skysight-inc/HackerNews huggingface dataset:
>Chrome is a program that I run on my computer. It protects my interests, not the interests of random crappy website developers doing horrible things like hijacking clipboard events. I'm all for the defaults being whatever is best for me.

>The browser is the agent of the user.

Here I support you, but do you remember that Googlers pressed assertively for hijackable right click, no opt-out history spoofing, and many many many other supremely user hostile features in W3C standards.

Out of all broken web novelties, they prefer to unilaterally break ones coming from outside:

Declarative right click menu from Mozilla was killed by Chrome.

Declarative SMIL animations, same story

They added support for HTTP pipelining and killed it just to force people to migrate to their protocol

They had working drag and drop on mobile, yet they killed it because "iphone's dnd is broken, so we made ours broke too"

They banned few people from bugzilla from insisting on turning off vibrator API from mobile Chrome, yet the moment people started using it for bot detection, they killed it in iframes (denying its use as a hard proof of clickfraud for ad companies)

I always told clients that if you have to choose in between having feature A broken on iphone or having it broken every other browser, to chose to break iPhone. Now, I don't know what is right to say there, probably something like "you need to settle on a variant where stuff is broken in a consistent manner across all browser"
Learn how to learn.
Learn to problem solve.
Not learning how to regurgitate facts.
Learn to think.
They could never do a merger for anti-trust and dual sourcing concerns...

Having said that, it MIGHT open up the potential for AMD running (some, all?) chips through Intel's fabs and actually enabling a nearly competitive playing field.

The best thing that the (US) government could do for the market would actually be to force Intel to split in to a fabrication company and a chip design company. That would enable the military to contract fabrication of higher-end validated CPUs on US soil from whichever sources they wanted...
If you're good at exploit dev? You can take however much money you want.

https://www.reuters.com/article/us-bitfinex-hacked-hongkong/...

If you're a world class exploit developer working full time, expect earn a few hundred million $ per year.

Of course there exists a whole industry full of people that'll offer you silly 6 digit salaries.
> No, mobile scrolling wasn't "broken" for them, scrolling via their "timeline" feature was broken.

So, mobile scrolling is broken, but not all the time. Is that really the distinction you want to make right now? For the individual who said "[c]omplaints from my users are starting to come in", is that an adequate response?

> Luckily Discourse will email you when there is an update with a link to the admin page that lets you one-click upgrde the Discourse install on your server from the web UI.

Please do tell that to the parishioner whose son set up the website a year ago before he left to go to college. We all agree that software upgrades are important for security, but that doesn't justify imposing an additional artificial upgrade burden due to a backwards-incompatible breakage to the web.
Disk Maker X [1] is a GUI which has been around a long time and does this. That said, it's closed source which could make a person justifiably twitchy when manipulating the installer.

[1] http://diskmakerx.com
> It's a struggle to improve what doesn't directly add to the bottom line.

That's exactly the point and you're essentially nitpicking (with anecdata) the fact that he pinned the problem on developers instead of product managers. Regardless of who is making the decision in companies, the end result is pretty much the same.
An unsynchronised manual gearbox also gives you full control over the process. And like an unsynchronised manual gearbox, a fully manual camera is great in a few situations but most of us don't find it that convenient as a daily driver.
Code point U+F8FF is in the private use area. It only displays the Apple logo on Apple devices. Please do not use it on the web.
it exactly what it does

sudo /Applications/Install\ macOS\ High\ Sierra.app/Contents/Resources/createinstallmedia --volume "$build_mount"

