skysight-inc/HackerNews huggingface dataset:
It sounds to me like you're arguing that full disclosure in this situation could lead to a worse outcome for users in the short term, but the negative publicity will force Apple to improve their security posture, leading to a better outcome for users in the long term. (Please let me know if I'm miss-characterizing your argument)

I think you have to be very careful about that line of argument. It's a single vulnerability researcher making a unilateral decision about the short term and long term security of an entire user base, based entirely on personal judgement. I personally think the researcher should make the decision that best protects users from that specific vulnerability. Making long-term changes to a company's QA should come second.
Yes, exactly. Free users are likely not going to stick UNTIL very later. I remember using lucidchart.com from time to time. I just needed a quick sketch and I could bypass the free limit with some careful tricks. Until I was required to make more and bigger architectural diagrams did I sign up as a paid customer.

Free users are basically visitors and focusing on them early on is a distraction (focus on what isn't interesting to your paid users) - and if there is a group of people willing to pay, they will most likely have common expectations for what the product should be.
I wouldn't compete against someone stabbing himself either...
"I'm out of my depth here"

Could have fooled me.
I'd much rather have a plain old index of help questions and answers than a chatbot to deal with.
And you would be able to stab and cut them without exploding. The tech exists but I would imagine patents are doing their magic lawyering.
So, obscurity is responsible disclosure? Cause being "closed disclosure" is being obscure.

A root password solves this issue. Its seconds to implement and helps right now.... Not "later" as closed disclosure does.

I'd rather know every error and critical bug. I can bring up with our team and decide now to either sudo service * stop or continue.

Your closed options keep the fact I'm vulnerable away, along with any pathways I might have to fix.
"The Will to Change" by Bell Hooks
At the end of the day asset managers' offerings will reflect investor demand even if it disagrees with the personal outlook of firm leadership. Also worth noting that Bogle has been retired for a while and likely has little influence over Vanguard's product offerings.
7 Best Software Deployment Tools
No, not always. I just mean that sudo is a (very very popular) hack.
And yet they inexplicably enjoy solid support here. They're one of the dirtiest companies in the tech industry, and people, for some reason, can't seem to get enough of them.
From memory (an Economist artible that I cba to find right now) an economic study found that the ideal copyright limitation to actually stimulate authors to produce protected work was somewhere around - 25 years. We are now at 75 after death of the author or so.

So we are at the pure rent seeking stage.
One of the nicest, shyest, and most polite persons I've worked with left Google for Uber a couple years ago. So I can assure they've got great people too, apart from the shady ones that make the news.
Travels with Charley in search of America
For latencies I'd want to see percentiles. Mean / standard deviation are pretty much useless for comparison. With percentiles I can get a good idea of the distribution. And with things like HdrHistogram it's easy to measure.

The point of confidence intervals in TFA is to determine whether there are statistically significant differences - but I think they must be making their own assumptions about the underlying distribution to come up with the CIs. So not sure how much I'd trust it.
Blockchain network IOTA teams up with Cisco, VW, others on data marketplace
Why do you feel that it's so important that kids get "fresh air?" My parents relentlessly tried to get me to get off the computer and go outside. I hated it, and in retrospect I can't see how it did me any good.
On first glance, Cell feels like a very serious effort and I wouldn’t be surprised if it has an impact.

The embedding model is a nice and thoughtful touch. I think a lot of imperative systems could benefit by converting their semantic cores into code in an engine that’s reactive, structurally typed, transactional, and functional-lite (Cell appears to not even have generalized higher order programming, a bold but defensible choice). The relational automata (actors?) are also quite interesting.
Why would you waste your time with them? They're a group of people whose opinions mean less because they're part of that group of people.
Wasn't the original Mozilla leading into Firefox wildly successful, though? It certainly put a dent in IE's market share. The opposite has been true for Chrome so it seems their recent history is not one of successful adaptation.
“Between Facts and Norms” by Juergen Habermas. A voice of clarity for a time of confusion and rancor.
I came across this some time ago, may be of interest:

https://github.com/Wilfred/remacs

It's a port of the EmacsOS to Rust, should be able to run all your elisp code at some point.
According to this tweet, four hours ago: https://twitter.com/cpeterso/status/935594491339161600
I certainly don't expect people on the other side of the world to care about me very much. Why would I?

