skysight-inc/HackerNews huggingface dataset:
I've never provided literal, logical answers to security questions, as even without sharing the answers elsewhere, the logical ones would be entirely too easy to guess.

"Make of first car?" There are only so many vehicle brands reasonably accessible in a geographical area - not hard to brute force.

"City of birth?" Common knowledge among all my friends.

It's too easy.

An appropriate answer to "Make of first car?" would be something like "red &5 Blueberry."
Yeah, this is why I use "lies" rather than "randomly generated string".
Do we know if it was intentional? Otherwise a better title would be “Some third party repaired screen fail to work on 11.3”
> People are not rational optimizers, they're mammals

True, but people DO spend a lot of time optimizing their food; dieting is a huge trend.

> have you considered the possibility that you, specifically, didn't do a good job of cooking for yourself

Yes, I admitted as much. My point was that it's really hard to "cook for yourself and use fresh produce". There's nothing wrong with the idea, it's simple and noble, but the practical application of it is very challenging.

> As for farm shares, many/most CSAs deliver, either to the home or to a central location in town (often a local co-op). So it is, in fact just one delivery truck driving down the highway.

So how is that any different than what grocery stores do?
Just wait til ISPs want to sell you VPNs... for [insert random marketing benefit like 'security', 'privacy', 'discounts', 'no data cap', 'cheaper' that hides throttling competitors and allows them to install an app on your devices to do whatever they want including scraping, which many people will fall for due to abused instilled trust from their privileged network gateway position they bribed to attain]
> presently going bankrupt trying to pay for each other's healthcare.

Only a problem for 2 countries in the world. The rest of us have this figured out.
> I have yet to see a cogent argument justifying that difference. My suspicion is that it ultimately falls down to "ISPs are unpopular, web companies are popular."

The natural, physical costs to creating an ISP creates a ready parallel to other, established natural monopolies. Electrical and water suppliers spring readily to mind.

Big Web companies do not have the same natural barriers to entry, which suggests that other models may be available.
Interesting. Some highlighted links from the writeup:

1. Differentiable plasticity: training plastic neural networks with backpropagation
(https://arxiv.org/abs/1804.02464)

2. Born to Learn: the Inspiration, Progress, and Future of Evolved Plastic Artificial Neural Networks
(https://arxiv.org/abs/1703.10371)

3. Github for the project: https://github.com/uber-common/differentiable-plasticity

4. Learning to Learn (http://bair.berkeley.edu/blog/2017/07/18/learning-to-learn/)

5. Meta-Learning: http://metalearning.ml/
They don't and shouldn't. But they should and can detect if a pending update will break your device, or downgrade more gracefully when their software runs on hardware that is missing some expected features that were previously unused.
All keys, for one person

That is not great, but it's much much better than the 500 million people in the Have I Been Pwned database.
> Which programmer enjoys typing, or which builder enjoys the physical activity itself?

That's actually a reason to get better at these things, though--the better your fundamentals are, the less attention you have to pay to them and the more attention you have left over for actually thinking about what you're doing. When I'm coding, typing is the last thing on my mind--I just think code and my muscle memory translates it into keystrokes. And I'm a Vim user.
I'm not exactly sure what your threat model is, then. The typical way this gets deployed is with U2F USB devices with non-extractable keys. "Access to all keys" is not exactly technically feasible.

If your concern is "well, there's always the admin/support backdoor", i.e. a compromised admin account or a social engineering attack on support personell could lead to attacker-controlled keys being enrolled, I'm afraid that's not really something you can solve by just throwing new technology at the problem. However, you'll definitely make it harder to even get to the point where admin accounts are compromised by rolling out U2F or webauthn.

Personally, I'm perfectly fine with a technical solution that solves phishing for everything but the most advanced social engineering campaigns.
Sprint and T-Mobile are reportedly talking about merging, agai
Whistle blowing laws also exist, though.

