skysight-inc/HackerNews huggingface dataset:
A 'neat hack' is the original use of the word hack. Hacking does not at all require the involvement of vulnerabilities.
> Airports have everything from huge IoT systems managing the climate of the terminals, thousands of monitors for public information, controls for automated baggage handling, traffic/parking management sensors, vast sewer systems with sensors to manage storm/sanitary/glycol recovery/water, security systems (tens of thousands of cameras/doors being monitored), and then hundreds of smaller systems doing everything from managing ground transportation through to emergency dispatch. … I'm not sure it's even feasible to air gap all of that - the loss of productivity and additional cost would be far greater than the perceived security risks.

Which of those systems would suffer from decreased productivity were they disconnected from the Internet? Indeed, I imagine that they'd experience increased productivity: there's no need for an air conditioning system to get its updates over the Internet rather than, say, by a human being with a thumb drive. Ditto monitors, ditto baggage handling, &c.
Eh, I haven't read the article but I'm pretty sure hacking is doing something outside its intended purpose.
TL;DR:?

In the meantime:

$ clisp

[1]> (setq a '(1 2))

(1 2)

[2]> (progn (nconc a a) nil)

NIL

[3]> (nth 2 a)

1

[4]> (nth 101 a)

2

[5]> (length a)

* - LENGTH: A proper list must not be circular: #1=(1 2 . #1#)
Burp is probably the better tool for the job in most cases since you're usually just looking to repeat a request until you get the response you're looking for.

If you just want to automate registration to ensure you get a seat in a course you should be looking into your school's network topology to minimize latency.
LCD and Shaders: the unexpected combo
In Copenhagen, bike lanes and turn right lanes often overlap. Not bike lane left of the turn right lane, but actually sharing the space, like a C union type. I think it is much safer to merge than to cross.
The New SaaS Sales Wave Is Coming
For a lot of software, Open Source solutions might be a workable alternative.

There's not fantastic "go so" solutions in every product category though. :/ Though, if enough US companies do decide not to do business with Russian, it might kickstart the filling-in of some the holes.
"This customized firmware can be loaded onto a router using one of the following methods:"

If I understood things correctly, the Cherryblossom thing is a firmware and while this particular leak didn't mention any new RCEs I am surprised a bit that the possibility of using any other RCE was categorically ruled out by the wording of the advisory.
NPR is probably thrilled then.
I'd be worried if it was actually about "hacking", because the result is usually very severe. Universities are still quite backwards went it comes to security unfortunately.
Thank you; you beat me to posting the TLDR.

The sign is humorous, but the article is entirely too long for the subject.
Have to admit I love the name. Congrats to the team. Hopefully they can employ the money wisely.
Thank you for the feedback.

> There are couple of bugs open for months, even with existing merge request to fix

Are there specific bugs that you would really like to see fixed? Or specific flows you feel need love and attention sooner rather than later?
Startups, Don't Blog as If You Were Enterprises
Here is the example where I just removed every semicolon.

https://gist.github.com/atemerev/889806081ed8fcb77495666fac9...

For me, it looks infinitely better.
Just look:

https://gist.github.com/atemerev/889806081ed8fcb77495666fac9...
It's also a bit risky, as some University administrators may not understand that he isn't actually being malicious. Automated scraping can be considered a violation of some IT policies though, so OP should be careful about something like this.
Nice analysis. True in a majority of the cases.
You think the person who had those buy orders in just happened to get them fulfilled by coincidence?

Don't you think the most likely explanation is that they were the ones that caused it by purposely margin calling leveraged traders?
The FastCompany article linked in the comments is interesting on that, though. (https://www.fastcompany.com/47593/wal-mart-you-dont-know)

In 2002, Walmart did more business than its next 6 grocery and general-good competitors combined. Something like that is presumably still true if you restrict to brick-and-mortar spending. If you sell something mass-market (e.g. pickles), a huge portion of all shopping happens at Walmart - you can get beaten by a competitor just for not playing ball with one retailer. Similarly, struggling companies can be saved by Walmart (e.g. Levis), but only if they concede to whatever Walmart demands.

