skysight-inc/HackerNews huggingface dataset:
Yes, the content of any message must be clear to any external observer.
I surely do know math, lots of it, including from my time at CERN in high throughput cluster data analysis.

Just I don't need to use most of it for doing enterprise CRUD applications.

I am speaking in general for others and the current state of the industry, I seldom failed any whiteboard exercise.
Show HN: Flo – Voice based video editing app powered by A.I and Deep Learning
IoT, banks and ethics
Yes, and I believe this avoids a large tax as well. Our politicians have completely failed us, but so many people are getting so rich they don't care.
Muneeb from Blockstack here. We're not reinventing anything at/below TCP/IP. That stack works fairly well and can function in a decentralized way.

We are replacing things above TCP/IP like DNS, Certificate Authorities (CAs), how data is discovered, data silos, and dependence on remote servers for running your apps.

http://blockstack.org/whitepaper.pdf has more details.
it really depends on your audience. i can tell you that ie11 is alive and well with our customers (ecommerce, home remodeling)
because markup is so 1990
Enough with the Microservices
Too late to edit, but here's a citation:

> ... Once the amount of risk is determined, consider cost, time, and effort of implementing OPSEC countermeasures to mitigate risk. Factors to consider include:

> (1) The benefit and the effect of the countermeasure on reducing risk to the mission.

> (2) The cost of the proposed countermeasure compared with the cost associated with the impact if the adversary exploited the vulnerability.

> (3) The possibility that the countermeasure could create an OPSEC indicator.

DoD OPSEC manual at pp 13-14

https://www.opsecprofessionals.org/official/081103_DOD_OPSEC...
Thanks for that. This type of thing comes up all the time. I used to wonder how web sites could be so dangerous, but it becomes clear when you think about all the extra access developers wanted for good reasons - imagine a web browser that didn't have access to the file system, and so on. I still don't like this state of affairs, but I don't have an alternative solution. Wayland should be more secure than X, but they're starting to poke holes in there for various reasons (color picker, warp pointer for compat, etc...).
Ask HN: Which libs will get you closest to the VueJS model on Android/Kotlin?
I'm in love with the client-side model that you get with VueJS + VueX + TypeScript. I also need to work in native Android land (Java, Kotlin, Xamarin are all options), and want to get as close as I can to the VueJS feel there. I'm open to somewhat esoteric solutions that don't do things the "Google way," which I don't value very highly anyway.
Malwarebytes Anti-Malware 3.1.2.1733 Crack Is Here [Latest]
Hi HN! I posted this to proggit as well, but I'm looking for multiple perspectives. If I left something out, or especially if you found the post confusing or you disagree, I'm very interested in your thoughts!
Larry from Blockstack here.
It works on whichever browser is your default browser and soon all of your browsers. Nothing is Chrome (or Safari!) specific! If you have a problem using Blockstack with your favorite browser, we'd love to know about it so that we can fix it! Sorry about the confusion!
I wish we could. My company has a very strict dress code. Suits and ties are recommended, but slacks and a dress shirt and sport coat are the bare minimum. Suits are required on many occasions. And man, let me tell you, I do not look good after schlepping 3/4th of a mile to the train and another 1/5 of a mile to the office in high summer in NYC in a suit. I look like a sweaty, disgusting mess. I basically just work from home during the summer except for when I really have to go into the office.
In my family we call this "protective incompetence."
People with a stake in society.
Yeah, the article was a bit poor on details. I expected some libass or other common library/codec vulnerability.
As another developer with ADHD - I was diagnosed at 31 - I agree with everything you've said. In my 20s it was solely my ability to pick up things so quickly along with being in a career that was less strictly 9-to-5 that kept me in work - things are much better now, although as you say there was a considerable adjustment period after starting medication that involved a lot of unlearning poor coping mechanisms and learning new skills.
Are those things vlc-specific or is there a common vulnerability shared with the underlying libs (libavcodec, libass?)
Easy, you cannot count with an executable being always compiled and executed in an OS with ASLR and HEASLR enabled.

