skysight-inc/HackerNews huggingface dataset:
In addition to the reasons other have suggested, one reason that this is not done client side is that the PhotoDNA tech that is used for the fingerprinting is not something that Facebook can share or make available. It's primary use is in matching posted images with known databases of child porn images, so providing a mechanism for someone to reverse engineer the system and develop a means of bypassing it is not going to happen.
the guy is just being a dick.
I did some research on this. James Mahaffey who is a nuclear engineer talks about this a bit in his book 'Atomic Adventures.': "Professional-grade Geiger counters, such as the Eberline E-120, are available as surplus, but they are usually sold without the probe assemble, which is what wears out when in constant use in a nuclear power facility. The probe is the expensive part, and installation of a new one will require calibration."
As other has pointed out, this is extremely creepy.
The easiest solution would have been this one:

- The user uses a JS solution to hash the images on the client, without the image being uploaded

- She compiles a form with additional information (e.g: capture her account, reasons for uploading, suspect person sharing the picture)

- The picture is saved in the DB as un-verified revenge porn.

- The first time someone uploads a picture that matches the hash, the pic is quarantined and the specially trained individual manually check them

- A scoring system could be used to check the reliability of the submission. If multiple photos marked revenge porn get rejected, the control becomes ex-post. For even more violations, the user get banned from using the tool and should directly contact Facebook. Submitting the same hash that has been rejected, will count as a "red mark"

Now, I understand this system is very complex, what Facebook has done is an MVP and as a product manager, this is what I prefer. But considering the issue (revenge porn, not something I necessarily want to test the impact on retention :-) ). Also, yes, it requires resources, but Facebook has a problem with trust lately, better to do the best...

[edited for formatting]
With a quantum computer and Grover's algorithm, 128-bit AES is breakable in 2^64 steps. But the quantum computer still needs to have a 128-bit quantum memory.
I think I’ve seen more JS bashing on HackerNews than anywhere else, I disagree with your example. Not sure though if grasping industry needs here is good or not.
Its not _that_ uncommon for an engineer not to receive options/RSUs. Sure it happens a lot in this industry, but it's not a hard and fast rule, especially once you leave Silicon Valley. I've certainly seen the "Director and above" approach mentioned earlier several times as well.
You think PowerPC Mac multicore history is not relevant, on an Apple-focused blog that talks a lot about the Mac? How?
I don't understand your argument -- wouldn't it follow then that Vue devs converge on learning VueX? VueX is very similar to Redux, I don't see how that's a point in Vue's favor if our metric is time spent learning.
Well, a few hours ago we had a thread on HN about eradicating a whole specy of insects. And we had in comments intelligent educated people that though that "it seems like a good idea".

So if mass disruption of the very system that support your life can have supporters among a community composed of smart and actively debating people, "it seemed like a good idea at the time" probably happens every week at gov agencies.
I disagree that its "literally" the same. Vuex requires you to mutate state, through their API (if declaring new/dynamic properties). Redux is agnostic about how you handle state, but encourages immutability. Vuex is inherently not immutable, its coupled to the vue reactivity system which is based on mutations & memoization.

Vuex & Vue are the easier APIs to learn. Not only that the developer ergonomics are just better for Vue's API. For example in vue you have "mounted()" instead of "componentDidMount()" or "ngOnInit()". Likewise, redux requires learning CS terms (if you don't know them) like thunk, saga, memoized selectors, etc. Vue uses more layman's terms, like "computed" instead of "memoized selector" which just makes it easier to learn.

My big hangup with Vue is having to declare reactive properties up front. It's author says this is a best practice anyways, but it leads to hard to debug issues when you accidentally declare new properties at runtime & you get race conditions. With react & redux both making immutability possible & encouraging immutability, you get easier to debug apps. But there is a more up front investment.

I also really love Vue's single file components. I know you can do that in Angular & React, but again the API is just so much more ergonomic in Vue.
Ideas for featuresz:

- add an option to subscribe to updates or newsletter - auto-generate 10 interesting domains and send them out.

