skysight-inc/HackerNews huggingface dataset:
> there is no halfway for backwards compatibility where you can only break some APIs and get away with it.

There is. You're assuming that breaking backwards compatibility only has a fixed cost and that therefore you should try to break as many things as possible because it costs "nothing". You're forgetting that migrating from an old version to a new version costs time and money, the more you break the higher the cost and risk of a migration.

If you break too many things at once like python or angular did you end up with a split community.
I think there is a mentality shift that may come with digitizing learning which might help here.

The discussion on a topic like this can go in two ways. (1) Is to talk about how a laptop can help if students use it to xyz and avoid cba. It's up to the student. Bring a horse to water...(2) The second way you can look at this is to compare outomes, statistacally or quasi-statistically. IE, If laptops are banned we predict an N% increase in Z, where Z is (hopefully) a good proxy for learning or enjoyment or something else we want. IE, think about improving a college course the same way we think about optimizing a dating site.

On a MOOC, the second mentality will tend to dominate. Both have downsides, especially when applied blindly (which tends to happen). In any case, new thinking tends to help.
The point is to automate. If you're manually renewing them every thee months, then you're very much doing it wrong and it should be cumbersome.
Does anyone else feel reluctant to install a tool that allows a link on a website to remap your keyboard? Am I misunderstanding this?
If you input 2FA tokens using USB or keyboard on the same laptop there's almost no security improvement.
Net Neutrality in Afrika Was Dead Long Before It Was Born
I have about 400GB of photos and video. about 260GB are on back blaze. The rest are on an external drive.

I do not have a great strategy to access them all in one place. I was thinking of possibly utilizing Amazon photo backup that comes with prime, but it does not do video.
That's not how it works in Europe; just saying "done on a computer" is explicitly not enough. There's a concept called "technical effect" that's been worked over in the courts and well developed in the last decade (I'll leave you to look it up, eg https://en.m.wikipedia.org/wiki/Software_patents_under_the_E...).

I'm a bit out of the loop but whilst USA started letting pretty much anything in there seem to have tightened up over the years.

There's a parallel with business methods too. In both cases there been a move towards a middleground - harmonisation. Personally I feel the USA position is far worse and this harmonisation is not good; liberalisation of soft-pat and business method patents on Europe would be a big loss IMO.
So let's go ahead and proselytise this cynicism until the general population is as distrustful of their new corporate champions as they are of their now-reviled older champions.
Looks cool, but the page uses one full CPU core on Chrome on my Linux machine.
Microsoft's Calibri font is at the center of a political scandal in Pakistan
Yeah, heaven is old software on new hardware!
Perfectly factual comment, don't see how it adds any value to the conversation though.
I like both concepts - Introducing first terminal command then Scratch. And that's what I basically like.

But unfortunately they ( students ) are first year graduate with no computer experience and the language that need to teach them is C!
People who can MITM you when you use HTTPS: the company that owns the certificate, the software on your local system, people who are capable of subverting one or the other (i.e. state-level attackers), any of the 150-odd CAs if it's willing to burn its entire business to do so (certificate transparency).

People who can MITM you when you use HTTP: any entity on e.g. http://www.bgplookingglass.com/list-of-autonomous-system-num...
It’s Time for Active Job
Exactly, from what I've understand this is just part of a structured plan - if I recall correctly it will last until 10 years after his death.
The Gamma: Tools for open data-driven storytelling
TensorForce: A TensorFlow library for applied reinforcement learning
What is the business model behind Discord? They boast about being free multiple times, how do they make money? Or plan to make money?
Just curious – was there any particular reason to use MySQL directly, instead of eg. SQLAlchemy?
Solus is very, very good. The default version uses their own desktop, but they also offer a solid GNOME edition and are preparing a KDE edition as well.

