skysight-inc/HackerNews huggingface dataset:
The root cause of the problem is the telcos being completely unwilling to replace ancient insecure protocols like SS7 and associated equipment.

Spoofing caller ID simply should not be possible, considering the very small number of telcos that completely control network authentication, access, billing and routing.

Just send everything not in your contacts to voicemail. The PSTN will be dead in less than a decade anyway. Like email, its time of utility has passed, ruined by spammers and marketers.
his decision is not logical, but yet you’re inviting an accomplished scientist who is 104 years old to come be amongst arguments of containerization and startup culture? i can only guess how he feels about that.
My work is considering switching to Git mostly because we think adopting Bitbucket will force us to. Is that not true? I'd love some reasons to stay with hg...
>Mist edits are made probably to fix grammatical and factual mistakes

Doubt it was on purpose, but enjoyed it none hte less. ;)
This is awesome! The how it works section was an interesting read.

https://github.com/intoli/exodus/blob/master/README.md#how-i...
Thanks for pointing it out.

A more popular definition is "the smallest number that yields a result different to 1 when added to 1".
While far from perfect, for anyone looking for a temporary solution, run pi-hole on a remote server and have it use 1.1.1.1 as its DNS. You'll get the benefit of pi-hole blocking ads.
> But some very knowledgable people continue to argue with passion that the entire technology is a useless fraud!

Can you mention one of them? And his/her knowledgable argument.

--

> useless fraud!

It's already been used to solve real world problems:

https://www.coindesk.com/the-united-nations-just-launched-it...

Citi and Nasdaq had a blockchain project that is already up and live. Can't find a link, but I swear I've watched it in a blockchain event in youtube.

However, these are small scale use. Afaik, no blockchain is able to scale to creditcard usage yet (and stay secure at the same time). Ethereum Foundation is working hard on this. Not sure about Bitcoin. So as far as ETH goes, there's basis on it's price growth.
Erlang Garbage Collector (internal doc)
This is why SQLite advertises itself as a replacement for fopen(). It's crazy hard to get right, and SQLite did the work so we don't have to: "Think of SQLite not as a replacement for Oracle but as a replacement for fopen()" - https://sqlite.org/about.html

Obviously this would be horrible for PG to use as a replacement for fopen() and other systems, but for many, many use-cases SQLite is a good replacement for fopen().
Whistleblower Chelsea Manning Warns Over Google, Facebook Privacy
Absolutely insane how this is actual reality. That millions of people have died from such a small object that seems to have more creativity and complexity than I’ve ever seen.
I'd assume the goal would be to allow macOS to support secure data access with a processor that doesn't necessarily have a TPM. (Assuming you could do the exact same things with a TPM) As for what kind of hardware that might be (ahem ARM) would just be speculation...

The dedicated T2 chip gives Apple more flexibility for the future and control over the present. Both of these things Apple values.
Ha, I didn't even watch it with sound. Will have to do that when I get home.
That only works if the host is on the conflicting network. But if the conflict is a couple hops away, Docker won't detect it.
I wonder what software they're using, because AFAIK the enclave doesn't provide attestation. So Touch ID is really secure but there's no way to prove to the server that you're using Touch ID. But I guess most hardware tokens don't have attestation either.
Show HN: Exchange for makers to find ideas and for ppl to supply ideas they need
That makes sense; well, if you wish, please reach out to me at luke@stadiamaps.com

We have a lot of customers in real estate, and would love to set you up with something that would be significantly less than $25k. These situations are why we started the company. :)

I think our tiers work very well for the real estate space overall.
Neither am I. It's pretty simple to do though, and the performance of the steps that aren't encoding are a lot quicker as it's mainly just copying the encoded files to an intermediate format, and then concatenating those together.

