skysight-inc/HackerNews huggingface dataset:
No, that's not true, the argument for a backdoor isn't purely technical. LE's perspective is almost certainly predicated on a universal (amongst the good) desire to reduce suffering. This part is downplayed or ignored.

Can you prove that there is no such thing as a "perfect" backdoor? Can you show that the existence of a skeleton key introduces risk beyond losing the key? Has this been formally proven?

That might be a good starting point, and I apologize if my understanding is wrong, but can't one build a skeleton key into encryption that cannot be broken with any greater likelihood than otherwise would be possible by compromising the encryption itself? If the surface area of attack is doubled at most, that seems a viable trade-off. Yes, it's potentially a huge SPOF if designed sub-optimally (I'd suspect that there is a way to build something akin to a one-time use set of segregated skeleton keys), but that risk needs management like all risks.

(redact)
Well, the way Apple publishes their results means that other people always have to refer to the "Apple Journal" when they cite those results. Wheareas Apple does not refer to articles published by Google and Facebook in that way (by naming them). There's no single reference to Google or Facebook on that blog (or journal, as they like to call it).
I see.

A text file that just declares that "this project uses lib 2.1". It isn't a part of the build system in any way.

That would be awesome.
You can use requires.io or pyup.io right now for Python.
Network packets are files.
As long as you're not standing behind someone for too long staring, and you're not watching their keyboard as they type passwords, I don't see a problem with looking at someone else's screen as you pass by.

IME, the people who have a problem with it are either 1) doing work that shouldn't be on an outward facing screen (for example, working with sensitive data) 2) doing things they probably shouldn't be doing or 3) people who are a bit sensitive that they think everyone's thinking that they're a 2 if they happen to be reading HN in their break time :)
That's a terrible situation, but this is exactly why people should want their retirement savings to be kept in an account with their own name on it.

When the music stops for a pension, your chair is up for grabs. When the music stops for a 401k, nobody can grab your chair.
yeah, that and inadequate support that leads to a child falling in some way seems like biggest risks and would need to be heavily accounted for.

For safety of the child might want to make it human driven with having the caretaker adjust the temp with a standard shower valve configuration combined with a built in cut off for anything above 105 F (or whatever scald temperature is, but I recall it being somewhere around there when I went through all the safety research with my son)
The Poor Widow Bogey: http://kaalvtn.blogspot.co.uk/2013/01/a-poor-widow-bogey.htm...

Land Doesn't Generate Income: http://kaalvtn.blogspot.co.uk/2013/01/c-land-doesnt-generate...
>I find it a bit insane that people think that this is even something that needs to be fixed - why can't different ethnic groups live among themselves, instead of being required to lose their ethnic identity and become part of the larger group? Do you seriously think that's what they actually want? What you're advocating for is the destruction of their ethnic identity. I think that's wrong.

Probably because segregation leads poorer conditions for PoC.

>In 2015, 17.3% of blacks in Milwaukee were unemployed compared to 4.3% of whites, the report found. And many blacks in the city were earning much less than whites. According to the report, the median household income for blacks in Milwaukee was $25,600 compared to $62,600 for whites.

http://money.cnn.com/2016/08/16/news/economy/milwaukee-black...

>Among 20- to 24-year-olds, the Chicago area's employment rate is 47 percent for blacks, the lowest among the big cities, and 73 percent for whites, which is among the highest. Only Philadelphia comes close to that gap, with a 48 percent employment rate for blacks and 66 percent for whites.

http://www.chicagotribune.com/business/ct-brookings-disconne...
Great points.

The 90-day interview (as you call it), is the same if we did 3 hours of interviews (like you do) or 15 minutes. We didn't see a better accuracy as we shrunk our interviews down from 3 hours to eventually 15 minutes.

I really like your pairing idea espescially if that's close to the reality of the actual job.
Another comment mentioned invoice factoring, and this is different but I think we have to remember that the big companies are going to use invoice refactoring.

This might be one for the blockchain. :O
The part that people tiptoe around is the goal: a tax rate high enough that owning land leads to near-zero returns. Only the structures would be an investment. Land ownership would be biased towards the owners who can serve the most of our needs with the land, which would end our urban crisis.
The Ignorance of Mocking Mormonism
Google flights doesnt show SW pricing. That itself should have been a red flag for the creators.
Yeah, fully understand. With any luck we have a better option for you soon :)
> with no conditions at all

There are conditions on their site, and most sites.

Separately, if this information was public, then Google would have already incorporated it into its flight price notifications feature.

