skysight-inc/HackerNews huggingface dataset:
I would love switching but the only thing preventing me is the lack of profiles like Chrome has. Containers is not the same as you can't have different extensions for each container like chrome has for each profile.

For example, I have 2 LP accounts one for home and one for work and there's no way to use both of then at the same time in FF
its the same approach the free market has to elder care. they are for profit cash machines with a thin veneer of care. they are run on a shoe string, hiring barely qualified technicians working 12 hr shifts. what could go wrong?
DoorDash (YC S13) is hiring a security engineer
I published the evaluation results in the whitepaper. I am doing my training/evaluation with a data split of 70/30. Doesn't that qualify as a proper backtest?
This does not meet the bar for substantiveness on a controversial topic on Hacker News.

https://news.ycombinator.com/newsguidelines.html
We're actually doing this right now with tylio.com. We get pretty high scores (95+) on the various test tools (Pagespeed, Lighthouse, etc.) using React 15. Our biggest remaining issues right now are First Meaningful Paint and Time to Interactive, and I expect React 16 to help a lot in that aspect (streaming render + simplified rehydrate), can't wait to test it!
Optional features contribute to a tool's complexity, especially when every single example assumes you are using said optional feature.
> They assume that no side channel attacks will be mounted to determine the processes that occur in side the chip.

They do? 2/3rds of this blog post are about side channel attacks. The majority of the technical aspects of the article are about memory side channels in SGX and how they overcome those challenges. I haven't looked at the code yet, but it sounds as if they wrote it to be branchless so that attackers can't monitor control flow and so that memory access patterns don't leak anything.
There are a lot of "good" OSS licenses that have a similar terms - I've noted this elsewhere (re: the CDDL) and haven't gotten an answer.

+1 to someone who knows the legal side and can differentiate for laypersons, since the text looks awfully similar between many of these.
Multithreaded Rendering on Android with Litho and Infer
If you want something more DIY for H.265 (HEVC) support, the "Intel Compute Sticks" also all support HEVC decoding in hardware

I'm using the lowest end model (2GB memory, 32GB disk) and it absolutely flies with Kodi. Attach a gigabit USB 3.0 NIC and it loads files almost instantly over a Samba share
Fourth Industrial Revolution and Challenges for Governments (I)
'From heroes to villains': tech industry faces bipartisan backlash in Washington
Do FB/GOOG distribute facts? They have some pretty good returns.
> React is a library written for a language that is not JavaScript (the first prototype was written in OCaml)

This is incorrect. React was written first in JavaScript in the Facebook Ads org, to be used in the Ads Create Flow application. Jordan's dive into OCaml came later, which is why we now have Reason many years later.
I don't think it's so terrible, most computing devices kids will have interacted with had no way to look under the hood, they are glued-shut tablets, phones, and laptops and the like. Even just looking at the greenboard and seeing where things are plugged in has some educational value. That said, I don't see how this is different from the Pi-Top[1] which has been around for a while (they also make the CEED, which is a cheaper all-in-one based on the RPi).

1: https://pi-top.com/products/pi-top
This is much better than the current state but there's still the issue of Intel's Management Engine (ME) that clings on those chips and that has access to pretty much everything...
Yes! I updated at work and it didn't, but by the time I came home they'd released an update and it works here :).

The top bar doesn't auto-hide yet, the API for that will be in a future release apparently.
There are various things I do which I consider to be forms of meditation:

-sitting down in a shower with the lights off

-going for a walk in the forest with no cell phone

-laying in a hammock by a river

-long distance running while focusing on my breathing and form

-rock climbing

Basically anything that enables me to cease compulsive thinking/worrying patterns and focus on the here and now
What misinformation on Twitter and radar have in common
This patent grant seems at first glance to be much less aggressive than BSD+patents. It seems to only work if the patent claim being filed is related to GraphQL.
You are right, I initially misread your comment, I thought it said that Keychain only checks the app name.

