skysight-inc/HackerNews huggingface dataset:
They are taking advantage of nonlinear properties in the microphone system, as described clearly in the article. There is no software filtering to protect against this using classical signal processing.

That said, it may be possible to detect the difference between human speech and the ultrasonic trick with a machine learning solution.
It's funny how, for years, we've been trying to get away from HTML mixed with code (specially in spaguetti PHP), just to get back to something similar again.
I think you've really forgotten how hard the copy to server step could be in the 90s
It's pretty sad that such an aesthetic piece of technology is completely ruined by that companys content.
> you can't just say 123-45-6789 is the mark of Satan

Obviously you can't say it out loud, because you might evoke the wrath of the Old Ones.

Additionally, you can just engrave the surface your ID-card with the correct symbols in charcoal, a salted circle (actual salt, not the cryptographic kind), maybe some blood, and you should really be fine for most practical purposes.

I mean, this is not the Middle Ages any more. You can just Google this stuff.
Could this phenomena have caused the recent hearing loss among US and Canadian diplomats in Cuba?
I have Movie pass and went 2 days ago. The kid next to me brought in a book-bag full of candy and pop. He was popping can lids the entire movie and crunching bags. I live in the US
Google Translate Community
Either way it's gooing to be a great way to get in touch with the SEC from the wrong end of the stick.
That a jury is made of common people who might have a wide range of beliefs seems rather the point of the system though doesn't it?

Also, this is your weekly reminder that vaccines are homeopathy.
I treat HN like nicotine patches. It's still addictive but much better than the alternatives.

I came across HN just because the HN bot on Twitter had the most interesting links in my feed.
Late 80s, I started professionally on Unisys 1100 systems and ohmygod. The runtime environment was such a disaster. Like half a days work to set up a runstream to compile your damn program. The printout, which you could pick up 45 minutes later at the central printer. It was not all bad: You really worked hard on avoiding syntax errors, before sending your code off for compilation.

It was also strongly advisable not to forget your (if I emember correctly uppercase, up to 8 characters and numbers) file names. Hierarchical directory structures? That's probably for Sissies.

Anyway, when I moved to VAX/VMS and after writing my first program I asked a colleague.

"So, how do I comile that?"

"Well, you type:"

cobol $program (or COBOL $PROGRAM, VMS is case agnostic)

I thought he was making fun of me after the Unisys experience, but nope. That was it. (Ok, you then had to link it, which wasn't really more complicated).

To this day I think VMS is the best OS I have ever worked with.

Ahh, you bring back so many great and not so great memories... :)
About casting the malloc() : http://c-faq.com/malloc/mallocnocast.html
Implementing strcmp, strlen, and strstr using SSE 4.2 instructions (2008)
Can't upvote this enough. Each time I try to dive into React/JSX I have some dark visions of PHP and JSP in my head.
The Reasons for Secession
Ember is so good, it does not need comparisons any more :)

https://medium.com/@alvincrespo/ember-your-best-bet-b5cd7275...
Ask HN: Optimal Head Position While Working with a Laptop
Most of my work I do using my laptop. The setup usually is table + laptop + me sitting in a chair. My Head is slightly looking down ( ~ 70 degrees ) and I start feeling some tensioning in my neck up to my head.

What's the best head position while working with a laptop and how can I achieve it without huge efforts to make?
I assume they intend for you to use Route53 on top of this. You could use a combination of geolocation routing and failovers to set it up so that by default people are routed to their nearest region, but if that region is currently offline send them somewhere else instead.
can you spell "b-u-b-b-l-e" ?
Nice idea the swipe file! defenetly implementing it myself
Google Drive File Stream Emerges to Replace Google Drive App for Mac and PC
Debbie Harry sang this in 1989:

"I'll keep the money, you can have the fame"

https://en.wikipedia.org/wiki/I_Want_That_Man
Calvin: You can't just turn on creativity like a faucet. You have to be in the right mood.

Hobbes: What mood is that?

