skysight-inc/HackerNews huggingface dataset:
Or I guess our detection of risk differs. I have never been detained when I didn't have a "hair on my neck raise" with enough time to disable my phone.

If you are in such high risk situations continuously that "be proactive when you're at-risk" is appreciably the same as "don't use FaceID ever", then I say you are doing something very wrong and not just incidentally being stopped for a suspicion of possibly doing something wrong.

Either way, your experience is definitely not in the 99.9999% of the population which FaceID would be sufficiently safe if it proves to be as secure as Apple implies. For you, let's hope you aren't using a numeric pin code either!
Like Touch ID, you don't have to enable Face ID if you prefer not to use it.
> Maybe it would be easier just to remove "A foreign key must reference columns that either are a primary key or form a unique constraint" restriction, stating that any unique index is enough.

The problem is that only btree indexes support uniqueness atm. That's the relevant unsupported features, not the ability to have constraints (which essentially just requires uniqueness support of the underlying index):

postgres[27716][1]# SELECT amname, pg_indexam_has_property(oid, 'can_unique') FROM pg_am;
┌────────┬─────────────────────────┐
│ amname │ pg_indexam_has_property │
├────────┼─────────────────────────┤
│ btree │ t │
│ hash │ f │
│ gist │ f │
│ gin │ f │
│ spgist │ f │
│ brin │ f │
└────────┴─────────────────────────┘
(6 rows)

Edit: different uses of word constrain (to constrain, and a constraint) seemed too confusing.
This is a really insightful observation. I'm in complete agreement about the realization people have about not being on the upward curve and the stress that comes from only having themselves to blame. Well said.
You don't understand it because he doesn't understand the problem well enough to explain it, which is why he ever had this problem in the first place.
Amerika, Amerika, the beautiful.
The police can forcefully draw your blood with a warrant.

Maybe they can also forcefully sedate you or fix your head/eyes with some medical device.
Welcome to the sunk cost fallacy!
It's obvious to me now, but I hadn't thought of this. So it was a surprise in that regard, and an unpleasant one even though I feel like I am less concerned with privacy than most of HN.
I've never seen anybody who's made a serious attempt to look at the numbers claim YouTube is profitable. All say the opposite.

Some random examples:

CBS Marketwatch:
https://www.cbsnews.com/news/4-reasons-youtube-still-doesnt-...

Business Insider:
http://www.businessinsider.com/youtube-still-doesnt-make-goo...

Motley Fool:
https://www.fool.com/investing/general/2015/03/01/youtube-is...

And none of these include this year's Adpocolypse.
Ask HN: Sources for VR, AR or non-gaming 3D graphics work?
Hi, I'm traditionally a web developer in most of my jobs but have a long rooted interest in 3D graphics development (particularly the real-time kind). I've been toying around with such projects in the past.

A month ago I finished up a short contract for doing general "polishing" on code for an indie game and a lot of what I worked on involved its custom graphics engine. Still have that itch to scratch and delve further into this niche. Are there any good online resources that compiles a lot of info for such jobs? I'm expanding my horizons into non-gaming work and see what jobs are available for VR, AR or otherwise 3D simulation work.
>Actually, no. When you first power on an iPhone, you need the passphrase, not the FaceID. So swapping hardware does you no good unless you also have the passphrase/passcode.

You don't need to shut off the phone to get into the hardware.

>What % of people that buy this phone are actually going to be at risk of someone taking their phone apart to compromise them in this way? This method you explained is in no way "trivial."

On the other hand, I bet a company could easily implement such an attack on the cheap and sell it to LE, who would just pass the costs on to the defendant.

>Judging by your last paragraph, though, I'm guessing you're trolling. Have a nice day.

I'm setting the stakes. If you're not up for the discussion that's up to you.
peta is the donald trump of 'rights organizations'
Thanks for the directions. I will see how I best engage in the community, to be honest, now I don't feel like super enthusiastic about the industry. So I might just take a break some time and write whatever the hell I want.
Thank you. To be totally honest, I don't have a plan fully fleshed out, but the gist of it is this. I'd like to use a few RPi Zero W's as part of a home automation setup, primarily for either monitoring temperature/motion or for remote switching of lights/powered devices using relays.

