skysight-inc/HackerNews huggingface dataset:
Probably QGIS if you are doing something data driven and want a big image as output (especially if the source data has geographic coordinates associated with it).

There are a few open map engines, I guess mapserver and mapnik are 2 of the more prominent ones, and now there are several implementations using OpenGL (aimed at tiled vector maps in browsers). But that is all more at the toolkit level rather than the application level.

For simple stuff, using leaflet to draw on top of OSM tiles is a nice solution.
Am I idealist by wondering that people think adding a cron job is a good solution? Why not trying to fix the broken software?
It's somewhat of a known problem space. Tackling light pollution boils down to easy steps, you just have to be mindful in design...

- Only be on when needed

- Only light the area that needs it

- Be no brighter than necessary

- Minimize blue light emissions

- Be fully shielded (pointing downward)

Light pollution is (IMO) driven by lack of knowledge of the problem & solutions, a perception that lights = wealth/luxury, and the low cost of electricity.
In the Piedmont, we said "drink." Growing up, I knew what "soft drink" meant and understood the distinction, but nobody among my family & friends used that phrase.

Also never heard anyone call anything but a Coke a Coke, which is a really common stereotype of Southern English.
And when companies coordinate to prevent that? It doesn't even have to be explicit behind the scenes coordination. Companies that base your salary offer off of your previously salary are still coordinating even though they don't plan it
Are you from South Texas?
'Missing link' explains how viruses trigger immunity
I'm not all that familiar with GitHub.

What's ultimately important for trust is that the maintainers (or whomever you are to trust) sign commits. They may choose to pass this responsibility down the line a bit (e.g. how Linus has his "lieutenants"), but if some random contributor does or does not sign a commit, do we care? Are they in the maintainers' web of trust? What benefit does verifying their identity actually have with respect for the project?

So in that case, a maintainer may decide to just review the patches and sign the merge commit.

That contributor may want to _assert_ their identity---e.g. have their signed commit committed to the repository to show that they actually did that work---but that's a different issue.
Nice links, I would have never thought of it that way. I've also noticed a certain way of speaking that seems really popular in the "video essay" crowd. For example if you search for 5-15 min videos analyzing a movie, they almost all speak exactly the same way.
Comments moved to https://news.ycombinator.com/item?id=15226076.
But this brings us back to the same old discussion of whether or not you really own what you've bought.

This is an interesting question that has new meaning in the era of always-connected devices. Decades ago printer companies sold the same printer for business and consumers but the consumer version would have wait cycles programmed in to give it a slower print speed. I remember a Sony DVD player having extra features in the high end model but it turns out if you took the high end remote and used it with the entry model those same features worked.

Aside from voiding your warranty, there didn't seem to be any consequences for hacking devices you bought but now the manufacturer can undo your hacks in the next update, which is scary.
Taking place at the new Steve Jobs Theatre

http://mashable.com/2017/08/31/apple-park-steve-jobs-theater...
white collar but still on hourly, unfortunately.
Base64 isn't URL safe; the equal signs need to be escaped.
Transaction rate is all down to speculation.

Payment systems already work fine with minimal cost. Store of value: yes you cannot overissue but the speculation tide could go out removing the store of value. Gold was/is volatile.
The map really brings into light Japan's lack of presence in the tech world.. They barely register on the map.

I'm surprised India has more presence than China considering how much the news talks about places like Shenzhen.
An address I used to live at was in an unincorporated area that the county had put basically zero effort into giving addresses.

The street had a sensible name that everyone who lived nearby called it. Let's suppose it's "Thataway Rd" (I am anonymizing all components of this address). But that name wasn't in the USPS database. They called it something like "CC04".

The house at the end of the road was number 50. The road was long and had an increasing number of houses built on it, which used all the numbers up to 48, and then the houses after that became 48B, 48C, 48D, ... 48Q, 48R, 48S... So if you made the address by following the house number with the street name, the address would have been 48R CC04. Which nobody would recognize as an address.

The post office suggested "CC04 Box 48R", which if you filled it into a Web form, would trigger special handling for PO boxes.