Calvin: Last-minute panic.
That's not what happened during the 9/11 attacks. The death toll was reported as more than 6000. Weeks later it was suddenly adjusted downward to 3000ish and finally settled at 2997.

The extreme overestimate was ostensibly due to "double counting", which I find to be a wholly unsatisfactory explanation. With all the info that they collected about each person who was missing -- name, DOB, photos, ID numbers, where they worked in the building or who they were visiting -- how can they possibly double count 3000 people?

And you're saying that generally after a disaster it works exactly the opposite way: a low number initially which gets adjusted upwards. Interesting. Almost as if there was a desire to make 9/11 look even worse (as horrible as it was).
You bring up a point that was discussed 35 days ago:

https://news.ycombinator.com/item?id=14925899

Tarikyn said: "Most developers I knew in person didn't care about CSS or didn't 'get' it."

Part of my response was:

"Some people looked at the chaos of non-standard HTML and decided the Web was successful because it had been broken from the beginning, and it had learned to work well while broken. I reached a different conclusion. It became clear to me that what developers wanted to do simply had nothing to do with HTTP/HTML. We don't yet have the technology to do what developers want to do. HTML was an interesting experiment, but it suffered from a dual mandate. Sir Tim Berners Lee wanted HTML to both structure data and also present it in graphical form. Almost from the start, developers were conflicted about which mandate they should obey, but the preference, since at least 1993, if not earlier, was to give priority to the visual. For all practical purposes, developers saw HTTP/HTML as GUI for IP/TCP. Previous IP/TCP technologies (email, gopher, ftp) had lacked a visual component, but HTML finally offered a standard way to send things over Internet and format the end result visually (emphasis on "standard"; I could insert an aside here about X window systems and some cool software of that era, but every app implemented their own ideas about visual presentation. X-Emacs, for instance, had its own system for visual formatting over a network)."

The point is, HTML was an interesting experiment, but we now know that it doesn't work for what developers want to build. So it is time to get rid of HTML and move on to something better.
I will also share praise for Beej. My network programming course was in C, and most of my programming experience had been in Java, Python, and JavaScript. This guide was probably the reason I passed.
Which part of the world?
To Know More About Apple's New Project Mirrorshades
Apple new research on AR, the giant will leave no grain unturned to integrate Augmented Reality in its smartphones.
I've found it's less addictive on my phone than on my laptop. I can dip in skim a couple of articles and dip back out.

On my laptop it's easier to up vote and comment so I get more involved. I also then spend more time reading the articles.

Somehow this manages to satiate my HN thirst and I don't feel the need to go via my laptop.
Very very cool!

Also very very pixelated appearence because the sharp edges to each unit.

/me mulls patenting the same kind of thing but by stitching together small cheap flexible LCD screens brought in bulk from Alibaba...
Well, it is not actually the compilation but rather the build and reload of a webpage that takes time. But I get a small visual feedback in Vivaldi when its done.

However, sometimes I miss it due to my focus being elsewhere.
This. And it doesn't even tell you if you have been effected.
Make architecture as below:
1. Use common code where even possible like for crud operation a single class that handle operation based on entity provided(Dapper.Exention library for .net ORM).
2. Try to create code generator using templates.
3. Use common and well known libraries to manage common operation like logging, mail sending etc put those in sub project - in case need to change library just a sub project require changes.
> tokens aren’t just stand-ins for stock—they can be set up so that instead of a share of a company, holders get services, like cloud storage space, for example.

How is that an attractive proposition? It means I get all the risk of buying stock in a new company, but none of the benefits. My money is gone if the company goes belly up, just like buying stock, but if the company does well, the best I'm ever going to get is some standard service. My token will never be worth more than whatever that service is worth.
As the article says, there is a physical presence bar to meet to make this workable now, but I can't not think about clever ways that this could become a "worm" or spread digitally. Infected viral (actually viral!) YouTube videos? Robocalls that you hope go on speakerphone (where the fidelity of the attack signal may be questionable)? Or drive a car with big speakers around a neighborhood? How about a mobile phone botnet that just constantly speaks to digital assistants?
During the same earthquake, my curtain fell down, and I saw lights across Wellington harbour that I'm fairly sure were high voltage lines clashing. from my elevated point of view, the source was below the horizon.
If you often switch different versions of any of your config files, confetti may suit your needs better than stow: https://github.com/aviaviavi/confetti.

