skysight-inc/HackerNews huggingface dataset:
In general this is pretty awesome. What we now know are:

1) Earth microbes and soil organisms (worms) can live in hydrated martian soil. (https://news.nationalgeographic.com/2017/11/mars-soil-earthw...)

2) Food plants can grow in martian soil that has had said organisms added to it.(https://www.nasa.gov/feature/farming-in-martian-gardens)

3) The water to hydrate the soil is already on Mars.(this article)

4) We can build an artificial magnetosphere[1] to protect an area from solar radiation.

So one trip to Mars that can land a small (< 100kW) power plant, organic amendments, tools, and material for a pressurized green house will be able to create a 'farm' on Mars. That is pretty neat.

[1] They designed it for spacecraft propulsion but it has the effect of a shield if installed in a ground station. http://earthweb.ess.washington.edu/space/M2P2/theory.html
Possibly, but then the minute I stop doubting myself, I become incompetent again.
I concur.

It's interesting that so many people who claim they understand what the software is doing don't appear to understand that proprietary software is always untrustworthy. Users have no real control over proprietary software, no matter how technical and willing they are to change their copy of the software.

Therefore it doesn't matter which apps are installed on a proprietary OS. The proprietary OS (or possibly some hardware beneath it) is untrustworthy. Every keystroke, drag/gesture, location change, camera/mic input, and more pass through proprietary software before they get to the ostensibly trustworthy app.
A theremin controlled Atari Punk?? That's fucking cool!! Did you do a write up about the project? If so, I'd love to read it.
The author explicitly states that he posted in order to corroborate what aspects of Jane Doe's description of the event that he could. The more people that provide evidence about a thing, the more likely others are to take it seriously. So there is everything to see here. (edited to fix verb tense)
This move is clearly about profits. The money being drained from these prisoners and their families goes to for-profit corporations. Have no doubt that those making the decision to implement this scheme are making profits, both directly and indirectly (Governor Cuomo among others). Kickbacks, campaign contributions, and payoffs (both now and in the future) are just a few of the ways. That's how business is done in New York (and elsewhere, but especially New York).

https://www.nytimes.com/2017/10/04/nyregion/corruption-trial...
There are unofficial stability badges[0] that I have seen some packages use. For example, xtend[1] is locked.

[0]: https://github.com/badges/stability-badges

[1]: https://www.npmjs.com/package/xtend
I think a similar process, but built off of ALPN rather than SNI, seems like the clear solution. Nobody at LE seems to have spoken about this or acknowledged it as a possible option yet though.
Would this water be drinkable if we inhabit Mars?
Tea if by sea, cha if by land: Why the world only has two words for tea
iOS 11 Security Guide [pdf]
1.5. Use a separate browser for sensitive sites, e.g. banks. (possibly, avoid storing these passwords if you can)

I feel this is pretty simple, way simpler than many other recommendations here, and has its benefits especially for people that tend to browse without paying too much attention.
You might think it's subjective, but it's more like people arguing over whether it's a 6 or a 9. There's only one right answer.

In this case, I'm trying to filter out the morons, and people who can't disagree and commit. The idiots who argue with me that we should use a different API (for the interview question) get rejected immediately. The actual programming question is pretty mindless and any competent software engineer should be able to figure it out in under 10 minutes.

But the bigger reason is that in an engineering situation, people who argue over subjective things often times just waste everybody's time. Certain decisions were made and there is really no good reason to go back and revisit them.
Good article, but I don't think it should be under Show HN - which is reserved for products or small utilities or playground etc
https://news.ycombinator.com/showhn.html

I guess blog posts are posted as it is without the show HN tag.
Don't forget this when you're contacted to work at a Thiel portfolio company. I always say "No" and provide an explanation for why I would never work at a company affiliated with him. Between Gawker and Palantir, he is disgusting.
But one could argue that there don't seem to be any difference in consequences for anyone involved, regardless of whether or not the lobster feels pain. It ends up dead and eaten, regardless.