So if they are doing something illegal, and therefore one is protected from prosecution, they should absolutely "leak" it to the authorities.

Doesnt matter if you are unemployable if you recieve millions in a whistle blowing reward from the government.
If you are capable of building the most powerful weapon on earth, you are capable of guessing it will be used on something else than your current designated target, later.

But they didn't think about that. They don't mention that they thought that they were working on something that could literally end humanity.

And the thing is, we didn't even use the bomb to win against the Nazi.

That the bomb was a good decision or not is a hard debate that I still think about sometime.

But there was not that much debate reported from the people building it.
FTC Warns Manufacturers That 'Warranty Void If Removed' Stickers Are Illegal
We are not talking about a small number of users though, millions of their users use third-party screens.

They should have a test to make sure they don't get left in a dust with an update.
Being such an annoying/intense associative thinker that I am, then I must be some super creative genius, and don't know it yet? Unlikely, so I doubt that it's true.
Hacker Daily – A daily podcast for Hacker News readers
I think the easiest way to measure WTFs/minute is to be physically located next to the person swearing at your platform.
A closer look at the role of “smoking gun” mutations in diabetes
Yeah, it's more like a history textbook than a novel.
How Immigrants Discriminate
Missing info: how much will it cost to use the Dark platform?
Indeed. I wasn't clever enough to avoid creating a Google account in the first place (although I'm pretty sure it was just a “Gmail” account back then).

I switched away from Gmail and Google Calendar a couple of weeks ago. I also disconnected my Google account from my phone. I haven't regularly used their web search in years.

I've used an email address at my own domain for years, precisely so I wasn't tied to Gmail, and therefore I haven't needed to spam my contacts or change a load of user accounts to a new email address.

It's almost a shame Google+ never took off, because then the non-tech media might be talking about Google in the same way as Facebook.
This will one day be as obvious as cigarettes cause cancer is.

Prolonged fasting (consuming only water for 10 to 40 days) is a highly effective treatment for many diseases, including Crohn's, most other IBS related, diabetes, MS, and many more. At some point in the future we will consider pharma companies, government agencies and other entities hiding this fact to be criminal.

Edit: my personal hope is that water fasting becomes mainstream and cures many people before my HN karma reaches 0.
For this reason, I wouldn't recommend that anyone try this. I expect that the Darklang employees will present a really early/difficult platform to the startup and require that the developer expand the platform as they go, which will be more friction that actually developing the startup's software.
Most applicants will realize this halfway through the interview, and the one that takes this offer will be the one who is most surprised by this fact.
I hear you, but can't agree fully. They showed a subset of their users negative posts to see if it negatively impacted their lives. As this could have been expected, they knowingly hurt their own users.

I have lots of other reservations about working for Facebook, that was just the one I specifically cited to the recruiter.
It doesn't sound like they have limitations on where you live. They only ask that you come to their SOMA office every day. You can live in a more affordable place like Oakland and take BART or Redwood City and take Caltrain.
ISPs know they're a commodity, which is why everything they're doing is a struggle to avoid that trap.

I guess I look at ISPs as acting in their own best interest rather than out of malice.

Essentially every initiative they've tried for the last few decades comes straight from HBR [1]. They aren't bad ideas, they're just almost all anti-consumer.

And their options for innovation are limited (as publicly traded companies). The thing we (HN) would like ("faster internet for cheaper") is the most expensive for them to build.

So naturally they gravitate towards VOIP or mobile content, because those things produce better ROI.