One way to allow those devices to communicate with each other is via a central server (which I already have available), but it would also be nice to allow devices to communicate directly to each other in an ad-hoc manner. For example, Amazon dash buttons can be used to run arbitrary scripts from a router using dnsmasq when they connect to their configured access point. With the Raspberry Pi running an AP and dnsmasq, the dash button can directly connect without having to go through the server first. However, having the RPi also connected to the WiFi allows for it to access the internet (say to upload logs of activity, or register it's services to a central IoT server on the LAN or WAN) without requiring me to have to script in tasks to bring the WiFi interface up and down to switch between AP/client modes. This would also mean it would always be available remotely.

One of the downsides of the RPi Zero W is that it doesn't have a wired ethernet interface, so having both a WiFi AP and Client mode running at the same time allows it to have LAN/WAN access, while still being able to directly connect with other devices. The added benefit is that since both interfaces are wireless, it can go almost anywhere within range of WiFi, without cable restrictions.

Finally, having the ability to route traffic through the RPi would mean they could potentially be set up in a daisy-chain manner to extend the range of available WiFi access.
True, but that didn't stop me as misreading it as the 7s. I'd already read the 6 as a 7. The reading comprehension train had already left the station.
This article is interesting but it's also completely unreadable in Firefox and Edge because they inexplicably decided to render black text on top of relatively dark photos.

??? What is with modern newspaper site design these days? Every time they update their designs it gets harder to read them, even though they're trying to convince me to pay for it.
AWS CodeBuild Now Supports Building GitHub Pull Requests
WebCAT: Transport for London's Connectivity Assessment Toolkit
If you're a network-level attacker it's basically trivial.

If you get requests over HTTP of course you should still redirect them, as there's nothing more secure you can do. However via HSTS and even more via HSTS preloading you can prevent them from happening in the first place.
> Would you want to live next to the guy who did that while not in control of himself?

I would prefer to not live next to anyone who if they got the wrong medical condition, the wrong combination of drugs or medical procedure, or wrong parasite, could go on a rampage and kill someone. The question is if that is possible, or if its just part of human biology that medical with the wrong set of circumstances there will be a fringe possibility that people do things which they otherwise would not.
> Trade isn't a zero sum competition like shooting hoops.

This is less true than naive abalysis suggests, because relative deprivation is a significant source of disutility and trade that is “mutually beneficial” before the effects of relative deprivation are considered is often so unequal inn benefit distribution that the total net utility on one side is negative.

Classical comparative advantage arguments for trade tend to ignore the disutility from relative deprivation.
Unfortunately, no. Purchasing power differs across economies. While exchange rate correlates with purchasing power, it's merely a rough measurement, not something you'd base analysis on.
I just honestly don't believe it could be effective. The randomized pattern could be detected with an infared camera, and neural nets are easily fooled.
I just happen to like Alexa for everything else. Why would I not want to put it to use in my car as well?

Besides, I don't own any iOS devices (well, except an iPhone 3GS sitting in a closet), so Siri's out of the question. It'd be nice if I wasn't tied to one other choice.
Trust your Data, not your Mind
Do you have a link for this? The linked article doesn't mention it and neither do a couple other articles I've seen for the new echo.
They're definitely included as I've done it a number of times. I'm going to wager you don't have your iTunes set up to backup apps from your phone. I think there's a separate check box you have to click once to enable it.
I mentioned cyanoacrylate for those reasons -- although other adhesives might be better, it seemed like a place to start. Anyway, one of the themes of my comment was that if it's a problem there are alternatives to hoping the camera manufacturers will address what is mostly an edge case that can be mitigated with attention to detail during the selection of accessories and their use in the field. I mean after a while, experience will lead to checking if the plate has become twisted before operating the shutter. It might take years for someone to recognize the problem and gain that habit and most people with cameras probably will never even experience it as a problem because it never is for them...because most people don't use a tripod most of the time.
>> It's news when some of the biggest and wealthiest companies in the us do not pay their staff (regardless of work, regardless of contractor status) a livable wage.

