skysight-inc/HackerNews huggingface dataset:
A few (far from all!) software vendors realistically might be able to respond and issue a patch in 24 hours. But a hardware vendor cannot. See Intel's recent debacle [1] for what happens when a silicon vendor rushes a security fix out of the door without going through a proper multi-week QA cycle.

[1] https://arstechnica.com/gadgets/2018/01/good-newsbad-news-in...
Launch HN: EasyEmail (YC W18) – Gmail plug-in that helps compose emails quickly
Hey HN!

We’re Fil, Lambert and Matt, the founders of EasyEmail (https://easyemail.ai). EasyEmail is a Gmail plug-in that helps you write emails quickly. We train our software with your inbox and quickly suggest what you should write based on your previous responses.

We started working on improving how email is used about a year and a half ago, when Fil was organizing the MIT Fall Career Fair, an event for 6,000 people and 450 companies. He was sending 200-300 emails a day and feeling suffocated by the volume. We started chatting about some sort of a solution, and after a long journey (including a car crash on the way to our YC interview!) we finally have a working product and some happy users.

Our current product is a Chrome Extension helps you write emails with
two main components: autocomplete, and hotkeys.

Autocomplete searches through every sentence you’ve ever sent in the past and suggests 5 sentences you might say at this moment. An example could be me typing “how a” and the autocomplete suggesting “How are you doing?” together with 4 other sentences. This feature turned out to be harder than we expected because users say things that start similarly a lot (I have 207 unique sentences starting with “how a”). The question is how to sort all those sentences so they’re most likely to choose one of the top 5. Our sentence-matching algorithm includes things like frequency, recency, and context from the email you’re replying to.

Hotkeys are a quick way to enter snippets of text that you repeat a lot, but that aren’t sentences, like a link that you send a lot, or pieces of text that you send often but don’t merit a new template.

It’s very exciting to work on this problem, because email is so universal. That also makes it very hard, because we need to satisfy a lot of different email users. There's also a lot of competition - most prominent is probably SmartReply by Gmail (those 3 buttons saying “sounds good” on your mobile app). The most important difference between us and them is that our suggestions are always personalized, since they come from your own mailbox.

This may sound like we’re trying to remove thoughtful emailing by just making our users repeat the same sentences over and over again, but that’s the exact opposite of what we’re going for. Our initial users tend to already send repetitive emails, and we’re just reducing the amount of typing they have to do. The goal is to give everyone more time to put into the non-repetitive parts of emails!

We’d absolutely love to hear your thoughts on the product and your experiences in this area. If you’d like to try out our product, it’s easier to go right away to the Chrome webstore: https://chrome.google.com/webstore/detail/easyemail-ai/giage.... Please let us know what you think!
> Full, immediate disclosure is responsible.

Hiring a PR firm before disclosing to the vendor is not responsible. Briefing select press before disclosing to the vendor is not responsible.
>bad internet comments

Bad != disagree. I think we all agree that it should be ok to downvote and hide "bad" comments. However the problem is that many good comments are downvoted simply because people disagree with them.

I think it might be better to remove the downvote and replace it with "flag", so people can flag bad comments (spam, abusive, pointless, etc). At least that way people would need to think a little before the comment gets flagged, which would hopefully result in fewer minority viewpoint comments getting hidden.
Uh oh, thanks for reporting that.
Profilo: Understanding app performance in the wild
You don’t have a lot of artistic license for headstones in Arlington National Cemetery.
They seem to have 3 employees on LinkedIn. The co-founders, at least, seem to have listed experience in security & security consulting.
I wanted a way to find people to work on game projects with. Ideally, people who shared the same interests in games. So I made a site to find both.

