well well know concentrated acid.

Now starting from here you know what the cost of what you don't know could be, and else can choose measures to mitigate that such as more research, bigger safety coefficient, additional staff, insurance, etc.

When we blame a company for not taking in consideration unknown unknowns, it usually means they just tried to build the very minimal legal requirement to put it on the market and make money. They may have known that it was risky, but they didn't bother.
DOM manipulation is going to be available at the WASM level in the future but it's going to be inefficient to do so just as it is inefficient to do image processing in JS right now. The only difference is that JS is the only viable option now if you want to do image processing on the web. WASM exists to solve this problem and complement JS. Hell, look at WASM's and JS's logo. They're two puzzle pieces that fit together.
And we do, since 1886 (and being kept more or less up to date, ever since)

https://en.wikipedia.org/wiki/Copyright#International_copyri...

Whether this means that everyone loses ... I'm not directly disagreeing with that either (I don't like copyright/intellectual property rights in their current form at all), but let's get the facts straight first :)
You can favorite the comment, it is a link once you go to the comment itself. Or, click here:

https://news.ycombinator.com/fave?id=14104733&auth=eadd5c4c6...
IMO it'd be a really smart move for Google to hire Vitaly to help with the launching of this feature and things around it. He has done a great job with PhantomJS.

Even an acquisition[1] of PhantomJS would totally make sense, then let him keep working on it but based on headless Chrome and with real resources.

[1] Careful how you spin it for this route, learn from TJ/Express https://medium.com/@tjholowaychuk/strongloop-express-40b8bcb...
"Even the furthest of the alt-right take their goal as the exact opposite: to break the control of the "cathedral" of left-globalist interests, who are embodied in the now-unified elites of academia, entertainment, high finance, big tech, wealthy industrialists, Democrats, journalists and media, and the unelected deep state."

Yet the alt-right and pretty much all right wing political ideologies require all to conform to its social values or else; especially on matters of bodily autonomy (LGBT issues, abortion, contraceptive use, plastic surgery, drug use, etc) the right wing of politics fears any freedom to choose. So, I'm not buying your thesis that the right wing wants to leave folks like me (transgender for example) alone.

"On the other hand, leftists - like the people who laud Atwood's book in your way - always want concentration of power because they're utopians who think that all you need to make a great society is more control given to the correct, enlightened technocrats (who always happen to be people resembling themselves in values, outlook, and opinions)."

I think you're confusing what passes for left wing politics in the US and Europe as historically left wing politics. For example, I don't think any legitimate leftist would support concentrations of power in the hands of managers considering the failure of the USSR and even several conglomerates in the West (GM comes to mind here). Tyranny of the managers is still tyranny even to a democratic socialist or to a mutualist (such as myself). So, I don't see where your POV even holds water when there's a plethora of contrary theories by leftist philosophers and political commentators on these matters. I think you need to expand your analysis beyond DailyKos vs National Review when it comes to politics.
I don't understand why these Telescreen ( ok, teleblock ) technologies don't require voice print access control as default. Voice biometric is older than this cloud voice NLP tech. Also, it's amazing to me that human psychology and the zeigeist requires everyone flip out over Google Glass, but always on microphones linked to the Company, totally fine. Tolerated, in fact, behind the point of inconvenience. The other incongruous observation I want to add is voice is taking off in the home, but people using voice typing and control in public isn't as accepted. There's an essay in this somewhere.
Samsung Galaxy C7 Pro:: Lean Is the New Mean – SuratNow
Use the group of people you talked to when you validated your idea before jumping on your MVP. At this stage you should have built something they want. Protect passord your website or app and send them an invite.

Unless you spent time building something without knowing if people want it...
The events in the article happened before the more famous and serious event.
As a foreigner, I've never really understood why places like universities in America are allowed to have their own police forces.

After all, it creates a conflict of interests - is my job to enforce the law, or to protect the organisation that pays my wages? It's important because if I find myself faced with a nonviolent but disruptive protest against my employer, and I have a truncheon in my hand, there's a risk my loyalty will drive me to do the wrong thing.

Here in the UK, universities' security guards are equivalent to mall cops and nightclub bouncers - they can deal with minor things, but their powers are limited. If someone needs to be arrested, they have to call the real police.
In less click-bait-y headlines: "A record 2.6% of American employees now go to their jobs without ever leaving their houses".

In more absurd headlines: "A record 2.6% of American employees now transfer to their jobs INSTANTANEOUSLY."
If there is a public roadmap, that would be nice to see.
>that failure to do so is childish.

