skysight-inc/HackerNews huggingface dataset:
I do not blame Google, they do what they do for their own benefit. However, when I do get to solve a never ending captcha in a mobile app, while being logged with a user account, while buying a cinema ticket—I get really pissed. Not at Google, but at whoever thought that putting a captcha there was a good idea.
Anyone has good pointers on DNS over DTLS (draft RFC 8094) vs DNS over TLS (RFC 7858) vs DNS over HTTPS (this draft) ? And if you could throw in DNSSEC in the mix, that would be helpful.
It kind of makes sense. The total behavior is a combination of impulse and regulation. People know themselves and tend to behave (self-regulate) in a learned routine, hence regulate most of their impulses to... what probably amounts to a sort of death. [UPDATED] The insightful part about this is that this goes both ways - that your newly created genius is also unusually dangerous.

Through such an accident, you might lose some or all of your impulse control and logically end up in a completely new configuration, giving way to your (formerly suppressed) impulses and potential. It also means that you need to relearn other aspects of your impulse control too - which was sufficiently shown on Muybridge.
If TWiT wins do they have to take over Twitter? Seems like a sneaky way for Twitter to get a full-time CEO.
Guitar amp project using Nutube Thermionic Valve
Securitize Citizenship
You've clearly never lived in pedestrian friendly environment. The nearest transit spot in areas with good public transport is a 5 min walk max. The nearest shop or doctors/dentist or bar/restaurant is 10-15min max and as another poster said you can easily use a taxi in cases of illness.

Also on the point of cost, cars are incredibly expensive, especially in the US where everyone seems to have massive vehicles. If you live without one, in a pedestrian friendly area you'd find the costs of using a bus or subway would be a small fraction of your car costs.
blogspam, dupe: https://news.ycombinator.com/item?id=16151293
Not quite the same, but QUIC is close to this description description, so it might be higher than initially expected?

From 2016: https://www.bizety.com/2016/01/26/half-of-chrome-to-google-t...
Do they get returns in Bitcoins too? E.g. "Get 5% more BTC every month"? That would be funny in "Geezus, you can't be that stupid!" kinda way.
Investor Bill Miller Commits $75M to Johns Hopkins Philosophy Department
This is true, but you can also petition your local authorities for better public transport, bike lanes etc. You can campaign against urban sprawl. One of the issues at the moment is complete lack of awareness of any alternative to car centric urban planning.
Device that lets you communicate faster than light
Yep, that's how I understand the word “performant” as well. A car that accelerates from 0-100 kph in under 3 seconds would be ”performant”. A car is “efficient” if it burns less than 4 liters of gasoline per 100 kilometers.
Those people who build oil pipelines should be able to sue whoever sold them the Linux distribution (probably Red Hat or IBM) which was vulnerable to that weird keepalive message.

In that case, a judge (and perhaps a jury) could hear how Red Hat did everything they possibly could to protect from the vulnerability as evidenced by their ISO QA processes and the fact that everyone else was vulnerable to the same "bug" … or from the other side how Microsoft and Apple weren't at-risk, so Red Hat should've caught it.

C[I]SOs would want to be patched, because ISO recommends they would be patched.

> You can't really fault the people responsible when many companies simply require good damage control over actual security in order to be successful.

Which is why I propose legislation, so "good damage control" wouldn't be enough.

You better believe that oil company would want some evidence of testing and proper specifications, and to have them reviewed by a couple independent parties if the government could take them for a percent of gross revenue for the security vulnerabilities alone.
It was designed to be as magical as possible, so that programmers that work
with network don't need to learn how to configure networking (which is a dumb
idea on its own). I don't think there's a good description anywhere.
I wonder how much more momentum this gives to https://lbry.io which is a sort of p2p YouTube. There's no good reason that, in the long run, a single centralized entity should control so much video distribution.
> After resolving the IP address over secure connection HTTPS still sends the host name unencrypted

