skysight-inc/HackerNews huggingface dataset:
> Corporations won't invest that way, it would kill them.

It probably wouldn't, but their stockholders would.
By the way, while researching about Metacademy I have stumbled upon their developer group[0] where they were discussing challenges they were facing, thought you may find it useful. Good luck!
[0] https://groups.google.com/forum/#!forum/metacademy-dev
>My gripes include it being difficult to get ahold of one in the US. The idea of unattended auto updates on a router seems a bit dangerous, but it's all OSS anyway

You can auto-update or disable it. From simple UI you can set to reboot the router after n-days or hours after upgrades, recently added feature emails me when there are (important) updates and status of the router after updates.

>I wish I knew if you could run vanilla OpenWRT/LEDE on it and not their fork

Afaik you can. You won't get support for sim card socket and hardware accelerated encryption that they bundle with their OpenVPN/openSSL, I remember reading that someone manager to put LibreWRT on that router.
TIFF can do premultiplied alpha. The problem with TIFF is that it's such a grab bag of options, it makes it difficult to know what you're dealing with.
Nside the robot pizza company that delivers healthy pizzas to Google
Why does the argument that "the government should spend more on basic R&D" need to be packaged with "no-one outside of academica ever does anything innovative"?

Most people in tech wholeheartedly agree with the former and disagree with the latter.
PostgreSQL Security Update Release
Please to be defining 'failed'.
But corporations did invent and deploy networks before the internet - BIX, Prodigy, Compuserve, MCImail, Ethernet. And FidoNet was very successful, and was the creation of hobbyists.
I'd love to figure this out and why that's the case because this happens to me too.
Successful open systems tend to have standards that "just happened", not prescriptive standards. Like x86 PCs or Linux or most programming languages.

Cuda seems to be clearly winning over OpenCL in the real world so other vendors should just adopt it. AMD already has a CUDA compiler IIRC.
Vape Shops Want to Do Good, but Fear F.D.A. Won’t Let Them Do Well
Largest Brain Coral
The argument isn't black and white. We're a "free economy" but we still control and regulate certain things in the market. The argument is that this is a specific instance where our "free economy" is failing and so we should use government to address that. It bears no comparison to "unfree economies."
It always blows my mind that all of the Lambda-the-Ultimate papers were sponsored the Office of Naval Research.
Eidetic memory and follows you everywhere and can transfer all those memories perfectly to any number of other people? Yeah. It's like super-stalking and it's obviously horrible.
Didn't think that was cringy, It's kinda funny and hits the nail on the head
Stockholders have massively rewarded AMZN for inventing and investing heavily in cloud computing.

Me, I'd be buying lots of shares in SpaceX if it were publicly traded. I had to settle for buying TSLA shares (up about 50% from where I bought it).
While not for Microsoft I work for another organization in that size class and this is effectively my entire job. Customer opens a ticket, we engage, resolve, bug fix and deliver. It does cost a pretty penny but the problems go away no matter how vague the circumstance.

On the other side as much as I try to contribute with F/OSS support I'm not going to provide that same level of service as my dedicated job.
>they're more like an action camera, such as a GoPro

Except it looks like they're built like dollar store glasses, and have terrible battery life
As someone who uses Ubuntu on both desktop and server here are my concerns about Ubuntu and Canonical at this stage. I think Ubuntu is awesome and has done huge things for Linux, particularly on the desktop.

A) Canonical's R&D investment is shifting from desktop components to server components. On the one hand I'm sure the server version will get even better which is great. But it's hard to imagine how this could translate to a win for Ubuntu desktop users.

B) Bug #1 (https://bugs.launchpad.net/ubuntu/+bug/1) was closed a while back with a rationale that I thought was redefining the truth a little bit. Canonical's new direction probably makes it even less likely that bug #1 will ever be reopened. Again hard to see how this translates to a win for Ubuntu desktop.

