skysight-inc/HackerNews huggingface dataset:
These "driving related" injuries and deaths stats are almost always skewed because they include fatalities/injuries for drunk driving and night time driving. Someone only driving to work and back is at an absolutely minuscule risk of injury/death from driving.
Isn't that true of essentially any IaaS provider? Heroku or AWS could access anything running on your machine just by instrumenting their virtualization system if they cared to.

Part of the move to the cloud was the decision that well organized companies with large security teams can do a better job protecting internet resources than the vast majority of individuals. Cloudflare is just that, for cache/firewall/etc. appliances, I don't see the difference.
Mike Conley has picked up the Quantum performance baton from Ehsan, and has started posting Performance fixes on his blog [1]. Please write to him; he is good with replying, and will provide instructions on how to profile your Mac machines.

1. https://mikeconley.ca/blog/2018/03/01/firefox-performance-up...
Well, they are testing it in New Zealand, which this map shows to be doing extremely well in that regard.
Okay, if I'm understanding correctly, that diagram is a little unclear. Like I said earlier, using the tree depth works if the number of items in your set is a power of two, because then all branches of the tree are the same depth. In this case, Bitcoin is forcing all branches to be the same depth by duplicating the final element to fill in the rest of the Merkle tree up to a power of 2. In the example, the power of 2 is 8, and the theoretical Merkle tree looks like this:

ABCDEEEE
/ \
ABCD EEEE
/ \ / \
AB CD EE EE
/ \ / \ / \ / \
A B C D E E E E

The diagram you linked doesn't show the full right side of the Merkle tree, because of a clever computational trick that they use to optimize storage and membership. Basically, if you compute and store hash(E) for the leftmost E, you don't have to compute or store hash(E) again to compute and store hash(hash(E) + hash(E)) for the leftmost EE. The diagram is showing the computations, not the full Merkle tree.

Incidentally, a side effect of this is that you can't have duplicate transactions, because you wouldn't be able to tell between a E and F such that E=F, and E simply being duplicated to pad out to a power of 8. This works for Bitcoin because duplicate transactions aren't desirable, but it might not work for other applications.
Geeze, Eisenhower and JFK really weren't kidding when they warned about this.

We need a modern human rights movement that respects all people in the world. This isn't just a one-party problem, the Obama Targeted Killing Doc proves it spans across both political parties(1). It is also fundamentally antithetical to being American.

https://www.motherjones.com/politics/2013/02/obama-targeted-...
Better stay away from the evil Mozilla corporation, and instead use one of those other, more privacy-aware, browsers like Google Chrome or Microsoft Edge.
A helicopter can survive a complete engine out at any point during appropriately chosen flight regimes: https://en.m.wikipedia.org/wiki/Helicopter_height%E2%80%93ve...

In my layman understanding: the heuristic amounts to - at low altitudes you flare and cushion, and at high altitudes you enter autorotation.
And I paid it willingly to get a good keyboard. I'm hoping either they or somebody else will take the goddamn hint.

I'd add that I had my last Thinkpad 5 years. They're very durable. If I keep this one as long, that's $1/day, which I'm happy to pay for a computer I like.
But that's probably more of an issue for max speed than it is for efficiency, which would explain why it's operating speed is only 150kmph.
After I switched to Firefox 59 beta on Windows (7 upgraded to 10), I see the following issue all the time. When accessing finance.google.com in one tab and etrade.com (internal page) in another, if I am on finance.google.com and if it refreshes and is slow for some reason I start seeing a blank page with a spinner on that tab and while this is happening, if I switch to the etrade.com tab, I see that page is blank too and has a spinner that doesn't refresh until the finance.google.com tab comes back -- almost like the browser is stuck in a system call somewhere and all tabs using javascript are blocked. Maybe it's likely some interaction with some addons I have (mostly NoScript), but it's been frustrating and for the first time in so many years I am considering switching browsers :-(.