Worrying about whether your food feels pain when you kill it is nothing more than human imagination and projection. The only lasting consequence is that you may or may not feel guilty about having caused pain to something that you have killed.
No, it’s not OK to be an ass because it’s on the Internet. Since I didn’t say that, I’d appreciate it if you didn’t take a jab at straw men. In fact, I didn’t say a word about the people being jerks - but about the practicalities of being, in effect, a celebrity.

When you’re on a platform serving an arbitrarily large number of people, even a vanishingly small percentage of them amount to more toxicity than a single recipient can handle. That’s the asymmetry of celebrity, and has nothing at all to do with whether the toxic behavior is acceptable or not. It’s a large numbers issue.

Dealing with toxic people is a guaranteed consequence of opening yourself up to communication with millions. Yes, it -is- the cost of celebrity, and always has been. It’s just the weird nature of the internet that the nature of “celebrity” has changed.
Traces of Old Egyptian in Eurasian Languages
MacBook users claim Apple overstates standby battery life and resists repairs
> I'm hesitant to take their word at face value

Can you document a lie they've told?

> as they've tried to mitigate the entire situation via PR already

Of course, any company would do the same. But did they lie?

> claim many users [who were affected] were not affected.

Can you back up this claim? They claim 147 million potentially affected...and you think that was under representing it?

> I also wanted to add that the software in question that was compromised was a free and open source solution[0], not some top-dollar security program.

The code in question is heavily used in the industry, from the highly respected Apache Foundation. I.E. it wasn't some college project they found on github. Many other companies were affected by this vulnerability...they just either did a better job of patching it or weren't sufficiently interesting targets to make it worth going after. Or didn't report it...

As far as the sophistication, you should read this: https://www.bloomberg.com/news/features/2017-09-29/the-equif...

Assuming you trust Bloomberg, they report that there was an initial intrusion that didn't get anywhere, but appeared to get handed off to a much more sophisticated team that did the real breach.

Re: Frank Abagnale...he's exactly right on one point. The breach was tracked back to an employee who failed to follow the procedures and left a system vulnerable. In my view, the real problem is that their procedures were brittle enough that one person failing to do their part was enough to leave them vulnerable. Not enough redundancy. Even that isn't enough for perfect security, but having multiple people required to certify something like this would greatly reduce the odds of a breach.

However, his claim of negligence is complete bunk and supposition on his part. Equifax followed their procedures...they received the vulnerability report, processed it, applied patches, and ran scans to verify. However, one employee failed to do as required, and the scans were faulty and they didn't know. How is that negligence? It's a broken process, for sure, and they didn't have the ability to detect that it had failed. But negligence would be if they knew about the vulnerability and ignored it, and it's simply not true.
Jeez I had a look at their share price. Tripled in 2 days and down 21% the next. It's price movement resembles a typical ponzi token. It is like the bubble thought pathogen has lept from token world to the traditional stock market. Who will be the last fool? Is it 1999?
Don't you dare talk about QALYs in the US! What are you, a democrat? (Sorry, I couldn't suggest you're Russian anymore, since that's apparently synonymous with Republicans. And Yuri Milner, of YC fame).
Great, I want this for when I am hammering Ctrl+Tab or Ctrl+Pageup/Down for the next/prev tab as well.
تحميل تطبيق موبي كورة بث مباشر Mobi Kora apk للاندرويد – تحميل تطبيقات بالعربي
Boston Buzzing with HQ2 Rumors
2017’s ICO Market Grew Nearly 100x from Q1 to Q4
That is why Cloud companies are similar to insurance companies. Little guys won't stand a chance against them.
The FB feed has been terrible since it changed from a chronological list. Doubt this will improve anything.
The way I read that, Skylake and newer don't see a performance hit from ibrs. So it's retpoline on older CPUs = no performance hit. Ibrs on newer CPUs + microcode update = no hit.

>Requires microcode update on current CPUs. Perf hit vs. retpolines on older CPUs
It does appear that was part of the development of Parchman, Angola and the like. However the cost of the prison-industrial complex dwarfs the economic value of a prisoner's labor.