ffmpeg -i "file.mp4" -ss 01:16 -to 02:16 -c:v libx264 -crf 32 "newFile.mp4"

ffmpeg -i "file.mp4" -ss 02:20 -to 02:45 -c:v libx264 -crf 32 "newFile1.mp4"

ffmpeg -i "newFile.mp4" -c copy -bsf:v h264_mp4toannexb -f mpegts temp.ts

ffmpeg -i "newFile1.mp4" -c copy -bsf:v h264_mp4toannexb -f mpegts temp1.ts

timeout /t 5 /nobreak

ffmpeg -i "concat:temp.ts|temp1.ts" -c copy -bsf:a aac_adtstoasc "Finished.mp4"
Developers of Clicker Heroes 2 Sued by Patent Troll for Libel
ipv6 supports traceroute too
Goldman Sucks
Perhaps the known opportunities for dramatic perf increases require compatibility breaks and some expressiveness downgrades.

That Python 3 transition was a fun time, yeah?
It allows you to completely bypass AT&T's router, so you can use your own router talking directly to the ONT. The AT&T router is then necessary only to authenticate to the ONT. So the proxy, running on your own router, sends authentication packets (and their responses) from the ONT to the AT&T router, but otherwise the AT&T router isn't handling any packets.
https://support.apple.com/en-us/HT208330
I agree, 120%.

I like the r approach so much more.
Also worth noting: Hydrogen, the Jupyter plugin for Atom[1][2].

Hydrogen is a fantastically well-executed and useful piece of software. (As is Jupyter.) I’ve used it in my own programming, and also in teaching introductory software development, where it’s a helpful transition from Jupyter notebooks (which are used in the early part of the course, for problem sets / reading journals) to text files and code editors (which are introduced later, and used for team projects, and for projects that use Flask or PyGame).

But also — relevant to this sub-thread — “Hydrogen” (it relates “Jupyter” to “Atom”) has to be one of the best project names ever. It’s right up there with “Pyramid Scheme”[3].

[1] https://nteract.io/atom

[2] https://atom.io/packages/hydrogen

[3] http://www.michaelburge.us/2017/11/28/write-your-next-ethere...
>It's an opinion that makes it very hard to work with you, if I were a woman or minority. I wouldn't want you to review my code, wondering if you think I'm competent or if I'm an entitled person benefiting from unfair "advantages that have been heaped upon" me.

So you're assuming because of my opinion, I would not treat you fairly?

Of course! Anyone who deviates from the SJW line is de facto a bad person! There's no need for logic and reasoning when you deal with people like me! Just cast aspersions on my character and signal your virtue to the rest of your tribe!
I used it and it's really impressive. Works as described. The only issue with this is that you can't easily use it without understanding how it works. It's more of a system you have to own rather than a tool you can use, so you can't just point a new person at it and go "just run this".
Clone PDF TextFragments with Identical Formatting and Determining Line Break
I experience this on ATT fiber. ping'ing 1.1.1.1 times out.
It isn't worth the risk to switch to Amazon. The payments industry right now is cutthroat, with First Data offering clients rates like 1.5 cents per transaction and no basis points over interchange. This is insane compared to what the merchant industry was charging just a few years ago, to the point that many of First Data's own ISOs are being severely undercut on price by the company that provides their own backend.

Why would you choose to be at Amazon's behest, when you can pay less and know you won't need to lift a finger for multiple years wrt credit & debit processing.
FileVault has this option too, at least on the Mac Mini I have.
ZFS gets a lot of the way there - and indeed has lots of similarities to a database in its internals.

(In fact, ZFS with `sync=always` set on the dataset would do exactly what the parent commenter is asking for without requiring a whole new API. If someone really cared about performance they could even make this perform well with a battery-backed DRAM device for their intent log... but by that point we're way outside of the discussion of a general-purpose filesystem. If you really need guaranteed consistency for every write _without_ crippling performance, ZFS can do it for you at a hardware cost. Writes get cached in RAM, batched, flushed in transaction groups, and the fast/durable SLOG protects against corruption or loss of power or device failure without harming performance much. $$$ though. You'd better have quite a bit of RAM, and need a proper enterprise-grade DRAM storage device - or probably two in a mirror if your data is this critical).
> (Postgres, as an example, relies on the OS to buffer writes.)