I'm not going to take the anti-capitalist tack, here. When Walmart tells Levis to fix their supply chain and introduce products at a lower price point, that's how markets should work. They demanded reform, and that's what saved Levis - they might not even have needed to sell at Walmart if those changes had come sooner.

But the larger pattern is troubling. Walmart has so much power over smaller suppliers that it's like informal ownership - they're vertically integrating with none of the legal conditions or risk. And that helps them drive pretty serious ethical issues without ever taking direct action. Everything from monopoly creation to violation of labor laws to environmental devastation (mostly overseas) stems from Walmart's pricing demands.

They may not ask for anything unethical, but asking for a 5% price cut every year means something has to give. With such enormous legislative influence, they can bend laws and trade agreements to favor their model. With the freedom to change suppliers and limited legal accountability for their suppliers' actions, they can work with whoever's willing to behave worst, and give them a market that cripples everyone better behaved. So you don't have to sell for Walmart, but in a lot of industries you can expect to suffer for those scruples.
Smog in our brains
I used to be room mates with the guy. It's no exaggeration. He's charismatic, charming and a whole shit ton of other stuff. A really likeable guy. I saw first hand how he lived because he did it in my house.
Test AWS cloud stack offline with Arquillian and LocalStack
"You should expect the same passion and drive in your employees that you have yourself as a founder."

Nope. Especially not in a bootstrapped company where founders probably retain most equity.
Indi's Prime Minister not much of a reformer
The platform they run on (web browser) is written by Apple, Microsoft, and Google.
An inside look at Quantum DOM Scheduling
And it isn't a very good joke.
I feel like they should count for less points in Nerd Sniping. https://xkcd.com/356/
Does anyone remember the story about the famous mathematician at (I think) Princeton, who would always pick 3 as a random number in his examples. ("Let's pick a random number, say 3...")

And then he ended up mentoring an entire generation of mathematicians who adopted his habit.

And everyone would always "randomly" pick 3. It became a thing.

It's kind of a variant on the "let L be a group" because the joke relies entirely on the social conventions of a small group of people.
I'm glad you liked the project and post - it actually got nice traction from HN but who am I to complain for more?

Feel free to communicate about the project at the repository (i.e. if you have feature requests and such)!
"One of my favorite hobbies is piano"

"Oh yeah? What's your favorite scale?"

"Uh what?"

"Can you tell me your favorite major triad?"

"..."

interviewer assumes person is lying because their level of enthusiasm and knowledge doesn't match up to their expectations of what a "true piano hobbyist is" when really person just likes to play chopsticks on the piano or lookup yt videos on how to play pop songs
http://0hh1.com is a much better place to learn the rules.
Local business owners are hounded by marketing companies everyday promising the moon. Marketing seems like the great Panacea, but no one is reminding them that going over the top with current customers could potentially create a higher return.

$250/mo on Yelp ads gets a few dozen eyeballs on the business.

$250 in free product every month to regular customers creates Fanatics who tell ever, and could possibly get just as many of their peers eyeballs with a FB/IG post about their experience.

A lot of people forget the basics because it's not being sold.
This comment makes my head hurt
What then? Well, users wouldn't have wasted their time trying to recover unrecoverable systems. They'd just have rebuilt them.

Really properly permanently bricking is much harder, and hardware-specific.
This comment is unrelated to both the parent comment and the article. Wtf are you even on about?
Imperialism is not rooted in history. Before having imperialist ambitions, Japan was an isolated island, same for Britain. One could also say Britain started from its own backyard. China could as well go from isolated to imperialist.
I thought this was going to be a post about fixing the horrible font rendering. Although I guess that's really a Chromium issue. Still can't switch to Atom to this day because of the font rendering.
WiX Cookbook and WiX 3.6: A Developer's Guide to Windows Installer XML
I have been running a live streaming app here in China for two years.

