skysight-inc/HackerNews huggingface dataset:
> ALL data? How are you supposed to query against it then? What does "at rest" even mean in the context of an always-on database? An encrypted partition or something?

Data at rest means data on the disk. (so basically LUKS or similar partition / FDE) In virtualised environments it may not obvious, but the disk you're running on can still be accessed in various ways. Here are some examples (not a complete list):

- VM breakout allows someone to read others' volumes

- logic issue allows others to snapshot your volumes

- disk is marked as bad, then discarded without full erase / physical destruction, then found in the dump

> So two layers of encryption!? Again, how is one supposed to look up an access token or email address if it is encrypted?

You don't have to encrypt the things you index. It's more to do with PII, addresses, etc. which you don't want to accidentally expose, and don't have to access too often outside of systems like billing.

It may also prevent you from storing a copy by accident. For example if you serialise a whole record to the output due to type/variable mistake. Or by revealing it in an error message. Of course these shouldn't happen anyway, but it's a good protection in practice.

> And it strikes me that if you don't trust the first level of encryption, the solution is to fix that, not add another one.

Nobody writes ideal code. There will be bugs. You prepare for that using defence in depth. This may mean separate minimal services handing out the sensitive data with extra audit steps. It may mean encrypting the data with a password not stored in the database, so that a trivial dump doesn't give access to them. "fix that" is not simple, otherwise we'd just "fix" all software :)

> That is an extraordinarily inefficient and costly way to develop.

It's the most trivial way to avoid all SQL injections. It's used in lots of projects. As long as you don't need to use parameters where they're not allowed in your database (for example table names), it's not a bad idea at all.

But if you have an ORM and want to use it - great. Most likely your ORM, or framework you use already takes advantage of prepared statements. If it doesn't you end up like Drupal recently (please correct me if I got the framework wrong) which did their own escaping because of prefixed table names and was broken at the framework level.

> be cautious about what you allow into queries.

This is what's extraordinarily inefficient. People make mistakes. Given big enough project, if you allow text queries, or try to be clever with own escaping systems, someone will make a mistake one day. Prepared queries (and good, tested ORMs) get rid of the whole class of issues here and are much more common solution than you suggest.
Canaries were used in mines to signal pockets of unbreathable gas; they would die before the humans giving them an opportunity to escape.

Canary has developed into a standard term for warnings which are detecting the danger allowing mitigation as opposed to predicting the danger which would allow avoidance.
The 3rd International Conference on Energy Production and Management
I recall an offhand comment from a source I can't remember¹ that some people when presented with mp3s encoded at various bitrates and flac encodings of the same song preferred low-bitrate mp3 above flac above high-bitrate mp3. The person theorised that it was because the low-bitrate encoding had more noise, which gave the sound additional texture. I draw an analogy with dithered palette images which can look different, but better, than full-colour images.

¹ Yes, this is the ultimate in unreliable anecdote, sorry.
Apart from pens, the author has created a sample Codepen project[0] for getting started. I recommend checking it out, as it's very helpful indeed.

[0]: https://codepen.io/chalarangelo/project/editor/DzvxKa/
Start with React, Redux, sprinkle a bit of Express and add just a bit of Node.js
You never know... I might learn something :-)
It's a reference to the canaries that were used in coal mines to detect carbon monoxide. Since then 'canary' has been used to refer to early warning systems.

https://en.wikipedia.org/wiki/Sentinel_species
Can we expect a similar POC for this P2P-based New Internet that you have scoped up? Basically, how feasible are the concepts explained by Richard?
Beware of self-taught people: there are diamonds in the rough, but in general, the problem is that practice does not make anyone perfect, _perfect practice_ makes someone perfect! There is a huge difference, and the problem is that people generally don't know what to practice and how to practice it - they may not even realize the existence of important topics!

Of course, there are exceptions to this rule, but the average person can save so much time and effort just by getting a basic education (learning about big-O, for instance). It does not have to be formal education however, just try to be around people smarter and wiser than you and pay attention to what they are doing and - most importantly - why.
For the record, I also checked my local 大润发 and 国美电器, where they did the same shit.
It is coming from the canary birds in the coal mines or in submarines[0]. They have a higher sensibility to CO than humans. This is now part of the common language to say that you sacrifice an animal or "something" to get early warning of something possibly more dangerous.

