skysight-inc/HackerNews huggingface dataset:
But as your parent pointed out we _already know_ that padlocks for HTTPS are the wrong UI here. The goal is to get to the right UI, which you can only do after getting to very high HTTPS usage rates, which we've been working on for several years already.

Tim's toy hypertext system from last century doesn't have confidentiality or integrity at all and the authentication mechanisms are garbage (which is why nobody uses them). So adding these necessary features has been a retro-fit for the past 20 years or so, and unfortunately the original attempt at the retro-fit was done by people who knew nothing about security UX. Which is understandable, this was the era when people thought PGP was usable.

So, we have to get from this cul-de-sac we were in 10+ years ago, to the correct approach, which means some U-turns and all the major browser vendors are more or less on board with that. The padlock will go away (at least from the main UI) as part of the journey, but it hasn't gone away yet because we're not finished. Notice that even going as slowly as we have, every time there's an incremental move Hacker News is full of people screaming about how awful this is, they can't be expected to handle this pace of change...
I've never liked the Fermi paradox. It seems terribly contrived. It assumes way too much. That space colonization is inevitable and/or that strong AI is also inevitable.

What if it's not? What if it's an intractable problem?

What if technological advancement isn't exponential? What if it's more of an inverse tangent? A slow start, an explosive middle, then a long finish with an upper bound.

We have absolutely no other examples to base any assumptions of technological societies on, so why do we get "space colonization" and "independently thinking machines" for free?
I am currently doing some interventions in some Ocaml code written by Big Co. The world is completely different between you writing your program in your corner, and stumbling in a codebase with a serious history and a task to do on it efficiently.

It's not going quickly nor easily, and there is no real help from Jetbrains IDE.
While it's true that salaries are low on average, a tech worker relocating from overseas wouldn't (and shouldn't) settle for an average offer. Same goes for work culture.
I preferred the world when more things were like an xkcd comic, rather than like a Black Mirror episode.

https://en.wikipedia.org/wiki/Nosedive
You would be surprised :)

There's a company called WonderWorks that embodies this style

https://www.wonderworksonline.com/#
Hey man, I know how hard the hate hits when you explain something like this to a community. It happened to me here too when I talked about the mass weaponization of autonomous systems via cyber attack. One guy said I was somehow right and a crank at the same time and dismissed one of my conclusions out of hand without addressing any of the reasoning behind it. I hurt at the time, but I came to understand it wasn't really directed at me.

The thing you got to realize is that many here make their livings trying to secure systems and we're finding it hopeless. The way you did what you did was fine. In terms of proving the hack you needed to violate Google's trademarks. It's in the very nature of the hack, and as far as I'm concerned, warranted given that they have a bug bounty. Now, I probably would have disclosed it to Google, Bing, etc. ahead of time, but it's your bug. You could have sold it to blackhat scammers and you didn't. For all we know this hack could have been going on for years.

I think most people are confusing their anger at the situation with anger towards you. You're cool.
If there is an Amazon for "take my junk and sell it for me, keeping a reasonable percentage" I'd really like to know about it. Craigslist is such a pain.
And lasers. And Unix. And switched networking. And binary digital computers. And long-haul undersea cables. And the first successful communications satellite. And data networking.

http://blog.tmcnet.com/next-generation-communications/2011/0...
Thanks. Saved me a response :) I am in an Enterprise and we have deployed cruft code into the cloud :) and were even cloud native or whatever bullshit bingo brings up next in terms :)
Not only that, but Home Assistant is by far my favorite example of a well run "crowd run" open source project.

There's no big company bankrolling it (well there kinda is since ubiquiti hired the creator, but not to the same extent something like Chromium is just google), there are a HUGE number of committers, and the structure encourages people to maintain and improve their own contributions via 3rd party packages.