If you just use stow for basic dotfiles management, confetti will also work just fine, but is less general than stow.
There s a whole other level of accountability with devices which leave marks.
It may not necessarily mean a new original article every day. A huge number of articles are simple translations of the english version (or vice versa). Which doesn't make them any less useful. But it makes it easier to produce a large number.
A-Frame maintainer here! If you wanna check out what else the community has done, we do a weekly round-up. Lots of Google-based stuff this week: https://aframe.io/blog/awoa-77/
> If you work at Google: Angular

Doesn't Google actually prefer Polymer?

https://www.polymer-project.org/
Here is the author of the Klipse plugin[1] that powers the interactive code snippets.

I've opened a github issue[2] to suggest to integrate the Klipse plugin on react.js official documentation.
If you like the code interactivity, feel free to express yourself on the github issue[2].

1: https://github.com/viebel/klipse
2: https://github.com/facebook/react/issues/10646
Why not buy the paperback edition?

He put years into making this book, you want to read it ("love"), but you won't buy it because he wants to protect his labor of love? (Not interested in arguments why DRM is ineffectual as it has no bearing on this).

Buy the paperback. I just did. If you would really and truly "love" to read it, then buy it.

But really, is the DRM just an excuse? A reason not to part with $32 dollars? A way to virtue signal that you are appreciative of his work without actually showing that appreciation in the only way that matters?

(I didn't mean for this argument to become a larger criticism of how people act to new products and services in general; but I guess that's what it has become).
A-frame seems to fall into the "super easy to do something basic, but very restrictive at the upper end" category of software tooling.

That said, this is still pretty cool, and I'm a fan of tools like this, Game maker, etc existing. This is a great way to get newbies interested in building stuff, because at the core of it, the knowledge overhead is low enough that a middle school aged child could build something with it given some time.
I don't know the red or orange books you mentioned, my first thought was that it was a play on 'little black book', a book of dirty secrets and hidden knowledge.
They work something like this in LISPs, right?
Like, can you define new language constructs with them?

http://www.red-lang.org/2016/12/entering-world-of-macros.htm...

(BTW, have a look at red for desktop apps, it's not even at 1.0 and already fucking amazing)

But on topic; Are Macros a well-defined "thing"?
Since a macro in C, seems to be rather different from a RED or LISP Macro.

Or is it just that C macros are essentially the same, just more restricted?
Jain vegetarianism (strictly interpreted) bans root vegetables (amongst many other things), in Gujarat restaurants (already vegetarian) have special symbols to mark "jain-safe" items in the same way western restaurants might mark vegetarian or kosher/halal items.
Here's a post with better detail, videos of testing the system, etc. It's pretty much what you described. https://hackaday.com/2017/09/02/coca-colas-new-3d-times-squa...
The problem is not so much that python is slow. It's that in some scenarios python can't be made fast.

Fast prototyping is great but being stuck with a prototype for deployment isn't.
Probably the poster copy pasted the link from their RSS feed reader.
I used to think that way, but then you realize that JSX ends up behaving only as syntactic sugar for `React.createElement`.

If you have that clear, JSX is only syntax for the pure JavaScript you end up writing. Diving in the toolchain and ecosystem also helps you note that. Adding Webpack loaders to the mix, and then your application ends up only consisting of JavaScript files, where you abbreviate `React.createElement` with the old HTML tags.
"We haven't had free markets for a very, very long time. Consequently, your claim of free markets unavoidably producing negative outcomes lacks evidence."

You could easily replace "free markets" with "communism" and make the same statement.
You can't stop the phantom frequencies from appearing on microphone, so the solution is to stop the recognition if there are powerful ultrasonic waves and alert user something weird is happening.
Don't for forget hiding audible commands inside noise, like A/C startups, vacuums, any grinding / background noise we typically ignore can be a carrier.
You don't need to smuggle or out-smart because there aren't any rules against taking your own food and drink in in the first place.
> It's funny how, for years, we've been trying to get away from HTML mixed with code (specially in spaguetti PHP), just to get back to something similar again.