In many areas of life I've found that culturally we have been trained to view anyone who sticks out as being childish regardless of the merit of their grievances. For example, if someone lies to me and signs me up for a contract I did not agree to (such as adding on extras that I didn't agree) and I react negatively, I'm seen as childish and they are seen as doing their job, even though they committed fraud. Demanding to see a contract and read it before I sign it is seen as being a disruption (because they lose business for an hour while I read the contract). I once refused to sign a statement saying a work order had been fulfilled because of wording saying that signing the work order as having been done counted as signing some other documents. I was viewed as the bad guy in the social situation because the serviceman would not be paid for the work (since I didn't sign the work order) even though it was their company who made it so that signing for the work order being complete also signed other legal documents I didn't want to agree to. I looked the part of the asshole, not the company.

The tin foil hat wearer in me wonders if our society has been pushed in this direction on purpose as it benefits faceless corporations.
Here's the medical view on depression: https://www.youtube.com/watch?v=NOAgplgTxfc

Robert Sapolsky is a genius. Listen to this lecture, please.
WaitChatter:  Learn a new language while you wait for IM replies
Clearly they are trained to avoid responding to argumentative people if possible. This makes sense to me. Not that I would ever fly United now.
As a fat person myself, yeah, if you get that far it's on you to make that clear in advance, not in the airline to measure your waist at the gate. That dude is just being an entitled dick.
The device keeps the secret in self contained memory and never exposes it. It is on the other side of a USB bus or in some cases NFC. There have been local attacks against old designs via side channel attacks etc, but never once a remote attack. The model makes that pretty hard. The phone is essentially zero knowledge. Android and iOS allow arbitrary execution of user installed code and are a massive attack surface and have piles of pubished vulnerabilities.

By moving secrets to very simple easy to reason about devices we get substantial reduction in attack surface.

Also I have helped deploy these to several dozen people, taught workshops etc. It is no harder than teaching people to use Google Authenticator, but lower attack surface.

Use U2F where you can and when you must fall back to TOTP at least you can promise an attacker does not get a free pass to genreate codes whenever they want which is something.
This problem was well demonstrated at my shop the other day. There's a lot of fear of open source here. We needed to run a simple FTP process. I said I'd write a short script.

"You've gotta be careful with those free tools though... Never know what will happen when they break. You can't get any support. Besides, we need logging and alerting too."

"Oh, $currentTool does logging and alerting?"

"Well, yes... But it's currently not working. We've got a ticket in to fix it."

That was months ago. Yesterday it broke and there was no alert. There's also still no logs.

Gotta be careful about that "open source" stuff though.
> Edit: If Google or Facebook added a paid subscription model, would you say:

They both do, they sell the ads and users data
Low level programmer here. This is great but the job market for low level programmers is very small. Recently, while interviewing, I described a thread safe, concurrent queue implementation to a hiring manager and he asked me -- "so how does this relate to big data and ML"?
B2B vs. B2C Product Management
We just recently drove from Pennsylvania to Florida, cost us about $150 in gas round trip (ignoring wear-and-tear on the car)

The cheapest we could have flown is about $200 per person (2 people), not to mention taxi/uber costs.

So for one person, it might be a wash, but for 2+ people its very much cheaper to drive.
> "We don't want to train someone," the interveiwer said

That attitude is pervasive, yet seldom expressed so clearly.
Wait... what? "To actually compile a Haskell program, we'll also need a patched version of GHC. See Building and Using GHC with HRC for more information."
Avoid the Middle-Man (Smart Contracts) – Computerphile
Are you aware that the unofficial docs site was created in 2014?

There's an official docs site as well now that's actually pretty good. I haven't referenced the unofficial docs in some time.

https://www.sublimetext.com/docs/3/
>How does that justify having a ridiculous 35 year sentence hanging over somebody for a terms of use violation?

It's arithmetic. The maximum sentences are what they are, and their sum is what it is. Justification doesn't come into it. But a 35 year sentence was never "hanging over him". He had good legal advice. He knew that he would not go to jail for 35 years.

>The case was far from clear cut,

He physically broke into one of their network closets while attempting to disguise his identity. If that doesn't count as unauthorized access, nothing does.

>Swartz's main concern was a lifetime criminal record and not being able to work

Which, as Kerr points out, makes it absolutely baffling that he did this in the first place. It's often glossed over, but it really was an enormously stupid thing to do. It's sad that he got himself into so much trouble by doing it, but I can't see how anyone else is to blame for that. Especially when he'd already had fair warning after the PACER incident.
What is the use case for headless Chrome?
Flow gets a good amount of the way there; it doesn't have quite the tooling of TypeScript but VSCode is actually able to bring a lot of that tooling to a Flow-typed codebase. Just yesterday I finished a major refactor that I'm not even sure I'd have attempted if we weren't using Flow. One giant action file feeding three insane reducers – yet I'm confident (with some testing) that it'll still work when I deploy today.
It's bound to happen. The percentage must be 0.something.
>It'd be great to have clinical trials and also qualified people (doctors, diabetic users etc.) to review it and compare with other devices

If there is no potential for harm (like with medications), throw it out there and see what happens. The market will validate the technology, one way or another.
Show HN: WhatsBook, archive your whatsApp chats in print using python and LaTeX
That doesn't seem like very useful advice.