> That isn't a reasonable expectation. Morally speaking, companies should be expected to pay market rate for the job and anything above that is charity.

You're seriously equating the unlivable "market rate" with the moral choice? You've got to be trolling.
Exactly as viable as any MitM against (unsecured) HTTP.

The recommended way is still a 3xx-class redirect (consult your SEO) to the HTTPS version, because it's better than nothing -- in other words:

- if an MitM already tampered with the response, they already have control and given the momentary circumstances there's nothing more anyone can do to save you;

- else, if no one tampered with the response, then hopefully the site was configured properly and you ended up at the HTTPS version, receiving any HSTS headers the site owner may have issued, at which point you're either safe for the current session, or depending on any received HSTS headers, longer than that.

Rinse and repeat.
That is if someone uses a credit card account that you opened without your permission.

What the parent comment is describing is if they open a completely new credit card account under your name.

You are only liable in the first scenario if you used Verified by Visa and someone got your Verified by Visa credentials and used them.

In the second scenario you are not liable under any circumstances, because the fraudster created the Verified by Visa account, not you, so you never had the credentials for the account.
It may lower everyone's risk of re-offending by making them older when they get out: https://www.statcan.gc.ca/pub/85-002-x/2016001/article/14309... (via https://www.statcan.gc.ca/pub/85-002-x/2016001/article/14309... )

Although I guess it would make more sense to be looking at a chart of 2nd offences.
I think it has more impact on very long exposure shots that can span 30 minutes to hours where a breeze can ruin a shot of it moves in the slightest.

But I agree. I think for the majority of shots it doesn't make that much difference.
It sounds like you're just dealing with teens who want to be edgy.
The GDPR does not, as far as I'm aware, have safe harbor clause for startups and other small companies that end up collecting some personal information incidentally as part of whatever they are trying to do but don't have the resources to properly manage it. Lack of such a provision could really hurt innovation.
Discussed at the time: https://news.ycombinator.com/item?id=9870408.
That's a heat-related issue; fixing it would require the ability to dissipate heat much faster (fans, etc.). That's one of the reasons why cinematic digital cameras are so much larger than DSLRs.
Geoengineering May Be Our Only Hope for Surviving Climate Change
I agree on 100% on that.

They also make statement this spring "no new devices this year" and this is yet-another-example-of-market-alienification.
The Internet of Things: Science Fiction or Fact? – Hacker Noon
Didn't realise the X model did it differently than all others. Weird.
Ideally, you should use HSTS preloads in combination with a 301 or 308 redirect.

HTTP redirects can be intercepted by anyone who is a MITM (man-in-the-middle) to your connection. (Such as a Wi-Fi hotspot owner, ISP, or someone attacking the network itself via DNS poisoning, ARP spoofing, etc.) So using _only_ HTTP redirects leaves you open to a [SSL Stripping attack][1].

A better option is to use a HSTS header. This ensures that once a user visits your site once over HTTPS, all subsequent visits will also happen over HTTPS. This makes SSL Stripping attacks harder, but still possible if the attacker is able to MITM your users on their first visit to your site.

The best option is to get your site on the list of HSTS preloads. This list ships with web browsers, which will then _always_ load your site over HTTPS. A site that uses HSTS preloads is nearly immune to SSL Stripping attacks, and that's what Google is using here.

Some browsers still don't support HSTS though, so you might not be able to rely entirely on HSTS preloads to redirect your users. For that reason, it's best to _also_ redirect users via 301 or 308 HTTP redirects, just in case.

[1]: https://security.stackexchange.com/q/41988/29865
Can you point to what work specifically has improved the situation in terms of `developer abstractions` and `interactive/responsive programming` in the last few decades?
I do think we are trying to say the same thing. When I say that no unreasonable additional power should be gained by such detection, I intend that between a few things that the verification should not be costly to the investigated party (costs should be only on the investigators). Looks like you are naming that verification "parallel construction", and so, I do agree.
1.5 years for an upgrade?

