skysight-inc/HackerNews huggingface dataset:
kann [0] is a similarly small neural network library written in pure C. It's quite fast for CPU-only, but only applicable for rather small problems.

[0] https://github.com/attractivechaos/kann
>We're also seeing very concerning trends in the readerships and profitability of print media

Why is it "very concerning" (assuming no financial interests) that a legacy form of media is struggly to dominate in terms of profitability?
The issue goes beyond the limited threat of any particular vulnerability. The larger issue is that we were blindsided by a category of systemic vulnerabilities that upend prior assumptions about the security of core principles of modern processor and operating system design, which raises doubt about our collective ability to identify and avoid risks in the design phase of computer and communications systems.

Even if every individual aspect of these vulnerabilities had been recognized before, it is undeniable that the risks of their synergistic (from the point of view of an attacker) combination had not been properly appreciated prior to deployment of the affected technology, and for some time after.
Is there any estimated timeline for 0.18? 0.16 to 0.17 seems to have taken about 2 years.

There's a roadmap page but it lists 0.18 as "Scheduled For Release 2017-11-03".
Also due to some ODD ideas about banks by some of the founders you have not got the nationwide consolidation you did in the EU - the federal nature and relatively weak central government doesn't help either.

With a small number of banks and a stronger central government which can exert pressure you can see why the UK and EU are ahead.
I don't think it's a great idea to name an unofficial project "GoPro-Py", GoPro is a trademark.

Also, the code mixes notation. Most Python code use snake_case because it's encouraged in PEP8, this code use both snake_case and camelCase (take_photo(X), getStatusRaw()).
I didn't know about the first attack you mentioned, but it still seems to boil down to cloning non-EMV card onto card that behaves like EMV. For this to work I think that the terminal must be horribly misconfigured and then it almost certainly defrauds the merchant and not the original cardholder as I don't see how merchant's bank would ever authorize such transaction.

The second on you mention is based on exploiting flawed RNGs in certain ATM implementations and using that to replay transactions that happened elsewhere. Fix is obvious: don't use flawed RNGs.

Third known attack on EMV is similar to the "accept any PIN" part of the first, but done by MitMing the interface between terminal and card. This relies on the fact, that "No PIN was required" and "Correct PIN entered" produces same transaction certificate. This also can be mitigated by altering the terminal configuration.
Was that for a BlueCard? I know a ton of people working here under the BlueCard scheme but I don't personally know anyone who's been approved without a university degree.

I'd never bothered to officially graduate, but I did it before immigrating here in case I have to move to a BlueCard post Brexit.
I love opening up a console in chrome as a insta-Javascript IDE when I need to do some quick sanity checks
Cool, yeah, I'm "stuck" with my old, tiny smartphone but I'm quite reluctant to change it (I even refuse to call it an upgrade [shakes fist]). But it's really insecure and slow also... I have a similar problem with Firefox, no updates since 55.0.2.

But Movim looks really great, I should give it a go, thanks for the links!
Who is demanding that?
To add a little levity to a serious discussion, "little deaths" in French are quite a different subject. :)

https://en.wikipedia.org/wiki/La_petite_mort
A better way is to cook pasta in a pan, adding water bit by bit as you would in a risotto (look up "pasta risottata").

In Italy no professional chef I know would allow oil in the boiling pan ("that's what Frenchies do, because they don't know how to cook pasta without making it stick" being the common answer)
Spyce Kitchen, a robotic chef built by four recent M.I.T. grads
From the FAQ:

It is a work in progress. The current version is a rough draft with many problems and placeholders. I am using gitbook and github to keep track of versions of this website and the book itself.