There's no fighting, there's not much gatekeeping, it's not overly complicated, and they are EXTREMELY welcoming to new contributions, no matter how "unique" the use case is (look at some of the integrations! There's integrations for local bus schedule systems!). And on top of that, there's world-class documentation! That's rare enough in paid products, but to see it from a project like this, and the fact that it's almost always up to date is simply amazing.

They held my hand through creating 2 new integrations, and I haven't developed in python for almost 10 years, and they were extremely helpful, responsive, and at the end of the day the product got better for everyone.

I really don't have enough good things to say about Home Assistant.
>gaming PC

>Ubuntu

Hope he likes Mahjong and Tux Racer
Another way to frame this would be she has chosen to "live in limbo". She could naturalise and it would not have been a problem.

Japan makes the zainichi concession because it's got no other option. Force the people affected to become Japanese would cause an outcry. Repatriating them to a country they have never lived in would be little better.

The zainichi status holders that I have met over the years in general identify more strongly with their non Japanese nationality and do not want to naturalise. If that means they cannot become a police officer or a government official it seems fairly reasonable to me.
Is it possible to enforce purity for parts of an OCaml program? Or is there always a way around? (Not saying this is bad, because for instance caching functionality is non-pure but still maintains the external quality of purity).
I use F# every time I have to write a parser for the sole reason of FParsec, which is a godsend and a joy to work with
Founder of Home Assistant here. Happy to answer any questions.
Nikon announces powerful Z7 and Z6 full-frame mirrorless cameras
Spyware Company Leaves ‘Terabytes’ of Selfies, Messages, Location Data Exposed
I tend to do the same, picking at uneven feeling bits. What sucks is how it turns into a vicious cycle. If I can somehow keep away long enough for the skin to heal, I can usually stop.

Until I find another spot.
Dear Ad Networks
It happened to me twice (as a tourist, overall being seven weeks in Japan).

My strong feeling was that the proprietor of those places were afraid that they won't be able to communicate appropriately and that they may lose face if they can't make me happy. I never felt discrimanted against, really.

On the other hand I had fantastic experiences walking into places, where nobody spoke an English word, throwing a hearty Omakase! (essentially: you decide) at the chef. Smiling and an occasional Oishii! (delicious) delivered with a smile also go a long way.

You have to be aware that they're really scared to lose face and that you could leave unhappy. A very big no!no! in Japanese culture.

I had fantastic experiences, let alone extremely tasty meals with this approach.

edit : spello
There is a bug in the compiler that I never managed to fix.
How Likely Are Trade Wars to Become Shooting Wars?
fun fact: you can do the same thing again, but use the AMP version and call yourself an amp-provider, just like google does.

technically they wont be able to complain because you can say providing amp content assumes they want to be served by you, and you can fiddle as much as you want (e.g. adding tracking code) just like google does when it serves someone else content as amp.
Hahaha so that research is one big collective "I don't even eat that much" self-delusion.
I did want this article to be correct and to have a quick fix for obesity, but I guess I have to go back to my diet :(
Serving the web from the browser with beaker
I just get horizontal line with numbers on it, there is nothing else on the page when I click "Go!". Is it down somehow?
Yeah. Because a programmer in a new team is likely to be productive after a week or two. /s
Thank you for your work at Codecademy -- a place where I learned how to program. I'm working through my 4th year as a developer :)
Observation of topological phenomena in a programmable lattice of 1,800 qubits
Today they are. Programming can be made easier with large frameworks. Cost can be reduced with higher volume.
They can beat the cram out of 6-7k players (99.95th percentile), beating Team Human - https://blog.openai.com/openai-five-benchmark-results/
An even bigger problem is that most good candidates have their current job and could be open to better opportunities, but would not consider going into this hung up state. Do you expect me to quit my job before doing the tryout? Even if not and, say, you like me, when do you expect me to quit my current job? I need at least a couple of months to cleanly exit without burning bridges and I am not going to even start this process until I have a firm offer from the new company.
> If I tell you that 9 is the result of my squaring operation, you can easily deduce that the input was 3.