But again, fun idea. It's a good example of something individuals could create for themselves, and Southwest would likely never notice.
Rubbish. Driver problems are mine. Firmware and BIOS problems are theirs. Legally, they didn't sell me a "computer experience" to be had in a walled garden. They sold me a computer. What they provide, such as signed firmware and BIOS updates, needs to either work correctly, or safely refuse to run on an unsupported machine. What it should not do is brick the machine by assuming it only runs inside a walled garden and breaking things -- because, again, they sold me a computer, not a walled garden.

Otherwise the precedent might as well be set that, for instance, firmware updates are not required to work in the case that I've installed LibreOffice instead of Microsoft Word. After all, Dell made no commitment to supporting LibreOffice, so why should I expect the firmware update to work?

Well, because it's an orthogonal concern, and because they sold me hardware, dammit, not software experiences.
Please use the original title ("Southwest Airlines is intimidating our startup").
Get in touch with support, they can point it to the correct place!
upx -d packed.exe

UPX is fairly easy to defeat, but many malicious samples will have their own packers / loaders.
You've got me thinking now. Can you/anyone give me 3 solid cases where the flaw was in javascript and not the programmers understanding of the language ?
I can't. (Not at the moment at least).
Most of the times I got things wrong it was my understanding of how js works that was at fault.
So in other words, "You either die a hero or you live long enough to see yourself become the villain." :)
So there would be a material difference between me using the data when a bot scrapes it, versus a human doing it?
> Billboard Advertising.

Adquick is a startup attacking this. Huge space though.

> Low-Friction Lending Library.

My friends use Omni for this, works out great actually, $5 for a delivery.
> The aim is to produce software libraries that are as safe as Go or Rust, roughly speaking, but as fast as C, and that can be used anywhere C libraries are used.

This is kind of a weird thing to say, because Rust is as fast as C, and can be used to create C-compatible libraries.
eBay is actually better for "generic" items like USB cables, because at least you know you're getting whatever's in the picture. There's no telling what you'll get from Amazon... unless it's sold+shipped by Amazon.
"Everyone has a right to access public data. And we believe that whether you are accessing that data by typing in a URL in a web browser, through a CURL request, an RSS feed, a cached copy, or having someone read it to you aloud, does not change your right to access public data. "

I am not a lawyer and this is not legal advice, but I believe this is, sadly, dead wrong. The infamous Computer Fraud and Abuse Act contains a provision barring not just unauthorized access to computer systems but also accessing such systems in a manner that exceeds authorized access. In other words, if you break terms of service on a website, you may be in violation of the CFAA.

The ACLU last year filed suit to overturn this provision of CFAA, on the grounds that it chills research into civil rights violations, as well as academic research and journalism. https://www.aclu.org/cases/sandvig-v-sessions-challenge-cfaa...
Crypto exchanges: Yobit is a scam. Changelly too?
Recently I came into some crypto money and I wanted to exchange it. As I was new to this, I made some experiments and learned by trial and error.

First I tried Yobit. I have deposited a small amount of money to the address they gave me. Etherscan showed many block confirmations within minutes.

It's been more than two weeks now, and no sign of my money. Support doesn't respond. Looking back, not a big surprise given that it's a shady Russian site. They have a nice little show going, complete with live chat, but no substance.

Then I tried another site, Changelly. It looks legit with Forbes mentions and whatnot, but guess what? The outcome is exactly the same, only there was a response from support:

> We have forwarded your question to the technical department. They will investigate the matter and contact you as soon as possible. Once your issue is resolved, you will be informed!

That was two weeks ago and I followed with another email, radio silence this time. Investigating, I came across this post:

"I'm just gonna come out and say it - Minergate is associated with Bytecoin and is therefore a scam"
https://www.reddit.com/r/Monero/comments/4bx1td/im_just_gonna_come_out_and_say_it_minergate_is/

Frankly, I have no idea what minergate was, I just know the outcome for me: money sent into the black hole.

After these two I wised up a bit and used ShapeShift (smooth sailing) and Bittrex (very anal but works).

To sum up, I suggest you learn from my mistake and use a reputable exchange.

P.S. There is an opportunity here for investigative journalists to test various exchanges anonymously with small amounts of money and see which are legit. I thinks it's currently Wild West / Jungle mode in the crypto ecosystem and so the public could use some transparency.
Time marches on for the heroic gophers working on `dep`, and its collision course with the official toolchain.

https://github.com/golang/dep/wiki/Roadmap
The item was used and enjoyed at the destination.

