skysight-inc/HackerNews huggingface dataset:
I wonder if the author might have thought it was an odd name because "wc" is also used in some English-speaking countries as an abbreviation for "water closet", a synonym for a flush toilet.
Another nice video (channel):

https://vimeo.com/271418485
I find this article to be one year late malicious hyperbole and completely useless in redeeming itself with appropriate action items.

> Node modules are widespread and ripe for abuse.

Most package systems kind of are, especially when they become more useful.

For real advice: checkout from npm retire and auditjs (there's also more non free options). You'll likely get some false positives (such as, who would host jQuery on a public/untrusted cdn? or why would you even pass user input into that?), but if a real malware actually showed up, you can find out as part of your CI process. Using the lockfile provided by yarn/npm is also a good way to reduce accidental unnecessary package updates.

> Nonsense dependencies are hard if not near impossible to manually audit due to the sheer number of them.

No, they are easier to audit. It's a lot easier to verify that leftpad isn't installing a Bitcoin miner than to verify react isn't installing a Bitcoin miner. React is probably the size of 1000 leftpads, too.

> Manually audit and lock down your dependencies.

No mention of what this is suppose to be. Yarn will lock your dependencies by default. The yarn.lock file will have the exact version locked. I haven't used npm in a while.

> Stop using nonsense dependencies, writing basic code is not reinventing the wheel.

Yes, writing "basic code" is reinventing the wheel. You have at least 10 free fully tested leftpads available on npm but you expect me to write one more? I'm paid to build the application, not to apply non-sense rules. This outrage over microlibraries needs a bit more substance. Your alternatives are basically "write code that already exists" or "use bigger monolithic libraries", and, to be frank, most of us have used other languages before or worked on multiple projects, and we can decide for ourselves if a function should be in in-housed or npm'ed. For something as basic as leftpad, wasting time writing it is just a waste of time. As a hard rule, this rule is garbage. As a soft rule, it's not very useful, as case by case scenarios vary too wildly in terms of complexity and significance.
Thank you. I had wondered about the reasoning behind that law. Do you know where I light be able to read further on the topic?
This could be working up to that.
A basic HD cable package on top of my old Comcast Internet subscription added MAYBE $20 to the cost of my Internet plan due to the bundle discount. Oh, and Comcast threw in HBO for free, which is worth about $15 a month.

To get the equivalent channel access as such a service, you've got to pay for YouTube TV or PlayStation Vue or the like, and you're looking at $40 a month there.

Obviously, prices vary by where you are, but in a lot of cases, cord cutting actually removes efficiency. And note that Netflix is rapidly abandoning the "buy all content" model in favor of just having it's own shows. So you'll need Netflix + Hulu + CBS All Access + Disney's new service, etc.
Nobody is going to disagree that it's useful and hard to live without. That's why the big 3 or so tech companies know you'll sell your soul to have it. And yes,I and you should disable location services on your phone when not needed.
Is that true? A cousin comment appears to indicate Uber had a parallel emergency breaking system and that is what failed to trigger:

> At 1.3 seconds before impact, the self-driving system determined [...]

Unless this is exceptionally poorly worded, it certainly sounds like self-driving system was the one doing the determination.

https://news.ycombinator.com/item?id=17144741
(Caveat, we're adopting Elm and so I'm a little biased)

I think this article's conclusion of Reason being the enterprise grade and mainstream implementation of Elm, and Elm being a "prototype" is a little unfair to Elm.

Elm has developed a mature ecosystem in many ways, in a relatively short space of time, and two of the main reasons for that are the purity and the way the JS interop works. It explicitly shields the Elm world from issues in JS. This is one of the reasons we've decided to choose it. It is much more than a prototype, this was something that factored into our decision making process heavily.