You definitely do not get that impression just looking at the homepage. Beware!
I'm sure they had, but what these numbers were and how they interpreted them is not known AFAIK. Google might have considered that RSS didn't fit with their long term plan for how the web would be consumed, I'm thinking in particular of AMP which has a certain overlap with RSS but gives Google a lot more control.
Wall Street’s #MeToo moment could hit multimillion-dollar tipping point
After 15 years, I’m finally ready to launch our SaaS product
Ask HN: Resume coach?
Where can I find a resume coach?
No, since you are the controller of your site hosting the Facebook component. Facebook is in that workflow 'merely' a data-processor.
Advertising companies have lobbied long and hard to drive an interpretation of the GDPR in which they would be considered a 'controller', resulting in 'nothing changes for the business, realy'. AFAIK, they (thankfully, from a privacy perspective) failed.

It realy is very much like environmental regulation. Before things like the EPA etc. came to be, it was a toxic 'everything goes' type of environment. Transition to a regime where businesses are held to data responsibility might be painful at first, but ultimately hugely beneficial to all.
Many forget that cooking (when our ancestors first figured out fire) is one of the key factors in our species becoming what it is today.

It's a shame this ancient ritual is not fully appreciated for what it truly does for society.
Exactly. In fact, this is a tremendous advantage that RSS has. The assertion that it needs some "sort of commerce layer" is not an issue of the technology, but a question of the industry of advertising and the structure of the economy. The problem of keywords as the author mentions is a cultural one, based on the way our society exchanges and prioritizes the information we receive.
Ah so she's worried that she might have to pay her workers more is what she sis really saying - I normally leave a cash tip after paying by card in the UK
For what it's worth, truncate should not be a required permission for migrations/ddl tasks
Most of the problems the author mentions are, to me, the actual reasons I love RSS.

No filtering. No comments. No proposal. No central way to find them.

It's not the absence of curation.

It's my curation.

It's easy: I like a site, I want news, I get the RSS. I delete it when it's not to my taste anymore.

The basic, deterministic, manual aspect of it is what's right with it. Not what's wrong.

Another weird idea is that RSS should be for everybody. No. It speaks to a certain kind of people, and that's fine.
You're right that the precision of Cas9 is not a 100% (off-target effects), but

1) it is still magnitudes more precise than traditional breeding (where you have no idea what is happening and you only select by screening for selected phenotypes); a popular example: https://en.wikipedia.org/wiki/Lenape_potato

2) you will anyway have to verify our intended modification by genome sequencing

Your cited source (GMWatch) is on the same propaganda-level as an Anti-Vaxxer website.
Roassal is cool. I'm using it for my interactive visualizations of program state.

Here is the tutorial I like: http://agilevisualization.com/
> used a secret token for auth instead of a signed

Seems that you'd still have an issue here, as the secret token would still be linked to a user ID somewhere in the system.
under "criticism"

Philip Lieberman argues that since band societies of approximately 30–50 people are bounded by nutritional limitations to what group sizes can be fed without at least rudimentary agriculture, big human brains consuming more nutrients than ape brains, group sizes of approximately 150 cannot have been selected for in paleolithic humans.

Evolutionary psychology/nutrition is based on a lot of guesswork. We don't really know how people lived, or what timescales are important.

A lot of the early conjectures about historical developments are based on philosophical thought expirements of 19th century intellectuals. Others based on hunter-gatherers in modern times. These theories tend to be "economic" (like Malthus) and resource focused. "Agriculture created surplusses, which enables specialization..etc. underpants.. Greek temples"

In eastern Turkey there are fascinating sites from the paleo/neo-lithic transition period. Interestingly, the massive & seemingly ritual/civic site (gobleki tepeh) predates the agricultural sites. Ie, it seems a large complex pre-agricultural society existed, with many people cooperating in ways we thought were first developed by advanced agriculturalists.

One could reasonably (though not conclusively) interpret this as large-scale culture giving rise to agriculture, not the other way around.

Humans are behaviourally diverse. I imagine one would find groups of various size at all prehistorical times. For analogy, wolves are somewhat behavioural diverse. Many are solitary. Some hunt mostly rodents, and live in small packs. Some hunt mostly large game, and live in large packs. Some scavange more. There is a negotiation between wolves' inherent behavioural range and the "economics" of their lifestyle that dictates group size. Humans have a much wider range.