The title of this gets so wrong - China did not ban livestreaming. Yes, the regulation of livestreaming services gets very very tight recently, we have been fined due to inappropriate content.

The website mentioned in the article like Weibo, AcFun are not about livestreaming, they're YouTube-like video sites. You need special license to run YouTube-like video sites, just the license is almost impossible to apply for non state-run company. There are only 500 something licenses ever issued, you need to acquire a company that have the license, surely the price is extremely high due to scarcity.
Ah, the old concept of binary security - either you want it or not. It doesn't work like that, security is one need to be balanced against others.

Also, lots of CVEs indicate only one thing: that lots of people are checking it.
It's a great tool man, I use it tonnes, thanks for making it!
Bagging and bootstrap ensemble methods aren't really that confusing. Just think of it as stochastic gradient descent on a much larger hypothetical data set.

The effect is same one that occurs when you get a group of people together to estimate the number of jelly beans in a jar. All the estimators are biased, but if that bias is drawn from a zero mean distribution, deviation of the average bias goes down as the number of estimators increases.
Leakage-resilient cryptography is cool, but it's very much a mathematics-first approach: the independence assumptions required for the mathematical proofs simply don't hold in the physical world, and it's not clear what an assumption about "may not leak more than lambda effective bits" means (the attacker has 10 GB of measurements, mostly noise; can we expect to remain secure?)

The leakage-resilient work with which I'm most familiar also looks more like "algorithmic countermeasures" (e.g. changing keys frequently) than like something which would protect an AES core per se; but that's also a function of the work I'm most familiar with (the work of my old advisor Pietrzak.)
Crazy like a fox!

Seriously, I do think there's a targeted use case for this kind of convenience extension (protozoa itself is only 100 lines, it can be embedded pretty much anywhere), but I understand that it is totally counterintuitive and against most of the best practices that most real apps do need.

Maybe there should be a "Don't actually use this, use React" disclaimer, but I don't like that it seems that kind of thing has to be included at the top of any front-end Show HN.
The biggest problem with Flutter is that of developer reluctance - primarily because of Dart. And ever more so now because Android adopted a small, scrappy company's homegrown language (Kotlin) instead of Google's own.

I'm kind of wondering what are the political fault lines inside Google around the Dart, Flutter and Android ecosystem.

If Kotlin gets adopted server side at Google as well (which is fairly likely considering Google is already using the JVM), then why would people bet on Dart ?

Is Dart 10x better than Kotlin ?
People understand that saving is generally a good idea, but usually have a revelation of sorts when you show them the math of compound interest, and become more inclined towards saving. Introducing the concept of a steady-state customer base that's affected by new customers from marketing as well as by retention rate might have a similar effect.
> China simply does not have the consistent history of far-reaching imperialism that other historic empires like Britain or America have. There is also an absence of an enlightened ideology of imperialism, which the aforementioned British and American empires used to justify mass conquest and genocide.

China invaded its neighbors on multiple occasions. It was the failure of its imperial ambitions that resulted in it turning inward. Or does the likes of Korea and such simply not count in your mind?

China also became "China" after invading neighboring kingdoms.

China simply was never in a position to expand substantially beyond its current borders due to technological limitations and the superiority of its neighbors' military. Pretending it is some virtuous position is categorically false and you can see that in the way they look the other way when working with African dictators, etc. and making all the "moral compromises" the American Empire has.
How one toy company is betting it all on disrupting society’s beauty standards
Because users don’t want to have to learn yet another ui. Using the system look and feel means that your app fits in, and the user doesn’t have to learn as much.
Congrats, we are very happy users of Opbeat at Ionic
Focus on the fundamentals and problem solving with data structures. Try to map the solution into a data structure and algorithmic technique. Read and study the solutions. Start as simply as possible. The first task is to understand the problem being asked. Sometimes we figure that out after being shown the solution.

I wouldn't worry about dynamic programming or network flow per se. Everyone finds those hard and looks up the algorithms.