Or minus 3.
Incredible project. Such a well-run open source system- monthly updates with great release notes and documentation.
> 2FA authorization needs JS if you want to use it conveniently, otherwise you would have to refresh all the time

How do you mean? IME 2FA works via an CLI utility or mobile app, and JavaScript doesn’t enter into it at all.
Ask HN: What do you want in BIOS/BMC functionality on a server?
Hello HN,

the startup I work for has asked me to spec out BIOS/BMC features, and I have a few open questions that I want to get a sense for. The survey is short and to the point, with the option to leave more elaborate feedback.

I'd greatly appreciate people in devops positions working with physical hardware to take five minutes and give me their very valued input.

Feedback and general discussion on what a server BIOS and BMC firmware should be able to do is also very welcome.

Here is the survey: https://goo.gl/forms/TOX3KrrRfvhEJXRR2
Isn’t this exactly the opposite of what you want when you’re checking style? The entire point of a style is that it’s a list of strict, simple rules that you want to follow without variance.

Unless this is trying to get deeper than merely style, and is supposed to evaluate the design/structure of the code, which can be more nebulous. That’s a lot to ask of a neural net, though, when most developers struggle with it.
The problem is we have not found good ways to market and attract technical writers. Documentation is harder than testing and having people who are both good business analysts and good writers on a project are really important.

In my view consulting companies need to prioritize and bundle these skills.
There’s a short-order chef game my kids play on the iPad, you can practically see the endorphins pumping when they manage to serve all the customers in time.

The human brain is definitely wired for this sort of thing.
What Tech Stack to Choose for Your Project
I'm using it with z-wave door sensors to play a simple chime sound (helps keep track of curious toddlers). Also have a few IP cameras connected to it, may be adding presence sensors too. Planning on adding an "armed" mode where I can get alerts if motion is detected when we're not home.
To the single cell organism; the worm looks to be advanced and complex. To the worm; the human looks to be advanced and complex. Its possible we are still way down on the intelligence chain and too dumb to realize that we are in fact the worm in the scope of the universe
Designing Solo, a New U2F/FIDO2 Token
My favorite things for it is a lot of the "scripting" you can do for it:

- I have my outdoor lights turn on when the sun goes down and turn off 4 hours after sunset
- If it is after sunset, if it detects mine or my significant other connecting to the wifi, it automatically turns my Nest from away mode and turns on lights inside.
- It will automatically turn off all my lights and my nest to away mode if it detects that no one is home.

There is a lot more flexibility to it (i.e. it can send you an email if someone gets home and you are not home, things like that).

You can do a lot of those, I do not know how much work you have to do in it, but you can make your own "sensors" and it will integrate into home assistant.
Often, it's a simple case of business need. As long as the offices are clean, the business doesn't really care if the cleaning cupboard is tidy.

It applies to a lot of business areas. If you want to introduce new processes or fix any problems, you need to justify why you want to do that, and "This isn't very pretty" isn't generally considered a good enough reason. If something works, nobody ever got into trouble for leaving it alone.
The Remarkable Life of Stefan Banach
Why would OS built in support go through the OS vendor's servers? It's exactly like every other network service built into the OS. Android and Windows at least both have built in VPN support and you just type in the server details of whoever your VPN provider is.
I said “mostly” useless on its own.

I believe Lineage and co have to supply their own replacements for some important features, and/or use the proprietary Google Play Services.

AOSP isn't a usable base product, like Chromium for example.

(That's my understanding anyway. It's quite possible I'm wrong!)
Multi-network outage ongoing Spectrum/Verizon/L3
Don't let it discourage you. It was a really cool finding. I've done everything right before when it comes to disclosing bugs, and I've still had people dumping on me.

You should consider security as a second career if you ever get bored with marketing.
Don't forget the 1700X and 1800X.

ThreadRipper is interesting. It requires a different socket than the other desktop processors and is targeted more at workstation class machines.