Do you really have that expectation? Has it been your experience of the world?
> The security boundary is at the login processing. If it processes requests differently from certain systems then it's misbehaving.

Which is my point. More code, more complexity, more bugs. If you are correct, the security boundary you are referring to got stretched out to accommodate a separate system.

As for your strategy on separating concerns and carefully crafting important code – don't you think that's what they originally had in mind when they first designed it?
I appreciate the addition of Fragments, but I'm not sure if the addition to the JSX syntax was really a good decision.

While it initially took some time to wrap my head around JSX (especially with a lot of JS mixed into it), after that I really started to enjoy JSX for its simplicity. The Fragment syntax adds some additional magic to JSX (which is rarely a good thing), and will also very likely break all the syntax highlighting out there again when used.
You point out the key factor now: channels are opening for institutional flows to force their way into crypto currency now. Most ‘casuals’ have no sense for the scale of buying that investor flows create. They are hugely impactful on markets as sophisticated and deep as commodities. In comparison, crypto currencies are a flyspeck.

I’m not saying it’s not a bubble because institutional money wants to buy it. But I am saying that having any view on how expensive bitcoin can become based on what it’s done during the time it was mostly enthusiast and ‘the fringe’ were the main buyers is naive.

My view is that the largest impediment to institutional money is the horrific custodianship issues of bitcoin. State Actors and Super-Criminals are attacking this constantly to steal your money. That risk is minuscule in regular financial markets (because banking system has lots of protections against it).
And yet that doesn't factor into the discussion. He built Vanguard on the entire concept of "traditional finance has it wrong". He's an insanely smart dude. I'm confident he understands the market dynamics of bitcoin more than the average person gambling on bitcoin.
10 years ago was when the iPhone came out, ARM was already fairly established, better to look at intel’s strongarm acquisition almost 20 years ago, when ARM’s future was much more in doubt.
Well you get 4 images spaced out, therefor you could get semi 3D effect.
It also used to have value as a medium of exchange. Not so much these days.
Language used in the article - edge computing and fast data - suggests WD is going after potential new markets indicated in the a16z presentation [1].

The He8 concept seems to make sense in that context. So it would not be surprising to see RISC-V extended to better support this new category: call it locally-edge-attached-fast-storage.

[1] https://a16z.com/2016/12/16/the-end-of-cloud-computing/
kwin has those as well, since KDE 4.
https://ubuntulife.files.wordpress.com/2009/07/oxygen-tabs.p...

[edit] Actually, it seems it's still missing in KDE SC 5 :(
No mention of prior work? This is part of web platform since forever. See document.createDocumentFragment().
So scotch tape and pencils?
Make Money with Cryptocurrencies
And yet, banks and financial institutions are vastly preferring blockchains that have been uniquely developed for their needs. There's very little appeal in simply accepting the transaction costs and times in bitcoin when you can spin up a version with whatever spec and interoperability you desire.

If by 'return of capital' you mean a propensity for an asset to retain its value, bitcoin is utterly inappropriate. Even gold is far too volatile and is only rationalised on those grounds against (very) long tail risk.
How is it difficult to have a transaction?
Top four this year listed below. Two fiction, two non-fiction.

https://en.wikipedia.org/wiki/The_Five_Dysfunctions_of_a_Tea...

https://en.wikipedia.org/wiki/Crucial_Conversations%3A_Tools...

https://en.wikipedia.org/wiki/Pattern_Recognition_(novel)

https://en.wikipedia.org/wiki/Nineteen_Eighty-Four
I'd be tempted to agree with you if companies like Axoni aren't getting funded by many large banks, while Bank of America has file 20+ block chain related patents.