On top of that, Google had the ordering of the house numbers backwards, so Google Maps would send people to the wrong end of the long street.

Clearly nobody was happy with this, but I credit the emergency dispatchers with finally pushing through to give everybody a reasonable address based on what they already called the street. Through their effort I finally lived at 14 Thataway Rd instead of 48R CC04.
Yes, you could use it to jump air gaps. (In fact, that technology is already deployed in production in Chromecast pairing, when your phone is not on the same network as your Chromecast.)

But don't you need something on the other side to receive and decode the data being sent? What's the BadBIOS story for how the infection initially happened?

(Is the assertion that something along the lines of Intel ME is already listening for control instructions over ultrasound?)
From time to time, I see very out of shape people in the gym. The only thought in my mind when I see them is, "Good on you, goddammit." However, I don't say that aloud because I don't want to put them on the spot. If anyone says anything negative to you for working out, screw them. There are far more people who would rather have you work out and be healthy than not. Please rack your weights though! Haha
> Unfortunately, most of the language- and environment-specific package managers have pretty much ignored that issue. There's too often no way to verify that the code you just downloaded hasn't been tampered with.

This is something Windows seems to have got right, with Authenticode and Catalog signatures - it's easy to verify who signed a file, and if it's been tampered with.

What options are there for this on Linux? File integrity monitoring (Tripwire, Ionx Verisys, whatever) will tell you when files change, but that doesn't help to know if a file is in a 'trusted' state.
Perhaps you should think about why you can't work out in a non-private space? No one is judging you. No one cares. Each person in the gym only cares about his or her own workout.

If you absolutely can't do the gym, you can run. You can go to yoga (another place where absolutely no one is judging you or even looking at you except the teacher).
Also of interest is the "Harvard Dialect Survey" [1], which gives direct questions and highlights the regional variances. My favorite is "standing on line" vs "standing in line" -- I had never even heard the "on line" variant until I moved to NYC, where it is ubiquitous.

Apparently now there's the "THE CAMBRIDGE ONLINE SURVEY OF WORLD ENGLISHES" [2], apparently by the same individual, but I've only just started looking at it.

[1] http://dialect.redlog.net/maps.html

[2] http://www.tekstlab.uio.no/cambridge_survey/
That's exactly what I was trying to say -- thanks!

I still _want_ that kind of test coverage, esp when there's weird edge cases, but when looking for dead code, it's probably good to look at only the acceptance / integration tests (or whatever you want to call the tests that do the holistic "I click here and everything works" tests).
Slack now at $200MM ARR
They most likely have access on their own -- seems a bit suspicious why so many open AWS ops reqs require a security clearance.
I don't know what you mean by "encouraging". I am taking it as a given that users cannot be reliably prevented from clicking on links in emails. The security benefit of forcing the URL to be displayed before the click is extremely minimal.
Well, guess this doesn't work on Chrome.
I think it will get there eventually. Segwit adoption, lightning network support, successfully navigating the upcoming fork etc. will bring transaction fees and confirmation times down. Even if 1BTC hits $100K in a few years, the smallest fraction of a bitcoin is 0.00000001 (or $0.001).
If I ran an evil email monopoly, I would systematically drop all email from say _half_ of the email servers out there. This way, nobody would be able to make a case that we're abusing our monopoly position, but at the same time running an email server is hard and the internet is filled with wildly varying experience reports (which is the best FUD there is).

This way, fewer people start email servers and, therefore, fewer potential competitors grow up.

Obviously I have no way to tell whether Google really does this, but if they would, the result would look exactly like this HN thread.

I'm probably totally wrong here, but note that there is absolutely no incentive for the large email providers to try to fix this mess and make email the free distributed network it once was.
Surprised Content-MD5 or a similar spec isn't used by the browser to avoid a web where only Google's hosted solution allows for efficient JS file caching. If you know two files are most likely equal by filename and checksum, you should be able to just reload the cached version, if loading the cached file produces too many errors, try downloading the new one or something, instead of forcing everyone to host it all under the same corp (in this case Google). Oh well.
InterSystems IRIS Data Platform
Love the computer vision part working in real-time. I wonder if this works if I just set up a permanent camera with a chromebox pointing at a whiteboard. Then I can have an always-on remote whiteboard
Great idea. Your page has a really nice design, it's easy to tell what your product is and the value proposition.

