skysight-inc/HackerNews huggingface dataset:
I recently posted Doug Engelbart's advice to a young software developer, with some links to interesting videos about his work on the chord keyboard and glove, and also a link to a new product called "Tap" that seems to be inspired by his work (more links and interesting stuff about Doug Engelbart's work in the discussion):

https://news.ycombinator.com/item?id=17121629

I just ran across a new device called "Tap", a wearable tap glove that functions as both a bluetooth keyboard and mouse!
https://www.tapwithus.com/

I haven't had any "hands on" experience with the Tap, but it looks very cool, like a modern version of Douglas Engelbart's and Valerie Landau's HandWriter glove!

I asked Valerie Landau about it (wondering if it was her company), but she hadn't heard of it before.

They have an iOS, Android and Unity3D SDK that appeared on github recently, so you can look at the code to see how it works:

https://github.com/TapWithUs

Valerie Landau interviewed by Martin Wasserman

https://www.youtube.com/watch?v=62ig8ecXlrA

Q: What did you find most impressive about him as a person?

A: His humility. He was such a humble man, and his steadfastness of keeping his vision. Often times leaders like Doug, who many people call a prophet... In our society, we tend to think of the leaders as these sort of charismatic, ambitious people, and I think that Doug really broke that mold, in that he was a very humble, really shy person.

Q: Do you have any last minute comments or observations about him to finish up. Or a good anecdote?

A: I think -- I wanted to say one thing that Doug told me many years ago. And this is really for the software developers out there. Once, this was in the 90's. And I said, Doug, Doug, I'm just started to get involved with software development, and we have this really cool tool we're working on. Do you have any advice, about ... for a young software developer. He looked at me and said:

"Yes. Make sure that whatever you do is very modular. Make everything as modular as possible. Because you know that some of your ideas are going to endure, and some are not. The problem is you don't know which one will, and which one won't. So you want to be able to separate the pieces so that those pieces can carry on and move forward."
I've never read of a single person claiming that.
Google interviewers were never supposed to ask brainteaser like questions, even before the company "admitted" they don't work.

The title is disingenuous, and implies that Google switched tactics after finding out that these questions were not useful, whereas in reality Google never started doing it because they found that these questions were not useful.

(Source: I did interviews at Google pre-2013)
Seems like these have been priced to compete with Digital Ocean.
I don't think this can really be blamed on CSS. I mean, yes, a new CSS feature allowed a timing attack that could extract information, but these kinds of issues keep on coming up time and time again, meaning that it's not this particular CSS feature that should be blamed.

The issue is the ability to interact in any way with cross site resources which contain any kind of potentially sensitive information. This leads to things like clickjacking attacks, CSRF, information leaks like this, and so on.

The things that could be done to fix it:

1. Don't allow any kind of cross-site embedding (yeah, this isn't going to happen)
2. Treat any kind of cross-site embedding like private browsing mode; don't ever send any credentials along with it
3. Don't allow the embedding site to interact in any way with embedded content. Treat it like an entirely separate, opaque layer above everything else, not subject to layering anything over it

Of course, I don't think any of these are actually going to happen, because they'd break too much. But otherwise, it's going to be a game of whack-a-mole with information leaks, new kinds of clickjacking and CSRF, and so on.
No longer required to turn off portable electronics – tweets Walmart Labs CTO
Splitting the vpn/firewall from wireless like a good approach. Any other suggestions for just the vpn/firewall piece?
There are clues to pronunciation in the text such as words that should rhyme, or that should be homophones so that puns work.

You can also get clues from forks of the population, such as the Boston accent that forked from mainly British emigrants around Shakespeare's time, and have evolved somewhat independently since. The distinctive things modern British and Bostonian have in common could date back from the time of the fork, for example.

Also we have a rough changelog of incoming pronunciation changes as communication with e.g. France increased. Back out those changes and the accent sounds more like the rural/remote parts of the UK still does, but they would have been mixed up in a metropolis like London.