C) I know that at some point Ubuntu is moving to Wayland as well. I am concerned that this change will break things that are important to me -- for instance I use xmonad and it doesn't work under Wayland.

I get 100% that Canonical needs to make money, and it seems no one's ever figured out how to do that with desktop Linux unfortunately. I just can't help but feel we are losing the biggest champion for the Linux desktop here and am concerned about its future.

If things get bad enough (for instance if they move to Wayland and there's still no xmonad port) I would probably switch to Bunsen Labs or some other form of Debian but I would miss losing the confidence Ubuntu gave me that things would just work. Even if I do have to sign off and leave Ubuntu I will do it with a huge /salute in their direction for having created the OS that was good enough to enable me to make the switch to a free desktop.

I hope Canonical succeeds with their new focus. But I have a feeling an opportunity is going to open up for someone else to become the #1 desktop distro.
Let me play the devil's advocate, and day that volatility is an enabler for gambling or betting, and people are known to want to bet.
> ...or it could just monitor the keystrokes itself with SetWindowsHookEx() like this process.

...which any AV will immediately flag. This allows malware to keylog in a much less detectable way by piggybacking off trusted HP software
Ask HN: Looking for bursary management software recommendations
A national NGO that a colleague works with is looking for a solution to manage bursaries given out to underprivileged students. Anyone have any recommendations for existing software, ideally open-source?

The software needs to let candidates apply for a bursary, upload docs and write content etc. From the management side, there needs to be some analytics functionality to ensure that the bursaries don't over index on one specific region, etc.

If you know of an underdeveloped open-source option, I wouldn't mind contributing development time to it to make it up.
This might be an unpopular opinion, but I find it terrifying that people keep repeating the same mistakes. Back in the 90s everyone thought that XML would become the one and only configuration file format. Instead, it became an epitome of over-engineered enterprise software. Now, people are moving to JSON as a serialization format. It's a lighter-weight and usually sufficient distant cousin of XML, but I still wouldn't like to write my config files in it.

The misconception is what might work as a human-readable serialization format is usually tedious as a human-editable configuration format.

Unless your app accepts configuration files as untrusted input, it is really not that hard to write a custom key-value -type parser. Think OpenSSH or Samba config files - I find them well-suited for their respective jobs, as they achieve the required level of expression with minimal necessary complexity.
DARPA just funds research. There's no reason that has to be done through the military, that's just the way it is right now. If DARPA had the same funds but was part of the department of transportation or something, we still would have gotten the internet.

We still need defense research, but the fact that a lot of our advancements have come through the military doesn't mean that's the only way it can happen.
For Android < N, if you install a custom CA, you'll get a permanent "Network may be monitored by an unknown third party" notification that cannot be dismissed and stays across reboots. Android wasn't really "insecure" in that regard beforehand.

Your point is valid, but I think it's a negligible improvement that comes in hand with severe implications for privacy research.
arbitrary distinctions FTW
You cherry-picked one function for which some errors were specified (and even in this case; few of them), yet you ignore the general case where MSDN seems to tell "go fuck yourself" to the programmer looking for the possible different error cases. Which are important to known in case you want to react programmatively to some, and in a different way to others.

Given how poor the error reporting is under Windows (so poor that useless 32 bits hex error code, component dependant, are pretty much the only (useless) thing that users are seeing), the theory of "more of those" are better is also utterly ridiculous. I've never debugged anything looking at WinNT/Win32 error codes, or even the event log, etc, while I've in plenty of occasion debugged things with Unix errno, strace (which gives errno for failed syscalls) logs in /var/log (often dumping Unix errno + some context) or even just reading stderr.

