skysight-inc/HackerNews huggingface dataset:
Yes, thread model for full disk encryption is defined for an attacker that has ability to read the encrypted contents of disk at any point in time.

CTR mode is also malleable at bit level, while XTS is less so (this matters when an attacker can modify the encrypted contents).
great job collaborating with what is, in essence; the American version of the Stasi.
It's just human nature, I guess.
Dieet schema – Zo maak je stap voor stap je eigen dieet schema
the book has some good ideas in it, but 80% of it is filler / repetition / cross-sells to some of the author's related services. it's a bit crass.

save time and read an online summary of the book to cover the ideas quickly.
Fundraising Sins That Can Kill Your Startup (and How to Avoid Making Them)
I agree with your comment. We have to keep in mind that "communism" is a word for utopian society (e.g. no state, no "money", no classes, and common ownership over the means of production) which is the end goal of "socialists" stemming from "Marxism" which is a socio-economic analysis of class relations. The core of "socialism" is the question about ownership of the means of production (as explained by Marx).

The chief reason for why free and open source software isn't "communism" in any sense of the package of things that word contains is that in practise it almost always leads to a very controlled extreme planned centralised collectivist systems. Free and open software development and communities on the other hand are based on extremely individualistic non-centralised non-planned and non-governed system.

If free and open software was inherently "Communist" or "Marxist", then we'd have "ONE FREE OS, ONE FREE DESKTOP, AND ONE FREE DESIGN". Instead we have several free software operating systems, dozens of competing desktop environments, and uncountable number of designs for every individual taste. If you want to know more about this point of view, I recommend you read the "Road to Serfdom" by Friedrich von Hayek.

It's true that in free and open source software we people share the code and tools (i.e. the means of production) to some degree. However we people still inherently govern the domains of our work and we get rewarded for the work that gets done. Instead of "money", hackers often get rewarded e.g. by "fame". Eric S. Raymond explains quite well in his book Cathedral and the Bazaar how this works and in great detail too.

But most importantly there is no central planner which would dictate how things work and coordinate the operations. If some guy doesn't like how a free and open software project is being developed, he can fork the fuck out of it and create a competing project. And this makes it sound more like anarcho-capitalism than anything else. We don't have "centralised state" that would set the framework where code is allowed to happen and "market of ideas" operates. This fits into agenda of our current corporatist society quite well and even companies which are in direct competition can benefit from it pouring resources to projects of mutual interest.

It's true that when we inspect how free and open software projects are developed, we at times counter cases of central-planner but often we notice that this entity is restricted by the pressure from the users and the fear of having project forked and lost "fame" / "reputation". This is basically why "dictators" that lead their projects aren't sole rulers of their domains. Most commonly we see governing bodies of few selected individuals aka. oligarchies that manage the free and open software project.
Ask HN: What are some of the succesful niche review websites that you know of?
I am looking for ways to improve my side project, any links or general tips on building "Review/Comparison/Directory" web will be greatly appreciated.
Seconded.

One often has to rely on stackoverflow (and the likes) to get info because the doc/wiki is outdated.

That being said, the info provided on theses websites aren't necessarily correct.

There is for instance no clear, up-to-date, doc on how to install some packages from testing and keep them updated (pinning ? no pinning ? what values ? what sources ?)
I'm reading through the paper, and this library almost seems custom-built for my use-case: a data browser for datasets with arrays of hundreds of thousands of datapoints.

One of the reasons I didn't go with D3 or any of the existing charting frameworks is that they simply do not seem built with that quantity of data in mind. Not only the rendering, the whole model: data is all packed in trees of JS-objects (at least the examples I see).

I have simple data that can be represented as dense typed arrays[0], with all the performance benefits of such, and no library seems to make good use of that. If I read the documentation for Stardust correctly, it's an exception to that rule (which makes sense, because typed arrays were mainly introduced for the sake of WebGL).

