skysight-inc/HackerNews huggingface dataset:
The Impossible Project seems to be the happy coincidence of a number of people who qualify as miracle workers and the manufacturing equipment not being scrapped. I am awed by the work they're doing, even if I've never shot a Polaroid picture in my life.
See all those downvotes you are getting? Thoughts like this are not welcome here on on HN. I agree with you, but I stay silent most of the time to avoid getting downvoted.
Is there a mirror? Site's down for me
"Every program attempts to expand until it can read mail. Those programs which cannot so expand are replaced by ones which can."

- "Zawinski's Law of Software Envelopment,"
Commonly attributed to jwz, but "I didn't make that up".
go to the Fu&king store and pick it up and heaft it poke it feel it ask the dude if you can see one work read the first few pages in the book store - read a consumer reports article buy the one with the solid circles... If its a game watch a play through see if its the kind of place you like - if its a restaurant eat there once..

oh.. thats not the Internet.. sorry dude
It is, but system-wide ad blocking is disabled by default. You need to manually add filters subscriptions or hosts files in order to get it back. Not that it's much of a problem, though.
Michael Jackson Estate Turns the 'Fair Use' Tables on Disney
I was amazed with the Aussie approach to implementing this as putting it on the merchants who are unlikely to be AU tax payers is impossible. It is designed to be unenforceable.

We still have your exact system in the UK (and rest of EU?) it kills my desire to import unless the price is vastly different. Anything from non-EU countries above £15 gets hit with 20% VAT & an admin fee (£8 I think!).

https://www.gov.uk/goods-sent-from-abroad/tax-and-duty
How do you mitigate the down sides?
I like the Strong Towns ideas, I wish they could present them in a less activist sort of way sometimes. It is perhaps the author's of the various article's history that leaks through but often times when reading their stuff I feel like I'm being talked down to and I think that blunts their otherwise useful information.
It's presumably easier for an attacker to get a malicious ls binary into some local directory and convince a privileged user to execute ls there than putting a malicious ls binary into /usr/bin.
Where did you move from, and how has your life improved?
>You imply that strong reference letters, strong publications and talks at top conferences are obtained unfairly. Why do you think so?

There's no implication that the letters are obtained unfairly, but that doesn't necessarily mean that the resulting outcomes are fair. The point is that if you find yourself in a situation where you can't get hold of these things and yet you are, in fact, really good, there's nothing much you can do about it short of waiting a few more years and hoping to build up a better professional reputation. In contrast, you can just show up at a coding interview, demonstrate that you can in fact code (at whatever level is required), and land a job.

Case in point: I moved from academia to coding by doing this (without any relevant qualifications or having worked professionally as a software engineer). There is no equivalent progression for someone who wants to move to academia from coding.
Somebody needs to persuade rich assholes that trying to make the world better is the new trendy way to show off.
It's true of Québec French compared to the mainland pronunciation.

We still speak an offshoot of 18th century French. [1]

[1] In fact contemporary commenters in the 18th century used to say how indistinguishable Canadian French was compared to the French spoken in France.
It's not necessarily the sensor size. I never liked the Canon Rebel viewfinders but, as I recall, the higher end APS-C models were fine. (Personally, I didn't go to DSLRs before full-frame was relatively affordable and have a 5D MarkIII today.)
Many of the XF lenses and cameras are nearly all-metal construction, also. Great quality gear.
https://webcache.googleusercontent.com/search?q=cache:FoYSf9...
Or they die because Uber’s algorithm notices a bike 6 seconds before impact, unnoticed it, and finally doesn’t understand what it is.
Ask HN: VPS vs. Dedicated Server
If you use a VPS what type of traffic/utilization do you use? And dedicated?

When does it make sense to go dedicated?

Thanks
GDPR applies to:

1. All companies domiciled in the EU regardless of where their customers are.

2. All companies serving or monitoring EU residents regardless of where they are domiciled.

Answer to OP:

Yes it does. See above.
One solution I just thought of (a bit scorched earth maybe) would be to stop allowing written reviews. Only allow video reviews and enforce showing a) the reviewers face b) the product and c) the proof of purchase (could be blurred afterwards for privacy). An automatically created transcript would be shown with the video.

