skysight-inc/HackerNews huggingface dataset:
I'm curious how the TSA accesses this list?

For example, does the person scanning my boarding pass see it? IIRC the ID checkers often don't have radios or full blown computers.

Likewise, the screeners themselves don't look at your BP or a computer.

Do they just... warn the entire staff a known soveriegn citizen will be coming through?

(I'm not endorsing such a list, but others have commented how it's problematic... reservations aside I'm curious about the logistics of how they would even make use of such a list)
I wonder if there are any SaaS providers out their implementing DNS filtering for their users as part of their product. Say if you're running a high-traffic platform for content sharing, it would probably be trivial to alert users that they're about to clicking on a potentially risky link forcing a user to copy/edit haxxs://evil.com instead of sending them there and pushing the responsibility for protection to the user.

It would mean a massive overhead in DNS queries (as opposed to passing the link on to the frontend) for a large site, but wouldn't this be something a DNS caching could easily handle?

While this wouldn't do anything to reduce actual spear phishing by email, it would reduce the possibility of spreading links widely on big social media sites.

I'm probably missing something though because sure others would have thought about such an obvious thing and turn it into a feature.

Edit: I forgot that you'd also have the overhead parsing the link so it's not just extra DNS. still ...
Vector thing actually does make some sense, you might want to read about embedding. Or just watch fast.ai lesson 5.

Ironically, this was the topic of my final (and failed) conversation with them
Why does using V8 or Blink give Google control over your software?
Expecting browsers to prevent cross-site exfiltration and tracking is pretty iffy. When it really matters, even preventing that at machine level is pretty iffy.

Compartmentalization among multiple machines is better. Maybe sandboxing aka light virtualization can be adequate. But I'd rather go with at least full virtualization. And when it really matters, I use multiple hosts, with network isolation.
45% of all housing stock, but 75% of all rental units.
2Mb/s in theory. I always divide by 10 the max the spec gives you to get a real estimate of the IRL output. Same for wifi, 4G or landline contracts. Reality is never that good.

Add in the mix anything that gets in the way of the signal, the oh-so-annoying latency, then the lower quality of the sound provided with in-ear head phone and voilà.
It's almost like the open stuff doesn't meet their needs, and they find benefit in the alternatives.

Most people don't find simply "being open" to be a compelling virtue. Maybe more of the open source people need to recognize that, and come up with some other compelling functionality.
Latency is also a problem. I often write music while wearing headphones, and I need to hear the sound immediately, especially when playing very fast pieces.

From what I can find online, the AirPods have a latency of around 250ms. When playing 16th notes at 180 BPM (common for my music), I'd be playing the 4th note by the time I heard the first note.

The latency can be dealt with when watching movies by slightly delaying the visuals to sync up with the audio. That approach doesn't work when I need to hear a sound as a result of doing something.
Intuitive reinforcement learning
This is a privilege that not all get to enjoy.
What will Mozilla do about the Tor network's usability problems? Advanced users can workaround them and because they understand the benefits and engineering, accept the frustrations as a cost for a worthwhile (and free) technology. But what will non-technical users do?

Many public Internet websites filter connections from the Tor network, many other websites are very slow, yet others impose extra obstacles such as multiple rounds of captchas (even 5 or more) or degraded service (including high suspicion of payments), and of course you often will receive webpages in the wrong locale or language - which can trigger regional filters. Currently, workarounds requires resetting the circuit (few non-technical users will even understand what the circuit is), lots of patience and reloads, and often just giving up.