- add an option to watch domains based on a combination of words, subscribe by email

- add an option to search domains based on an industry: Health, Security, Consumer, Photo, etc... - I can share more how it can be done

- add an option to support a project - donate button.

- I would probably a/b test for moving save|buy buttons next to domain, it was not clear for me that I can buy

- would be nice to have some help with synonyms and meanings of the words, should help to non-english speaking users.

Overall, I love the project, so far it has best UX compared to others I used. The challenge with your business model - people don't need to buy domain right away, but they might put your service in a bookmark and return after a while, so:

1) first marketing it a couple of more months, to grow the total number of such users.

2) I'll probably not use namecheap, and go with another registrator - can you add more options here and make money on other referral program?

3) you can add a referal link to more services, such as Launch a Landing Page

Except Product Hunt - there is beta list, indie hackers and many forums, quora and etc - and as some said, you can capitalize on blogging, twitting about successful Launch on Product Hunt, as well as do 2nd launch with major upgrades.
There is still a need for COBOL developers.
I think Java will be fine for a fair few years yet.
That's exactly what it does as far as I know.

EDIT: I can also search for any interface with a struct selected, and generated stubs for all method. Well, basically what you get for any other language when implementing interfaces.
It's almost as if genetics are king.
https://news.ycombinator.com/item?id=15668202
This guy is as wholesome as wholesome can possibly be and he was still demonetized. Wears suits, is cordial with his viewers, doesn't curse... what more could YT want?
Are you so sure about point 1?
When I send messages using the Messenger app - which is supposed to use end-to-end encryption, isn't it? - I can see and search those messages on facebook.com. Something does not add up here. And if they have the keys on their servers, then it's rather pointless to use end-to-end encryption in the first place.
AFAIK, their old codebase was full of jQuery and they are replacing some parts with Vue, hence they use both. They might not have used jQuery at all if they were starting from scratch.
Bank teller jobs have actually increased since ATMs were introduced. I don't necessarily disagree with your point, but bad example.

https://www.wsj.com/articles/technology-isnt-a-job-killer-14...
If you need this, you can write type assertion lines in a var block of the interfaces that you explicitly want to implement (and this will throw compile time errors if they don't).
While it's true that they don't have MEs, the basebands in smartphones almost always have direct memory access, and their own proprietary firmware, so the same problems apply :-(
The one where he has memories of being in prison implanted was fantastic, and I really enjoyed the one where he infiltrates the Orion Syndicate, though I don't know if they explained why an engineer was chosen for an intelligence mission...
While this (client-side hashing) would be better in terms of privacy protection for this specific case it is not going to happen because Facebook is not allowed to perform the specific photo hashing client-side as this would expose the hashing mechanism to analysis.
If you are interested in the field, it might be helpful to pay for a teacher and ask for advices. A teacher will be able to trace a path from the level you are now and help you learn just enough math for you to get started. It's way easier, take less time and is less frustrating. In France it's possible to get a math teacher from 30€ to 50€ an hour.
The left likes to play victim about other things.

Conservatives love to push the idea that they were targeted purely for being conservative. Look at the reaction around Damore, for example. It's all about how conservatives are being oppressed, how you can't trust the media and tech because they hate conservatives.
"Vagina" is actually allowed. Also, this is among the gems of the google infobox: https://www.google.com/search?rls=en&q=fcc+forbidden+words
How does this help if you've got an API that decrypts for you?

It's possible that you've protected the data at rest, but if some 'get' operation is just going to serve it up, what is the effective difference?
Yes? I'm not claiming every single admin would notice it, I'm just saying some competent admins somewhere would notice it. I hope I'm not proven wrong, but I don't expect to wake up one morning and read "Breaking news: No admin has noticed this strange this IP traffic to Intel/NSA/whatever for the past decade".
This already exists, in Google BigQuery. Uses darn near every trick in the book, and some that aren’t in the book. Source: shipped it.
Without blowing it on drugs, gambling, cars, housing, or ridiculously priced hotels, I don't know how I'd spend $5 mil a year. That's about $13,700 per day.
Use Cloudflare SSL. It will disguise your lack of SSL perfectly.
It's roughly a bajillion times easier to learn. And that counts for a lot.