But it does 2 or 3 more things.
This is equivalent of getting a locate for short selling. 5% is the loan interest.
Better to use my link, not the deep one. On mine you can click through to the latest draft (as of writing this, November 5th, 2017)!
This kind of thing is where monero shines
Computational complexity is an insufficient motivator, because while in our current universe some problems are hard and others are easy, in the hypothetical universe there might be a law of physics that solves NP-hard problems. In fact, if the problem is right, you might even end up in a situation where they can't hook their NP-hard problem solvers together in a way that solves problems that we would consider polynomial.
Ask HN: Is an encrypted DMG really secure?
I have been looking for a forensic-like in-depth analysis on Apple's DMG file format. I have done the basic Google search on the topic, and found a few resources, but they are not satisfying. Do you know any good resource for reading in-depth about the security of this file format, when encrypted with AES-256?
Orbits of nonspherical objects tend to be unstable (this is a significant effect for lunar orbits already) and the motion of the satellites would be completely different.
I've been using WebStorm (and IntelliJ IDEA) for the past couple years and love it. I have no intention of swapping to any other IDE unless I really have to. Can definitely speak to the extreme convenience of instantly finding usages/definitions, "intellisense" of func params, plugin architecture, super customizable settings, built-in language support and linting/evaluation, refactoring assistance, live templates... Just a godsend, to be frank.
Can you clarify the use case? For client side use, PeerJS [0] (a bit old though), simple-peer [1], and SimpleWebRTC.js [2] are friendly abstractions (and you'd use publicly-provided stun/turn servers). If you need to do more advanced stuff instead of client-to-client, there are a couple server-side impls, but it's not a common use case.

0 - http://peerjs.com/

1 - https://github.com/feross/simple-peer

2 - https://simplewebrtc.com/
Right - one odd thing alone isn't enough. I worked on a platform that allowed contributors sign up and provide content from their area. A user provided some fishy content with a very heavy slant so I started looking into his profile. The big thing that really confirmed we were on to something was his profile photo was one of a retired athlete. Busted by tineye.com. Once we dug in some more we found it was a local politician writing under a fake name.

So yes, having all your friends in another area doesn't mean you are a fake, but it may be an easy thing to look for that flags the account for more inspection.
What measures are you all taking to get your resources available again? Are you moving resources from one region to another? Implementing traffic manager?
I like the idea of it targeting developers but aren't most developers going to end up using an ORM in the end?

For example SQLALchemy in Python and ActiveRecord in Rails.

Is the book a ton of SQL examples or general theory?

Most of my day to day database activities as a web developer are creating good indexes, data modeling and setting up queries with an ORM.
As the former perpetrator of several hand-coded sites and blogs full of text organized by 52-card-pickup principles, going back to '80s BBS's, online services, USENET, and then Gopher and WWW on a University shared network…

Switching to Wordpress (obLink: https://mdhughes.tech/ ) and slowly reposting the stuff I want visible in an organized, searchable format with a consistent style and a nice CMS is the best possible improvement.

My latest change is a "Starred posts" category, so I can surface the longer, more thought-out pieces and still have ephemeral content like semi-daily music links and status updates.

Manton Reece's http://micro.blog/ is putting Twitter-like interaction under a blog framework, hosted on m.b or on your own site.

Discovery of these things is still hard, and Google's ad-searching site unsurprisingly only surfaces ads, but http://duck.go and social media (like HN) can point you at content you want to see. [ed: sp]
Non paywalled link:
https://www.forbes.com/sites/alexkonrad/2017/11/06/salesforc...

Also any Salesforce customer not using G Suite gets the service free for one year!
This is how WW3 will start
The balls game was the most stunning example of this to me; I really enjoyed the experience of playing it.
What do you mean by secure? Verified content?

If so, all you need is the hash of the file and such hashing can protect essentially all forms of files as long as the source of the hash is trustworthy.
Subtly – learn English with smart subtitles on movies and TV shows
Are you honestly suggesting that requiring having a credit card is in any way a solution to fake accounts? That's a ridiculous proposition not just for Facebook, but any service that operates in developing areas or serves users under the age of 18.
Let’s be real — he was probably asked to leave.
That's more or less what I would suggest. Though, I would probably put the rate at 25% and only tax domestic profits. That would bring US policy in line with the rest of the G7. Raising taxes on dividends and capital gains to make it revenue neutral is also a good idea.