It's my first solo project and I've learned a whole lot along the way. Now I get to launch it and learn a whole lot more! :X
"Although we have a good faith belief in our analysis and believe it to be objective and unbiased, you are advised that we may have, either directly or indirectly, an economic interest in the performance of the securities of the companies whose products are the subject of our reports." from the disclaimer
Survey: Gamers Have Strong Ownership, Interest in Cryptocurrency for Game Worlds
There is no such thing as "commercial general aviation". Once you're accepting fee-for-service you are a commercial carrier with all the regulations that go along with that.
Telemetry is opt-in, and can be turned off at about:preferences#privacy
And the users downstream of bugs that are made more widely vulnerable--because, as anyone who saw how, as an example, previously rare MitM attacks became commonplace after Firesheep etc. were publicized, obscurity is in fact a component of security--are...?

Well, fuck 'em, I guess.

Responsible disclosure, contrary to the super-cool leet kid notions expressed by people with who choose to exhibit an underdeveloped social conscience, is not doing a solid for the companies who have vulnerabilities. It's for the users who consume things. Security researchers are effectively taking upon themselves a role of public service. That comes with responsibilities to the public, not to AMD or whoever.

Meanwhile, this crew looks like they briefed the media before telling the vendor, which is all kinds of fucked.
Very well written. I grew up in the evangelical church - learning the truth about the movement's role perpetuating slavery and racism took far longer than it should have because of many of the themes touched on in the article. This is a strong argument for people of faith to speak out against the evil being done under the cover of Christianity.
Couldn’t figure out how to sign up
Politeness is optional too, but people still prefer to not be needlessly rude. It is quite normal to balance doing your job with trying to reducing harm to users who had nothing to do with this.
Who do you think you speak for? Assuming the vulnerabilities aren't fabricated --- it's happened before with other companies --- attaching your name to that white paper probably guarantees you lifetime employment in security research.

"Unheard of"? People have dropped serious vulnerabilities with _zero_ warning before.
Maps work fine for me (Dev Edition here though).
The software is based on Gifsicle, itself a GPLv2 licensed piece of software, so there isn't much the author could legally do about it.

This comment section is filled with weird misconceptions about the software and about the compatibility between GPL and the Apple store terms of service. Somehow people think the software is GPLv3 even though a cursory glance will reveal that it isn't. People think that the author of the modification has a say in how it's licensed. It's based on GPLv2 software, he doesn't. Others are saying that while distributing GPLv2 licensed software on the Apple store is fine, GPLv3 isn't, when neither is OK. Sorry for soapboxing here, but it seems appropriate to address all these misconceptions in one place.
Hopefully that limitation can be relaxed over time. Having to stuff all my logic in one big script sounds a bit annoying. At minimum having access to a second worker script route would be welcome for testing/development purposes, so one doesn't muck up a working production script.
Nitpick: Zachtronic's previous game was Shenzhen IO http://www.zachtronics.com/shenzhen-io/, and is definitely worth checking out if you liked TIS-100.
What's difficult to understand? I've been using Firefox as my main browser because of the extensions while choosing to miss out on features that other browsers had and Firefox didn't. Simply because the pros outweighed the cons.

I still use it as my main browser at home, but with the extensions that used to set Firefox apart gone and forced to reset my workflow and expectations to the minimum common functionality, I find myself using Safari more and more at work simply because the battery usage is better and has out of the box support for SPNEGO. As an added bonus, I can watch HD videos smoothly without killing my processor and draining my battery.
Seeing as CTS-Lab's CFO also founded a hedge fund you're probably on the right track.

>Yaron co-founded CTS-Labs in 2017, and previously served as an intelligence analyst in the Israeli Intelligence Corps Unit 8200. He is also the founder and Managing Director of NineWells Capital, a hedge fund that invests in public equities internationally. He holds a B.A. and M.A. from Yale University.
Web sites like gmail.com.
Bluegrass is played swiftly and to perfection.

Not sure I agree. Lots of Bluegrass players, even the some of the best ones, favor speed over clean execution. Maybe another commonality with SW development.
Looks good. Still haven't had my coffee so this is all you are getting. Sorry.

The submit form zooms in on mobile (iOS). To avoid that the font size needs to be set at 16px.
Great job! Very intuitive design. Much better than the majority of services I have tried before for simple pages I've wanted to put out.