The only way we'd get the ISPs we want is if they were prohibited from being anything other than utilities. Although the irony there is that they'd likely find it difficult to access the necessary capital to build super fast networks. (Or in other words, the blood tracking money subsidizes faster internet connections)

[1] https://hbr.org/2007/12/how-to-avoid-the-commodity-tra
Can I change default display width in built-in PDF Viewer – Mozilla Support
Rule one of being productive - stop reading useless advice about increasing productivity.
* forever bind you to our services and charge you any amount of money because you have no choice but to pay. If you fail we will just take your business.
Interesting about the espresso. Does a cappuccino with ~4oz of whole milk count as interrupting the fasting then? What about a macchiato?
Google provides a way to "subscribe" to email notifications of new search results for a given term (don't have the link handy right now). I've been subscribed to results for my full name for many years, and occasionally get an email of a new mention here and there.
Only tangentially related, but this thread seems like a good way to contact the team: the "engineering" and "operations engineering" job description links are 404s on this page: http://darklang.com/team/
It’s a bold move. I like it, but I’m alarmed at how many people are acting like $3k isn’t worth taking. If I wasn’t solidly anchored on the east coast (Jacksonville, FL) I’d be taking a serious look at this, since it would give me about a 30% better chance at bootstrapping and avoiding taking on funding or other debt to build something cool.
I feel that you are extrapolating on one data point.

The quote I think you're using to say "this is for startups":

> We pay you (or your company) $3000 a month.

In contrast to the multitude of other more personal references:

> We'll pay you $3000/mo

> Dark is a new tool to help you build a complete scalable app in an afternoon.

How many startups are working on "building an app in an afternoon"?

> You come to the office

> You build the backend

I don't think it's particularly fair to say "a lot of people didn't read the article" and that it is somehow obvious that this is aimed directly at startups, not individuals or otherwise.

Of course, no, it's not a livable wage. It's to me, more a "beta tester stipend" with a few bonuses. Can it realistically work for someone as a sole "job"? No, not without external support or a nest egg.

But I don't think that shows conclusively that they're looking to pay startups to work from their offices.
Ah, yeah. That is useless, by its own measure. Good riddance.
Striving for better sources doesn't mean misrepresenting sources. The university press release might not be to your taste but it's not 'blogspam' - it's not a lifted copy of the sources you are suggesting.
The patent will kill it in its tracks. mp3 is dead now because of the patent (well, also because of streaming).

The open source community tends to provide a lot of the system-level technology for using things like this and I'd expect them to completely ignore a patented format.
I think I would prefer a dot prefix instead of backticks for keys.
I am sure they do, it is very common to have cross-cultural training. Go back 30-40 years and the Japanese and Korean professionals were getting cross-cultural training to work with US teams.

Most MBA programs also include this kind of thing regardless of what country you get your MBA in.

Of course you get a lot of generalities like:

- Americans like fast decisions

- Americans would rather fix a wrong fast decision after the fact than wait to make the decision

- Europeans generally prefer analysis and deliberate decisions

- Japanese are consensus based and hierarchal

Etc.
Why would Apple test every 3rd-party compatible screen?

If they don’t test, components will break. If they don’t change APIs, components won’t be able to improve sufficiently.

In this case, there are only two actual solutions from Apple’s perspective, and they’re both ‘bad’ for customers:

Restrict users of 3rd-party screens from upgrading their devices, even when breakage may not occur, or, let them update and take the risk.

Technical debt, likely caused by time-pressure before releases, is expensive when it can’t be left behind.

Apple also doesn’t have to support much 3rd party hardware because their phones are the only built to run iOS.

I would imagine that Google’s processes are better equipped to support more hardware and for longer durations.
I looove my Keetsa. I have the Plus, with a thin synthetic mattress pad on top. Pure foam mattresses feel "dead"; this is the best of both worlds: some bounce from the coils, foam for comfort, and a thin pad to keep it cooler. Their memory foam pillow is also amazing. I hate using any other pillows now. Eight years now and it's still springy.
That's sorta speciously true of any experiment. The space of hypotheses is infinte, you can only target one. Ruling out one attractive and well-supported theory would be news on its own. A confirmation of a particle discovery would be bigger still, of course.
Look at an electronics engineer working in aviation. They can work on military stuff, or civilian stuff.

