skysight-inc/HackerNews huggingface dataset:
So, kill off lan-level caching http proxy servers? (Or force a choice between trust the cache with everything; including email etc - or - no caching of signed software updates and common media resources?)

I'd be less unhappy about this if web browsers (and application updaters) understood x509 ca cert limits, so you could tell a device to trust the lan cache to impersonate Debian.org, windowsupdate.com and BBC.com - but not Gmail.com...
Have you tried user agent spoofing in Safari for "Chrome only" sites? I do that and more often than not, these sites are fully functional under Safari.
The apps do get permission to see all photos. How else would facebook or google photos automatically upload all your photos. Both apps have the option to do this. It requires no extra permissions on your photos and you don't have to select anything. It just requires giving permission once to "photos"
It makes more sense to have platforms such as Java and the JVM be open as opposed to proprietary.

J9 was largely used for IBM products which means it wasn't exposed to or tuned for workloads outside. Opening it up is a very good thing.

OMR is the foundation for J9, and it tackles the issues that come up again and again in dynamic runtimes:

1. Having a good threading, networking library, etc...

2. Having a battle tested industrial strength GC.

3. Having a JIT with easy to use optimizations out-of-the-box.

4. Having solid tooling for debugging and performance introspection.

Other runtimes such as Ruby, Python are at various stages of improving their GC or adding a JIT. The goal with OMR is to turn the battle tested components of J9 into pluggable components for these other runtimes. If tomorrow somebody wants to make a new Ruby or Python they shouldn't have to write their own GC or JIT, the same way nobody writes their own filesystem these days.

Oracle and IBM both see this and Truffle/Graal are different ways of attacking the same problem.
And how do you, ahead of time, select the upper tail.
There are edge cases with every browser, but the current situation with non-Chrome browsers is nothing compared to what it was like supporting IE6.
That never happens. There will always be people who want to be different from the herd. Any inefficiencies will take care of themselves.
JavaScript Weekend List #13
If they're relying on a DNS server for resolution, they might not get the behavior they expect on an RFC compliant system.

Any DNS query for a name ending with ".local." MUST be sent to the mDNS IPv4 link-local multicast address 224.0.0.251 (or its IPv6 equivalent FF02::FB).
I like it because of this: imagine you're having an intimate conversation with your best friend. In the room silently sit representatives from Google, Facebook, and your government. Before you speak, you (sub)consciously transform your thoughts and phrasing taking into account both the theory of mind of your friend, and those other organizations. This necessarily has low-level overhead, and results in a less-intimate conversation.

Privacy means you only have to care about communicating with the person with whom you're communicating. Organations with incomprehensible motives are cut out of the loop. You can be yourself, not a self-censoring corporate-approved robot.
The lymph is then moved along the lymphatic vessel network by either intrinsic contractions of the lymphatic passages or by extrinsic compression of the lymphatic vessels via external tissue forces (e.g., the contractions of skeletal muscles)

https://en.m.wikipedia.org/wiki/Lymphatic_system

It is surprisingly hard to find a figure for the amount of increase or a study. I say that because I know I have seen this info before and without digging for it. I have no idea why I recall it as easy to find in the past when it seems so hard to find now. But I did find this study:

Exercise increased the clearance rate three- to sixfold

http://onlinelibrary.wiley.com/doi/10.1111/j.1469-7793.1997....

Potentially also of interest:

http://www.bbc.com/news/health-26530269

http://gizmodo.com/why-standing-in-one-place-makes-your-legs...

It is trivially easy to search for "exercise moves lymph" and get a bunch of stuff, but probably not the kind of stuff people on HN want to see.
It was the second channel on a multiplex owned by a church, normally it's showing educational programs for kids.
To wit: GOMAD + barbells got me from 205 lbs to 305 lbs body weight.
I just want to know that can i get unlimited free space to upload heavy files to the online serve? and how much it will cost me to do? www.getintoapc.com
Looks like this came from https://www.python.org/dev/peps/pep-0448/

Seems similar to the spread operator in JavaScript: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
Modern ARM Cortex M0 MCUs are cheaper than AVRs, use less power, and have much better peripherals. The only reason to use an AVR MCU these days is if you (i) need to run it off a 5V rail or (ii) you prototyped your product with an Arduino.
Education offers tools to help manage complexity -- abstract mathematics and lab sciences help us understand the complex world around us.

