skysight-inc/HackerNews huggingface dataset:
> I see a huge range of possibilities:

> 1. Try to get acqui-hired and pretend I didn’t fail to fundraise, as is the tradition in our industry (“our incredible journey!”, etc). Hint: I’m not going to do this.

In the words of Oliver Cromwell: 'put your trust in God; but mind to keep your powder dry'.
Only on the 13-inch, and even there the non-TouchBar version has some lame limitations (e.g. only 2 USB-C ports and slower WiFi)
The reflector attack in question cannot bypass a NAT setup in any meaningful way. Yes, there are tricks that make some protocols NAT-inspectable. It's not perfect. But as a default behavior it's proven surprisingly strong. Typical IPv6 deployments are significantly less secure, sadly.
Distributed Systems are Hard
Are Smart Contracts Smart? A Critical Look at Basic Blockchain Questions
Why do you think that different countries have put missiles in submarines ?
Something makes me think they'll notice all the parens during a code review...
Which word begins with y and looks like an axe in this picture
Horrible news. In my experience tech books tend to be horribly formatted in ePUB and MOBI format. They don't have to be, but they usually are.

When I have bought from O'Reilly in the past, I have always defaulted to PDF.

Now, not only does that option go away, everything will be DRM going forward.
HN Community. Need your help in finding the right chat solution
Hi HN community
We are building an AI powered chatbot assistant for daily needs like booking a cab, paying a phone /electricity bill, finding a good place to eat etc. Since the NLP is not that evolved, we have a functionality where if the bot is confused or does not get the context, we plan to transfer it to a human agent so that the customer does not have a bad experience.

Here is where we are facing trouble:
We want to keep the switch between the human and bot on the server side. However, we are not able to find a solution where we can use an API or a code to send messages as a visitor. When a human agent sees this, he replies to the message, we take the message from the server side and show it to the user. (the user will be informed that he is talking to a human instead of a bot, but we want to keep the Ui interface the same). Can you guys please suggest us some API for the same? We have tried zendesk but it needs a UI somewhere and did not work in android. We have tried Live chat inc but it does not have the websocket so it wont be a live connection. Anything else that we can use? Our primary requirement is to make a seamless switch on the server side and connect a user with a human agent in case the Bot is unable to understand context.

Thanks a lot for your help.
The Complete Guide to Teaching Yourself Adobe Analytics
The query optimizer faces the same limitations as an optimizing compiler - improving the query as much as it can given limited information, in as short a time as possible.

And it's frequently unsuccessful, for the exact same reasons as optimizing compilers - proper query optimizations require more information and time than what is available to those optimizers.

Hand tuned code created by an expert will always be faster than that produced by an optimizing compiler; hand tuned SQL created by an expert will always be faster than that produced by the query optimizer.
This particular example breaks my heart, because AFAIK[0] JavaScript was supposed to be Scheme at least two times during its development.

--

[0] - read that in the interviews in "Coders at Work".
Wyman Park, too, although perhaps not so much and not so friendly, I think because people let their dogs run loose. I was out there this last weekend and ran across a fox who'd fallen lethally foul of something, at any rate, and a dog seems by far the likeliest candidate - I keep hearing about coyotes, but it doesn't seem likely they would be much more difficult to observe than foxes, of which I've seen a goodly number.

In any case, it's not as though whitetail are hard to find around here in general! In spring and fall, I often cross paths with them during my commute, and it's a rare peregrination on which I don't see at least one or two. If you really want to see wildlife, don't go to a park - put on your sturdy shoes and go find you some woods that don't look like they have people in them often, and it won't be long before you start finding deer trails to follow.

