skysight-inc/HackerNews huggingface dataset:
You'll have to come up with proof of a better alternative before you'll get agreement from people like me. Javascript and sandboxed executable code may not be a magic bullet, but it's the bullet we have.

"Lets standardize a better way" doesn't give much to talk about if I don't buy into the issues you have with Javascript and executable code.

If you could give a compelling example of a better way that gives the same freedom I would love to hear it. The alternatives I know of all sacrifice something (speed, interactivity, flexibility, development cost) in the name of getting rid of something it seems most people don't have a fundamental problem with (namely sandboxed executable code).
Update on status page: https://status.slack.com/2018-01/d8cf1517de9ecfa8
I'll still take a cloud service with rare outages over an on-premise solution that I need to manage, host, and maintain myself any day.
Apple Store in Zurich Evacuated Following Overheated iPhone Battery
At TiVo we used IRC. It was so nice.
"A plain-old asphalt roof with panels would run about $22,000"

That's with panels to give equivalent power output. You're essentially paying a $35k premium for a sleeker install.
Re: "responsible disclosure": https://news.ycombinator.com/item?id=9945686

Just something to keep in mind, not something we need to litigate on this thread.
My fear is not about Slack specifically, but in general the tools we're using today. They all assume that you have a internet connection at all times, and they just break when I don't. Even though when it's just about passing a few JSON objects around, that could easily be sent locally.
Now time to go to twitter and read all of the tweets about slack being down.
AAPL 500k shares? Yeah, not correct. AAPL average 50 day daily volume is slightly less than 28 million. Sell Day 500k AAPL bid - 0.001 SHOW QTY 100 won't move a market at all.
Why does that solution require google lock-in?

The AMP spec is about speed, that doesn't require being served from a google.com domain. If there are speed benefits to caching by google, why make that mandatory?
"The road started out as freeway but quickly became a rural highway, one lane in each direction. The speed limit was 45 or 50mph, fairly fast for that kind of road, it was quite busy and I was in a line of cars doing the speed limit."

I'd be hard pressed to call a rural area a residential neighborhood.
From the papers, these two bugs are also exploitable from ARM.

Does it mean a hacked IOS/Android app can also (in theory) sniff the password enter in system dialog as demo in the video?

Realtime password input - https://www.youtube.com/watch?v=yTpXqyRYcBM
The web is not Google´s backyard.
> stake-based consensus algorithm

What do you mean by this?
FBI chief calls encryption a ‘major public safety issue’
That's the problem with locked down devices.

It seems like no one cared that when we got powerful supercomputers that fit in our pockets, we couldn't use them like real computers.

These arbitrary limitations are the real problem. I don't think adding to the collective fear of children using computers will help change that. It's more likely to convince parents to choose more control and censorship.
Fair enough. What about having both? Slack could by default communicate via their backend, but if the client finds peers on the local network, prefer those. When the connection to the backend dies, only use the local connections.

We can have the best of both worlds.
Jeff Bezos net worth: Amazon CEO now richest person in history
Probably false analogy.
Do you know what is a bet gone wrong? It is investment.
I have already opined that the situation with Windows NT is underreported.

* https://news.ycombinator.com/item?id=16086785
Google shuts down its outdoor CES booth because of rain
The relationship between the attacker and cache is fundamental to the attack; the Meltdown paper does a really good job explaining this.
On the contrary, I'm saying that speculative research probably isn't suitable for crafting HR policies.
We've actually created just that. https://hund.io We're a status page provider with built-in monitoring so if a service goes down the page will be updated.
Agreed. Also issues with the sidebar loading and the mentions bar loading.
There are P2P systems already, plus you can run an IRC server locally. But you don't.

Using a service like slack has downsides, as you are seeing now, but running your own service or using P2P has other downsides that we have deemed are even worse.

Maintenance, lack of client support, network access requirements, lack of features, etc.

Obviously right now the downsides of a central service is front and center, but we can't ignore the downsides of the alternatives.
Yes, absolutely. That's why you also look at things like the distribution of birth day digits, which is something you expect to be standard in almost every data collection that didn't directly use that as an explicit selection factor.

But regardless, back to gender.

Lots of groups don't have 50/50 splits. But where they don't, it's elementary to discover that they don't. Plus it's a peice of information that is traditionally very accurately recorded: recording mistakes and misreporting compared to other variables in practice is almost traditionally the lowest of any variable amongst most populations of social data.

How much they differ from 50/50, and why they differ is usually a big peice of the analytical puzzle.

Someone else pointed out "well, professional footballers all men". But that's exactly my point, if you were generally interested in discovering things analytically, and you got a set of data sources from professional footballers, you'd discover all men, and quite rightly you'd investigate and find out "yeah, gender plays a real role in professional football". There's actual mechanisms and predictions you'd eventually find.