Correct me if I'm wrong, but I'm pretty sure the host name is generally only sent in an HTTP header, which should be encrypted over HTTPS.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Ho...
But in the Julian calender, it was. So this omitted leap day shifted the Swedish calender out of sync with the Julian calender.
I don't necessarily think one needs to replace youtube by brute force. It mostly offers cheap disposable entertainment and that's not so hard to come by. Noted I'm probably not their main target audience.
No, the returns are in the token that nobody else uses.
7000 transactions per second is a lot of of data. If you're keeping history then you cannot store 4200000 transactions per 10 minutes in less than a 1GB block. The problem isn't the blocksize. The problem is that traditional blockchains grow indefinitively and keep onchain data forever.
Comodo SSL Store Review: Read What Our Experts Have to Say
The Futility of Humility
You are right - it is an MVP, and the goal is to choose a direction. In fact, I am still not sure in which direction to go:

* JavaScript data processing framework for in-browser data processing

* Python framework like pandas

* Big data processing framework like Spark

* Database management system

* Data integration system like typical ETL and BI

* Stream analytics like Kafka Streams

* IoT (light weigh) stream processing engine

* Something else?

I would be very thankful for any suggestion from people who know the market and (acute) needs of the customers. What is the best niche for this kind of technology?
Youtube absolutely should care. The "long tail" is one of Youtube's competitive advantages. Sure, each individual video in the "long tail" may only have a couple thousand views, but collectively as a whole the "long tail" is the reason why you instinctively check YouTube over any other site when looking for:

"how to replace xx on 1998 honda",

"2002 winter olympics highlights",

"insert 1980s tv show name theme song"
cars are incredibly expensive, especially in the US where everyone seems to have massive vehicles.

Actually cars are dirt cheap in the US compared to Europe. Taxes are low, second hand cars can be had for basically nothing, and gas is cheap.
True, Microsoft does it about every 2-3 OS versions, however this one is mobile/store focused so it might go 1 or 2 more this round.
Even with a background task your app can be terminated by the system without further notice after the suspend event (e.g. when the user powers off the device). There's no orderly fashion in which an app can be terminated and save its data.
No, in order to multi-host SSL sites the host name has to be sent first in order for the correct certificate to be presented.

https://en.wikipedia.org/wiki/Server_Name_Indication
Why not gold? It's doing fine. When do you expect that bubble will burst?
I've been through the survey and it is quite bad, the questions are purely marketing centered, trying to figure out the perceived image people have of the software based of a single screenshot.

Where are the question about usability and practicality ?

Said screenshots are from much different screen resolution so one is cluttered[1] and the other is illegible[2].

The whole survey gives the idea that the current design is bad and the new is better. I mean when you get asked to rate an old thing vs a new one on a scale between outdated and modern.

[1]: https://images.typeform.com/images/7E2EfHaFjYdy/image/defaul...
[2]: https://images.typeform.com/images/7QpVmjRyBAU4/image/defaul...
'performs more [efficiently|accuratley]' would be proper english (not that i speak it well.... :D).

webster says:

"performant"

The word you've entered isn't in the dictionary. Click on a spelling suggestion below or try again using the search bar above.

preformant performance performing performances performable preformants perforate conformant perform formant performed informant performer perforata performers performs preformat
Poisons, Poisoning, and Poisoners in Rome (Medicina Antiqua)
Thanks a lot!

It was awesome to see how Graphcool enabled so many frontend developers to get started with backend development.

And it has been even more exciting to see these same developers move to a combination of Prisma and GraphQL bindings with relative ease.

The GraphQL ecosystem is maturing to a point where the tools are now easy enough to be used by small dev shops and powerful enough to be used by large enterprises. There was an episode on GraphQL Radio (https://graphqlradio.com/) diving into how IBM build their own library to standardise schema composition. This is a fairly advanced concept, but with GraphQL binding this is now part of day-to-day development for thousands of developers.