(I know some very good places, but I hesitate somewhat to mention them publicly, because we have a fair number of fellow Baltimoreans here - while the local whitetail don't much care about people, foxes most certainly do, and they're hard enough to spot and photograph as it is! If you're interested enough, hit me up at the email in my profile, and we can talk about it some more.)
The critics aren't on your side. http://www.metacritic.com/game/pc/depression-quest/user-revi...
Same. When I got an email yesterday saying that my ACM membership now gives me complete access to the entire Safari platform and all its content, it was like the last several Christmases all wrapped up in one. Just extraordinary how much useful content just became available to me, and all searchable too. Amazing.
A Brutal Intelligence: AI, Chess and the Human Mind
I'm sure facebook already does that.
The car and the road are actually parts of a giant dynamo, I guess. Like the car having a coil and under the road a giant magnet, thus generating current in the coil.

Nice idea.
It is possible to become a social savant if you apply yourself and practice. Most social skills are a handful of routines and checklists coupled with practice in real life situations.

You shouldn't label yourself 'bad at social' or 'bad at math' because it'll hold your confident to improve in check.

If you keep a notebook, deliberately put yourself into social settings and keep score it'll be intimidating but you'll improve.
Another Javascript library
Land of the LISP looked fun when I skimmed it at a bookstore. Teaches by building games.

https://www.amazon.com/Land-Lisp-Learn-Program-Game/dp/15932...
Building the Hominin Family Tree, One Outlier at a Time
I’ve never liked the term ‘cyberweapon’. It is subtly misleading and gives the non-technical masses misconceptions about how exploits actually work. Cyberweapon implies that exploits are created by governments and let loose on the world, when in reality exploits are existing flaws that were simply discovered by governments or individuals. Exploits are like a serious manufacturing defect in a lock that was only discovered after the fact. I think this misconception has real implications. If you compare exploits to Nuclear weapons, the public reaction will be we need more secrecy and more weapons to protect us from hostile nations. If however you changed the analogy to something like a defective lock, it become obvious that what we really need is openness so exploits can be fixed.
Sorry for typos; iOS autocorrect is terrible, and HN won't let me edit.
Data proves that you just get more alone after 40
Propane and propane accessories?
This whole article seems to basically boil down to this:

>And in the meantime, a few stronger locks, fences, and security cameras on the doors of the turbines themselves would make physical attacks far more difficult.

I mean, any time someone has physical access to your machines, you're going to lose the security fight. Full stop.

At that point, if the goal is damage or extortion, and you've walked into an unguarded and poorly secured building (or turbine), a little bit of dynamite is a WAY better bet than a network compromise.
Write a reader macro that treats all [ ], { } and < > as if they were ( ), and the only thing they'll notice is that there's less parens/brackets than there should be in regular Java code...
> Debian has the problem that its packages are older, so if you need specific versions of PHP or other runtimes, you are much better off using Ubuntu.

I really wish other distributions would steal the idea of software collections from Red Hat. Having newer runtimes and database engines available out-of-band is a great idea, especially considering SCL packages live in an isolated root and won't interfere with the base system.
Actually react native uses it too: https://react-native.canny.io/feature-requests

We started working on feature voting two years ago, before GitHub even had reactions. GitHub has come a long way since then!

We've since moved focus from open source to SaaS/B2B, but it works for consumer apps too.
acme.sh + static verification is indeed a very nice zero maintenance solution.
Can't speak for Houston, but we have about a million raspberry bushes in this town, and I never pass one in ripe fruit but I pick off a few to snack on as I walk. Hasn't poisoned me yet, but I would be curious to see what a mass spectrometer would reveal about their elemental composition.

Unfortunately, it's been years since I had even colleague-of-a-colleague access to any lab that'd be likely to have the requisite equipment and expertise on hand. Perhaps I might get in touch with Dr. Swan? Judging by his article and the nature of his work, this seems like it'd be the sort of investigation that might pique his curiosity.
Ask HN: What tech podcast do you listen to?
That's the impression you get from Twitter if you read newspaper articles about it, but once you start using it you find these other communities.

Here are two, but there are many others:

#OTalk - occupational therapists (mostly in the UK) have a discussion every Tuesday evening.