[0]: https://en.wikipedia.org/wiki/Sentinel_species#Historical_ex...
I don't feel like this argument holds up as soon as he goes into examples.

AirBnB: this might be a Euro vs US thing, but my Airbnb experiences have involved a lot more human interaction than I'd expect at a hotel, as my hosts show me around.

Fiverr, Upwork, et al: if you're expecting to use these with no human interaction you're going to have a very bad time. Detailed and frequent communication is a must if you want to get good work out.

Self-driving cars: for me and a lot of other people, the primary interaction they replace is between my hands and the steering wheel. Yes, they will, if they work, also eliminate the taxi, but that's very much a side-product.

Video games: OK, this one just feels like him being a Luddite. As a frequent DOTA2 player, I can assure him that the interactions I have, whilst not always pleasant, are most definitely human in nature - and often even involve human voices! Single-player video games obviously don't involve interaction, but they compete for time with other non-interactive leisure activities like TV or reading.

It's an interesting thesis - and his points on recommender systems and music are probably the most interesting part of the article - but I don't think he proves his case very well.
Come on man, 4 submissions in 5 days all leading to your startup's website? And a profile created 5 days ago with zero comments on anything you didn't post?

You could at least try to make it look like you're doing more than promoting your startup.
very satisfied with https://readme.io
Yes, this is why I cancelled my New York Times subscription, and have been recommending everyone else do as well. They are now in the business of publishing climate denial propaganda for profit. Don't support it.
They'd probably find someone willing to risk their license for extra money, but it still makes hiring such people more expensive, and could make the management rethink the whole idea.
Google Researcher Finds Link Between WannaCry Attacks and North Korea
Show HN: Spotify App: Your Favorite Bands Concerts + Flights + Airbnb
Don't apologize here. Apologize on the product page for this and all other similar things you do in the future to reduce amount of surprise for customers (and as a result also enmity created towards you).
I recently learned that you can also do advanced search (for e.g. date of modification) in Everything 1.4 (beta):

filename dm:>=16/05/2017 size:5mb..9mb parents:>=3
I recently installed Audacity on a new machine and was pleasantly surprised to not have to poke around and drop the LAME libs manually for it to work with MP3.
Maybe LAME can be renamed to LIME now?
Browse Instant Apps with AppBrowzer
My goal is to promote good engineering and security practices, and to make it easy to adopt them and deploy them correctly. I feel that's one area that doesn't get enough attention. At the same time, it's the only direction that will actually improve things in the long run. Chasing vulnerabilities is a fact of life, but even if you could eradicate them from your software today, you're not going to be safer tomorrow.

To that end, Hardenize doesn't check for vulnerabilities. There's plenty of existing tools that do; I don't want to reinvent that wheel.
As verbose and annoying to read MSDN and Microsoft documentation in general can be, I learned a lot of visual basic and the win32 API as a kid by reading the offline documentation. If it hadn't been so verbose and annoying, I don't think I would have been able to, as once I got accustomed to it, it provided great detail -- enough that beginner-me could piece everything together and write simple games using GDI and other win32 API stuff.

I also learned Python in ~2000 or ~2001 using their offline documentation and the occasional online session (didn't have internet at home at the time, but wasn't completely offline either).
No everything does not point to that. What I see is an endless sea of opportunities that we can't even dream of today. There will always be work for humans. Just on a higher level of abstraction than we are today.
I thought that's how it works?

https://jsonbin.io/api-reference
Docker's CPU impact is negligible, although it uses about 50mb of RAM (all-in, including the OS layer) on my Pi3.
There are rarely any checklists applicable everywhere in the same way. Why not treat it as: list of ideas to evaluate and prioritise/ignore into your own checklist for future/current project? It's not like it's all invalid because it's not fully applicable.
Infogram has been acquired by Prezi
Extracting Emerging Knowledge from Social Media [pdf]
Yes I think this is an important point, medical culture plays a big role in this. The only place I've seen a similar culture is in the army.