BTW, where is the best way to ask about issues like this regarding Firefox, it seems like Googling for Firefox issues mostly only brings up years old issues and no one is publically posting about more recent issues like this. Also it's hard to describe problems like this in a reasonable way to come up with search terms that Google likes and doesn't hit old reported problems.
Almost exactly what I got from this as well. At first I thought it was snarky, then the second time, blunt, but poignant. ha.
I bet this person's letter carrier and/or the post office where she resides will know or have a very high and good guess at who she is
I suspect Google engineers have more important tickets to work on than "do a bunch of complicated VM analysis to slow down Maps on Firefox."
No it was never disabled. Also, I have tried to disable it and enable it again and restart the browser and similar things...
This is totally the dream.

Tangentially related, I wish I had fine grained control over whether or not websites can access (or block) pasting, keybindings, etc. I think currently you’d have to write an extension or userscript to monkey patch the functionality in javascript land before the site executes.
>He was reportedly persuaded by defense secretary Jim Mattis that the method is an ineffective intelligence tool.

I'm glad that there are still people with some common sense and who hold positions of power in the US defense/security apparatus.
You have no leverage. You need to find and accept another (much better) offer.
> Much too loud for even a small number of people to use them without high noise pollution in any urban area.

Have you lived in a city before?

I go out to the street, and all I hear is cars passing by.

I go into my apartment, and I hear the drone of my A/C. When it shuts off, the drone of the exterior A/C of a nearby building starts up. Then one couple below me start yelling at each other. A dog starts barking across the street behind my house. A subway car rumbles by below me. Later, a freight train blares in the distance.

And you think a little "whrrrrr" above my building for 6 seconds is going to register??
they're becoming the "Buzzfeed" of tech
This is an absolute disaster for the Obama Administration. A complete stain on Barack's history and appearance of integrity.
>[0]: Cloudflare provides SSL certificates to millions of web sites

With let's encrypt SSL certs are free and easier to use than ever.

>[1]: Cloudflare now implements Privacy Pass which means Tor users mostly don't see captchas anymore.

Yeah, at the expense of deanomymizing them and only if they install your addon in their web browser!
So, the access required seems to be:
1) MASTERKEY: Reflash UEFI BIOS (local access, or defeat the specific BIOS, such as from AMI)
2) RYZENFALL: defeats a bunch of TPM and other secure boot/etc. stuff. Even in 2018 a lot of this is unused, and should never be your only security
3) FALLOUT: allows defeating some bootloader security, but isn't a big deal except on some locked down endpoints.
4) CHIMERA: some kind of chipset backdoor requiring local root. Unclear how big a deal this is due to access required.

Overall, even if these are real, they're not showstoppers. If your security depends on TPM/etc., you're screwed anyway. They do allow local malware to do worse things, and might require some mitigations in shared environments, but it's mostly stuff you should already have protected in those settings anyway.
I think I must be hitting something like this too— Mid 2014 MBP running 10.11.6. I tried Quantum when it came out and used it exclusively for about a week, but there were just a myriad of small problems around performance. It would eat CPU and RAM, input would lag especially text entry, Hangouts didn't work, etc. And then on top of that a bunch of annoying interop issues like problems with the 1password extension ("the add-on could not be downloaded because of a connection failure"), not being able to right-click selected text and access the Services menu.

I really want to love Firefox, and I'm giving it another try with 59, but at the end of the day I need my computer to work for me. :(
I count 2 from uBlock. But then again, I have JavaScript disabled on all domains by default; I just whitelist the ones I care about.

Life is infinitely better now.
>It's impressive that we've fallen so low that we're blaming the Obama administration for not fixing what the Bush administration did.

Why The Fuck shouldn't we, he campaigned on ending that shit. His similar actions on the banking crisis continue to have horrific consequences.

Who gives a fuck about the GOP, we know they're nutso - Obama pretended to be sane though. Obama is also directly responsible for the DNC owing so much money that they were forced to sign a deal with Hillary before the nominations even started.
Strong agreement - no sane company would operate a taxi company at the current General Aviation safety rates. They are going to have to do a whole, whole lot better.

