skysight-inc/HackerNews huggingface dataset:
I remember coming across a serious bug in a site that belonged to a top multi-billion company. My brother also found what essentially an unrestricted privacy leak (and possibly editing access) in a top university (leaked data is sensitive personal information, not academic). Neither of us reported (or exploited) what we found.

Protection from this kind of blame-shifting and misdirected retaliation should be guaranteed by law. Until it is, bugs in critical and important infrastructure will go on unreported, and remain available for malicious actors to exploit.
People can, and do, do both things.
> Remember kids--and by kids, I mean fellow scientists--every presentation serves to either help secure or maintain funding.

What's the point of this statement? Funding is how things happen - these things don't happen out of thin air.

"Remember kids--and by kids, I mean fellow scientists--every presentation serves to either help doing or maintain doing."
>AWS ElasticBeanstalk

We're talking about novice web development and you're invoking AWS?

PHP is unzip, plug and play. Or single click any VPS "LAMP" package and go.

EDIT: Also, let's assume the target person runs a Windows machine. XAMPP is at least... 10 times easier to set up than Ruby/Rails on a local instance. And that's being exceptionally charitable.
Show HN: Go Remote Jobs
They abandoned the android port version before the ios port version, reportedly because the android version took 4x as many developers and any app worth emulating on wp would have both an ios and android version, so doing both was wasted work.

I did try out the windows phone emulation though, and was pretty impressed wrt speed. Video and camera wasn't working yet, but they had an intelligent strategy to stub and reimpment play services and billing.

Amusingly, I had to buy a $50 wp on ebay, because the one microsoft gave me when they flew a bunch of mobile devs to redmond to ask what tools we wanted, the one they gave us was not one of the two models that supported the beta. I'm only salty because, like wp itself, it was never officially killed, and we just had to figure it out when the program stopped updating.
While the reproducible builds efforts try to make builds path-independent, at the moment they often settle for reproducibility when built at the same common path. That's still enough that you can reproduce the build yourself.
Yep, a few people were frowning, especially since the democracy is in pretty bad shape in Hungary right know. However, in this case it works: it will be seen and remembered longer this way. Also, there were quite heated discussions on facebook, the case received a lot of attention even from non-tech people, the guy will be represented by the lawyers of a human rights association, etc.

And actually there will be a protest in front of the office of the Public Transport Authority tomorrow. But I think in this case, the online petitioning worked pretty well.
I wonder if it would be feasible to build a solar furnace capable of melting aluminium with focused sunlight - the light side must have pretty steady and strong incoming solar radiation, with no atmosphere?
When I was in Budapest a few weeks ago, I heard from multiple locals that the metro system was owned by some sort of mafia. I wonder if that explains the subpar security and overreaction to the bug report.

edit: a few weeks ago, not this past summer that is still occurring
Google Search Query Used in SEC Insider Trading
> Adobe had him arrested on the stage as he gave his talk.

I was there!

The FBI arrested him in a hallway, 1 day after his talk. Dmitry at first thought it was a joke put on by a Defcon prankster.

During his talk, the panel moderator asked Dmitry to pause for a minute... and said "Would you mind saying 'Can you tell me where are the nuclear vessels in Alameda'?" Dmitry was confused by this request and said, in his Russian accent, "I do not know where the nuclear wessels are in Alameda?" The mostly American Trek-familiar audience had a good laugh, and Dmitry continued with his talk.
This tends to be mainstream opinion today: figure out the timeless essence at different scales, decompose it into abstractions, freeze their interfaces so that people can start relying on them, and so on. But it doesn't seem to have helped for forty years of trying to do it. The world changes too quickly, we aren't quite as good at designing libraries as we think, the world is filled with historical accidents in interfaces. With hindsight, it seems clear they were prematurely frozen.

Rather than dismiss these observations as isolated cases of people not practicing good behaviors, I tend to see them as evidence that we should be creating libraries far more conservatively, freezing interfaces far more late in the life cycle, perhaps even decades late.