But in this situation, where you're explaining birth order effects, we need to start hypothesising and looking for tests, falsifiable claims, and mechanisms of operation.

Now, I don't know what mechanism is at work here, but you can bet that an almost 100 make presentation rate amongst a survey that didn't explicitly select for it is highly relevant to the puzzle.

Why is it attracting these people? Are these representative males themselves? Are the females representative? Does the birth order effect only express itself in this community and these makes in these parts of the country/world/industry? What is its suggested mechanism of action that can be stated in a falsifiable way? If it was real, where else would you find it, and given our known distribution of makes in the population, how often and strong might you expect those effects to be?
> and (2) there are privacy implications, since this would leak information about what users are searching for, even if they don't click the results.

This is wrong. Google can proxy the traffic like they do with Gmail, negating that privacy issue.

I was typing a comment in which I said that I'd prefer your privacy risk (where I leak info to random sites that I might want to visit anyway) over the current privacy issue (all sites using AMP leaking data about me to Google), but it's worse than that: the risk you identify is easily mitigated by proxying the content.

The other risk you mention is not as easily mitigated. Proxying might help in part, because then the servers can be selective and/or stop at a certain point. Another idea is to only preload the HTML, and perhaps a limited number of resources smaller than a certain size (mainly css and small-size images, since JS is usually not used in styling, so preloading html and css should give a first, static impression before the rest can be loaded).

All of this would have been better than any part of what they chose. I can see only two reasons for Google not to choose this: (1) more control over the web (this I think is true) and (2) more tracking (this I think a few people within Google might see as a nice side-effect, even if the vast majority of employees has only good intentions, so I don't think it was a driving reason but it probably contributed).
porn in 10 seconds? thats gotta be the fastest hand in the west.
Is that not a contradiction in terms? Placement in the carousel means you are placed above all other search results, that's in no way being treated the same as others in terms of ranking.
You misspelled Socratic Method.
No, another incentive to stop using Windows. 3rd party applications should NOT be responsible for insuring that the OS can receive critical security updates, and Microsoft should not be relying on 3rd party applications to determine whether or not their customers receive critical OS security updates (and of all things, hilariously defaulting to 'no')
No, people from out of state complain about MA drivers too (who are known as "Massholes" in the rest of New England). If you want data, take the interstate through MA and some other states and count the number of lane changes with and without turn signals.
I have no idea what this comment means. Do you want to block all websites that have ads on them from Google?
Maybe because you don‘t get a lot of money if you get hurt, so it doesn‘t pay off?
Hi! We have data about the topics that is delivered when it actually relevant, not only when the data is created. We can send you a webhook when, for example, when bitcoin reaches a price, or when a sports game ends. Superfeedr pushes you when an RSS feed has new content (that has a lot of value, we also have that) and over that a super cool real time search engine that can match articles from their RSS base (that's quite huge). We love superfeedr!

It will be free for a while and later a per subscription price is what sounds good for us.
So you're trying to get around regulations that you would need to follow if you wanted to do an IPO?
I personally don't believe it.

Does anyone actually believe a fancy AMP powered site isn't getting nice traffic boost from Google?
Yeah, not solving the problem really, unless you run the software locally/in a intranet.

Problem still stands, when your self-hosted instance/software goes down, I still can't communicate with people sitting literally meters away from me, connected to the same WiFi. It's incredibly stupid.
Telegram IM App Supposedly Compromised by Russian Intelligence
Wasn't it sourceforge that injected malware into downloaded programs? At least that's what pops into my head every time I see a sourceforge link, and why I avoid anything that's hosted on there.
Yes that is correct. It syncs (copies) binaries from GH to SF, doesn't touch code.
Bing supports AMP, too.

https://blogs.bing.com/search/September-2016/bing-app-joins-...
Looks like a good list of features, except for the HTML5 Speedtest. Why was that needed?
Sure you can do the chaff thing, but the backyard telescope guys--and any big guys with radar--will still see a new object and log it. A little math will pair its orbit with the launch.
Ahh, that would be why I've never seen one. I was wondering what all this hullabaloo was about.
Ask HN: Should there be a cap on an individual's net worth?
I'm real curious what kind of development you're doing with node.JS where Windows Defender causes trouble.
Do you have some numbers to support your claims?
Ah I misunderstood what you said.

I believe that some of the data in the carousel is pulled from the way that AMP is structured, however I'm not 100% sure.
Doesn't forcing your self into a corner where you have to either depend on unstable system interfaces or suffer severe performance penalties indicate poor design?