In servers there are Epyc and Epyc 2.
Glad to hear this come out. Worked at a Goodwill store for a summer. Involved lots of heavy lifting of furniture, strict managers, insane scheduling rationale, and auschwitzean like propaganda regarding the power of work.
Pedantry, I know, but I don't think caché means what the author thinks it means. Pretty sure cachet was intended.
Show HN: Vecta.io-Automate diagramming by running JS on your SVG editor
> hoping it can stand with Neal Stephenson's work

Thanks, always looking for new stuff to read. (edit: not really new, but new to me :)

Concerning The Three-Body Problem, I found it a bit disappointing. Great build up with a rather traditional solution making some things of the build up looking a little bit silly.
Why not make it optional?
I don't care about that level of security on most of my systems, I, and I hope the rest of you, have ways to mitigate most security issues like this anyhow.
It's ridiculous.
Thanks so much for all that. Definitely given me plenty to read up on.
> Surely in a commercial setting the primary factor is RoI rather than time

If it's a smaller company (op mentioned 50-100 people) they might not even know what RoI is, and/or might not care about it.
Same thing. The time is the investment. There are always projects with better RoI so a rewrite is constantly at the bottom of the pile. "We'll get to it someday."
> the obvious meaning for the expression “open source software”—and the one most people seem to think it means

I disagree. I think if you ask nearly people who know what the term "source code" means, if you ask them what "open source" means, they'll give the OSI definition (which is in practice the same as the FSF's 'free software' definition). They'll say it's more than "I can look at the source", but includes the rights to share and build on it.

Microsoft tried the term "Shared Source", which might be what you mean.
I found the ideas were interesting, but the writing (plotting/characters) to be ho-hum. It’s a translation, of course - but I’m not sure I would rate it quite as highly others here.
Have you seen how many messaging apps theyve made in the last few years?
Yes, I was being sarcastic with the "miraculous" comment.
The right answer is definitely a middle ground...
Interesting, by the World Value Survey figures South Korea looks worse than Japan overall. 34.1% of people mentioned that they would not want a person of a different race as a neighbour, as opposed to 22.3% in Japan.

I was still shocked by how high the numbers are for Japan. It's mostly dominated by people over 50 (27.8%) those under 29 only replied positively 10.5% of the time.

The numbers for the US are fascinating too. Overall only 5.6% of people said they wouldn't want a person of a different race as a neighbour. But the trend is the opposite to Japan, 6% of people under 29 said they would not want a person of a different race as a neighbour (4.7% of people over 50).

That young people on average are less likely to want a person of a different race as a neighbour in the US is surprising to me.
Steve Jobs’ Daughter Forgives Him. Should We?
Exactly. We're doing the same thing with my C# project at work. It's becoming more "functional" as we refactor and fix bugs. The project has been much easier to work with.
Warding is a tough one. Outside of hard-coding it, how would you suggest the AI would learn the best locations for warding and de-warding? Can they surmise that an opponent's gank or quick reaction to their movement means there may be an obs ward? If so, where precisely is that?

I don't know if the OpenAI supports can play the warding mind-games, which also for me personally involve 1000+ games' experience. I see interesting wards from teammates occasionally and file them away in the memory bank. Especially "hipster wards", I like to call them, just wards that "see" the opponents but are not in the highest-probability spots like on pedestals or on ramp edges. Just throw an obs ward near a couple medium camps, for instance, and you can really gain some important intel w/o a sentry ruining your ward. Can the OpenAI team learn to do this sort of behavior?
Because this devastating condition is biologically determined, as has been scientifically determined and the causative genes identified, you should be able to apply for disability.
> The extent at which Native Americans were murdered

This is the only one you gave that actually was committed against Americans in the US.
Is there an on-device voice assistant for home assistant? I looked at snips.ai but debating if this fits my use case. I just need something to turn on/off my lights (and adjust color) and maybe play music through my TV.
> To the single cell organism; the worm looks to be advanced and complex. To the worm; the human looks to be advanced and complex.