But that has mostly been used to manage complexity that already existed (e.g. physics, biology), or that is somehow inherent to our world (e.g. complexity resulting from social interactions among humans).

Now, we are creating our own, new kinds of complexity that didn't exist before. Software isn't there to help us manage complexity, it is adding to the complexity of our world, and dramatically so. That moves education backwards.
I agree that the ESP32 would be a really cool way to get some practical experience with Rust.

If you want to get started more easily take a look at Neil Kolban's book on the ESP32.[1] Other environments besides C include C simplified with the Arduino IDE, Python, Lua, and JavaScript.

[1] https://leanpub.com/kolban-ESP32
Can you give a few examples?
I didn't know LLVM had MSP430 and AVR backends. Neat!
The house analogy doesn't really work as you could always install a stove. A better example would be "Why would you buy a plot of land that is zoned residential if you can't build an office building on it?" The answer is that you know what you're getting into before you buy it, and so you'd only buy it if you were building a house. If the restrictions are known up front then it's all good. I'd also like to point out that HSTS has very real security benefits, and if the entire TLD is already on the list then you don't have to go through the hassle of adding all your domains individually and waiting months for those updates to roll out widely. The expectation is that the pros vastly outweigh the cons.
Note the word "historically" in my original post.

I don't know why you keep going on about ideologies. I haven't expressed any particular ideology in any of my posts.
Electron Apps I've used so far (Spotify, Slack) have had minimal theming support. Winamp had some crazy themes, especially the 3.x and 5.x series. Accessible no, little from that era was, but freeform window madness? Quite doable.
This has been answered a thousand times. Everyone will never invest in index funds. What will happen is more and more people will invest in index funds until there are so little people actively investing in the stock market that the ones that do are able to beat it. However, them beating it will only net (after their fees) the same returns as index funds thus striking a balance where index funds match the performance of active investors.

If either index funds or active investors (after fees) make more money, capital will move to the one that pays more until they balance again. We have had way too many active investors for a long time which is why index funds have constantly outperformed active investors but eventually they will balance as more and more people move their money to index funds.
Not strictly true. I regularly test push notifications on sideloaded builds at client sites. Getting provisioning profiles and certificates setup correctly (especially on all extensions) is a bit cumbersome. To get those certificates may require an Apple enterprise developer account. And the builds signed this way are not debuggable.
Looks like Wikipedia's V8 page needs an update.

https://en.m.wikipedia.org/wiki/Chrome_V8

"V8 compiles JavaScript directly to native machine code before executing it, instead of more traditional techniques such as interpreting bytecode"
That typically means the right lane is turning into an exit lane.
There was a post a few days ago about a systemd resolv feature that resulted in (almost) permanently switching to the secondary DNS when the primary failed. The primary is an internal DNS resolving private domains. The secondary could be 8.8.8.8. It's easy to see what can go wrong if the private domain is somebody's else domain on the public internet. A kind of honeypot for any kind of web request.
Do you have virtual carriers (MVNs)?
https://en.wikipedia.org/wiki/Estonian_ID_card - everyone get's their own cryptographic certificate. I don't know why banks aren't pushing for a legit national ID, if anything it would make it easier to lend and eliminate a lot of expensive fraud.
Have one of those. They don't work.
If you have a few dozen people who want to pay you what, a total of $2,000 a month, you are already better than 99% of businesses.

Paul Graham had 50 customers for Viaweb like this, and eventually scaled it to 200 before being acquired.

If you only have 3 people who are interested and they only want to pay maybe $10 a month, then you need to scale up your outreach and get in front of more potential users
Right but the label is the equivalent the publisher in this case aka the institution that adds no value.
> 2. What's the most common phone among security researchers?

Not sure about which phone Schneier uses, but he argues that having a smartphone is a logical choice in today's society. However he also brings a nuance to that: that we have the pragmatic choice of leaving our smartphone at home instead of taking it with us, and that we should consider that.