Getting safer seems like it could be possible, but it's going to be an enormous amount of work.
In the case of Python, adding threading was accompanied by adding the Global Interpreter Lock (GIL) that protects mutations of all data structures. Because of this, you can use Python threads for I/O-waiting just fine, but can't use them for CPU-bound tasks.

A similar situation exists in Ruby.
MOSQUITO attack allows to exfiltrates data from AirGapped computers via speakers
We're waiting for the webextensions API to be extended with a bunch of missing functionality so that extension authors can reimplement things that were made impossible when the older APIs were deprecated. This is something that ideally should have been done before or shortly after the quantum release but was not seen as a priority.
It looks like that was an anomaly, though, whereas 200+ is routine for Beijing.
20% of survey respondents said they're students currently. 50% of survey respondents have less than 5 years of experience. 30% of the respondents said they work on the front-end only.

That will lead to some really weird results when viewed in aggergate.
Remember when he said he would protect whistle blowers?

Anyways, Obama's targeted killing doc[1] actually shows the deep state constitutional abuses and extrajudicial killings continued to develop and evolve under his watch. Whether he is really in control of that, or not, is up for debate.

Eisenhower and JFK warned us that these unelected powers were becoming too powerful.

1-https://www.motherjones.com/politics/2013/02/obama-targeted-...
> The removal of most technology patents would not reduce the incentive to innovate;

Software patents are different beast than other patents. In the realm of hardware patents and IP are enable profits for fabless R&D.

It's true that patent system requires overhaul:

* A some form of compulsory licensing for all patents after 5 years. Pricing trough auctions or arbitration. IP owners can't decline to license but they can still enjoy license fees.

* Software patents with much stricter requirements and very low priced compulsory licensing (discourages patenting when profits are low). No license fees for open source software.
GA aircraft engines are rarely V6 they are mostly flat 6 or flat 4 for smaller planes. If you go to the website for Lycoming as an example you see they are all flat except for one I4. https://www.lycoming.com/engines
It's a similar thing to those old (and way unethical) '70s and older studies they used to do to schoolchildren. Various forms of psychological abuse (telling them they aren't doing well even if they are, grouping them and prodding one group to harass the other) can negatively affects academic performance.
Obama authorized 10x the number of drone strikes as Bush that killed over 391+ civilians while he was in office, and he did it on his own volition. Ultimately any president has to make hard life-altering decisions, so lets cut out the left vs. right nonsense.

Go ahead, read the article, don't let the facts hit you on the way out.

https://www.nytimes.com/roomfordebate/2016/01/12/reflecting-...
That's unfortunate. I finally gave up on Firefox as my main browser when 57 came out, and one of the big reasons was that so many of the useful extensions that had set Firefox above other browsers for me were broken and didn't have good replacements. In some of those cases, my understanding is that you can't currently write a direct replacement because the new API doesn't support the required functionality. I was really hoping that by two releases later these kinds of issues would have been addressed and new Firefox would at least not be worse than old Firefox in this respect. :-(
I imagine it's possible without AI to solve this type of problem, but I think Wells Fargo needs all the help they can get.
I wish routing and page rules had rudimentary regex support like VCL or most other location matching route libraries/servers.
I view programming similar to carpentry or metalwork. You can't really sit down and learn metalwork in 24 hours.

24 hours is not even how long I had to file a metal block until I was deemed ready to use heavy machinery during secondary school. I filed it for 3 weeks, 5 days a week, 9 to 5.

21 days is not enough to master metalwork, even though I was allowed to use heavy machinery, I borked up more than one piece until I eventually got it right at the end of the school year (which was about 6 months of metalwork).

And I think I am still way of from mastering it, not that I want to.

Programming is, IMO very similar. Sure, you can get a hammer and start hammering on a metal sheet and that'll probably produce something in the right shape. But learning to program, mastering it, takes time, 10 years is IMO a good estimate. I've been at it for 8 years now and I still got very much to learn.

Of course people can become good with a programming language, just like you can get good at filing a metal block in 3 weeks. But it doesn't mean you've mastered all the tools yet.
Which are the addons you're missing?

