skysight-inc/HackerNews huggingface dataset:
I would like to urge the Google team to solve one aspect of this problem, forever.

It takes no more than 20 minutes to prototype and then approximately 1 day to fully test the final solution that is necessary on their end to keep compromised emails from being fully compromised addresses forever, without any chance for you to ever know at any point in the future where mail REALLY comes from. Here is a description:

1 - Currently they (Google) correctly do 99% by allowing you to type a + after your email address to create a new inbox that is marked in a special way. For example if your address is jsmith747@gmail.com then you can give the company jsmith747+docusign@gmail.com when you sign up - that inbox goes to you and when you start receicing spam in the future to "jsmith747+docusign" you can tell how they got it. The phishing mails associated with this breach would have gone to the same place.

2. The one and only problem with this, which currently has a "security through obscurity" solution, is that anyone can run a regex and remove +docusign to get at the primary, main inbox: jsmith747@gmail.com

3. The full and complete solution is to allow me to create a new inbox in Gmail through a single step, for example "j45rsdfjdocusign" which is linked to jsmith747 in a single direction. Sending mail is not necessary. This must be enabled through the Gmail interface for signed-in users who wish to create a new inbox. They must be able to generate an inbox there, which thereafter goes to the inbox.

4. Spammers have no way to programmatically get the original underlying address when going through a list. When they get to j45rsdfjdocusign there is no regex they can apply to get the original.

5. If in the future j45rsdfjdocusign starts getting spammed, etc, you can add a filter.

There's no special authentication around it, anyone signed into their inbox should be able to do do it. They already have the infrastructure up for it around their + coding shceme.

To emphasize how important it is, here is a comment from this thread:

>The phishing emails had the color scheme changed, making them very phony and easy to classify.

Today. Under the current status quo, if in 48 months a much more legitimate-looking mail is sent to any of the same addresses, none of the recipients have any way to know the source of those addresses.

However, after solving this security issue, in 48 months anyone receiving even a very convincing phishing email could know instantly "oh, that is that compromised docusign account" -- that is, if they haven't taken a moment to redirect that inbox to the trash already via a filter.

I urge Google, who has very talented engineers, to implement the correct solution today. Don't wait. You won't get a better example of how important this is, than what's been going on. There are no policy implications as you already do it via the + trick.

I hope you go the extra mile and add a small step to finish solving the problem. Thank you.
Crystal – Free Bootstrap4 HTML5 Template
If the value of click-inducing wrongness wasn't such a well-understood force one would have to wonder how exactly all those writers were incentivized by owners of not-yet-free formats.

As it stands though, we just get to apply Occham: in online news media, A/Bing truth vs lies for clicks has a clear winner.
Snapchat was always evolving the product way too slow for me. It took them forever to liberate the emojis into stickers. The few hit features they nailed won't help them cross over. It could happen that they will continue to lack some core features, that make a social app used widely & frequently. Like how Facebook seamlessly added threaded comments somewhere along the way, while following conversations on Twitter falls under graph theory.
Thanks for the tips. Can you say which SQL tip is bad, someone has already picked up the Stored procedure comment -- really meant prepared statements.

Regarding regexp. You can do very precise regexp for many patterns. I agree some are harder, but I wouldn't say "rarely" in our experience.

The point about port 22 is that if you have it open, many people tend to use it more than they should. Effective automation should eliminate / greatly reduce the need for it.

If using AWS/cloud, then you can apply a security group to open when you need, but otherwise keep it closed at the network level at least. I agree it does seem to get people all hot an bothered.
Initiative is very different at sea, and was especially so before the era of effective radio communications. Nations trusted their admirals and captains to effectively be ambassadors as the effect they could have on foreign affairs during peacetime was enormous. From the USS Pueblo to the USS Vincennes the position naval captains are put is often significantly more isolated, complicated, and symbolically important than any other armed service.
The Best iTunes DRM Removal Tools for iTunes Videos/Apple music/iBook Etc.
We found the perfect VP of sales, and we didn’t hire him
I think his implication is that patentholders encourage the support/use of the format, abstract as it is (a concrete example being PC vendors obliged to sell windows machines only).
It is also not open source...
From your fingers to Nadella's eyeballs, but Microsoft will probably move 65% of its stuff to this style before moving on to the next big thing.

