skysight-inc/HackerNews huggingface dataset:
> I think there's a huge difference between "take an existing system design, and declare it open" and "design a system in the open". This article isn't suggesting Intel make x86 open to all, for example. You get a completely different design when something is designed behind closed doors as a black-box product, versus designed in the open.

I don't - I believe there are an insufficient number subject matter experts conversant enough in processor design to provide the depth of auditing needed.

I'm not saying openness is good or bad (its usually good) just that its not a panacea here.
But that synthesis is complex, nuanced, and requires a lot of time to think about.

You can think of Jordan Peterson as going just a bit farther than Sam Harris, when Sam Harris says that we should learn from religion by practicing things like meditation. Jordan Peterson comes from the position that things like myth and religion co-evolved with human beings and human society. Even if the literal epistemology of religion and myth is dead wrong on the conscious/rational/scientific level, it still contains insights into the nature of human beings' self regulation because of that co-evolution. Often, these things operate at below the level of consciousness, as we would expect such things to, given that they co-evolved with us from a time before sentient consciousness.
You're being pedantic. I'm characterizing what he's saying using colorful language of my own, but the principles are the same. He objects to gender pronoun changes because he sees them as postmodernism, he believes postmodernism derives from Marxism, and he sees Marxism as authoritarian oppression. So in Peterson's worldview, the difference between being asked to use ze and zim by someone, and sending Solzhenitsyn to a Siberian death camp, is merely a matter of degree, not of kind.

And I'm quite sure he'd agree with my assessment here.
Heh. I feel that reality is just that beautiful, never-ending fractal of annoyance...
That's an interesting one.

Original discovery was by Florian Weimer. Many of the Shellshock family bugs were discovered[ß] (IIRC) by Michal Zalewski, after David Wheeler announced that bash was likely infested with a whole bunch of additional parser bugs.[0] MZ is Employed by Google.

Now, I think I recall MZ sharing at least some of the details of shellshock family bugs on his blog, so whether it goes under Google's umbrella or not might be subject to interpretation.

I believe it's safe to say that the original bug was not discovered by Google, but it's subsequent manifestations, after the first round of fixes, were.

0: https://en.wikipedia.org/wiki/Shellshock_(software_bug)

ß: can you say you "discovered" a bug if you are hunting on an already ripe ground with a fuzzer?
Latvia and Slovakia entered after Poland, for instance. Won't check the rest.

And, anyways, does OECD membership really account for something? Who is not a OECD member nowdays? African countries? Well, I believe it isn't a surprise for you there aren't many known thousand-year-old businesses there (there hardly is a "thousand-year-old history" at all, same as South America), and this is not entirely related to a country doing well right now. I bet you don't consider Latvia currently doing better than Arab Emirates, for example.

Basically, most of these old businesses are either in Europe or Japan. I'm only surprised that China, SK and Russia are not on the list, but you can find explanations for that. And whats left are, basically, "countries w/o history".

So, no, I don't believe you could find a causal relationship here, unless you are basically making it up.
The US is the most expensive nation in which to have a baby
Schneider APT attack
My "Little Snitch *" processes have used a total of 10 minutes of CPU time since my last reboot. I'd ask their support about this.
yup. I can code but I don't know how conducive TB is for people to get started helping out.
He is not radical but he is outspoken and does not let himself be cowed. This antagonises other outspoken people who have been able to silence a large part of their opposition by labelling them as racist, insert-whatever-identity-phobe, nazi and such. When they tried the same with Peterson by calling him a 'transphobe' their attempts spectacularly backfired in that they drew the attention of the general public to Peterson which quickly gave him a much larger following than he normally would have had.
The aim is communication. When the aim is very precise communication between knowledgeable parties, a technical language is reasonable. Expecting people to learn that language before they're allowed to have even a basic discussion is a recipe for existing in your own irrelevant bubble.

It is human tendency to think that the things that you know should be known by everyone, and the things you don't know are probably not worth knowing.

On IPA specifically, it can often be overspecified, particularly with regard to vowel sounds and vowel position in the mouth. It isn't clear when a vowel position is determined by accent or by the word, or whether a vowel becoming a shewa is idiomatic. By relating to similar sounding lexemes (or obvious parts thereof), vernacular pronunciation guides have fewer problems in that regard. IPA is easy to learn a little of, but it's a deep deep well to throw people down when all they want is a glass of water.
A fun dinner conversation is to ask people how we know what the crime rate is. "Crime is down." they say. Is it?

The crime rate is hinged on when a crime is detected. If I'm forgetful and you snag one of my power bricks I might just think I misplaced it or it got thrown away. If you've been embezzling and I can't tell yet I can't report it.