So it becomes a game of luck getting some users exploited.
3 lessons from apple on making perfect products
Roger Zelazny? He gives an amusing account of him and Delany signing each others books here: http://www.tor.com/2016/05/26/a-few-more-words-from-roger-ze...
IMHO, US shall be governed by law. This is fundamental of our values. NSA misbehavior shall be severely sanctioned. If we relinquish these values, what distinguish us from the dictatorships we fight.
I did security research on VLC on Windows a year or two ago. I may be remembering incorrectly, but last I recall every module was protected by ASLR. Which means that remote code execution is not likely because there is no scripting or network comms to dynamically create a valid ROP chain.

I also didn't check for executable heaps at the time but given that all heaps are non executable (which they really shouldn't be executable in VLC) again I don't see how RCE is possible. Maybe there is some way to validate and therefore brute force addresses? I don't know. But there was no VLC POC and I'm sure they would have made one if they could have.

Use VLC it's the most secure media player I've seen.
Would this sort of thing be too convoluted?

Conversations -> Biboumi -> IRC
/
irssi -> bitlbee -´

I suppose some fidelity is lost in the irc->xmpp->irc conversion, but for basic use that might work?
I am the polar opposite of you, apparently. I work from home, and there's no guarantee I'll even be wearing a shirt on any particular day (provided it's warm enough). I enjoy the bleed over of work and home life -- I work all the time anyway and enjoy my work, so being at home just allows me to create a work life balance that works for me.

When I'm not doing work for my job, I'm doing work for side projects, non-profits I volunteer for, local activism, or work in my garden or on the fixer upper next door my partner and I own. I dress much the same every day -- casually as appropriate for the weather. In the winter that means corduroys, flannel shirts, and several wool sweaters. In the summer it means as little as possible - no shirt and thai fisherman pants are not uncommon. I'll put on a shirt if I have to jump on video.

This life style works really well for me. I've been at it for 5 years now and I really love it. And I'm very productive. To each their own shrug.
From the wikipedia article:

The entire game uses only 97,280 bytes of disk space. In contrast, most contemporary first-person shooters fill one or more CDs or DVDs. According to the developers, .kkrieger itself would take up around 200–300 MB of space if it had been stored the conventional way [0]

[0] https://en.wikipedia.org/wiki/.kkrieger#Procedural_content
These shouldn't require IPC at GB/s speed either. Modern sandboxes, like the one in Chrome, have a broker process which can open filesystem objects, device objects and sockets (file descriptors or handles) and pass them to a sandboxed decoder/renderer process, so there would be no need to stream filesystem data to the sandbox when the sandbox could do the file I/O itself. Even for Matroska ordered chapters, where the demuxer would have to tell the broker which files to open, the broker could enforce certain rules, such as enforcing that local mkv files only reference other local files, the files are all in the same directory, and that the files are always opened in read-only mode.

As for isolating decoders from video filters and chroma conversion, I'm not sure why that would be necessary, since those shouldn't require any additional privileges. I understand that retrofitting an existing program to use a multi-process sandboxing model is far from easy, and I'm definitely not volunteering to do it, but I don't think there is anything specific about a video player that is harder to sandbox than a web browser.
Things in my dot repo [0]:

git-overview: Short report about top committers, files with most commits and most authors. Nice when you checkout a non-trivial repo for the first time.

git-onNotify: Do something (like `make`) whenever a tracked file changes. Usually used to build LaTeX and static websites.

git-randomline: Chooses a random file and a random line number there. The game is explain that single line to some fellow. Do this repeatedly to spread knowledge about a codebase.

git-tarball: Pack the repo into a tar.bz2 file.

[0] https://github.com/qznc/dot/tree/master/bin
Android is a bit of a different situation:

- Android "administrators" (read: end users) are generally less likely to be cognizant of potential viral vectors than a traditional Linux/AIX/Solaris/etc. administrator.

- Android is capable of providing root access to applications should a user configure the device to do so, thus giving malicious software an avenue to break out of what's otherwise a pretty decent per-app sandbox. This is a concern due to the point above.