Once a page is built and live, can the user then save the HTML and host it on their own server? (leaving the by: lonelypage logo at the bottom)
No it isn't, not even slightly. This is completely irresponsible. They are publishing a zero day vulnerability. Completely unprofessional and reckless.

Fortunately for us all the actual exposure is minimal.
It sounds like creating a website and priming media was a higher priority than informing AMD.
It's a good start. However, seemingly only tested on Chrome.

After playing around with it for a few minutes, I found some issues:

On Firefox, from a Clean State, add a Row, add Text, click H2, type some text, hit space, try to type more text: the space disappears

On Chrome: I don't seem to have full control over text spans. While I can use b/I/U/S on the current text selection, I was unable to set any other style attributes just for the selected text (i.e. what should boil down to a span tag), i.e. I wanted different colors for parts of my text.

Keep on hacking and I hope you'll have success!
I usually take that as a cue that it's time to hop ship!
I go to HN to read tech related things, not more political drivel. I'm glad it got removed.
Contrats on moving to the Kenwood club! I don't know which Baofeng you have, but my UV-82 is easy. Switch to frequency mode and type in a frequency. I'm sure some of their other ones are different and worse. Entering a repeater isn't as fun, but simplex is simple.
Intel shills please leave
When apps send me notifications on my phone, it is a reminder for me to uninstall them.

When sites send me annoying ~~adds~~ notifications, it is a reminder for me to turn on adblock for them.

edit: adds to notifications (also I can't spell obviously)
Hopefully, the Ultimate Guide to a Flat Icon Set
Work efficiency is clearly superior here, hard to argue with that point.

But what strikes me most, how little real life these people must get. You know, the time you have for yourself, friends, family, adventures, stuff that makes you smile when remembering, that makes you proud you experienced it, that forms you as a person your whole life. I have cca 6-7 hours of this kind of time after work, I have amazing adventures almost every weekend in the alps, and 3-4 vacations thousands of kms away per year.

Wouldn't trade that for anything. Having free time when retired sucks since your body (and mind) is already in heavy decline, if you still live at all. Most true adventures are impossible if you are > 65 for most.

Life well lived ain't a life worked hard all the time.
The website is offline for me. Here’s an Archive.org snapshot:

https://web.archive.org/web/20180313153109/https://www.polit...
> Off-Topic: Most stories about politics, or crime, or sports, unless they're evidence of some interesting new phenomenon. Videos of pratfalls or disasters, or cute animal pictures. If they'd cover it on TV news, it's probably off-topic.

From the guidelines. (https://news.ycombinator.com/newsguidelines.html)
It also seems like that you could make security claims and then perform market manipulation on the stock. Giving yourself 24 hours lead time and making AMD look bad would allow you to short the stock. It doesn't seem like it has impacted the stock at all though.

https://www.nasdaq.com/symbol/amd/real-time
Why does it say this on the disclaimer:

"...we may have, either directly or indirectly, an economic interest in the performance of the securities of the companies whose products are the subject of our reports."

Are they shorting AMD? https://amdflaws.com/disclaimer.html
https://amdflaws.com/disclaimer.html

"you are advised that we may have, either directly or indirectly, an economic interest in the performance of the securities of the companies whose products are the subject of our reports"
I'm interested in teaching non-programmers to program via Elm. I think the baggage that comes from imperative programming is a deterrent to pure fp. But if you start with pure fp, it's all pretty clear.
The title here is misleading. The vulnerabilities were not actually publicly disclosed, the only thing that was disclosed publicly is the fact that the vulnerabilities exist. The actual details of the vulnerabilities were disclosed privately with AMD.
Did you try restarting your browser? I've just tried setting rows to 12, which sets topSitesCount to 72. This worked for me after restarting the browser.
This is a great list of questions! Is there a list out there on how what sorts of questions to ask for engineers or other non-PM roles?
What's wrong with full disclosure? Ryzen owners ought to be informed ASAP that they're (possibly) vulnerable.
How many new articles do you see about C/C++? Blog hype does not represent language strength or longevity.
It varies. 8MiB is believable. That's 8MiB (plus a guard page) of address space. Typically it's divided into 4KiB ("small") pages which are only backed with real RAM once accessed. So maybe only 4KiB of real RAM, depending on what your program is doing...plus whatever bookkeeping the kernel needs, which I think can be as much as 128KiB on Linux, unfortunately. (At least something makes it use that much for me at work, although it might be related to something special I'm doing.)