We don't really buffer writes via the OS that much, most of them are buffered in postgres' internal buffer cache. We even force the kernel's hand to write out things earlier (otherwise there often are huge latency spikes). It's more reads where it's useful because it allows the OS to cache as much IO data as the current memory situation on the system makes sensible.

> > Modern filesystems already have journals - buggy reimplementions of journals in userland doesn't help anyone.

You end up with journals anyway. There's no way to be performant otherwise, because you'd do hundreds of tiny writes instead of a few bigger journal writes. Imagine if your 1-row / 3 index transaction would have to write out ~7 blocks.
Yup, much better (if you're talking of type cover) and light years ahead if you really are talking about touch cover.

Surface Covers had a lot of restrictions in terms of size, power and complexity.
What are you talking about? Most wireless ISPs running OSPF could be classified as “meshnets”, plus the whole internet backbone is routed by BGP which works in the same way.
That seems like an awful convenience -- isn't it far easier to recall that all lists must be quoted, than to remember which are auto-quoted under which circumstances?
Not really? There are professional oncology researchers out there but they work at universities, research hospitals, and pharma companies, not finance companies like Goldman.
How does your product compare to major optimization software/mathematical programming products? Do you have public benchmarks?
I just recently decided to move my GitHub pages with custom domains to netlify (https://www.netlify.com/), since it offered free out of the box SSL (let's encrypt).

Kinda wish I waited, but it's good that they finally support it.
That's very interesting, and I quote short summary from 2014

> PilMCU is an implementation of 64-bit PicoLisp directly in hardware. A
truly minimalistic system. PicoLisp is both the machine language and the
operating system:

>* Memory management is trivial, just the Lisp heap and the stack

>* The built-in database is extended to hold a "file system"

>* One SSD per database file for mass storage

>* "Processes" run as tasks and coroutines

>* Events (timing and interrupts) via a 'wait' instruction

>* Complex I/O protocols are delegated to peripheral chips

> The final hardware can be very lightweight. Low transistor count and
power consumption. No overhead for an OS. It is conceivable for a later
stage to put many interconnected CPUs on a single chip.

> At present, we have it running in the Verilog simulator, and in an
emulator (adaption of the PicoLisp 'emu' architecture).

So, what's the state of affairs for 2018?
JS requires somewhat different intuition. A JS value may be a BigInt, String, Function, etc. so you need to have something that can reference any of these.

The usual technique is NaN-boxing, where doubles are stored directly and non-doubles are represented with a NaN. A NaN gives you 51 bits to store to store your data. Usually you have a union type, with some bits for the type tag and the rest for data.

A BigInt may require more than 51 bits. So the obvious representation is to reserve a new tag value, and then in the data bits store a pointer to the heap-allocated structure that you describe. This could be a single array or a chunked linked list.

A further change would be to store small BigInts inline in those 51 bits, e.g. by reserving another tag. This would save a heap allocation at the cost of more branching.
I forgot to include the repository: https://github.com/robotscissors/quizbot
I would love to know how this animation was made. Is there any sort of simulation happening?
That is terribly kind to Amazon, I'd hold off on presuming every customer, or even a majority of customers always check Amazon first when going to buy items. If that were the case, Amazon would be much much bigger.
For what it is worth, I had a fun college project for a class doing exactly this ("distributed filesystem".)

Back before github and dropbox took off, anyway.
Wow, big news. This is like saying that women with larger breasts get more messages on Tinder.
CB3 Hush Review
> but where is this "can do" spirit from mozilla?

The mail included both

> At some point, we'll likely replace Python code with Rust so the build system is more "pure" and easier to maintain and reason about.

and

> Since I am disproportionately impacted by this issue, if there's anything I can do to help, let me know.
In order to understand Apple’s decision to switch from the older Serial ATA (SATA) interface to the higher-performing Non-Volatile Memory Express or NVMe, we recommend reading Ramtin Amin’s excellent deep-dive into its implementation. The main advantages of using NVMe to provide SSD storage access are that by using all the available parallel operations possible with modern flash-based storage over a four-lane PCIe connection, much better I/O speeds can be achieved compared to older HDD-specific interfaces.