I'm sure there are great things about Reason, but I can't help but feel that the impact will be limited because it doesn't take a stronger viewpoint.
There’s a Mozilla project for everything https://hacks.mozilla.org/2018/02/how-to-build-your-own-priv... (voice is experimental and I don’t know if it’s on device)

Looks cool, but I haven’t tried. I’m the kind of person that gets up and walks to the light switch.
Lasers are getting more common for high speed space comms, i think the range isn't quite there yet to manage the Earth-Mars distance.
That's not actually true; nodes can be non-exit and relay only. This helps insofar as to reduce the relaying load on the exits too.
I would think delivering content over the internet point to point would be more expensive than cable since cable is multicast. Netflix has higher marginal cost and Comcast has higher fixed costs that can be spread among more customers.
That's fantastic! I gave F# a look right after MS announced dotnet was being open source and have been excited for it's "arrival" ever since. The pieces seem to be coming together, albeit very slowly..

* "Official" Cross platform support -> dotnet core FTW!

* Cross-IDE intellisense support -> Ionide, Check!

* Dotnet core support -> Check, finally(and make sure to set Ionide to use core)!

* F# to javascript cross compilation project with some traction -> Fable, check(Fable needs serious documentation help though)!

* A great framework competing head on with Phoenix -> Hopefully soon :)

The potential just seems sooo massive. Hopefully it blows up quicker than Haskell ;)
Nobody knows why the value of BTC decided to spike like it did last year. Just like nobody knows why it is sliding back down to earth.

It is one of the many reasons it makes a piss-poor store of value.

(Of course the answer to the spike could very well be “somebody fired up the tether printer” plus “super shady exchanges did tons of wash trading/oughright made up fake transactions”.
I don't. And in this particular scenario, it's an important distinction to make because there's a risk of Amazon using equivocation to deflect responsibility.
Amazon demonetizes conservative website
Nobody mentioned the biggest reason. True functional programming coupled with type checking leads to more modular programs with significantly less bugs. I don't know about ReasonML, but a similar framework called ELM delivers Zero run time errors. Zero. Languages that eliminate entire classes of errors from type errors to run time errors should be the future evolution of programming languages. React+redux was only a small step in the right direction.
I’m one of those “idiots.” Can you explain how it’s any worse than carrying a cell phone?
Absolutely! I come from a historically Microsoft shop, and the lack of this was by far the biggest barrier when initially learning PostgresSQL since I was still in the mindset of designing stuff as I would in Sql Server.
Oh, right, another radical thought of mine - something that users would pay for. Even if it were just $1/month, one account per credit card only, it would serve as another little barrier to all the right people, and prevent throwaways and constant account deletion.

Obviously for a commercial, advertiser-funded operation, it is all about more and more users and traffic and the quality of the content isn't a priority, but this eventually destroys everything. I'm imagining something much smaller, but potentially higher quality and self-sustaining. I guess I'm pretty much describing The Well, but hopefully cheaper and with more users, but not free and as many users as possible.
At the bottom of top 20 now and pretty much no job openings in most countries.
We dont need laws for these things. If a consumer installs an internet connected microphone in their home, they should expect this.
Json for a config that's intended to be used by humans is an abomination.
How sanitation is following the cell phone model
Supposing that you're not tasked with resolving this problem for Amazon, why would those details matter?
Stored procedures are technically new with 11, but I think the only functional (rather than syntactic) difference between the new support for stored procs and stored functions which happen to not return anything is the transaction control for stored procs. (And stored functions returning nothing are often referred to informally as stored procedures in postgres discussions.)
Certainly, however I have to assume Pornhub is jumping into the VPN game because they realize a substantial number of their users use VPNs for exactly that.

It's not about anonymizing to PornHub, but about anonymizing to your ISP or AP.
If I'm home and don't have my phone (or have my hands full, or it's dark, or whatever) I can easily turn lights on or off and without fumbling around for switches or trying to juggle a cat or a child.

I can also control my tv, thermostat, get a news briefing, check my calendar and set reminders.

