skysight-inc/HackerNews huggingface dataset:
>And? I already have disparate experiences in apps for tons of reasons.

So because some things are a bad experience, we should make more things a bad experience? I don't follow. Or do you mean that you as an end user, not an app developer, should be able to configure the server used to look up the mapping of gps coordinates to street addresses used system wide, as though that isn't a giant security vulnerability? (as in, if I were Uber or Lyft, I wouldn't want to deploy my app on a platform where another app with root privileges could, for example, change the GPS lookup location to something adversarial whenever uber was in the foreground, leading to bad end user experiences).

As far as I know, apps can already do their own geocoding (no one could really stop them), they just don't because the built in ones are better and give consistent experiences.

>I'm not following what you mean by this. Can you expand?

I guess I'm not clear on what the problem with "I get my location through google play services" is. Like I understand why one might take issue with "the only way to get location data is to opt in to Google having my location history". But that's not what happens, since you can turn that off. So I'm unclear on why Play Services being the source of location data, as opposed to something else.
The example with the halved memory space isn't a good one. There might be a real net benefit to society by using up less resources.
I did this once, the DOM isn't too bad to store your program source code :P https://github.com/winks/brainclick
I'd like to expand this because I don't see it written much, and please correct me if I misunderstand:

The scandal is that FB sold or allowed the ability for third party companies like Cambridge Analytica to harvest the whole social graph and FB sold or allowed the ability for them to use that same data on FB to target and manipulate people.
I heard that things like hashtags aren’t federated though. I think it’s important to make especially posts findable across instances via hashtags.
Downvoted. I can see people might disagree with this while other might not. Discussing it would be more interesting than downvoting.
>>>Hopefully it will also change the "move fast & proper security is an afterthought" model of startups.

In short: starting startups will become more difficult. One of the things most taxing and scary for people in our society, starting your own business, but also one of the things most needed and useful (who else creates jobs and Big Cos later?!) will become harder to do.

But what did startups ever did for us, no?!
Has anyone blogged about a software refactoring project being "heat loss"?

Same thing really -- it comes out better, the same or worse but the underlying principles are identical. You could avoid the "heat loss" by just hacking on the old crufty code or redesign it into a fancy-smancy state of the art system.

I would also bring up The Economic Calculation Problem and how it applies to large monolithic corporations equally as well but that's a discussion for another day.
I've long believed that culture is the most powerful law enforcement. It's quite common in the US to believe that people deserve what they get when take drugs, or that you are a bad person for taking drugs or the sex trade.

Your comment about putting everything in the open reminds me of _Peter Freuchen's Famous Book of the Eskimos_. One of the greatest sins among the Eskimos was to hide your behavior. His example is a man who would masturbate with seal corpses when he went hunting; people laughed and said he was ridiculous because he had a pretty wife yet somehow preferred seals. But he wasn't considered bad for it; it only would have been bad if he had hidden it. He was teased a little and that was the end of it.

A more serious episode involves a murder. The murdered man was quite disliked by everyone, but the witnesses and the murderer participate in a long conversation/declaration that the murderer had done wrongly, that he was terrible, that he should have died instead, etc. And when that conversation was over, they all went to dinner and spoke no more of it. A clandestine murder with no confession, however, would have been atrocious.

Not sure this directly contributes to the convo, but it was a good read :)
why is this even news?! Teslas have a very strong firewall. if flames were coming out it most likely wasn't directed to the passenger compartiment. anyway all cars fail. people shouldn't expect teslas to be absolutely perfect...
Kate Bush sang about this in 1986, in "Experiment IV": https://www.youtube.com/watch?v=NTUcoR8_pyE
Go to the following domain:

https://www.mendeley.com/forgot

Enter a valid email address that has never been registered with Mendeley. You will get the following message:

Oops, this email address was not found in our system.

But, if I enter the email I registered I get this message:

Thank you. If we have been able to identify your account, an email containing instructions on how to reset your password will be sent to you.