You have to take yourself out of the "experienced React+Redux dev" mindset and put yourself in the shoes of "Experienced dev looking to invest in one of two ecosystems" mindset. Which one is the path of least resistance?

The point is, React+Redux people would love to believe that it's "Vue+VueX." But in reality, it feels like "just vue." A sword is stronger as a single piece, and Vue+VueX feels like a single piece.

It's up to people to learn both and decide for themselves, but my argument is simply this: it's a mistake to underestimate the traction Vue is gaining.

There's a strong temptation to blame the dev: They're not smart enough, they should have been able to pick up Redux easier, Vue+VueX is the same as React+Redux. But all I can do is report my experiences, and an honest survey of the ecosystem would lead us to conclude that Vue+VueX is far easier to learn without sacrificing any flexibility for your company in the long run.
I envision a day in the near future where robots are used to break into houses and make arrests. Texas has already done some "groundbreaking" law enforcement with robots.
The Palmer method was the standard system taught in the US when I learned:
https://en.wikipedia.org/wiki/Palmer_Method
> AMT will be gone

Trump is doing this to help himself. I read somewhere that he got hit pretty bad on AMT recently.
iPhone X Shows Green Line on Display Due to Potential Hardware Defect
You're right! Which is why getting rid of AMT will actually make it significantly easier.
Given the complexity of the thing, they need a LOT of high profile people to create such a stuff. It's very unlikely none of them have been either:

- bribed

- threaten

- felt guilty about it and decided to make amend

My money is that exploits have been on the blacks market for a while now. We just have an official public demo now.

Rule of thumb: when something that catastrophic is made public, the worst already happened and you are late to the party.
Early exercise only works with non-qualified options. They work by granting non-qualified options that you exercise immediately, but then have a claw-back provision that mirrors the vesting schedule of qualified options. Nothing here prevents that arrangement, but it might become less needed since the repeal of AMT removes much of the incentive to early exercise.
> There will always need to be a classical computer running the quantum computer.

Not sure about the need, but it sure is convenient. Quantum computers are not always better for all kinds of problems and being able to route different jobs to different parts of the system should be an advantage. All this looks a lot like a digitally controlled analog computer or something that can program FPGAs on-the-fly.
Code example? Also, being a cross platform GUI as well, how does it compare with GTK, Qt (backed by a much larger company Nokia), Tk, etc.?
It reads like a robot wrote this submission title
You're spot on. counterparty is a better platform for token offerings, and was the dominant platform until the term "ICO" emerged, and all token sales took to ERC-20.
> But the teachers declared he wasn’t ready because he can’t yet write in cursive.

> To me this symbolizes all that is wrong with the strange obsession shared in many countries about how children learn to write.

That sounds like absolutely what happened. By all means write an article on the pros and cons of cursive, but don't the article with a ludicrous straw man.
Art of Money Getting
It's not implicit, cobranding just usually doesn't use words.
So I did add a couple feeds to test. Is there a way to make the feeds show up as a list of links? Lol maybe that will happen when I get a lot of feeds in there. I think this is pretty cool so far. Thanks! PS oh yeah maybe it's just me, I'm using a screen reader.
Until they fix it. Or use something else.