It's also possible (but not common) to release accessed-but-no-longer-needed pages. Doing this when returning to a thread pool avoids situations where one occasional deep call chain causes all the threads in the pool to eventually become huge.
Growth of technology and an increase in job openings. Plus, a bit of cultural shift too. I think a lot of older developers grew up during a time when spending a lot of time using technology was considered weird. While today, not using technology all the time is what is weird.

Also, software developers are much more highly regarded by young people now than ever before. There's this image of the young, rich entrepreneur creating products that everyone loves, and people want to be this. So a lot more smart people get into the industry because it's the cool place to be, hence the rise of "brogrammers."
This one or Infinifactory. Both masterpieces.
WWDC 2018 June 4-8
IT Pros and CIOs: Sign Up to Try Firefox Quantum for Enterprise
I think many people agree that speed is not a reason to choose non-blocking IO over threads.

However, many people do believe that async/await and event loops make reasoning about non-blocking IO much easier. Has your opinion changed since http://techspot.zzzeek.org/2015/02/15/asynchronous-python-an...?
Session manager is the main one that's missing for me. Nothing else can reliably selectively restore a session with full history and unloaded tabs on startup after a crash for me.
Have you done a lot of published security research?
Any topic mentioning negative aspects of the tech community related to race are also usually flag bombed to death. Mistreatment of women in the tech community still get flagged pretty regularly but they seem to be getting vouched for more regularly now.
Can someone tell me what's behind "Faster load times for content on the Firefox Home page"?
Coal isn't used for heating much in the US, if at all. It is sometimes used for metal production, especially on the east coast, but oddly, not on the west, where hydro is used.
Technical Debt and the Rewrite-In-Place
> those readings represent gaussians and combining them means multiplying them

I don't think he means multiplying surely? That part is unclear.
ACME v2 and Wildcard Certificate Support is Live
Docker sock is being mounted from the host [1]. This could be a concern if you are running multi-tenant apps etc. One (slightly hacky) workaround is to have a Persistent Volume mount the hostPath and restrict hostPath mounting in the pod through PSPs.

[1] https://github.com/hasura/gitkube/blob/7d0e7f25b811d48089b78...
(man, really don't mean to seem too critical here)

I don't think we should give this article a complete pass. I think the author is using something the target audience thinks is cool but knows little about to make assertions for his favored development ideology. Also, I think a more detailed and nuanced analysis is instructive.

From the article: Studies show teams in which members have an equal voice and a chance to be heard perform far better.

That's not the complete story of how Bluegrass and Old-Time sessions work, in my understanding, at least not all of them. There is often a leader, ranking highest in some combination of talent and age, agreed upon tacitly, who gets to tell people when to take a solo. Irish sessions often work somewhat like this, with the leader telling people to start a tune instead of take a solo. Such leaders can establish a feeling or a culture for the group.

As in jazz, bluegrass music often contains unplanned elements. Because the musicians are experts at their discipline, they can quickly make alterations to the song while it is being played.

This can even happen in Irish music. However, most often there is a corpus of well known tunes and a structure worked out ahead of time. This also goes for Bluegrass and Jazz. In my experience, whether or not unplanned elements work has more to do with the expertise of the players and their relationships with each other than anything else. I think that is the most valuable takeaway from this analogy. It's not enough that everyone has a chance to be heard. There needs to be a culture of people who are collectively motivated to create something great together who are tuned into a mutual give and take. Sessions can also break down into unproductive competition.
Basically a follow the money situation.