To address the money part - Enterprise and on-premise is certainly a thing. We get a lot of requests for custom setups. If you are interested to explore this option, please get in touch!
Found: New Android malware with never-before-seen spying capabilities
I noticed that too, but I don't think they're actually cheating, they're just incompetent and have no clue what they are doing.

Hanlon's razor.
Would you kindly bring forth to attention which part actually says that communication is faster than light?
Well, unencrypted data by nature are vulnerable to tamper. Say change the DNS answer to point the client to another IP address in this case.

Of course DNS over HTTPS is not a sliver bullet that will ensure your privacy, instead, it's one step towards better security and thus (hopefully) privacy.
> The key bit seems to be that a compiler optimization that converts an explicit conditional to branchless code is doing the software-level moral equivalent of speculative execution (because it executes both sides of a conditional, and then throws one side out).

Isn't speculative execution only a potential problem when the speculative executer has access to memory that the code in question is not supposed to have access to?

I.e. compiler-speculative execution, as it were, is not a problem, because the compiler can't reveal anything it doesn't know about (private memory), whereas a CPU can reveal information about private memory because it has access to it.
Are you talking about leaking names through TLS?

As I understand it, this would fix leaking during DNS resolution, fixing any leaks from TLS is a separate issue.
And yes, when that's fixed, you'll still be leaking destination IP.

But if not one step at time, how is it going to get better? :)
The total value of all bitcoins could still be $10 trillion or $100 billion.
I'm not aware of an instance where browsers were attacked via that vector, but for example Ruby On Rails was vulnerable to attacks via the JSON Parser: https://www.exploit-db.com/exploits/24434/ (many other frameworks too, I'm just picking this one because I'm familiar with it)
Why we should convince our users to update their browsers – it’s a win-win
efficiency = performance / resources

Efficient has connotations of economy, of optimal use of resources but with a hint of parsimony - another way to get efficiency is to reduce the denominator.

Performant emphasises the numerator much more.
people invented other security things inside of dns protocol to avoid having the added bandwidth. i dont think it's reasonable to say that everyone can handle the increased load nowadays.

However, i've been thinking of this, for enterprise, you could build a dns server which servers over TLS connections, and then put a local dns proxy on clients which receives on 127.0.0.1 and sends out tls to the custom dns server.
That way any local network connections would be encrypted to passive listeners on the network.

recursive queries would go onto the internet plaintext to 'normal' dns servers.
Are you sure that's not a google's apps problem but a thunderbird one ?

See Cardav and Caldav.
> I am not a robot. I am not a competitor scraping your pages or doing anything else against your ToS. I am just an intelligent human with over two decades of Internet searching experience enthusiastically using your service for the exact purpose it claims to do: to find something on the Internet.

Maybe it’s time to stop using Google and use another search engine which actually treat you like a human being, like DuckDuckGo.
I would very much recommend against this - off-the-shelf core networks are shit. Look up "SS7 vulnerabilities" on Google to see what I mean... and yeah your LTE core network would be based on that.

LTE itself is good but you'd need to build a proper core network for it - at the moment none of the off-the-shelf gear you can buy is any good.
Saudi prince attacked by group of men after argument in London nightclub
The algorithm doesn't perform more efficiently or accurately, though - it's less efficient (it uses more resources) and it should be the same accuracy (or we're comparing apples with oranges).
don't you think SNI leaks will get fixed eventually?
The arrow integration and persistence and connecting this to jdbc would be an MVP to me that would at least allow folks to imitate pandas. While you do have new ideas here if folks can express these ideas in terms of ways they're familiar with that would likely help.

Maybe you could use calcite[1] as an engine or as a base kind of like arrow.

If you do python, maybe look in pyjnius[2].

There's a lot of things that already have connectors. I would continue along your MVP route allowing folks to do basic things with your framework first then you can improve it as you go. SQL databases aren't a bad initial target. Most folks can do SQL.