At the moment, tax policy basically penalizes companies bringing money earned in other countries home into the United States. It's stupid. Tax holidays are also stupid. Fix the problem at its heart.
Latest Waymo Setbacks Draw Uber Taunt of ‘Shrinking Case’
>Reality is that the one that contains the structures not math

But math contains all physically realizable structure, i.e. all structure that can represent some feature of reality. But also structure that cannot be realized in reality, e.g. sets too big to fit in reality. That one can deduce some logical structure from observing reality isn't the deciding factor here.
The reason why Intel has iGPUs in their CPUs in the first place is a result of Intel licensing Nvidia tech. So you're telling me after Intel has paid Nvidia billions to use their tech, now it should be illegal for AMD to get in bed with Intel?

Source: https://newsroom.intel.com/news-releases/intel-announces-new...

Good luck with that argument.
Interesting, given last week's reports of Model 3 production being bottlenecked due to battery supply issues. Is his departure the result of him being held responsible for these issues? Or did he decide to leave of his own accord, and if so, why? Either way, I'd like to hear some more details.
I'll add the most recent. Thanks.
You're free to look for those videos using the search feature of YouTube. I did and they are real. Some of them feature thumbnails or content that are clearly disturbing or include sexual themes.

You would also believe the BBC which is linked from the article. http://www.bbc.com/news/blogs-trending-39381889
How different is this _really_ from storing money in my checking account? The bank doesn't allocate individual stacks of bills for each account, they just have a number which is how much money of mine they are holding (which is created from a series of deposits and withdrawals).
Real question is why.
Doing this would be betting that there's less than a 5% chance of this exchange going bankrupt. If they did, you would be an unsecured creditor and would be last in line to get paid back in bankruptcy proceedings.
I used to have it as the ringtone for my boss at work, and chuckled when I heard it because it meant work was 'dialing in' to me to figure something out :-)

It does confuse people when your phone makes that noise though and then you start talking to it.
That's a good question. I don't use an ORM, but you do, so that tells us that 50% of developers use an ORM ;-)

Does anyone have any stats on what percentage of developers use an ORM?
Reddit discovers UFC is secretly using streaming service to mine cryptocurrency
Be careful using CSS Grid - IE11 supports only an old version[0] of the spec, and thus is missing many major CSS Grid features like repeat(), grid-gap and span.

[0] https://www.w3.org/TR/2011/WD-css3-grid-layout-20110407/
>https://hbr.org/2010/04/the-myth-of-shareholder-capitalism

Thanks; Intresting. A look at what the duties are might be this: http://www.oecd.org/daf/ca/corporategovernanceprinciples/187...
> There's certainly a plausible Kremlin long con here

Not very plausible if compared to other things Kremlin does. Too long, too complicated, too hollywood. The modus operandi is much simpler - you do not need complex cons if you control everything. If you can come to Yandex and demand any data you want, anytime. You just have to keep Yandex alive, they'll find a way to get data (because it's their lifeblood, they are a data organization company, like Google) and when they do, you get the data too. Simple.
Stephen Hawking Issues Stern Warning on AI: Could Be 'Worst Thing' for Humanity
The iPhone X: An ode to ten years of iPhone design
Pyro (the remote object version) is still around as Pyro4 (and in active development, found here
https://pythonhosted.org/Pyro4/).
We found it great for gradually transitioning from Py2 to Py3
Original title is "Redditor discovers that UFC is secretly using its streaming service to mine cryptocurrency on its users' computers" but that didn't fit so I did a bit of creative word elimination to truncate it.
I was recently wondering about the same and was also wondering how this can happen.

Your proxy-search would be a solution but then I wonder what "indexing" would mean to Google
I had the same experience with a Vim plugin called Jedi. It was great, but typing "pdb." would freeze Vim for 5 seconds. IDEs can definitely try to do too much.
Adblock is "breaking websites". If a website is doing something crappy, I'd prefer to not have that crappy thing happen than experience the developer's true intent.
I read 75% of the article, until he'd made enough unfounded statements that there was no point continuing with his inferences from them. Also, his assertion is as simple as I've suggested, although I won't bother with a detailed rebuttal of it (I've dealt with several others, and generated my own in the past), largely because the blog my previous reply was about already handles that. Some excerpts from the article:

> I advocate an extreme “shut-up-and-calculate” approach to physics, where our external physical
reality is assumed to be purely mathematical.

