skysight-inc/HackerNews huggingface dataset:
I am not convinced they are very different models.

My argument: An attacker can save the encrypted SSH traffic going over an insecure channel, then hold the traffic until 2030 and decrypt then.

Do you find a flaw in my argument?
Good point, this is a nice usability compromise between completely insecure, and very strict.
Python will be the greatest thing ever when it takes the up the lessons from Smalltalk, Dylan and Lisp, and actually produces fast code, with AOT as an option.

Maybe some day PyPy will be it.
Neither Perl 6.
I didn't mind, I actually lolled when reading his other blogpost about how he botched the personal question part of an interview: https://openmonstervision.github.io/blog/posts/how-not-to-ge...
>To me it sounds like a DSL created by much more powerful language would be really better than a completely separate prog. language.

Yeah, isn't that the problem that Lisp macros have been the solution to for decades now?
Black Bird Image Optimizer: one of the most powerful i have encountered
A Little Story About the `yes` Unix Command
Being a polyglot developer is a very wise way to go. Languages are like different tools, and each job has an appropriate tool -- trying to use one language for everything is like trying to fix everything with a hammer.
OnePlus is stealing our data
I don't know about every other time but my comment explicitly states that they lost their influence and there's nothing to protect any more. What's weird is they are now hoping someone else will take over.

Especially weird since Facebook will happily take over old media's advertisers base and then charge them for access to their own audience at the other end. It's already happening.
>One is just more important and dangerous than the other

Not if you're not American. The American government has shown it doesn't care at all or stop at anything to promote its self interest through American made software outside the US.
Surprisingly?
This is off-topic, but the Gentoo installation guide that this page is a part of is one of the most comprehensive and accessible Linux guides I've ever read. It taught me a lot of Linux concepts that I never needed to use before when setting up cloud VMs, and now I have a fully working installation of Gentoo + GNOME (with an encrypted root partition) that I'm confident in managing and upgrading. I definitely recommend checking out the rest of the guide.

https://wiki.gentoo.org/wiki/Sakaki%27s_EFI_Install_Guide
https://global.rakuten.com/corp/news/press/2017/0426_01.html
> Russia IS the enemy

In what sense?
I know you're joking, but I would really like to have the Haskell type system in my shell with suitably-typed versions of the standard utilities: sed, awk, grep, etc.

I tried asking #haskell on freenode about "using ghci as a shell" and everybody thought it was a horrible idea. Oh well :(
If you feel the need to have guns for home protection, it might be a better idea to move somewhere safer
well you don't need social media for it, you can solicit donations under the limit for disclosure or limited disclosure via the web and rake in millions from anyone over seas.

unlimited campaign contributions actually would benefit the US democracy because two parties have a stranglehold on seats. all their attempts to regulate campaign donations are nothing more than methods to prevent a third party (or more) from getting a foothold. there is little any third party can do when the established parties control the narrative if not the press but spend money to get notice. how best to keep them from that by simply selling "protection of your democratic rights by limiting campaign donations from overseas" Pretty sure they can market it well enough anyone would buy in.

don't assume unlimited money in elections is bad, what is bad is that precluding it is the first step in preventing additional parties to gain a foothold.

if we want to regulate campaign funds we should limit only the two largest parties and unlimited all others.
Introducing HelloExoWorld: The quest to discover exoplanets
Then 4096 keys are also worthless.
Nigeria's TSTV Launched to Take on DSTV
I like music with hymns or mellow tones. Music I've been listening to a lot lately:

Moby
Lindsey Stirling
Solar Fields
Imagine Dragons
M83
The War on Drugs
Gorkem Han Jr
Tony Anderson
Simon & Garfunkel

Definitely helps block out noise and gets me to focus.
What to fix about it? Looks good to me.

You could use f-strings (introduced in Python 3.6) to get rid of the `.format(`. https://www.python.org/dev/peps/pep-0498/

The `[str(value) for value in flatten(vertex)]` part is missing in your Ruby. I assume that happens in some method of the vertex? You could make your vertex iterable as well.

