skysight-inc/HackerNews huggingface dataset:
Seriously. If there was microbial life on Mars, the author would consider it "a lower form", and without question promote Elon Musk and Don T's shared vision to terraform mars into a glorified Disney world.

Okay that's not quite fair, nor am I entirely serious. But the point is that there are way too many assumptions going on in this article, and I'm seeing these same seeds still at work here on earth in the ways people treat, say, Cuban people, immigrants or bacteria.
haha fair enough, we don't have the types of reefs as CA so our breaks are shady over 5-6 feet, and even our best surf in all of FL (3 hours north of Fort Lauderdale) isn't CA. Still it is the small surf of FL that produced Kelly Slater so at least we should fall on the same axis.

Seriously though Fort Lauderdale beach and Hollywood beach have great surf communities that have been around decades.
I suppose they could just make a new company under a new name, sell the patents portfolio to the new company and can this one.
There's not much to lose in this for a patent troll.
Could you please undo that?
I don't know this person, but all his arguments are worth discussing, his points are valid, and don't see any other site violation, than the monopoly discussion being of course only a side discussion of Google/Microsoft.
I also don't see any request to stop. His last post on this was 19 hrs ago, you de-attached it 15 hrs ago, and then banned him 15 hrs ago.

Rob Taylor by himself explained how important it is to let discussions happen at PARC. They trained it. RIP
What English speakers tend to forget is that the problem exists outside Latin script in exact reverse: if there are non-Latin homoglyphs for Latin characters that means there are also Latin homoglyphs for non-Latin characters.

Forcing punycode representation is a hack that would help English speaking countries (you don't expect non-Latin characters in typical English language website domains) but it wouldn't solve the problem.

Also, it's not as simple as "ASCII or not": outside English most European languages use a superset of ASCII glyphs mostly via diacritics or variants. It's not useful to single these glyphs out as "non-ASCII". But these languages too are affected by the same homoglyph attacks as English.

It's a hard problem and in the 21st century it certainly won't be fixed with one-off small-scale hacks that only benefit a subset of monolingual English-speaking users.
> Also I noticed positive cultural change around, we move faster and team talks about business problem solving more than programming itself, to a point I believe rich functionality IDE over complicated things we do here.

I think that this point about team conversations is incredibly important. Apart from Ruby, Go is the only language that I know where the technical conversations seem to consistently focus on the problem at hand, rather than coding concerns like the finer points of language features. The company that I work for does both Ruby and C#, and the difference in the conversations around the two is very noticeable.
For reference, the example is using:

U+0435 CYRILLIC SMALL LETTER IE
U+0440 CYRILLIC SMALL LETTER ER
U+0456 CYRILLIC SMALL LETTER BYELORUSSIAN-UKRAINIAN I
U+0441 CYRILLIC SMALL LETTER ES

...which are basically indistinguishable from the corresponding ASCII (65 70 69 63) in most if not all fonts.

I don't see this as being an easy or even solvable problem in general --- after all, a Russian IDN registrar could rightly argue that it should be valid to use all Cyrillic characters in IDNs; but at least for those of us who are content with English-only domain names, we can just disable IDN.

I suppose one solution would be, when IDN is detected, to show both the Unicode and Punycoded versions:

[www.xn--e1awd7f.com]https://www.epic.com/

One could also argue that this is also a usability feature, for easy copying of IDNs by those who otherwise cannot write them.
The moderators generally don't run around removing comments.
It's a hard problem. There are valid use cases for mixing characters from different alphabets. They'd need to detect malicious mixing without creating a prohibitive amount of false positives.

