skysight-inc/HackerNews huggingface dataset:
"If this is a genuine public safety feature, if Facebook really are using Safety Check out of concern for their users welfare, then they should fully accept the concomitant responsibility. They should expend real resources to liaise with the relevant agencies and ensure that Safety Check is deployed only when appropriate, that it is accurately targeted and that it helps rather than hinders relief efforts.
If Facebook wish to rely on their usual excuses of "move fast and break stuff" and "it's not our fault, it's the algorithm", then we should see Safety Check in those terms - as a careless and cynical effort to boost engagement metrics.
"

100% agree. I think it's a well-intentioned effort gone wrong because the tuning is so off. I know a few engineers at Facebook who work on algorithms + related tooling, I'll make sure they see this.
OTOH, what rr also brings to the table is reverse debugging, and that makes these kinds of torturous debugging an order of magnitude easier.

So not only are you able to reproduce the error, but you're also able to go backwards to find how it happened!

I, for one, barely use gdb anymore because reverse debugging with rr makes debugging so much easier (well, technically, I still do use it, since rr is not an entirely new debugger, you still end up in with a gdb prompt).

FWIW, one of the first things I tried when I first used rr was to debug a crash I had debugged years earlier, that was due to a miscompilation by GCC. As that had happened years earlier, I didn't remember the details of what code was miscompiled in what particular way, but I do know that debugging that took a long time, and I had only figured it out by chance because valgrind pinpointed to related code. With rr it only took minutes to find the root of the crash.
We on the Go team team also muse about a Go 2.x occasionally (no concrete plans), but the number one rule would be not pulling a Python 3 or Perl 6 and fracturing the community in two.

If/when it happens, it won't be scary.
I'm serious but I don't use gimp so what do I know. I'm posing it more as a theoretical question of why can't the collective we be asked to pay for features we want. What I know of Gimp is that it has majority of the features of PS so why would the power users not be willing to pay for advanced features that probably only they use. The answer in my mind is that they are willing to pay but they pay adobe because gimp doesn't ask for money.
For all its flaws, there's nothing that can actually replace the functions of Facebook, especially if you have a lot of friends and family all over the world.

It's a centralised platform where I can message almost everyone I know, and put people in group chats.

It's also very useful to be able to tell at a glance where people are, and get updates as to what people are doing or where they are going, and also to be able let other people know where I am or what I am doing.

It does have its fair share of issues, like too many posts from pages showing up, or people tagging other people in posts showing up. It also has its ethical issues, but for me they are outweighed by the power and convenience of the platform.
You clearly haven't been following the front page of hacker news.

From yesterday: Russia hacking US elections https://news.ycombinator.com/item?id=14547091

From 2 days ago: Russian government hacking Ukranian power grid https://news.ycombinator.com/item?id=14537138

From 7 days ago: Russian government Turla group using satellites to hack other governments and pharmaceutical companies https://news.ycombinator.com/item?id=14503230
> Remember Noam was the same guy who for political reasons did not want to believe Pol Pot was mowing through millions

http://www.abc.net.au/news/2011-07-01/brull---the-boring-tru...

If the best criticism of Chomsky is from 40 years ago, and about Pol Pot - a person Chomsky believes is a mass murderer, I think Chomsky is doing quite well.

> Additionally, there is no need to "manufacture consent" as only a very small minority would object to any action against N Korea at this point in time.

Consent has already been manufactured!
This. It seems pretty irresponsible for Facebook to be running this out in the open with an algorithm which is clearly not doing very well. It should have human approval for each "safety check" event and use that to tune the algos until they're VERY confident that it's doing the right thing. I'm guessing that the radius is so large in order to catch people who might have gone / been in the area. I do wonder if they even have enough tracking / loc data to ensure that they'd pick up a useful % of affected individuals. It seems like they went for "cast a wide net", but in this case it has quickly-diminishing returns.
>And if it's not just a change in a default option, but the removal of laziness, we lose something, which will make the choice less obvious.