Similarly they also seem to do smart things with avoiding having to re-upload data to the GPU. I really hope this lives up to my expectations, it would save me a whole lot of work!

[0] https://developer.mozilla.org/en-US/docs/Web/JavaScript/Type...
Which is what all compilers do (by optimizing and rewriting syntax trees to be more efficient)
They say it clearly themselves:

> The government benefits from the open source community’s enhancements to the technology.

They're hoping that by putting this code out there, unwitting dupes will then collaborate with them to contribute to the surveillance state.
Chromium also has phone-home functionality, you could try Opera though.
Down With All The Filthy Spies!
Oh cool. Let's force a dev to take like 5 minutes to write a commit message. That will make all of us more productive..

If this is a joke, eh it's not a great one.

If it's actually for real, might I suggest making a script for the emoji selection and the formatting of "Only One Newline"?
Horcrux: A Password Manager for Paranoids
> because a bunch of people who take free online javascript classes are frustrated they're being asked about algorithms and data structures they deem irrelevant

fixed
What? Ireland has terrible isolation and building quality in general compared most of EU.
Solitaire Engagement Rings – The Perfect Set for the Event
I can't help wonder if the FOSS world is dealing with a "red scare" type scenario. Meaning that if someone, even in the most odd of situations, make then seem like anything less than a flag carrying liberal, they have to be denounced ASAP or you yourself will be tared and feathered a well.
Google Play Like RecyclerView Snapping Example
It's quite interesting how different submissions on the front page build on each other and there is a sort of meta-conversation happening with the flow of articles.

I think AI or whatever you want to call it is not up to it yet, but it would be an interesting investigation for in a few years.
Mould? I've seen mushrooms growing. It baffles me how this stuff can be legal.
YES

These assholes are hoping the OSS community contributes back to reduce our own privacy! wtf

> The government benefits from the open source community’s enhancements to the technology.
Money, presumably. Plus a bit of the old toxic masculinity.
Not sure if serious.
I've seen this kind of thing work really well for some teams. In that case there should be a "ref" for adding tests.

It tends to act as resource management, you shouldn't be working on things that your manager doesn't know about at least enough to make an "issue" for it.

But it's not a 100% must in all cases, just that there SHOULD be a ref there. The rule of thumb for us was if it's going to take more than 15 minutes, it needs an issue.

Edit:

I can't seem to reply any more, but this is just for organization. you can create your own issue and work on it on your own, this is just a way to organize and categorize the commits and provide an easy "parsable" way to give some context to them.
AFAIK you are incorrect about Python 3. Python 3 strings are internally represented as ASCII, Latin-1(since 3.3), UCS-2, or UCS-4. So for an arbitrary encoding this statement would be incorrect.

Ruby's model look much more like array of bytes + encoding to me, how else could I change the encoding for example of a latin-1 string into an invalid utf-8 string with force_encoding? Ruby holds off the validation of the string until it's really needed. Lazy validation doesn't strike me as odd for a dynamic language.

I agree that String#force_encoding would be nice if it were not needed but in the real world you get all kinds of broken encoded data. String#encode most of the time is enough but as a last resort, String#force_encoding is there to use.

I'm a bit surprised that you mention Go because if I look at https://blog.golang.org/strings "Similarly, unless [the literal string] contains UTF-8-breaking escapes like those from the previous section, a regular string literal will also always contain valid UTF-8."

This is exactly the same behavior as in Ruby. I put the invalid byte sequence there deliberately and Ruby and apparently also Go don't have a problem with that.
[pdf] Pinning Down Abuse on Google Maps
Your interpretation of the tinyrb omissions is wrong. I'm the current maintainer of potion which is the underlying VM for tinyrb. What is missing us just sugar and peg parsing grammars for some trivial stuff. And then of course the huge stdlib.