IMO it'd be fine if there was an automated flagging mechanism that would require manual review for suspicious domains, though. But good luck getting registrars to do anything more involved than a simple blacklist check.
I don't think you can get approved for cards like Chase Sapphire Reserve without a certain credit history. It's not the annual fee.
to be the voice of reason here: botw is amazing. it's no surprise. if you played any of the franchise growing up, you prolly love it– zelda. botw takes that love and doubles you down.
Amazing life hacks you must watch
the "Google Services" platform on Android is almost impossible to opt out from. it operates mostly under the hood, and is not very visible, but so many apps depend on it and won't run without it, because it provides network and persistence services that would be a huge battery drain if coded by hand. Still, to use it, you need a Google acct and opt in to their activities data recording privacy stuff.

this is a big reason why using an open app store like f-droid isn't a lot more popular.
This is India man. The achievement of the EC is so phenomenal, that it's respect will endure. And the issues with the EC, from what I remember, were manufactured. Optics to deal with a strong EC. And I've been through the dacoit, booth capturing end of Indian history, it's genuinely an accomplishment, its nuts that it even worked (works) at the time it began to work.

Edit: similarly with the SC. Both of these were institutions which were beyond reproach, and I pretty clearly remember the times they both got dragged into the political limelight. The issues were largely to deal with their growing power over the political class. And this is something which you'll see had support on all sides of the political aisle.
Taming Undefined Behavior in LLVM [pdf]
It's not too hard to do both
There has never been an above razor thin profit line for fleet vehicle operations. Uber is a subsidized taxi company. They charge people from A TO B and take a cut of the fare. The fares are so low compared to taxis because of this subsidization. The only way they survive as this app form of a taxi is by drastically raising fares. They will be too far behind the driverless car race and crash there as well. Let alone the truth of the matter is, the technology is waaaaaaaay farther away on driverless. Read Financial Times 7 part series on Uber. They're the only ones truly on top of this sham of a company.
If they have common priors which is almost never the case.

Most disagreements are to be found in the priors, which is why defining terms and trying to agree what the relevant priors are can be very useful.
With the difference that in most novels usually the good guys win.
It's 237 PPI which is completely adequate for something held at arms length. And considering console games are more fill rate dependent than most phone apps it makes sense to have a lower res.

I think a more interesting question to ask is why are phone manufacturers so insistent on burning battery life on 400 PPI and higher displays that add little benefit for most people.

These high res phones make for nice VR displays but I can't believe that's more than a small niche.
So, I just did a SELECT * from a table with 1 million single-byte character rows, and it ran in 90.51ms:

place=> explain analyze select * from board_bitmap ;
QUERY PLAN
-----------------------------------------------------------------------------------------------------------------------
Seq Scan on board_bitmap (cost=0.00..14425.00 rows=1000000 width=6) (actual time=0.009..57.295 rows=1000000 loops=1)
Planning time: 0.160 ms
Execution time: 90.510 ms
(3 rows)

And, with triggers from an activity table, the entire write operation can be atomized so there aren't any race conditions.

I don't think you understand how fast Postgres is on modern hardware. What took a large cluster 5 years ago can be done on a single system with a fast NVMe drive today. We really might not even need Redis in this situation.

And, yes, I have to deal with viral content, so this is right up my alley.
Android, Angular, BoringSSL, Chromium, Dart, Go, Kubernete, TensorFlow. Not to mention the cash and services it ploughs into the OSS in various ways, from the Millions it gave to Firefox over the years, to people collaborating over Hangouts, to Project Zero.

I don't think "unmatched" is unreasonable.
I suspect that my antivirus software, Avast is converting the URL to unicode when it is copied.

I tried the Copy/Paste of the fake URL with standard Firefox, Brave (Chrome), and Avast Safezone (Chrome). Only in Brave did the fake address copy correctly as punycode. The other two browsers have the Avast plugin as a common factor, but Brave does not.
One thing is collaborating with law enforcement, another thing is collaborating on mass surveillance. Microsoft collaborated setting up mass surveillance (PRISM).

One thing is a bug, another one is a backdoor. Are these good faith bugs or willful backdoors? Most likely they're bugs, but it is hard to know.