If you're exhausted or in physical pain or have a cold, you not only power through it but you suck it up and refrain from complaining, even if you're assisting a surgery. You may be officially encouraged to know and respect your limits, but if you actually do this you quickly go from being a "brother in arms" to weak and unsuited for the profession.
Essentially you're locked into the system -
The people who give you money (grant foundations, universities) judge you almost entirely based on your publications, and in how 'high' of a journal your publications are. As an early career researcher, you only have enough material to publish maybe one to three papers per year, so you have to make the most of it.
Let's say I have a paper and I can get it into Nature Genetics (high impact factor, not Open Access) and into PLOS ONE (low impact factor, OA) it would be almost career suicide to put it into PLOS ONE.

The funding committee will look at my CV, see I published 'only' in PLOS ONE, will think 'this guy publishes only in low IF journals, so his research must be mediocre, so he isn't suitable to receive our money' and pass the money on to someone else.

Some high impact journals offer OA publishing if you pay extra - $2000 to $5000. For the CV, funding committee it doesn't matter whether it's OA or not, that's not a bonus (usually!). But again, as an early career or PhD student you don't have that much money, $3000 is better spent on going to a conference to find your future boss.
Cards are easy to implement in design. The bordlerless MS-stuff might be more problematic for less simmilar blocks (e.g. more dynamic text-length and not all details always shown)
Fix copyright by covering Europe with leaflets
And that explains why I'm getting emails from Princess of whatever country.

I had this one email reserved for important things; no more.

(I had a feeling this company was just too slick for its own good.)
Just a heads up - it's the inventor of Nagle algorithm telling Cloudflare's CTO how Cloudflare works. This could be very interesting ;) (also stuff like that happens quite a lot on HN, I recommend using some user tagger extension)
"Storage prices" are abstract; my phone's non-extendable 32 GB of storage are real. Compressing my library from iTunes AAC to lower-bitrate Opus made it more than two times smaller — down to 5 GB from 11.
Ah I see, I thought there might be a setting I'd missed that just forwards your traffic through without cache etc
> This particular Sheriff's Department hasn't lost an officer in the line of duty since 1998 (and that's a good thing):

Great, here's to the next two decades of nobody being shot in a county where the neighbourhood with the most violent crime still has housing prices higher than 99.4%(!) of the country. The next time somebody is shooting at them, they might have the armoured vehicle out; you should be happy for that. Armoured vehicles are not a weapon of war, they are a common tool for protecting business and life. Banks use armoured cars , VIPs use armoured cars. If you were responding to a shootout, even if it's the first and last of your career, you would want to arrive in an armoured car.
I really have no idea what any of that means, no Android then?
Finally a one stop shop for artificial intelligence
I do because music collections still take large amounts of space in lossless formats.
Doctors are generally paid OK, but - most of them are idealists who want to help people DESPITE all the grueling work required. Maybe in US it's more ridiculous, but here in Europe (Switzerland), when I compare myself (software dev in bank) and my fiancee (internal doctor) -

(1) I get paid more for doing office work;

(2) I work much less, practically no weekends, no overtime, 8 hours day (she has 10-15, weekends, overtime not paid, night shifts that properly mess you up);

(3) I make mistake, even in production, no big deal - worst possible scenario bank would lose tiny bit of money, I could be theoretically fired. If she makes any mistake in her 40 years career, she can easily kill a person, go to jail, end up having massive debt (there is possible costly insurance for that) and having doctor license permanently revoked. Life ruined.

This is Switzerland - one of biggest hospitals in the country, and she is nowhere those numbers you mention, and unless she opens some private practice with tons of clients she never will. Surgeons are better-off, but they have literally 0 life, it's work -> sleep -> work -> sleep pattern, rushing to hospital at 3 am to do 10 hour surgery.