Also a healthy dose of imagination and artistic license :)
Until 2007 Canon was far ahead of the curve, and they held on to parity until around 2010-2011. Shoot any camera from 2005 other than a Canon and the images will definitely have compromised image quality except in the best conditions, yet a 5D from 13 years ago still produces superb image quality.

Only starting in 2010-2011 did they stagnate in image quality for a time.
FCC Demands Amazon, EBay Crack Down on Kodi-Based Pirate TV Boxes
People tend to forget the historical context of a policy. Google was small in the early 2000s, but it was one of the hottest companies in the valley. Therefore, it could afford being picky. It was solving really tough computer science problems in massive scale, so it needed to find talented true geeks, those who live and breath math, engineering and computer science. The so-called brainteasers were usually thinly disguised and well-designed math or algorithm questions. There were few interview-prep books back then, either. Therefore, those who could solve the teasers were likely creative geeks.

Fast forward to it today, we have huge amount of prep materials and prep schools, so it becomes hard to tell who's truly talent and who has great memory. Google doubled its workforce in the past three years from 35,000 people or so to 70,000 people. You just can't expect that everyone is passionate and talented about math or engineering. Besides, Google does not need too many of this kind of people either.

However, if a small company is tackling a hard problem that does require tons of math, computer science, or pure ingenuity. Hell ya, brainteasers can be of great help. They don't even need brainteasers, they can just directly ask math problems.
I don't mind advertising...

I just object to how advertisers screw things up. Moving text while I'm reading. Hijacking the page and navigating away. Auto-playing loud videos.

(These problems are really symptoms of poor design in JavaScript)

All I want is a good ad blocker for my mobile browser!
This was a good HBR ideacast interview with him:

https://hbr.org/ideacast/2017/09/microsofts-ceo-on-rediscove...
Stewart Brand on the Whole Earth Catalog’s Long Legacy Over 50 Years
Modern Fertility (YC S17) is a proactive way to test fertility at home
It's who-you-know, not what-you-know. I should mention, by convention, you do not get to see the letters of recommendation yourself, so you're at the writers' mercy. (At least in my field, mathematics; others might be different.) Papers and conference talks become harder to do if you're no longer affiliated. Your abilities will shine through if you're Albert Einstein, but the 99.99% of "rank and file" professors don't need to be Einstein.

I'm not intending this as an indictment against academia. They're faced with a hard problem: many more candidates than job openings. They couldn't possibly do whiteboard interviews like in software, just because of sheer logistics. I don't know how academia could do it differently. Software can do it better because there's a LOT more money in software.
^I've had^I haven't had
Worth noting that this general category of render-timing-based pixel-reading has been around for a while. e.g. https://www.contextis.com/media/downloads/Pixel_Perfect_Timi... is from 2013, uses svg instead, and I could swear I've seen a CSS one from a few years ago.

I really suspect there's only one fix, and it seems reasonable to me: don't allow sites to place content over iframes, period. Allowing it opens all kinds of exploits like this and various flavors of clickjacking, all basically un-preventable since there's no limit to the techniques possible.
Maybe because you made reference to living in a "roach infested box in California" not just once but twice.

If your goal was just to educate people about the shortcomings of GDP as a measure of living standard, the social commentary about California's high cost of living didn't help.
Unrelated but for those wondering, "diktat" is not a misspelling of "dictates" as I initially thought. Instead, "diktat" means "an order or decree imposed by someone in power without popular consent" whereas "dictates" means "an order or principle that must be obeyed".

Think "the dictates of the fashion community" versus "The diktats of the dictator"
DSLRs have terrible WiFi because there is little demand for it.

SD cards are interchangeable, and slot into your computer for a reason.
You're kidding yourself if you think the Japanese are above a good old-fashioned AI gone rogue plot. Exhibit A: Macross Plus (and the AI is an idol singer to boot). Exhibit B: GitS itself, with the Puppetmaster.