I am a long-time Fedora user, and very fussy about Linux desktops, but would now recommend Solus over Fedora for most people: it is almost as polished, more simple to manage, faster on modern hardware, and has newer software packages whilst staying away from the bleeding edge technologies that Fedora promotes. For example, the move to Wayland is great, but if you just want a system that works, you don't want a distribution that enables it by default just yet.
Do you intend not to use US websites anymore?
If students thing the class is boring enough, they'll watch youtube whether on the laptop or on their mobile is no really important.
The thing to remember with copyright is it covers copying. If you read a book and rewrite it in another language you didn't copy it, you copied the ideas, perhaps, but copyright covers expression and not ideas.
This is very cool. You can basically even call all Java classes (and the other way around) from that JavaScript! (And reliably limit the classes that can be used if you want to execute JS in a safe environment.) Why isn't this used more often? (Or is it used more often?)
No, because there are very few ISP CEOs here.
Python runtime also uses that same C runtime so it's not as if you can replace one with another. Besides, stripped static binaries in C or even C++ can be relatively small. JRE is not installed by default on many desktops, let alone embedded.
A Good GUI Tool for Relational Databases (PostgreSQL, MySQL...)
>Laptop in a classroom are used to play, browse the web and social networks; the rest are made-up justifications to be allowed to bring them.

As a side note, if you actually need/want to take notes on an electronic device such a laptop, it doesn't mean that the device MUST have a browser AND be connected to the internet.
If there was a word processor ONLY laptop with no browser nor games on it, air-gaped from the internet, THEN it would be just a matter of preferences.

And I would go a bit further on the handwriting (excluded medical conditions) having a decently readable handwriting only costs some time in exercising wanting to better it, and it is a form of respect towards yourself (when you have to re-read your notes) and towards others that may need to read what you write.

Maybe you will manage to live your whole life only writing "electronically" but why risking to be unable to communicate in handwriting?

Once upon a time you couldn't get past first few years of elementary schools unless you had a decent handwriting, no need for it to be "beautiful" or "calligraphic", only readable.

The fact that it may be slower than typing ( and this BTW happens only for exceptionally fast and accurate typists) it's not in itself a bad thing, while you write by hand you somehow need more concentration to avoid mis-spelling as you haven't the equivalent of a backspace (or in some cases a spelling corrector) and this usually helps for memorizing what you are writing while you write it.
I'm a Mobile developer and I hard to find a Native Relational Tool with good UX and Retina support so I made it. It's free for using and will be free forever but if you want to support us to develop, I'm very appreciate.

PSEquel is a good one but didn't support multab, shortcut keys and still using open-ssh outside the app.

TablePlus currently Supports: PostgreSQL, MySQL, RedShift, MariaDB... High-end security ensured.

Features: Connection tags: development, product, staging, testing, Highlight syntax SQL, indent SQL, Customize font size, themes (support dark themes), Many shortcut keys, safe mode, lock your production database, quick view, quick open table via spotlight.

Road map: Will make plugin for export data and render chart from query, JSON viewer and many more... (Windows version is under developement)
Xcode 9 Beta Offers Amazing Improvements for iOS App Developers
The latest version, Xcode 9 Beta, which is available to iOS app developers brings a host of fascinating improvements in areas ranging from source code editor, new build system, app testing, debugging, language compatibility, refactoring and faster search.
> why is a router broken say 10% of the time?

My guess would be that WiFi drivers are kind of quirky - if you follow OpenWRT/LEDE development there a lot of issues that appear only on heavy load or under certain situations - causes range from driver bugs / chip bugs / firmware bugs - most of the stuff is NDA or closed source. You've got the problem on both sides - especially the situation on Linux is still dire for lot's of chipsets. Even my years old intel card in my notebook does not really work well with Linux und the current kernel/firmware. I blame the vendors.

> Do the frames in the air get corrupted or dropped? What portion of frames makes it through?

That also depends on the rate and encoding that the frames are sent. Then there is stuff like frame aggretation that sometimes work sometimes not.