So quit your whining and pretty apparent envy, it's pathetic. Those people are among the most useful humans mankind currently has, definitely more useful than me, and I can bet quite a fortune same goes for internet nobody like you.
Hackers Holding Disney’s Latest ‘Pirates of the Caribbean’ for Ransom – Deadline
Indian teen builds world's 'lightest satellite'
Artificial Intelligence is like teenage sex: everyone talks about it, nobody really knows how to do it, everyone thinks everyone else is doing it, so everyone claims they are doing it.

Please don't write this off as a reddit-esque comment. I really think the analogy holds -- just take a look at Product Hunt front page, or HN for that matter.
I've said this in another comment, but here goes again:

Actually, the laptops I tried out were almost all Dell + Lenovo (I wanted a thinkpad or XPS). I think, as another commenter said, they were probably Linux + FreeDOS systems originally.
What the store owners would do is use Norton Ghost to put whatever (illegal) OS I wanted on there.

I think maybe there are large regional differences in product availability or regulation. I know it was a lot harder to buy iPhones in certain tier 1 Chinese cities than others when I was there, for example.
Oh for sure - I wasn't saying it to shut the conversation down, more to point out you're speaking with the knowledge of how the innards work :)

I could have worded it to say that better but was dashing out of the house
his buildings have glaring flaws

One of them being that they tend to be hideous
I've absolutely fallen in love with Spring Rest Docs https://projects.spring.io/spring-restdocs/ after a colleague introduced me to it.

Essentially you write tests that then generate your documentation, so you get a load of happy path integration tests and up to date documentation. It's a great way to ensure the documentation and code does what it says.

Our happy path integration tests produce markdown files detailing the route,payload, expected status codes etc and then we manually add these snippets to a menu markdown file. When we work on a feature branch with public API changes then our CI system detects documentation changes and when merged pushes to Jekyll.
Interesting. How come it's worse than in the west?
Google Tracker 2017: All the stuff Google has in the works ahead of Google I/O
Google collected NHS records of 1.6M patients on “inappropriate legal basis”
Awesome, I love this site

Yeah that would be super useful, so far I've been going by remembering usernames
I think storage on phones is a huge factor right now. A lot of the world is probably using phones with 8gb and 16gb of storage. That probably becomes ~1gb and ~9gb of free space after the OS. I'm not sure how much those countries influence the media format but even in the US a lot of people I know still have 16gb storage on their smartphones.
You may generally disagree with their update policy, but even in the worst scenario it's as much his fault as theirs.

And yet he wants to completely blame them.
You possess an uninformed opinion of what it takes to practice medicine at an acceptable level.
Will it be released world wide
That's the obvious general solution for everyone - having critical security vulnerabilities on their own channel, without being required to take the features/antifeatures too.
Compression also means less disk I/O, not just space.

I use ZFS and NTFS compression on all the things. For example, ~/.android on my desktop: "Size 1.49 GB, Size on disk 293 MB". Not everything compresses as nicely but in general you can save a lot of space on a desktop.
> This is patently false unless you listen on bad audio gear (bad DAC, bad cans).

Double blind tests suggest this is true for somewhere between 128 kbit and 256 kbit (256 kbit is CD quality, while 192 kbit is near CD quality, and the difference between 128 kbit and 192 kbit is miles compared to 192 kbit and 256 kbit; hence I suggest 192+ kbit. However, its 2017 and 320 kbit or lossless isn't a huge issue anymore; its even OK over 4G). Also, my quote is from 2000; ever since we swapped to LAME and ABR > VBR > CBR; ABR isn't even a static (constant) bitrate.

Quoting r3mix.net from 2000:

Facts:

128 kbit/s is not cd quality

256 kbit/s is cd quality (x) (in case of Lame or some Fraunhofer, not Xing)

In february 2000 c't magazin organised a blind listening test. 300 Audiophiles were involved, finalists tested 17 1-min clips from different artists (classic and pop):

original CD recording

128 Kbit/s Joint Stereo [MusicMatch (FhG) v4.4] encoded PC decoded Mac

256 Kbit/s Joint Stereo [MusicMatch (FhG) v4.4] encoded PC decoded Mac

all on cdrs and played in a Recording Studio on:

B&W Nautilus 803, Marantz CD14 with amp PM14 (Straightwire Pro
cabling and extra's) [DM30000- so bit more than $15000]

Sennheiser Orpheus Electrostatic Reference-headphones with tweaked accompanying amp (digital and analog out) [>$10000]

Conclusions:

90% of the 128 Kbit material was picked out

MP3@256 was rated to have the same music quality as cd!