As for "Asimov's Three Laws gone wrong", Asimov himself created the Three Laws because he thought Frankenstein had been retold too many times and wanted to write stories about robots blending into human society rather than attempting to overthrow it (and imagined interesting new failure modes of these robots in the process!).
generally, its not smart to experiment with an entire continent at a time
Ironically NTFS DACLs have an execute bit (on directories this allows traversal of the directory to reach a subdirectory you have permission to access, on files it controls execute). The kernel only enforces this on executables directly. Scripts are handled via user-space file extension associations.

Unfortunately the default inherited DACL on NTFS grants execute to all files, either via CREATOR OWNER, EVERYONE, POWER USERS, or ADMINISTRATOR.

Nearly all interpreters don't bother checking for execute, even though nothing stops Python, Wscript, et al from checking for execute before parsing a file. This probably comes down to a lack of #!-type mechanism on Windows, so there's no way to disambiguate between a script invocation and the user manually invoking the interpreter; you'd want to enforce +x for the former case but not the latter.

Like UAC vs sudo, culturally Windows simply didn't grow up enforcing these things so attempting to retrofit them causes tremendous pain and massive incompatibilities, despite the fact that the underlying system has robust support.
I've used DNS66, but I think I will give Blokada a shot. I really wish either one would offer the option of using DNSCrypt!
Everyone in the medical profession needs continuing education (CE) credits. Not much different from certs that support folks need to obtain if they work government/ DoD positions.

https://www.nurse.com/state-nurse-ce-requirements
All doors are open for side channel leaks. Having programs run on your machine is like having someone watch your computer. The issue is how to control the exfiltration of that data from you computer. That's where the sandbox should be focused on.
You really think Amazon doesn't have logs for security and troubleshooting?

What about all the networks between you and Amazon?
Possibly, but I presume you're driving a Model S or X?

It's already been noted by multiple reviewers that the regenerative braking of the Model 3 is less significant than previous models.

They did switch to a completely different motor architecture in part to cut costs, the two may be related.

Edit:
More significantly there have been numerous reports of Model 3s disabling regenerative braking altogether due to thermal constraints in fairly normal climatic conditions like 68F ambient temps.

What I think is most likely is the Model 3 just won't have particularly good service intervals for the front brakes. They at least appear to have a performance-oriented brake configuration with four piston front calipers, they will probably just wear quicker than expected.
I do wish there was a more standalone way to interact with org-mode files. Being the lone Emacs user on a team feels like I lose a lot of the power of org files.

I would love to write our tasks / build config out in org-mode, but running that on someone elses machine w/o Emacs, CI, etc. seems not highly supported.
Nikon even has - or at least had, until recently - two film cameras in their line-up.

The ‘because we can’ high-end F6 and the entry-level, manual just about everything FM10. (Though I think the current FM10 may be made by others under licence.)

I think Voigtländer may still make a 35mm rangefinder, too.
> AI Winter was referring to how the potential of current AI methods is limited

Not exactly. "AI Winter" refers the historical periods that followed unsustainable hype that surrounds AI methods prior to those times. Skepticism of AI during the last winter was so strong that "AI" kinda became a dirty word and people invented euphemisms like "machine learning" to avoid the stigma.

https://en.wikipedia.org/wiki/AI_winter
I had a cool english teacher in high school and he let us watch the movie Romeo + Juliet :)

https://imdb.com/title/tt0117509/
Snowfall data at ski resorts isn't reliable because they make snow, and the incentive is to lie toward favorable amounts for marketing purposes. In Colorado a few years ago a number of resorts were caught blatantly fabricating snowfall amounts and then they combated this with variations on snow stake cams published on their web site.

Anyway, there are quite a few NOAA SNOTEL sites all over that have reliable data and for sure snow pack is on a decline, and there's also USDA NRCS who use that data and publish agricultural specific interpretations of it. Further, due to budget constraints, some of these data may stop being tracked and produced altogether.

https://www.wcc.nrcs.usda.gov/ftpref/gis/images/co_swepctnor...

https://www.wcc.nrcs.usda.gov/ftpref/gis/images/mt_swepctnor...