Crimes are being committed whether they get reported or not. We count on them having personality flaws like poor judgement and thrill seeking assuming they will eventually be caught. But if there are people who can go into a casino once a year and spend exactly $100, why can't there be criminals who steal $100 once a year and never get caught?
>>Wow, this web page looks like it hasn't been updated since 1439

Can't be, internet wasn't created until the 17th century.

On the other hand, all the relevant info is there. Maybe looking "old" is by design, being a very old hotel and all?
Some economists would argue that "zillions of IOUs" is basically the precursor to currency/money. Then you just need a consistent unit, and that ability to trade/transact (which is a solved problem).

> Graeber proposes that money as a unit of account was invented the moment when the unquantifiable obligation "I owe you one" transformed into the quantifiable notion of "I owe you one unit of something". In this view, money emerged first as credit and only later acquired the functions of a medium of exchange and a store of value. [1]

[1] https://en.wikipedia.org/wiki/History_of_money
On the topic of talent-heavy activities though: I think it's important to point out that you should only consider talent when you are trying to make a living doing it, because competition is high and thus you're likely going to get out-competed by people who have innate advantages.

But if you're just doing it for fun and not to earn a living, you can actually get quite good at any of them with focused training. You might not get professional level good, but you can become objectively quite skilled.
That was quick ;)

https://twitter.com/rrhoover/status/950734760975872000

@rrhoover Jan 9
"Request for product from @spotify: A playlist of top 40 hits from the day you were born, on your birthday"
Ask HN: Has anyone else been scammed by MoviePass?
I signed up for MoviePass the day their new plan hit the news in September and was genuinely excited to try the product. I waited weeks for a card but none arrived; I assumed it was due to the level of interest their new plan had generated.

I noticed I had been charged in October without ever having received a card which seemed odd as the sign up said there would be no charge and the account wouldn't begin billing until my card had been received and activated.

I contacted them and considered cancelling, but at this point they said I would not be billed until after I had used up the month they had charged me for and a new card would be sent.

Another month passes, no card, and I was charged again. At this point I contacted them and asked for my account to be cancelled, all charges refunded, and that I had no desire to use their service after these issues and customer service lies. Additionally I let them know I would be travelling for a month so I hoped they could handle it from there.

Now we are at today. I returned home from my trip to find 2 cards in my mail and yet another charge. I believe I finally have gotten my account cancelled now, however the customer service representatives seem to be completely ignoring that they billed my for 4 months of service I never was able to use because the card never arrived.

Does anyone have a working email address with someone in Customer Service who can help with this? I can't imagine I am the only person who has had this issue.
> In other words, it won't stop malicious Javascript running in your browser from making an outbound connection, which is the most common way for malware to do that.

This might be possible, if you start off with deny-all as the default and then start manually adding exceptions as you browse.
Prior to this, I had no clue whatsoever about wet plate photography, I did not know it existed, and I did not know the name.

So to me the headline was very confusing - when I hear plate, I think of tableware first. The association I had was like an art exhibit of wet tableware.

I have to admit I am a little disappointed that the actual content of the article was far less weird than I had expected.
Wait, you mean having healthy, happy workers might be better for your company? How dare you bring up mere facts against The Narrative?
I'm not sure that nano-device research is best served by imitating human-scale devices. Better to produce a filter fabric that sorts atoms for example, than a 'robot arm' to carry imaginary parcels?
"This is just a naked assertion. This kind of testing happens in many places and industries, and many people seem to believe it's useful. Maybe they're all deluded, but that's precisely why I'm calling it an extraordinary claim."

Provide evidence that coding interviews does what you want it to do. Saying that "other people do it, and therefore it must work" is cargo-cult analysis.

I'm trying not to be a jerk here, but I already know the answer: there's no evidence. People do this stuff for exactly the same reason you're biased toward doing it -- because someone else with a big name did it, and nobody goes wrong by doing what Google does!

"Do you really think it is obvious, prima facie, that asking people to demonstrate some skills on their feet, or to do a short sample of work for you, tells you nothing about their ability to do good work?"

I think it tells you something about that person's ability to do the skill you've tested. Sort of. Under extreme pressure.

Does asking people to code on a whiteboard tell you how they're going to work with their peers, communicate clearly and efficiently, document their code, focus on business goals, and generally not be an asshole (all of which are far more important skills for success in a group)? No.

Even as far as coding ability goes, I've many, many "brilliant programmers" who eat leetcode problems for breakfast but can't be trusted to write clean code on their own. It's a borderline useless signal.
> France

Two total wars (WW1 and WW2, plus numerous other invasions and revolutions).

> the UK,

has 10 of the list, not sure how many you're expecting

> Norway,

Population only 5 million. Considerable famine in 1690s.

> Albania

Italian occupation in WW2.

> India

British occupation

> Syria

French then British occupation, then Ba'ath, with coups.

> and a heck of a lot of other places with thousands of years of history.