The simple potion/IO mop and ABI layout is far superior to matz ruby, just the method cache and thread support is missing. And this compiler has no optimizations at all yet, not even trivial constant folding. Still 200x faster.
This lua with mop VM can be used for every dynamic language, like ruby, perl, python, PHP, ... and will beat rpython or truffle/graal by lengths. The other VM based on this tvmjit ditto. This uses even luajit with s-expressions.
but... how?

suppose money went from A-->B-->C-->D-->E, and B,C,D never uses an bitcoin exchange / other 'offline' purchase / etc.
(Also, B could send to C1, C2, C3 and then so on to hide the track.)

then, how can anyone be sure that A,B,C,D are the same person/different person?

Or... by "retroactively" - do you mean sometime in the future (hopefully far far away) where bitcoin's hash algo. is broken?
Intersting. Do you know what is required to take on apprentices? If I moved to switzerland and started a company there, could I just start training people?
>I think if you cut all of the waste and abuse and held agencies to certain targets (i.e. 90% of taxpayer funds earmarked for education have to make it to the classroom level) you would free up enough money that you could actually create poverty programs that solved poverty.

You might not realize it, but that view is very similar to planned economies by a central government, just like in the USSR.

If you assume government agencies are merely inefficient (sure they are, barely anything is perfect) and you start dictating efficiency targets, you gonna get pretty much the same result as the USSR got: Lot's of corruption for the sake of keeping appearances of high efficiency intact.

Imho the solution can't be mere better micromanagement, that would assume up till now people have just all been too incompetent, which is, of course, an appealing thought because it makes it easy to point fingers and makes the solution looks so simple (if the lazy people would stop being lazy then everything would be fine!), but it's also a pretty generalizing thought and as such I don't think it represents the issue in its completeness.

An argument could be made for "simplifying government". That's where something like a universal basic income, ideally linked to GDP, might actually be quite useful. If a UBI is in place, then there's no more need for additional welfare programs, as such it would allow for the removal of a massive bureaucratic overhead.
Yes.. I think the ship has sailed now however because in the big league ICO's (eg. BAT) it is almost impossible to buy in time
How is "#{fname} #{surname}" better than f'{fname} {surname}' ?
The important thing here is that this minimal value types specification is not aimed at making Java language level changes, or many of the Java runtime changes that would be expected of other VM features such as invokeDynamic that were not exposed in the Java language. Those still require a lot of work round the Java type system and the standard library.

What this does provide is a mechanism by which the use of value types can be experimented with by library and language authors. I believe these value type features are intended to be optional and are not guaranteed to remain unchanged at future JVM releases.
Ask HN: Good source to build a software from scratch in 2017 yet?
Is there a good source that shows you how to build a software from scratch with Python, etc. in 2017 yet?
Klarna gets a full banking license, gears up to go beyond financing payments
Hey, its not the complete thing obviously.
Its just to start and stop your aws ec2 instance.
I needed this thing for my own purpose and it solved that.
My reason for submitting this repo here is because I think there must some other people who just need the code to start and stop it instead of doing it manually.
And lastly I don't think pasting your instance id is an issue. is it?
Indeed. Terrible insulation, walls that might as well be made from cardboard, and mostly electric heating.

On the other hand I can run a homelab at home and don't feel bad about wasting electricity - I need to heat my apartment, anyway.
Not that surprising considering profits are changing hands.
They aren't installing a filter into the browser they're OPENLY addressing a problematic issue on YouTube, one of many, many video hosting websites. Nothing stops a terrorist from getting a computer, an internet connection, and hosting his own damn video calling for the murder of women and children.

When you call for violence against non-combatants you're breaking the law in every single western country. If there were only one web browser and the company behind it were implementing universal blocking measures maybe I'd agree with you, but honestly I'd have to think long and hard first. Radicalisation is impossible to survive in the long run as the average power an average individual keeps going up.
"THE TECHNOLOGIES LISTED BELOW were developed within the National Security Agency (NSA) "

OK, moving along, is there some secure software somewhere in there?
And votes. Coal mining is pretty much the only thing keeping some of these communities alive.