What would we exactly lose?

>As far as I can see, Idris is too much like Haskell to take its place. Porting thousands of libraries to a new language is a huge effort, so a huge advantage is required, which I don't see Idris offering.

That is true, though. Perhaps Rust is the safer bet, even if it lacks many nice things. The sum is probably quite a lot better still.
Vicarious: General Game Playing with Schema Networks
I was comparing geographic size, the 6 miles referenced by the poster above me. Both events were in a small geographic area.

I guess I feel I have the right to make the comparison. I wasn't there in NYC, but I had "some skin in the game" on 9/11 so to speak. From that experience, and from later ones, I can put myself into the shoes of somebody wondering if their loved one was mixed up in the London fire. To them, it doesn't matter that the fire affected only one apartment building in London.
> That place being the cool esoteric language that everybody fools around with on the weekends, but is almost never used seriously?

Indeed. Some people actually use Haskell, though. They even claim it's fun and productive, but having done so myself, I'm forced to be undecided on whether they're just suffering from Stockholm Syndrome.
The government has made it so hard to get clean, cheap, relatively safe drugs like MDMA, that people who want to get high (which is alot of people), end up taking what they can get.

And what they can get cheap and easy is crystal meth which is anything but "relatively safe" and destroys lives and the community.

For goodness sake if the government want to stop the crystal meth epidemic, then give them legal, cheap access to clean, professionally made "relatively safe" drugs like MDMA.

People on real MDMA are not doing good things for their own personal health but they certainly aren't being violent. Well heck actually maybe all that dancing is good for their health.
Couldn't agree more.

I wanted to create a task for my web app to run every 15 minutes and I didn't realize how complicated it was going to be. I'm using AWS beanstalk and I wanted the task to run on 0,15,30,45. The "simplest" way to do that was to add a worker box and create a cron job (it uses AWS SQS as an intermediary). I want to make sending email tasks as well but that means I'm going to have to move deeper into SQS integration and I don't want to be stuck with AWS. My only other option seems to be setting up and maintaining rabbitmq/celery and that looks like a nightmare. :/
Slack Said to Draw Interest from Amazon
Note that only the os/exec package has this new cleanup logic.

If you really want to do something nasty and intentionally confuse your child processes, the lower-level os.StartProcess and syscall packages are there for you. :)
Show HN: Send messages via Alfred
Long awaited Snapchat feature, coming soon?
Did you even read the beginning of the sentence you partially quoted?
Absolutely. Sustainability only becomes an issue when there's something to sustain :-)

Beginnings are a creative effort, undertaken by passionate pioneers (rarely in it for the money), with outcomes that are notoriously hard to predict in advance. The hallmark of academia.

That's why I said the later transition hurts -- it's a conceptual and cultural shift, not merely financial.
Learning by experimentation is a perfectly valid way of learning. You can't force people to learn in depth but, if you want to, there's no problem gradually deepening your understanding over time by trying stuff and thinking about it.
Vulnerabilities Could Unlock Brand-New Subarus
TRUMP DECLARES WAR ON 'FAKE NEWS MEDIA'
I'm using

cygstart --action=runas

This works well, too.
"So not only are you able to reproduce the error, but you're also able to go backwards to find how it happened!"

For some (and i'd guess a bunch of the people i mentioned in the parent comment), they definitely find this easier, but just to present a contrarian position: i actually don't. I admit to being weird - in a former life, i was a gdb maintainer.

I also was trained by people who believed the right approach was not to immediately try to find the sets of conditions and variables that caused your problem and declare victory, but to go and meditate upon the code and think about it until you understood it well enough to understand why this might happen even when you think it couldn't. That will often enable you to understand the code well enough to see what else is wrong.