If that's the experience of typical Firefox users, they won't use it and they will have bad associations with Tor and Firefox.
FWIW I haven't found a way to get access to unshared files until after you remove access from someone. The Admin SDK only provides usage reports. The Drive SDK allows you to get files et cetera, but only for the current user (!) -- so that doesn't help for anything you don't have access to, which I'm guessing from the phrasing of your question you already knew :)

I'm guessing this is a feature? As in Google wants it to be easy to just create local sheets/docs/... without them being shared with your org by default and would rather worry about giving admins better features to manage and audit sharing than give admins access to every document under the sun :)
Our military spending is anything but defensive. Overtly agressive and offensive? Yes. Active in most parts of the world yes. Defending our borders? Not really.
I wonder how people here would feel about working on anti-missile systems. Probably much less conflicted.
1) I'm also including cities like Redmond and Kirkland with Seattle.

2) Amazon's not a bad place to work: it only is thought so because of comparisons with other big companies. And even its negative aspects are as much team dependent as they are company dependent.

3) In general, working at a big tech company in Seattle will give you a small haircut in income while offering a far lower cost of living than SF/SV.
I wonder if we'll ever get back to "go ahead and browse random script-free websites, but only run trusted code". I guess it's way too late for that. We'll be patching side-channels forever.
Ask HN: Are Most Internet Sites Handling the GDPR 'Incorrectly'?
Because maybe I'm being a tad naive here, but it feels kind of pointless to tell people about your site's privacy policy/cookies when you don't actually give them a way to opt out.

Seriously, almost every site I've seen use one of these notices makes it as pointless as possible, with the only option being to 'agree' to the terms to continue viewing.

But that feels completely pointless. I mean, no one's ever gonna read these notices properly, let alone go through your terms and conditions. And even if they did, by not giving them the choice to opt out, you're making the whole thing a bit of a shambles.

Which makes me wonder if it's even 'legal' to do this. Seems like a notice you're forced to agree to should have no backing whatsoever, especially one where you're not really giving informed consent or what not.

It's like expecting someone to have automatically agreed to a set of terms and conditions for opening a package.

But hey, what do you think? Is the practice of giving someone a box they have to agree to in order to continue browsing a questionable way of complying with the GDPR?
Secure and Decentralized Data Processing – Blockchain + Homomorphic Encryption
The issue is changing jobs, not keeping up with credits for your current job.
It would be a great idea, had only cryptocurrency been invented before powerlines.
I dispute that avoiding obesity requires either exercise or high-quality nutrition. It is simply a matter of maintaining a caloric balance at a healthy weight. This can be effectively controlled entirely on the intake side. (See the nutritionist who lost weight and improved his bloodwork on a gas station junk food diet. [0]) Other countries with varied labor and economic conditions (presumably among them are some you would not label medieval) are experiencing the same obesity pandemic. There is nothing unique about the US in this regard other than it has been leading the trend.

[0]: http://www.cnn.com/2010/HEALTH/11/08/twinkie.diet.professor/
Australia Post also invented email... a couple of years ago.
Matt Levine touched on this earlier in the week:

https://www.bloomberg.com/view/articles/2018-05-29/xerox-ceo...

> Helping a merger along by offering the target CEO a good job at the combined company is … a fairly standard move, really; it’s the sort of thing that people grouse about in merger lawsuits but that happens a lot. Helping it along by offering the target CEO a good job at the combined company after he’d already been fired
Hah, maybe a middle ground vs gopher. The GDPR mitigation from NPR (https://text.npr.org/) was refreshing. The amount of effort for display capabilities above and beyond moving around plain old text + some markup for layout has been totally out of proportion to the end-user value. I kind of wonder things like, "I wonder how much the memory/cpu it takes to run Slack (just on my laptop) vs total at NASA to design and managed the Apollo 11 mission". Anyway, that's OT enough. It's just that this is such a ridiculous vector that it's irritating.
You get a list of responses you need to handle. Nothing says your binary only responds to one, or that there is a 1-1 correspondence.
Wouldn't more Tor 3rd party integration (soon Brave, Mozilla in the future, ...) lead to greater incentive for website operators to allow Tor? (FWIW Cloudflare captchas are mostly a thing of the past now as they've been allowing Tor users as long as they come from the Tor Browser)
I opt out of the body scanner, and often experience extreme levels of hostility due to this. (Or related issues, such as keeping my items in my view during the screening process.)