If I'm right, we are also overusing industrial notions of assembly lines and division of labor. Libraries with non-trivial functionality take a long time to get right, and in the meantime they are produced more like guilds of craftsmen than factories. (Even if the products themselves permit factory-like operation at scale.) In that initial bake-in period we are ill-served by conventional metaphors of software components, building blocks, etc. We should be dealing more in vertically-integrated self-contained systems rather than plug-and-play libraries. More OpenBSD, less `gem install`.

I've been thinking about this for at least five years, ever since http://akkartik.name/post/libraries. More: http://akkartik.name/prose
A few things come to mind:

- Windows is (mostly) a platform, not an end application. So you need...

- Backwards compatibility. It is a pretty hard requirement, as one of the major selling point of Windows is that your existing stuff will keep working. Programs targeting 16-bit Windows from the early 90s still work on Windows 10 (though they recently removed the 16-bit subsystem from 64-bit Windows). I believe it's the same with Office document formats. You already have the code that handles all of the old APIs and functionality, so...

- If it ain't broke don't fix it. The old code has been thoroughly battle tested. Obscure edge cases have been addressed. Bugs have been fixed over the course of many releases. There is no chance that your rewrite will avoid regressions, and you'll almost certainly introduce new bugs too. It's better to make necessary changes to the old code than to try to start from scratch. And...

- It's a lot cheaper too.

Joel Spolsky has a great blog post about rewrites: https://www.joelonsoftware.com/2000/04/06/things-you-should-...
Ask HN: Anyone interested in a darknet Dropbox alternative?
Hey everyone! I created a nice alternative to dropbox that's 100% encrypted and is anonymous. Each account comes with there own .onion url and has all the same abilities as dropbox accept the added feature to be able to code in a built in IDE. Is this something anyone would be interested in? Let me know your thoughts! Thanks!
Very curious about this type of work. Is there is a good way to contact you to discuss this topic?
So I guess the reverse is true also, which explains why my mainland SIM card wouldn't have unfiltered access roaming in HK.
No way. Time traveling UX designers are the ones designing Linux DE's today.
Getting Started with Lambdas in C++
They did compete well on price. Winphone ran well on the kind of specs that made Android pure misery to use. They also had some fun software features, like unifying a contact's social networking and messaging log into the contact app. Android should steal that approach to make up for their balkanized communication apps.
The first Ubuntu phone was not released until February 2015.

By that time, 1 billion Android devices had already been sold. The first Android phone was sold in October 2008. The iPhone was released in June 2007.

Ubuntu entered the market six years later and had to take on these two market giants, as well as other competitors like Microsoft still trying to get a seat at the table.
> The other thing to do would have been to offer Android app compatibility.

Supposedly, the tried and gave up - but whatever effort was spent doing that eventually resulted in WSL.
A large weakness people have is the necessity of a sense of safety before taking risks. A risk here is defined as a testing of a personal idea. 3rd party ideas necessarily are already vetted to some degree by reality because transportation to you require going through reality.

Risks as defined then are a necessity for living a unique life. It isn't always the most desirable thing as the majority of people would rather follow a crowd, but it does often have the most disproportionate rewards for work input.

I don't know if it's biological or cultural, but girls/women often require a much higher sense of safety before being willing to do risky things. There is also a much higher "cost" from society from doing things that look foolish. This results in less of a desire to learn, especially as you approach the cutting edge where the failure rate rapidly rises and civilized structures start deteriorating. (the social structure that works best in this "wild" is the frat bro/alpha male structure)

Being born beautiful is actually a weakness due to an addiction to strength in this regard. A corresponding male strength is academic excellence. Both these strengths become weaknesses because of lack of experience dealing with setbacks and shocks as well as the accumulated dry tinder that was never periodically cleared via said setbacks. (old people are stubborn because they have too much tinder to risk in a fire/refactor) I use academics as the male example as it creates a drives to validate the prior excellence often forcing them along paths into finance or other areas with high monetary compensation. Selling soul for money, taking no risk by not being true to yourself.