(Again, i don't claim it's better, i just claim that's why i tend not to care about RR. The hard part for me is the thinking about the code, not the finding the sets of conditions and variables that caused a particular set of errors)

It's definitely the case that, personally, when i follow the "find conditions, fix bugs" approach, i tend to write much buggier code (even with good testing strategies) than when i follow the other way.
How are you so sure what a bird’s brain is capable of? And fwiw trees and plants do have chemical means of communication.
Best Free CRM Software Software to Consider in 2017
It is also an indictment of Facebook, where such a thing is not even (supposed to be possible).

I had an account for ten years, my real name from day 1, my real pictures from day one, lots of RL friends plus friends I basically casually made on Facebook. I had a great time posting about whatever and hating on Facebook, until one day it greets me with "we have to confirm your identity", because some people who surely did not show their ID clicked "fake profile" enough to basically shut me up. It's not even paranoia that makes me not upload a photo of my ID (with everything but name blacked out), it's the principle. I do have email or phone numbers of my close friends, I don't need FB, but for pretending to be inclusive it's pretty fucking sinister.

It's like I wouldn't hate a piece of chewing gum per se. But when it's advertised as a full meal it becomes something entirely differently.

For those who can't stand others complaining about FB, strap yourself in, I can't stand you still using it, and unless FB changes drastically, that will remain so. I'm Momo, you're the people who got abducted into day cares. And hey, I even went inside with you just so we could keep playing. What a waste of time that was.
And then they use a Chinese VPN.

You can't stop a nation state with by geoblocking.
Unsecured Database Exposes 10M Car VINs
I agree with the article yet the article fails to address a large benefit of DLTs, reducing transaction/3rd party fees. A ~2% reduction in costs is still enormous at scale.

Another benefit that is overlooked is adaptation. Once mature, creativity and innovation will happen faster with DLTs.
Maybe there should be a button that dumps out your project as .cpp files and a working Makefile... It's not hard to take your arduino source and figure out which #includes are being hidden from you, write your own Makefile, etc if you already know what you're doing, but if you don't know what you're doing and try to stick your Arduino code into gcc, you're trying to learn with something that started broken.
That's crazy. Ok, "you can't put on your resume you worked here or we will take you to court."

The judge will only want to know one thing: is it true whether or not that person worked for Konami.

Is there no paper trail to substantiate that? Contracts?

Did they have no signed contracts, and get paid in cash?
Street wars 2035: can cyclists and driverless cars ever co-exist?
I don't want to write off everyone working for the NSA as liars, but NK seems like a good scapegoat. Why would we believe anything the NSA says/reports? They took our trust with our privacy.
Fantastic Hero City Battle
They're developing another game with the engine used for MGSV, but you could account that to just trying to recoup costs involved in making that engine. Otherwise I don't know of other console or pc game projects of theirs.
Attendance Monitoring Using Face Recognition
They clearly had a fluent Chinese speaker working with them. https://www.flashpoint-intel.com/blog/linguistic-analysis-wa...

Of course I'm sure the NSA has a number of fluent Chinese speakers.
Plano Real – The plan behind history recalls the feat of the Real Plan
It embarrasses me to see such conspiratorial nonsense on this website.

There are many reasons why such things happen: coincidence, someone google the topic from the same router IP address, ad tracking on Googled websites, etc etc

The idea that one of the worlds largest companies would risk their entire business by secretly recording their users for ad revenue is absurd on almost every level.

Yet some people on HackerNew, a forum that self-selects to a highly educated/intelligent part of the community actually believes it.

It's mind-boggling.
China has just shy of 1.4 billion people. That is not more people than Facebook has users according to this statistic》
https://www.statista.com/statistics/272014/global-social-net...
Visio hasn't been updated for diagramming since the early days. All they've added to it are enterprise features while it's diagramming engine is stuck in he late 90s (it was great back then, now a days, omnigraffle and sketch are just more modern).
How to use Cron
‪Messaging Startup Slack Said to Draw Interest from Amazon
I had it happen to me too. Why would I lie about something like this? This is my real account, I'm a real guy.

My wife and I were talking about celebrating my kids birthday party at Arcade Foobar. A day later she started seeing ads on Facebook about Arcade Foobar.