Mostly lots of invasions. Britain hasn't been invaded since 1066. Japan has had plenty of wars but no serious land occupation since the Mongols.
Their presence is potentially useful but their driving is not. Each person who takes an empty seat on a bus into the city instead of driving is just as useful to people inside the city without causing traffic.
A game made in 2 hours: An exercise in finishing projects
They could use Julia's "resurrected LLVM "C Backend"" and compile down to C, and then let developers use existing tools to get running on their MCU. Would probably mess with the debugging experience though.
I'm a civil libertarian myself. It makes me uncomfortable. But people seem hell-bent on missing my point in order to correct me for God forbid equating coercion and oppression.

My actual godddamned POINT is that, whatever the logical merits of Peterson's position coming from him, the practical effect is for a hundred thousand red-pill assholes to share excerpted clips around, and thinking it means that a wise philosopher agrees with their joy in being mean to people over their gender identity.
Facebook will now ask users to rank news organizations they trust
That represents an even bigger devotion to car ownership that does an insistence on commuting by car! These are people for whom car ownership is totally unnecessary, but who are willing to put up with enormous costs and hassles in order to keep a car available.
> Why do so many fascists and racists like him then?

Because they aren't very bright and also don’t pay attention when he tell them how stupid their ideology is?
Agreed, I thought it was kind of cool. I work in UX, so some aspects bother me - but it probably serves it's purpose well.
As someone who used to brew beer, and probably drank too much, I can definitively say it doesn't map well period.

I posit the reuse of nouns from apt would have greatly reduced confusion.
Facebook to Start Ranking News Sources Based on Trustworthiness
Oink from Milk was an app that sort of did that.
Heres a video demo:
https://www.youtube.com/watch?v=5xADESocujo

They unfortunately didn't last to long. Maybe they were to early?
ARM also supports both.
I live in a pretty large major city, and I recall that during Thanksgiving my responsibility was to get vanilla ice cream to complement the dessert. I was like, no biggie it's the most common boring flavor, shouldn't be hard to find.

Every single supermarket I went to was out of vanilla ice cream.
How about the real pictures from customers of bare shelves? Those should count just as much, or are they disgruntled as well?
Facebook to Rank News Sources by Quality to Battle Misinformation
What you're saying is only true for items fulfilled by Amazon. Not all Marketplace items sold on Amazon are fulfilled by Amazon. On those items, especially on items sold by Chinese sellers, you won't be charged taxes, and the item is shipped directly to you. It's a lot like using eBay + Paypal. The packaging will have the seller's name (not Amazon) and your name.
users prefer your site to work the same way as all the other sites

And yet, the last one contradictory reads: "[…]when multiple similar objects are present, the one that differs from the rest is most likely to be remembered." There are no such things as 'rules' in this field. People don't realize how wishy-washy this is and because of that, they throw around some arbitrary rules and then write about it on Medium in a desperate attempt to show authority and demonstrate expertize in their line of work. I could whip out ten other rules that are more applicable and closer to the digital sphere, starting with the notion of 'functionality' instead of some overly complicated and obtuse lingo. In fact, the very first slide has a very weird syntax to it.
The UK has never seen pubs as being worthy of preservation until more recently. If you look at the list that's what survives centuries.

We'd do quite well if the list was 'stately homes'.
World's Most Admired Companies for 2018
I'd love it if we could ban BI from HN due to their extremely low quality content.
Ask HN: How do you stream events from your node server to web app?
I am looking to send events from my node server to my react app. However, I don't want anybody to
be able listen to the events.

I've looked into redis pub/sub and google pub/sub but they seem either awfully complicated (gcloud) or hard to implement (redis doesn't have a browser client).

What should I use?
I have already started seeing congestion pricing signs on I-75
Some studies find lefties are more creative, and some don't, see e.g. [0] for some discussion. My anecdata is that three times in unconferences for which creativity was a theme, 30%-50% of the people were lefty (compared to 10% in the general population).

[0] http://mentalfloss.com/article/84560/are-lefties-really-more...
Which Bitfinexed posts?

This one added something that I hadn't seen previously, which was Tether's behavior during the recent "crash."
FB shouldn't be in the news business based in their social network business model.
It's like they don't realize that what they attribute to "talent" is attainable through practice and hard work. When I point that out and encourage them to just try, that it might be fun, they make some other excuse.

That's a bit of a bait and switch, to say, why not try this simple thing just for fun, and then say all it takes is a lot of practice and hard work. Not only do you have to make a long-term commitment that this is going to be one of the few things in your life that you invest a lot of time and energy in, you also have to either enjoy being bad at it (which is even harder as an adult than it is when you're a kid) or stick with it through a lot of thankless effort.
It isn't. The problem with a vernacular pronunciation guide is that you need to think about ambiguity.