For -no interest- $20mil in funding and an industry work group seem like -interest-
Because i know many people with the same issue, and the apple forums are filled with people with the same issue. It's not just hangout, every apps has the same issue ( including the one i'm selling to my customers )
I am not talking about reselling or just wrapping it in a different package. My point is that a lot of companies are over paying Amazon by a lot. There is room to improve this.

This is a classic service company, but the service it provides can be quantified and measured in a great way
All the technical critique seems fair but it seemed like they (both as an individual and as a company) were a first time contributor and no outreach was really done to pull them in further. I guess LineRate imploded within F5 so there could have been structural problems inside there prevented them from doing a fully baked contribution anyway.
Giving social networking back to you
Oh, right. Damn. So it fakes the presence of the key by merely extending its range? This is not good.
After microcoding, this is all silly. What matters is how efficiently you can encode and communicate the μ-ops to the ROB. RISC-V, with the C extension (and using only today's nascent compiler backends!), has more-or-less the same μ-op density as x86-64 (with a good order of magnitude or two less complexity in the decoder), and considerably better density than AArch64, which completely lacks reduced width instructions.

It's not that CISC won, it's that CISC (eventually) didn't lose to any great degree.
Bitcoin is processing roughly an order of magnitude more transactions than Bitcoin Cash right now. Though the fact that Bitcoin Cash is only running at about 1/100th of its nominal capacity hasn't stopped the community cheering for another hard fork to increase that capacity limit further, presumably because its price is driven by speculation about how much it could do if anyone actually cared about it.
There is no "responsible disclosure". You will never get 7 billion humans to do things exactly the way you want it, so if there is a possibility of at least 1 person disclosing a zero day publicly, then you have to be prepared for it just as much as if it was everyone.

Instead of trying to control behaviour of every single human being in this world and demanding of them to do things in a certain way - which is, was and will always be impossible it is much more favourable to establish the expectation that a zero day vulnerability might be dropped every week and have businesses (vendors and clients) be prepared for it so it can be handled adequately.
Oh but I didn't say our society's hands are clean. My money simply goes to the odds of what "cultures" most in ours might find reprehensible.

And as for those in our society who do those things? My money is on most people in the home turf saying that's not their culture, that these are bad eggs.
I was a NetBSD desktop on an IBM X31 for 5 years, in part making the statement the TCO was about 1/5th of the windows and mac equivalents. I did incur costs of (inter)operation, non-financial costs of time and effort, but it worked. I drove it hard enough to get two IBM replacement keyboards. the underlying machine still works.

its an easy sell if your peer set is in terminal sessions. its a hard sell if your peer set is in other peoples window product.

I was mostly getting abuse from fvwm users, over my choice to use tvtwm.
I only read articles that

1) are not peddaling hate and devision

2) are not celeb gossip

3) interest me

I would be suprised if that made me more idealistic than the majority of HN crowd?
How is it clear that the exchanges don't have liquidity?
Note that the Vanguard Precious Metals and Mining Fund (VGPMX) invests in companies that pursue "mining of or exploration for precious and rare metals and minerals" and that it's not a fund that invests in gold itself. Some investors say you should invest in gold because ... reasons ... but that's not what VGPMX does.
I've noticed this on Windows. The new Firefox seems to be a bit more chatty to the disk. If some other process is hammering the disk then autocomplete gets really laggy. I suspect it is optimized for SSDs.

On the other hand, if the disk is idle it is blazing fast.
Building bots is hard: there are few tools available of any sophistication, leading to a vicious cycle of trial and error (with users getting the worst of it).

Remember what the first websites looked like? Everyone was just making it up as they went along. We're in a similar situation today.
> I'm so excited that we're feasibly within a year or two of being able to develop embedded devices in Rust[0] on RISC-V microcontrollers

I'm happy to report that the future is yesterday![0][1] (sort of)

> Plus the RF stacks (Bluetooth in particular) aren't there yet.