Keep in mind a dumbphone also has big brother capabilities. Just likely less precise/severe (assuming no remote holes).
When you're making a new movie, the production of the master copy can cost millions of dollars. Same thing with software products, songs, and digital photos. However, making a digital copy after that is very cheap.

Therefore, it's better to say that the marginal production cost moves towards zero instead of the total production cost, which would include the master copy cost.
There was a Master Pancake Screening of Xanadu in Austin last week. Could be related, could be Baader-Meinhof.

https://www.eventbrite.com/e/master-pancake-theater-communit... - click details if the info panel isn't open.
(Alternately, I read something once about our perception of audio being delayed by ~100ms so that it synchs up with our perception of vision

If such a delay does occur it is considerably less than 100ml as that kind of latency would be very noticeable playing a musical instrument.
>Any inefficiencies will take care of themselves.

Thats a ridiculous thing to say when the inefficiency here would represent your investments getting wiped out
Hey man, don't act so condescending. I was professionally writing games in 2003 for mobile devices (started with PocketPC), and we had the nr 1 best selling game on that platform, so I know my stuff.

And if you really want to know, read this article from Wired on the topic: https://www.wired.com/2008/11/adobe-flash-on/

Sad that I get downvoted for this, but I already accepted that on hacker news, don't go against all the Apple and Google fanboys.
That's LOL- fare. Colossal pile of donkey $#ite! Hahaha
Use service.internal.company.com instead and you'll be safe because all requests will go to your servers.
From what I gather, it's not the same case here.

Safari is now unsupported because Spotify deprecated their Flash website in favour of HTML5 + Widevine.
Safari doesn't support Widevine, so can't use the new player.
However, Safari on iOS never supported Flash so the old version of the Spotify player wouldn't have worked either.
As it happens when one doesn't acknowledge Survivorship Bias.
AP Computer Science a Exam Growth Fell as Easier AP CSP Course Launched
Security's complicated, is the real answer :/

But you can't exactly just skip it (witness Equifax).
Yes, sorry, edited.
Someone matched 37 tiles (with a board of only 30 total tiles). How?
This is such a problem in Utah that last time I was there, the traffic status billboards over the freeways just said, "Camp in the mountains, not the left lane"... and the left two lanes were full with the right lanes empty. If I hadn't been driving I would have taken a picture to savor the irony.
Well, sort of. It depends on your BOM cost targets. I remember seeing (a few years ago now) an AVR in a tiny 6 pin surface mount package about 0805-ish size. 8 bit micros are the new 555.

I have a friend that does a lot of consumer electronics development on contract. One of his favorite parts is an 8 bit micro that cost 6 cents in bare die, and that was a few years ago. The part is probably 4 cents now. A 4 dollar ARM looks rediculous next to a 4 cent part in certain application spaces.

But in my world - low volume mechatronics - the ARM with 1mb flash is the no-brainer choice.
The title of the piece is a bit click-baity, as the court opinion specifically states, as the article notes in its last paragraph, that “because [Gray] was not a minor sending sexually explicit images to another consenting minor, we decline to analyze such a situation.” The title is stated as a fact, wherein it is really the columnist's opinion: "I think that — given the logic of the majority opinion — the analysis would have to ... "
> Writing a memory allocator without obvious (and not so obvious) bugs is really hard.

Actually, I disagree. Putting aside the implication you had that writing bugless software is possible, I think that memory allocation is straightforward. The interface is simple and the gotchas haven't changed since memory protection standardized. Writing a correct allocator amounts to a checklist of allocation and free behavior, plus some extra stuff like "how hard/probable is it to detect use after free" &c. Correctness, property calculation itself, and proving (theoretical) performance of your algorithm is not so hard.

Now writing a general purpose one that doesn't trigger catastrophic performance against one app of many is really hard.
Cool! I've been wanting something like this for a long time for IDE-suggested type annotations. "From test execution it looks like parameters x and y are always numbers. Add type annotations automatically?"