Python philosophy prevents you from getting rid of the `str(x) for x in v` because "explicit is better than implicit", so join will not auto-convert stuff into strings.
If you port coreboot to w530, please post it somewhere. I am interested in it, but the information about coreboot on w530 is a bit scarce.
A little off-topic, but I wonder if the barcode-ish design in the header is a puzzle with an interesting hidden message. It's not uncommon for cryptographers to do things like this.
Stop using plastics!
Isn't it a valid distinction between a device which could be abused to spy on you vs a device with the sole purpose to record ~everything you say unless you opt out (like in this case)?

I can see how smartphones make that possibility less obvious and more palatable even to users who are aware of it.
ارتفاع الكوليسترول وتعريفة و وظائفة واضرار ارتفاعه وكيفية تخفضه
Why people move into those shitty small communities (where they fine you for not using the "city" enshrined garbage disposal service)? How come black/liberal/sane people don't move into a small city for themselves?
One that I've played a bit in the last few years (IIRC it's discussed in Winning Ways for your Mathematical Plays) is to draw an RxC grid (4x5 works well for a short game). Two players take turns placing 1x2 dominoes on two adjacent grid squares, one player horizontally and the other vertically. The winner is the last person to successfully place a domino.
Also Blockbusting and the policy of destroying ethnic Catholic neighborhoods by running a couple of highways through them.
That only holds if facebook is the only website on the Internet. There is a whole Internet out there and then the real world.
S3 buckets have a single unified namespace, so presumably he's got bots running 24/7 scanning every legal bucket name. Filter it down using english words, likely ops jargon, and company names. I'm guessing Accenture has lots of buckets named "accenture-prod-uploads" or other promising combinations.
> Either we use market-based mechanisms (which implies the existence of currencies), or else we turn to socialist-style central planning, in which the government gets to decide who has their aspirations fulfilled and who misses out.

There's nothing in socialism that requires central planning. In fact, there are forms of socialism (e.g. market communism) that explicitly include market mechanisms as one solution for allocation of resources.

So I tend to agree with you that currencies won't disappear until we're well past "basic post-scarcity" aka. nobody needs to go hungry or homeless. To get rid of currency entirely we likely need much more fundamental cultural changes and far more extensive abilities to create what we want.

I don't think "authenticity" will survive as a major driver that long past meeting sufficiently good virtual environments, because while it may have a certain charm, with "good enough" virtual environments, reality can be trounced in other factors. E.g. the real Mona Lisa is utterly unimpressive in person: It's tiny. You can't get really up close to it. Many people who have seen it - me included - mention being left thinking "that's it?" A "virtual Louvre" could easily present a "better than real" version of it that I suspect would quickly seduce people away from caring much about that authenticity.

A large part of why authenticity matters today is that we perceive it as better. But if the "authentic" experience consistently becomes drab and dull and trite compared to the copies, the appeal will gradually diminish.

Even so, in the intervening period, we can certainly move product and services between two categories: One where we merely care about tracking consumption to allocate resources to manufacture and distribution efficiently, but otherwise people can consume what they want, and one where we need to mediate and restrict use because we can not yet meet the full, unconstrained demand without sacrificing something else.
Money doesn't decide elections, voters do. The campaign that spends more money doesn't always win. In fact there's good reason to think that most money spent on a campaign is largely wasted:

> The most exciting and visible part of politics is the political campaign. Politicians
and their team of strategists, pollsters, and surrogates wage battle for the votes of
the public. Slogans are trumpeted. Gaffes are made. Tactics are deployed.
> And it probably does not matter all that much.
> At least not as much as the political environment matters. Presidential
elections can be forecast with incredible accuracy well before the campaign really
begins. In fact, if all you know is the state of the economy, you know pretty well
how the incumbent party will do.

http://faculty.georgetown.edu/hcn4/Downloads/Noel_Forum.PDF
I think we’re operating on different definitions of “memory unsafe”. Memory unsafe means accessing uninitialised memory, freed memory, other objects’ memory and so forth.