People also have a habit of being very nostalgic about the coal industry. I never understood that. It's a pretty nasty dangerous occupation.
SUN-Poly makes device that can be a pin diode, a MosFET or a BJT
It's effectively gambling on the future of various currencies. It's no different than day trading or forex at this point so it's not really a good way to get 'passive income' since it can very easily turn into 'passive losses'.
Server heat from data centres to provide hot water in Dutch homes
There's no reason to attack masculinity. I know it's trendy to do so right now, but the gender norms aren't going away yet in some parts of the country still. If politics are involved, it's likely all about money and power.
A bit less technical explanation of the criticisms by Sabine Hossenfelder in Forbes:

https://www.forbes.com/sites/startswithabang/2017/06/16/was-...

Andrew D. Jackson, one of the authors if this paper, recently held a presentation at the LMU:

http://www.physik.uni-muenchen.de/aus_der_fakultaet/kolloqui...
Saving the last samples of dying species
Sadly, the verification procedure is so complicated, most people won't bother, and most of the remaining people will do it wrong.
Google announced 4 steps to help tackle terror videos on YouTube
What I quoted from you began with "As for reputation". Amazon's reputation cannot be reduced to only customer service, which is what you are highlighting. It's a straw man you have created.

A company can have a good reputation for customer service, while having a bad reputation for other things.

In your example, the way Amazon achieves their customer service reputation is reactionary. If you catch them selling you crap, then they will replace it or refund your money. It's a fool's errand to allow them to play that game with you.

The logical endgame to that business approach is the melamine poisoning in China about a decade ago. "Oops, sorry we sold you milk and infant formula adulterated with melamine. Sorry it killed your child. Here's your instant 100% refund with almost no questions asked".

As for revenue, once again you're creating a straw man. Of course R&D is "for the future" and "not for the current". That's the literal definition. I said revenue, not R&D.

As for my comment about "no matter the cost", let me try to restate it in more detail, perhaps I didn't phrase it well:

Since its inception, Amazon's number one goal has been to grow revenue, from year to year, as quickly as possible. That's their #1 business goal. They have optimized for that revenue goal over other business goals. Revenue over profit. Revenue over quality.

If selling a larger quantity of crap means their overall revenue increases, then that's what they will do. That's what I meant by "no matter the cost". A different way to say that would have been "Amazon Marketplace optimizes for increased revenue at the cost of quality".

Marketplace is an easy way to increase revenue. No need for R&D. Just allow all sorts of counterfeit crap to commingle in existing warehouse, and generate revenue on fulfillment. The more crap you sell, the more you increase your revenue.

The more Amazon increases its revenue, the more the stock market rewards it. Wall Street values Amazon almost exclusively on revenue growth. Bezos has made clear that his #1 goal is revenue, and Wall Street has embraced that metric.

Not coincidentally, supermarkets are very high revenue operations with very low profit margins.
Hypothesis: property based testing for Python
At the bottom it refers to 'a nifty CLI tool to aid in standardizing commit messages based on this document'

https://github.com/jakeasmith/commit
Matchy Matchy – A match-3 game I made in JavaScript
Falsehoods and free press: the importance of transparency in an age of fake news
What does it mean for a journalist today to be a Serious Reader?
Nvidia  Powers Top 13 Most Energy Efficient Supercomputers – InsideHPC
Could Sears Have Avoided Becoming Obsolete?
That's a long post and I admit I didn't read all of it. But, is anything you've said there a consideration for most "business" software? I can understand on a cache-hitting trading app perhaps.
I'd grab some expanding foam and seal them.
I'd rather they used drugs instead of emoji
Introducing new amba 5 chi protocol enhancements
I am still unconvinced it was a good move. Both European discount grocery chains are in the US now, Aldi and Lidl. Aldi has had a presence here already and Lidl is now coming in strong. The traditional grocery store chains are all challenged by these foreign discounters who can even undercut Wal Mart grocery at times; though Wal Mart does carry name brands as well.