/a-sim-TO-ti-klee/

is a much better syllable break, but /TO/ is likely to be mispronounced /'tu:/. And /TOH/ could be interpreted as /'toʊ/. So /TOT/ splits the difference between syllable break and pronunciation for (imho) maximum clarity.
Why 1 Second Is 1 Second
It's my understanding that Tether transactions aren't traceable because there isn't a public blockchain...and possibly not even a blockchain at all. So the obfuscating step is the USD->USDT transaction. The rest of the process is getting clean money back.
Primitive Technology – A Frame Hut
I don't think I've ever seen an on-prem application that self updated without manual intervention. I'm sure it exists, but it doesn't seem common.

Probably because in general self-updating goes against the control on-prem is supposed to give enterprises, especially when they're afraid of breaking critical workflows.
And please, don't break / either. Github and docs.python.org for instance don't play nice for vim users.
Also interesting how people speed up after tripping.
It's still extremely useful, even with those false positive rates. You will scare a few people, but they will just retest and maybe will improve their lifestyle.
What will start fake users from leaving fake ranks? FB has no business being in the news business. FB provides gossip and entertainment.
I can almost guarantee that they’re not doing that.

This would be explicitly against their own T&Cs, even the new ones. If they’re going to lie, why bother backing it with anything?

As second guessing Bitfinex is now a popular sport, my totally unsubstantiated guess is that they do have fiat to cover external, primary purchasers. Specifically, if you go to the site and buy tether with real money, they may well keep the reserve.

Their T&Cs don’t actually say they’ll honour the secondary market, just account holders. So, as long as they can meet that demand, they can print as much as they like themselves because they’ll never try to redeem it.

Dodgy as fuck but quite clever. No idea if it’s correct of course.
Don't know if this is the case for you, but for me that's what happens when the webpage pops up a modal dialog (often, a "please subscribe to read this article") and my adblocker blocks it. The modal gets blocked - but the website also locks down scrolling so you can't just read the article by looking around the modal, and that's what causes the scrollbar to disappear.
Both of those appear to work by deferring the parsing step to access time. You're still treating the thing as a bag of bytes and unpacking stuff out of it bytewise.
I look at my Amazon orders and the last 9 things I ordered, I would be very surprised if they were available within a 15 walk in any city in the world, including Manhattan. A very specific model of travel duffel, a Belkin adapter (maybe), a couple pieces of non-common audio gear (yes, if I lived a 15 minute walk from B&H in New York), a specific Chromebook power adapter (who knows, I'd still be looking), etc.

Sure, in a dense enough area--which I don't live in; I'm basically rural--things like basic grocery shopping are a short walk away. But lots of the things I order from Amazon would probably take some serious looking around even in Manhattan.
Don't poke the bear
Oh, I'm aware it makes no difference internally; I picked that documentation because I am somewhat intimately familiar with it as I worked on a product with that CPU and did a lot of driver work. My only point was to the poster I was replying to, who wrote "because when you number the bytes and bits you will see that the bytes are written left-to-right, while at the same time the bits are written right-to-left". That assumes that bits are universally numbered starting with 0 at the LSB, which isn't true.
Man attacks self-driving car in SF Mission
Not a whole lot of new lessons to be learned from this, but basic reinforcement of old ones:

* It's easy to get users, even high-profile at-risk users, to install arbitrary applications. Since there's little to be gained from litigating this basic fact, we have to work around it. We recommend at-risk users stick to relatively recent iPhones, not because Android phones can't be made to be asymptotically as secure, but simply because it's more difficult (technically and logistically) to set up a deployment process that gets an application installed on an iPhone that can do as much as these backdoored Android apps can.

* The biggest threat facing users on general-purpose computers (Windows or Mac) is email attachments. The most profitable desktop infection vector here seems to have been Word macros. There's no point in litigating whether people should or shouldn't use Word documents; they're going to do that. So we have to work around that. Our recommendation is that users be trained not to view attachments on general-purpose computers by clicking on them. Two options: view attachments on iOS devices, where the viewers are less privileged and less full-featured, or always opening them using Google's office tools.

To me, the big lesson of the past few years working with non-technical users targeted by attackers is: general purpose computers simply aren't secure, and can't (for normal users) be made secure. Get people out of computer apps and onto phone or web apps.
I think I generally agree with your second paragraph. We should not deliberately be jerks to others, even if they are different from us. And also, we should not be under legal coercion to not be jerks - that way lies at least serious trouble, and maybe social madness.

But I think I disagree with your third paragraph. People who have thoughtful, interesting things to say should say them. (They should also take care to specify what they don't mean, to discredit "followers" who run off in bad directions. Or else, if they agree with those followers, non-followers will conclude that the bad directions taint the thoughtful and interesting things.)