There are other funds to be extracted of course, including exorbitant phone calls, "snack kits" and the like but that money goes to private corporations, not to the state (and to the kind of political donations that lead to the "three strikes" laws in California).
and this

http://www.kxl.com/boston-site-amazons-north-american-headqu...
He provided evidence that there was a party, but there's nothing wrong with parties. He didn't really provide evidence of anything else.

It's like trying to corroborate a report of a crime in San Francisco by helpfully saying "Yes! I've been to San Francisco, and it is by the bay."
Show HN: Find Security Issues with OWASP, NIST NVD, Docker, Jenkins, Ansible
Crypto-made Millionaires, how did you go about depositing into a bank account?
This is just something that happens when you put something out into the world. I had a project I worked on reviewed by a major newspaper as, "At best obscure, at worst ridiculous." That (temporarily) stung worse than "CUNT CUNT CUNT CUNT" ever would.
Huge Water Reserves Found All Over Mars
No need to go out in a blaze of glory. If you really disagree, you can just quietly find another job and resign too.
If we'd be playing billiards you'd be right. But in traffic the objects are driven by humans. And then speed becomes a factor.

Speed and impulse. Speed is a factor in the risk of collision (since our brain has limited real-time processing chops), and then when a collision happens, impulse is indeed an important consideration, together with another factor: protection level.

In a world with just those three factors, eg no traffic rules or speed limits, a car makes lots of accidents (because it's fast) and when they happen, a lot of energy and thus destruction are involved (because they're heavy), and also, while the car driver is protected by his/her big heavy steel box, the collision counterpart - a cyclist - might not be.

This asymmetry trinity is exactly why we should have (and have, to some extent) road rules and license regulations to level the playing field so that the outcome of the equation moves a bit in favour of the slow, light, and less well collision-insulated.

So if one endeavours to go inside a heavy (dangerous to others) steel box (that nicely protects you) that goes fast (you will have less time to react, and moreover, you "steal" other drivers attention because they constantly have to be on the lookout for "is there something fast coming? is there something fast coming?") - then yes, the onus is on this car driver to be responsible and submit to road rules, licensing, and heavy fines.

Then there's other non-collision factors that make current man-driven combustion engine cars look very silly indeed: they are noisy, pollute, take up a lot of space even when not moving (which is most of the time) and require expensive infrastructure. That leads us to ask ourselves - who on earth designed this system? And in the question belies the answer: no one did - there were coaches, we put a petrol engine in it, and went from there without any vision.
With today's technology and insight, given a blank slate (there are no roads, no cities, no nothing - just a can full of people that need to work and live and travel, to be poured out on the green fields where we will build our infra) , NO ONE would design a transportation system this silly.
Got it. I appreciate your point, though I don't fully agree about your characterization of f2p games and/or the developers thereof.
Congress Renews Warrantless Surveillance–And Makes It Even Worse
Is the Tesla Model 3 Worth It?
The problem with dns-01 is that it much of the time, it requires granting far too much privilege to the system that requests the certificate.

This is because the great majority of DNS hosts do not provide sufficiently granular permissions to only allow changes to _acme-challenge RRs.

e.g. Cloudflare, as far as I can tell, only gives you one API key which grants all access to all zones.

e.g. Most domain registrars who offer DNS hosting who provide an API grant access to all sorts of management functions, not just DNS zone changes.

e.g. Route53 IAM doesn't let you restrict to a single RR, you expose modifications to the entire zone.

I am really not comfortable giving my web application these kinds of powers.

TLS-SNI was useful because it was relatively protocol agnostic, so some of that flexibility is now gone.
Well, my point was also that:

If you don't start, you'll never finish.