> Here, I will push this idea to its extreme and argue that
our universe is not just described by mathematics — it is
mathematics.

> Everything in our world
is purely mathematical — including you.

Here's one mistake he makes: he doesn't account for qualia, the fact that people have subjectivity. Here is the one sentence where he glosses over it:

> In this example, the frog itself must consist of
a thick bundle of pasta whose highly complex structure
corresponds to particles that store and process information
in a way that gives rise to the familiar sensation of
self-awareness.

This is a pretty big assumption to make: processing something gives rise to sensations? Just because the processing is mathematically describable, is the sensation also? What would the mathematical description of the experience of a fever chill look like? And what about the 'system' that carries out the transition from process to sensation? Could it even be called a 'system' or is it more on the order of the fever chill itself?

Edit: I clarified a few things a couple minutes after posting.
> Finally, I used LibreOffice to tabulate and graph the data, and perform t-tests. T-tests are simple statistical tests used to determine the probability that a null hypothesis (H0) is correct. If it is less than 5% probable that the null hypothesis is correct given our data, we will reject the null hypothesis and consider our alternate hypothesis (HA) to be correct.

Obligatory stats nerd: that's not what a p-value means, that reverses it.
Intel has paid Nvidia billions in the past to use Nvidia's tech at the expense of AMD..

https://newsroom.intel.com/news-releases/intel-announces-new...

Since both Nvidia and Intel are monopolies in their respective fields.. that was far more egregious towards AMD than this is towards Nvidia.
I like Webstorm, it's my primary dev environment.

But I can not praise its abilities as you do. My experience has been mixed. Sure it's cool when it works well, but then its bugs are all the more painful. You expect intelligence and you get the opposite.

Take this bug I reported two years ago:
https://youtrack.jetbrains.com/issue/WEB-19183

It thinks "y" is a global if I put "x.y = ..." anywhere in my code. Genius!

Also, It's lacking in its support for Vue Js. I get lots of red squiggles all over my code for perfectly valid Vue props, and PostCSS within single-page Vue component also is weak (no $variables support).
> "idk lol security" reasons.

I hereby confess to being guilty of adding autocomplete="off" to a login form, because the client's corporate IT only cared about ticking all the boxes on a security conformance report. We have tried to fight this and some other rules (e.g. log the user out after 20mins), because this was quite a simple website, but the rules were strict like it was online banking at the very least.

Now OWASP has changed their mind, but the damage has been done.

> Since early 2014 most major browsers will override any use of autocomplete="off" with regards to password forms and as a result previous checks for this are not required and recommendations should not commonly be given for disabling this feature. [1]

https://www.owasp.org/index.php/Testing_for_Vulnerable_Remem...
Bulma, as any other grid systems based on % units, is quite limited in real life.

Check this: https://sciter.com/images/wt-langs.png
You see the same HTML markup there but in different languages. Text in most of European languages is longer.

This is HTML/CSS Sciter UI that uses flex units and flow property: https://sciter.com/docs/flex-flow/flex-layout.htm
(author here) I've used SimpleWebRTC[0] in the past with success. It was helpful once I needed to start dealing with the annoyances of cross browser compatibility, multiparty calls, etc. You can also fork their code on github[1], which is what I ended up doing.