If you want to understand how much of the getlasterror specs are missing in Win32, just take a look at the Wine unit tests in various are. For each of those cases (maybe 99% of which are undocumented in MSDN), that can correspond to programmers needing to replicate their own qualification beforehand usage of affected functions, or worse to implicitly make some (sometimes false) hypothesis. And the overwhelming majority of them are not related whatsoever to any kind of driver and whatnot, it is just that not even the upper layer errors are properly specified/documented. This is the kind of info which should appear somewhere in MS doc, and which does not. It's insanely ridiculous because it's obvious MS have it in a form or another, given it is crucial for backward compatibility (or compatibility in general, if you take the Wine case -- but I guess when you remain within MS the main issue is backward compat)
Show HN: The missing schedule view for Google Calendar
The Joys of Cooking with Gadgetry
The Crop That Ate America
Specifically, tabs.
Outlook 2013 & 2016 provide a very useful "Schedule View" to display multiple calendars at once. Unfortunately, there is no equivalent for Google Calendar so I created TeamCal. Additionally, to the schedule view, it's also possible to use drag & drop to move an event from one person’s calendar to another - super useful for managing team rotations or doing vacation planning. Would appreciate any feedback on how to improve the website & app!
Ran Asia for my last 2 startups. I know what I am talking about. I do 120k miles a year from SFO to around Asia. I can read ~1000 Hànzi. My comment was that they are number #1 because of timing and place in their development cycle and it like everything is subject to change. It is really that simple. I wish them all the luck.
Hi Hendzen, I found in one of your previous comments that you have set up your emacs to have full support for c++ projects, like auto-completion and reference following and similar.
I have been using Emacs for a few years now, for js/python/html/C/C++/anything else and have just started working on a larger C++ project where intelligent auto completion and navigation would help a lot. Would you mind providing some more details on how you got it set up, maybe share your init.el file? It is a Cmake project, uses ninja as a generator. Thanks!
The Impact of Civic Tech on Open Source
Awesome, elaborate a little bit if you can.
Interesting, I am not aware of what happened re the US$13B bill (quoteed this figure in GBP in my prev response). As I indicated, this is not tax aversion but simply "clever" structuring of their EU operation. Paying employees income taxes directly is standard for most EU countries (and the US, too, mostly).

The US$13B is for a 10-year period (2004-2014), so can't be compared to their 10B tax per annum in the US.

Your numbers are correct: according to a number of reports, Apple's market share in the smartphone market range between 11% and 18%[1] and an average of about 14.4% for 2016 [0].

[0] http://www.gartner.com/newsroom/id/3609817

[1] http://www.idc.com/promo/smartphone-market-share/os
Used this recently with Akka.NET

It took me back to the days writing reams and reams of xml for JBoss back in the day.

config is code and I see no compelling reason to adopt HOCON over code, or other external DSLs like YML, TOML, JSON and XML.
Trump's website wanted to collect your location data
Sweet thanks for the feedback - this is definitely a step in the right direction.
Is there an API for this. I'm developing an application that is an Emoji journaling application. https://emojilog.surge.sh This would help out with text-to-emoji parsing.
a) what is that as a fraction of the total RTT in "real world" conditions (not localhost)

b) with session tickets configured, do you see this increase consistently for the same client?

c) would your users find it acceptable to have the occasional 50ms hit on a full handshake in order to get authentication & encryption? would they even notice (see 'a')
Some articles to back up my point on corporate ladder:

Redefining Success: The Corporate Ladder No Longer Matters

http://www.huffingtonpost.com/elizabeth-rider/success_b_4952...

Opting Out of Climbing the Career Ladder
http://kontrary.com/2013/06/17/opting-climbing-career-ladder...
You don't need to be in academia, but you do need to create a working environment that shares some of the same features. Very few companies do this well; most don't do it at all. Which isn't to say it's impossible to innovate in industry - but typically it is actively made much more difficult.

It's undoubtedly true that "innovation" is a term that is much abused in industry, weakened to the point it is mostly meaningless.
There is no magic. You have to try things. There are two things that worked for me personally:

* Study the technology in order to find out potential oversights and design problems.
* Fuzz test it to find problems by brute force.

Keep in mind that the more you practice the better you become at it. Your intuition will start to help you filter things that are worth exploring and as such get more fruitful results faster. While you can read about vulnerability research techniques, your intuition will only grow through practice and experience.