It's logically obvious :) Sometimes getting started is half the battle, and sometimes we over estimate how much we need to think before we jump.
Zuckerberg announces Newsfeed change “less businesses, brands and media content”
Sounds like they're returning the feed to what it was back around 2007-2009 ish (when I first remember it). Or at least attempting to do so.
From the blog post:

> and is currently off by default while we test it and work out more kinks
That's basically the history of most delicacies.
The Woolwich Foot Tunnel Anomaly
People that want decentralized hosting. We use IPFS for OpenBazaar to distribute ecommerce listings that we don't want to be censorable. I think eBay and Etsy would continue to use AWS.
The very first sentence of Zuckerberg's FB post says:

> One of our big focus areas for 2018 is to make sure that the time we all spend on Facebook is time well spent.

"Time well spent" is also the name of an organization that is one of Facebook's strongest critics:

http://timewellspent.io

I wonder if the phrasing is deliberate.
The thing in question being dead isn't a lasting consequence? Or did you mean besides that?
I don't think this model uncovered anything new for lenders. Chains with little competition where people expect them do well.
This is the same kind of shit many software product do by loading their product at startup, their product starts instantaneously. They don't care that it takes up memory, slows startup times, bogs down the computer in general. Another way Mozilla is trying to cheat browser tests at the cost of users. They also sneakily delay loading of certain websites. While I despise these websites, I already have a way of dealing with them by blocking them altogether(no thanks to Mozilla) but Mozilla wants to cheat so that people will think Firefox is fast. Next, they'll load Firefox on startup but keep it hidden. When you "start" it, it appears instantly. Wow. Faster the Chrome. This is also the same kind of shit that pushes users to throw PCs away because it can't handle newer much more bloated software. Thanks for the extra bloat Mozilla, you bunch of slimy cheaters.
Ryan Sleevi of Google has discussed (specifically) such a possibility on the m.d.s.p group.

Today's update from Let's Encrypt did allude under "ACME Protocol Updates" that there might be further work done to the protocol to attempt to remediate the risks.

Probably they don't want to get specific because even if a concrete proposal were ready to begin coding today, it would take time to build the reference client, time to build server infrastructure, test, etc.

Then before that work would have any benefit to the various websites needing validation, it would require server software upgrades to facilitate those extensions or ALPN negotiations.

My utter speculation is that they're thinking it would likely take long enough that everyone will have to be off TLS-SNI-01 before its replacement becomes available.
That's what IPFS is. Filecoin is an extension on top of IPFS to allow people to pay to ensure their content stays available.
Project Zero discuss disclosure policy in some detail:

https://googleprojectzero.blogspot.co.nz/2015/02/feedback-an...
I'm not sure if you're being sarcastic or alluding to some other country; just saying I generally find Norwegians much more civil toward people whose views they disagree with.
> The FB feed has been terrible since it changed from a chronological list

Isn’t there still an option to rank chronologically? It just isn’t the default. In any case, the news feed has been a quantitative success in terms of engagement metrics.
Time.com takes 98 seconds to load in Chrome? Well that’s something.
It's a layer on top of IPFS. That's like saying a Wordpress plugin is riding on the coattails of Wordpress.
Kotlin: The Problem with null
Apparently, the first resource to be mined on Mars will be water ice.
Same with Instagram, it's a major reason why I no longer use the service.
> Can someone clear it up for me.

Nobody can clear it up for you, except possibly someone who has knowledge of the top secret programs run by all the U.S. government agencies, by agencies of other governments, by commercial businesses, and possibly by sophisticated criminal organizations.

Regarding only U.S. government surveillance, even the most informed citizen's knowledge is based on years-old incomplete reports of a subset of programs; nobody knows what was left out and what has changed, but we know that the NSA alone has maybe 40,000 employees and a $10 billion budget; that pays for a lot of surveillance. Remember that many other governments and businesses share their surveillance with the U.S.; if what you do is picked up by one, others may know too.

In other words, assume that anything you do online, or on a computer or phone which collects user data, is swept up.
a) you can disable it via the preference browser.tabs.remote.warmup.enabled
b) some users will like this feature. they aren't cheating at making it faster, it actually is faster for all intents and purposes.
It will "maximize eyeballs", which is the desired result for them.
> It's easy to understand how we got here.

and also easy to explain: the quest for ad revenue
The DNS providers need to up their API game.