It's grotesque and one of the many reasons why my wife and I no longer have facebook accounts.
Are these actions legal in Japan?
I pull weeds in my lawn. Sunny weather is nice, but not required.
You can bikeshed interviewing processes that leave out this or that potential candidate forever. And any candidate who bombs in any kind of interview could turn out to be the next Einstein.

There is no one-size-fits-all interview technique; if there was, it would be used all over the place. Good interviewing techniques are about playing the numbers, not leaving no programmer behind.
> If I request a certificate for "* .github.com", how do you propose that Let's Encrypt check all of the infinitely-many possible subdomains?

They check you have the authority for github.com and you're done. It is a well understood practice that if you control the parent, you control the children.

> For example, let's say an attacker requests a wildcard certificate for "* .github.io". Hypothetically, LE could say: "OK, to prove that you control all possible subdomains, place a particular nonce at http://e9cd20b9c359939c.github.io/.well-known/acme-challenge.... Our attacker quickly registers the username "e9cd20b9c359939c" on Github, satisfies the challenge, and gets a cert that allows them to impersonate other Github users.

Why would they ask you to verify e9cd.. and not just http://github.io/.well-known/acme-challenge ? How can the opposite be true - i.e. I control github.io but I don't control something-else.github.io ?

I think we can both agree that HTTP challenge-response has flaws and DNS verification is the way forward.

> For example, Google probably wouldn't be happy if a compromise of their search engine at "google.com" was escalated to a compromise of "accounts.google.com" which handles user sign-in.

If I compromise the DNS of google.com, I probably get accounts.google.com and all google.com children in the process.
RabbitMQ is super simple to setup and use (from my experience). I've been quite pleased with it.
Thanks for correcting! It seems that these are low-level intended releases, not core damage. Bad for a power plant, but not horrifically bad.
That's not an unreasonable stance. I lean the other way. I think, that there is an opportunity, if not a requirement, for fine grained tuning. FB knows a lot about it's users, and can do a better job of predicting who needs the i'm safe button.

Clearly there's a geographic component. Someone in the area, around the time, or in the area regularly. There's probably a fancy combination of, how bad the event was, how widely the event was reported, how close you are to friends, are you traveling to the area, and a bunch of other factors.

Clearly they can handle it dynamically. If you get the "are you ok?" messages, they can add you to likely events, and offer the i'm safe. They can make it easy to add yourself to a disaster event.

There are a lot of people in London. They have the social graph, coupled with location and messaging data. They can do a better job at targeting.

Again, i respect your opinion, but your needs, and my needs are different. I think they can do a better job at meeting both of our needs.
New flow battery tech without precious metals from Purdue lab
The tools are there for you to try it:

https://www.charlesproxy.com/documentation/faqs/using-charle...

http://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/Conf...

You could probably also do it with the emulator. You may need to do something like https://www.bettercap.org/blog/sslstripping-and-hsts-bypass/ or it could be even harder: http://docs.mitmproxy.org/en/stable/certinstall.html#certifi...

There are of course ways around this: https://serializethoughts.com/2016/08/18/bypassing-ssl-pinni...

If you need some more hints: https://github.com/ac-pm/SSLUnpinning_Xposed

https://forum.xda-developers.com/showthread.php?t=3034811

https://eaton-works.com/2016/07/31/reverse-engineering-and-r...

If you do this, please write it up. I'm sure that many people would be interested in this research if it hasn't already been done.

EDIT: In the spirit of POC||GTFO, I got curious and did it myself. I don't see any evidence of any mic uploads. The worst thing I see is it posting your current location. Here's a screenshot of the typical stuff I was seeing (this particular one is for the messenger portion of the app, and it looks like it's pulling in assets for stickers. I have the Pusheen pack because it's hella adorbs): https://i.imgur.com/dVekldx.png

It's POSTing to graph.facebook.com as you scroll to get more data. It's just JSON and pretty easy to figure out what's going on. I just followed http://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/Conf... . I guess they're not pinning their certs, at least on my Nexus 7 and the version of the FB app that I used (v26.0.0.22.16 on Android 5.1.1 on the 2012 Nexus 7, since that's what I had laying around to mess with easily).