I have never sworn, threatened, etc a TSO, but I still fear I could be put on such a list one day for my "difficult" behavior.

Personally, I think if they think behavior is egregious enough to need to be documented they should have the airport police cite the person for disorderly conduct. Police officers have a fairly wide latitude for issuing this charge, and we have an established court system to deal with appealing the matter.

Much more democratic than a secret list.
Does this dispute imply that Apple backdoors its own iMessage end-to-end encryption on states' request?
Repository owner can edit comments arbitrarily, which already allows for impersonation, although to a lesser extent.

Also, you can impersonate commits freely.

I don't think allowing full import would be a big deal, especially if the UI made it clear that the comments were imported.
I guess that works if you are too retarded to install an adblocker on android.
GitHub Security Cheatsheet
It means one company decides the future direction of the web. (Even more than they already do)
I don't want to say this, but you'll be back. Putting all cons aside of using Chrome, Google is actually doing a very impressive job which will make everyone considering this switch to go back in no time for some reason or the other.
I'm using cloudflared [0] for this. Allows me to have system level DoH and everything uses it (unless explicitly configured not to). Working on Linux machines (amd64 and aarch64) and MacOS.

The documentation is not great / accurate but with a bit of fiddling I have it running as a systemd service (launchctl on MacOS). I'm using the /metrics endpoint to get details in Prometheus on the stats.

0. https://github.com/cloudflare/cloudflared
> Our hypertext is not the same as Engelbart's hypertext, because it does not serve the same purpose.

Tim Banners-Lee is pretty upfront Engelbart's hypertext was a direct inspiration [1]:

> I didn't invent the hypertext link either. The idea of jumping from one document to another had been thought about lots of people ...

> Doug Engelbart in the 1960's made a great system just like WWW except that it just ran on one [big] computer, as the internet hadn't been invented yet. Lots of hypertext systems had been made which just worked on one computer, and didn't link all the way across the world.

> I just had to take the hypertext idea and connect it to the TCP and DNS ideas and -- ta-da! -- the World Wide Web.

1. https://www.w3.org/People/Berners-Lee/Kids.html
A California City Is Gearing Up to Test Universal Basic Income
EPIC, Coalition Urge Compliance with Freedom Act Transparency Requirements
I live in Mountain View and it's been very interesting to watch the fight between Google and MTV play out. Google very much wants to build more and denser housing (and more office space) and it's just a constant fight with the city.

Google owns some land that had previously been developed for dense residential until the city council changed their minds. They've just been sitting on it for the last few years. Finally, the city council is approving 10-12 story residential (which is unheard of in the Bay Area), but they're still bickering over the details.

The crazy part is that Google wants Google employees to live in Google-owned housing next to Google. This should be a no brainer. Every Google employee that lives next to their place of employment takes another car off the road, has another person walking to work. But people are arguing it would create more traffic.
Did he really have fiduciary duty to shareholders if he was fired?
If you need to distinguish between error then that would inappropriate. Without a real example, I can't really say what the right approach would be.

Looking at your example, I would say, if you care about which error happened, you should be using separate try blocks.

Errors aren't meant for flow control like that so really, you shouldn't be indicating error inside a try like that.

One option that Pony could have gone with is to use union types to always indicate errors:

(My Result | MyError)

There's overhead to that though. You always have to match on the type. For situation where an error is unlikely, partial functions are nice. Partial functions are not exceptions though, and aren't designed to do flow control so trying to use like some might use exceptions (to do flow control) is going to be painful (as your example points out) because they weren't designed for that use case.
Andrew Anglin is founder of stormfront. The poster used the alias (andre_waglin) to post content on topics of race, but Hacker News mods are totally fine with that and I get down votes? Well screw hacker news then; I don't frequent places that tolerate purveyors of hate and intolerance. Apparently I was wrong: Hacker News does welcome Nazis and white supremacists.
In Search of Missing US Suicides
> is not particularly strong evidence that this hasn't been "a feature on iPhones for quite some time"

Sure, but there's no evidence whatsoever that this has been "a feature on iPhones for quite some time".
>You jeopardize (or devalue) the asset by trying to play landlord. By leaping after $80k/year, you may cost yourself $500k/year appreciation in the asset.