[1]: https://calcite.apache.org/
[2]: https://github.com/kivy/pyjnius
Mailbird 2018 Activator and Crack Free Download
I think you're missing the fact that they already DO split it up. They have a premium advertising tier for YouTube called Google Preferred.

https://www.thinkwithgoogle.com/products/google-preferred/

> Google Preferred aggregates YouTube's top content into easy-to-buy packages for brand advertisers. Brands access the top 5% of content on YouTube and receive the measurement results they need to maximize the impact of their campaigns.
I agree, before redesigning the UI they should fix the functionality.
How the UK’s ‘Big Four Banks’ Perform for Customer Service on Twitter
Your precise point is addressed in the blog post...
Please see existing answer to this question as well as the hn thread from a few days ago :-)
> The rates for the shit package would be so bad that current YouTube revenue starts to look like winning the lottery.

Still, getting paid something is better than getting paid nothing, right?
Interesting to note that even this post apparently is not indexed in Google: Do the search "site:https://news.ycombinator.com "rackless ruth"" and find 0.
As a frequent poster of C answers on Stack Overflow, this is a succinct way of expressing the realities of programming in a language with undefined behavior ("UB").

Many newcomers to C seem to think that just because they wrote something, and it compiled, and it had the expected output, they wrote a correct program. But since there can be UB which results in any (hence undefined) behavior, including whatever the person expected, that really isn't true. Unfortunately that seems to go against many people's expectations/intuition. :/
Even if they add a lot collectively, it's logical to pay individuals according to their individual impact. Collectively they still get more (just not as much more as when they were being subsidised).

However, in the long-run the challenge is enabling the transition from small to big. Doing one without the other would be quite short-term thinking from YouTube - they would massively disincentivise the new users who become next year's big channels. I haven't seen many platforms both care and execute on this.
Facebook is already a legitimate YouTube contender. Where have you been?
I really like Typescript. It's really well designed and gets typing right IMHO: Strong enough to help you where it matters, flexible enough to get out of the way where it doesn't.

Also, type definition hell is definitely a thing. Trying to match types to code often makes me feel like trying to match subtitles to a movie. Off to podnapisi, pick what looks like the best subtitles, fire up VLC, oh shoot, subtitles are ten seconds off, timeshift subtitles to match, watch movie until we reach the first director's cut scene, now subtitles are off again and wife in open rebellion. Which is probably the main reason that we subscribe to Netflix these days instead of trying to bootleg our way through. I'm digressing.

Anyway, it seems to me that after they started adding typescript typings to npm, everything has become more sane. At least for the more popular libraries, I rarely run into typing hell anymore. Less popular libraries, yeah, sometimes there is no typing, or sometimes the typing may still be off, but then I just give up and use "any". And these cases seem increasingly rare.
No. All actors currently involved with the web are ideologically opposed to backwards incompatible changes, and, as a result, they'd never make a change that prevents a browser from accessing a legacy site.

As result, SNI is here to stay.
I think Meltdown can be best characterised as being the same process that leaks and retrieves the information. The bug being that a process is able to leak data into the micro-architectural state that it isn't allowed to read directly.
How is the investors' risk mentality over there in Canada? I don't think the problem is profitability but simply money: US startups/companies have easier access to money as investors are willing to take more risks.

I see the same effect here in Europe, companies have to run more "tightly" and carefully because money is not easy to come, not many will have a deep line of credit if their companies' life depend on money, getting new rounds of investment is expensive so you have to do with the money you have now and the little revenue you are getting.
Jesus, they've printed 250 million of them in the last three days!
I really hope this doesn't catch on widely. It should be a tool for use where censorship issues can't be solved politically.

Otherwise, why even have protocols at all? Just say the only protocol is HTTP. IP, etc. are just an HTTP implementation detail.
Since this is a mozilla project it should buy a proprietary service for an undisclosed amount of money and force it down the throat of everybody with no option to self host (pocket).