[0] https://simplewebrtc.com/

[1] https://github.com/andyet/SimpleWebRTC
I usually use Chrome and Firefox's built-in password managers.
> he is launching a battery and powertrain startup in California

I'm betting Tesla couldn't pay him enough and he's starting his own shop to sell to the other major auto manufacturers.
Interesting. Can you provide some details about how it helped you transition?
Humble Book Bundle: Start a Startup by Wiley
I see in the FAQ that Tapoueh promises to refund anyone who isn't satisfied for any reason.
I get the Klingon symbol.
> why would anyone want to use BTC for payments

You're right, that's why I said it probably won't happen, but if demand were high enough it could be made to work. One scenario that would increase demand would be inflation of the US dollar. Look at what happened in Zimbabwe. I'm not saying that's likely to happen, just playing devil's advocate.
Yep, will be a serious liability of BTC. I wager it will take some for the risk to actualize. The crypto craze continues until it doesn't. And when it plummets, devoid of any legitimate value, it will fall hard and prove just another blip on the screen for those who aren't laughing to the bank now.
The implication being of course that as the head of the division responsible for making batteries, he took the fall for not enough batteries available to sell product.

What is interesting about that implication though is that while to me and others it seems "clearly" implied, there isn't any one thing you would point to that says it is what it is. I have seen so many cases where the message the company sent about somebody leaving was really different that I no longer believe anything except what the person says.
Sleepless Night Leaves Some Brain Cells as Sluggish as You Feel
one in Germany: https://iotdarwinaward.com/pocorgtfo/pocorgtfo/
I've had the opposite experience. Casinos are a fun way to spend a little cash and waste an hour or two. I especially like pachinko games because of the novelty.

I guess this means that no one has the exact same experience, and this mythical "you" you keep referencing isn't representative of everybody.
While I haven't investigated deeply, it might be worth looking at https://github.com/medooze/media-server-node and http://www.kurento.org/.
If his pay was in any way tied to productivity, he was probably taking a big hit. Regardless of fault.
Left to our own devices our behavior could lead to the "destruction of everything we value" by the use of fossil fuels, stockpiling of nuclear weapons, etc.

Also there will be Cthulhu cults; for one reason or another, there will be an element of humanity that wants to tear it all down.
If the barrier to accessibility is such a problem, why perpetuate it by throwing your students against that wall?

The journals' business model does suck, but you're delivering students to a paywalled garden to retrieve information on what amounts to a proprietary topic. You have the power to change this by redirecting the students' attention elsewhere, either by loosening requirements or changing topics to one with more accessible research...
These "Grid by Example" videos by Rachel Andrew are an excellent intro to CSS Grid:

https://www.youtube.com/watch?v=Dz9BzY21Zks&list=PLQkVA6z3dF...

Highly recommended for anyone who's not familiar and wants a quick introduction -- each video is just a few minutes long. :)
The timeline feature is the sidebar that shows you where in time since the first post you are looking at. When you drag along it, it can move you to that date and time. It's a cool features but not integral to the application.

Scrolling still worked... 100% of the time on 100% of devices.

And as for the upgrade, if the parishioner can't click [0] in the web UI (a link to which was emailed to them), then I'm not sure how they are using discourse at all. And IMO they have no business hosting anything themselves as it will most likely turn into a DDoS bot within a year.

But again, there is no need to do this as the forum software worked completely fine for it's core functionality and only scrolling via the timeline was broken.

[0] https://meta-s3-cdn.freetls.fastly.net/original/3X/4/b/4b2ff...
Good point, sorry for not being precise.

By secure, I mean the Confidentiality aspect of the CIA-triplet (Confidentiality, Integrity, Availability) here: that only those person can read the data stored in the encrypted DMG, who has the correct passphrase (which is long and complex enough, and contains sufficient entropy, of course).

So any implementation weaknesses (incorrect IV initialisation of the AES-XTS, or anything like that) or other security vulnerabilities which would harm the confidentiality of the container would be interesting to me.
It's possible to think about the complexity of going between encoding schemes, but unless you've got a special representation blessed as the right way to write things, you won't be able to build a tier system where some encoding schemes are more awkward than others. Normally we have no problem doing this because we can recognize a well-written answer when we see it, but that's based on no more than the way our own brains work (at best, on the parts of our brains that are the way they are because of the universe we live in.)
Didn't Toyota just announce their new battery tech due in 2022? Solid state batteries with short/fast recharge time? Maybe this engineer didn't have anything up his sleeve to get there before toyota