The difference is that PHP+HTML is basically just templating. The HTML you put in PHP isn't a type that the interpreter is aware of and PHP isn't going to validate anything about.

Javascript used to have E4X in Firefox until it was removed when ES4 effort failed.

https://developer.mozilla.org/en-US/docs/Archive/Web/E4X/Pro...

Like someone said separation of concerns =/= separation of files.
Won't DNS failover be painfully slow? Some clients ignore small TTL values. I've seen DNS updates taking several hours to propagate.

I thought one of the advantages of multiple zones is that zonal failover can happen with "zero" downtime (this seems to be the case with Amazon RDS).
And after testing them, discover that they all break in identical ways.
For crates.io it works out that if you yank a package no new packages can be published relying on the yanked version, but packages already relying on it can still download it
we have not really had a major corporate prosecution with Executives going to jail since probably Enron scandal.

I'd be surprised to see big pharma CEO in jail these days. especially politically connected.
It's only observable in right out of college. You're less likely/wouldn't notice if you had two candidates with 10 years experience. Which is why companies go for people fresh out of school. Their naiveté gets them accept lower pay and work longer hours.
It's not a lot of effort to add it to a new machine. It goes something like:

git clone --bare https://example.com/myconfig.git $HOME/.myconfig
echo "alias myconfig='git --git-dir=$HOME/.myconfig/ --work-tree=$HOME'" >> $HOME/.bashrc
source $HOME/.bashrc
myconfig checkout

...and it's done. Getting stow on a machine that doesn't have it is probably more work.
Let Me Put a Fucking Comma There, Goddamnit, JSON
That's actually a very good question. I'm very curious to learn what was the actual cause of that.
Why the Amazon of Healthcare is not a reality yet?
Not actually. it's an entity-component three.js framework at the end of the day, even though it offers easy entry on the surface. Same pattern as Unity.

Here's pretty much Tilt Brush built with A-Frame: https://github.com/aframevr/a-painter/ , and Google Creative Labs just released a piece using it: https://experiments.withgoogle.com/webvr/inside-music/view/
The threat of corporations going to jail would be a great disincentive for them growing too large. I think we would be much better off if we had more smaller companies.
My point was that we need to analyze consensus models (and new protocols), and that is very complex (and few people in the world have the skills needed). I gave the example of Bitcoin where the cryptography is perfect but the model has some security bounds.

Then you argued about the bounds and if they were theoretical or not which was not the central point of the argument and we can choose another issue to illustrate our central point. I think we can argue if it is theoretical or not ad infinitum.

So, to push forward my central argument I will again say: we need to check beyond the cryptography. Not only that, I will tell you: stay tuned because a new security finding with Bitcoin will be published soon.
Did you read the section on "Optimizing Python" ?? If so, I'm assuming you read about using CPython to migrate your package/program/module painlessly to C.

So given that, can you elaborate on your objection? I'd like to know why you think the article is wrong about optimising your Python to make it fast enough.
I think it still depends where. For exemple, I rarely see people eating/drinking during a movie in France.
It depends on the type of movie you are going to see, but usually only 1/10th to 1/4th of the people have something to drink and/or to eat.
And the ticket price vary depending on where you go. In most city, the ticket are 7-9€ but in small town, it's more 5-6€ (but they usually get the movie later).
The Premium Mediocre Life of Maya Millenial
Fake BBC News App in the Google Play Store
Watch the 33c3 presentation linked elsewhere in this discussion, or just skip to solutions/Q&A: https://youtu.be/WW1-xnTIDjQ?t=35m05s

You can also read the paper: https://petsymposium.org/2017/papers/issue2/paper18-2017-2-s...