Or a linter could give optimization recommendations: "Warning: Function deoptimized at runtime because in 2% of calls to this function parameter x is an object."
Cortex M has higher I/O latency.
First Iteration of Ethereum Metropolis Hard Fork to Appear Monday
What is increasing S&P value other than the crowd willing to walk a little further out on the gangplank?

I'd say it's a little too early to call that bet.

(people can vote this one down as much as they want. The reality is that is the only thing making the value go up now.. just more people crowding into the same trade. Watch out when the crowd changes its mind)
And probably could work with hackintosh:

https://www.reddit.com/r/thinkpad/wiki/os/hackintosh
Last pair wins, same as setting an existing key or doing an update() with an existing key.
Why does it need to be continuous?
You've been able to do that for a while.

edit: I take that back. Apparently thebunicode allowed in identifers is not unrestricted..... in my defense I don't use unicode identifiers as a rule....
Interesting, but with an unfortunate command line name collision. "gcal"[1] is an established and rather useful elaboration on "cal" by Giuseppe Scrivano and Thomas Esken.

[1] https://www.gnu.org/software/gcal/
Makes sense that Taobao would be a great option in Shanghai :)

I wonder how easy it is to receive Taobao merchandise in Europe. It appears you have to go through an agent.
Get checked for a cartilage tear. You may need a contrast MRI, and you may need statical repair.
I don't think you should charge authors, because academics should be encouraged to publish without having to worry about the cost. That's why society funds them with grants from taxpayer money, because we want to see the results of this research we have purchased. And now we can, with SciHub, and everyone is basically content with this situation except the lobbyists for your industry.

Besides, the authors are your golden geese. How much of the work of producing a journal article is performed by the authors and other unpaid academic volunteers (who are authors elsewhere), compared to the publishers? Is it 90%, or maybe even higher? Your journals would not exist in any form without the authors, so it behooves you not to piss them off. Currently, the most famous journals enjoy a prestige-driven advantage: everyone wants to publish there, because doing so (sadly) advances their careers more than publishing elsewhere. But this is all just an agreement among academics, and they could turn on you at any moment.

So I think you should stick with the subscription model. Authors shouldn't have to pay, and readers currently don't "have to" pay, regardless of whether you think they should. The only people who are really interested in paying you right now are the university libraries, because what sort of prestigious institution doesn't carry all the famous journals?
A neural network learns to create better D&D spells
Sorry, to be clear, the ITC is now considering a case which would bring a minimum import price to solar cells. Meaning this would be applied to ALL imports from ALL countries.
I don't think this is necessarily the case. I think if you're warren buffet, you should invest in index funds. If you're not warren buffet, this strategy runs the risk of being horrifyingly bad. For many people their job prospects may be procyclical - it's easier to get a job when the overall market is high and it's easier to get laid off when the overall market is in the pits. For these people, investing in index funds could lose money.
>>In order to purchase an altcoin such as BAT (the token behind the brave browser the article refers to), you have to first purchase Bitcoin. If you want to sell your BAT tokens, you will receive Bitcoin.

BAT is an ERC20 token on Ethereum. In order to purchase it you buy Ether, and then go to a decentralized Ethereum exchange like 0x and purchase it. When you sell BAT, you receive Ether.
I think you mean about 30 floppies, at 360kb each, right?
>"But what's this ttyUSB0 thing? It's a file of course! Everything is a file in *nix."

Isn't this not really true? I remember it was a long point of discussion in an embedded class I took years ago but can't remember exactly what was said.
Great points about the searchability and content. And they have a ton of content, mostly in the form of terrible movies. Instantwatcher lists, for Prime, 5,438 matches for TV shows and 33,655 movies. Why do I use Instantwatcher to find content? Because, as you state, the searchability and signal-to-noise ratio on the site is crap. The layout and interface are crap.

Amazon isn't the only culprit, both Netflix and Hulu do the annoying box with image scrolly interface (I assume for TV users). If you're on a computer, it's pretty intolerable.
464 for Safari Tech Preview R39.