This would make it more difficult/obvious if one person were to submit many reviews (use face recognition), raise the barrier for fake reviews, and give a lot more ‘signal’ to people trying to determine if a review is fake.

Of course, with Deep Fakes and such this could be bypassed still, but it could still have an impact.
OVH is not good at reliability. Entire data centers go down and there is no communication about it.

Scaleway has terrible hardware and is not reliable at all. You can turn off an instance and not be able to turn it on again because they've run out of resources. IPv6 addresses change every time your instance is stopped and started.

Online.net owns scaleway so I assume their level of service is similar but with better hardware.
I use ad blockers since forever, howver I just find it extremely mean and unethical that a company like Adguard makes profit by depraving others from their lawful profits by blocking ads. Ad blocking by its nature should not be commercialized.
This is from one section of the logo trends article (https://www.logolounge.com/articles/2018-logo-trends). If you look through the pictures of logos in the full article, all but a very few use sans serif fonts.

A more accurate title may be, "A few new logos use serif fonts".
I don't think so.

Big company, small team focused on one technology, if we get engaged everyone has to work on the project (unless the client asks for a fixed number of FTEs)
> The Clojure ecosystem seems to favor your approach. They embrace the dynamic nature of this kind of programming, are data-oriented, shun ORMs, and generally have solid principles (in my opinion).

I've recently started my Clojure journey (< 1 month in!), after stumbling across aphyr's very interesting work, and it is being driven entirely by this line of thought. It's taken me a long time, at least a decade, of moving deeper and deeper in to web development to start to really appreciate this perspective but it _feels_ like The Right Way at this point in my career. I'm hoping to, at the very least, be able to take those lessons from Clojure and apply them to the areas of my professional life.
I'm surprised just how far up the chart the tiny 61 square mile city of Washington DC is. A lot of the contractors are out in the 'burbs in different states and a big chunk of that is taken up by disadvantaged neighborhoods. So the concentration of wealth is even more extreme than it looks at first.

I'm guessing the majority of that is the millions of people on GSA payroll sitting in office buildings all day. That and of course lawyers and lobbyists.
Airport security is a big sham in my opinion. All this constant step-up of surveillance tech and there's no statistically significant risk to be mitigated. Terrorist attacks still happen with no real consequences.

It's just a palatable proving-ground for total social surveillance tech. That's what the real benefit here is.
Think of all the lost productivity wasted on stuff like this...
I doubt this is meant as a production tool.
Its probably just a proof of concept to explore an interesting idea.

I cant agree on your point though. While there is a place for custom build tools, its incredibly rare. And if you're in a situation where you actually need to build a custom build tool for your project, you should consider fixing the reason why you'd need that. Builds shouldn't need such a complicated process..
"Besides Habalov, another researcher named Max May independently discovered and reported this issue to Google in March 2017."

I wonder why they are fixing it now, when they didn't do anything for over a year
Detecting fake news, reviews, astroturfing, fraud after the fact is too late, futile, confusing.

Correct answer is to have verifiable sources, citations.

What we used to call "journalism".
> anyone can just sue (or threaten to sue) their competition over this

This is wrong.
Competitors (and only competitors) can send a cease-and-desist letter based on competition law, because ignoring GDPR gives an unfair advantage - even that only in Germany because the tool used here ("Abmahnungen") are a unique german thing.

They are also a common thing between companies that don't "like" each other and if you send one you can expect to get one back. Receiving one costs ~1000 € (goes to the opposing lawyer) so they don't hurt much and the only one profiting is the lawyer.
Never mind Google Fonts, what about SafeBrowsing? What about Chrome?
Does Google Fonts even use TCP? It might be HTTP2+QUIC.
This isn't an article on PHP served from shared/managed hosting, is it? ;)
Building a powerful sandbox that maintains anonymity is a difficult problem. The statement that CSS is overpowered is clickbait for a different argument.
You can set the width to be larger. I have it at 1000px. That makes a for a nice, light and informative status window.
> Habalov says that depending on the time needed to render the entire stack of DIVs, an attacker can determine the color of that pixel shown on the user's screen.