> I see the SSID, so it can transmit something. Why can't I connect and get at least a slow connection?

SSID is send with the lowest rate (1Mbit) and with the most solid encoding - usally the transmit power and antenna sensitivity is also the strongest on the lowest rate so the SSID can be seen quite far away - often so far away that your clients wifi is able to receive the SSID beacons but unable to send something back that reaches the router.

> What is it doing now, sending, waiting for a response, did it negotiate encryption yet?

Wrong crypto results in no association - difficult to tell apart from low signal.

> Is the low-level connection OK, and we have a problem with DHCP? This you can detect, but the OS obscures it from you.

Yes. You can look at network-manager logs from Linux but sometimes it's difficult to tell - especially on Windows.

> There is no easy way to see signal strength.

There is also noise, antenna properties and everything depends on the rate and encoding used - it's not exactly easy.

> Why does the connection suddenly drop out or get slow?

Add also the rate control algorithms, the amount of clients, for certain 5GHz channels you have to obey radar then there is interference with bluetooth and microwaves. Also all that funky physics stuff with reflection and antenna positioning where moving a little bit might be just enough to cause problems for you.
i do it the other way around and only use the interpreter, the rest comes from pypi or, preferably, an internal pypi mirror.
I used to map capslock to control in software (I find control much more useful than escape because it has much wider use and for vim I can use ^[ anyway), but I've since switched to using a Kinesis Advantage2 and no longer need to.

For one, the Advantage2 has the modifier keys in super easy and convenient thumb clusters so moving them to capslock wouldn't actually make it any easier.

You can also remap the keys in the firmware itself, so the OS just sees a standard qwerty keyboard but you send it different keys (I use colemak, but again, its mapped on the keyboard level: the OS thinks I use US english qwerty). So I actually did remap my capslock, but I mapped it to tab because I find it slightly easier to press than the real tab. I also moved the keys in the thumb clusters a little bit to make control and command easier.

I now no longer need to change anything in software and everything works (my tweaks + my keyboard layout) by simply plugging the keyboard into a US english qwerty machine. I use the keyboard both on my home machine and my laptop, although on laptop only when I'm at home. When I'm not home, I have to rely on the usual software mods (I use OSX's settings to remap caps lock to control then)
It's not. It's supposed to use a publicly routable address. Private addresses were an unfortunate hack that got massively overused when people would've been much better off putting the same effort into using IPv6.
Trillion-tonne iceberg breaks off Antarctica
The argument is:

Traditional banks need £6.7m just for toilet paper, but Monzo can (and has) built an entire banking infrastructure complete with regulatory approval for that amount.

This suggests a velocity and efficiency of the upstart that could result in significantly surpassing traditional banks in the service offered, and continuing to advance at a rate at which the banks will never catch up.

[I'm a Monzo customer and like the service, if nothing else because every transaction is tagged with your GPS location from your phone which makes identifying mystery payments much easier. I think it's a force for good in the banking industry, but inevitably the big players will respond to the threat, and that's ok by me]
> That's not a constructive argument. I don't see how they could make it work?

Give each one a subdomain that resolves to its local IP, and give it a valid certificate for that subdomain.

> extract them and become able to impersonate some Philips device.

Or the attacker could just have a real, non-impersonated Philips device. If the user deliberately points their browser at the wrong device's site, nothing can save them. This is a very different problem from securing access to the correct site.

> You would have to make all users install a trusted certificate authority tied to their individual device.

That's not true, and I don't even understand what benefit that would have.

If you have a way to deliver a CA, instead you should deliver the correct address of the device. This makes 'MitM' impossible without any downsides.
But most people don't want or know how to automate. HTTPS is supposed to be used on very site but not every site is setup by a developer. That's a basic flaw that will make it problematic to have these kinds of HTTPS-only policies.
I've been running it on my computers since Fedora 22, everything works out of the box on all the ThinkPads I've installed it on, and my desktop.