Thus addiction to strength creates risk averseness and stagnates growth. Girls are often shielded from reality and also have an escape route of marriage. (men don't, an extreme example of an alternative for them for meaning is being a suicide bomber)

Almost all social structures in the world heavily cause girls to become addicted to social validation. (Note that individual validation can be "proved" by money while social validation cannot. Objective and subjective tokens of value) The stereotype of "ugly" girls in STEM is a result of being beautiful increasing the chance of this addiction. (The stereotype of smart/beautiful but crazy may have origins in life-changing experiences that shatters the status addiction but did collateral damage. )

Safety is a necessity for learning which necessarily involves mistakes. However the minimum safety level can be vastly lowered by encouraging a dismissive attitude towards social validation.
Hey, one of the maintainers of the project here. The website was hastily threw together a few years back to host the curriculum. Its never been that great. We are working hard on rectifying that with a complete redesign though https://staging-odin-project.herokuapp.com/
>the dev environment required Windows 8

Dear god. As someone who just had to battle Win8 on a corporate laptop from a vendor... I'm shocked WP did as well as it did if this is true.
Yep, Hungarian story. And indeed the law in this case is not that bad at all. It doesn't penalize what the guy did. The sad part is of course the corporate & governmental reaction, the frightening part is that the police was so eager to jump in and overreact.
Writing is not a quick improvisation activity.

I think we can say there are plenty of successful male stand up comedians.

It is more related to the issue.
>osbourne your platform repeatedly

Heh, Baader-Meinhof phenomenon. Just got done watching a bunch of 8-bit Guy videos on the topic.

I also strongly agree. Two reboots was ridiculous in the time period that the phone was relevant.
Which is why gold is actually decent, because it has real valuable uses. Not as much as say petroleum or steel, but still.
Anyone is allowed to participate in the IETF but no one has any formal authority so the analogy of a seat at the table doesn't fit. IMO users of a protocol should have some representation, although regulated enterprise users are a pretty small minority compared to consumers.
Bitcoin Explained with Emojis
The ol' lamp-post theory of data analysis: https://en.wikipedia.org/wiki/Streetlight_effect
Maybe programming is to system architecture as tactics is to strategy. Which would probably mean management is to system architecture as logistics is to strategy?
That was one of the really weird things I noticed in the USA when I visited recently: this bizarre tendency not to include tax in the prices. Tell me what I need to pay you, not what you're going to end up having received!
No kidding - what else is a potentially hostile autonomous agent if not everybody.
One-off script sure, but for core product code I disagree. It's temporary in the grand scheme of things yes, but how many times will it be read before it is gone? Taking a couple extra minutes to clean things up and standardizing style pays dividends in readability, and traceability via git-blame, etc. Same goes for extended commit messages that explain the approach taken.

It's not a question of sinking tons of hours into this stuff, if you're using good tools it just becomes the way you work. Could you gain 5% efficiency by just blasting out the ugliest code you can? Yes maybe, but if it's actively developed code you could easily cost future developers much more.
This is a strawman. Elon's idea and what Andrew is countering is that killer robots can be unintentionally created by someone trying to do good.

Evil robots could always be created by evil actors, and there is nothing interesting here.
Redefining agricultural yields: from tonnes to people nourished per hectare
Ask HN: Is there mandarin speech-to-text API with result confidence per word?
I remember the push to be able to take existing Android/eyePhone code and port it directly to Win Mobile. IIRC Microsoft scrapped both sets of API (based on community feedback) and focused on Android, but that project too was scraped.

