skysight-inc/HackerNews huggingface dataset:
> [I]t's clear that the top 10% of companies make up the overwhelming majority of their portfolio. So they go for moonshots.

You've just described the entire business model of every Silicon Valley VC firm, not just YC.
Hey, just a little ysk: it's anecdote / anecdota from the greek word meaning "unpublished", nothing to do with data! :)
Another personal observation. I have an Instagram account that I thought was fully incognito. I never connected it to any other social account, I used a separate email for authentication etc. Just days after the Instagram founders left Facebook I started receiving friend suggestion on my IG that were very very relevant. Those were people I knew in real life and mostly connected via Facebook but not only. I shouldn't be surprized as being connected to the Internet by itself is an end to your privacy but still, this was probably the spookiest invasion into my privacy so far. Bye-bye Instagram.
The problem is that the fax takes until tomorrow morning, not that it comes as a fax. You could get the information over the phone, carrier pigeon, or smoke signal it doesn't matter the mechanism. (the latter two are likely not HIPAA compliant) The systems could be completely interoperable, but you would still have the same bureaucracy that slows everything down.

Just because the systems can talk to each other, it doesn't mean that I can just automatically grab whatever patient data whenever I want. There are rules and procedures you need to follow when dealing with PII. If you are cavalier with these systems you will be fined or sued into oblivion. Time until transfer of data is the hard part, which is independent of interoperability.

There are bigger fish to be fried in this space, so if we are triaging healthcare technology I would put this low on my list of things to take care of.
Well sure it is. Those dependencies you're talking about (the transistor, keyboards, screens, etc -- the things that modern computing depend on) are just the current, and I would say arbitrary, implementation of the concept of "computing".

A lot of the real early work in computing was done by George Boole, before Shannon picked up where he left off. That kind of stuff (boolean algebra, information theory) will always be relevant... (to survival in ye enden times? maybe not) and it doesn't involve electricity.

Just as I imagine that the things that you learn as a speech therapist go way deeper than just helping kids with their lisps.

It's easy to get caught up in the current fads and stay on the surface (e.g. programming languages, or frameworks) of the computing field, and maybe what you're experiencing is a kind of existential dread about the meaning of the work you're doing. But I think if you stick with it and go deep, you'll find that "computing" is a fundamental aspect of the universe.

And if the lights do go out, then maybe everything you learned while "studying computers" will be of help in figuring out how to get them back on again... Or, better yet, help you to realize that you didn't actually need the lights in the first place.
I'd love to just see a write up and screenshots :)
Tesla Gets Panasonic's Help with Ahead-Of-Schedule Battery Plant
TL;DR Andrew Haley is stepping up on behalf of RedHat and the greater OpenJDK community to provide leadership for LTS branches of OpenJDK 8 and 11.

> The OpenJDK Vulnerability Group, with members from many organizations, collaborates on critical security issues.

Huh, I'd never heard of that before.

> There is also the question of back-porting important features from later OpenJDK releases ... While new features, particularly performance-related ones, are undoubtedly nice to have, our first priority must be to not break anything: we must remember that we are stewards of a very precious piece of software. ... each proposal will have to be taken on its individual merits, and I don’t think we can have a one-size-fits-all policy for such things.

This is so refreshing to hear. Especially after all the turmoil over the Linux CoC, it's nice to just hear: we'll rely on my human judgment and that if my peers.

All in all I think this is good news and well needed clarity.
Users cannot "just quit". Facebook probably has a profile for my grandma who never touched a PC in her whole life.
Lyft revenue more than doubled in first half of 2018
Or even better: "we automatically route traffic to the cheaper option and this requires no human intervention, so don't even bother"
I've heard multiple people saying Apple wireless APs perform so much better than others. I really wish someone could do a technical deep-dive and explain how Apple did it.
I salute the enormous amount of work you’ve done. But without a consistent store, it seems to me there are a myriad of race conditions the system can fall into.

Maybe if you accept a bit of oscillation under stress, and damp that oscillation a lot, it would be ok.
https://instazood.com/how-to-hide-hashtags-on-instagram/
Can one mitigate for this attack by not storing any information about the salt?

Suppose there is a method x which creates a salt, but does not store it. Then, hash the IP a.b.c.d together with an output from method x. A user can perhaps specify an x of their choosing. Let's say the hash function is then of two variables g(x,a.b.c.d).

Would cracking g(x,a.b.c.d) necessary expose the workings of x? (Note that one may want to think of this as two functions and write g(f(x),a.b.c.d) instead. In such a case we are cracking f as a first step.)