Also the more bugs you discover the more confident you become which also helps in the long run because in many situations you will not know what you are doing but you believe strongly that you will find something.

Also, keep in mind that while security researcher are smart people, what they do is not that genius at the end of the day. When you are reading someones awesome research you may come to the conclusion that the work had the same logical development as outlined in the paper - a stroke of a genius. It does not work quite like that in reality. It only makes sense at the end. It does not make that much sense in the process. You just fake it until you make it. :)

So yah, the way you make the jump from using tools to finding vulnerabilities yourself is by making that jump. Pick a small target area of research first and grow from there.
Interesting how you jumped to that conclusion, just like many other bitcoin skeptics since 2009.

Think about this: with bitcoin, you have a highly-secure, trustless, immutable distributed ledger that anyone can pay a fee to get in to, with no restrictions. Let's say we take a hash of a huge Wall Street swap contract worth $100M and embed that hash in the blockchain. Now both parties can verify the integrity of the contract without involving lawyers or governments, and nobody else knows any better than "there is 32 bytes in the blockchain." How much is it worth to those parties to verify that contract?

How about this one: I'm a wealthy businessman in China, and I don't like how the economy feels. My government imposes strict limits on how much foreign investment I can do, since the state and the banks are in partnership. I can use bitcoin to move money across the imaginary borders imposed by governments, even if I trade it back for dollars as soon as it moves out of China.

Or maybe you're a gold bug, but you want something that's actually useful ;-) It's very hard to spend gold or move it around.

What about the global foreign exchange markets? Companies are moving trillions of dollars daily through the interbank network. There are fees and counterparty risks associated with those moves, especially if you're doing business in a developing country. Bitcoin may eliminate some of those risks. And the fees are agnostic to the transaction value, which is why high-value use cases crowd out low-value ones. I pay the same fee whether I'm transferring $1 or $1M.
Faster Payments is certainly used for transfers between individuals, like between friends and family. That website was mostly for the banks, sending money between friends is listed on a bank's site [0].

There's a mobile phone-base service, called PayM [1], which uses Faster Payments. I don't think it's used much, but the systems in Sweden (Swish) and Denmark (Mobilepay) are pretty much the same and are used a lot, probably the majority of payments to friends, and at least 25% of payments to small businesses.

[0] http://www.halifax.co.uk/onlinebankinghelp/fasterpayments.as...

[1] http://www.paym.co.uk/ or http://www.halifax.co.uk/aboutonline/things-you-can-do/pay-a...
>So in each case what's the gap between actual linguistic proficiency / randomness, and the appearance thereof?

That there are no hard constraints/expectations like in measuring the quality of a e.g. software random number generator implementation.

They don't expect to find true randomness in the results, just to measure how much randomness (entropy if you will) those various age groups are capable of producing.
You're overlooking the counterfactual here. The fact that ARPANET was a Department of Defense project doesn't mean that defense spending itself caused it to come to fruition, and similarly it doesn't mean that without war (and defense spending), something like the ARPANET would never have been invented.

Separately, it seems far more significant that the early ARPANET was composed of networked computers based at universities.
https://www.weforum.org/agenda/2016/02/are-entrepreneurs-bad...
True, but it seems to be a pattern in all the articles.
Because "Dependency Injection" is "of course" recognized as necessary for "responsible programmers", who "care about clean, maintainable, SOLID code with low coupling"?
Your last line pretty much answered your own question.

Most small-government guys (myself included) distrust anything controlled by flawed humans with the power to target and totally ruin an individual at a whim. I personally hate the idea that I could build myself up from nothing and someone could conjure up a story to take my work away from me.