The security framework uses some kind of digest / signature to verify that the app hasn't changed if the binary is not code signed. Apple's docs are scarce on details, see eg [1] which just says that the security framework makes sure the app wasn't altered.

But I am pretty sure the app name is ignored. Most macOS services use the bundle identifier.

However, if the app is code signed, the security framework automatically grants newer versions of the app permission if they have been signed with the same certificate.

[1]: https://developer.apple.com/documentation/security/1400622-s...
Came here to say the same thing. It would also be nice to see stats when you click on an image. (# of upvotes and # of comments, etc.)
That creates a different problem, which is also dangerous.

In a large company, you want physical security to know when there's an emergency. They can usually get to the scene much, much quicker, and will need to let emergency services into the building anyway.

With landline corporate phones, they can be configured so that if the user direct dials 911, they can flag the extension and flash an alarm in the security office. Hotels often have a similar setup. (Avaya calls it "On-Site Notification", Cisco calls it "Cisco Emergency Responder".)

If employees/guests are direct dialing 911 from a cell phone, building security has no idea what's going on.
Maybe it's because most websites today optimize for Chrome / use Chrome in development? That might change in the future
Great, thanks!

UPDATE: Just updated my beta, and tabs UI looks rather ugly IMHO. Bigger elements than older design, more bulky. Sharp rectangular shapes of each tab UI element are also very standing out. It looks like a touchscreen UI to me.

It also completely disabled all common add-ons like Adblock Plus and Stylish. That's a BIG problem. Looks like Adblock Plus has a compatible beta version at least.

It does feel much snapper though.
It might work in NY, worked well for me in central London, but I'd like to see how the people will prefer that in cities that are built on the hills, like San Francisco or Seattle.
The perf improvements of Quantum have nothing to do with extensions, actually.

Firefox removed the old extensions model because it was literally just "here's our code, hook into it however you want", where everything was a public API. This means addons broke all the time and it was effort to keep things semi-stable.

With the multiprocess stuff most addons had broken anyway, except Firefox took a model where multiprocess would only turn on if you had compatible addons. But it was going to move off it; which it did in a previous release, disabling non-multiprocess compatible addons (I think).

So the addons stuff is at best related to Firefox becoming faster because of multiprocess, which happened a couple releases ago. So the decision to kill the old extension API was related to the timing of the multiprocess stuff and also just because it was a long time coming and let Firefox move to a cleaner architecture.

The new API is growing, though. Firefox can already support many kinds of addons that Chrome doesn't, including stuff like Tree Style Tabs or Tab Center.
The "...Granted Claims you would have had the right to enforce..." seems to limit the claim to stuff related to GraphQL.
The Coming Software Apocalypse
I experimented with the features until I got good results in my evaluations. If I am getting favorable guesses, how does that point to bad features. Favorable guesses is what I was going for in order to assist in trading decisions.

I use a 70/30 split of training/eval
No hard date we can publicly commit to, yet. Would be happy to chat about your timeline and requirements and get a recommendation from the team. Let me know if interested.
Try i.reddit.com
Considering that Signal is advertised (with Snowden as face) for people who need privacy from governments (including the US government), I am doubtful if this is useful for the advertised purpose. (For normal users this is already overkill, of course).

Even if we assume the NSA has no backdoors in the secure enclave, there have been countless demonstrations against secure enclaves in today’s real-world processors on conferences.

Additionally, the same problem applies here that has been used before to break Google’s SafetyNet solution (which does the same, but the opposite way around, to ensure the client is running, and can’t prevent tracking): You can simply have two systems, and for attestation you question the true device, but for actual code execution you run it on an emulated one, where you can extract all data. Alternatively, you can still emulate this system completely and circumvent it via that path, too.

The only way to truly verify SGX is by having a signature of the processor manufacturer – but in that case, you still don’t get protection from the NSA, or the processor manufacturer.
Check your addons. They can really slow things down.
It's been about a decade since I worked with machine learning, and even then I hardly scratched the surface. (I mostly wrote the data access and glue code for someone else's machine learning system.)