Obviously any set of abstractions is going to wind up making tradeoffs, and choices that make one particular set of problems easy can cause negative consequences in other areas. Just the more that I used go, the more I grew to question the logic behind these design decisions. Perhaps they make sense at Google, but to me they don't seem to make sense outside of its internally-controlled confines.
I keep asking if there is a better term than than straight MarketValue (shares * share price). Quoting from a previous comment of mine:

Imagine two different sets of digital objects: AlphaCoins and BetaCoins - they're identical in the say way physics professors say "imagine an infinite frictionless plane". Both have a 1000 in circulation.

Both are worth $10 each.

Both have a market cap of $10,000 US Dollars.

But the market for AlphaCoins is "thin" (small changes in supply and demand make for really big price swings).

There's a run on the market and everybody wants to sell off their coins.

After a day's trading:

AlphaCoins price is $3 / coin.

BetaCoins price is $9 / coin.

For goods and services you'd call this the price elasticity of demand (You can change the price of medicine and people will keep paying it b/c without it they'd die - it's inelastic - the same can't be said for a snack bag of cheetos).

To me, this is the article's argument. That while these terms describe the same things across markets there are some big differences not captured in simple "market cap" comparisons.

Maybe a better analogy is two all you can eat restaurants (identical, yadda yadda) but at one you can use your full set of dining implements and at the other you can only use a fragile toothpick to eat your food with - and all anyone can write about is how the quantity of food in both places is the same.

Can an economist or serious financial person please tell me what this term is called?
libkdump is really clean code and worth a read, nicely wrapping the inline assembly you need to do the flush+reload and keeping the algorithms in pretty simple C. It's worth taking a few minutes to read through it.

This code is from TU Graz; I assume this is from Daniel Gruss's team, who participated in the original research.
How do I become this guy? I get paid $80 an hour for a much harder job.
There are lots of reasons to love AMP. If you look at my profile you'll see that I have no monetary connection to Google.

As a consumer, I love AMP. I always preference for the AMP pages because I know they'll be fast and that they will most likely load even when I'm on really bad internet.

As a content producer I'm not a huge fan, for all the reasons outlined in the letter.

But for people who only consume, I can see why they would be big fans of AMP.
They finally updated it @ 11:45 AM Pacific
It was, but we ended that practice immediately after acquiring SourceForge in 2016. More info in the OP or in an AMA I did here: https://www.reddit.com/r/sysadmin/comments/4n3e1s/the_state_...
>How will you be aware of it? And what prevents someone from tweaking one pixel by one bit, changing the hash of the new image?

I suspect this would be solved by visually comparing the two images and noticing that they are one in the same. Than you can just see which had their hash published on the block-chain first to see which is the real one.
When someone says they don't mind surveillance and have "nothing to hide", ask them for the password to their primary email. Most people simply don't think through the practical implications of their information being sifted through.
ASCII art > emojis
Have a look at the Megan's Law registry. Tell me how close the nearest violent sexual predator is to you.

A few months ago, I discovered that one lived on my street. He has since been arrested and is no longer in the neighborhood.

But, it's not just out-of-place perverts. I am also on the lookout for under supervised children who "play" too violently.

I knew that I would be concerned about vehicles, so I was sure to buy a house with a large, fenced in, backyard. It's away from the street and even adjacent to a small patch of woods. They can have outdoor adventures and I can have peace of mind.
http://moose-team.github.io/friends/
Thank you for pointing this out. I know that for myself, Jira updates and high productivity work are anticorrelated. I'm not going to update a ticket while I'm focused on code, and large blocks of flow-requiring work often don't even justify ticket updates until they're done.

Fundamentally, this data just looks like "people update tickets before lunch and before the end of the day", which is hardly interesting.
I agree with you, and I also mentioned it in another comment. We don't have to chose P2P or hosted service, when we can have both. See https://news.ycombinator.com/item?id=16109202

As my full-time work is working on P2P systems, I would love to hear more about what you think gets even worse with P2P systems compare to hosted services.

Lack of client support, features and so on is more a sign of lack of adoption, rather than something fundamentally worse with P2P than hosted services.
The reality is, the companies have all the cards in these deals. They have more information, better information processing, and critically, they have options.

Keep in mind the opportunity cost for these deals. Cut the company a tax break, or continue to not collect taxes on a vacant lot. If Buffalo actually brought cash to the table... that was quite a gamble.
I agree, although I might add "trustless" in there.
Great Writing
That won't stop you from visually identifying that they are the same, then just looking at the block-chain to see which hash was published first (and thus the real photo).
By invoking the naturalist fallacy ("as nature intended"), I read the original comment on this thread as suggesting we throw the good away with the bad. My point is: that would be a bad trade. The pre-modern food supply was far more dangerous than the one we have now.
Probably the case. I've seen the same thing with Heroku. I've report an issue, then half an hour later it gets updated. Could also be a bad cache that takes a while to invalidate.
( Technically an on-premises install solves the originally stated problem, and here the scope increased. P2P doesn't solve the real problem domain either, as soon as you aren't in the same room, a lot of the internet variables return )
#Rust2018: Don’t be the new Haskell
Kodak announces ICO, stock jumps 44%
What is inside the Alto's ethernet transceiver?