Yes, it's ultimately a convenience, but so is indoor plumbing and store bought bread.
I don't think you can compare small tribes watching each other with the current situation where someone with access to surveillance systems can record all movements in a whole country and get them analyzed automatically. Surveillance used to be expensive and cost a lot of effort but increasingly it can be done more complete and cheaper. The world may look differently if previous dictators had had the surveillance systems of today or the near future in their hands.
He said that it is useful and makes his life easier. He did not said that whole family would die without it.
I don't think Marvell has anything that overlaps with ThunderX2, but they definitely have a lot of complementary products. I don't think they have any reason to cancel ThunderX2 if it looks like it can be successful.
Wow, I didnt even know this existed.
Alternatively, every business (or rather, the people who operate and control that business) have a moral obligation not to unreasonably exploit their employees.

I would expect that to be a fairly common sentiment/belief (though I might be wrong).

It comes down to the particular definition of 'unreasonably' that is being used, which different groups can and do disagree about.
Reconstructing Zika's spread
> Because the computational requirements of good speech rec exceed what you would build into a $100 device,

I have difficulty believing this. We had good speech recognition on <$1000 devices 10 years ago.
I'd love to know how I could detect if anything on my network is infected -- are there any IPs/DNS that I could look out for in my logs?
Also, Amazon is dropping $1B to produce The Three Body Problem.

https://www.independent.co.uk/arts-entertainment/tv/news/the...
> a system that's run by..... Pornhub.

The system was mandated by UK law. Mindgeek isn't the only provider that makes an age verification service, though they are the largest (since they own most of the largest pornographic brands on the web).

David Cameron was the one who pushed for the law that put all of this into effect; Pornhub isn't remotely responsible. They're just creating a verification service that they're now legally required to run to comply with the law.
If its ratings don’t really matter, why is Netflix canceling many shows?
Large organisations, and small, mine included, will generally host an internal mirror of packages. Download the entire archive once a day, serve out to all computers as necessary, making use of the higher bandwidth on the LAN.

As you mention, package checksums are signed using GPG to detect tampering. HTTPS adds very little benefit for such a scenario, and by sticking to plaintext, you can slightly increase the throughput since the server does not need to encrypt all the data it sends out. You also then need to coordinate SSL updates and manage server key security to machines that handle extremely high amounts of traffic continuously. Owing to the above, since many companies and volunteers around the world run mirrors and the Linux community is very open to running such mirrors, it's impossible to enforce SSL across the board.

Even if an attacker were to monitor the download and take note of the package installation, it would tell them very little. Provided the download is not tampered with, the chances are that it is a security update that will improve the system's security.

Many third-party APT sources do indeed use HTTPS (Microsoft, Docker and Yarn come to mind). Due to GPG package verification, this adds very little additional benefit, especially since the data being transferred is public anyway.

Edit: I would also add, some places do not run full mirrors but instead run caching proxy servers, which would not work with HTTPS (without doing some very messy and controversial interception). While this isn't totally what APT was designed for, it's generally the Linux philosophy to make updates and new software widely available as easily as possible.
It's the reason everyone says Siri sucks - they do all the processing for her on the device, not the cloud.
Or maybe they just value different things than you do?

I have an Echo on my kitchen counter. I know there's a small chance that it may be hacked or have a bug or be deliberately modified to surreptitiously record from my kitchen audio that ends up on some Amazon server somewhere, or in the hands of law enforcement, or the NSA, or hackers, or whatever.

I just don't really care. I like the convenience of the device, there's a lot of scrutiny on the devices and the companies that make them, discouraging deliberate misuse, and I don't really say anything interesting or worth hiding. And if someone is going to deliberately target me, my life is jammed with devices that are probably a much bigger risk surface area.

I would never say anyone else should get one if they feel the privacy risks outweigh the benefits, but I'm not personally concerned.