Given what I see, it's really hard (for me) to understand what's going on and what's novel. I'm not very active in the financial or machine learning area. All I can understand is that someone wrote an investment program that makes money.

Even with my limited knowledge of machine learning, I know that it's very easy to confuse luck and success. How do you know that you're not just lucky? How do you know that your computer program is really investing, and not just "good timing"?
You have no data to back the claim that ‘hired-hand’ CEOs are the ‘real problem’. This is just your personal bias speaking. I wouldn’t say that the situation is the polar opposite of what you’re suggesting, however I’m pretty sure management performance cannot be evaluated in a binary fashion.
Indeed, Matt is great. He's one of our most appreciated mentor ;)

Everyone has their own incentives. Even though it can be linked to Koan, I guess that it's alwasy a combination of many factors. His words :"i've been lucky enough to have an exec coach for the past couple years and he's great. I aspire to be better at it over time"
Good sauce. FOIA has been somewhat of an obsession of mine for a few years now and I can't recommend its use enough. It's difficult, full of legal and non-legal gotchas from front to back in every state I've sent requests to, but damn is it worth it in the end. In particular, the direct visibility into how our government works and how it communicates with requesters is extremely eye opening. It's very, very non-reciprocal.

Fun and ongoing story.. Recently I did a request for the metadata of all emails sent and received by a seattle.gov email address. They first gave me an estimate of 32 million dollars, 320 years for redaction and 25k/yr for storing a few tb. A few months later (and ~$35.00 later) , they ended up sending me millions of emails on accident, thinking they only sent metadata. After reporting it to their CPO and CTO, they decided to escalate the problem by offering me legal indemnification for deleting the files and having a 3rd party company scan my drives for those emails. It was never directly stated, but it sounded like they had full intent of creating warrants for my disks, virtual or otherwise, we're going to be made. Thankfully, they're leaning on an accepting a signed affidavit that states I deleted the emails. All because they sent me the wrong info. It feels very much like a combination of gaslighting and extortion.

FOIA is a strange, strange thing..
Then you’ve never seen tricky/advanced Haskell code that takes hours to grasp.

It’s not a language issue. In most sane languages you can write readable code. And most languages also give you enough freedom to write unreadable code.

Here are some reasons why advanced Haskell code might not be readable if you aren’t already experienced with this style of coding:

- uses the C preprocessor extensively (usually to workaround API changes in upstream libraries, but sometimes used for actual code generation, like in a particular streaming library)

- uses long TH declarations that give no insight into what they do (you only know they have to return a `Q [Dec]` but it’s not obvious what, and dumping splices only goes so far; it can even download things from the Internet to generate code!)

- uses advanced concepts like Church/Scott encodings of data types (though with some comments this really shouldn’t be hard)

- excessive type level meta programming

- uses concepts like Bazaar, Bizarre, Conjoined, Strong, Yoneda, etc

By the way for some laughs you can read about how to write to write a factorial program in Haskell from simple straightforward styles to convoluted ones that use many advanced techniques: https://www.cs.utexas.edu/~cannata/cs345/Class%20Notes/10%20... I hope no one actually writes production code like this but it does show you how much of a steep learning curve could be needed before you understand certain kinds of Haskell code.
I don't know about HN, but, I moved to NYC after college because I'm a jazz musician, and NYC is that jazz capital of the world. I've also always worked a day job as a software engineer.

moved to SF last year for work.