The ISC BIND DNS server allows cryptographic authentication for updates with ACLs that let you get as granular as only being able to add/delete TXT records within this branch of zone X.

In the alternative, you can place static CNAME records in your real DNS zone that would refer out the _acme_validation queries to another zone entirely. Run that zone with entirely different credentials.
What's the dev stack on this?
Nobel archives show Graham Greene might have won 1967 prize
I recommend the latest episode of Sam Harris' podcast Waking Up.
It's a 3 hour discussion about consciousness between him and Anil Seth, it's quite good and probably warrants multiple playbacks.
That is indeed awesome but I would argue that it also means we would need to undertake a much more thorough search to find out of mars is indeed a dead planet. Once we land a large concentration of biological matter there -- we won't have an opportunity to look again without dealing with massive potential for cross-planetary contamination.

Of course, it's a trade off and it's great news if we ever had to undertake a crash program to get at least a few humans and/or earth originated genetic material off planet with any hope of it surviving without extensive terraforming.
You’re being facetious, but if there’s something physical worth exporting from Mars it’s shit like Martian whiskey.
I had 35 HVM instances that didn’t have forced downtime. There are other reasons a machine could need to be brought out of service.
Maybe not directly - who knows what's dissolved in there.
> I suppose that once a page includes third-party scripts, it already gives them the key to its kingdom, like sniffing anything from DOM or altering it in arbitrary ways

doesn't same origin policy prevent this?
Hey there. I certainly don't recall this exchange, and it sounds rather out of character for me. I have consulted for Disney on and off for a decade and was the inaugural artist in residence for the Blue Sky and R&D groups at WDI. Today my wife is the head of Studiolab at WDS (my work on the Ghost Post project last year helped WDI R&D win a Thea, and they were kind enough to credit the work to me).

I literally can't imagine having said these things (at that particular Siggraph I spent several hours chatting with the WDI R&D people who were on the committee and had booked me in, and who were kind enough to give me a bunch of laser-cut HM merch they made just for me) and I have never to my recollection been deliberately rude to someone from Disney (likewise I try to take real pains to be kind to people who do me the honor of coming up for a book signing).

But if anything I said came across as anything like this, I apologize unreservedly. I can only imagine that some kind of horribly botched joke came out very wrong indeed and I am dismayed to learn I made such a poor impression. I hope to run into you at some future event and make a better one.

Thanks,

Cory
So they will finally embed Social Fixer into the website itself?
You get told to "hang yourself" and told you should "die screaming" or just have someone yelling "cunt cunt cunt cunt cunt" at you multiple times a week?

I used to work for a hedge fund. Mostly people just didn't understand it and were skeptical, but phrased it in a way that gave me an out: "I don't understand how it provides any value to society," or things like that. Nobody ever harassed me online with just "cunt cunt cunt cunt cunt".
Right, your cited sources would actually be a more sound counterpoint than your original comment. Maybe it was just a spur of the moment thing. I guess my point is that if you want to get across the point that Huawei's comments are ironic, then attacking from the angle that there's good reason for AT&T to pull out of the deal and for the US govt to be suspicious would be much more effective.

The Kid A vs Kid B isn't really the situation here as it's the CEO of a company from country A complaining about country B influencing the decisions of a company from country B. That's why injected the bullying older brothers to help with the analogy. If Huawei actually screwed over AT&T in the past and now AT&T pulls out of a deal with Huawei and Huawei complains, then the Kids A/B bullying each other would be an accurate analogy.

Incidentally I've seen the Chinese government basically hype up problems or impropriety of foreign companies (e.g. Apple) in the past in order to bully them in to compliance. I'm not saying that the US government is doing the same thing to Huawei here, but the cynic in me also isn't ruling that angle out either :/
I've unfollowed everyone. My feed only shows past memories. I love my feed. I highly recommend it.
Josh Marshall just now: "Announcement to publishers who reshaped business models around Facebook. Bye."

https://twitter.com/joshtpm/status/951615904760172545
What it would take to drink water on Mars --
https://www.huffingtonpost.com/entry/drink-water-mars_us_561...