I wonder how this is the case?

Anyway, lots of interesting vulnerabilities of late that utilize the measurable time of computations, and use it to reconstruct data. I think that type of "lossy attack" is so cool and creative.
The gist of it is that there's a timing attack on fancy stacks of blending modes. Calculating a final pixel color takes different amounts of time for different underlying pixels. So javascript can "scan" and OCR a page, or an iframe in that page.
Ha ha, well the business majors being weeded out with college algebra, was supposed to be a joke. Sadly it seems true.
Has anybody considered that fake reviews might be part of the system, not part of a problem? Of course it's not in our interests as customers, but then again I have never paid anybody for a fair review, but I bet a lot of wealthy review targets are willing to pay a lot for a clean public appearance. Would a review collector or shopping site really be willing to not help with that?
Ask HN: What are the best security blogs/sites to follow for learning purposes?
> Teams

You don't miss Slack?
Can you explain what harm is being caused to users by accessing fonts off a CDN?
I completely agree that it needs to be more widely used, and I absolutely think that google could go a long way toward making it more common.

But to be completely honest, lack of user agent support shouldn't be a reason to not use a feature. Edge doesn't support it, so Edge users are less secure. There are also user agents that have CORS restrictions disabled or don't support HSTS, but i'm still going to use and rely on both of those for security.

And it sounds like you and I disagree completely on the usefulness of fonts. For me a font isn't "unnecessary" any more than paint isn't necessary on a house. Sure, you could live in a house without paint, but I want paint on my house. As for longer load times, and degraded visual quality. The previous is being dealt with via new font-display css descriptor, and in browsers that don't support that they have timeouts of normally 3 seconds at most, and the former is an opinion that I absolutely don't share.
WTF – A Terminal Dashboard
As long as you don't turn on the oven. Then the phone goes "bzzzzt-POP!" and lets the magic smoke out. :)
I've thought the same thing and figured it's A/B tested to hell and just produces conversions. I know it's worked on me.
> "... hosting Open Sans locally vs Google CDN."

Both of these are still a lot slower than simply installing the font in the OS (or browser) and loading out of the filesystem block cache (or using the already-loaded font in browser memory). Open Sans is Apache License 2.0, so it should be easy for browsers/OS to provide it as a standard font instead of merely the "web safe" set of fonts.
I wrote a letter to Wal-Mart's CEO about 10+ years ago to apologize for switching the barcode from a less expensive Sony Walkman to a more expensive one because I didn't want to pay more. I was in college, about 19 years of age (mid 90's), and at the time felt that if I could get away with this, it's ok. And I did. Little did I know this act would gnaw on my conscience for many later. I asked them what could I do to make it right after so many years.

Soon after he received my letter, I got a call from the CEO's secretary to let me know he read my letter and that he forgives me and that there's nothing I need to do. Since I didn't expect the call, I was taken aback and moved to tears while I was talking to her. I expected some wrath and punishment for what I'd done. Instead, I experienced forgiveness.

Now if I could only quantify how much software, movies and music I've bootlegged while I was a student, I would probably write those CEOs a letter too, but I can't even remember it properly so I can quantify it. It wasn't a lot, and I mostly bootlegged because I thought it was "cool" to be visible on IRC #warez and what not... never really used or resold the software, just mostly did it cause I got to hang with the cool crowd.