In the article, one relies on the fact that step 1 exposes the salt and step 2 then exposes a.b.c.d.
This looks interesting. I'm open to replacing my current (actually quite rudimentary) "capture to org-mode" setup. Is there any way to dump all/important parts of the information Memex captures to plain text/CSV/etc, or, say, a sqlite database?

Overall, this is a space I'm very interested in and this looks like a polished product. I'll be keeping an eye on it; I've installed the addon and am looking forward to playing with it :)

PS. "Full-text search" seemed to me (and might to many) like full-text search of webpage contents, not just URLs/titles. It's not malicious, of course, but it feels slightly misleading.
"Anecdata" is usually online shorthand these days for saying, "I know the plural of anecdote is not data, but fwiw here's my experience."
ESIM. What is it and how does it work? – Sim-unlock.net unlock blog
I know a lot of people on HN say server rendered first, but imo the difference in speed and complexity is minimal if you already know Vue/react/angular.

Really the biggest benefit of server rendered is keeping everything as a monolith but if you have to support mobile then you need to expose an API anyways
I don't disagree with some of the points you have made however there are also counterarguments to be made against them as well:

1) Iterating over the network:

The point of this type of attack is to stay under the radar of NIDS which should (if configured correctly) detect someone trying to knock on port 22 of every server in your private address space.

2) `HashKnownHosts yes` is not the default setting:

True. But it is an available setting and since some would enable it assuming it would provide them with extra security then the strength of that extra security does still need to be proven. Hence why this research was done.

3) Shell history likely leaks the hosts anyway if you enable this SSH setting:

Indeed. However it's also not that uncommon for people to disable shell history on bastion servers. Plus if that particular user hasn't SSH'ed in a little while it's possible the history file has rolled over to reveal fewer servers in its log.

4) You could substitute `ssh` with a malicious version of it:

You could. That's probably the most likely attack to try first but it's not without it's problems as well:

* You'd either need root access to replace the ssh client, or to be damn sure you updated the right user shell profile to update the $PATH variable to include the location of your preferred ssh client (ie putting export PATH=~/boobytrapped:$PATH ) and the user not noticing either the modification to their profile nor the new folder in a user writable directory (it's worth referencing an earlier point about how a network scan was dismissed because it is a detectable attack)

* It's a longer term attack since you wouldn't get a list of servers until after a user has connected to them (on the plus side, you could glean more detail about the target).
In transactions, is it typical to just create new stock such that the newly created stock is 1.225% of the final total? Would the previous investors agree to diluting their stock like that? Or is it common to sell from a common pool of stock that's owned by the company (who is that? the CEO? what is the company if not for the stock distribution?)?
You can do it exactly like dropbox does and use QT for the UI with python. Another alternative is Electron, but it is not recommended for a small application due to its size and requirements.
It’s a joke, derived from the saying “the plural of anecdote is not data.”
Can anyone comment on the similarities with (apparently somewhat less sophisticated) laziness as in Haskell, or the memoisation/caching done by the Nix package manager, or (perhaps most interestingly) the approach of the Funflow library for Haskell[1]?

[1]: https://www.tweag.io/posts/2018-07-10-funflow-make.html
Teri Yaad Satave तेरी याद सतावे – Pratap Kumar New Song
I understand why you might be concerned but really, you should not. All technology can be used by the bad guys.

Did you know that simply owning a _typewriter_ was illegal without reporting it to communist authorities in east Europe?

Just to have a clear note here. Ham radio is regulated and there is certain traffic that you can run on free bands. That won't stop bad actors from ignoring these regulations.
Or perhaps not. Perhaps there's value in the community that rewards its owners in other ways.
Their cloud business is tiny compared to Amazon and Microsoft. They are a little late to that party. Play store is interesting and not much competition at all.
World's largest playable Game and Watch
Ads where the presenter speaks them and says how they have personally enjoyed the product make me suspicious. Is it really true that you enjoyed the razors or the meal kits more than any of the competition? Or are you giving it false legitimy for the sake of money? Unfortunately I feel it detracts from the professionalism and journalistic independence of the shows.
Wondering if there is a reference/citation you might link to?
46 Oregonians' guns seized in name of safety under new law
You'd quickly start messing around with signing, encrypting and checking packets of information... Which would be a lot like a blockchain.
Yeh I'd like to stay away from Electron just for the bloat/speed issues. This is such a small program that it would be overkill.

I'll look into QT, thanks. I've only ever done command line stuff so far.
Looks sweet, what are the key differences between this and Stripe Checkout? https://stripe.com/checkout
This has been on HN several times in the past:

https://hn.algolia.com/?query=Recreating%20the%20THX%20Deep%...
Gap keys are generally good enough.
I lean toward agreeing with you. Sure. I'd rather view ads than pay. BUT! Why I'm setting up a pi-hole isn't about ads in and of themselves. It's the intrusive and misleading ads. It's the tracking and difficulty opting out of targeted advertising.