I don't receive an email, but Mendeley password reset can discriminate my previously registered email from random valid email addresses. That would be impossible if that registered email was only known to third parties.

Why would that be?

Look what I wrote at point 1.

1. 2017-06-07: Mendeley <mendeley@mail.elsevier.com> me "We have deleted your Mendeley profile and data, to delete your full Elsevier account, please email usinfo@elsevier.com"

So my Mendeley profile and data has gone, and Mendeley have deleted my data from Mendeley servers but it looks to me as though there is a central Elsevier server that still knows my email address.

Furthermore, Elsevier Product Insights for Customers password reset

https://e-pic.elsevier.com/forgot

rejects random valid email addresses but recognizes my previously registered email address:

Thank you. An email containing instructions on how to reset your password will be sent to you shortly.

And the password reset email actually does get sent to me!

Dear null,

You requested to change your password. Click the link below to change your password:

..

Well, what do you know! As far as Elsevier is concerned I do have an account after all!

BTW, is this you ?

https://angel.co/aiden-meister
And it's rightfully unpopular. General public expectation does not define ownership. As long as the owner doesn't try to impersonate the Nissan car company, there is no problem.
Really great points here! Really liked the points about public speaking and dealing with meetings and asking questions to shy engineers.
There isn't exactly a global shortage of cloud storage providers, so the solution seems pretty simple. Just never store your files in only one place.
I highly doubt it makes up for 3M costs paid to defend himself.
Yes, and even fewer people would pay for that on a continuous basis like a utility. If there was a free alternative everyone would just use that one and suggest it to their friends.

Although I suppose there could be a certain exclusivity and elite aspect to such a network, similar to how Facebook differentiated itself with exclusivity by only being available at universities in the beginning. A network that markets itself as both for higher class people willing to pay monthly and free of ads/tracking.
Miller columns
The server needs to transmit its certificate to the client. Before that the client generally doesn't know the server's public key.

For PFS suites with ephemeral-ephemeral DH/ECDH (DHE/ECDHE in TLS parlance) the client generates a DH key pair for each connection and so does the server; both public keys need to be exchanged before secrecy can commence.

EE-DH-based handshakes have innate entropy (due to the ephemeral keys), but TLS was initially build without EE-DH. For the historic RSA key exchange, client and server random nonces supply the handshake entropy and liveness proof; again necessitating a transmission of both nonces to the other party. RSA-KEX was removed in TLS 1.3. The nonces are always there, mostly for PSK and PSK-only handshakes (otherwise you could use PSKs only once).

TLS 1.3 resumption essentially uses a previously negotiated shared secret (PSK) which allows both parties to forego authentication-by-signature, because knowledge of the PSK authenticates them. Forward secrecy is added back in by EE-DH, but can actually be disabled.

TLS 1.3 0-RTT extends session resumption. Essentially, the early data is encrypted only under the PSK. It has neither forward secrecy (relative to the session under negotiation) nor liveness [I think it might be hypothetically possible to reject replays server-side by rejecting duplicate ClientHello.random values but this is hugely out of spec and completely negates any performance benefits 0RTT might have had].

(It's important to realize that TLS is and always has been a meta-protocol with a lot of knobs you can tweak. Now, for use in HTTPS/FTPS/STARTTLS the set of parameters is relatively restricted, because e.g. browsers simply won't support PSK-only handshakes. For general discussions of TLS properties this is something to keep in mind, however.)
> This ruling has nothing to do with saying “it’s okay” and everything to do with the scope of potential judgments available to the appellate court.

Yes, that seems to be what the majority is saying. But could you or someone explain more? What's the point of appealing a jury decision if it can't be overruled??
I know the one you mean, this classic one was linked from it: https://mzucker.github.io/2016/09/20/noteshrink.html
A while ago I started looking for alternative linux distributions and void linux is my new darling that came out of this search.