These are at the harder end. Recursion is maybe somewhere in the middle.

That said the competition level could be very high at these companies and ask yourself if you really want to work in such an environment. Also ask if you want to work on what they work on.

Interview questions are the same as word problems we see in math. Class. You have to map the problem into the CS, then apply what you know. Forget finding something optimal at first. Once you have the toolbox of algorithms/data structures you will find success.
Sure it would be nice to have types for refactoring, but a more useful set of features would be:

- baked in fetchurl, fetchgit for easier bootstrapping

- a functional dsl for rendering filesystem hierarchies - instead of the find/sed/awk galore. 50% of the time when my nix recipe breaks it's not a nix syntax issue but something with bash. (reading nix is an exercise in learning new unix features)

- drop the channel feature entirely and make releases immutable tar files with hashes. I use nix as a build system on macos and right now a nix-channel update is a sure way to break all my builds which is the opposite of nix's promise

EDIT: formatting
> Any pointers for a good 2d shape-packing algorithm?

Googling `open source texture packer` finds a few projects. Do the requirements change significantly when dealing with a physical sheet of plywood rather than pixels?
The Double coincidence of Wants is solved by any Medium of Exchange (MoE). The bigger issue in my opinion is how to manage the creation of new MoE. The current system "solves" this by empowering a group (banks) to issue new MoE via loans. We have a significant body of history on the "efficacy" of this approach.

How does Crypto currency, Bancor or other, improve the management/new creation issues?
I'm curious why you have a NAT gateway between your Lambda and Elasticsearch?
I may be in the minority, but I like the Nix language.

I don't have extensive ML or Haskell experience, coming from Ruby/Java background.

I think the Nix language works great as a configuration language, and I greatly prefer it to JSON, YAML, or Ruby, which are often used for similar purposes. The way arguments are passed in, merging of attribute sets, the library from Nixpkgs with various list and set operators and other utilities, and great multiline string support make it far superior to those other config languages in my opinion.

My biggest gripe is that the Emacs mode isn't very strong, so I'm often applying indentation manually.

I recently learned about Jsonnet[1] which has some similarity with Nix.

[1] http://jsonnet.org/
If I understand correctly, you're suggesting a startup in this position would buy access via a broker who might offer a single API which can be used to access all upstream business-critical APIs..?

True... although it feels a little like "kicking the can down the road". Now you have two dependencies: the broker themselves and the upstream API providers.

As an investor I'd still ask "What would you do if the broker revokes your API?" -- and now I'd also want to do due-diligence on the broker by asking them all the above questions too.

Additionally the broker may be prohibitively expensive.

See this recent discussion about teller.io which in part prompted this question:

https://news.ycombinator.com/item?id=14605342
AFAIU 3D TVs are not a thing anymore

http://www.businessinsider.com/3d-tv-is-dead-2017-1
Define 'trustworthy'. Protonmail are now offering ProtonVPN free tier and paid subscriptions for higher speeds. Under Swiss law they are now required to store logs.

The only trustworthy solution is your own OpenVPN server on some cloud provider (not difficult to setup). Even then it is debatable whether it would remain private long. Probably draw attention if anything but you won't get your logs sold to Target.

It's hilarious how many 'VPN providers' don't even encrypt the traffic.
This is an interesting proof of concept. I'm impressed at how simple the SMS signup code is.

For many universities though, it won't be this simple. Many hide the open seats behind a login, which means you need to be a student there to see them. Many also use student information systems that are a real pain to scrape like this. Once you get to the point where interacting with the student information system is done via AJAX requests mediated by a mess of JavaScript, it starts to push the limits of what you can do with this technique.