I don't have a problem with tv ads for shampoo that I won't ever buy. I do have a problem with a web page that surrounds a legit news article with bizarre ads with cockimamy health claims, and links that don't go where they claim to go.

If a website says, "Pay up or look at these 'spider veins' ads" that's entitlement, arrogance and open contempt. That's not treating me like a desired customer.
If the objective of paying is to make the web better and reward quality content, you don't want two pages of clickbait to pay more than one page of watergate-level investigative reporting.

And any automated system to tell clickbait from quality journalism will incentivise people to trick it.

So at the very least, you need a refund button.
Oh please.

The issue has more than one dimension. Apart from them being nice and auditing now, there is still the fact that their internal processes have allowed (and probably encouraged) stashed passwords in such a manner that 6 of them has been found in a really short time. Unless your process is total garbage you don't end up with 6 backdoor passwords like that without knowing it.

So for any company that prides themselves with having a device in the middle of LOTS of networks, its a very poor track record to figure out security and backdoors don't really mix in 2018.
Maybe we should stop ascribing these decisions to faceless corporations, they are made by humans.
Hopefully? Hopefully this means we will see facebook employees faceing criminal charges!
Again? Weren't they called out on this about half a year ago already? Did they continue doing this? How irresponsible and total lack of any ethical standard. Its horrible but mostly just sad that users are just a commodity to make profit. So let's trick them to sign up for 2FA to pretend they have more security and then we can send them nice little ads. What a bad company this has become.
High Paying Entry Level Jobs Near Me
The other really stupid thing, besides generally hurting the adoption of 2FA forever, is that they probably did it for hardly more than scraps, compared to their conventional add targeting capabilities.

Maybe I am completely wrong about this, but I'm pretty convinced that almost all of the ad spending for that feature would have reached Facebook's coffers anyways had it not been available.
Photolemur Crack Mac 3 Version Download Thatssoft
That is true. But if you don't try you will never win. For the lottery to have winners some people would have to play the lottery. Hence the 'luck' factor (often under-rated or people pretend it is all skill).
Often projects that don't provide RSS do twitter, which can be converted to RSS via online services.

Also sometimes you have to look harder than usual, because the presence of an RSS icon only loosely correlates with having actual feeds. Sometimes things like domain.com/feed, domain.com/rss, domain.com/atom yield success, I suspect provided by the website engine itself.

Not to take away from your argument
paper: https://arxiv.org/pdf/1603.05218.pdf
> I sincerely question the value of a managed wifi system

I'm not suggesting that there's necessarily value in "managed", but your parent comment was about the Ubiquiti product being overkill, which is a much broader statement.

The GP certainly advocates for management, but that's neither the primary value delivered by the overall product, nor the majority cost (even with a single AP). IIRC, this may not hold for competitors, such as Ruckus, where even the lowest-end "controller" is quite pricey.

> wifi should function without the need to phone home.

AFAIK, Ubiquiti's products can be run standalone, only requiring management software for initial configuration.
I took a call from a scammer who was calling about “credit card” information
A bit off topic but I'll ask it here anyway - I see Stripe Atlas advertised as an easy way to start an "Internet Business". What exactly is the definition of an Internet Business? If I sold a physical product, would I still be able to set up the company through Stripe Atlas?
I'm not even a Stripe customer but I still like to visit their site from time to time for design cues. Of mainstream B2B tech companies, I think Stripe has some of the best front end design I've ever seen. Everything is gorgeous AND useful. And despite so many products and pages, you never feel disoriented on their site
Show HN: I made this to get me working out
My favorite Python library is pandas. If I only include this with pyinstaller I already get a >500MB executable.

IMHO unacceptably large, but that's because Python doesn't know which parts of pandas it might need to execute the program.
Ultraghiaccio, perhaps?

Romano Scarpa fans should know what I'm talking about.
This is a great, realistic look at the impact of Teslas on the German car manufacturers. For once it's not all about how tesla is a sham, not of interest to buyers, etc. It's worth a read if you have interest in this area.
It's also tacked on. It's a bit too optional. If one team member doesn't care about typing he makes all his colleagues do the work to make his code work with mypy.
It's as simple as: https://twitrss.me/twitter_user_to_rss/?user=<username>
CĂN+HỘ+VINCITY+QUẬN+9+|+DỰ+ÁN+VINCITY+QUẬN+9+|+VINCITY+VINGROUP
I donated money to VLC the day I learned about this. I had no idea this software I use and love every day was maintained by a single guy.