It has many binary packages, out of the box musl images, images for many of my arm boards (raspberry pi *, c2 and cubieboard for instance) and a nice packagemanager with source support and arch like syntax (it's splitted like the debian apt-get/apt-cache but worse... I still like it)

If someone knows where I can report bugs for the live system I would appreciate a link (or I have to do it over the forum/mailing list).

It uses runit as init system and I nearly forgot how nice a system without systemd could be.

I have a little project on the backburner where I started porting arch to musl, but since I found voidlinux I completly stopped.

It has an arch package to install void in a chroot and it has void packages for an arch like init system (mkinitcpio). The packages are updated regulary and even thought it's a larger distribution than alpine linux (it doesn't start with a barebone busbox base, but without wget and curl :D),but has a way larger precompiled package list than it (it even has some precompiled packages missing from other distributions like toybox the bsd licensed busybox like tool)

Anyway since it still offers 32bit x86 binaries I will maybe use it in time for my old hardware. Up until now void Linux has made me very happy and I wonder why I didn't see it 10 years ago when it's first release was born. If you haven't yet give it a try.
I think the French also take their food very seriously, they believe that their food habits of children are established in the first few years so are much more likely to have mother's that stave off alcholol, cigarettes, paracetamol etc during pregnancy and breastfeeding.
“Hacker Search Engine” Shodan Caught Leakage of 750MB Worth of Server Passwords
Yeah, let's just blow all concerns about privacy in the wind. Think of the jobs! While we're at it we might also want to abolish building codes, to combat high rents. And what about OSHA? Clearly safety rules for workers just make it harder to start hardware companies!
[video] ES6 Class Syntax, Shadowing, Getters, Setters, Abstract Classes
Wait. Wait a minute.

I was planning literally this month to figure out how to implement domain traffic analytics on my LAN by using SNI via libpcap or similar (something tiny).

Will I have to configure a root cert and build a full DPI proxy to make this futureproof? >_<
I really don't like super bright LED lights on SUVs. They are at eye height and very dangerous.
There might also be a net loss to society for any number of reasons, Bastiat's That Which is Seen, and That Which is Not Seen is of special interest here.
This is a lovely account and, though it may not seem when you first read it -- in my experience, it is somewhat optimistic. For instance:

> The process of changing the system to have a new balancing point took work. It involved investments of engineer time, design work, tech writers and documentation changes, and all kinds of other "meta" stuff.

In most places I've worked, this involves investments of two interns' time and a few design meetings which result in a design document, half of which will never make it into the actual implementation. If it's a customer-facing thing, it will result in documentation changes -- otherwise, it won't. There will be no time to adjust the documentation and internal knowledge about how we do it now is going to float around as oral wisdom. Why we do it like that is going to be folklore two years down the road.
The 25 Worst Web Sites (2006)
Well, the way this person uses ImageMagick can hardly be described as "basic". In fact, he's a wizard. If you look through the bullet points at the top, he links to an impressive CV and PDFs with mathematical descriptions of how some of his scripts work.
[Medium] Performance Under Load – Adaptive Concurrency Limits at Netflix
What sociology should (re)learn from science fiction
Back at CS school, that's the definition I always hoped to hear of "race condition".
I did this 15 years ago when still in highschool. There was nothing of value code wise.

The one useful thing I got out of it is the realization how much illegal content there is everywhere. I pointed a badly written spider at vairous forums and chans and let it collect data from there. The 'ranking' was a list with the number of times a post with a link was quoted. I had plans on how to propogate the numbers through the graph of links, but after I looked at what I'd gotten in 2 hours I promptly deleted everything and reformatted that drive.
Life on an Island: Silence, Beauty and a Long Wait for the Ferry
Do you know if any companies have actually tried this? I'd love to read a case study if you know of one.
Everything truly important for customers will become an advantage for the provider in the free market and it will improve. Including privacy.