From the remark that interface between Alto and transceiver is TTL I gather that it is not same as 10M one (which transformer-coupled RS-422-ish differential interface) and also the collision signal detected by transceiver should probably be different.
Aside from the occasional partially misquoted and much-publicized opinionated statement from Go Team members, Go also has some of the most friendly, dedicated, and talented developer community I've ever seen.

I'm more than fine with people preferring Rust. I'm fine with Go's choices rubbing people the wrong way. But the frequent caricature of the Go Team being condescending or clueless simply rings false to anyone who has enjoyed being part of the Go community, where kindness and ability abound.

I'm always curious about the frequent ravings about how friendly the Rust community is. I'm super glad, and I love seeing (hearing) the reports from the Increasing Rust's Reach program on the New Rustacean podcast, for example. I'm glad Rust is so welcoming and friendly.

But I guess for this (increasingly) greybeard, it's funny, because the whole thing seems so cyclical: the Ruby community back in the PragProg-induced-popularity days, and the Perl community back in the pre-Perl6 days had a similarly lovely feel (minus the more recent but oh-so-welcome proactive diversity bent).

Anyways, enough ramblings. I'm glad Rust fits so well for you. I keep meaning to learn it properly by porting an Apple II emulator or something, but… time :-)
https://en.wikipedia.org/wiki/Kosmos_2499
Earn FREE Bitcoin, Litecoin, Dash, and Dogecoin Confirmed Payouts
Seems much easier to smuggle nukes into a country and just have them on standby in safe houses of the enemy country's large cities. The political fallout of getting caught doing that might be huge, but back in the Cold War I could see the CIA or KGB wanting to give it a try. Even if the US or the USSR (or smaller powers like France) was caught smuggling a nuke, it would likely be kept under wraps. The political system of a country would not want people fearing possible hidden foreign nukes where they live.

This scenario might make an interesting book or movie plot, but I have never heard of one. Spy novel with nukes.
I expect that they'll be providing some tools for people to generate the packages - and that tool can inject the top bar if it wants. It remains to be seen whether Google will provide search-results priority to "AMP" webpackages not generated with Google's tools (I think we'd all hate it if they didn't, but there's no obvious reason that they have to).

In particular, one obvious way to implement this would be to have everyone sign a static webpackage that includes a JS loader that pulls resources from www.google.com/amp/ via XHR/CORS (using ServiceWorkers I guess?), which would only need to be signed once, and send that over to Google. Then the infrastructure continues to work the way AMP does today - you just upload actual AMP-compatible web pages to your actual website, and Google downloads and caches them. Probably this webpackage would just include a single script tag that pulls the loader itself from Google, so that Google can apply updates to the loader without having to bother you again.

The webpackages spec talks more directly about signing the actual data, which would be way better for the web, but it's not obviously better for Google and for publishers already invested in AMP, so we should be cautious that maybe Google does not mean this and means something that's easier for them and retains the lock-in.
I see some of the siblings have named different solutions, Datomic also exists as a database with immutable facts and time-travel.
But it will be hard to rebuild the trust once ruined.
Google amp is a blessing on mobile, I don't give a damn't about site owners.
Yes, but if you can identify an image in that way then you can claim the copyright anyway. Searching for copyright violation is the challenge.
And yet, it's a miracle how a few lines of CSS & JS server from a high-speed server makes a website load faster. So, no, we don't need AMP to make webpages faster. To make a website fast (OTTOMH):

1. Optimize the content we deliver, (HTML, CSS, JS, etc...). Minimise the time for all content and First Meaningful Paint.

2. CDN servers. Bring the servers closer to the user, geographically.

3. File compression during transport. Stuff like gzip and HTTP/2.0 (which isn't a compression algo, but inherently makes the pages load faster, which was the objective)

Edit(s):
Some formatting & content, somewhat new to HN
install a content blocker, e.g. umatrix, and block media requests?
Even aside from, er, "defensive management", I doubt the quality of this data. My team has triage meetings Monday at 11 AM. The number of tickets 'created' or 'completed' during that one hour stretch is probably 30% of the total for the whole week, but that's a function of coordination and scheduling that says nothing about actual work completion.
Looking forward to them being available in the UK, if I had't just re-roofed my house with recycled slates I'd have used these, I didn't use the option from Solar Century because they look terrible compared with the glass slates from Tesla: https://www.solarcentury.com/homes-uk/our-offer/sunstation/ -- however I do have a lot of respect for the founder of the company http://www.energylivenews.com/2015/01/12/solarcentury-founde...