Do they have a GitHub site?
Old extensions won't ever really work again, but part of me is still kind of holding out hope for WebExtensions API features for things like "allow extension on 'system' pages (new tab, settings, etc)", "focus addressbar", "hide/replace address/tab bars", etc.

Some of those are coming or pretty much ready (tab hiding, addressbar focus), and others I've almost given up on, given how Mozilla seems to have changed their philosophy.
I don’t agree that it’s best you don’t describe anti-abuse techniques. I’d be impressed if your manager agrees. I’ll argue points if you like.

Can you talk about topology relative to ingress and origin? Eg. is execution pinned in select PoPs per ‘region’ or all? Unrelated, I also wonder about retention of edge cache, is it purged via LRU or similar?

Personal note, I was excited to get the early access email, feels like an excellent offering; I’ll be flexing it soon, have some ideas—been getting an HLS system online in the past month using RasPi+CF without a hiccup (720p@4500kbps) and it’s open source/libre, comparable to YT/Twitch—info incl. design/ lectures in profile.

Also read above, congrats on what must’ve been a good year! Speaks well of your org that you’ve been able to deliver and talk freely.
Don't worry, that feeling will pass and you'll feel like an imposter again in no time.
> Is the issue with a length limit on data: uri's? something with the CSP?

The problem is if we left the WebAssembly API enabled as-is, then people could fetch code from the internet and execute it. We already disable JS eval() so we had to disable the WebAssembly API too.

> Will there be some kind of session storage or is it completly stateless?

We're working on storage. It's a complicated problem. :) (See elsewhere in this thread.)

In the meantime, for many use cases you can use the HTTP cache as a sort of storage. Also, each worker instance has global variables which are writable -- there's no guarantee we won't reset your worker at any time, but generally one worker instance will handle multiple requests so can do some in-memory caching in globals.
Totally agree with you. Excellent answer. Vijay most of all with the theory/math. I sat through a lecture he gave on ragas in jazz once, and it was essentially a math class about ragas.
Understanding MELTDOWN and SPECTRE exploit
It's actually kind of weird to default to whether or not it scales. It doesn't shoot laser beams either, but that doesn't doom it. Mostly I'm concerned about whether it can get my snowboard and I to the top of a back country mountain for 1/3rd the price of hiring a helicopter pilot and his machine.
Also, software patents are a relatively new abomination, especially in overseas jurisdictions.
Looks like most of the US tech community is welcoming this decision.

It's interesting to imagine their reactions when foreign governments intervene to block American companies acquiring their native companies.

Eg. the Dutch government blocking Qualcomm's takeover of NXP.
(EU stalling the acquisition to investigate antitrust issues is different.)
An org usually only hires functional programmers for specialized tasks, and specialization generally pays more. It's not about pay here, but about the nature of niches. The downside career-wise is that is that you have fewer alternatives, domain and geography, if your specialty slumps.
Why White Evangelicalism Is So Cruel
Homeschool High School Planning-Preparing for College
I gave a much more neutral source below.
Still on 56, sadly. The addons crucial for my workflow have stopped working. Shame these concerns were not properly addressed, even after months of clamour about breaking changes like these.
It really doesn't matter if HQ2 is officially in Boston. Amazon already has a large presence in Cambridge, and is building a new huge office in the Seaport. HQ3 is already in Boston, but they can rename it HQ2 if they want.
Are Cloudflare Workers implemented as an NGINX module like OpenResty?
I agree with what you said, and I like you (so I don't want to hammer on this on a day you should be celebrating a cool thing you made), but...

You missed what I think is the most important thing: Cloudflare currently entails correlated risk, for lack of a better term. A government intrusion into CF represents access to thousands and thousands of sites' decrypted streams. This is a huge target for the US, Russian, and other spy agencies, to the extent that I cannot believe you're not already compromised.

All those small customers who are using you for free TLS should be using Let's Encrypt so they can get end-to-end encryption, necessitating individual, active attacks (I suppose on DNS) rather than sweeping, passive attacks.