Given I'm a software engineer for nearly 20 years now, I don't bootleg anything anymore... music, videos, apps.. and if I do, it's only because there's no trial for some of the apps. If I end up using the app, I pay for it or if I can't afford it, usually an employer will pay for it if I/we need it.
You are right, but the question is what most programmers want. It is certainly reasonable to believe that most want some special treatment of division by zero. Assuming the program is connected to some actuator (even a screen) -- as most programs are -- while not wrong mathematically, this results in something that is wrong "physically," and doing so silently, without a mechanism to later recover, from the result alone, whether division by zero occurred.
You mean like the GDPR?
Yes Azure's user experience isn't going to persuade anyone to choose it over the alternatives. It's a me-too offering that behaves like a compromise between internal factions.
Tesla Model S insurance almost $1,800 a year, Autopilot crashes again
On Samsung phones you can get "Disconnect" or "SABS" or "Adhell" to remove ads systemwide (based on Samsung's Knox security thing)
Nautilus (Gnome) recently removed that behavior

https://gitlab.gnome.org/GNOME/nautilus/commit/3a22ed5b8e3bb...
A fancy darkening algorithm on #000 can be short-circuited. I don't know if that's precisely what's going on here, but it's a general example.
The docs say to use tab and shift-tab
RIP 35mm Fujifilm Neopan.

The 1600 was a great high ASA film.
Currently on the front page => https://news.ycombinator.com/item?id=17195618
How difficult would it be to defend yourself in such a case? It seems like they have a strong case for the prior existence of this symbol.

I know it's not normally advised to represent yourself, but in this case it seems the only option.
Is this what they mean when they refer to child poverty in NZ? The near-100% child homeless rate?

Of course, child poverty itself is no joke..
Is there a roadmap to support CLR backend. I would love to use it with .NET Core backend.
If that's true then why does everybody know who they are?
It's surprising to me that anything should be allowed to overlap on top of iframes. This seems to be a continuous vector for other security issues, such as fake buttons over the Facebook "Like" button, etc.
That's never happened to me, at least with Python. Usually one of the first links is right to Python's own documentation.
How to Unlock All the Snapchat Trophies
As an established amateur I can see how film might work better for you, but digital is way more pleasant for a beginner.

I only recently got into the hobby, and digital is a godsend because I get to experiment on the cheap — I don't feel like I'm wasting film if I take the same photo ten times from different angles, with different apertures, at different focal distances... I also get to go to my computer, take all the photos out, see what worked and what didn't, and get a lot more usable feedback much sooner.
Film still cameras, not film cinema cameras.
Back to basics: What sysadmins must know about logging and monitoring
Similarly, the sunday matinee at the cinema was basically a family outing, complete with packed lunch, at one time.
If they're more or less the same, then assuming they're the same makes perfect sense.
Not sure why you think Carter closed the mental institutions:

"1980 President Jimmy Carter signs the Mental Health Systems Act to improve on Kennedy’s dream [JFK wanted to create a network of community mental health centers where mentally ill people could live in the community while receiving care.].

1981 President Reagan repeals Carter’s legislation with the Omnibus Budget Reconciliation Act. This pushes the responsibility of mentally ill patients back to the states. The legislation creates block grants for the states, but federal spending on mental illness declines."

https://www.kqed.org/news/11209729/did-the-emptying-of-menta...
Learn what all of the Snapchat Trophies are and how to unlock all of them in this complete resource.
The education market is important to recruit future customers though.
SV entrepreneurs and investors have the same blind spots, and what it means
That bill pays for bandwidth. It doesn't pay a cent for content.
Yes, I'm Fricken. I'm not _Fricken.
Do you have a family and other dependencies where taking a month off isn't really tenable after you leave your 20s, or whenever you settle down? It seems kind of absurd to take a month off every few years just to practice for a new job, whether the skills you're practicing are relevant or not to said job performance.
The government compiling a unknown before now list of people (probably mostly US Citizens) they don't like is always newsworthy.
Cost and flexibility when shooting (adjustable ISO, no need to pause to change rolls) are actually the bigger advantages.

You can turn out photos in film about as fast as digital. I can get a roll developed, scanned, and online in about 20 minutes.
The trend is to have applications use less memory. On bare metal an application used all memory, a virtual machine has the OS overhead per application, on a container an application uses just one process, and with serverless even the processes can be reused.

If I understand correctly AppEngin uses containers that do not re-use processes, so not serverless according to the above classification.