I think it looks cool, but I'd want to see Computer Management done in this style in a way that doesn't aggravate administrators. Mockups are nice, but I'd like to see a design language that works just as well for those who have information-dense needs.
This sounds very interesting for budding platform developers.

One problem is testing the more bespoke vuln routes - that's to say, the buffer overflows, the old package exploits, the strange oddities. By the sounds of it, you are building an "obvious security pitfalls" testing bot, which is in itself very valuable don't get me wrong, but i'm pushed to say that it's an NP problem to test bespoke vuln routes, which means the kind of testing process you are developing (linear-time problem solver) will struggle with testing the non-linear-time problems of bespoke vulns.

However, I wish you luck, hats off to this, it's a great idea!
So this is why the US was such an uncompetitive 3rd-rate country before the 1980's.
Fantastic resource - thanks, a16z!

Do you accept pull requests? I'd like to make a suggestion for the software and services page: http://aiplaybook.a16z.com/docs/reference/software

Also, I think there's an emerging category outside of MLaaS that focuses on ML/DL deployment (ops).

Here's a quick intro:

Seldon's mission is to help people predict and shape the future with machine learning. Our products increase efficiency and speed up the time to value for data scientists:

Seldon Core - a machine learning platform that helps your data science team deploy models into production. It provides an open-source data science stack that runs within a Kubernetes Cluster. You can use Seldon to deploy machine learning and deep learning models into production on-premise or in the cloud (e.g. GCP, AWS, Azure). Seldon is framework agnostic, it supports models built with TensorFlow, Keras, Vowpal Wabbit, XGBoost, Gensim and any other model-building tool — it even supports models built with commercial tools and services where the model is exportable. Fork Seldon on Github: https://github.com/SeldonIO/seldon-server/

Seldon Deploy - in development - a machine learning deployment platform for data science teams. Features include workflows with approvals and audit trails, advanced experiments, continuous integration and model explanations.

Seldon was part of the Barclays Techstars '16 and we’re working with customers in banking, technology and media sectors.

Disclosure: I’m CEO at Seldon.
Show HN: Quick access to football results
Ransomware attack again thrusts U.S. spy agency into unwanted spotlight
It does not require you to login at all. Currently it only displays exchange data with live updates.
The author claimed that codec choice matters little >128k, not that 128k is of equal SQ to 256k.

BTW, if you can easily discern 256k from 320k, I'd venture to guess that you are a 1% "golden ear" listener. OTOH, even my 60yo ears can tell 128k from 256k.
I'm planning to open source it once I implement a feature that requires an API key that can execute trades.
It's not only updates that do that. All the HP laptops I've used wake up from sleep in my bag while I'm moving.

The laptop would be hot enough to toast bread when I pull it out.
Show HN: Transferslot – Buy and sell side-projects featured on Product Hunt
Well, that's not gonna fly with the "code is data, data is code" crowd ...

If the newspaper apps get to load fresh front page images, why should a poor neural net be discriminated in its quest for fresh coefficients?

(Raw oppression and injustice there, get yer indignation reservoir topped up.)
Sorry, I hacked you
But money spent on space interested experts could be spent on climate interested experts.
I don't but i keep my phone in another room while i'm at home / airplane mode when necessary.
Everything's going to have a format, including your "flawless source". ...and you're not locked into anything with MP3.
There is already brain-changing tech, drugs.
> if you want to be healthy, remove unnatural things from your body (sugar, medicines, sitting too much, etc)

You should not stop using medicine without discussing this with your MD. I said medicine; you should do the same with drugs. Some drugs should not be quit cold turkey. To name one, alcohol.