We are just pessimistic when it comes to institutions... yes it can bring great benefit, but you can also lose a great amount. History has shown us many examples of people striving towards utopia and ending up causing unspeakable loss.
Vanilla Forums 0day Exploit
Because Apple has enough money to force his decision onto the user. It will take something extreme to make the regret anything.
I think that was fleshed out, but yeah, the article doesn't even need the word capitalist in it. ("capitalist firms" - as opposed to what?)
I find the most valuable point is the last: whereas, sure, you can go on wikipedia and find dependencies of an area of knowledge, that three of prerequisites makes more sense to be presented as a flow converging on a point, rather than having to dig deeper until you find a node you already understand.

A suggestion for your product: build these dependency graphs automatically, and let users mark subjects as already satisfied. That way you can omit digging into dependencies that are satisfied. If you really want to be righteous, recursively mark the dependencies of the satisfied dependency as also satisfied. That way a user can pick a topic and find everything that still remains to learn to get to that point.

And you can have the best of both worlds. Generating a linear progression of things to learn becomes a simple matter of printing the dependency tree in postorder.
You broke the first rule of HN: don't criticize pg.
Vanilla Forums
I would count consultant as "own team" in this scenario. Someone company controls at that time, knows company code/cases and is available more or less instantly. A lot depends on how much special knowledge is needed to understand open source project codebase etc. Ordering contractors you already know around is easier then ordering someone on other side of the world who has different employer and priorities.
You can roll a nice x86-64 system for this price, depending on what you want. Seriously, the least expensive soldered-processor mini-ITX motherboards are $40-50 in quantity 1; add a 4-port gig-e card, RAM, a small SSD and a case/power supply and you can match this price but have replaceable components running a stock Linux or BSD.
While the 8086 could not directly execute 8080 code, it was designed to make translation of 8080 to 8086 code straightforward. This turned out to be a sound business decision for Intel.

I was less impressed than others with the orthogonality of the 68000 when it came out. I was used to the PDP-11 instruction set, which was genius in its orthogonality and simplicity.
> ... the idea that they could call, say, Microsoft and get their bug fixed is pretty much a fantasy.

I don't know why you think this is a fantasy. I could call Microsoft right now and get an engineer within 24 hours to discuss an issue... I think that's our SLA. Might be a shorter time period for initial triage response. But typically we're talking to an engineer within a day. And yes, sometimes these discussions result in bug fixes in upcoming patches.

This is what first-class business support means. Large businesses want to be able to get someone on the phone to fix an issue, and they will pay well for it.
I'll admit the middle one doesn't have much support online.
Ask HN: Any books/courses for Akka?
Hi HN,

I want to know if there are any books/courses available for Akka. I can understand Akka at a basic level, however I'm not sure how to use them in real world. May be books/courses which teaches to build a scalable application using Akka would be really helpful to me.
OpenVPN remote DoS vulnerability
It's exactly the same in Gnome. In fact, Gnome is better in that you can activate an extension which will change the behaviour of alt-tab so that it cycles through all windows.
> what tool I should use for a simple small cold email campaign...

A "tool" won't pass the Human/Robot sniff test. The most convinvcing messages are still written individually, using points of connection and social proof.

On this subject, Oren Klaff is brilliant > http://pitchanything.com/how-to-get-your-pitch-past-the-inbo...

>
I would think it would be due to the sheer power differences of each organization. While I'm sure Canonical isn't strapped for cash, it's clear Apple is far larger of a company. The fact that Apple has built its user following, along with the huge number of nearly religious followers, against Ubuntu's (or Linux's, really) much smaller audience gives concessions to Apple to make moves such as this. If I had hundreds of billions in cash as a company, I'd feel much more comfortable making "deal with it" decisions affecting my users than if I were running a much smaller operation.
Agreed. Zoom in on subgraphs for nodes which represent complex topics in their own right.
Instagram engineering did a blog post a while back on implementing emoji hashtags explaining (among other things) how some are represented by >1 unicode character. Pretty interesting read [0].

[0] https://engineering.instagram.com/emojineering-part-ii-imple...
Looking for Leia, an upcoming documentary that highlights the women of Star Wars