I don't think either of those is advanced enough to have a concept of anything "looking complex" to them. A cat or a dog would be a much better for comparison.
Many people seem to dislike the anti-china move. However, let's not forget that china has put over 1 million Muslims in literal concentration or reeducation camps. That's wrong. China needs to stop, and if not buying their cell gear helps, we should consider it too.
You have to be okay with making rich people richer, in order to get some things done. What do you want out of it? It's obviously not money. So go do that instead.

Find some freelance work or contract work that doesn't make your skin crawl and keeps what you deem a necessary amount of income to survive and spend the rest of your time on what you do care about. Even if it's entirely free forever. Even if you have to put money into it.

This is a very simple solution to making yourself happy.

Sometimes you can't have your cake and eat it too; but don't worry, the snacks aren't terrible.

Right now you only have 3 years professional experience; it's going to be hard to find the marriage between what you want and what you need with that short of a resume ("Put in the time" et al. cliches).
"This course will be held in English."

No offence intended, but English, my ass!

Although quite proficient, English is still a second language to me and this accent makes it quite unintelligible. I hope everything will be available in written form as well.
Thank you - this article is interesting meat wrapped in lie-pastry.

The "will" in the title is just flat wrong. "Might possibly" is a stretch, even. People are sketching out the idea, enough that there are known but currently insurmountable problems in doing it. It's an interesting and promising approach in general though.

Some additional highlights:

> accelerate the nanocraft with a 60,000-G force

We're going to make a package of sensors, transmitters, power source and sail that weighs one gram and can also survive 60,000g's of acceleration for multiple minutes? For comparison, the US Navy's ship mounted railguns accelerate projectiles at something like 15,000-20,000g, and those are 10kg of high-precision tungsten, and need to do nothing except not disintegrate.

> The combined laser power needs to be something close to 100 gigawatts

If my maths are right, that's nearly the generation capacity of Japan (https://en.wikipedia.org/wiki/List_of_countries_by_electrici...). Granted, it wouldn't be required for long, but recruiting (or alternatively, storing) a whole-extra-Japan's worth of energy for even a few seconds is just completely ridiculous. We would need large-scale orbiting solar or commodity fusion power before we could even dream of anything like that.
IMO Lambda calculus should be taught wider in CS programs. It brings useful models, builds (if one likes theory) good background to functional programming paradigms, etc.

However, to me, this post was hard to read. Wikipedia https://en.wikipedia.org/wiki/Lambda_calculus provides a much better introduction: from informal motivation to formal descriptions. My 2c.
Not a fan or defensor of China here; but the US has way more history of intervention in other countries; so I would be much much worried about US-based companies that provide searching or social networking services
Glad to see this I'm ditching Rust for OCaml. Rust has a core of violence-supporting antifa people, which is too much of a professional or business risk to be associated with.
That is one of the worst ideas I've ever heard in my life. It's like saying "Hey, NSA and GCHQ are tired of having to copy your data from Facebook's servers, so let's cut out the middle-man".

Thanks, but NO thanks.
I think you have an idealized view market forces. Offshoring was a way to break the back of unions in the US by seeking out unorganized, cheap labor overseas. The power dynamic remains the same, the people who owned capital wanted more profit than could be made in the US. We agree on that much, but your version of the story strips out all of the agency from the equation.

At any rate, I don't think labor shortage is an adequate counterweight to wage suppression. Wages are beginning to inch up, yes. But cyclical economic crises ensure that the unemployment rate never goes so low as to require the kind of meaningful wage increases that would counteract the trends we're talking about. Look at the op-eds in the Wall Street Journal -- wage increases are seen as a huge liability and a reason to pull back on investment. Better to throw out a couple of one-time bonuses to keep the mobs from revolting.

This isn't some starry-eyed optimism about the working class. Wages are negotiated by the balance of power between management and labor.