If I was Microsoft and I wanted to willfully plant a backdoor, I would take precautions to be able to get away with it if caught. Because security researchers can analyze them, and foreign governments have Windows source code, leaving intentional bugs as the only choice.

Now, the reasons I am suspicious of Microsoft:

- PRISM. Which is unequivocally mass surveillance.

- The Flame malware was able to install itself via Windows Update: http://www.computerworld.com/article/2503916/malware-vulnera... . The means by which the Flame authors achieved this are easier to explain if they received help from Microsoft.

- When Windows NT SP5 was released, the build accidentally came with debugging symbols (i.e: variable names were visible in binaries). A researcher found a variable called "_NSAKEY" containing a key which could be used to forge signatures. https://en.wikipedia.org/wiki/NSAKEY. Microsoft's explanation was that it wasn't related to the NSA, and that NSA in that context meant something else.
I am only giving feedback. I shouldn't have taken that shot at Jobs I guess, or maybe people are taking my comment as distracting from this celebration of Bob Taylor's life. Sorry about that, not my intention.
With what?
Unofficial patches will appear, if these are important enough for "Customers still running prior versions of these products". But looking at the list, all these exploits appear to be SMB server/RPC related; regardless of what Windows version you use, exposing that service to the Internet is not a good idea.
With identifying and prohibiting homographs
Seems like the kind of thing google safe browsing is there for - flagging URLs as malicious. Sure, they have to be discovered first but at least its a start
Yep, double cash for most things, chase sapphire for travel and food things. The double cash gets stolen every couple of months, tons of skimmers while traveling or in gas station pumps. I even had someone steal a new card from my mailbox at an apartment complex and use it to get $60 worth of McDonalds then a few hundred worth of Diesel jeans. It got flagged for the McDonalds (I almost never eat fast food), I got alerted via text, and had it cancelled + a new card overnighted to me. My most recent compromise was a $0.15 charge in Capetown followed by half a dozen transactions with TopHatter which appears to be a sleazy auction site for dollar-store quality crap and not-so-hot fraud detection. I do hate that they must read the script to me each and every time it gets compromised, since it's so routine for me at this point...it's like being forced to listen to an Indian person (no offense, but their call centers / call center subcontractors are there) read you the EULA for software. It'd be nice if they saw that since you've already had your card stolen half a dozen times in the past year and a half, they can skip the formalities.
GET STARTED WITH IOT VISUAL WIRING TOOL – NODE-RED
I observed a correlation between competitive programmers and those who come across as just hacking at it until it works in interviews. If your interview system is looking for people who think about things then it probably already biases against many competitive programmers correctly.
Yes, absolutely! More videos are on the way.
Kaka are also an amazing parrot that are less bastardly and much more accessible (just go to Wellington)
>I suppose one solution would be, when IDN is detected, to show both the Unicode and Punycoded versions:

That looks like the best solution. The security certificate of the site shows the punycode version of the URL. If the address bar URL and the certificate URL are different, then, at least for addresses in English, that should raise an alarm.
Well, I'm also a full time developer but I learn new things on my job almost every day.

Your question is way too broad. If you mean tech topics, it's perhaps time to find another job; if any topics at all, just follow your interests.
The Data Prrotection Act specifically covers this:

"* “personal data” means data which relate to a living individual who can be identified (a) from those data, or (b) from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller"

Sorry, but they already thought of that one.
Here in Australia it's probably 50/50 that any given merchant will accept Amex or Diners, and of those that do, surcharging up to around 3% (though I've seen up to 7% before!) for Amex is quite common, particularly at small businesses.
That's just a return to how video advertising worked initially on TV, where Boston Blackie would light up a Lucky Strike and casually comment on how great it was in the middle of the action.
The single most overlooked report in Google Analytics. Yet most powerful
Browsers should probably disable IDN by default, at least if region settings are not set to use Cyrillic chars
Looking at their acknowledgements list it seems advisories always have acknowledgements even when it's Microsoft themselves who find the flaw. However, the MS17-010 patches didn't have any. If that's because they'd have to acknowledge the NSA, then it seems like more stuff is on the way: MS17-019 is also missing from the list. That's also patched in March and is "a vulnerability in Active Directory Federation Services (ADFS). The vulnerability could allow information disclosure if an attacker sends a specially crafted request to an ADFS server, allowing the attacker to read sensitive information about the target system."
Also relevant, RedHat currently offers 10 years by default + a few years "extended support" for more money. Wikipedia has a nice visualization:

https://en.wikipedia.org/wiki/Red_Hat_Enterprise_Linux#Versi...

Windows Vista was released in 2007, so I'd say it's fine.
Barcelona make massive mistake over Alexis Sanchez transfer
I see two issues: the mere existence of punycode (does any serious website use a punycode domain?) and the ability of any website to generate an ssl certificate for itself in a matter of minutes, making the "secure" part of the UI most users have been trained since forever to respect irrelevant.
What is a Dynabook? Commentary on “A Personal Computer For Children Of All Ages” [pdf]
Surprising Response from Google Cloud to an IAM Command
How do I disable unicode in domains entirely for Chrome? Such a useless and dangerous feature.
Dreamcity fantasy city name to lat,lng
> […] and COM port)

DMA channel number more likely ;-)
Are those debit or credit though?
10 Pieces of Horrible Advice Extraordinary Entrepreneurs Ignore
It is often the Lunduke 10 minutes
Strange, every apartment I've lived in required checks or ACH. One missed payment and they require a cashier's check for that month + the next month. They also required a cashiers check for the deposit.
> Did ycombinator give you explicit permission to use this server? No, they did not. If they want you punished for posting this and they can find a friendly district attorney, you're screwed.

Did your local supermarket give you explicit permission to walk on to their premises to go shopping? No - they gave you implied licence to enter their premises which is made obvious by the circumstances.

Similarly, a court would almost certainly find that having a web server which is obviously intended to be publicly accessible would result in an implied licence for use of copyrighted material on the site for typical, expected usage of said site.
Why would they ? Have they ever done something similar ?
Aerial photos show how American cities changed the mid-late 20th Century
Given that English, and in particular, ASCII domain names, have practically been the lingua franca of the Internet even for those who otherwise use a different language, I don't think it's too unreasonable to say that IDN has really caused more problems than it's solved.
The way this all works is the merchant pays a fee to process you CC and the bank splits that fee with you. Gas stations are somewhat smart about this in that they charge you more when using a card since they're paying more for the transaction. However, it's annoying to consumers to charge a higher price depending on payment method. Not sure why gas stations are the only ones getting away with it.
Nonsense.

For my purposes I don't need nonascii domains. Feel free to use unicorn characters in your address bar, but I'd much rather have it special cased in mine. My security shouldn't suffer just because it's such hard to solve it universally.

We don't need a universal solution.
TJ Holowaychuck is a real guy??
I just don't believe shadowbrokers just burned all their 0days. I assume they only release the cheapest exploits and either sell or keep the rest. E.g. russia now has several NSA exploits.
It sounds like you tried to do everything yourself online. The biggest benefit (IMO) of Chase Sapphire cards is that someone picks up the phone as soon as you call (in most cases). I always start my price/return protection claims with Chase this way.

I recently returned a pair of earphones that gave me buyer's regret. I called CSR, filled out a form, emailed it back to them, and shipped with my package upon their approval. In a few weeks, I got the full $300 back as a check. Not quite 48 hours, but my experience has almost always been good. Even when I claim for a few dollars.
GnuBee Personal Cloud 1 – A NAS specifically engineered to run FLOSS
Nobody mentioned Brave browser ?
Nobody mentioned Brave browser ?
https://brave.com/about_ad_replacement.html
I love learning tech topics that I have not no hope of using in my job though. I ain't learning about akka or EJB in my spare time for example!
Machine learning for fun and profit
Awesome article! Best read in a while. I wish it would continue to the state of things the next years, with DOS4GW, and Windows 95 and 98 still running on top of DOS. The article stops too early :)
From the article:

With the exception of Esteemaudit, the exploits should be blocked by most firewalls. And best practices call for remote desktop connections to require use of a virtual private network, a practice that should make the Estememaudit exploit ineffective

In other words, if you're behind a firewall/NAT with the relevant ports inaccessible from the Internet, you won't be affected even if you're not running a patched version of Windows.