It's not clear to me which one will cause more human death. Civillian aircraft is a significant cause of anthropgenic climate change.
There is a way to "offer" a client cert bundle to a browser, where the browser would simply ask the user whether they want to accept the personal cert into their trust store. Pretty smooth process.

As for downsides, yes, no exporting: users have to go through the enrollment process with each new device.
They would be exceptionally easy to trigger by a nefarious actor.
> While skilled, I doubt than more than a small fraction of FB work force is close to Feynman's IQ.

In fact Feynman's IQ was merely "above average" according to Feynman himself, who got a look at his score after taking the test in school.

But if you're using "IQ" as a proxy for actual, you know, intelligence then yeah, I agree :-)
So many hidden gems in Mexico that Americans don't know exist. I'm ready for my next adventure down there. Looks like it's time to book a trip!
Edit: expanded my answer here: https://news.ycombinator.com/item?id=16803660
Learn React by building a web app
I worked in a lab and where we used an atomic force microscope to scan single DNA strands on flat surfaces. At first we couldn't "read" anything as the surface was covered in gunk from the water we used, switching to water in glass bottles fixed this.
How can we know if Dark would be suitable for our use case without more technical info?
It's not a job offer, they're paying you to give them feedback on their product while you're working on what you would have worked on anyway.
> Maybe the meanings of these words have morphed over time, but in what sense is a "machine-learning model" not a back-end concern? It sure as heck isn't front-end...

Huh? They're giving it as an example of something that is backend-heavy that they don't want your product to be like. You've got it backwards.

> (Your product is (not (backend-heavy, such as: ...machine-learning models)))
> “C++ for dummies” on many people’s desks.

C++ as a language for an enterprise business logic software like a payment system in this case? You put together Stroustrup, Thompson, Pike and Torvalds and they still would probably fail to deliver a fully working project or at best it would be very past the delivery schedule (until of course they "cheat" and develop appropriate DSL and compiler/runtime for it first :)
Is there any website that documents who all the ISPs sell our data to? Or at least can we know how much they earn from our data?
> If I visit g00gle.com and sign-in using the Web Authentication API, my browser is going to use my credentials for g00gle.com, not for google.com; unlike me, it _can't_ be fooled by similar-looking characters.

In the age of punycodes this has become particularly important because the human eye cannot visually distinguish between ASCII and punycode lookalikes - many are visually indistinguishable in many fonts.
You are right in a sense. Right now the problem is up to individuals to create secure passwords for each and every website they interact with. People that have no idea how computer security works. The problem now is also on individual website developers to be trusted with those passwords and keep them secure.

This transfers the problem away from both of those groups. Individual no longer have to create multiple secure passwords and website developers no longer have to store those precious secrets. This is a huge improvement. You are correct that it's not perfect, but instead of security pros spending all their energy teaching people how to manage passwords, they can focus on the remaining problems that you point out.
Does anyone not even realize that if Dark really is so easy to use that you can build a scalable app in an afternoon, it will not even take a month for a startup to build their backend, and thus they will pay nothing?
The amp version of this page takes my browser 1.39 seconds to load with about 616KB of data over 27 requests. The non-AMP version takes over 10 seconds, and loads 2.2 MB over 300+ requests.

In this case, it's just a light version of the article with the same content. That seems objectively better. If AMP wasn't incidentally in the URL path you wouldn't have noticed it was AMP. If the existence of AMP encourages people to write faster, less cruft-y pages, that's a good thing to me.
European theorists were grappling with the demands of productivity for a long while before (and while) it became an American cultural demand. The imperative of productivity was very much imported to the US by the Europeans who came to the US. It’s certainly taken on a life of its own here, and I don’t discount its nearly religious nature to US work culture—it underpins so much of American thought. Productivity is a demand imposed upon all who work under capitalism—there is no other way to extract increasing surplus value from labor without it.
Funny how quickly the world flip flops. I told a few recruiters I declined an interview with Facebook and they where aghast at the idea.