Kinda surprised that this needed an Apple-specific explanation. I mean, didn't all board manufacturers move toward NVMe simply because it's faster than ATA?
I have a 2017 13" touch-bar at home and a 2016 15" touch-bar at work.

The work machine works fine and is mostly docked so I don't care about the ports either.

My personal macbook however was a totally different story:

- While usb-c only ports were annoying, it was much improved by the usb-c to usb-a converter included with my Samsung S8 (oh, the irony).

- The keyboard, however, was a totally different experience. I've had two replacements - one where some keys started failing (as in they'd either get stuck down or up randomly) and another one where the touchbar started acting really weird (no wakeups, hangs etc..) which was just as bad because they moved escape key to "touch" bar. Go figure.
You might enjoy:
Influenza A (H1N1) – How many bits does it take to kill a human?
https://www.bunniestudios.com/blog/?p=353
Never encountered this when filing a chargeback on an item or service purchased through PayPal, nor has it negatively affected my PayPal account.
Chinese Oolong Tea – Buy Authentic China Oolong Tea – AprTea Mall
Yes: https://www.att.com/Common/storefront/resources/pdf/att_brid...

However, I still can't ping 1.1.1.1.
Why does that make a difference?

If it's a signed response, at some point there's another piece of code that checks that the signature is valid and returns a yes/no.

I think the reason Apple's sensor was mentioned in this instance was due to how Apple handled storage and usage of biometrics as described in here https://www.apple.com/business/docs/iOS_Security_Guide.pdf

Compare that to, say, other laptop vendors: https://support.lenovo.com/us/en/product_security/len-15999
Hey kinard,

I'm an ex-Mapzen teammember, and we've set up a new, paid, geocoding service called https://geocode.earth. I suspect we can give you what you need around geocoding, especially autocomplete, for much less than Google. Feel free to request an invite or reach out to me personally.
WHOIS Going to Keep the Internet Safe?
By your definition, Musk wasn't a "creator" of Tesla, either. So why are you in this thread?
More than likely:

- If the action was malicious, the people involved in writing this code are likely okay with it and not likely to leak details of it.

- If the issue is a bug, the people involved in writing this code are probably working to fix it, and not likely to leak details of it.

- People not involved with making it would likely leave an internal access trail (independent of EXIF data) when they access that code.

Which is to say, expecting an Ed Snowden every time a company does something unethical is kinda silly, otherwise we'd have Google's search algorithm by now.
The Times has some great multimedia/hypermedia designers on their staff and their reporting is incredible
Having one doesn't make the laptop worse somehow especially when you don't have use it.
That makes this announcement even more exciting. Thanks.
I'll tag on to Nelson's post to plug a new geocoding service two of us ex-Mapzen folks started called https://geocode.earth.

We offer geocoding, especially autocomplete, with much more liberal usage restrictions than either Mapquest or Google, and some pretty powerful features like address interpolation.

As we're still really getting the platform around the geocoder off the ground, we don't have a permanent free tier, but I'd be happy to set anyone up with a demo key if they are looking for something new.
How is the ISP performing this remote update? Is it TR-069/CWMP or an open SSH port or something? Many routers will allow the user to disable TR-069 even while it's running. Often a hardware reset will also disable it and then the user can put the manufactures update on it and prevent the ISP from managing it in the future. If it's an open SSH port then we all have bigger problems.
Good stuff. Thanks for sharing!
I regret answering. If you're not going to engage in good faith, but instead go on some tired diatribe about tribalism, then what hope do we have for understanding each other? You claim that you want to have a discussion, but then you strawman me like that. The irony of you complaining about "tribes" while you label everyone who disagrees with you an SJW...

EDIT:

> So you're assuming because of my opinion, I would not treat you fairly?

I'm assuming because of your opinion that you might misjudge me as a token minority, underserving of my position, perhaps because you catch me on an off day, or because you judge me to be an SJW because of the way I act. You're only human, and we all are susceptible to misjudgment, stereotyping, etc. It's just the human condition.