We don't really know much about early humans, even what they ate. We can guess though, that this varied more than it does in wolves.. at least I think so.

I recently heard a lecture on archaic sapiens in the Levant. One theorist argues they ate mostly elephants which (I imagine) required and supported large group size. We don't really know.

In any case... the reason I bring all this up is that group size, and our ability to cooperate effectively in different group sizes is just interesting. It remains (imo) central to key mystery of human origins, possibly explaining the sapiens ascention.

Yuval Noah Harari basically narrates all human history as an increasingly developing ability to cooperate in ever larger groups. This is the underlying difference between language, writing, myth, religion.. The communism-capitalism cliche is basically a debate about mechanisms of cooperation in large groups. What we are doing now (on hn) is coordinating across a large group, so we can think* together.

I think Dunbar's number (or another similar one) gives us the maximum group size for spontaneous coordination, without formalization. This is good to know.

More research please :)
There a contact in https://news.ycombinator.com/item?id=15560766
Its mainly to avoid the employer keeping the tip for them selves
It is still very much best practice to run nginx/apache in front of a Node application. Node is optimised for the inward-looking functionality (i.e. your app) whereas the focus of nginx/apache is the outward looking functionality and leaving a small attack vector and handling bad clients.
They had a very simple reason, they can't show ads in the RSS feed.
How do you mean? It has been claimed since at least the 13th century that Vikings used these magic sunstones, now (2013) they even have examples of working sunstones from Viking ship remains. How is this theoretical?
Not bad, but as I recently switched to FF as my primary browser, such posts would be more useful to me if they were written for the Firefox DevTools ;-)
I just went through this process, and landed on a Thinkpad T480.
The "receive new content" modal is really annoying. It appears every time my mouse exits through the top of the page, so it pops up every time I change tabs.
I read this as an extended consent banner ("this site contains cookies") + user ability to hard delete pii + IP. Hard delete is substantial, but the banner is just going to be ignored like the cookie notice. If that has an affect of traffic, it'll be punishing sites that don't require login/signup, which means the average EU consumer will be required to sign up for more accounts in order to do what they did before (because if you're going to require consent, why not require signup?). In any case, I can't see very many use cases where a site dials back its data collecting. Retargeting is the crux of ad-supported sites.
A resumé platform that lets you use photos and videos
Microsoft releases the original Windows 3.0 File Manager source code
...right now.
Pretty cool, thanks for creating this.

A good addition would be audio output, or MIDI export.

From looking at the tabs, this seems mostly aimed at fingerstyle guitar playing, rather than playing with a plectrum. Some parameters to the generation could produce tabs for a wider range of styles.
Horse racing results
Looking forward to read the GC chapter.
OwnCloud introduces Delta Sync
If I were not of the opinion that social media is more damaging than beneficial to humanity, I'd like to see a social network that limits the number of people you can interact with to ~100. Want to add a new person? Then get rid of an old one.

Similarly, hard-coded limits to contact lists, e-mail address books, etc.
It'd never work, but I'm curious what the effects would be.
Credit cards in general are not too popular in Europe, they're either not accepted at all or only Visa and Mastercard are accepted. A Maestro debit card is your best bet and will work in almost all terminals in Europe.
Yeah, it mentions that it's only accounts created after restore.
It must be considered in relation to the size of the transaction; I have given gifts of bottles of wine or Scotch (and in one case, an Echo) to professional service providers who have done a notably good job.

I don’t tip a lawyer $2 on a $2000 matter, but a $75 bottle of Scotch is proportionally similar (in fact, a bit smaller) and not at all inappropriate.
After I wrote it I read it again, trying to get some grasp of the space of possible interpretations and associations people might think my ideas are stemming from. (The truth is that I have just formed a habit out of using this terminology, and don't always have an underlying unified geometric picture in my mind as I write it.) But your response is an interesting meditation on how often we users of the web (1) always read everything totally out of context, and thus (2) are especially adapted to always trying to infer what the actual network of associations the author intended to point to, but that (3) sometimes we make an incorrect assessment to the precise region of the map, and in fact (4) sometimes there is no such intended association at all.