Governmental attempts to short-circuit that process are at best misguided at at worst harmful. They create ossified markets where established players rule and innovation and competition are nonexistent.

Natural consequences - but hard to accept when one just takes the rallying cry du-jour in arms. "Think of the children!"
Taking Photos Not So Simply: How I Got Bitten by ACTION_IMAGE_CAPTURE
Police use of drones in missing people search, crime scene recon on the rise
Privacy: Facebook has been collecting call and text data from Android users
The scale of it's emotional impact. People feel personally affected.

That is new.
FloydHub for Teams
Thats true. But would they trust the Russians to give real information?
So lots of zeros versus the alternatives.

Sure, for hobbyists and such. But if you're a "real" company and you are paying software people perhaps $50,000 (at the time) plus benefits, why would the cost of a workstation and a compiler make much of a difference?
Assuming you are starting from scratch - start with the Lua programming language. It is very easy. Practise writing everything as a function, practise composing everything from standalone, unit functions, practise writing recursive functions that use proper tail calls, practise writing co-routines. From there is will be a lot easier to pick up languages like OCaml, F# and Erlang - it will all be syntax, libraries and type systems.
Arizona Becomes First State to Establish FinTech Sandbox
Getting a new smartphone is what people want. They wouldn't have an exciting thing to gift or to receive on Christmas. They would get tired of the way it looks all the time. They wouldn't be able to show it off to their friends. They wouldn't be delighted with the new UI. Life would be a bit more boring in one more way.

Why would you say no to them?

Not the most important thing in the world? Sure. Something that millions of people want and are willing to spend 1% of their annual pay check? Yes.

Saying that it makes no sense constitutes a very destructive thinking. When you start thinking of what "makes" or "not makes" sense, you stop being empathetic. There's always a better, "more right", more proper thing to do and millions of people are just wasting their time on something they don't need. But aren't they human beings? Isn't having irrational wants rooted in the humanity itself?

Planned economy was dealing in the same maxims. "People need food". "People need shelter". Also tools and military equipment. Fashion clothes? Nah, screw that, useless. Beauty items? Shenanigans of capitalists. Some variety of food? We don't have resources for that.

We know how that ended up.
You can use sparse disk images so that your encrypted content is stored in chunks as little as one megabyte.
When you say removed "them" I'm assuming you mean removed the collection limits and not the Obama campaign, correct? Thanks for the info by the way!
I think it should be illegal to require people to accept an agreement that enables facebook to sell their information to anyone. Not saying it is easy to do though. I guess that is part of what GDPR attempts to do in Europe. Intentions can be argued, but it is something.
Recounting the rationals: twice [pdf]
This is not only not true but incredibly disempowering. Every person under capitalism has to create value that others will pay for. It could be a traditional job, freelance work, a small business, a startup, being the stay-at-home domestic partner, performing, etc. Most people will choose a job because that's an easier path with well-defined benefits, but if you limit yourself to that, you're really boxing yourself in. What if you want to be a film director or a novelist? Those aren't even jobs you can apply for.
which is very far from the truth

I'm not sure it is, it's hardly as if adverts are just lists of facts about the product you are buying. All that changed with Edwards Bernays. When I see an advert on television that is telling me I need to buy a specific model of car to be a good father then I know I'm seeing propaganda.
Plenty of companies have some scheme where you have to "pay" for some internal service from your team/organization budget. If teams are paying for something it's easy to justify keeping it.
I'm working on a native client for Skype, Slack and others.
It's only ~100 KB(!) and can handle tens of thousands of messages without any lag.

It will be out of alpha this month.

https://eul.im
I've spoken with more than one person who made it through Real Analysis intact by reading through "Introductory Real Analysis" by Kolmogorov and Fomin. There's a Dover version that you can probably find for $12 used... It was where I started, but I know several people who found it invaluable after struggling with other texts.