#TwitterDisco - people share music they love.
Can I use R on Production?
The remote people don't get to take their eyes off the screen...
Plato: How Tyranny arises from democracy
Good points. Thinking about the unfamiliar words analogy I would look up a word if I see it often enough or if it's key to understanding. Knowing if an unfamiliar word is important is tricky though--I can't define the process I use there.
Somewhat related, this reminds me of a study with cats where they were reconstructing arbitrary black and white videos from visual cortex brainwaves at UC Berkeley https://youtu.be/piyY-UtyDZw.

I wonder if different social animals will have biases for certain facial features unique to their species, similar to what the end of the video suggests. It is what I would expect if our visual information system does work like a covnet, since important higher but level features would be pushed further down the stack, and inputs from our eyes that are similar would be "boosted". But I imagine the truth is much more complicated.

Here they don't seem to be experiencing any "monkey-like" feature boosting, so the area they chose is either low level enough, this is not a real effect, or monkeys are similar enough to human faces to not learn different low level features.
I agree, the issue here is physical security. That's it.

Now, there are some great arguments to be made that software security in those buildings should also be improved, but that literally doesn't matter if someone has physical access. At best you're delaying.

Physical access trumps everything. There is no software on the planet that can prevent a determined attacker with physical access.
This is due to the CA/B Forum Baseline Requirements stating that domain validation via DNS records (and pretty much all other methods) has to use either a random value or a single-use request token.

There's a neat trick with CNAMEs and a separate DNS zone that works kind of as a workaround, if you're okay with introducing another piece of infrastructure[1].

[1]: https://github.com/joohoi/acme-dns
Would a printer automatically decide to expose itself to the wider Internet in this way?
That's not a part of the ACME protocol (which is what Let's Encrypt implements), it's a policy decision of Let's Encrypt. Grandparent's comment is about other CAs offering EV certs over ACME.
Their budget is sizeable but less than the annual profits of Google, Microsoft, Apple, etc. And NSA pays for tons of stuff that those corporations don't have to deal with like having thousands of linguists.

Where is the responsibility of corporations in all of this? They have a cash pile that dwarfs the entire intel budget and ought to be the FIRST entities that invest in fixing their OWN products, right?
Just about everything is illegal somewhere.

OK, so can Saudi Arabia force Google to delist everything that violates its laws about sexuality? Or Nigeria? What about China and the Dalai Lama? Thailand and its king?

So then, who decides which national courts get global control?
Wasn't tumblr bought for literally a billion dollars?
No, because people who give the money to the investor (limited partners) can optimize their own portfolios. It is not the VC's mandate to do that. From the LP's point of view, investment in the VC fund is the risky component of their portfolio.
Not practical though. Every time someone has done the math for a fully scaled up system (assuming magic technology that doesn't exist) it always has the same answer: Unless the power transfer system is nearly 100% efficient, using it on a typical highway results in the the highway turning into a molten puddle in less than a day.

If you want to run the numbers yourself a Tesla uses 300 watt-hours per mile on the highway. California route 60 sees 337000 cars per day and is 70 miles long. And an amazing power transfer system might be 75% efficient.
I pay $99/yr for a professional membership in ACM, and as of yesterday, that membership includes complete access to the entire Safari platform. Get it while it's hot, I guess.
And Russia reportedly even has a deadmans-switch that can be triggered by seismic activity on Russian soil and rapid changes in air pressure. I'd presume that such a system is not connected to the internet.
App Engine now supports Java 8
Right. It's a false dichotomy that the NSA doesn't do that and needs to disarm itself. There's a happy middle ground where people don't attack us because they're worried about our retaliation and we also improve our own defenses.
In all fairness, for me at least, Lightroom seems to have gotten to a place where it does what it needs to do with acceptable performance. It doesn't seem to have a lot of obvious functionality holes.Of course, it also doesn't have a lot of competition which may partially explain the pace of change too.

If I had to guess, I suspect Lightroom will end up as only a subscription offering at some point. It's hard to see why it would remain an outlier. I'm sure there would be great hue and cry but I actually use it enough that I wouldn't be all that bothered.
I'm confused what the connection is with Chernobyl.