This literally took about 5 minutes to set up and get working. I encourage those curious to try it and see for themselves. I just read http://www.portero.com/blog/a-brief-history-of-gucci-infogra... aloud (I never shop for Gucci handbags, so seeing ads for them would be the tell) to test. I'm not some forensics expert but again, looks like nothing I wouldn't expect, definitely not uploading audio streams to Facebook as I'm speaking or +/- 5 minutes. Again though, check it out for yourself.

EDIT 2: I searched for a few unique strings from some of the decoded JSON my N7 was sending to FB and found https://github.com/macliu010/android_facebook_decomplied , which should be interesting for those following along at home.
Safety Check wasn't a carefully planned and considered effort by Facebook, it was a hackathon project that went into production. There are many other ways that Facebook could have responded to that issue. Given the size, influence and profitability of Facebook, Safety Check seems extraordinarily half-assed.

I'm not in any way convinced that Safety Check does actually dampen fear. It provides information of very poor quality ("not marked as safe" or "safe") in a very poorly targeted way, without any kind of meaningful context. That kind of uncertainty is rarely reassuring.

If Facebook took the issue seriously, they could easily address many of these shortcomings. They could provide this kind of information in a relevant and contextual way, counteracting the cognitive biases that lead us to worry. They could deeply examine how social media can stoke fears and engineer reassurance into the fabric of their network, rather than bolting on a crude alert system that was hacked together in a weekend. I doubt that they will, because fear and misinformation is clearly very profitable for them in all sorts of ways.

I'm reminded of the AMBER Alert system - a well-meaning but highly ineffectual response that has greatly contributed to the climate of fear.

http://journals.sagepub.com/doi/abs/10.1177/0887403407302332
http://journals.sagepub.com/doi/abs/10.1177/0734016808316778
This, and graph based neural nets are very different from CNN and LSTM. They learn to split a scene into objects and then learn how they interact. In this way a lot of variation in the input is factorized out and only relations between compatible types of objects are learned. It leads to stronger generalization.

If you think about it, when we are going to do full reasoning, how is the data to be represented? Embeddings and flat lists/matrices are not appropriate for the way objects interrelate. It has to be a kind of graph. Here they used multiple attentions instead, which kind-of work the same way as graphs, attention heads being similar to links between objects.

Once we have data represented as graphs we can also do simulation - we apply the rules of each object iteratively on the graph. The graph can be seen as an automata, where each object updates its state by integrating information from its neighbors. Automata are general Turing machines - they can represent and simulate any computation. With simulation we can do optimal solutions search. It opens a lot of doors for AI.

My money is on simulation and graphs for the next level of AI.
sqlite works in memory most of the time, on disk sometime when flushing, faster

filesystem, works on disk most of time, in memory some time (some buffering), slower

which makes my original comment true,
Excellent. I appreciate that. From my perspective well-intentioned is charitable for a social engineering platform. I have no doubt that is an accurate description for the vast majority of people involved, including the engineers you know, but this is almost a law of physics, it's too valuable to not be worth using; it's much more useful than old-school media: http://onlinelibrary.wiley.com/doi/10.1111/ajes.2017.76.issu...
> most of the time, google could actually do anyway

Maybe you can reproduce the failure once in a while, but can you reproduce it on every run, so that when you apply the debugger to a particular run you're sure to see the failure? That's what rr gives you. Furthermore rr lets you debug the same execution over and over again, so stuff like event ordering and object addresses stay the same between debugging sessions.

And as glandium said, on top of that we build reverse execution, which is a real game-changer. Debugging is about tracing effects back to causes, and reverse-execution is what you actually want for that.

FWIW rr has a fair number of users who find it really does help a lot for all kinds of debugging tasks, not just those involving flaky tests. Some of those users are even at Google :-).