Gnome needs a few extensions to be usable, but its working great overall.
Why is power cycling bad for the router?
There is no such thing as a legitimate patent.
1) internal company webapps just install company root cert and create properly signed certs under corporate internal CA. Installing the certificate across network is easily automatable on windows, OSX and Linux. The only issue is Firefox as it uses its own trust store. Any senior admin who can't figure it out with the resources available (plenty of information available online) should be replaced days it is not that hard.

2) with regards to raspberry pi, will anyone who can write code can learn to also create their own CA the only difference is probably no automation of adding to the trust store likely however it is only a 2-3 click install in most cases.
12 New Erlang Talk Videos from EUC17 Live
If you need such a device to do your job, maybe ask them to provide one so you can keep work off your personal device anyway? I disconnected my phone and so forth from work email and other services some time ago, and I'm not going back!
The reason is simple - they (people responsible for the form of articles, which may not always include the original journalist) don't care about you. They're not here to deliver you value. They're here to extract value from you.

My rule of thumb is simple: I look at a service and ask myself, is what I see a good, efficient way to deliver the value the service says it delivers? If the answer is no, I know that they don't give a shit about delivering value, they're only there to extract it.

In the concrete example of journalism: inverted pyramid, TL;DR of the facts at the top, no useless prose - those are signs of trying to deliver value. Prose, multi-page articles, ads, auto-playing videos (be it ads or "content") - those are signs they don't give a shit about you.

And yes, some may say that companies seek balance between profitability and value. Sure, maybe companies think they do that. But the choices they make matter. If they're making money literally on wasting my time, the most precious resource any human being has, then I don't want to have anything to do with them.

Which is why I don't read the news. The state of the journalism is so bad here, that casual browsing of comment sections of Reddit and HN is a more efficient way to stay up-to-date on the world events than actually reading the articles.
Bibie Brew Stardom Began with Fela Kuti in Nigeria
Show HN: Automatically find companies from your CSV list on Product Hunt
CurrentCost with Graphite and Amazon Alexa
How is it supposed to get a publicly routable address when it's not necessarily connected to the internet?
Be Central with St Giles Hotels
Most companies still purchase antivirus packages at bulk. I have a customer server where an installed AV slows down the SQL Server from time to time (especially when SQL server allocates more disk space) so much that the system becomes unusable. They still think it makes sense to install AV even to database servers. I think AV software is installed just to be scapegoats if there's a successful attack.
Nope. Disagree. Look at claim construction in a patent "a fixing means", for example, isn't an implementation it's an element of an idea. A patent application has to include a concrete implementation but the claims - which define the patent legally - are always broader than the specific implementation and will cover multiple implementations that use the inventive concept.

Thus, a new product that's never been made before can infringe an existing patent. The implementation is new but the _idea_ is not.
Ultrasonic plastic welding machine – Manufacturer and Supplier
Absolutely. A decent client who sees you as a key partner in the success of whatever they want doing is absolutely worth apologising to - and they will apologise to you too if they get things wrong. A monster of a client will never apologise to you, and you should never apologise to them. And once whatever it is you're trying to do for them is done, walk away (after having done the usual "Hassle of dealing with this client" vs. "How much of the mortgage it will pay off" dance, of course).
Top 360 Degree Virtual Reality Underwater Videos
I love dmenu, its tiny and to the point and just works.
> On a unikernel this sort of thing becomes trivial since everything is Ring 0 and all protections can be trivially disabled.

If the hypervisor sets the relevant VMCS control fields for the unikernel to cause a VMEXIT on (for example) a load of CR3 and any EPT violations and sets up the guest with a static set of read-only and executable (or in fact, with EPT you could even do execute-only) pages then there is no way the unikernel can disable these protections.

Having said that, I'm not arguing that running unikernels in Ring 0 is the best approach for security, just that it's not impossibly insecure.