But 2M deaths in the last 30 years is not likely correct - this interesting WHO report on the matter suggests the final toll from the radiation would be more like "up to 4k":

http://www.who.int/mediacentre/news/releases/2005/pr38/en/

http://www.who.int/ionizing_radiation/chernobyl/chernobyl_di...

> The main causes of death in the Chernobyl-affected region are the same as those nationwide — cardiovascular diseases, injuries and poisonings — rather than any radiation-related illnesses
I would rather say: I don't know any good programmers who weren't self-taught.
Can't Find a Public Bathroom in NYC? Hail This Toilet Van
How ethical is it to tell your boss and then lose all that time with your son. What ethics do you care more about? Making sure your boss gets all the time he thinks he's paying for out of you? Or your son getting as much time as you can give him? Are you more loyal to your boss than your son? If your ethics are driving you to cuck-out and screw yourself, it's time to delete your "ethics" and install new ethics. There is such a thing as fear of success, I'm hoping you don't have that fear.
I enjoy software engineering daily. I think that the questions asked in this pod are far beyond other tech podcasts. I get the most value out of this.
Here's[1] the link to the actual French government page that talks about the visa in detail. I wonder how much of an impact this'll have since it requires the applicant to have a masters degree or higher.

[1] http://visa.lafrenchtech.com/4/french-tech-visa-for-employee...
4 Ways to Measure Engagement at Your Target Accounts
Yeah I read somewhere that they were working to try and get the CA/B rules changed to allow it (no idea if this is true).

Will check out the CNAME trick - thanks!
Any tips on how to learn code?
If the key isn't on the server how does software use the certificate?
Very disappointed by this decision. I have been a customer of OReilly for about 20 years, buying ebooks since 2009. I really liked DRM free nature of their ebooks, so that I could read them on all of my devices.

Maybe decision makes sense from economic perspective. But they really have to consider who their audience is. These are the people who still complain that Google Reader was killed and loss of good will and PR consequences of this decision will come to haunt them for years, regardless of the current financial reality.
I've speculated before about the idea of having ISP service packages include CPE that by default supports UPnP only on a VPN interface that's automatically configured and matched with an ISP-resolvable domain name for the customer's use.

To your point here, it seems reasonable to have that VPN interface also apply an outbound traffic firewall that defaults closed - that'd put a hard stop to the kind of trivial yet horrific exposure you describe, and making automatic firmware updates require extra effort to work seems like a relatively small price to pay. (After all, it's not as though device providers who fail to scruple at that kind of atrocity are going to be putting out security updates on a regular basis...)
> Where is the responsibility of corporations in all of this?

Somewhere around here :-

> "It is difficult to get a man to understand something, when his salary depends upon his not understanding it!"

Sorry shareholders, you'll be getting a tiny dividend this year because we are spending a huge part of our 'profit' on backfixing all the shit we let slide said no CEO ever.
Agreed. When I switched to iOS, I bought MiniHack (paid, but well worth it) and I've been very satisfied.

In addition, it fits the HN ethos to only provide a dead simple website and an API and let the community do the rest.
All of those systems predate the Internet, so you bet nuclear capabilities will not be affected much by cyber attacks.
In situations where Person A is attacking Person B and making it sound like Person A's solution is the only one, Person A is usually mistaken.

My mind is open. Convince me. Why is it a good idea to remove the threat of retaliation from our toolkit? It seems like one of the most persuasive reasons not to attack us.
Tezos ICO Teardown
Seems like the licensing part out by now. No other explanation given however.
A nuclear weapon is a little different than a patched SMB exploit.
A sysadmin isn't going to be troubleshooting kernel panics that suddenly started happening on a production system, or why a new version of libfoo without a soname bump is causing service xyz to segfault.