- Variation between Android installations (as far as malware authors might be concerned) is far less than the variation in Linux/Unix installations (especially server installations), so there's a higher probability of one exploit or vector being applicable elsewhere.

- Pirated software is more common on an Android device than on a Unix server.

A good AV solution on Android is therefore valuable, especially considering that Android malware does exist in significant quantities. It's less valuable if you've never rooted your phone and have never installed apps outside of the Play Store (or something else that uses its repository, like the Yalp Store), but still does offer some value beyond compliance reasons.
> I even kiss my wife and kids in the same order (youngest to oldest, oldest of course being my wife).

Meet George Jetson!
The beauty of this, as I see it, is that you can now you can "tap" into the many existing communities on IRC instead of trying to force existing communities over to XMPP or web based platforms.
I never used Notational Velocity, but this seems like an awesome UI to use for Notes. As long as you have powerful search you can always find your notes by their content and create new ones when the ones you find aren't relevant.

How many times I've created a new note related to something I wrote about before, but didn't want to search for. Now I'd basically be forced to search for it when I tried to create the new note and I'd assume this would help keep all those thoughts and ideas at least somewhat related to each other.
Considering that XMPP has more features than IRC, having to map the superset to the subset feels stranger to me than the opposite.
That's strange, I still use markup every day in the current year.

To add to the strangeness, every website I inspect with browser tools shows me it has HTML. Are all websites from the 90's?
To be honest, I think the important thing is to keep India clean, I do not care what type of prime minister has or what his personal beliefs are, whether he is a devout hindu, muslim or christian doesn't matter. But I liked the idea of a cleaner India, the fact that the campaign is not working is a reflection on our own society. There are millions of jobs out there for the masses just in cleaning the roads of our cities. Building sewers can generate another large amount of jobs, both skilled and unskilled. In the 1800s the whole of chicago was lifted up using hydraulic jacks, block by block just to lay sewers for people.

Providing toilets is important which is why it has to be brought to the forefront. If running water is an issue in rural India, what about the cities? We are not providing sanitation for city dwellers itself, just look at the large number of slums - do they have running water? In Jaipur I have seen whole streets flooded with feces from the shanty towns in the suburbs.

The problem is not only with a dysfunctional government but a culture where bribery is accepted. Practically anywhere you tried to buy a home in the past people would ask for cash in suitcases just to avoid taxation. If a driver gets caught by the police for a traffic offence, the rich just send money down. In this society you blame the government? Isn't a government made up of its own people?
Today in a developed nation one does not seperate the rich from the poor. A cleaner's son and a politicians son attend the same school and can become best friends without segregation. In India on the other hand the rich must send their children to private institutions while the government schools can't function properly thanks to lack of funding. And, oh the way the rich spend, particularly on their weddings. What kind of example are they setting for the poor?
It is entirely possible today to have water free toilets which do not stink. In Singapore there are many such toilets and I've seen prototypes round the world that do not stink, everything is possible. Its just about the mindset.
Well, there is firejail now. It does Xorg sandboxing through xpra, I don't know how it affects hardware acceleration though.
Deploying Docker images with OpenShift
Protection signatures for Check Point's IPS:
https://www.checkpoint.com/ips-protections-security-gateway-...
Oh man, I haven't thought about Future Crew in a long time. Brings back fond memories.
10 Awesome Things to Do in Ubud, Bali
Check out this blog about the amazing things to in Ubud, Bali