This article seems to simply be describing memory inefficiency in promises, that in certain situations it can leak like a sieve.

If Promise in any particular environment was not memory-safe, that would probably be a high or critical security vulnerability. Mere memory leaks are not a security issue.

(I’m operating on the reasonable assumption that the JavaScript engine is simply going OOM and crashing for that reason instead of something more sinister.)
That article /is/ funny.

It also doesn't beg for book purchases for books he didn't write... :P
Car and bike online services hyderabad
When the replacement of bash comes it will seem like a complete 'no-brainer'. In my opinion what should be happening is they should completely decouple the engineering from the interactive shell. The shell should just be a series of aliases and shorthands translating into something more robust.

But I also think they should move away from plain text for everything as well. Almost everything in a unix system could be better served with some kind of standard system of typing. Config files, program inputs (give universal tab completion) ... etc.

So I tried powershell and found it to be terrible. It seems like the implementation is killing the idea, stack traces all over the place - rather than helpful errors - and different types for file system objects (I cannot quite remember exactly what) making it hard to combine operations.
The author has opinions on a number of projects in this space including Ammonite.

https://github.com/ilyash/ngs#have-you-heard-of-project-x-ho...
Imagine the havoc if (when?) Intel's code signing keys for IME are leaked? Sure it might be possible to update keys in all the world's post-2006 Intel computers. But in reality it'd be a free for all that makes botnets of home routers look like a needle on a football field...
“don’t go to them” would only work if they weren’t problematically addictive in the first place.

I am using all the easy technological tricks I know, at least the ones that don’t actively prevent me getting a job (found a better iOS content blocker since last message): After this novel is done, my intention is to go back to being an iOS developer, so I need to rearrange my brain to not care about the social sacharin soda that is every comment section with a voting mechanism and many without — cold turkey in my position would be like giving a minor drug addict (dopamine is totally a drug) a job finding drug dealers, with no oversight.

What I need, and have no idea how to achieve, is to stop caring what text on the internet says. If I could do that, I wouldn’t even feel a need to respond to you, I certainly wouldn’t feel this strange and unhelpful “arg, why don’t they understand!” anger-lite that tells me to not even try to be better by deleting this reply.

Now, if you have any suggestions based on psychology, I’m interested. I know too little about psychology to rewrite my mind to be the person I want to be.
Maybe I'm missing something, but the NYT article says they were hauling rocks "to gather samples" (of "fossilized ash deposit" for analysis). The next paragraph explains that they were looking for crystals in the samples because that can help give a timeline for relevant changes in the crystal's environment:

> Ms. Shamloo later analyzed trace crystals in the volcanic leftovers, allowing her to pin down changes before the supervolcano’s eruption. Each crystal once resided within the vast, seething ocean of magma deep underground. As the crystals grew outward, layer upon layer, they recorded changes in temperature, pressure and water content beneath the volcano, much like a set of tree rings.

It's true that this is not sufficient information to allow readers to replicate the analysis at home, but it seems like a good level of introductory detail so people can decide whether they want to follow the link in the NYT article to the volcanology conference.
Funny there's no mention of Powershell, wonder if he knows about it.

Even if just to learn from them what they did wrong.
Why though? Surely there is still such a thing as intellectual curiosity?
Why would a hacker not use Mac or Linux for sensitive stuff?
I'm enjoying the Category Theory party this week on HN!
Rupert Murdoch Is Media's Unlikely Hero in the War Against Facebook and Google
Come on! Be fairer answering a question.
Like the idea. Still how would this mix with custom components? I mean, one could do so by having some sort of actions layer and linking that to components which may be build from some more elemental ones but the exact look and feel will be dictated by the library of elemental components available.
You seem to ignore the tactics facebook is known to deploy to ensure usres maximise time spent on their platform.
Easymorph seems cool, thank you.
And that’s why Google’s pagination on search results is broken, and why so much usability was lost. Sometimes I want the lowest ranked results for a query, or the middle-of-the-field results. Let me have them.
Use Linux :) there is no other option
The world has a way of righting itself. If Facebook commands influence equal to lobbyists, then so be it. If that turns out to be good, then awesome. If not, then at some point a change will be made to the environment that allowed Facebook to become.