However, I may be wrong. So change my view: why should I care or be worried?
A la carte cable was a "grass is greener on the other side" thing. People asked why they pay $60 a month for 100 channels if they only watch a handful.

Now you can buy Netflix, Hulu, HBO, CBS All Access, Disney whatever, etc. each for $10 a month. You still end up paying $60 a month, but now you get six channels instead of 100.
I feel creeped out by these home listening devices and I don't own one, but don't our phones already have this capability? You can turn "Ok Google" on on an android phone. I sometimes record audio, and the mic is incredibly good. Is there a substantial difference between our phones and these devices?

EDIT: Just realized the substantial difference is that Google and Amazon own all of these things. They don't control all makes and models of phones.
Because it makes the voice recognition vastly better. Have you ever noticed that Google can get words correct in navigational searches, even if it only sounds like the name?

We are a long way from being able to do that on $100 devices.
It's not just the lack of static typing. It's weakly typed, so implicit conversions can happen when you don't expect them. A standard library which lacks the most basic functionality. Historical baggage(arguments, var, ...). Prototypical inheritance without proper language support. null vs. undefined. Async by default (that point may be debatable ;)).
I thought the same thing and did some searching. Based on the street price of potatoes in China, it's in the neighborhood of 30k pounds. More if that number is wholesale value.

The other thing we can surmise which is strange about the crime: He had to have stolen a truck worth of potatoes. So he either used his own truck, or he stole a truck and then gave it back after having fenced the potatoes.
First of all, people haven't even come to a consensus on when war itself is ethically justified. It shouldn't surprise anyone that drone warfare, a subset of something we can't come to an ethical consensus on, is a highly debated ethical issue.

It's very easy to justify our drone program from a utilitarian perspective. All you have to do is show that it has a lower civilian to target ratio than more conventional forms of warfare. It's even easier if you count the lives of US soldiers as more important than civilians in war zones, and a lot of people agree with that.

I haven't read it yet, but I look forward to reading this 22 page paper [1] on the ethics of drone warfare. I read the abstract and the conclusion, which states that "much more nuanced and probing analysis of the moral dimension of remotely piloted aircraft operations is needed". Perhaps you will enjoy reading it as well.

edit: You've added some rather inflammatory language about killing children and civilians since I last saw your comment, so I thought I'd add this - it's pretty easy for anyone who's studied ethics to come up with situations in which killing hundreds of children can be justified with a common ethical framework. Ethics is not at all a black and white subject.

You're just trying to appeal to people's emotions instead of making an actual ethical argument.
Maybe. But it serves a purpose, so it's not wasted.
Or to take the idea further, can you wear a cross necklace and a halloween mask? Or a hijab and a welding mask?

One item is signalling your religion, the other is covering your face. Neither item is covering your face in a way that signals your religion.

I feel like any attempt at imposing anti-privacy laws while keeping some pretence of a free society ultimately descends into farce, because the two ideas are basically incompatible.
Both a car and an amazon echo have a switch that turns that functionality off.
It’s not “whataboutism” to point out that (almost all of) the people who can’t conprehend why anyone would ever have one of these devices have, in fact, already had one for years.
Can you join the slack linked at talonvoice.com or send an email to the address in my hn profile?

I'd probably start by asking for audio samples of you saying a couple of sentences and commands in english

Then I'd try them locally against a couple of speech recognition engines

Then talk about potential issues and ways to influence recognition accuracy

Then I can help you try out Talon for both dictation and command input

As an anecdote, I've heard from some of my non-english-native users that they need to avoid certain word sounds in commands (by changing the command trigger words) because their accent doesn't emphasize them enough for good accuracy.
There are many differences; it's hard to generalize because each EU country is different (there's no harmonization for this, and there are major differences especially along the "ex-Warsaw-Pact" border; half of EU had their whole financial system [re]built in 1990s), but you'll often see the following differences:

1) There's no "EU score", each lending market is somewhat separate. Past history in one location may or may not influence your score in another location.