And this should happen to avoid using an already available open source project that works well and you can self host (wallabag).
I'm willing to wager none at all.
One of my favourites is C# Digest.

https://csharpdigest.net/

Five links every week, all in some way useful or informative for a .NET developer.
Yes, because that Lyft car you are using to get around does not pollute a bit.
this is the programming language for the touchscreen generation, every language until now was born from keyboard use. brillant.

I've wanted to see any language have an ast represented visually, then when you save changed to that visual representation it would save back to the original file format, this is very close to what I was thinking of.
The popularity of Microsoft’s Surface is the least realistic thing on TV
The hard part is reaching a committed niche in the user base, whether paying customer or audience kinds. Software tools generalize from and for niche sponsors with more specific needs. Software growth is then the "consensual delusion" of feature set and paying constituency accretion. Platform heterogeneity "churn" offers both big risks and big opportunities. Never a dull moment in software development.
> 100% proven to combat all symptoms caused by government released chemtrails

Can't argue with their claims either, the mints really do combat all the symptoms caused by government released chemtrails.
Pairing AI with Humans Has Made Glassdoor a Success Story in the War on Trolls
Vimeo have quite a nicely diversified business as well. I was surprised to see they even offer a turnkey SVOD solution - https://ott.vimeo.com/
I hear this "no real use" a lot, but I don't think it's valid. You can put 90% of your money in bitcoin and 10% in stocks. Then you have a hybrid investment where 10% of it has real use, and the other 90% is fun investment money with almost the same returns as being 100% bitcoin. Just like with gold, if Fort Knox/etc. were all sold off and used to make computer parts and jewelry, the value of gold would collapse to some fraction of what it is now.
Revolut launches geolocation based Travel Insurance
It's only non issue if your time is non issue.
One has to be a coder, able to deal with the current state of code and the many changes to come, while having a load of free time to maintain the fork.

I mean my 90 years old grandma is a decade long thunderbird user and she absolutely unable to make thunderbird the way she wants. She is 100% dependent on mozilla's good will.
Top 15 Online Collaboration Tools for Virtual Teams
Thanks! Your experience match the feedback we are getting from a lot of people.

With Prisma we are focusing on the core technology and exposing as much raw database power as possible. We will implement native PostgreSQL support in the future to take advantage of the superior json handling
But at this point all you're saying is "I can't think of a way of testing performance".
Collecting insensitive data and wanting users' email addresses are two different things.
Because the state can create more currency, change interest rates and various other things that cannot be done with Bitcoin. This is by design and is widely celebrated by the community.

I'm surprised you don't know this.
Every time I read a API that uses signed/authenticated requests (AWS, Let's Encrypt ACME) I wonder exactly the same thing - why is this needed in the first place? If TLS guarantees lack of replays it seems to me like signed requests just protect their own complex infrastructure from reusing the same request twice...
> I wish google had never bought youtube... I knew they would ruin it eventually.

If Google hadn't bought YouTube, YouTube would no longer exist.
I'm not a CPU architect, and I'd agree with you that Spectre variant 2 should be fixed by CPU designs, simply because software is helpless against it. Luckily, fixing it shouldn't be too expensive, it just requires tagging the BTB with the trust zone.

But Spectre variant 1 is really a consequence of the CPU working correctly. For a large number of branches, perhaps most, we want loads to proceed during speculative execution. This is because the code accesess the same or closely related data on both sides of the branch, so priming the caches during speculation is very valuable even when the branch is mispredicted.

I remember reading a study of different binary search implementations which is probably the clearest example of this: when the data is laid out in a heap layout (with child nodes next to each other in an array) the branchy variant of the code performs better than the branchless variant due to this cache priming effect.

What CPU designers could and should probably help with is providing instructions to cheaply mark the (comparatively few!) cases where this speculative execution behaviour leaks secret information.
While it is a good idea to establish your own site that you control, I think most YouTubers benefit the most from the built-in marketing that YouTube provides. It's hard work getting your audience off of YouTube the destination and onto your website.
Which type of software you work with that exists solely on Mac and no other platform?