Espressif is a RISC-V foundation member, and you know what that means. (hint: it rhymes with could-pie den-sill-hiccup)† :- )

[0]: https://abopen.com/news/rust-comes-risc-v/
[1]: https://github.com/dvc94ch/hifive

† «Goodbye Tensilica» (sorry Tensilica, I have nothing against you!)
I just can't help but sneer. Opinionated document.write() using "jsx".

Working with react has been the worst experience of my life. I had to call a meeting and laid in down in October. If 2018 is React, I am leaving on Dec 31.

So soon I am going swiftly back into the arms of Angular and I can't wait. Honestly, my eyes are blurring as I type this with pure happiness.

Enjoy the fragments guys, it will be good practice for picking up what little is left of your happiness and transferable skill set in years to come.
Yeah - it's really inspiring to see the grit and determination poured in over many years starting to pay off. Truly great software engineering happening over at Mozilla!
Gavin Andresen maybe, but what has Roger Ver done?
Actually gold is a very good long term investment.
Here are some year-end closing prices:

Year gold S&P500

1972: 64 118

2015: 1060 2044

Ratio: 16.5 17.3

True, gold does not have a yield, but it has gone up a lot over the years.
Bitcoin is a competitor to wire transfers/ACH.

The increased price makes the system more valuable because it increases the amount of funds that can be transferred through and decreases the cost of that transfer (more order depth for getting into and out of bitcoin).

Today, it's feasible to send $1M with Bitcoin. A few years ago, there wasn't enough market depth to do that very efficiently.

The other 'killer app' is companies/organizations holding all of their funds in a transparent, public way by making their addresses known. I think there will be a lot of value in this, but we're probably a decade away from the space maturing.
Unfortunately that hasn't worked for those infuriating "sign up for our email!" popovers/interstitials. Indeed, they seem to work better than ever.
I am similarly disappointed that this didn't go mainstream. At Cumulus we did a follow up experiment to the one in your link, with the WD labs folks using Cumulus Linux switches.

The idea was that you'd run the Ceph monitors on the switches, and the OSDs on the hard drives, and you'd have an entire storage array with no servers needed. Was very neat, but pointless unless you can buy the drives...
You can follow your own procedures - decide for yourself how long you think it is reasonable for the company to mitigate in private. But give the company some time.
You'd need a lot more space between them for that to be effective and it would not work for anything that moves because the images are also spread out in time.

That's why old school stereo cameras had their lenses much further apart and that's why they fired synchronously.
Maybe an example will make it clearer to you what #3 means. Firefox stops supporting certain types of extensions. Firefox stops making security patches to this (eventually) removed feature. Because there are no patches, you can’t backport them to your fork. From this, we have the objectively correct

> 3. You can’t backport patches for removed features

which is just as obvious as 2 – and they are important.
None that are out of stealth mode. Also, nothing that I could personally recommend at this point.
I have a lot of respect for open-source contributors and for OSS project maintainers.

However in order for a fork to be sustainable it means that it needs to be more than a rebranding, otherwise it cannot survive. In particular, if Waterfox is retaining the XUL support, then it's going to get harder and harder to merge upstream Firefox into it, which means a bigger and bigger burden on you.

> my next step after the release of v56 is to go to VCs (or other funding sources) and show that open source projects can be successful business ventures without having to sell out the user

If you succeed, that's going to be great, since it means more funding for open-source.

However the elephant in the room is that you're dependent on Mozilla's developers for continued development. That's much like greenwashing, you know, how some companies claim to be "green" by outsourcing pollution to other countries.

And implicit in this claim is that Mozilla is selling the user out and I don't see how. I understand the reticence for Google being the default search engine, but as a DuckDuckGo user and as an European I can tell you that the difference can be night and day. And it's easy to change the search engine, there's no other browser that makes it easier, desktop or mobile.