Note the notice under the date.
This isn't the first time a color-exfiltration vulnerability has been found in CSS. Disappointing that we're revisiting this same issue.
The term itself is problematic - haven't we learned from "fake news" that said accurate description of literally whatever gets the most clicks will rapidly be turned into a rhetorical cudgel that means "news that I don't like"?

Given the sheer potential for abuse I would advise great caution with measures to remedy. This problem is ancient given that it has been around for literal centuries at least. Just in the article a contemporary of Oscar Wilde used the technique!
Artificial snow is atrocious to ski on. It's incredibly sticky, and towards the middle of the day, feels like wading through mashed potatoes.
The future is already here — it’s just not evenly distributed’. William Gibson
It’s very easy to miss, I’ve had to search around for it.
your own bucket wouldn't benefit from browser url-based caching of common assets (libraries, fonts, etc)
The Story of How the Government Used Eminent Domain to Make a Pfizer Development
Java StAX Tips
Isn't GAE PaaS? I thought serverless meant programs that served only individual endpoints, like AWS Lambda.
It's certainly a fact that some people prefer security to freedom. In addition freedom is a very abstract concept, and as a consequence it is much more often fetishized than adequately understood. Absolute security and absolute freedom are both essentially death.

That all gets very philosophical though, and most people can recognize a good balance of freedom and are watchful of security paranoia stepping up and curtailing that balance.

But here's the problem. This isn't actually security. Security is the straw man. This is power masquerading as security. Nobody is becoming significantly safer thanks to these overreaches of surveillance in any way that really matters. The likelihood of falling victim to a failure of airport security is outrageously low, and these security firms are taking advantage of our inability to accurately assess risk when it comes to things like this.
Url changed from https://www.bleepingcomputer.com/news/security/css-is-so-ove..., which points to this.
1. Are you really assuming that researchers at MSFT screwed up the training and validation sets??
4. In what way is GBT more interpretable than an ANN??
To me it doesn’t seem any more absurd than front loading 3 or more years of expensive professional school as do many other professions like lawyers, architects, and doctors.

Just pretend you went to law school and have to make monthly loan repayments each month. Put that money in bank account and you will have more than enough savings to take off work for a month every few years.

Median wage for programmers is nearly double the US median household income and has few barriers to entry. If the only downside is having to take a month off work every few years, I’m not complaining.
I'm seriously curious how they were able to sell that last inventory. Folks buying them for nostalgic reasons? Was there a real market left for top of the line film SLRs that wasn't served by the used camera market? You can get really good used ones for not very much money.

As a film shooter for 20+ years, I decided to break out my old Nikon FA and shoot a roll of film today to mark the occasion. (I still keep some in the fridge, Velvia 50 Daylight.) I wonder if the last place that would still develop slide film around here last time I needed film developed still does it. If they still take film, they probably ship it some place to get it developed rather than do it in-house like they used to.
Zero examples.
> Google Docs, Sheets and Slides have taken over the education market from elementary school through college

Which market? Surely not in Europe.
Hi Bryan :)

>highly targeted, outbound cold emails...

...are neither scalable nor calls, in my mind. Here's my opinions:

1) I am currently manually building my own unsolicited email list for the purpose of marketing my b2b service. I have good, quality data sources with no bounce rates and right personas, but it is neither cheap nor simple to enter this data manually

2) even if I send these people highly targeted and well-crafted emails that are friendly and insightful and pithy, it is a slow process with diminishing returns...

3)... because most people add me to their spam filter these days. It is trivial to do so.

I would infinitely prefer to invest my time in creating excellent, viral content and offering users a free entry level service with few restrictions.

I would then spend all my time obsessively devoting myself to those users who have a big budget and greatly desire to receive communication from me.

Lastly, I dare say that someone who responds to a cold email will probably just end up kicking tires.

Tire kicking is automated away with my free demo.
How do you deal with https traffic? Wouldn't you need to MITM proxy everything and install CA certs on the client? And wouldn't that reduce client side security since all certs would be signed by the same CA?
A colleague told me something similar about Lisp: “The author didn’t create Lisp, he discovered it.”
Iframes will never go away.