Also I had a look through your blog, I saw that your marketing checklist included Product Hunt, Hacker News, and Reddit, do you have any plans after those?
Through personal study, I've come to the scientific conclusion that "generic American TV accent" means the person is from Iowa or Kansas more often than not.
This is the current streaming url:
https://p-events-delivery.akamaized.net/17oiubaewrvouhboiuba...

It works fine with mpv [1] and probably vlc.
If it breaks, you can check the payload of the `*/js_files/event/url.json` request and point your media player to that.

[1] https://mpv.io/
Well, looks like my browser just can not do HLS. If only they made JavaScript libraries to do that.
> "this in not Windows, it doesn't need constant reboots", totally missing the point that just using Linux doesn't make you a developer of reliable software.

Yes... but no software should require the Linux OS to reboot unless you're running custom or known buggy kernel modules, or you've triggered a spiral of death through swap usage. If your program is misbehaving, kill the program and restart it.

Restarting the OS daily is like noticing that your car uses a lot of gas, and deciding that every time you fill it up you'll get an oil change too. You might need to fill up a lot, but the oil change is overkill and not really affecting the situation in one way or another.
What's so controversial about this (other than perhaps the "if you beleve")? Seems like a pretty factual statement, the shift from coal to gas is currently the primary driver of CO2 emissions reduction. Particularly since he writes it as a response to a claim that Houston should blame its own industry for the hurricane.
Not mutually exclusive, though. The technology is neat, but there's little to justify $4000 a pop tech-wise. Plus, the vast majority of people putting money on it are not buying to fund development or for its future promise, but to sell someone else for a higher a price.

There's tech in bitcoin, which is neat and will lead to interesting things, and then there's speculation in bitcoin, which is just that and will lead nowhere.
The number of safeguards they have in place make that a moot point. If it's not discovered in testing, it's sandboxed. If it gets past the sandbox, they have a killswitch that's registered to the app's specific ID. There's very little damage that an app can do if it's gone through the App Store proper.
Fake YouTuber 'eats self'during apology video
My poorly made point was that I didn't have anything distinguishing me as being from the south growing up, but that I picked up an accent (at least to a Syracuse person's ears) while living in Atlanta. It surprised me given I'd only been there a couple years and that you don't hear southern accents very often in Atlanta in any case.
Isn't touching your contactless card (or NFC phone) kind of like scanning the QR code? It's certainly faster - 0.3 sec I would say for the read, 5 sec for the confirmation. What is the major difference in your view, from the usability point of view, since you didn't mentioned politics in your post, just convenience?
Standing desk
>I'm not particularly worried, Google and Facebook have two of the best security teams in the world and spend an amazing amount of money to protect customer data.

The fact that they have the best engineers and the best infrastructure, doesn't mean that they are able to find all vulnerabilities and fix them in time. The only way to do it, is to have a proof that system is secure which is beyond our reach today.
Does not work in IE, Firefox, or Chrome. Fuck you, too, Apple.
You are not misunderstanding, you are correct.
That's the beauty of such methods. Anytime an avenue for compromise seems "noisy", I'd be willing to bet someone smart organised and well funded has investigated using it for hi-value penetration.
when you sell those properties, you still have to pay all the taxes. Depreciating doesn't save you from having to pay tax, it just defers the tax liability to the future.
Make it generatem a simple bytecode format, that you can map into Assembler macros.

Choose a good Macro Assembler like NASM or YASM, and implement the bytecodes as macros.

It won't win any benchmark, but you will get native executables.

Or use Lisp macros to generate the code.

Here is a Scheme based tutorial.

http://icem-www.folkwang-hochschule.de/~finnendahl/cm_kurse/...
The Best Organization Tool for Busy Moms to Help You Thrive in Motherhood
Ask HN: API gateway
Hello HN,

I was considering putting my API behind a gateway to:

1) block malicious IPs, CORS headers, etc.