Introductory Real Analysis (Dover Books on Mathematics) https://www.amazon.com/dp/0486612260/ref=cm_sw_r_cp_apa_a62T...

Come to think of it, there are a lot of good Dover books on mathematics.
I usually refrain from distro- (and editor-, and language-) related discussions but I think Void Linux deserves an exception here:

- Everything is remarkably simple, (mostly) well-documented and straightforward.

- Friendly, dedicated and very knowledgeable community

- Open development, very few hooks to jump through if you have something to contribute

- No systemd, so: rebooting your system isn't a lottery where, if you lose, you get to wait for 90 seconds for some service to stop, your system doesn't start doing strange new things after every update because something that's been working fine since the 1980s has recently been declared broken, no binary logs to get corrupted (and no need to tweak your system and sidestep this brilliant scheme). Of course, you can't do much DevOps on Void Linux, but I'm pretty sure that's about as relevant as the fact that you can't run macOS on low-power embedded systems.

- Completely community-ran and independent. Some things don't happen as quickly as in corporate-backed projects, but you're also not beta testing for their LTS or enterprise-grade releases, either. Also, no bureaucracy, no priority mismatch, no one to shove alpha-quality software down your throat.

It's basically like OpenBSD with more drivers but based on slightly worse and less cohesive technology :-).
KDE is excellent.
Always seemed it got a lot of negativity from people that only perceived Linux as an operating system that should be run on a 5 year old laptop.
I don't really see the point of this poll: Pantheon wasn't an option in it. Makes the rest look like jokes.
I shall have to try KDE. I've been an xfce user for years but have been hearing good things about KDE.
The Future of Server-Side Programming with Google’s Dart 2
Regulations dont have to be so heavy that you require consultants or a legal department. Regulation that protect the broad population from being exploited is neccessary everywhere. Just look at the crypto market compared to the more mature financial market. Issues with corporations manipulating the law makers is a separate problem.
Because it was allowed and it is an easy way to spread an app virally? "John Doe via ViralApp: [This app is great! Get your own Virus today by clicking here!]"?
Australia-UK: First non-stop flight arrives in London from Perth
You're right, not enough people know about sox. I can spend hours making random sounds with the synth just for fun. I've been contemplating making something like dwitter.net for sox as a side project. People would submit sox commands for various interesting sounds.
I tried most of the popular desktops last year and KDE was the best in terms of dealing with high-dpi displays. Not perfect but better than most.

It wasn't stable for me though and it generally felt sluggish so in the end I switched to Apple.
/dev/random entropy issues?
most criticism i seen nowadays is rooted in the KDE 4.X days.

KDE 5 has been excellent and suprisingly lightweight aswell.
Native APIs Suite for Working with Business Documents and File Formats
what about websites which are not hosted in the US, but for instance, in europe or asia?

This law wouldn't be in effect for them?
Put it in the contract. Get a lawyer to double check. Make it clear to them as well. I usually triple check the anti-competition and the IP clauses in all contracts.

This kind of thing happens all the time. People who are experts in a field get hired by competitors in the same field.
Perhaps we need some form of central authority to regulate perceived value. On an unrelated note, anybody here interested in buying a Trabant?
Matching demand with supply at low cost in 139 countries, 100% wind water solar
Well yes, and it's exactly the same for video games, which almost always are about making the player overcome obstacles to achieve rewards.

I'm not sure about heroin, but there's a bit of an obstacle in getting that into one's system too, no? And then usually in getting additional funds to acquire the next fix?

Life is a struggle.
Your client is most certainly going to view your work as encroaching upon their intellectual property. That is simply how managements think. Regardless of the merit of their beliefs.

It might be possible to avoid future problems by having a contract where you disclose that you are working in the same space as the startup and that you will not use your code in their product, nor their code in your product. It is of course, difficult to prove that down the track.

If I was in your situation, I would decline the work. 10-16 hours doesn't generate enough revenue to pay for lawyers in the future.