There was a 3rd party BlueCard project that attempted to bring Android apps to Windows 8, but it only supported older versions of Android at the time.
The Great Firewall doesn't in general modify traffic. It either allows traffic to pass though, or blocks it (TCP RST, rate limiting, etc). I was able to visit normally blocked sites like Google at full speed of a typical cellular connection.
This isn't new. The Card-Kreuger study was performed at a point when many of these companies were first introducing computers for various logistics tasks, increasing productivity and replacing some jobs.

Further, if you say that old studies aren't reliable because it's a brave new world, the predictions you make due to some numbers are also unreliable.
On Ed Yang's repo <https://github.com/ezyang/compact>, which I believe features a version of the Data.Compact module that got merged into base, he gives the example of a spellchecker whose max pauses went from (0.0023,0.0582) to (0.0017,0.0462). In the example the faster version stores the set of dictionary words result you also get disk (de-)serialization, which allows you to amortize the initial cost string parsing.

Unfortunately, I doubt that nondeterministic garbage collection will ever mesh well with high-performance gaming and especially ever with real-time problems. For ordinary systems programming, however, I think it's frequently possible for high-resident-memory applications to build a walled garden for their e.g. in-memory caches or large binary assets.
Its hard too. my current job with a large existing code base (perl/python/shell scripts and java), and keeping it up to date is a large portion of my time.

The thing is I get very little credit for fixing something that is broken, but creating something new generates accolades and the illusion of productivity...
Windows phone 8 was pretty nice to develop on. Microsoft's experience on building OS and a developer environment was also pretty visible on the product. IT was probably a little bit too late, though.
> I remember my last visit to Baltimore. I saw a lot of homeless people. I saw a lot of buildings in need of repair. There were people needing work and work needing to be done (fixing buildings). I was left wondering what was preventing the economy from functioning.

I'm reminded of this image: http://i.imgur.com/mwfN4cM.jpg

For those using screen readers, the image is of a poster containing the following text:

If you're unemployed, it's not because there isn't any work.
Just look around: A housing shortage, crime, pollution; we need better schools and parks. Whatever our needs, they all require work. And as long as we have unsatisfied needs, there's work to be done.

So ask yourself, what kind of world has work but no jobs. It's a world where work is not related to satisfying our needs, a world where work is only related to satisfying the profit needs of business.

This country was not built by the huge corporations or government bureaucracies. It was built by people who work. And, it is working people who should control the work to be done. Yet, as long as employment is tied to somebody else's profits, the work won't get done.
"if you just typed in the url (shop.bkk.hu), the site just wouldn't appear. At first I thought they've taken it offline, but it turns out that they just didn't set up the http -> https redirection. And it was left like that for days. If you just heard about it, you couldn't use it. You had to click a link (normal users won't figure out to put an https in front of the host name, even I didn't think of it)."

I'd really like to know which of these is the better solution.

It seems to me that if people go to the http address, they could be redirected to an attacker's address with a simple MITM attack. So there's an argument to be made for not using http at all, even for a legitimate redirect, because it can be so easily MITM'ed.

On the other hand, if the http address is left unused, then people who try it anyway and it fails will be confused. For this solution to work, it seems the users have to be educated to always and only use the https address.

For these reasons, the whole separate http/https scheme seems broken by design.

What's the consensus from the security community as to the right setup here? Am I missing something, or is there a better way?
I'm guessing the smallest possible chunk of code is a cloud function.

Easy to rewrite, replace, and deploy.
I've had interest in writing native Windows (desktop) apps in the recent past, but the confusing messaging/lack of commitment to any particular direction was a real turnoff. On Apple platforms, the only real choice you make is between Swift and Objective-C because either way you'll be using Cocoa. Microsoft would do well to bring that sense of clarity to their dev scene.
1. 70 percent more girls than boys had strong math and verbal skills;

2. Boys were more than twice as likely as girls to have strong math skills but not strong verbal skills.

No surprise on the 1st; I recognize that women can do/be anything they want in this world. But I wonder if the 2nd stat is explained mostly by the fact that MORE men are strong at math (not being a chauvinist pig; just running with stereotype)...or are the two genders equally represented among Math Elite and girls twice as likely to have strong verbal skills?
Yea I had one for a while. It was a good little phone. Durable. I liked the OS too. The Kindle app was terribly buggy .. if there was a version of Firefox for it I think I'd have been set.
Just the basics.