That said this is the weakest score of the top 4 browsers:

519	Chrome 57

518	Opera 45

474	Firefox 53

473	Edge 15

https://html5test.com/results/desktop.html
While the value of the average token may decline as a result of investors sobering up, I suspect the number of token sales will increase exponentially, at a rate that exceeds the per token decline in value, resulting in a net increase in the aggregate value of the token market, and with it, Ethereum.
Detailed (albeit 2009) review of Ted Nelson's influence: https://nccur.lib.nccu.edu.tw/bitstream/140.119/57633/1
Dream Act Inexplicably Excludes Legal Immigrant Dreamers, Requires Law Violation
Indeed. I wrote a Frequently Given Answer about it in 2003, years before systemd and years before the 2008 events mentioned elsewhere in this discussion. Because people were seeing exactly that.

* http://jdebp.eu./FGA/dns-client-all-proxies-must-provide-sam...

I also wrote a Frequently Given Answer describing some more of the mistakes that people have made over and over in this, that one should learn from and not repeat.

* http://jdebp.eu./FGA/dns-use-domain-names-that-you-own.html
Not doing so is way worse though. You could be leaking all sorts of internal requests to a malicious attacker who does register that domain name.
There seem to be some misgivings in the headline. Newton predicted the world will certainly not end before 2060. So the headline should be, "In 1704, Isaac Newton predicts the world will not end before 2060"
Did you book a hotel/airbnb/flight and received a confirmation mail in your Google email account?
Well Python 3 broadly follows UAX 31 "UNICODE IDENTIFIER AND PATTERN SYNTAX", and emoji don't have the xid_start or xid_continue properties, so… never unless you decide to be the change to believe in and get the Unicode consortium to change its ways?
Honestly, I'd only go to the effort of mimicking Letsencrypt internally if you are already using their service for prod and wanted to keep your dev environment very close to this.

Here's a gist you can follow if you'd like to do things the old fashioned way (i.e. create your own Root Certificate Authority, create a Sub-Root Authority and use that to sign internal certificates): https://gist.github.com/corford/9a206664bb8278c8243821d23666...

It's 99% copy & pasteable (doesn't assume any existing openssl.conf) and should give you decent compatibility and future proofed security. Just remember to keep the root CA safe and only use the sub-ca for signing certs.
STEPS Toward the Reinvention of Programming (Final Report, 2012) [pdf]
Every NES game could use motion controls if you plugged in a PowerGlove :P
Microchip's bread and butter is still cheap 8-bit controllers like the PIC10/12/14/16/18 families. Many devices don't need a 32-bit core, so wasting a few cents on each unit by specifying one drives up cost at high volume.

While the core of a 32-bit controller doesn't take up much die area at smaller process nodes, core size has never really been the limiting factor with MCUs. Look at any MCU die - the flash and RAM both dominate in size over the logic. Going to a 32 bit controller generally means that your instructions are going to be wider, so your program space is going to take up more flash. You will also tend to use more RAM unless you are judicious about word size, and a context switch on an RTOS will cost more memory since the context contains much wider registers.

Another pain point with the 32-bit MCUs is that ARM currently dominates the market, and their licensing fees add a few cents to the cost of each part - which can be a killer at volume. There have been attempts to break ARM's monopoly (most notably Microchip's MIPS-based PIC32 series) but it seems like ARM will continue to dominate this space in the years to come.

As a final note, SiLabs recently introduced an ultra-low power microcontroller line based on the venerable 8-bit 8051 core, so clearly they think that 8-bit MCUs have a role to play in the years to come.
I also just switched from a MBP to a Thinkpad with Arch this year. After some minor hesitation I pulled the trigger and am still very happy with the decision. I got nearly twice the specs of a MBP for a significantly smaller price.

Initially I loaded Cinnamon (I think?) but replaced it with Gnome after some unresolved -to me- issue with my volume buttons. Everything works wonderfully now. And I'm having zero issue with any developmental experimentation (Android, web, traffic analysis, etc.)

Highly recommend the switch.
This study gives credence to the GTD's book claim that putting all of your tasks in an "inbox" reduces stress, which was the only worthwhile insight I got from it.
Show HN: No Coin – A browser extension to block coin miners