When it gets to this point you either have to carefully dissect everything on the Network tab of your developer tools, or use a real browser. I've used PhantomJS (basically a headless WebKit) and Selenium WebDriver with great success on sites that are not amenable to scraping. The neat thing is that you really only need to use that for the interaction to get to where the information is. Once you've navigated there you can just have it dump the rendered page as HTML and parse it using the same techniques shown here.
My problem with your line of argument in this whole subthread is that no matter how many examples people give you of important categories where C++ predominates, you've already decided that the sum total of all that is "niche".
Agreed, but it's just automation at play here. Clever, and will save time though, just thought that the headline was a little misleading, considering a registration system was involved.
I think the poster means "free" as in data travelling freely regardless of State/national borders, as the internet largely does today.
Well people still choose bloated and horribly slow text editors and claim they are amazing because zillions of plugins and customizations are available.

Websphere was similarly popular because it could integrate with 100s of frameworks that developers/enterprises might be using in their applications.

So it still makes sense in same way when now people claim web apps/wrappers are solution to all client side software and if it feels bloated and slow, tough luck, "Why don't you upgrade to some over-spec'd machines?"
How Tinder Could Take Back the White House
Maybe speed limits should be reduced to 25 MPH within cities (a la NYC).
A woman was allowed to sue Facebook over its use of “sponsored stories” in BC
you are so wrong, mister. maybe you're from china and got fed only by state media and this is the effect?

Chinese are not the biggest aggressors of all times, true, but their invasion of sovereign Tibet country and their brutal behavior there is good enough warning. Or invasion & annexation of pars of India in 1962 started by Chinese (because India dared to offer asylum to dalailama, how horrible).

Chinese party leaders are same as Russian oligarchs, they just have to be more discrete. Life and well being of common citizens is of no concern for them, only money and power and games associated with those. Thinking otherwise (about any system in fact) is naive on child level.
It's probably not for the judgement. It's likely just a step along the path of increasingly ratcheting up the knobs they can turn for getting it shut down.

For example, with this kind of legal win behind them they'll likely have a stronger case in persuading other places to not assist them.

Will it work in the end? Who knows. AFAIK "The Pirate Bay" is still a thing, even with the large amount of legal + dodgy coercion being applied to various supporting businesses (domain registrars, etc), country bodies, and so on to shutter it.
Technical Debt Often Isn't
That "at the same time" is the important piece. It means there's an speculator in the middle that will guess a price it can buy to sell later and make some money out of the transaction.
Zbigniew Libera's Lego Concentration Camp (2000)
It seems like fining and, if necessary, revoking the drivers licenses of dangerously aggressive drivers might be a simple way of solving the problem, no? Sharing public goods is be the norm in other areas of society; why not on the road?
And Mozilla.

But the platform the other tools that the GP is talking about would probably run on an OS, of which I don't think there are many which are written and maintained by small independent teams of a few developers.

Still, I was just pointing out that there are still areas that the major player is an independent developer without any backing. I'd bet that with the ease of publishing in something like NPM it's easier than ever for someone to make a good piece of software and become a dominating force in a niche area than ever before.
Better Care Reconciliation Act: What You Need to Know
I like Freedome from F-Secure pretty user friendly so it actually gets used...

https://www.f-secure.com/en/web/home_global/freedome
Show HN: Download all videos on a web page
It should be called criminal Damage.
For your last point, you don't have to use the channels (which will anyway be deprecated at some point iirc), and you can pin the nixpkgs version in your nix files (like it is done in https://garbas.si/2015/reproducible-development-environments...)
The most natural reading of this is "Sophisticated entrepreneurs attempt to increase revenue by diversifying into a new line of business requiring capital improvements financed by readily available debt.", unless one has the misapprehension that farmers are, as a class, stupid.
SpaceX BulgariaSat-1 Launch Webcast
If you like SVMs, you should check out gaussian processes (GP). They work with covariance kernels similar to SVM, but the result is fully Bayesian. With most modern GP packages you can even set priors on your kernel and mean functions, then use either optimization or markov chain monte carlo to select optimal values.

The only downside to GPs is that they are O(N^3) in time, so not applicable to big data. There are stochastic GPs that approximate using batch learning, but they're not as polished.