From the exploit list provided and their description, it seems like using Win10 and Win Server 2016 is enough to protect yourself against these attacks.

...except that the telemetry and autoupdate capabilities of those OSs means the NSA doesn't even have to exploit anything; they can just ask MS to hand over the data. The saying about "known unknowns" and "unknown unknowns" comes to mind...
Corporations don't have to delay critical security patches, they just elect to do so based on some motives that compete with security.
>>degree-less candidates, companies that filter out depressed candidates, companies that filter out transgender candidates, etc.

Sorry, these are completely different things and frankly sounds like nonsense.
> it's just a stupid way to pay for stuff

Why? Credit cards are faster, safer, easier and simpler than using cash - and come from with benefits and service. How is cash really better outside of anonymity and quick transactions these days?
America first! Or, in this case, English first!

There's an argument to be made that we should not solve problems in a fashion that only benefits English (or English and other European languages). Generally when that happens the speakers of those languages - which are still the dominant group in internet standardization - loose all interest in fixing the problem for everyone else.

The internet is on the way to becoming a truly global medium, if it isn't there already. We need to stop designing for English first.
YouTube's main tech was contentid, designed to prevent piracy.
So your ability in a pressured limited-time environment come up with an O(N) dynamic programming algorithm for a fictitious scenario is a testament to your ability as a software engineer versus a competitive programmer who can pattern match scenarios?
Couldn't you have taken it back to the place where you bought it? As a European, it seems a bit weird that you have to go through your credit card company to deal with this. So if you pay cash and something is faulty you are SOL?

Here the guarantee against faulty goods is a minimum of 2 years. It's on the seller, not the manfuacturer, to repair or replace it if something goes wrong. I'd expect most stores will just straight up give you a refund for something like this.
Steps to Spray Clear Coat on Car Without Orange Peel
A good way to fix this would be coloring all Unicode characters in the URL bar.
Tesla burns cash, loses more than $4,000 on every car sold

http://www.reuters.com/article/us-teslamotors-cash-insight-i...
The article first describes context and then it goes into describing the idea:

> We can begin a (hardware) transaction just before a function return instruction, and end the transaction at its intended destination.

Interesting indeed!
I like what you are doing a lot. It doesn't matter that it isn't a one to one comparison, the point is you are taking on the challenge and enjoying it. Probably actually you are learning some stuff along the way as well.

It would be kind of neat if the place experiment could become something of a micro-benchmark for online customer facing distributed platforms.

Keep up the good work man, it's looking good.

Don't forget to hydrate and consume pizza.
NAT is not really routing, routers are expressly forbidden from altering the address and port in IP packets.
> Where I'm from, "good schools" is a nice way of saying "it's a white neighborhood"

Eh. The Bay Area isn't where you're from. Actually, relatively few people in the Bay Area use the term "good schools" at all because they tend to have few children and the idea of school quality isn't on their radar.

> wealthy, exclusive suburbs

Honestly if you wanted to say Bay Area residents were coding racism into how they talk about where they live, you could point to the San Francisco fetish where people AVOID suburbs like Oakland and the East Bay, though honestly that's _actually_ because of all the public-transit-accessible hipster coffee spots in the one and the violent crime and strip-mall Starbucks and sprawling freeways with hours-long commutes to work from the other.
> The cybre.space instance calls each post a “florp” instead of a “toot.”

I'm not entirely convinced that we do, no.