Furthermore, the reason you should try to not use too many medicine, is because medicine (and drugs, and herbs) have side effects. So you (and your MD) need to think critical if the good outweighs the bad, and this should be reflected throughout the lifetime of the usage of the medicine. Because before you know it, you end up using medicine B, C, and D all because of side effects related to medicine A.

As for 'unnatural', criley2 touched upon that subject; how do you define that? Is synthetic counterpart always worse than natural counterpart? I find such advice downright dangerous. Following that logic, St John's Wort is always better than a synthetic anti depressant. St John's Wort has its place (if standardised!), but it has a lot of contra indications. It doesn't work well with a LOT of other medicines and drugs. For example, it is dangerous if used together with an SSRI or with MDMA. Yet, if people follow the advice by this writer, they'd prefer to resort to a herb like this (perhaps not even standardised) because "its natural".

I knew people who ate raw meat regularly, and had to be administered to hospital because of food poisoning. Yet refused, because the hospital wasn't 'raw food' enough. Don't tell me this "it has to be natural" bullshit. It stems from a fear of the unknown, technology or science. It claims to argue that only Earth and nature are good. I'm not buying that (I'm not buying the 'natural is bad' either though). What is good or bad for you has to stand on its own merit. Drawing the line between 'natural' and 'unnatural' (whatever that indeed might be) is a silly oversimplification. Don't buy into it! People who use it are trying to grab your money out of your pocket to make a run for it.
I made the exact same thing couple of years back, but shut it down because I couldn't think of sustainably maintaining such a "free" service.

I have a lot of ideas like this, but I am super confused on the sustainability part. What ways are there to sustainably maintain such services?
What's the CPU and RAM hit (in%) running:
1. Docker container engine on RPI
2. The OS layer within your container?
Could you highlight what you think are the important items in a web security checklist?
Couldn't it just be pressurised hydrogen?
I see it as one reason why lossy won't go away: reencoding losses are the tape-to-tape copy of the digital age, the very big M, very small V MVP of DRM: if you can't keep consumers from copying, the least you can do is keeping the master copy to yourself.
I always find it strange when apps like this are made unavailable in certain countries (in this case, the UK).

Video, I understand. From a consumer perspective it's crappy, but I do understand that licensing agreements for video are generally geographically restricted. But an app that goes along with a TV show? I can't see Sky (the UK network broadcasting Silicon Valley and most other HBO shows right now) distributing Not Hotdog.

It would be fun to play with it while the novelty is still fresh.
Top Providers of Wildcard SSL Certificates
Well, I've avoided the node hype because of people warning about bad debugging experience. With that, I'm going to try to avoid touching it ever.

I've used many web stacks over the years and not a single one defaults to blowing up like that. They all follow proper modularization... The framework cleans up objects that the framework creates, you deal with yours.

In any other framework forgetting to end the request would result in the request automatically ending when your code finishes. This includes Vert.x and Undertow which are just as asynchronous as Node(but also multithreaded).

Also how the hell does that leak memory? Is JS reference counting that bad? I've done some really stupid things in Java and C# but never leaked memory enough that it mattered.
How a hackathon turned into a multi-million dollar strategic partnership
Top 7 Productivity Apps for Windows 10
This article seems written to sound as spectacular as possible while hiding anything that might lead to real understanding.

"Habitable" makes it sound like we could move there and live there without too much trouble. That's not true. What has been discovered is that microorganisms might be able to live there, near hydrothermic vents that seem to create free hydrogen, which could support primitive life. That life could be similar to life living around hydrothermic vents on the bottom of the Atlantic Ocean. No sign of life itself, though, just a process that could theoretically sustain life without requiring sunlight.
The file size increase will continue to be an issue for a long time. As hard drive space started becoming cheap enough for PCs, people started wanting their songs on phones and MP3 players, where the storage was still expensive. As phones are now starting to get cheap enough internal storage for the flac file size not to matter, people are starting to stream music, where the file size is again important, as people are streaming music through cellular, where the price per gigabyte is still high.