2) monitor the load from different users (a metric used to calculate their bill)

3) route requests from certain IPs to different application servers

I thought maybe I should use an API gateway instead of implementing those things on the application level because it would just add unnecessary bloat.

AWS[0], GCP[1], and Azure[2] all have API gateway offerings. I'm currently leaning towards using Kong[3] because it is open-source and wouldn't come with a vendor lock-in. I was wondering if anyone has experience with using any of those services or any other API gateways that would recommend?

0: https://aws.amazon.com/api-gateway/

1: https://cloud.google.com/endpoints/

2: https://azure.microsoft.com/en-us/services/api-management/

3: https://getkong.org

Thanks
I was born in southwest and moved to the east coast as a teen. I spent 30 years pronouncing pen as "pin". Even when my wife pointed it out to me, I literally couldn't hear the difference at first. She had to slowly sound it out for me. It was weird to discover I'd been pronouncing it differently from other people.
Indeed, Linux's monolithic kernel design will mean that such errors will be continuing popping up.
To be fair, it's very easy to forget that you have an accent.

I remember talking on a conference call many years ago with people from (I think) Intel and after I'd been speaking for a bit someone announced "Who is that on the call with the really thick Scottish accent - I can't understand a word he is saying".

My difficulties with Siri (and I tried really hard to get it to recognise 'Hey Siri' and only got slightly angry) leads me to suspect that my accent may still be there.
It works on Edge, on Windows 10.
https://news.ycombinator.com/item?id=15094804

the last time this was posted
This is clever:

> The scientists rejected the idea of introducing diacritical marks (glyphs added to a letter, or basic glyphs) as they suppose that because of rare use, the specific sounds of the Kazakh language can disappear.

I see nothing wrong in principle with diacritics (I use two languages that require them daily, in addition to English) but given the dire state of internationalization this makes it easier for foreign software to support Kazakh, and fits their entire language in the ASCII plane.
«Transaction rate is all down to speculation.»

Did you read what I wrote? "this indicator is not typically impacted by mere speculators: buying coins and leaving them on an exchange does not create a transaction"

«Payment systems already work fine»

It took me 7 days to move $300k from one bank account to another, because of closures on weekends & ACH limits. This is not "working well". With Bitcoin I can move $100k+ in ~10 minutes.

I have had many instances of credit card payments being declined while travelling internationally due to false positives from anti-fraud systems. This is not "working well".

In 2013 I couldn't even pay my rent using my bank's electronic payment system, even though my landlord and I had the same bank, because of arbitrary policy limit of $2k/mo for personal payments. This is not "working well".

I have had paypal steal ~2% through forex fees for a transfer to my family overseas. This is not "working well".

I have had fraudulent merchants stealing my CC info and created a bunch of hassle that took me time to sort out. This is not "working well".

And so on. Bitcoin may not be perfect, but it solves all these scenarios incredibly well.
sorry you have to click on an actual stock

https://finance.google.com/finance?q=NYSEARCA%3ASPY
He's not suggesting to ignore the risk; his claim (that I cannot really evalate) is that Houston's approach is not inferior to zoning.
Mutt + Lynx does it well, too
Are you sure that you don't have your SS or DL number somewhere on google or Facebook? You accountant might have sent you your tax return in pdf via email. You might have took a picture of a document where your SSN appears.
Slater didn't assert that.

"""
They were quite mischievous jumping all over my equipment, and it looked like they were already posing for the camera when one hit the button,” he told The Telegraph in 2011. “The sound got his attention and he kept pressing it. He must have taken hundreds of pictures by the time I got my camera back, but not very many were in focus. He obviously hadn’t worked that out yet."
"""

http://www.telegraph.co.uk/news/newstopics/howaboutthat/8615...