I wonder why AppEngine didn't take off, the best answer I heard was that the security sandbox was too small and people wanted more flexibility. What do people think?

BTW As for Functions-as-a-service (FaaS) we're thinking about running the Lambda code (which is open source) on Kubernetes https://gitlab.com/gitlab-org/gitlab-ce/issues/43959#note_74... how hard would that be?
I'm actually running Blokada, but both perform the same function.

Blokada does track how many ads it blocks and gives you a count (and notifications if you wish to be so notified [configurable]).

Both are free (as in the GNU 'freedom' definition as well as the 'beer' definition) so you could try both and see which you prefer.
> Certain backward areas have advanced, and various devices always in some way connected with warfare and police espionage have developed, but experiment and invention have largely stopped.

-- George Orwell, "Nineteen-Eightyfour"
I believe this is about blocking ad-blockers that work outside of the browser. As in, in apps, which are solely supported by those ads.
That depends. A lot of older X-ray machines were designed on the more is MORE philosophy, definitely ruining most film.

The fine print on so-called ‘film safe’ machines typically state they won’t visibly affect film slower than ISO800, inclusive.

(Plus, the damage is accumulated, so if you lug a lot of film through a lot of airports, you will get the occasional nasty surprise.)

That being said, I’ve never had any problems having my film -when I travel with it- inspected manually.
Alternative interpretation: Iframes are so overpowered and such an edge case for the browser's security models that they cause constant issues with the rest of the reasonable browser spec.
This is a really interesting vulnerability, and really interesting research, but the clickbait title-with-an-agenda is really terrible. Can we change it?
Now that is crafty.
Books for kids (Death and Bullying)
Books for kids (Death & Bullying)

Put a stop to all bullying! Check out "Butterfly Me"....by, Evon Latrail
Now available @ amazon
Also, talk to your kids about death "When Mommy Went to Heaven" by Evon Latrail
.......
As far as I can see, the request that asks for the font is a simple GET. So does this mean that an HTTP request to third-party X, who will log the user's IP, User-Agent and possibly the origin, will now require an agreement with X and explicit consent from the user? If so, will the consent need to be established before the request?
I'm not sure I'd trust Samsung to act in your best interest.
Right, but 40,000 people still died from traffic accidents in the U.S. in 2017. To get that number to zero, the U.S. might have to drastic things that probably wouldn't be a good tradeoff. The existence of a discussion about tradeoffs and costs doesn't mean that some people are anti-safe-driving or something.
From a moral standpoint, they're the side with ammo and the others are fish in a barrel.
> outperforms both Canon and Nikon by a considerable margin

Not sure the metric, but SLRs still own the focusing crown for most action-based photography (though the mirrorless cameras are getting closer to being good at it).

And exposure/metering is pretty much even, resolution is pretty even, ISO/noise gives an edge to Sony/Nikon over Canon, body/UX/comfort/grip gives an edge to Nikon/Canon over Sony (unless you have very small hands, maybe...), battery life gives a huge lead to Nikon/Canon over Sony.

There are only a few aspects where Sony's current flagships have a substantial difference, like high FPS shooting (20 vs ~10 for DSLRs), or 'seeing what you're shooting' in the digital viewfinder.

Also, both Canon and Nikon are reportedly working on some full frame mirrorless bodies to compete with Sony's flagships (they have both had various cameras in the market in the past, e.g. Nikon 1 series, but none were as well-rounded as what Sony's offering today).
That actor's charisma modifier is off the charts. A true pleasure to watch.

I'd never considered his point about how accent also impacts the flow of speech and potential speed so noticeably. Speed of speaking always drove me crazy when trying to learn Spanish, and I never got nearly as profecient at understanding spoken spanish as I did with French. Maybe if I had studied Spanish with a different accent from a different era I would have stood a chance! But it's crazy to think that plays which are 3 hours today were 2 hours in the past (though speech is likely not the only factor there). I don't have the patience for 3 hour plays, and Shakespeare never stuck with me from school, but after this I'm curious to watch a full production in the original accent.