2) Instead of a general/universal "credit score" calculated by an agency, there's often a concept of "credit history" which (depending on the country) may or may not list the amounts of existing loans, of previous loans, and history of late payments. The difference being that instead of lenders getting a score calculated by some agency, the lenders get the data and make their own decision, with possibly very different opinions on which factors are important. Not everywhere, of course, some countries (e.g. UK or Nordics) are more like USA.

3) The process tends to be highly regulated. If you're providing factual data as opposed to an opaque score, each item better be correct - distributing to all lenders "Bob defaulted on a loan in 1999" is libel if it's not true; the dispute process tends to be more consumer-friendly than USA - e.g. a requirement to remove the disputed items immediately and return them only if the debtor can prove its validity), maybe a requirement to expire entries of missed payments within x years, etc.

4) In some countries, that agency is run by the gov't, i.e. purely a central official registry of loans and/or bad loans, which is somewhat sufficient to verify creditworthiness. In others, it's like Equifax.

5) There often is a principle that the credit reporting agencies can't give/sell that data to anyone - you must give explicit permission for every company before they can gain access to that data.

6) In many countries there's no concept of "building credit" - where there only information provided is about negative events (e.g. defaults or missed payments), so having never taken a loan combined with good income gets a perfect rating, as it's not distinguishable from a long credit history and having never missed a payment.

So it's quite tricky - similar but different.
Apple Knew About iPhone 6 Bendgate/Touch Disease Months Before Repair Programs
I worked in HPC for over a decade. Most of the codes are not hyper-efficient on Intel - particularly not current-generation Intels that need efficient use of very wide vectors to reach peak performance.

Many codes are memory-bound, and the TX2 has excellent bandwidth. This shows up in real-world simulation codes such as OpenFOAM.
But I wasn't paying enough attention. To my knowledge he also wasn't trying to build a private media bubble until now.
Clap on

clap clap

Clap off

clap clap

Clap on, clap off. The Clapper!

clap clap
I'm "involved with tech" (developer for 15+ years) and I have two of them. You might also be horrified to learn that my house contains multiple smartphones, computers, routers, and other devices, all of which are connected to the internet!

I enjoy living dangerously.
Lots of phones can be set to listen all the time, and you have no way of knowing if it’s been programmed to listen even if you turn that off.
And since it's based on value, this is highly related to the number of people living there. There could be a perpetually-erupting volcano where no one lives and it wouldn't show up at all.
Why isn't Costco worth shopping at for food items?
Build a command-line chat app with Node.js and Chatkit
Does it block it right away? If it works for a minute or two (or ten) then cuts off they might be doing more deep heuristics, but that's usually something only governments do (ex, great firewall). They also might have just blocked the IP range of your VPN because you connected to it in a different mode before and the network just remembers that.
According to some. In my opinion reality TV does little than dumb down people and drive the normalization of emotion over logic that is playing a significant role in harming the country and the deterioration of American collective intellect - we're really not all that far from the satire of Idiocracy where people tune in to watch others get kicked in the balls.

In either case, entertainment is just another form of a "want". There are clearly people that want reality TV as judged by the shows' ratings. And there are clearly people that want small cryptocurrencies as judged by their market values. And the nice thing about a free country is that people are and ought be free to make their own decisions, even when many of us may feel such decisions are idiotic.
I don't know. Take a weekend and try out both, you'll learn what you like best. Both are great and frustrating at the same time, it depends on what you consider the bigger pain point. If you don't mind slow compile times, difficult JS interop, no JSX at all, lots of boilerplate, you can have code that is pure shining beauty and elegance (Elm) ... or you can have an absolute beast of an engine (Ocaml) covered in nasty duct tape with sticky residue and silver spraypaint on top (BS/ReasonML).

Give it two years though, and both will be amazing.
I hope they improve their systems before doing a worldwide rollout. Many countries have no law against walking in the road while intoxicated.