There is some doubt whether Slater actually used a remote trigger, but that wouldn't have been as good a story as the "monkey selfie", so the image may not have gone viral, though he'd have a better case to own the copyright.
Let's Learn Coding: Scopes and Loops (Medium Members Only)
My mistake, I haven't seen either show, I was just going by the Youtube comments... which I should have known wasn't a reliable source.
I regularly reverse engineer components of iOS and have done so since the first iPhone was released. Never seen anything like a "skeleton key" and there is certainly nothing like that in place now.

Starting at iOS 10, firmware components have not been encrypted (obfuscated), so you or anyone else can also reverse engineer it.
We are the country where money >> labor. Lets be real.
Hmm, vlc not working here. What server is the url.json file hosted on?
> Anything that can be reversed, I reverse roughly 50% of the time

For me, it's any arbitrary, binary, convention. Left and right. Clockwise and counterclockwise. \ and /. Whether time zone offsets are added or subtracted from the UTC time. Interestingly, < and > never gave me a problem, perhaps because I've internalized the alligator mnemonic you mentioned.
Edge or Safari
Have you considered Buddhism, the entire purpose of which is to learn to overcome suffering? Here's a summary: http://www.bcc.ca/buddhism/fournobletruthsandeightfoldpath.h...
I have no experience with amateur radio. How resilient is it against bad actors? If i'd about to drown i'd probably keep yelling for help, regardless of consequences (for others). How do you handle such cases without some authority like in centralized networks? Switch to a different frequency?
>Monero usage in actual cash transactions

Monero is even worse than Bitcoin when it comes to scaling issues. Quite a few projects are working on strong privacy/fungability coins without the scaling problems but it's hard. Zencash is the one I'm watching.
Introducing Atom-IDE
Not to discourage a response with a personal anecdote, but don't miss https://github.com/joedicastro/vps-comparison and its HN discussion https://news.ycombinator.com/item?id=14245538.
How comes Sixa is not listed? It is Ukrainian, S16
My cup runneth over.
Oh cool, thanks!
are you quoting from something?
"Do you say pop or soda?"

There is no option for "ginger".... not impressed ;-)
It's different in eastern VA (where I get most of my accent from), but I have heard them equate out in more rural GA.
Currently, the full url is https://p-events-delivery.akamaized.net/17oiubaewrvouhboiuba...

Just open devtools on https://www.apple.com/apple-events/september-2017/ and filter for `url.json`.
The leakage is exactly the same as you get on your desktop computer - a webpage can hide a password dialog as well which can trigger hidden autofill.

Of course exploiting this can be a bit hard:

- All current password managers will show UI before autofilling.

- The app can really grab a password just for itself because of how managers lookup the password.
> I don't have an accent

As I'm sure you are aware, of course you do. Everybody has an accent. To my European ears, all Americans most certainly have heavy ones.
I'm from the Piedmont too, Gaston County to be specific. I know what you mean. Most of the time you'd just ask if they wanted a drink, and by context they knew what you meant. I'd say "soft drink" only if I needed to narrow it down.

"Do you want something to drink?"

"Tea or a soft drink if you have it."
Models in Disguise: How Sift Science Ships Non-Disruptive Model Changes
I wonder, if a physical "chain reaction" attack described is possible.

Back in mid naughties, the "MMS of death" chain reaction attacks on Sony Ericsson phones were so intense, that they were taking down cell networks through which they propagated, thus fizzling.
I've also heard coke or irn bru being called "juice" :D
> remmitances, paying remote employees, collecting donations

Blockchain seems like overkill here. Hardest parts are converting cash into bits and back on both ends, transmitting bits from one account to another is easy with, say, a MySQL db

> store of value

volatility makes bitcoin an interesting speculative investment. But without any backing or federal insurance, seems like a poor store of value compared to a bank account (though many currencies no longer have backing...)

> b2b, peer to peer payments

Again, solutions to these (ie. Venmo, Square Cash, Facebook Cash for p2p) do not require blockchain. How does blockchain tech help in these use cases?
Some very famous. DHH in 2010:

"Facebook has been around for seven years. It has 500 million users. If you can’t figure out how to make money off half a billion people in seven years, I’m going to go out on a limb and say you’re unlikely to ever do."

https://signalvnoise.com/posts/2585-facebook-is-not-worth-33...