But we need a way to tell a browser "if you embed this page into an iframe, it needs to be the topmost content, no transform/translate/visibility or anything". Social/login iframe would set that flag, and it would prevent the clickjacks and attacks like this.
I’m talking about the optics to Google employees — I was not implying that they gave a crap about optics to the general public.
> 3. Don't allow the embedding site to interact in any way with embedded content. Treat it like an entirely separate, opaque layer above everything else, not subject to layering anything over it

I'm actually surprised to hear that this is not the fix here. Instead, they optimized the rendering code, which might not preclude more sophisticated attacks on that side channel.
CE classes for nearly all professions are a joke compared to the shit software engineers are expected to go through to rehearse for interviews.

As for government work, I'm not sure where you got that idea from. I did government work for 14 years and never needed any certifications. If I had, the company would have paid for it and it would have been on company time.
Is it illegal? Or do we have to wait for them to act on it?
That's entirely a discipline and planning problem.

I doubled my income, downgraded my lifestyle and now I am sitting on a 49.5% savings rate on my take home pay. No car, I budget to eat out twice per month and even the food I eat I prepare myself.

My girlfriend also doubled her income, but has since doubled her expenses and not saved an extra dime. What has she spent it on? Clothing, jewelry, expensive organic food, new pet, etc.

Consider even getting a room mate if you want to save more.
10k$ is barely enough to cover the moving cost. What's the incentive here?
probably, at the very least for avoiding DOS attacks on important common assets. GDPR is one of the most shortsighted laws I've ever read
CreateFile() is not deprecated. https://msdn.microsoft.com/en-us/library/windows/desktop/aa3...

OpenFile() could be considered deprecated but the official documentation doesn't mark it as deprecated.

You missed the point that these API have been stable for decades and software will continue to work without any change.
That's beside the point. The point is that the comment contains no more information than "yay flamebait".
The signal/noise ratio of HN comments needs to be much higher.

Unsubstantive comment + flamebait topic = de facto trolling. By de facto I mean whether you intended to troll or not. We can't read your mind, but we know a lot about the likely effects of such a post. Moreover, you have a history of doing this, e.g. https://news.ycombinator.com/item?id=17102050. Please don't do it any more.
Thank you for referring me to these. I went with Blokada and had no idea these existed, very happy!
$10 million airplane? For that price, you are flying a budget-friendly entry level private jet - not a commercial plane, which starts at least 1.5x of that[1].

[1]: https://en.wikipedia.org/wiki/Embraer_ERJ_family
I've seen Ben Crystal do some other Original Pronunciation Shakespeare videos. It's his specialty, and I would love to see one of his "original practice" productions live one day.

Here's a couple more of his videos:

https://www.youtube.com/watch?v=gPlpphT7n9s

https://www.youtube.com/watch?v=qYiYd9RcK5M
Well, Amazon is taking their ball and going home because they're not happy about the tax law. They threatened to do similar in Seattle. I suppose this episode is an answer when people ask in what way Amazon enjoys monopoly power.
Developed at Berkeley by Yangqing Jia, a Chinese national.
Thank you for referring me to this!
The current rumor is that Canon (and possibly Nikon as well) will reveal their first mirrorless Full Frame camera body at or just prior to Photokina, which happens in late September.
This is really a timing side channel attack. Such side channel attacks have been known about for a long time but this one allowed you to leak information about the color of a single pixel in your target page. I wouldn't say this is due to CSS being overpowered, it is much more due to the way that iframes can be configured to show a single pixel and the way that rendering times for your page are leaked into JavaScript. If your rendering is not done in constant time then the vulnerability occurs and CSS in this case allowed you to trigger non constant time rendering. The fix was to make the rendering constant time again.
Even $6B is extremely far from the unprofitable claim.
Nepotistic practices are rife in tech as well. It’s quite possible to skip tech interview hazing by knowing the right people.