Maybe, once most people, even in the third world, have unlimited data plans, music file sizes will stop mattering. Or maybe we will have moved on to something else entirely where big files is still an issue. Maybe people will want to stream music from earth to space stations or lunar bases, I don't know.
There is no way I will ever build a product, or spec anything for a client, that depends in some way on a Google offering other than public search.
It's not a TSDB. It doesn't support ingestion without some fancy batching. The insert rate will be too limited without that. MergeTree was designed for batch processing, not for real-time processing.
How long has it been tidally locked? Maybe the core is still hot. Or maybe other moons pass close enough to exert enough tidal forces to keep it warm.
Is that even an option? Where is that setting?
> But after MP3s aren't supported anymore

And how many decades from now do you expect that to be the situation?
On another note,

Why the 'snippet' additional step when creating new fiddles?

Being able to do:

curl -X POST -d @test.json https://jsonbin.io/b/new

will be cool!
> I think the more interesting question is, if you could live even if society didn't value what you were doing, and you could do anything (even nothing) and still be provided with everything you need to survive - what would happen to individuals and what would happen to society?

I think there are historical precedents, at least if you define "society" in a narrower sense. European royalty and nobility in the 18th century, present day natives of Dubai or Saudi Arabia, hereditary upper classes of all times an places. The common denominator being born to affluence and mainly mingling with your subsection of society.

The verdict? Seems like people turn out in surprisingly different ways when freed from toiling for basic necessities. Some become great scientists, artists, philosophers or philanthropists. Some become revolutionaries or even international terrorists. Some become insufferable whiners. Some just live a quiet life.
Songwhip: Music Links Everyone Can Play
Thank you for the reply; however, I am still having a hard time understanding how exactly Osquery works under the hood. How does it communicate with other hosts? With what does it query for information once it reaches a remote node? What kind of overhead does it have in terms of network transfer when querying? Maybe I am completely off base and am mistaking how this works... Is Osquery set up on every individual host and I query for that information remotely using whatever tools I have at my disposal?
I presume canary is an established term in this context but since I don't know what it is I don't understand your service. It sounds good though.
> Your data is in the clear within Cloudflare

Just a heads up you're telling Cloudflare's CTO how Cloudflare works
> Yes, he did. It was specific.

It was specific about the authors, but the question was about specifics of the book. Still not one bit of information about the book in sight in this sub-thread.

I don't care either way, as a bored HN reader going through this and that thread I just noticed the discrepancy, and while I have nothing to say about the subject being discussed I am able to see that the discussion itself does not have much substance but lots of partisan voting in lieu of substance. Come on guys, you do what you routinely accuse the other side of doing.
Been receiving fishing mails for this myself and I highly doubt this has just been about email addresses, as the mail subjects contained titles of signed documents.
Adapting Scrum to Managing a Research Group (2010) [pdf]
It is tough to discern whether the instruction from Microsoft is to safeguard customers or to increase their marketshare.
Yes, but time is money and I wish to exchange some of my money for some of your time so that I can have more time to myself doing things other than making sandwiches.
I'd be happy to try and do a Python version of this. I'm most familiar with Pyramid, but Flask and Django would be a learning opportunity for me. Much of this advice I've already implemented in Pyramid.
You can convert any Spotify, Apple Music or YouTube link by pre-pending it with songwhip.com. For example:

https://songwhip.com/https://open.spotify.com/track/5SI6jYhK...
A lot of Regex is a hint that you shouldn't be using regex. Regex is a bad parser and poor sanitizer.