Can you expand on why it takes so much time to do an upgrade?

I'm guessing it's due to the complexity of the system, kinda like with the LHC? or is it something different?

I mean, having equipment that expensive on downtime for more than a year seems like a lot!
Wireless charging? NO. That is so off-base that it undermines the guy's credibility.

You want the fastest and most efficient charging possible, and that's never going to be wireless. Not to mention that you'd never want to use the camera to charge the battery, or (worst of all) have a non-removable battery in the camera.

Meanwhile, he fails to point out the most ridiculous omission from modern cameras: AN INTERVALOMETER. This is essentially FREE to implement! The camera is nothing if not a big timer already.

No digital camera, at any price, should lack built-in time-lapse capability. And that means real pictures, not some bullshit time-lapse "movie" mode that produces compressed junk.
So, what are the implication on General relativity if it's shown that gravity changes move in waves, with a finite speed?
Amazon doubles down on Echo hardware, increasingly relies on 3rd parties
This is a classic economics 101 topic (Purchasing Power Parity). Prices should equalize, but can't due to barriers such as customs and immigration laws.

Obligatory Big Mac index link: http://www.economist.com/content/big-mac-index
Simple: people in the know realize that this technique still needs a bunch of development.

This is a good talk about the various variables you need to demonstrate in fusion:
https://www.youtube.com/watch?v=L0KuAx1COEk
Any chance we can get a quick post mortem?
The username is the face, the password is the pattern of blinking or a unique expression the user displays to the camera.
You're overestimating the precision by a couple order of magnitudes.

I suspect the ir camera is a few mega pixels at most.
I believe the only realistic option is single payer. Elsewhere in the thread, I voiced my displeasure at using insurance for regular medical care. I think using insurance for regular care is silly. Doing so and complaining about the prices borders on insanity. It's like expecting your auto insurance to cover a tuneup.
you could say it's astronomical
The article was written by a historian, someone who either reads or writes for a living. Yet, this article is practically illegible. The longest sentence is over 80 words long. As one example, readable.io gives this text a D for readability.

If an author cannot write clearly on a subject, that author is likely not an authority on the subject.
How We Put a Price Tag on Hospitals
Where is the difference between 'I choose to do it' and 'I couldn't choose not to do it'? A lot of perceived differences between these I've seen others mention is based on free will, which is something science isn't sure even exists.
There isn't a single fusion power plant that puts out more energy than it pulls in, other than the Sun. It's kinda hard to compare cost, safety, and portability of something that doesn't exist to something that does.
I think lab-grown meat (if it ever becomes economically feasible) is the only thing that can ever put a dent in factory farming.
> how to achieve high performance

You really just want to use LAPACK/BLAS, no? (That's what the Neanderthal library mentioned in the article does, btw, and basically linear algebra libraries for other languages, too. If not, you probably shouldn't use it...)

http://neanderthal.uncomplicate.org
It has to do with how the tuple header that stores the metadata is designed. See comments here: https://git.postgresql.org/gitweb/?p=postgresql.git;a=blob;f...
> It's stressful because there's a lot to do, and I'm trying to do it while there's all sorts of weirdness coming at me from all directions all the time.

The fact that you're saying this may be a sign that you're too old for this shit. Kids love weirdness coming at them from all directions, because it's new and cool and they don't know any better.
Ok. Can't they just run a browser inside the Echo? (So that the YT API is not used).

PS: One more reason not to depend on APIs.
The speed of gravity is the speed of light, because it's the speed of causality. That's a pretty well understood thing, and isn't really something being explored by these.
Someone decided the person was insane to begin with. If we could trust them to lock them up we need to trust them to release them too.