Don't visit any of your friends who have bought it.

Don't go out in public.

Don't be a part of society.

Don't even SMS or email anyone since they might have one too.

The fight to reduce surveillance must happen even when the people who are fighting for privacy don't purchase the products that everyone else buys. If 99% of people have bought Google Home in the future, what good does it do to tell someone "hurr durr don't buy it?" No good at all.
I see.

That would still solve the problem the majority of times.
Correct, malloc and free (one or both) have non-deterministic running times. A gc, which is a malloc/free + a lot of extras, exacerbates the problem.
Those aren't necessary for the site to function so you can use some sort of content blocker and still access the material. You're talking about downloading megabytes of data just to go through the door for your website.
Man, I'm not sure if your home airport is not very good, you don't travel that often, or if you just have a higher base level of anxiety or what- but any drive over 4 hours and I'm on the lookout to see if I can fly there.

I frequently go from Portland to San Jose and back in the same day- I get meetings done and am home in time to put my kids to bed. I also just generally fly pretty frequently. I've got an Arab name and my dad comes from 'one of those countries'. I lived in that country for a few years as a child, and I've visited a few of 'those countries' in the last three or for years. I've literally not been hassled beyond the occasional extended screening XXXX on my boarding pass- like, maybe 2 times in the last three years. I have been bumped from a flight zero times in my entire life.

150 years go if you wanted to travel from California to Oregon you'd be going up the Applegate Trail and the TSA wouldn't even be top 10 annoyances along the way for travel. I say that semi in jest, nor am I endorsing the TSA in anyway shape or form. But frankly, if you're worried about getting bumped or hassled by the TSA I think you're worried about the wrong thing or you've got a very peaceful life that hasn't got many things to worry about.

I'm not saying commercial air travel isn't without its issues, it's generally just kind of annyoying to stand in lines, stand in more lines, then get crammed into a metal tube with my knees smashed against the seat in front me. It's just that the likelihood of some catastrophe (drunk, mental issues, etc.) that isn't self imposed is quite low.

My n=1 anecdote is just that, but I would wager I'm more likely to be hassled or be hit by airline failure given all of my variables AND the sheer number of flights I take compared to the average person. Yet hear am I saying the airlines and TSA aren't really THAT bad. Talk about playing devil's advocate.
I think they use GHC frontend to parse Haskell sources.
I'm sure you're aware of the name clash with the well-known (at least in my circles...) https://en.wikipedia.org/wiki/GNU_Mailman
low level programming knowledge is fundamental if you want to work with security research (software vulnerabilities, reverse engineering and exploits) and the job market at the moment is quite big.
ESCORT KATERINA – escorts| athens escorts |call girls
Ntshangase
MHAWINI
> If we stop the airlines from overselling then travelling will become a lot more expensive.

Given how cheap flying is by historical standards, I wouldn't mind that.
>I too had irrational thoughts of dying and running away

Those thoughts you listed are entirely rational. Only very, very few folks have irrational thoughts.
This is the original paper from 2013:
http://www.leafpetersen.com/leaf/publications/hs2013/hrc-pap...

GHC can use this intermediate code (a-la LLVM) to produce executable.
The idea is to create an intermediate code which is better optimised for their CPU.
"IMO the main point is valid -- the person was first to the seat and in general whoever gets into the seat first keeps it in case of a seat collision or a duplicate ticket."

I would be extremely annoyed if I were in the same situation as this flyer.

However, I'm not really sure what United is supposed to do here ... according to the article they had a mechanical problem with the original plane and the replacement plane had fewer first class seats ...

So somebody has to not fly in the first class seat.

Again, I would be very, very upset - but as an outsider looking in, it seems a bit childish and primitive to assume that whoever raced to the seat first gets to keep it, regardless of any other factors.

Again, United has to downgrade somebody to coach in this situation - it seems reasonable that they sort that downgrade to the lowest "status" passenger.
Let the market level the educational playing field
All of the VMs I've seen with hard real time guarantees also have more than an order of magnitude overall performance degradation over native.
That you cannot read the private key of.
Also, try growing a vegetable or two for yourself and don't use synthetic fertilizer or weed killers when doing so. Nothing can beat something you grew yourself! Growing herbs on a window sill is an easy way to start.
Usually we talk about exchanging freedom for safety and about how it is not a good deal. Maybe we should rethink are philosophy because this church believes it's so valuable that it would sell it's soul for it.
I am biased here, but that isn't really fair if the person performing the penetration test is any good. Speaking strictly of external/internal penetration tests here, an average penetration tester, the kind you are referencing, will smash around for a bit, find one path to domain admin / service accounts on your Unix-likes and call it a day. Write a report and say, "yeah, you got pwned".