Now the pendulum swings hard opposite, and foolish as the kids where, they wanted the prestige 3 months ago and should suffer that choice today?

Even though I'd never work for Facebook, I can acknowledge the people who work there are working on some tough problems.

I'll be fully convinced when every Facebook product is removed from every website, including React.
My issue is that most of the time, the available questions are just frustratingly dumb. I don't have a favorite song, favorite movie, or favorite food. I like lots of things and those things change over time. And seriously, favorite teacher? That's very common. How many people really have a favorite teacher.
> That’s a 16-year (or longer) plan that, as Temin compellingly observes, can be easily upended.

I personally think the entire college level education system needs a do-over. Stop requiring people to get expensive degrees, when a decently accredited micro degree system would work. Who gives a fuck if you're more well rounded coming out of college when you're in massive student loan debt. You just created a giant glass ceiling that keeps the poor who are trying to break through even poorer. A handful of Ivy League Universities should be for the elites and the rest of us should have the option to bypass this system altogether. I'm one of these FTE's, and I look back at my college degree as 30% worth the time, and 70% a waste of time, and all of that time cost me a lot.
OR provide third parties with API info, maybe even the third party implementation. It doesn’t even have to be official. Apple knows very well how to leak controlled information. But it would greatly improve the quality of third party repairs, and lower the load on official support workflows.
lol, totally didn't realize either that the play button wasn't just there for show.
Dark team - this is a great idea that I used myself. I had a startup building an Excel-like product and we had a casual office in SF. We didn't pay anyone but got some consulting teams to come into our offices for a few days so we could watch them work.

The consultants got to tell their client that they were engaging with this cool new startup's tools to analyze the client's data (which we never saw), wear T-shirts to work, and get free food. We got to see where the problem areas in our product were.
I was born in 1900/1/1
You'd have to be pretty stubborn to remain at this company after all of the bad news it's been getting lately. The writing was on the wall like a year ago that this ship was sinking, why would anyone stay?
The difference is that there is no loss. In the circumstances that you list there actually was something taken from someone, e.g time taken from something else, or I guess kissing someone you were not supposed to.

You can argue that a person might have gone to see the movie if they hadn't downloaded it, but that's kind of a dumb argument.
Thanks for the feedback! Eridius got it exactly right, but we'll work on the wording to make it clearer.
Happiness is an end unto itself. An end that productivity can, but doesn't always, serve. At least that's how I go about my life.
HEIF is the name of the container [1][2].

HEIC is an ISOBMFF 'brand' to be used inside the container to indicate that the payload's codec is HEVC (in 'Main' profile or 'Main Still Picture' profile), and that it's one still-image and not a sequence [1].

In most of the cases where the payload is the HEVC codec, the corresponding file extension is encouraged to be .heic and the MIME-type follows as well. Apple has a note about this in their transcript at WWDC 2017 [3].

[1] https://nokiatech.github.io/heif/technical.html [2] https://mpeg.chiariglione.org/standards/mpeg-h/image-file-fo.... [3] https://developer.apple.com/videos/play/wwdc2017/513
It makes perfect sense when one realizes increasing productivity is the single key to extracting maximum surplus value from labor under capitalism. Measuring (and increasing) productivity wasn’t invented for workers.
It's an extremely American tradition that was practiced and pushed by one of its founding fathers, Benjamin Franklin. Himself being called "the most accomplished American of his age and the most influential in inventing the type of society America would become". A nontrivial amount of his autobiography is him espousing productivity and the ways he accomplished so much in his life.

I think it's fine to kind of just chill in life, but I think it's also great that some people feel a real fire under themselves to get as much done in their lifetime before they die. It's why we have people like Benjamin Franklin who helped usher in the next several eras of progress for humanity.
So maybe the Cambridge Analytica hullabaloo is the equivalent of the bomb going off?