I think there are some cool and good things that Cloudflare does, but it's irresponsible to minimize the threat it presents to privacy in today's internet.

[Edit: Also, if you don't want to respond to this thread, I will totally understand, and think that's reasonable. I don't want to shit on your cake!]
How to Build a Productive Team and Lead Your Business to Success
Other than the verbosity the new versions of C++ are so much nicer to work with than C++03. C++17 is even better, constexpr if simplifying templates, structured bindings (though I wish there was an ignore option), optionals, if the C++ standards committee isn't careful they might end up with an enjoyable language in a decade or so.
This shouldn't be a partisan issue. I'm talking about the disintegration of the rule of law.

The new Commander in Chief failed to hold those under his command accountable for their immoral, illegal acts that put our democracy at risk. In doing so, he set a precedent that will last for generations.
I haven't really noticed much of a difference in performance but memory usage is much lower.
Why does Saturn's moon Titan have a dense atmosphere?
Ask HN: Ansible vs. Terraform
Hi all,

I'm starting a project in my company for upgrading our deployment infrastructure across cloud providers. Our current system is mainly using ansible for both provisioning and configuration management.

I'm trying to see Terraform as well for this option. And I wonder anyone has experience on migrating from ansible to Terraform or using both of them? And maybe can share the benefit and drawback of both of them when using them in production?
Helicopters have a mechanism called autorotation which ensures safe(albeit sharp) landing when the engine fails.
Yes, I get that. What I'm saying is that it's reductionist to just chalk it up to preference and call it a day. It's a complex issue.
That did not answer the question, and in light of discussions just a few weeks ago on this subject, the question was fair.
Obama is also I think one of very few presidents who explicitly targeted and killed American natural born citizen. Not accidentally, but actually targeted. Didn't even bother hiding it.

But I agree with the original point, GOP did start this mess on the lie of weapons of mass destruction.
Not sure it's related but a lot of Google's sites are terrible on Firefox and Edge. IIRC they are using polyfills for some heavy stuff (if you assume no malice, that's probably the cause of many problems).

https://www.reddit.com/r/firefox
https://support.mozilla.org/

Try using safe-mode https://support.mozilla.org/en-US/kb/troubleshoot-firefox-is... or maybe creating a new profile. The beta versions, just like Chromium or Chrome, occasionally have some weird bugs. At least for me most of them are always hardware acceleration related.
Has anyone done an analysis behind the economics of distributed storage like this?

Im genuinely curious. At first glance I cant see paying an individual or company ever being made lucrative enough. Its like the inverse of facebook, where individual monetization is small but only in aggregate is the system worth boat loads of money.

These new building blocks are facinating, but the whole model so far seems to be “we own lowest common denominator”
Do you have concerns that those seem to be the people most likely to fall out of favor and inevitably leave?
It's not a strawman. You didn't propose offering help and technical support. You proposed introducing “proper” systems of banking and land title. If you can decide how a country’s systems of banking and land title work, you are governing that country. Thus, your proposal is that “third-world” countries be governed by people from “first-world” countries. That's nothing more or less than colonialism. It is a terrible idea.

Perhaps you think that poor countries don't have existing systems of land tenure or credit. We do. We aren't monkeys banging on rocks. The problem is that those systems suck. You might think they suck because nobody here knows how better systems work. But in fact, not only do we have internet access and universities, many of us have studied overseas in rich countries and even worked there, some even in banking and real estate. They suck because of resistance to change by the people in power, who are not entirely wrong, because change often looks like the Congo Free State, the Khmer Rouge, the Second Opium War, or Donald Trump.
I bet it gets enough leads and or sales so that even though it annoys a bunch of users that it is worth it. If it had no conversions they would have stopped doing it by now.

Arguing that etiquette should be observed when you have a lead / sales generation flow doesn't work.
Yes it is actually the infinite that is at the core of all these problems. Same with the incomputability of https://en.wikipedia.org/wiki/Kolmogorov_complexity . If you simply think in terms of bits (the finite) none of these problems exist as one can simply search all permutations.