My hope is that it doesn't take another war for people to figure things out.
I came here to repost that XKCD if nobody else had yet.

This is exactly why Powershell was invented - a desire to Replace the Shell with something Object-Oriented. Powershell passes .NET objects from function to function through the pipeline, instead of passing simply strings. (Sometimes the objects are strings, but not always).
> If you think Sydney investors are a tiny minority then try Melbourne.

Try Canberra. The scene is small and cargo-culty to the extreme. Half of every pitch event is untested, unmarketable products - usually some bored public servant with a slap-dash ecomerse site.
Watson was much hyped for Cancer research and it has remarkably failed, there was a news article a long time back. I remember that everyone in my company was like "Watson Watson" but then the AI craze stopped. Good day are back!
From searching for discussions around CircleCI API and cookies it seems like at least some API endpoints might accept session cookies for authentication.

I guess we'll have to wait for a CircleCI statement to address this in detail (or someone testing it).
Rebel – A Star Wars Story (Official Trailer) Gute Arbeit Originals the Last Jedi
The goal of a community shouldn't be SEO, getting acquired, branding or any of the author's points, really. "Back in the day", communities existed to bring like-minded people together around a shared interest, full stop.

The author is describing how to build a community that you can sell, not how to build a community whose netizens enjoy being part of.
Dream Support – Win business  with memorable  customer service
After the initial evacuation, you will likely find yourself in an unfamiliar environment with nothing to do but wait. Spare some thought for how you'll fill that time, or else you may drive yourself crazy with worry.

When I ran away from hurricane Irma, for example, the tennis racket I grabbed on my way out saw more use than most of the things I brought with me.
Why do I get the feeling that the proposed response by those claiming to care about "democracy" will be further censorship and/or re-centralization?
No haskell where embedded DSLs shine. He can implement his "ideas" easily there and then proudly present them to the world.

Basically, he didn't do due diligence in PL. ;)
I agree, but I did not know that I can't use "memory unsafe" to describe plain old memory leaks.

Indeed, it's not a security issue.
Is it bad that i read 'OOM' as out of mana?
That isn't really an option for a lot of people, unfortunately.
Google Music was, in my opinion, the industry's greatest music discovery service back when it used to have the "Explore" tab where you could drill down through genres and sub-genres to find popular or classic albums within that genre. It also used to give me much better recommendations on the homepage for new albums that I might like.

It's all gone down hill since they switched everything to mood-based radios. I feel like the main problem is that I like to listen to albums and Google seems to assume I only want to listen to random streams of disconnected singles. I seem to just get played the same stuff over and over, too.

I don't know how to find new (new to me, not the world) music anymore. Are there any good services that anyone recommends?
Sewer and water are the big tent poles there because you really can’t put it off for too long (see Flint, MI). Which usually requires tearing up roads.
I wrote a web-scraping script to iterate through buckets and download items, to see which of my employer's S3 buckets were unsecured. Chris probably did the same thing, but is spidering the whole namespace instead of just targeting a known list.

S3 has a hostile interface which is missing many necessary features. AWS try to supplement this through 3rd party products (Cloudberry) and other paid services (Macie), instead of making a client that helps you know what's in your buckets and who can see them.
The Dutch demand referendum on new dragnet surveillance law
I have the same experience. Although certainly it seems that my mood affects the kind of music that I enjoy. There were times when I listened to my discover weekly playlist on Monday, didn't like any of the songs, then listened again 6 days later and liked the vast majority.