> Anyone who deviates from the SJW line is de facto a bad person!

To be clear, I didn't respond to you because I think you're a bad person, because I don't, and I don't know you. I responded because I have some vague hope that mutual understanding can be had on the internet through discussion. But responses like this make me feel like a fool for having hope.
There's little reason to use a poor algorithm when good ones already exist. If the problem is already solved, you don't need any expert committee, just a few days of reading and writing.
This problem has been around for a while and is pretty serious! https://www.routersecurity.org/ISProuters.php
I have to wonder at the level of condescension in your comments. I'm wondering if it's because you actually feel threatened by this.

>"Actual ISP network engineer here: I'm sure these people are having fun and all, but it's insignificant in the larger scheme of things"

No it is actually very significant. In a past life I was also an "Actual ISP network engineer" at a large ISP. And what I can say is that large ISPs aren't exactly wellsprings of innovation. However these folks are hacking on things, solving an actual problem and seem to be having fun in the process. It's exactly this ethos that usually ends up moving the needle. Sometimes by accident. It's curious that you are so keen to poo-pooh them.

>"Real five nines network infrastructure takes significant capital investment"

There is no ISP that provides customers 5 9's of uptime. Not even for business customers. With a Time Warner or Comcast you are lucky if you get 3 9's from their network. This is what you get from "the duopoly."

>"And that's before you get into things like establishing colo at major IX points, serious core routers that cost $15k each (do you really want to deploy something in the year 2018 to take several full BGP tables that doesn't have a 4 million FIB capacity?), etc."

There a clue in the article about which IXP they're - 32 Ave of the Americas(DE-CIX.) It's one of the 3 of the most "wired" buildings in NYC. You can peer with everyone there. These people seem to have done their homework. And you don't need to buy $15K Cisco ASR any more. You can take full tables on commodity hardware running Linux and ExaBGP or BIRD. There are many CDNs and IXP's doing just that.
A possible explanation is that the traffic from active use of 1.1.1.1 caused some backend service to get overloaded with traffic due to a faulty assumption that the address would never be used by customers. Anyone keep traceroutes while before the patch to see if there were errant stops or delays?

They had the choice of "fix the whole backend" or "block 1.x on the user end".

Guess we know which one was easier. If all this wild speculation is true, maybe they're working on a fix to the root cause and will roll back the patch when complete.

This would make the situation both due to incompetence and intentional.
By hold, I mean own. Holding as in holding the actual keys would be another level of crazy on top of that.
this is all kind of obvious right? calling it "disruptive" is extremely vague in a kind of "i don't care of it's just a scam" kind of way.
sounds like you have your project configured wrong, transpiling should impact compilation not the loading aspect of your application
I listen a podcast with dan bader the autor of python tricks, i don't like how he is doing business, private paid forum etc

But as i listen as the goal and content of his book i really want to read it and work with it.

As far as i understood, the book is made for take intermediate users to profesional level. He explain many of hard/hidden/dark features of python, like decorators, generators, itinerators etc, and for each of them have show an usecase.

I think i will buy this bundle juat for this book.

I am kind of curious to read mastering pycharm as well.
And see what is added in pro version of it.
Disclaimer: I work at a recruiting company.

Resumes should be good enough to get you in the door, no more. The typical recruiter/hr scans a resume for 5 seconds. Two things stick out in a bad way - typos and jumpiness. Anything else is usually forgiven, or subjective based on the person reading it. This is coming from someone who sees anywhere from 10-50 resumes a day.
I use the reply for exploration, and my notebook for final product. Do same in Matlab, but just with code.
Not assuming the worst has gotten us to the current state of personal exposure to entities whose core welfare concerns does not align with or extend those of an individual.

Not assuming the worst as default will only make matters worse. Even if Google has very good and honest intentions with gathering this information at this time, you have to assume the inevitability of that changing in future, either under duress of corporate existence or being compelled by larger more powerful actors.

Have I read the above 5 years ago I would have rolled my eyes at yet another privacy nut raving on the internets.