I would wager that more than 50% of XSS vulnerabilities are due to bad regex when you should be using HTML or URI escape
That is the cloud icon. Make it gray and it is just a DNS. i.e. DOS protection armed and ready, but not active until you need it. That is how we use it.
The end of petrol and diesel cars? All vehicles will be electric by 2025
Depends. If the system more modern than actually hi-fi then chances are high that there is so much hidden DSP signal mangling that all the occlusions and illusions so carefully balanced by the encoder don't work half as good as expected.
The language is very small, may be interesting to write an interpreter.
Actually I know that contracts can't override the law. I was just trying to make a joke about the grandparent poster's strange use of the word "culture" in this context.
Pie in the sky thinking. Where's my flying car, dude?
For one, actual scales aren't exactly purely logarithmic because of physical limitations (overtones in low freqs) and secondly music has nothing more to do with it than any other log scale, eg ... well I don't actually a more common one
> The wise man adapts himself to the world, while the fool tries to adapt the world to himself. Therefore, all progress depends on the fool.
@all, do you guys know if osx / linux have the MFT like structures accessible to the user? Any links?
https://developer.apple.com/programs/ios/information/iOS_Pro...

> 3.3.2 […] The only exception to the foregoing is scripts and code downloaded and run by Apple’s built-in WebKit framework or JavascriptCore […]
I think they just didn't publish to other regions. Give it some time and I believe they will cover more than just US App Store ;)
Thanks so much for clarifying. We use your service - would recommend in a heartbeat.
Funding hugely expensive non-reusable technology, based on 70s Shuttle components, from traditional cost-plus contractors is not the way to put pressure on SpaceX. That will come from Blue Origin, and almost certainly the Russians and Chinese. It's unlikely they will sit by and leave reusability a US/SpaceX exclusive capability.
Apologies, you're right, it's not really covered as it's a bit of a niche industry term. It relates back to the days of coal mines, and the birds being used as an early warning system - https://en.m.wiktionary.org/wiki/canary_in_a_coal_mine
We upvoted this comment, because it made us laugh.
I appreciate your passion.

What a shitty way to put down his well supported argument, shame on you. This isn't about his passion - he is refuting your statements with actual facts to the contrary, and you try to make him out like he is passionate about the whole thing (planting the idea that he is somehow not thinking with his head, but with his heart) as opposed to taking a well-supported position against your handwaving that this is somehow all about market perception. Do you work for the marketing department or something?

Political slimery. Ugh.
https://www.youtube.com/watch?v=NGCRkPrcQkQ

Almost 2 years ago! :)
Good post, but in your opinion WHEN should you hire a VP of sales, as it seems like you don't have any immediate plans to hire a sales executive. And what's the difference between a VP of sales and a sales manager?
Getting started with mini.css's templates
Actually, the laptops I tried out were almost all Dell + Lenovo (I wanted a thinkpad or XPS). I think, as another commenter said, they were probably Linux + FreeDOS systems originally.

What the store owners would do is use Norton Ghost to put whatever (illegal) OS I wanted on there.
https://github.com/wtpayne/hiai/blob/master/a3_src/h70_inter...

https://github.com/wtpayne/hiai/blob/master/a3_src/h70_inter...
Ask HN: A variant approach on Basic Income
Basic Income is a hotly debated issue, especially on HN (I understand that YCombinator are doing their own experiments there) so I would like to discuss a variant that (as far as I know) has not been discussed by anyone yet.

(feel free to provide links or other pointers to places where this has been already discussed, if available).

The idea came to me while reading the story about Borderlands [1]: one of the commenters explained that Minimum Wage might be ok for a single person but will make it hard for them to provide for any dependants.

So here is my proposal: what if Basic Income was provided only for people below a certain age, say from day 1 to their 18th Birthday?
Alternative: should we also provide it for people above a certain age? Like 65 or 70?

Would this be more sustenable in terms of how to finance it? What type of effect could we expect on society, internal demand, job market, demographics?

[1] https://news.ycombinator.com/item?id=14344060