Commercial support has it's advantages, and it is why I do plan on switching all of our CentOS VM's to RHEL in the coming year (especially since we've chosen to adopt OpenShift after a PoC with the upstream release). Honestly, why would we NOT, it's ~$2000/yr per physical machine to have knowledge that engineers are available should something go wrong in a mission-critical deployment.
I see that going wrong too. If operating systems need to be certified, where does that leave free open source projects?
This is not accurate. Apache is supported for security updates for the entire LTS period in all current stable LTS releases, for example.

If "ubuntu-support-status" is telling you otherwise, that's a bug.

Packages in main are security supported by Canonical.

Packages in universe are security supported by anyone who wants to contribute acceptable fixes.
The cost is just to high compared to commercial solar farms[1].

[1] https://www.youtube.com/watch?v=obS6TUVSZds
"Atomic Accidents" by James Mahaffey is an entire book of essentially criticality accidents. Well worth reading and entertaining in an often sick way.
>There is still a huge amount of debate about the actual effects of minimum wage increases.

There is? I would seem that the effects could simply be drawn from real world results in any other developed nation.
I have the same opinion now that I did at the beginning. They provide a decent abstraction of the database. But that abstraction leaks.

Just a week ago, I ran into an issue where SQLAlchemy wouldn't support a "in" clause against a list of Model objects. There's a leak that I had to patch by using a list comprehension to generate a list of integer IDs from those objects.

Then I ran into a "you're doing a check against an empty list; we are pretty sure this will come back with no results, but we're going to run the query anyways." Another leak (and it's a valid one), but I have to manually work around it if I don't want that extra query run (I didn't).

Finally, we get the script to the point where it's passing all of the unit tests, and package it up for the integration tests. Those integration tests fail, because SQLAlchemy dynamically imports DB connecters based on the DB being used. The unit tests were running in SQLite in-memory DBs, the production Aurora, requiring a connector to be installed. Another leak.

Ultimately, ORMs can be useful, but they are an abstraction which leaks all over the place. So long as you're OK with the tradeoffs (the rest of my team was; I'm ambivalent, though I was the one who ended up fixing all of these leaks), they're another good tool for your programming toolkit.
???

EV guidelines have nothing to do with Let's Encrypt or ACME. They state that even for renewal all checks have to be done again, which cannot be automated.
The biggest issue we've had is the short expirations. We have 51 certificates in our organization and do not want to rely on auto-renew.

As our community project, we built a totally free to the public service to monitor certs and alert you when they get close to expiration or are invalid, etc:

https://letsmonitor.org

Feel free to use it for any certs.
I guess it's never going to happen, but wouldn't it be pretty cool if Netflix/HBO/Spotify provided a content mirror on the aircraft? Could probably only carry a subset of all content, but pretty cool to just open your app and get some nice Silicon Valley episodes man-in-the-middle delivered to your device of choice.
https://github.com/poteto/hiring-without-whiteboards/blob/ma...

Hiring Without Whiteboards
BTW, if you're going to read a C standard library, skip glibc and go for musl: https://git.musl-libc.org/cgit/musl/tree/src
Why is ketchup called ketchup?
Nature doesn't give a s* about ethics. You either eat, or be eaten. Ethics are human-invented hacks on nature, ones which (often times) are inefficient compared to letting nature run.
Well, no, but when the question is "will you drink a cup of this?" a good question is "will this kill me outright?"
That's generally a big problem with print-on-demand: they literally print one copy at a time, so you have to rely on the printer to do quality control well. Even if you're checking regularly (as we did in the early days), you can never know if the next copy they print will be bad in some way. Not to mention that they also have multiple facilities, so you'd have to place orders all over the world.

There's also a separate problem of pirated printed books, which are of very poor quality.
according to reports it's tasteable (metallic) and visible (blue light). The problem is just, when that happens it's too late.
It's a problem for me on the 9343 model as well. Loud pops and cracks when the audio driver turns on/off.

Fortunately, I've found this only happens on the headphone jack itself. Since I'm an audiophile, when I know I'll be using the laptop for several hours, I tend to plug in a USB-powered DAC instead and route all audio through that. It sidesteps the problem.
Out of interest, what makes you not want to rely on auto-renew?