Here is the blurb from their talk:

Cross-device tracking (XDT) technologies are currently the "Holy Grail" for marketers because they allow to track the user's visited content across different devices to then push relevant, more targeted content. For example, if a user clicks on a particular advertisement while browsing the web at home, the advertisers are very interested in collecting this information to display, later on, related advertisements on other devices belonging to the same user (e.g., phone, tablet).

Currently, the most recent innovation in this area is ultrasonic cross-device tracking (uXDT), which is the use of the ultrasonic spectrum as a communication channel to "pair" devices for the aforementioned tracking purposes. Technically, this pairing happens through a receiver application installed on the phone or tablet. The business model is that users will receive rewards or useful services for keeping those apps active, pretty much like it happens for proximity-marketing apps (e.g., Shopkick), where users receive deals for walk-ins recorded by their indoor-localizing apps.

-- https://www.blackhat.com/eu-16/briefings.html#talking-behind...
Learning Elm syntax through TDD
I don't think it's a generational thing. It's just something people have always done around here. A bottle of water in the cinema is £2.50 in the cinema, and 45p from the shop next door. I don't think it's trying to outsmart anyone. It's just sensible.
The most cynical among us might consider that shareholders are just "yet another bunch of creditors" in the queue if something goes wrong. Which doesn't seem much better than "the first customers for this crappy coin/service."
In pure Python that is true, but the article discuss this issue.
It is not. It uses the native Rust implementation of zopfli [0], which doesn't include anything from zopflipng.

[0]: https://crates.io/crates/zopfli
How We Hunted a Data Corruption Bug in RocksDB
Not sure if this will help, but I was surprised by this: https://arstechnica.com/tech-policy/2015/11/beware-of-ads-th...

SilverPush has since stopped, it seems, but that might just mean others are doing it more profitably that they were...
> This is a cool effect but it looks like it's mechanical

Well, yes, it is mechanical. While I agree with you that this isn't what you would normally class as '3D' it still has a z-axis component; so perhaps it qualifies for 2.5D?

Nonetheless, I haven't seen mainstream advertising done like this before and the applications of this (more creative visual / mechanical syncs) are really exciting.
Turn-key research writing and publishing with Authorea for groups and teams
> In Germany there is "Schufa", which is not a bank but basically a private company with a de-facto monopoly position in regards to credit ratings in Germany

Just for anyone from Germany reading: There are multiple, less well known agencies that are used by banks and others as well. They are definitely worth keeping an eye on. I will only mention Creditreform Boniversum, Arvato Infoscore, and Bürgel.
I understand the line of reasoning you presented. It reminds me of Stephen Covey's 2nd habit: begin with the end in mind.

Now to me personally this incident docked some points off of Tesla. I guess it is not the end they meant to justify.
Even if you're correct on all fronts, there is an unfortunate expectation in the cryptocurrency world that this sort of shit is expected, and it makes the product stronger.

Pretty much every exchange has been hacked at one time or another. Ethereum itself had a vulnerability, and they just forked it. Parity, the ethereum wallet software, had a vulnerability that put millions up for grabs .. the equivalent of a function like 'transferCoin' was made public instead of private.
If you look at the facial landmarks figure[1], it seems that the main difference between a "gay" and a "straight" man is how fat/thin their face is. Maybe gay people are on average less overweight? That's possible, but that's hardly an intrinsic characteristic. Eyebrow shape is not intrinsic either.

[1]: https://imgur.com/zs8RWIz
Well, I wasn't exactly making the "argument", but yes that was my thought process.

I disagree though that they shouldn't pay for it. Everyone should. However, the most likely scenario is paying indirectly, in your case.

Eg, if we increased road taxes and applied them only to those who actually use the roads directly, then shipping products will also require price increases to cover said increased road costs. So the end user is paying for the taxes whether they like it or not, in most cases.
JSX is not HTML. You are not writing HTML when you write JSX, you are writing Javascript. You are using a more convenient syntax to generate the virtual dom. All this hand wringing, navel gazing cargo-culting JSX gonna eat my baby bs is unnecessary. The PHP/html templating lessons of yonder simply does not apply.
You know, I'm ok with a physical button press as the authentication method.