Could something like this be considered inside information? Or is it legal to actively manipulate stock prices to ones benefit in this way?
Waymo’s fully driverless minivans are already putting people to sleep
Maybe if you had the thing switch to hover mode and then jumped off of the front?

I agree that jumping out while it is moving is suicidal.

The CAPS system makes the most sense, especially given the intended market of "person with cell phone and lots of cash to burn". They would be seriously limiting their clients if they required everyone to be jump certified.
> we've fallen so low that we're blaming the Obama administration for not fixing what the Bush administration

At least nobody gave Bush a Nobel Peace Prize. Obama had filled people with hopes and dream and in 8 years did nothing. Just his last year in power he dropped over 20000 bombs in countries we were not even at war with. Speaking of torture, Guantanamo is still open, he could have closed that. In other words expectation were different for Obama so pointing out his failures is also expected vis-a-vis those expectations.
Show HN: Oratyria, Free Speech Message Board
Makes me think of what you often hear that browsers are the new operating systems. They definitely are, even in the worst vices: here we go, we also need the antivirus now.

I think it is about time we rethink the whole web to the foundations. In the meantime we can install Lynx.
Automatic translation subtitles
I often find this response in threads like this, and often see it as both a cop-out, and unfortunately "cherry-pick-able" as a guideline.

Spectre/Meltdown showed up on the news. Does that mean it's not relevant? Same goes for the Broadcomm purchase blocking. Same goes for whatever statement Elon Musk made this week, or the current SF housing policy. (I chose examples intentionally in "Decreasing-tech-relevancy" order, and could probably go even further and still be picking recurrently front-paging-topics.)

I would also argue that openly placing someone with such a history in charge of an agency we're all under the purview of, one with already such iffy history, is both interesting and new, and to echo my post from the thread in question, the prevalence of corporate governing boards to take members with iffy track records on these subjects to my eyes links the relevance directly with our purview as tech entrepreneurs. (see: Uber Board) I do not believe we (members of the tech community) can abscond the responsibility of involvement that our position affords us.

The "hide" button exists as well, and I've become somewhat saddened by the extent to which HN seems to lean on "flag" for topics which, in an interconnected world, I consider very worth discussing in a tech context. I have a fundamental mental dissonance with the pattern this enables, that "I don't want to see this topic discussed" turns into "I don't want others to see/discuss this topic." HN (and the startup/tech community as a whole) is not a monolith, and if the mechanisms of voting try to structure it that way, I see that as highly unfortunate.

(I don't mean to "complain about points" but it's rather absurd to look at the wild swings from +8 to -8 and back again for any of my posts on this topic. It speaks to me that there are at least two "factions" with very polarizing opinions on this, and the context has turned less from discussion into silencing vs vouching. I certainly don't remember seeing these patterns as strongly 5+ years ago.)
The disclaimer in that issue seems pretty clear - yes, this can be bypassed, this is not production ready, this is proof of concept. They explain that they could attain 'first runner' status in Chrome but ultimately the protection belongs built into the browser.
And at other times 90 days maybe inadequately short. But 90 is just a round number someone at Google thought is a good idea. And now it's become 'standard'.

I can go with immediate, or I can go with never. But realize that every vuln is different, and their impact (or hardship of writing or applying patches) may not always be fully understood by stakeholders involved before or immediately after the details are released [CVE-2015-0235].

[CVE-2015-0235] https://nvd.nist.gov/vuln/detail/CVE-2015-0235
If net neutrality dies, the web absolutely becomes centralized. Facebook and Google aren't the web, but they will be the web if they're the only ones that can pay to have their data passed over the wire.
One of the co-founders runs a hedge fund.

The website's disclaimer says "you are advised that we may have, either directly or indirectly, an economic interest in the performance of the securities of the companies whose products are the subject of our reports".

Just sayin.
Would you mind linking to the evidence and explaining how it applies to this specific case?
I'm looking for freelance sites too!
https://www.reddit.com/r/Amd/comments/84510f/call_to_action_...
E-commerce search queries named-entity tagged dataset from BestBuy