Now, this is a nearly non existent problem isn't it? For major crimes, being locked up in psychiatric care is a longer, or indefinite sentence, than would be served in prison (this varies between countries of course).
Americans tie consultation to scans. The opinion on the scan is often done by the same establishment that does the scan. But diagnosis is hard, and operating a machine not as hard. America doesn't allow market principles to handle operation because it's hard for an efficient market to apply in diagnosis. Tying these two things together, with the additional weight of the unwieldy insurance industry with its inefficient pricing means that everything costs more. This is not to mention the fact that insurance's regulatory capture is choking the industry.

Besides, Americans don't know how to run a market in health. It's a cultural thing. They deify classes of people and then have trouble fitting them into reality.
Ask HN: What language should I learn first? Any specific resources?
As a nontechnical founder, I'm looking to get into programming. At the current point in time, what's the best place to start?

I'd appreciate knowing what languages are best for what goals (and employability if needed), and any recommended online resources. Though I'm aiming for applicability as soon as possible, I'd also love any summaries of CS fundamentals, whether in the form of articles or more lengthy online courses. I want to learn it as best as I can.

Any personal anecdotes and tips would also be greatly appreciated!

Thanks in advance, HN :)
Previous discussions:

https://news.ycombinator.com/item?id=14659236

https://news.ycombinator.com/item?id=14716986
> How viable is the interception a http-to-https redirect page?

It can be very powerful if done maliciously:

https://www.youtube.com/watch?v=MFol6IMbZ7Y

(This kind of attack is a primary motivation for the existence of HSTS.)
Ars has definitely been covering it. Here's one article wondering what had happened to the Essential and why it wasn't out yet:

https://arstechnica.com/gadgets/2017/08/andy-rubin-promises-...
> the police can't legally compel you to provide them access to your device

Your understanding of the current state of the law is very wrong.

There's a person in the US [0] who has been in jail for multiple years now without being tried / convicted due to refusing to provide access to their devices.

There's another case with a warrant[1] allowing an officer to force someone to unlock their phone protected by TouchID.

I have also heard multiple US states have enacted laws specifically addressing device unlock, but I don't have links to them at the moment.

[0] https://arstechnica.com/tech-policy/2017/08/man-in-jail-2-ye...

[1] http://files.cloudprivacy.net/la-iphone-fingerprint-warrant....
pray tell what reflects gravity
Hexnot: an experimental musical notation
What really amused me a couple of years ago is that even processes handling about:newtab were constantly leaking on linux.
Quillette: Smearing Free Thought In Silicon Valley
http://quillette.com/2017/09/25/smearing-free-thought-silico...
Parole boards don't claim that empirically speaking the person to be released will never re-offend only that they have met the legal standards previously outlined for parole.

Similarly a DA only attempts to prove to a jury that a defendant is guilty and it us their job to argue as much.

If an expert witness claims something that is untrue he would be subject to perjury.
This is fantastic! Thank you for sharing. I was going to start looking into this for IoT applications myself.

I need to have a fail-safe where one device will usually be connected to WiFi and other devices may not for a myriad of reasons.
Nikon is known to be one of the best at quick access through shortcut physical buttons. The problem with Nikon is discoverability is bad, but once you're in the know it's awesome. According to some, the shortcuts are better than what Canon provides. I've never even held a Canon camera so I can't comment. :)
I wouldn't launch anything without talking to an IP lawyer first.

Did your new employer know you were working on this prior to starting the job?

What I'd be worried about, since this fits into their portfolio well, is them taking credit for work you'd done well before you got there.

In any case, lawyer lawyer LAWYER!!

Good luck! :)
Oh, no, I absolutely agree that biometrics overall increase security for everyone. My argument is entirely a pedantic one. FaceID is clearly an improvement precisely because it makes stealing your "original" biometrics much more difficult.
Pretty sure I mean removed - at least on the iPhone X. "The full edge-to-edge screen means no more home button. No more home button means no more Touch ID"

>> extreme edge case

OK, maybe. Though I think TouchID has become so quick and natural that we forget it's even happening. For me it's almost automatic as I pull it from my pocket. Maybe FaceID will get to that point also.

But I think I'm safe in predicting, at least in the beginning, memes of people looking with zombie like stares at their phones trying to get them to unlock.