Huge corporations backed up by gov agencies with a lot of time, money and skilled people VS a few people working for free because they believe they should. Not a fair fight.
Arguably, if you want people to be able to write quickly, you'd teach shorthand or at least some simplified version thereof. In general journalists, who still often take handwritten notes for various reasons, develop their own idiosyncratic sets of abbreviations and notations to let them take accurate notes/quotes quickly.
Now figure out a way to do step #1 (user does a hash client-side) without making it trivial for someone else to create a filter that adds enough noise to invalidate step #4 (uploaded pics that match a hash are quarantined.)
I'll go out on a limb and guess you don't have kids, right?
Librem Purism labtop has hadware kill switches.
Nivo-a rich set of dataviz components
(..., Miranda, ColdFusion, Opa, ...)
Not at all. You can still learn about blockchain.

Jokes aside, you don't have to learn AI/ML specifically to remain relevant, but you have to learn something. You can learn:

- about a domain (energy, finance, medicine)

- a toolset (math, stats, programming, design),

- a "hot" new technology (bitcoin, drones, wearables, VR),

- put together a network of talented people and so on.

You have to do something, but not necessarily any particular thing.
You'd think after being right again and again people would start to trust you. Or at least distrust entity that have a track record of behaving badly.

And yet...
Changed from https://www.wsj.com/articles/how-to-survive-a-robot-apocalyp.... Thanks!
previously on HN:
https://news.ycombinator.com/item?id=14508029
https://news.ycombinator.com/item?id=15218030
> Not everybody survives muggings, carjackings or home invasions, even when they comply. It's a choice between paying $20 to play Russian Roulette with a twitchy felon on the side of the road, or being scammed out of $300k and walking away. If you only look at the financial outcomes, of course it's an easy choice to make.

That is pretty obvious and condescending to say. Obviously everyone has a different risk preference. I was responding to a question (which was attempting to be rhetorical), not trying to tell you what your risk preference should be.

> The basis for these disparities has more to do with criminal intent...

If the basis for the disparities is criminal intent, then we wouldn't have seen the 2 year sentence for stealing 10 million dollars that is under discussion.

A mugging for $20 has less criminal intent than a $10MM white collar crime and muggings kill far fewer people every year than drunk drivers.

Disparities in punishments are highly driven by political fear mongering, classism and racism. (though this has somewhat lessened in recent years)
Basket 3.0 is live now – Bookmark Organizing and Read Later app
I find cursive very difficult to read, let alone write. Ever since I took drafting classes I've used single-stroke gothic lettering for anything I want other people to be able to read.
The get operation provides parts of the key used to decrypt the data you are after. No key, no data.

Edit: the key comes from the user, its not stored anywhere on a server. The key can optionally never leave the user's device.
"He developed the well respected Reva Forth, used by hobbyists around the world. "

Reva Forth always seemed nice but I could never get it working on anything other than Windows.

As such, I have little faith that "8th" will place any value on portability either, e.g., that it will be ported to BSD, Plan 9 or other RPi-compatible OS.

Meanwhile, there are plenty of more portable, open source Forths to choose from.

Example:

ftp -4o cforthu.zip https://codeload.github.com/pahihu/cforthu/zip/master

Some HN commenters are questioning the peculiar security claims.

The author discloses that 8th depends on a number of third party libraries. Would this mean that each of those third parties would also have to make similar security claims to 8th?

For example, 8th uses an HTML5 parsing library from Google called gumbo-parser.

"Non-goals:

Security. Gumbo was initially designed for a product that worked with trusted input files only. We're working to harden this and make sure that it behaves as expected even on malicious input, but for now, Gumbo should only be run on trusted input or within a sandbox. Gumbo underwent a number of security fixes and passed Google's security review as of version 0.9.1."

source: https://github.com/google/gumbo-parser

It may be the case the only input parsed by 8th is trusted or "within a sandbox" but without the source code how would this be verified?
It's more "I haven't been able to do laundry/dishes in days and 30 minutes of Sesame Street videos won't hurt".
Not sure where you’re getting the idea that it’s a hassle to offer early exercise. The 4-person company I joined back when offered early-exercise without my even asking, and it was a huge win: I just had to risk a few thousand dollars (since the valuation was low), and it meant I wasn’t forced to later exercise and sell (in order to cover taxes) as they vested, or reached the end of their exercisabilty, or when the company went public, or when it later got bought out by a bigger public company, or even when I left their employment. Instead, I got to decide when to cash in and owe taxes. But you have to be a pretty early employee for this to work well, and not require a big cash outlay up front.
Changed now.
All of your consumer activity is sold to data brokers. All of your financial transactions involving credit instruments is sold to data brokers. They then package your data into a profile and sell it to marketers who want to target different demographic slices and compare against competitors.