If I am a resident of New Hampshire, and my wife buys me a sandwich online that I eat in California, why would California be cheated out of their tax?
Drone coverage isn't that hard of an idea to think about. I think autonomous logistics of this is much better though. A drone that can navigate itself to refuel at autonomous fueling facilities, and a system that manages and dispatches a drone fleet's coverage depending on the conditions:

- less coverage in the wetter seasons

- more coverage during dry seasons and droughts

- biases for coverage areas that experts think might be more at risk, informed by an expert

- biases for coverage when fire-prone weather patterns are expected, informed by NOAA weather data

However, with SpaceX costs going down, small satellites might be more beneficial or cost-effective, and might have a different regulatory route than drones with the FAA. The satellite detects areas of cloud cover and helps coordinate the fleet to fly underneath the clouds for fire coverage.

But navigating regulations is the biggest piece of lock-in value, and it's the FAA with drones and NASA with satellites. Otherwise you'd have to buy satellite time.
We are totally transparent about the process, but this is the standard process anywhere. i.e. if I interview at Google (7 hours) and am not a fit within 90 days, I sure hope we both figure that out (and not in 9-12 months). So given the same # of people who would be let go within 90 days, why waste time interviewing them for longer?

So even though this is implicit elsewhere, we make it explicit (if you don't think we're a fit for you, or we don't think you're a fit for us, we'll part ways)

Let me know if that makes sense
Since I have personally received (unsolicited) confidential pitch decks from several first and second tier VCs who have taken a pitch from Company/Founder A, all the while entirely committed to funding Company/Founder B, ie sending the deck around to their network to gather feedback solely for the benefit of Founder B...I would say the concern is well founded.

That said, I would also say that "ideas" never get funded...only teams/founders get funded. The idea you start with is rarely the idea that makes a business work.

Meanwhile, a good founder/team can take practically any flawed idea ...within reason... and make it work as a business.
We actually have customers that have migrated over far earlier than that going from say a R3.xlarge to our smallest production cluster and seeing 2-3x performance gains. Comparing Citus to single node Postgres isn't really an apples to apples comparison. Part of our performance gains come from sharding tables under the covers, so even when doing painful sequential scans you're scanning less data. Another part is that we parallelize queries.

Yes, for the exact same hardware you have a different price, but the price to performance customers have seen has been much better.
Yes, it is headed in that direction. There's more work needed in areas like uniform conventions for configuring peripheral pins and such, in my opinion.

And then there's clock configuration, which is kind of a mess, because everything is hooked up differently on different SoCs that I've seen.

It would also be nice if vendors always shipped up-to-date device tree source files for any board they ship.
Why does living next to someone else destroy an ethnic identity? Does a chinese family moving into an italian neighborhood all of a sudden mean that no one can open an italian restaurant? If there is a German festival one weekend, does that mean they can't have a Scottish highland festival the next weekend in the same venue? Does a Russian family moving in next door mean that I have to start drinking Vodka instead of Rum?

No, of course not ... all of those are ridiculous statements, because the truth is that the only reason you would not want to live near someone else, is because you (not you personally, in the general sense) don't like that someone else.

Clamoring on about "maintaining your ethnic identity" is just a dogwhistle ... and masks the true underlying racist/xenophobic underpinnings of that person's mindset.
> ...if I'm poor, or become poor, I still have to pay the assesed property tax on any property I own.

Are you really poor if you own valuable assets?
'Oops! Something went wrong. Please scroll down to find your content'
I believe it is their business to act on price gouging, which that most definitely was.
I agree with your criticism. We'll have to read the paper to find out what that means. ;)
Define Your Persona and Goals
Interesting points.

We never found smart effective folks who did not want to get to know newer smart and effective folks.
They've had this for nearly 2 years: https://blog.google/products/maps/do-i-stay-or-do-i-go-now-g...
Google accidentally shut down their own YouTube channel
- Don't start new threads from locked threads or threads that Go did not create.

- LockOSThread/UnlockOSThread now nest.

- LockOSThread + return kills the thread

This is good news for systems programming, as it should allow stuff like ptrace and unshare to behave correctly now! Some context: https://news.ycombinator.com/item?id=14472209
This is naive. A bushfire is huge, hot, and fast-moving, consuming entire trees in seconds. Your mains-pressure water sprinkler will not deter an onrushing wall of flame in the least... and worse, an automated system would take water away from where it's needed.
I made an open source version of this. https://github.com/scott113341/southwest-price-drop-bot
The challenge in doing this right now without cloud services is why I've got my own assistant... Without voice, until I find a good solution.
GNU software's clearly using copyright as a hack ("copyleft") to achieve its actual goal of a non-copyright world. So it shouldn't be surprising that GNU supporters would prefer copyright not to exist.
You can easily estimate the value of the land by using current methods of estimating the value of land + improvements, and subtracting costs of building improvements. Estimating costs of building is not very hard — building companies’ business often depends on getting an estimate right.
Basically, "we need to make sure they are incentivized to perform".