Both NYC and SF have a relatively high concentration of tech folks, which is probably a lot of the HN readership.
No to “No Hacking” Clauses
Wondering if/how you plan on monetizing this?
I think they just don't try to keep the bots off...
Florida’s Orange Industry, Symbol of a State, Is Dying
11 days is a very short time. Assume that you're lucky.
Activehours raises $39M for its new take on cash advances
Workflowy is the only list maker that I've ever stuck with. Most of them are so over-designed. I don't need videos and voice reminders and all kinds of nonsense; just compact, structurable lists.
That’s a different thing than I’m describing. Try out the new ContainerTabs ;)
Fixed now! Thanks for the bug report!
Deputy Finance Minister of Russia Compared Bitcoin and “Monopoly” Game
I only learned last week that there is also Innovis. I'd bet there are smaller firms doing the same thing, as well.
Choose a License Matrix
Ask HN: ReactJS or Native for chat app MVP? Beginner programmer
I would like to learn programming through building a side project. It's a location based chat app that requires profile creation, google maps, and posting threads. I was hoping you could help answer a few questions:

1. For a beginner who only knows HTML/CSS, will React be too much to handle?

2. Should I go ReactJS > build web page MVP > convert to an app later, or start straight with React Native?

3. What resources you would recommend for learning either?

Thanks!
>Do you honestly believe nobody used the term 'start-up' before Steve Blank or Paul Graham used it?

Did I say that somewhere or are you just straw manning me?

My post and paulsutter's are clearly referring to the Silicon Valley idea of a startup, not the general idea. The difference is one of intent, so it is useful to distinguish between the two.

Someone who opens a diner or a watch repair shop or a Kinko's franchise with the intent of servicing their locale is certainly doing "a fledgling business enterprise" and thus may technically be doing a startup. But SV is specifically interested in greenfield endeavors that can leverage the web or other new tech to find a large customer base and rapidly scale to billion dollar+ valuations.

Given your long history on HN I know you know this so why are we bickering over semantics?
On what grounds could they get a warrant? They made the mistake, not you.
Agreed!
We have a bunch of CTOs/cofounders and small startups, but we have also Lyft, TuneIn, Betterment, Scality, Telmate as customers.

Some individual paying from their own pocket to invest in their career, but it's more rare ;)
When did tracking users become equivalent to copying Google search results?
Yup. By using only OpenGLES 3.0 and equivalent OpenGL, they achieve maximum compatibility while having nice enough visuals as well as good enough performance. Pragmatic decision, no point trying to compete with Unreal Engine in the visual department.

That being said, people are achieving some really nice visuals in Godot 3.0 using the PBR shader and new renderer...
Not sure why you are being downvoted.
Dyson, Famed for Vacuum Cleaners, Aims to Build Electric Car
There are approximately 3x10^28 molecules of water per cubic meter (assuming pure water, which is obviously not the case).

A third of the way to the moon, there are approximately 7x10^6 molecules of hydrogen per cubic meter[0].

From high earth orbit (assume 60k km), it's about 300k km to the moon.

The average depth of the ocean is about 3.5km.

For simplification, let's assume that a molecule of water and a molecule of hydrogen have the same density (which they don't)

From high earth orbit, in a straight line to the moon, there would be about 2x10^12 hydrogen molecules in the way.

From the ocean surface to the average depth, there would be about 1x10^32 water molecules in the way.

Not getting into the optical properties of water vs hydrogen, or the fact that the math is much different for a probe orbiting the moon, there's just more "stuff" between the ocean surface and the ocean floor, and a satellite and the moon.

[0] - http://www.physicsoftheuniverse.com/facts.html
> What am I missing?

That there is a patent actually associated with GraphQL, I believe.
I disagree, the onus falls on the state to actually make the licensing process strict.

How can Google be expected to do this at scale? To act as an extra layer of regulation that even local government cannot or will not provide?
I would add some sort of nsfw filter. I click on SFW and Album Art (/r/AlbumArtPorn) and the top post right now has the NSFW tag. Grid showed that nice and big right at the top. Would be better to default to blurring/hiding NSFW tagged posts.
Thank you kindly.
The point of SGX is that the enclave is cryptographically verifiable. You can't simply emulate the enclave's software and interface; you also have to have the corresponding private key.
I'm sorry but that's kind of ridiculous. You're saying that society should not decide that any human behavior is wrong, it should just figure out how to accommodate everything.
Facebook should be in (global, cooperative) public ownership
I don't know why the API terms of service were even brought up: this is obviously trademark violation. Those API terms of service are just there to give them some more immediate consequences without having to serve ISPs with legal notices and potentially go to court, as well as to leave more of a paper trail to show that the existence of their API is not them condoning people violating their trademarks.