Plugged in my 'scope and started probing some debug headers that looked a lot like they'd be for UART, check if one is Tx and is sending out data, figure out the baud rate, hook up Rx, Tx, and GND on my UART dongle to the correct headers, and modify the bootsting in Cisco preboot to spawn a serial console which landed me into busybox as root :)
creator of pev here, thanks for all the kind words!
OK, got it. And indeed, that is the Tor Project argument.
I don't regret MS messing up their mobile strategy, except for them directing Nokia to kill Meego. That was a pretty bad loss.
Like git. The first commit talk by itself: it was made using git. Software that works.
Intel looses it's Dignity
Here is the proposal that landed in the ghc-proposals GitHub repo, written and hand-illustrated by Ed Yang. https://github.com/ezyang/ghc-proposals/blob/backpack/propos...

A/V fans will enjoy this talk by Ed, whose energy and enthusiasm for the extremely dry world of language module design knows no bounds. Also hand-illustrated! https://www.youtube.com/watch?v=Rda6SNhznRs
That's not in question. Yes, playback framerate is independent from recording framerate.

The question is the availability of resources (memory and bandwith) to the satellite and how many frames it can store without needing to transmit them over its slow downlink.
Sometimes a presentation is just a presentation. A means of imparting unbiased knowledge.
IETF Working Groups are open, you can just sign up and go participate (or task an employee to do so).
The government created the internet, GPS, and funds much of the innovative research going on.

I totally agree with reforming our tax system away from income taxes and towards a land value tax, carbon taxes, and other Pigovian taxes. Or at least we can start taxing capital gains at the same or a higher rate than income taxes.
I should say to take my comments with a grain of salt - that's how I heard her English parts. I really have no idea if there were just as many negative comments in her Thai. Just a bit of curious anecdata, please salt well.
> we still have no truly waterproof phones), battery life

Aren't iPhones and galaxy "active" or something are waterproof?

There are "survival" type phone that have weeks of battery life and shock/water proof, but it's not what the market wants, there is a minority of people who would sacrifice the look/dimensions/weight of he phone for the N week batter life. Most consumers would go for the looks and portability I think. That's why iphone sells as much and those "survival" phones don't. Do you think if iphone would stick a twice as thick of a battery in its next iPhone many people would buy it? I certainly would not
I think your POV is fine in theory, but PCI/eCommerce is once of the primary stakeholders in transport encryptions both in terms of businesses and users. So it might deserve some special consideration (if reasonable) or not :p
A 4 minute video abstract for those in a hurry: https://www.youtube.com/watch?v=LmBVbqEPeC0
You could use that same number to support the proposition that they are accurately calculating their returns.
Yes! I have been looking for something like this! If it works good I would even pay for that service.
From English to Spanish things are pretty decent. But from English to other languages it can get pretty horrible.

But that doesn't even matter - the main thing is the barrier to reading a lot, not getting the gist from one article. If you can read English, you'll probably encounter Western perspectives all the time on the Internet. But if you're forced to go through a broken Chinese machine translation every time you encounter something in English, you're going to stay on the Chinese parts of the Internet.
Sometimes you need to stop maintaining things. Towns rise and fall because the economy changes. If there's no economic activity bringing money into a town, it should eventually disappear. You need the political courage to stop wasting money on propping it up. Some bridges, pipes, roads, and trains shouldn't be repaired or replaced. They need to be closed if dangerous, and allowed to disappear into history. If holdouts want to keep living in their dead town, good for them, but don't make the rest of us pay for it.