This is difficult to measure of course, and is purely anecdotal. I am also wondering whether there is simply no more music out there that I enjoy, my music taste seems very obscure.
I still have some of my graph paper sheets from uni lectures with Dots and Boxes on (to be honest, I kept them over some of my old notes...). Those memories were brilliant, stealing a few seconds across a row at a lecture theatre to play was one of the things I actually look back fondly of the time.
A template for a run book / system operation manual
Since you like map, you could shorten it a bit by doing

map(str, flatten(vertex))

instead of the list comprehension.
Yeah I'm pretty stunned at the speed improvements. I was getting a little worried there after Australis.
As I understood, problem is that stack overflow happens in native code, which causes access violation error and virtual machine is killed. "Proper" stack overflow should result with JavaScript exception and virtual machine should remain in working state, the same is about memory leak.
Its funny you say that. All freedom's come at a cost. In America, there is a large contingent who don't like the cost of the second amendment. Who is to say the cost of the first amendment is worth it, or the second?

As an Australian, I don't have either a first amendment right to free speech, or a second amendment right to bear arms to protect against a tyrannical government.

I do think that we, in the Western world are slowly giving away our freedoms, bit by bit in the name of safety. I do worry that our future is more black mirror than Star Trek.

And I for one do not know how to right this ship, how to bring balance. For people to recognise that with freedom comes responsibility. That you must hold the individual to account for actions, and not let the collective suffer.
Clinton outspent Trump, and she still lost. Its not all about money, although money certainly helps you spend your message.
Only suggestion I have is not to build a list explicitly:
.join(str(value) for ...)
Whatever that's supposed to mean.
This is my experience as well. However, the first song I ever saw on Discover Weekly was this amazing gem, so now I kind of give Discover Weekly a pass for the rest of its behaviour: https://www.youtube.com/watch?v=f2cGxy-ZHIs
Or except when that money is used to make people talk about something on social media, and influence that way.
First of all: that technique is not very accurate, calling sleep() is not guaranteed to return in a specific amount of time.

But more importantly, that only covers the basic timing attack side channel and not even that very well. Cache and branch predictor attacks are still possible (and these are a bigger threat when you're using a virtual machine that may be shared with your adversary). Not to mention all the side channels (power consumption, etc) that are visible if your hardware is compromised.

And if you do end up yielding a thread, the context switch overhead will be measurable. It can take hundreds of microseconds to fully recover from a context switch (TLBs and cache misses, etc), which will certainly affect the timing. It would almost certainly be possible to detect if the encryption method yielded the thread or not based on timing alone (e.g. encrypting next block would consume more time after a thread yield).

There are no easy ways out, crypto code should be free of side channels: constant time, no data dependent memory accesses (cache attack), no data dependent branches (branch predictor attack), etc. This requires the crypto implementor not only to be proficient in the mathematics of cryptography but also details of the computer architecture they're running on.
What exactly is Watson except a marketing term? I mean, as far as I understood it, it's Apache UIMA with some bare bones NLP bolted on, using RDF ontologies to power some inference. But I've never seen it being used in the wild except as a tool to win over people to the IBM-side, raking in large contracts ultimately doomed to fail due to lack of domain knowledge. It all seems so ... familiar. Now everyone is rushing into Deep Learning for NLP, but apart from things like sentiment analysis on synthetic data sets ... it's still /hard/ and needs constant attention. I really don't see how you can "IBM Watson" stuff unless you're already heavily invested on integrating NLP/ML into your workflow ... and that's tricker than it looks. The stuff on BlueMix seems nice and all, but far from a silver bullet or golden hammer when it gets down to the nitty gritty of real world data.
Does anyone know how they evaluate how successful their new recommendation algorithms are? How much do they improve on simpler algorithms?

It's not obvious/intuitive the NLP and audio model algorithms mentioned would be that successful. I would have thought collaborative filtering + showing you new tracks from artists you like + showing you new tracks in genres you like would get you most of the way there.
Isn’t the problem that you need a way to deal with the ash produced?