I think that's what makes @dril so funny. He's incredibly skilled at walking the classification boundary of that mechanism.
Why is NASA's space center based in Houston?
Standard formats are working great in 2018.

RSS is the javascript of text.
When I'm working on a windows machine I'll often use dev tools to do one-off text-processing or templating.
Consider asuspro notebook (https://www.notebookcheck.com/Test-Asus-AsusPro-B9440UA-Core... - it is in german, so you might want to run it through google translate). ASUS never disappointed me with a lack of support for Ubuntu. So does this Asuspro. It is incredibly light and durable. You can easily hold it in one hand and type with the other. The battery runs for at least 4 hours of continuous work in my setup. If I turn off the screen, it can survive the whole night on the battery.

Supports 2 core/4 threads Intel Core i7 up to 16GB RAM. Works everything except maybe for the fingerprint reader, which I never tried/tested.

To get best battery performance use tlp and throttle the perfomance on the batteries to e.g. 30% (use CPU_MAX_PERF_ON_BAT setting)
1991 original SNES. Still rock solid.
I guess that the decision to shut the Reader down didn't appear due to lack of users, but rather ambitions to shape the internet-news-experience by more tightly controlled, proprietary apps like Google Currents/Newsstand or maybe even Plus.
> It's a perfect place for discussions

Reddit is terrible for discussions. It is perfect for current, forgotten-tomorrow consumation of things.
> I assume it's mostly driven by former C/C++ programmer

From what I can tell, Rust seems mainly to have attracted people from dynamic interpreted languages who weren't deeply invested in C or C++. I think it's easier to sell a Ruby programmer on performance than it is to sell a C++ programmer on an unfamiliar safety mechanism.
Sligthly off-topic, but I've been working on a rss-like feed for newsletters: newsletterhunt.com. I may be wrong but I have a feeling that rss moved to newsletters
Incorrect. My original post had no attack in it. At all.

Then look at how I was replied to... "Sorry, but no." - Sorry, but no what? I can't have an opinion that differs than yours?

Gimme a fuckin break.
Leader/follower and primary/replica are common terminology now. It's unfair to paint the sensibilities as irrational - this is exactly an example of the kind of nonchalance that helps lead to underrepresentation of minorities in tech.

You might not care, but there are a lot of people that do. Taking steps like this improves the comfort level others while affecting yours none. Why is that not worth it?
What about a database that would require separate DDL from data commands? Instead of having a single super-user that can do both DDL and INSERT/UPDATE/DELETE, you would instead have a DDL user, and a data user. That would probably prompt people to only use the data user in their application?
Hi there.We used an Elon musk demo(who doesn't love this guy) to showcase what it means to use photos and videos on your resumé.Let us know what you think.
I don't see anything in RSS itself that would preclude using it for an algorithmically curated feed, any more than HTML does. It's just a protocol.
I personally still have the "Subscribe" icon (Firefox 59). I had to move it from "Customize" to my toolbar but it is definitely there.
The MTA, like most city's public transportation administration, is predominantly staffed by people of color- the DC metro is a whopping 97%. These serve the dual-role as a jobs program, and as such can't be held to the same standard as you see in white countries. Just think, would you be the one to tell a group of black people that their cultural values [1] regarding timeliness, service, and so on are incorrect? Of course not, nobody would, which is why we will continue to have a metro system that embodies those values.

1. https://www.minnpost.com/good-jobs/2017/01/metro-transit-has...
FF is my primary browser for actual browsing. Love the new one. But for development its Chrome always. Nothing else comes close IMO.
I think there are good points here - but the fact remains that it is impossible to send every "qualified" candidate to a top school. What can we do to make not going to a top school less disadvantageous?
> while users of single-user personal computers

You mean, unless you browse the web and enable javascript...

Also, which code do you "trust"? Computer games? Phone apps? The OS?
This comment has no attack in it. Then look at how I was responded to.