https://www.theblueberrytrails.com/index.php/blog/entry/8/10-awesome-things-to-do-in-ubud-bali
Ask HN: What are your front-end design philosophies?
Fair enough, I'll definitely take this for a spin, all the IRC clients available on Android are terrible. If I can't make something like this work I'm going to have to bang out my own "suckless" Android IRC client...
At least in the province of British Columbia (where Vancouver is), home owner grants reduce the amount of property tax locals pay. Plus there are grants for seniors or people with low-incomes.
To make markup expressive enough for general purpose logic, you have to extend it to such a degree that it becomes much more complex than the tools it replaces. This is especially so when dealing with an XML-like syntax, with its verbose, interleavable end-tags, rather than the much more succinct S-Expression style of Lisp. Mixing data and logic basically requires homoiconicity or else tooling requirements explode.
Yep, didn't come out pretty with the camera flash :)
Isn't this more or less true of most kinds of property?
Demystifying the Obfuscated Layers – Explorations in Linux
That's absolutely awesome and probably goes well with http://intercoolerjs.org/ as it's doing the same, only for AJAX requests.
Is it? The page loads for me
After working with JSX, HTML/templating just feels like a step backwards.

Web pages these days are far less about the template and far more about the logic and interactions involved.

Subsequently building up from HTML the way pages used to be built and then embedding code doesn't really line up with the way modern web apps are developed.

While it may have a niche in front-end design, for the kind of work I do at least it comes off as though the platform "allows" devs to build web apps entirely written in CSS.
Replace Infrastructure Wholesale
Breaking the iris scanner locking Samsung’s Galaxy S8 is laughably easy
An AV on a rooted phone would not have that restriction. Seeing as how rooting significantly increases the probability of malware infection on Android, such an AV would also be installable when it's needed the most.
Helix: Build and Deploy a Ruby Native Extension with Rust in 10 Minutes [video]
I agree with what you've written, but just wanted to note that Nativescript provides a React Native equivalent for Angular 2/4+.

I still prefer React Native overall as more people are using it and the ecosystem is bigger, but using Nativescript with Angular was surprisingly pleasant when I first tried it out a few weeks ago.
I notice that you don't currently support MAM for private messages. For full IRC bouncer replacement, I think that would be an useful addition. Any plans to extend the "persistent" feature to private messages too?
<Nitpicking etymology>

A laboratory is the place where you work. From the latin 'laborare', roughly translated 'to work'. A CS grad student would work in a lab. As would a carpenter. The difference between an office and a laboratory is usually that there are specialized tools in a laboratory.
Sounds like a great place to work
It should be noted that this is a tool intended for non-programmers (think: people who can use spreadsheets), not for (pro) developers.
Using an IRC client for XMPP guarantees a sub-par experience. I've been doing that for years with bitlbee (how do you join a MUC again?) and later with irssi-xmpp (whoops, Segmentation fault), but IRC has much fewer features than XMPP, so it really doesn't make sense.

My favorite XMPP feature is Message Delivery Receipts ([0], the nice little green checkmarks that you have in modern XMPP clients, similar to WhatsApp), that just aren't supported in the IRC protocol. Other gotchas are chat state notifications ([1] "user is typing"), last message correction ([2]) and multiple client resources.

It does make sense to use an XMPP client for IRC, though, as most of the IRC features can be easily mapped onto XMPP. I'm using yaxim and poezio to chat with folks on IRC, via biboumi.

[0] https://xmpp.org/extensions/xep-0184.html

[1] https://xmpp.org/extensions/xep-0085.html

[2] https://xmpp.org/extensions/xep-0308.html
Install a Mobile Product Catalog App in 3 Steps
Dangerous? I wouldn't say it's dangerous. Fashion is like art or music. It's an expression of who you are. I would argue that vanity is such a large part of humanity that, to others, it IS who you are - or at least who you are perceived as.

If allowing fashion to be a reflection of yourself is dangerous then I would argue that the music you listen to while coding, the background on your desktop, and the decorations on your desk are also dangerous.

Of course, if you're Mr. Spock or Mark Zuckerberg, maybe these are all inefficiencies in your life and you've successfully minimal-ized your life into an exact replica of an IKEA catalog.
The app looks really well put together. I went as far as creating an account until I realized it unusable on mobile--I need to hit control + enter to create a note.
It's an open-source project with 4 years of research and development behind it. The architecture implemented here is actually inspired by David Clark (Chief Protocol Architect of the internet) and his new design principle, called trust-to-trust design, that aims to fix critical security issues with the current design of the internet.