A good penetration tester will look around a bit with their elevated privileges and maybe find some other things and write those up too.

A great penetration tester will own everything, document how they did it initially, use their elevated access to gain an advanced understanding of your environment, document this understanding, and find as many nooks and crannies as they can in their assessment time frame. They will document these issues realistically and label things like auditing and clearing bash_history as defense in depth.

But the parent also has a point. These little things are accelerators on a pen test. No they aren't going to be the thing that gets you owned.

To be fair I have seen plenty of pen testers that wield findings like this as a hammer making it seem very important while missing the forest (for the tree in front of them) so to speak. Also, the best question probably isn't "did we get hacked?" but "how badly are we hacked right now?", because you are certainly "hacked", just maybe not at a nuclear melt down level.
I agree that in some historical time, some of Murray's views might be considered orthodox. That doesn't make them orthodox today - nowadays he's subversive.
It's wonderful to see this released! There was so much great research going on here that overlapped with work we were doing in Manticore and that was going on in other optimizing compilers for statically typed high-level languages, but the details always required talking to Neal or Leaf.

I can't wait to dig in and finally learn more than I could at after-conference drinks :-)
How to reach top performing products in the market?
FrontRunners methodology can help you to compare the position of your product to the top performing products in a certain software category and join them later. What do you think about it?

https://growtheus.com/how-to-reach-top-performing-products-in-the-market/
Folks, please go see a therapist for CBT and just ignore the parent comment. I've read up on it and even been to one, and their advice is going to differ from the parent comment in most ways.
They may of compromised gmail, because gmail is logged in. They however won't get to the other 20 services that I have not recently logged into recently on the device that also use hardware tokens. They don't get the totp secret for my AWS account which I only log into from that device in emrgencies. Etc.

If someone gets remote access to your device it is a very bad day, but you -can- have damage control and a clear picture of what they had access to and what they did not.

If the attacker roots your phone and it has your unlocked password manager on it and google authenticator with all the 2fa secrets... well now they get the entire farm, including for services you don't have active cookies for.

Hardware tokens are not magic, but they are a very useful tool and if we combine enough tools we make the life of an attacker that much harder.
For context, here's a quote from an abstract elsewhere on the web:

> The Intel Labs Haskell Research Compiler uses GHC as a frontend, but provides a new whole-program optimizing backend by compiling the GHC intermediate representation to a relatively generic functional language compilation platform.

and later:

> For certain classes of programs, our platform provides substantial performance benefits over GHC alone, performing 2x faster than GHC with the LLVM backend on selected modern performance-oriented benchmarks; for other classes of programs, the benefits of GHC's tuned virtual machine continue to outweigh the benefits of more aggressive whole program optimization. Overall we achieve parity with GHC with the LLVM backend.

Source: https://www.semanticscholar.org/paper/The-Intel-labs-Haskell...
npm isn't a built-in package manager. It's commonly packaged alongside node, sure.
Love the idea. Really appreciate the upfront pricing information.

Obviously, needs more than developer-focused mailing lists.
Uber returns to Taiwan after partnering with licensed rental car companies
One of us might be misunderstanding the GP here. In my case, I'm also overlaying my own personal experience on what has been said, so grain of salt and all that.

I want to kill myself. I've wanted to end my wretched life for a long time now. But I know that if I did this it would destroy my family. I love my mother, father and sister and I don't want to do this horrible thing to them. So, in my mind, my only option is to limp onward.

It is 100% my decision. I've decided to make the less selfish choice.
F-1 Hybrid is the term. Cross a tasty tomato with a high-yield one, and you get a tasty high-yield tomato - but you can't use the seeds. This has been around for years.
I did want to! However my wife put a stop to that idea....
Voice recognition is a national joke in Scotland:

https://www.youtube.com/watch?v=HbDnxzrbxn4
Yep, that's exactly how it works.
Ubuntu creator takes CEO role again after layoffs and death of Unity
Author here:

Would love to hear the HN thoughts on the project and I'll check in now and then to answer any questions!

code: https://github.com/theveloped/WhatsBook
What would you replace the DOM with?
Yep, hard real time code tends not to malloc and free for that reason. Most hard real time systems only allow dynamic memory management at system initialization, not at normal runtime.
Why don't you find one? weworkremotely or stackoverflow careers have a fair amount.