It just really isn't that difficult for people to respect trademarks: we should not have sympathy for violations that are this blatant. HN should really not even be leaving it up, and they could themselves be served with notice (and yes: I realize that YCombinator invested in reddit; the result would just be some request in the backend); their strong and intrusive content moderation policy means they don't have any argument that "this was just user information".

(And if anyone from reddit is digging for examples of consumer confusion: when I saw "Reddit Grid" as I scrolled by, I absolutely had a first reaction of "oh, reddit is releasing a new feature to improve browsing? cool!" before remembering "oh yeah, people tend to be shitty about respecting trademarks, so watch this just be someone who wanted that official-sounding connotation".)
I'm glad to hear this! Thank you for working on Sandstorm.
every tax ever conceived is ultimately always paid by the consumer, yes. The point of such a tariff is however to increase the price of the foreign product, essentially giving local competitors a price advantage.
> My only question is the following: what protection is there against the server sending a correct remote attestation for the code being executed to the client, and then, right after this attestation is validated, the server rerouting the network pipe so that the contact list the client sends goes to a different server running different, non-SGX code?

The same thing that prevents contacting an HTTPS server and having your connection re-routed after verifying the server certificate: the code elsewhere (e.g. outside the enclave) doesn't have the keys.
I am not trading purely on these numbers. They are indicators they help me make my trading decisions and I think they may help others too.

My models evaluations are performing better than baseline when trained with 70% of the data and evaluated against the remaining 30% so I take that as value. As someone else put it a potentially "favorable guess". At this point I'm using the predictions regularly. And I guess I'll know more the longer I keep track of daily results.
The license is certainly unclear from a layman's perspective.

The text specifically defines "Granted Claims" as "those patent claims that I own or control [...] that are infringed by Permitted Uses." And "I" refers only to the entity granting the patent rights.

So how does "Granted Claims you would have had the right to enforce" make any sense? Does it only apply to co-owners of the patent rights, or something like that?
A better modification is this:

#TabsToolbar > * {
visibility: collapse;
}

#TabsToolbar {
margin-bottom: -21px !important;
}

You can also re-enable the title bar under hamburger menu > Customize > "Title Bar" at the bottom left.
Why Your Business Should Choose Elixir
That's not necessarily true either, many of the new bike lanes being put in are protected lanes. That still runs in to the issue of pedestrians but they're a problem for car traffic in Manhattan too. Take this stretch of 7th avenue where they are removing a whole lane of car traffic to add in a new protected bike lane: https://www.dnainfo.com/new-york/20170925/chelsea/seventh-av...
In the U.K. We have the ASA - advertising standards authority, which while often derided has actual teeth when forcing a "bad" ad to be removed.

I am unclear if these ads would get removed (the ad is not untruthful, just the service advertised is scam) but the point I am making is that we need to move beyond Google removing the ads and "us" removing them.

This is a society sized problem - and like all society problems it needs society level action - that's either market based where externalities and other effects are in the right direction or plain and simple regulation.

The opiods crisis that middle America seem enmeshed in now has to be dealt with at massive governmental action level. Googles ads are a tiny sideshow. And if you do fix it we can use the same model for alcohol, elderly care, sexual abuse. We got lots to fix.
But 21.co has a legitimate business model. They should have some sort of 3rd party metric guaranteeing a quality answer but I definitely like the premise.
Thats true. I'm going to keep going.
You're likely confusing the (intuitively low) probability of someone being hit by a cyclist with the conditional probability of someone sustaining a serious injury or being killed given they've been hit by a cyclist.