Such cheap bullshit.
Choose Mobzway as Your Teen Patti Game Development Partner
America is so stuck in legacy tech. Nobody checks signatures. Strong Factor Authentication requires min 2 of 3. India is leapfrogging to biometrics using Aadhar. Europe is current with chip and pin. America is in quill pen stage
...if you want to fuss over the pan for 20 minutes. OR, add oil, add pasta, bring it to a boil and set a timer.

If the result is the same, I'm all for that method.
I tried that recently after reading it on here, and the result was a thin layer of cooked white stuck to the inside of the shell, while the remainder of the white was no firmer. This tallies with my expectations based on thermal gradients. Am I doing it wrong?
Kenji Lopez-Alt's method is the best I've come across[1]. His book is mentioned in the linked article as well, I've not read it but it sounds good!

[1]: https://www.seriouseats.com/2013/03/how-to-poach-eggs-easy-w...
If you do that, then on almost every context switch the new process will resume with a cold cache. In the worst case, if you were to send lots of IPC requests to a privileged process then your process could have a cold cache far too often.

Many older generations of ARM (v5 and earlier) used a virtually indexed, virtually tagged (VIVT) cache to reduce latency but this required an L1 flush on every context switch and that was incredibly painful!
As long as you don't go on holiday to Rome, you'll be fine.
Steve Yegge: “What Would You Do with Your Own Google?” (2011) [video]
This is the only way I have been able to get reliably poached eggs every time. All other methods seem to produce the wispy cloudy mess at some stage.
Once it's at a boil, remove the lid. Problems (mostly) solved?
Microsoft renforce la sécurité de Onedrive et Outlook contre les ransomwares
If you embed a Facebook like button and Facebook loads their scripts into YOUR site then it is YOUR responsibility to make sure Facebook is compliant with the law.

The same goes for ad networks. YOU are responsible for making sure the ad network is compliant. If you include a non-GDPR complaint ad network script on your site and somebody complaints, then you are in for it because you were ultimately responsible for that network being able to track the user on YOUR webpage.

If Facebook is GDPR compliant and has consent from the user then you are in the clear. If Facebook is not GDPR compliant and tracking people who aren't users then a EU or local court will set up a campfire under their asses (German courts already have).

IP addresses are definitely personal data (PII and Personal Data are different, the GDPR defines and cares only about the later, PII is mostly an US term used interchangeably with PD on the internet) German and EU courts have ruled that since an IP can be traced back to a person, it's personal data. Unless you have a good reason to log it (hint: firewall and webserver logs) then you need consent for it.
Yes, to be smart enough not to work for Barn Cat and to only work for herself if sex work is the only type of work she wanted to do. Besides that, I'm sure she could've found a variety of other jobs if she really wanted (although potentially a lot less profitable).
It might be easier to answer if you explained why you think it would be better.

There may be cases where by-reference (yes, that's an absolutely acceptable thing to say, even in C) is more efficient: If the struct is a kind of "this pointer" (as in object-oriented programming) that is passed to a bunch of functions but relatively rarely used, then passing it by reference causes much less register pressure. Passing it by value would mean occupying a lot of registers with values that are probably not accessed.

On the other hand, if you expect the callee to do actual computation on all or most of the fields of the struct you pass in, passing it by value should probably be the way to go. This way, the values to be processed are already in registers and don't have to be stored to the stack by the caller and loaded back from the stack by the callee.

There is no general answer that is uniformly best, it depends on the characteristics of the actual program and their interactions with the compiler's optimizations. With inlining in particular, which should often allow the compiler to generate the same code for both versions.
Or use applications they probably didn't do a full audit of...
Kontena Pharos: simple, solid, certified Kubernetes distribution
Thanks for the clarification. I will look into it !
Tried to find a counter-citation for this, and the best I could do was " A total of 3481 different VOCs [volatile organic compounds] were observed: 1753 with positive alveolar gradients, 1728 with negative alveolar gradients."

https://www.ncbi.nlm.nih.gov/pubmed/10410929

It turns out that humans exhale all kinds of things.