"I won't do my job well without a few extra million dollars."

And this, "it is the employees - and more particularly the senior management team - that must execute at this critical juncture" ...

"Screw you, people actually working the stores, you'll be lucky if we have a pension fund at the end of this. You need to be executing. Bonus? Haven't you heard, we're bankrupt, we have no money for that! Oh, wait, you're on the executive team, absolutely we do!"
I'm not a domain expert, but I would assume that "approaches based on sampling" could be O(1). If so, the slowness would be based on the scaling, not on the constant.
>Learn Just Enough Linux To Make QA, Ops, Security Hate You.

Hey, that's me!
Remember, calling Members of Congress is what killed the healthcare bills this past summer. It absolutely can and does work.
How common was Ehrlich's prediction? A doomsday scenario proposed by one guy, no matter how popular his book is, doesn't seem like it should count.

The problems with DDT and the ozone hole were averted because people took action in response to them, not because the warnings were incorrect.

The "new ice age" thing was never a mainstream prediction. The idea that scientists were warning about global cooling in the 70s is a myth.

Peak oil and the doomsday clock are both absolutely correct, they just haven't happened yet. Oil reserves are finite on human timescales, and global thermonuclear war would devastate human civilization and the chance of it happening is still disturbingly large.

AI is too early to say, but already pegging it as an incorrect warning now, when nothing even close to human-level AI exists, seems a bit premature. (One could also argue that the warning is premature, but that's different from being wrong.)
Given a set of questions - e.g. "how's the food" "how's the atmosphere" "how's the service" etc. - you could figure out how the restaurant scores relative to others by stack ranking based on the % of answers to a particular question that got a "Yes". The numbers should hopefully reflect a normal distribution and from there you get your /5 rating.

If everybody answers "yes" to all of the questions - good value, service, food, atmosphere - then that suggests to me that it's a great restaurant. And you can have a lot of questions that are even asked randomly to limit the number of questions per user.

I rate a lot of places highly that have great a lot of things but not great service, because I don't think the service is bad enough to bring it down. But that's data that is being lost.

I like your idea of stack ranking but with a different flavour. I think that "in your all time top 5" is a hard question to answer. How about this though - if we know you've been to Taco Place X and now you're going to Taco Place Y, maybe the question is "are the tacos at Y better than X", "is the atmosphere at Y better than X" or even "is Y better than X" (but I like the idea of collecting more granular data).

If you collect this^ data to stack rank. Then it definitely gives you a better distribution of restaurants relative to each other in each category.

As a consumer, with this level of granularity, I can select what I care about tonight. If I'm grabbing takeout for lunch at work, does a five star rating even matter? I should ask Siri "show me the top fast and delicious takeout restaurants near me" and she should do: "select name from restaurants where distance < 500m order by (speed + flavour) limit 3;" and from there I will pick something from that list that looks nice. That seems like a nice UX.
I think the comparison to Adwords is misleading about what this idea really is. This is just a self-serve and automated marketplace for billboard ads.

Adwords is much more specific to the combination of targeting intent through search terms or content on a page (adsense)and then delivering relevant ads in an open auction. The type of targeting for these billboards will be closer to display advertising targeting based on demographics (who drives along this freeway, who rides this bus), seasonality, etc.
AFAIUI (not a security researcher) that's actually how most of the most devastating security exploits work. There are obvious exceptions like HEARTBLEED, but in general escalation through multiple levels seems to be the name of the game.
If you're only looking to Youtube to show the amount of anti-Semitism behavior that is in the US, then I think you need to open your eyes.
Where does Guy Steele make this point? I'm curious to know the context, thank you.
Which would mean adding yet another toggle for showing all street names, or adding touch points on every street for showing the name. All of that would easily overload the user interface.

I'd guess that the team probably took all of that in consideration, and the "I need to know every street name" use case was too rare to justify cluttering the small screen with names.
The US prison system is far beyond fucked up. It destroys humans instead of rehabilitating them, a great majority of which could without a doubt be rehabilitated.
It doesn't even seem to prefer labeling streets that are on a route given to you when searching directions. This also baffles me, they seem to prefer visual balance and aesthetics over usability.
Zero rating is only good for the companies that get it. If you're trying to compete with a company that has zero rating, but you don't, then you're fucked.

You're gonna have to do a much, much better job of explaining why zero rating is a good thing.
I think the old request for startups post were more "impactful" and more in line with the direction that I would hope Silicon Valley was heading. Buyers remorse for art to me isn't a world changing idea.

https://www.ycombinator.com/rfs/