Gourmet and similar grocery stores operate on the fringe but how much disposable income is out there to keep them all going? Do they really compete with Kroger and the like? To me its like comparing Costco to WalMart. Sure they had similar items but they have wildly different customer bases and income levels.
Does anyone have any experience of Compose.io's hosted Elasticsearch offering?

I have been using it on a new project the last couple of weeks and it seems to be working well.
>but usually comes at the cost of performance.

Historically, with (ancient) 1st generation microkernels like Mach (used in OSX/IOS), sure.

Else, this article's decent: http://blog.darknedgy.net/technology/2016/01/01/0/
Tech Crunch Shenzhen – totally worth it
Hello - I'm James, an Australian currently in Shenzhen, China building a startup GardenSpace.

We just did the TechCrunch event in Shenzhen and boy was it crazy...You get the usual randoms with questions, a tonne of investment groups from Hong Kong and a really good crowd that were engaged and interested in most exhibitions there. Having been/done a few of these events back home I have to say this was by far my favourite. Has anyone done a similar event in the U.S. and how do you think it compared?
Microsoft is now a part of Cloud Foundry Foundation
this guide doesn't use any fancy-unicodes...
I'm guessing that :penguin: isn't a unicode-penguin character, but some emoji supported natively by github

(e.g. :+1: means thumbs-up, but that's native to github / shows as :+1: to non-emoji-supported cli/browser/etc.)
I'm not a huge fan of mandatory emoji in commit messages either, but this is a poor excuse. A Git commit message can contain any sequence of bytes except for a NUL byte. It can even contain invalid UTF-8. Tooling that doesn't treat commit messages like this is dangerously fragile. God forbid anyone accidentally pastes “typographer’s quotes” or text with diacritics into a commit message and breaks the build.

On the plus side, I don't think this style guide will break your CI. It seems to be taking advantage of GitHub's text => emoji substitution, so other Git tools will just see the text form (eg. :sparkles:)
Ah, but is that a problem with the commit messages, or with the CI systems?
Hard to tell.. I live by rules 8/9/10 [1] and some others to a lesser extent, but the emojis (which don't even come close to verbs describing what happens) make it quite funny.

[1]
8. Use the Present Tense ("Add feature" not "Added feature").
9. Use the Imperative Mood ("Move cursor to..." not "Moves cursor to...").
10. Use the Message body to explain what and why vs. how.
svc is very very common in Solaris based OSes.
Feeding Word2vec with tens of billions of items, what could possibly go wrong?
Thin films could enable future ReRAM
> ‎Jeremy Ashkenas (author of coffeescript) helped bring es6 up to par.

By spending basically the entire runup to it poo-pooing it?

> You can see the influence of coffeescript all over es6 in the class syntax, string interpolation and destructuring.

Yeah it couldn't be the dozens of languages which have been doing that since the 80s and which browser developers were already mining for extensions no sir, Coffeescript invented having a class keyword (which is why it was already a reserved keyword in JS), invented string interpolation which it lifted directly from Ruby (according to its own doc) and from which JS string templates diverge both syntactically and semantically, and invented destructuring (and will I'm sure soon invent pattern matching).
UCL ransomware attack – the industry responds – ITProPortal
Even if his IQ was 100+ it doesn't necessarily indicate other kinds of loss... Everyone knows IQ is a poor metric and that intelligence comes in many different forms.

I'm wondering what he lacks that is not outwardly apparent from his job and family life:

Everyone with a biologically normal brain has potential to use it for sophisticated abstract thought in all kinds of ways... or they can (and for the majority do - not judging) spend their whole life not using much of that potential at all. Does this man have less of that potential? is he actually operating on maximum capacity right now as a civil servant?
They didn't say they were going to start removing videos with illegal content, they already do that. They said that they were going to start removing videos that don't break any rules, yet the company deems them unsavory. Which is incredibly frustrating since 1) YT has become the center of our changing culture, and 2) not everyone lines up with the PC Californian culture that dominates large multinational corporations.