If you find MP3@256 to be of inferior quality compared to the original cd, you're very likely to be doing something wrong with the test (correct decoder, no objective double blind testing, DSP filters distorting the process, ...) Maybe this is something for you. You can always read the article in the german c't 6/2000 on p92.

The treshold of mp3 transparency lies somewhere between 128kbit/s and 256kbit/s, depending on the kind of music and your hearing and equipment.
Transhumanism and the Promise of the Bodiless Mind in Ghost in the Shell
Well, that is you. Others just might be quite a bit more careful. Or is that inconceivable for you?
> MP3 is really, really​ smart. Like seriously.

How so/any links or search terms for the aspects you're impressed by?
It's not a good solution, but it's the only one that capitalism really provides - switching to the competitor to pressure the shitty company to stop being so shitty.
Ads? Simplest way to sustain. Pastebin does it.
Fair enough but the parent comment claimed that Adobe (and Blizzard) were keeping Windows alive. How can that be if it runs better or at least just as good on Mac?
As long as you keep the MP3s around, converting to any format for the 100th time is no lossier than the first time. What you need to avoid are chains of lossy formats.
Orbital eccentricity gives rise to tidal forces in this case.
Visual presentation platform Prezi acquires data visualization company Infogram
$ cat test.json

{}

$ curl -X POST -H "Content-Type: application/json" -d @test.json https://jsonbin.io/b/new

{"success":false,"message":"Snippet parameter is missing"}

$ echo '{"snippet": "{}"}' > test.json

$ curl -X POST -H "Content-Type: application/json" -d @test.json https://jsonbin.io/b/new

{"success":true,"data":"{}","id":"..."}
MAGIX Photostory Deluxe 2017 Serial Number and Crack Full Download
How to find best blackjack game development company india?
one of the commenters explained that Minimum Wage might be ok for a single person but will make it hard for them to provide for any dependants.

The point of Universal Basic income is that it's universal. Everyone gets it, including children (although maybe not the same amount as adults). There's no reason why someone should find it hard to provide for their dependents - the universal basic income is providing for them.
Been an avid HN reader for ages, but been seriously heads down doing the startup thing for about a year with zero time for blog or posting. Insane hours. Started surfacing a month ago so I can do more than just code and wanted to share a bit.

Not trying to hide the company, in fact pretty proud of it and the new things we're doing. But we are very early stage and still in beta.

I do want to add value through the posts and discussion like this regardless.
Makes me sad that something "new" still requires Flash in 2017 :/
>>> I suppose it's meant to stop you from providing "foo@aliexpress.com", implemented lazily by rejecting anything that contains the substring "aliexpress".

Most likely it is to stop you from making an address with "aliexpress" in it, so you don't look like affiliated to aliexpress in any way (think: phishing).
Most ;)
Gizmodo and Engadget are not "reputable news outlets", but junk blogs for users of browser toolbars with announcements for each chinese tablet. I never seen any half-decent article on such sites. It's even stupidier than clickbait, there are no sensationalism and attention manipulation, these sites are just content fillers, their authors just compose words randomly.
The comments are because Microsoft caused this problem in the first place - people want to turn off Windows Update, because Windows Update installs antifeatures too, and the only way to opt out of the antifeatures is to disable Windows Update.

In fact, there's a "run security updates only" option, which Microsoft provides, but which they deliberately and blatantly violated, by pushing their non-security updates through.

If Microsoft wants to stop this happening, then they need to provide a "security updates only" option, THAT ACTUALLY ONLY PROVIDES SECURITY UPDATES. This is not a hard concept.

"Turn off Windows Update" is indeed a suboptimal choice, like you say - what you should ACTUALLY be recommending to users, is to ditch Windows entirely if at all possible, and switch to an OS that is both secure and doesn't ship antifeatures.