Unless your tenant literally burns the building down and you don't have insurance, I'm not sure how this works.
> Remember that they rose to fame by using stories that were in the public domain and exempt from copyright, then lobbied to extend their own copyright indefinitely.

And now try to claim exclusive rights over those same stories, no less.
I've heard it said that success is its own reward, and I think that in some ways that can be true.

It's probably not a good idea to treat them the same, but maybe trying to celebrate the effort, not the outcome.
Related https://ofdollarsanddata.com/why-winners-keep-winning-4e7f22...
Are Nazis and white supremacists welcome here? Answer yes or no. There is no bull in between.
That's a hard game to win in the end. Odds are the new and improved name services you're required to use won't really look much like DNS today.

Initially they'll be implemented as DNS over HTTPS, with devices being shipped preconfigured to favor those HTTPS endpoints over name servers provided by the local network. From there the traditional DNS bits will eventually be removed in favor of whatever proprietary mechanisms defined by Google/Amazon/Apple.

The only way to use Google/Amazon/Apple services will be by bootstrapping from hardcoded list of bootstrap ips in their product, secured by a similarly hardcoded CA certificate.
This comment is gold. Sample bias might be at play here and still that is encouraging.

Poor people do not love to be poor and are actively looking to get out of poverty. One of the ways they do this is by taking unusual risks and imitation. (Trust me I was poor). Public education system takes away both these tools from them. The school you will go to will be determined based on where you live and nothing else. Because of this stupid constraint you lose a very critical market signals that other schools could have used to filter out better kids and nurture them better.

I think poor children should have access to charter and private schools too but those schools should have 100% freedom to discriminate. Say for every certified poor kid that is admitted to private/charter school government gives a $10K voucher and you can admit only at max 25% of total capacity with such students. The poor kids and their parents line up outside the school. They have to prove that they are worthy of the seat by showing things that matter to the school. E.g. my kid is not a bully, parents of the kids have no criminal history, that parents are happily married, parent doing 2 jobs, parents have not done drugs etc. At least bare minimum parents willing to take efforts to enrol them into better schools and doing research of which schools are better.
I remember hearing that V100 FP32 cores could be used as pairs of FP16 cores for specific use cases, however I don't think the FP64 cores are decomposable in the same way.
Interesting, what command did you use? This works for us without any issues:

signtool sign /a /fd SHA256 /tr "http://timestamp.globalsign.com/?signature=sha2" /td SHA256 <exefile>
And next bazillion bug will appear!
Let’s Repair an Ancient Macintosh SE/30, Part 2
> There are countless towns in the US that <snip> would utterly fail at educating students to a reasonable level.

There are currently countless inner city schools that utterly fail at educating students to a reasonable level.

California with its immense wealth, it's progressive views, and some of the most intelligent bureaucrats has one of the worst school systems in the country.

> would soon resemble Sunday Schools

Why do you think that?

Parents want their kids to do well. They understand the scientific method is important for a wide range of careers.

Conservatives are on equal footing with progressives when it comes to science except for belief in evolution.

Would you find some schools refusing to teach evolution? Yes, but they would be in the minority even in deep red states. And even then the majority of those schools would still be teaching the scientific method. They would just drop evolution from the curriculum.
I'm surprised that AWS does not offer anything more advanced than RR.

For a refresher on some of them, checkout out http://liblb.com
Our EV cert shows an alert. Very fucking annoyed if I’m honest. And yes it was SHA-256.