I agree that rebuilding everything is hard and that's why we reuse not only TCP/IP and everything below TCP/IP in the stack, but we also reuse existing infrastructure in a decentralized way.

We've already built this stack and have been running it in production for 3+ years. Please see our peer-reviewed research papers and our whitepaper at http://blockstack.org/papers for more details. Happy to answer any questions!
What Startups Can Learn from McDonald's
Show HN: Easy State: A library that replaces React setState with plain JavaScript
Companies like this are why breaches can be so devastating (financially and privacy-wise) to the general public [1].

If you know who their credit card processor is, you should go directly to them and report the problematic business. You can also go to the credit card company sites and contact them directly. If you know whom their QSA is, I would also contact the credit card companies about the QSA and they can investigate whether his PCI auditor status should be revoked. [2]

It is in the credit card companies best interest to investigate things like this which is why the channels exist to report these instances.

For reference, requirement no. 3 of the PCI standards cover the appropriate procedures for storing this type of information [3].

IANAL and all that..

[1] See the first comment of https://news.ycombinator.com/item?id=14401825

[2] https://www.pcicomplianceguide.org/how-do-i-report-a-pci-vio...

[3] See page 36 of https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2....
I wouldn't agree. First to tackle the colour part, having a tie in a nice color offers a great accent to the larger canvas which allows you to use bolder colours then when applying it to the entire shirt.

And for the practicality I find myself half freezing to death this time a year when I walk to work without a tie (around 45°F/8°C with brisk winds). Having a tie efficiently blocks the wind from entering the chest area through the button seams and around the neck without requiring me to bring a bulky scarf (which is very unpleasant in the afternoon when temperatures have risen to about 70°F/21°C.
Oh that looks grand, thank you for pointing that out. I'll give it a try.
Mirroring – Architecting for Throughput
Drupal VM does Docker
What are Smart Jeans?
Yeah, open to suggestions! The point is to use the keyboard for everything so mobile is tricky.

Also, all the code is on GitHub (https://github.com/tmm/notational).
Plane tickets have an odd setup in CC processing systems where it actually shows origin/destination in the transaction information itself. The only other similar example I've seen has been in payment processors like Square or Paypal where they'll include both that it was a Paypal transaction and some customizable string showing the merchant who actually received the payment.

Other than those sorts of situations though, Visa/MC or the bank issuing the cards only know where the transaction occurred and how much it was and don't directly get SKU-level data on what was purchased barring some other sort of partnership with the merchant.
And that's the problem. The two modes doesn't "change" (or the apps are just the properly optimized for the different modes) the apps enough so in reality, an app is either good in one mode or the other, not in both.
Yes, but CRUD applications are typically done for small applications on uninteresting problems where people don't really care about code quality. So they have a bad reputation.

The worst CRUD applications, is where they've been extended where they are no longer CRUD but the architecture still assumes CRUD.
The article has a few missing details. Is the concentration of the toxin in the larvae greater than the concentration of the toxin in the mother? Is the toxin also lethal to something that eats the worms/larvae? Perhaps they must choose between having a toxin+antidote and being someone else food.
His youtube channel [1]

[1] https://www.youtube.com/user/shiffman
Since git 2.9 there is another experimental, opt-in, improvement to git diff that results in more readable diffs: Heuristics that try to capture the logical changes better. By default git tries to delay the start of diffs as long as possible leading to bogus highlighting of e.g. doc comments (slash star star).

See https://github.com/blog/2188-git-2-9-has-been-released (section Beautiful diffs) for an example and http://blog.deveo.com/whats-new-in-git-2-11/#experimentalheu... for another similar option that I did not try yet.
Can I use this in .net core projects?
Not sure that's true. His team seems to have been the victim of it, so that complicates things. May be a wake-up call to the party that's currently in power. It's fascinating because political abuse was exactly what Snowden and Greenwald warned against and yet they don't seem to care much because they dislike Trump. Deep down everybody is a political hack.