Speaking of which, Ecosia might be cool for having trees planted from its revenue, but it kind of has the same problem — being dependent on Bing and thus Microsoft. And I'm going to guess that the results are at least as poor as DDG and the problem for users is that most users will apply the "three strikes you're out" rule, because you don't want to second-guess your search engine on every search, unless you really, really care so much about privacy that you can take that pain and most people don't.
How does one go bankrupt from holding an asset?
Typically, in my experience, you just buy one or more photos and show the client options. You don't nickel and dime this stuff in any serious operation.

[ADDED: But, yeah, lots of last minute stuff happens on deadline.]
I disagree. If I unleash a horde of spambots on this site, posting spam, and they get removed, am I being censored? If I constantly use slurs and other insults at other users, and I get my account banned because of it, am I being censored?
China Continues Its Xenophobic Counterintelligence Campaigns
Popular in Canada too.
> limiting them to running only signed extensions.

Surely you recognize that we are part of an extreme minority of users. For everyone else this change is extremely positive. Gone are the days of malwares installing themselves as browser extensions. Requiring power users to switch to Dev/Nightly to run unsigned extensions is a pretty small ask for a change that will stop friends and family from having horribly infected browsers.
Standard deviation is a good way to measure consistency of a system. I use it in conjunction with percentiles to gauge health of our systems.
Users are never happy with chatbots, but they can be happy with chat experiences if they never realize there's a bot behind the scenes.
Off-topic, but does anyone know why in FF on Mac the pinch to zoom functionality is disabled by default? Is there any performance concern?
It's the last release they made any significant updates to the BSD userland. I'd mark this as the release they ceased serious investment into the operating system itself. After this point it's almost nothing of note. If you look at the dates of the various tools etc., this release is when they were last updated. Many are now getting on for being a decade out of date. The only major change has been the switch to llvm, and they made that horribly painful.

It also marks the decline of the desktop UI to introduce increasing amounts of iOS-like behaviour and appearance to the detriment of a usable desktop. Like proper scrollbars etc.

While some nostalgia might account for holdouts, it was the peak of MacOS in the minds of many, including myself. As a developer, I've been quite disappointed by its direction and declining quality. For the amount we pay for this hardware, it's not much to ask for some basic maintenance work and testing to be done.
Most likely you have some sort of background process that's hogging the CPU–you can try to attach Instruments to it to see what's going on.
Sounds ... RiskV.

YYYEEEAAAAAAHHHHHHHH!
it was a feature not a bug. something related to not DoSing yourself by forgetting your password /s
Have you used an iPhone X? The notch actually makes a lot of sense once you've used the gestures associated with it, same with how it integrates into apps. I'll agree that they've made a lot of mistakes in their product lines recently but the iPhone X was not one of them.

Well, sparing software. I've had intermittent phantom screen input using the latest betas on the X, making it infuriatingly unusable at times.
Am I the only person on earth who wants my interactions with technology to simple, effective, and straightforward? I want to give simple, straightforward commands and receive a terse confirmation or explanation as a result.

Tech is so blessedly, unfailingly logical and we stupid humans have to sully that to make some of us feel happier, and not more effective :(
That was posted in September.

As with any company, Apple is always hiring.
Yes, in both cases.

Censorship is a problem in certain cases (government, especially viewpoint-based censorship, for instance), but not in all cases.
Generally a client does not have any reason to use your product until they have some skin in the game. They are more than happy to try a free product, but probably will never actually utilize it. And the ones that are on the free plan will be a pain point. If a client or customer is unwilling to spend any money on your product/service there are two options: They are cheap and will never be paying customers, or your sales people are bad at their jobs.

That is slightly hyperbolic, but in my personal experience dead on.
I still don't know how to Gleam the Cube, and now we are fondling it?
Lol oh god, Gary Larson would be proud. Still humor aside I think that you could deploy a partner to be the second point. Still, added complexity and new (albeit less awkward) questions.
Robotics #5 – Harvesting
> A ivy-league mba has way too much to lose to risk going to jail over some stock options.

And yet https://en.wikipedia.org/wiki/Raj_Rajaratnam and co
Gas Monkey Garage Builds Japanese Import In-Depth Look into the 1975 Datsun 280Z