Most people don't have a listing in any phone books these days yet you can type in a name and get credible hits from whitepages.com. Where do you think they get that data on names and where people live when you've never had a business relationship with them?
If I were a 3 letter agency with a large budget, I would insert someone as a project manager at the target company. If I couldn't do that, I would work with their C level folks.
Needs output from what the ois is correcting too for this to work, which I don't think most ois systems output.
If only there were some concept of, I don't know, a sort of collective bargaining between labour and management, including the issue of working conditions?

https://en.m.wikipedia.org/wiki/Trade_union
How is it blocked? Programming is not illegal. Neither is art. Unless your aspirations are politics, political decisions only rarely enter into the equation.

That isn't to say it never comes into play, or that it never becomes a big enough problem to interrupt your actual goals. However, in my (~20 years) of experience in this world, what the President is saying has nothing to do with me. Indeed, the vast, vast majority of 'politics' (i.e., the things that catch your attention in news shows and blog posts) is pointless yelling, and has nothing to do with either of us, or any of the people who angrily demand action and strut back and forth in the comments.

Recently, the same people who wage war in comment sections started warring in the streets, and it has only gotten worse.

These are all reasons why I dislike politics, and why I advocate for separating politics from everything else. There is no point in trying to find a political statement in the games I'm trying to create. At best, you'd get to feel like a hero because you trashed someone's work over some supposed connection to Hitler. Similarly, I have no reason to go around waving guns and demanding that Hacker News ban all commies, or declaring anybody who doesn't use my exact combination of pronouns to be part of the new Reich. I would have nothing but a false sense of purpose to gain from these things, and I'd rather have the real sense of purpose from creating something people enjoy.
relevant book: https://en.wikipedia.org/wiki/The_White_Plague
I'd like to add MS Excell, but I have a very broad definition of programming :)
I don't think Europeans consistently adhere to that, since they allow small business proprietors and (legit) contractors to work for low effective wages. To the extent that such workers receive benefits, they're paid directly by the state rather than, "Hey client/customer, you need to stop exploiting that contractor/business; give them some health insurance!"
For now. You need a first step before the next. I'm waiting for them to own ME remotely now. It's unlikely they won't succeed.
Librem laptop is reasonable powerful, and they have effectively neutered the ME.

Libreboot replaces firmware for some decade-old server machines lacking a ME (although noisy, they work quite well as a desktop).
From a hardware perspective, it’s an easy problem to solve. This is a wetware problem, however.

Back when ME’s were discrete, you would inevitably have some with, some without. Someone would order a bunch of machines without them to “save money” or they bought a model that just didn’t have an ME add on offered by the OEM.

That meant that occasionally you had to actually have the machine in your presence to service it. You end up designing two processes/procedures based on whether you are remote or not. Lack of ME’s actually increased labor costs by reducing the number of machines a tech could manage (on average).

Having an CPU fuse essentially winds the clock back to the discrete ME days. Someone will place an order order for SKU ENCH-81-U instead of EMCH-81-U and you end up with 500 machines with the ME fuse blown. Inevitably there will be a big enough restock fee that someone in accounting will say “just use them.”

(The same applies to things like having/not having a TPM module, etc.)
Right, like reading HN you would think Django/Rails is what people are using for web frameworks. But actually Spring is more popular if you check StackOverflow careers for example.
HN is an echo chamber of ML or JS hypes
What's the point of POSIX if most of the applications won't compile on it?