With ukvm we're also looking into running all of the unikernel in (virtualized) Ring 3 with nothing running in Ring 0. However, this needs more experimentation since with x86 you can't (for example) easily handle legitimate exceptions (e.g. divide by zero) from Ring 3.
Ubuntu has a history of doing things that don't go anywhere: upstart, unity, their phone thing. Fedora has concentrated on being a solid, traditional Linux desktop. If that's what you want, Fedora could be it.
Anything ath9k PCIe would be my guess. Driver is open-source, little to no closed firmware and it's battle tested and good Linux support. No 802.11ac through but for sniffing it shouldn't matter.
What's the use case for java.beans in a non-GUI application? Why do you say almost every Java application depends on it?
Mobile payments overtake use of cash in China
> > > it's not possible for Philips to add HTTPS support to the hue bridge

> > I don't see why not.

> That's not a constructive argument. I don't see how they could make it work?

Missing from your quote: The alternative is freedom. Philips doesn't have to lock their devices.

If Philips (and other companies, obviously this doesn't relate to just Philips) would provide a community access to their devices and software rather than locking them out, I believe that this problem would not exist.

The original issue is that having a public website (used over TLS) that interacts with local network devices without TLS shows warnings about insecure communication. Again, the warning is shown because it /is/ insecure. There are plenty alternatives of securely interacting with an IOT device. Plain HTTP from a public website is just not one of them. For example, look at how Apple's Homekit has implemented that. Homekit is not usable from a public web page in a web browser. That's a good thing. (aside: I'm not a big fan of Homekit but their security is not bad)

So if vendors are annoyed with browser warnings, it's because /they/ are doing the wrong thing, not the browsers.

> sufficiently sophisticated attacker will just extract them and become able to impersonate some Philips device

Just like on any website. Just because something isn't 100% unbreakable, doesn't mean it's a bad idea (you do lock your doors, don't you?)
It doesn't matter if there are no strings attached. As a scientist (and particularly, as a human being), you would feel some degree of gratefulness for the grant that Google gave you - This is enough to bias the research at least a tiny little bit... If only a couple of extra friendly words in the conclusion or executive summary.

After many years of stacking up those "almost perfect" bricks, the tower starts to lean to one side just a little.
mentioned that a few days ago in another discussion: https://news.ycombinator.com/item?id=14700610
University turns audio clips into realistic-looking lip-synced video
I even do this on my own private network. Installing root certificates is not hard.
http://www.upday.com if you are on Samsung Android (currently only in Europe).
> You don't have to solve the Navier Stokes equations analytical for this.

Yes, to be sure you are right. It was just a silly (and, as you point out, mathematically inaccurate) joke.
HowToGraphQl: The free and open-source tutorial to learn all around GraphQL
One Nation One Tax. #GST
Once again, paying off your mortgage is 100% guaranteed returns, investing in the stock market not only is not guaranteed to be over 4%, you can lose a significant amount of money. Need I remind you that the S&P 500 dropped around ~50% between 2007-2009? Here's the math: +number > -number.

Equities are currently overprice. I'm not saying don't buy them at all, but expect a correction in the near future.

If not holding a mortgage is a "bad idea," then by that logic you should immediately take one out if you don't already have one. Do you plan on taking out another mortgage once yours is paid off? Would you take out a mortgage on a home you own free and clear? Do you buy stocks on margin? Do you take out personal loans to put in the stock market? Do you have a home equity line of credit that you use to put in the market? Why or why not? I mean, if you're expecting 18% returns, there's a thousand ways you can borrow money cheaper than that.

Everyone's situation is different so making blanket statements isn't appropriate. I'm not saying that they should immediately pay off the mortgage, I'm disagreeing that paying off the mortgage is a "always a bad idea."
It is pretty easy to manage your own CA, make a Debian VM, install something like XCA and it is literally click a few buttons to generate and issue certificates and set up certificate authority root certificates.
Colour Science for Python – 0.3.10