Several days and a pile of cash fucking around with WIX and signtool for what exactly?
When Will Banks Really Accept Cryptos?
If you want to know the current (or at least 2016) state of actually running an algorithm on a real quantum computer then this video is great https://vimeo.com/180284417 It's about using a quantum computer to perform supersampling / anti-aliasing
Google and the DoD’s Disturbing “Maven” A.I. Project Presentation Document
I thought the comment was a wonderful form of satire. It wasn’t just parroting, but doing so in an artful way. IMO
I missed the part where this was ever a good project.

Cryptocurrency mining has to use the cheapest available power, or else it loses money because the mining rewards float at just above the cost of the world's cheapest power. Because many companies prefer renewable power (such as data center operators who want to claim they are carbon-neutral) and there's a limited supply, renewable power will always be at a premium over the cheapest power.

A big problem with successful ICOs is that the companies immediately have too many shareholders to let them pivot. The idea could probably be morphed into something that works, but not with 100s of retail shareholders demanding progress on the idea they originally backed.
Agreed, I wish you could do something like plug an aux cable into the case and plug it into something and stream audio through that to the AirPods
Unequal Access to Social Media Posts
Burlington is a lot like Portland it's a bit more dense population wise, but smaller overall.
Well, it's not my reasoning, but in general same logic of course would apply to other governments - if some government perceives the US to be a hostile power, they would be wary of American companies and US-made hardware/software.
Check this Stack overflow thread. For us it was cached SHA1 certificates in the cert chain:

https://security.stackexchange.com/questions/109629/deprecat...

But yeah, it's a pain..
Do you have a reference for these claims?

Search and Youtube seem to be ad hosting platforms, and "ad platfom" seems it would be from ads. The Android ad revenue slice seems to be missing from Google.
I have faced similar paths when reporting vulnerabilities in major web applications, namely just getting ignored completely by the company, even by the Facebooks and Googles and other such companies you'd expect to be on top of valid demonstrations of flaws.
CA was Certum, according to the certificate
Right on cue - YIMBY/SFBARFers respond to any HN headline with the words San Francisco and Housing with their strawman argument "NIMBY'S".

Nevermind the fact that the question here is about homelessness which is exacerbated when you lobby to mow down affordable SROs and rent controlled housing so some developers can rebuild luxury condos in their place.

How exactly will that help the homelessness problem?
Except a NN could not find these needs. They are very poor at the understanding part of language.
>Increased density does not increase crime. There's no evidence for this.

I think I agree with you, but you are over simplifying the issue. Increased density does not increase crime per capita. It does increase crime per other measures of crime intensity (crime per square ft?). https://nycdatascience.com/blog/student-works/pressure-cooke...
I'm not sure what you mean by the first sentence. I don't live in SF.

And by foreigner I mean non-citizen. I think if you want to influence policy you should have to have something at stake.
Effective Design Reviews at Sift Science
A very important distinction between theft and adblocking is that you show yourself the ads. You (i.e. your browser on your behalf) requests that the server send you an html document, then you go and look up all of the ad links and make requests to those servers. Then you download all of the images and texts from those servers and render them on your own screen.

Every step in this process is voluntary:

- What if I decide I don't want to make requests to the advertiser's servers just because an html document suggested it?

- What if I decide I don't want to render an ad, just because I downloaded it from somewhere?

Contracts, like the one you're proposing here, are agreed upon by both parties. I agree to download your ads, if you agree to provide me access to the site. Paywalls work like this, ads don't. Ads are a polite suggestion that I'm free to ignore.
(Original article author here.)

Feedback is important, so after the interview, everyone gets detailed personal feedback on every section, regardless of the outcome. We get much higher resolution data after the interview (part of the point of my article).

You may have hit a few React-specific questions, but getting those right is certainly not required.

As far as Boston/remote: interviews are expensive for us, so it makes sense to interview engineers who are excited about working in places where lots and lots of our companies are hiring today. Currently that's SF or NYC. When we expand, you'll be able to pick up from that step.