Props to him. I don't think I would have been able to resist an 8 figure offer
I didn’t give facebook my phone, my email has timed out (and facebook knows it, it deactivated my email) and I forgot my password, more or less intentionally. So the only thing tying me to Facebook is my browser cookie. I have to say, I’m surprised I’ve been able to keep this account open for years in this state, it’s almost as if they really wanted me to stay. But it’s possible to keep a facebook account alive with no accurate contact information.
5 Questions Lawyers Should Ask About AI
> in many places it goes like this: you're very much treated like a cog, managers -- and "project managers" especially -- won't have any real understanding of what engineers do, there is disorganization, lack of planning, and/or engineers have never been challenged to grow, and over time you end up dealing with lots of tirefires.
You'll hear the same complaints from finance people.
It sounds very similar to the Rails frontend I helped replace at Twitter — no business logic was thrown away, it was done without any loss in application fidelity. We did get approximately 10x fewer servers with 10x less latency after porting it to the JVM as a result. However, without the latency improvement, I don't think we should have done it. Fewer servers just isn't as important as the developer time necessary to do the change as you just pointed out. Just as using the cloud to simplify things and reduce the amount of effort spent on infrastructure is the main driver of adoption. There is clearly a cross-over point though where you decide it is worth it. The CTOs you are speaking of are making that choice and it probably isn't a silly excuse.
Reminds me of the BA Flight 9 announcement:

> Ladies and gentlemen, this is your captain speaking. We have a small problem. All four engines have stopped. We are doing our damnedest to get them going again. I trust you are not in too much distress.
No regulation needed, just avoid using their 'services' and block anything facebook at the point of access. They might keep 'shadow profiles' and use facial recognition to find you on images posted by others but if you keep them out of your network they can have a ball trying to target their advertising at that closed door.

Not that I allow any advertising here, mind you - everything is blocked at the router (ipset [1] comes in handy here), at the client and in the browser. This works at home as well as abroad since I route all my data through a VPN (OpenVPN) terminating at my router.

[1] http://ipset.netfilter.org
Thanks, that was a great explanation of what is going on. How exciting!
There are armbands for apple watch that make it feasible to wear during a workout. But if I am going on a long run nothing beats the Garmin chest heart monitor I use with my forerunner.
"The ‘real you’ is a myth – we constantly create false memories to achieve the identity we want"

Isn't this somewhat self-contradictory? Why assume the real me has to be based on true memories -- and I don't even want to start a discussion of what a true memory, a true account (save anything subjective?) of some event could be. If we know who we want to be, we most likely also know our real me.
Could you share your setup? There are so many tools available for tuning of power use and fans. It's hard to pick the right one.

I'd prefer to run my laptop with as few fan activity as possible without overheating. So when the CPU gets too hot, clock it down instead of starting the fan.
As others pointed out there are fundamental problems with the system and usability of NOTAMs. Its a little absurd that theyre always used to blame the operator (“should have read the NOTAM”) when a flight briefing might have 10s or 100s applicable ones and a VAST number are junk. It reeks of retrospective blame seeking.

That said there is some traction around this. And some interesting alternative takes (https://opsfox.net), which have their own problems.
Is it? https://man.openbsd.org/ssh_config#HashKnownHosts says "The default is no".
BRITISH PAWG WIFE VS BBC
Glad to see a Hari Seldon (Asimov's Foundation) reference.

The "phase transition" around a level of extreme opinion in a population is interesting, and I'd certainly like to find out more about this research
Windows 10 Cumulative Updates Build 17134.320 and 16299.699 Released
When people suggested phone 2fa was a data collection scheme they were hushed and called tinfoils.
Very interesting project.
* nice that there is an open source & for free edition
* what happens with very big data? (search performance etc)
* what about integration with other tools?

Good Luck & thx for sharing :-)
Profiling CPython at Instagram (2017)
Unfortunately none of your links referred to the actual legislation and only provide summaries and interpretations, but Article 17 (Right to erasure), Section 2 states:

Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the
personal data, the controller, taking account of available technology and the cost of implementation, shall take
reasonable steps, including technical measures, to inform controllers which are processing the personal data that the
data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

So there's an obligation to inform. Which makes sense: Assume you (with consent of the user) sell data to some company, you have to forward them the request of said user to be forgotten. But you have no authority over that company. You can report them to any and every authority if they ignore or actively refuse your request, but you as a company have no authority over them. Particularly if they don't operate within the reach of the European authorities, there's little you can do. And that's what I mean with "You surrender control of the data once you sell it".
I'm still trying to grapple with the point of this thing. Does Apple have so few macOS developers that they couldn't have written a native news app? What are the iOS apps people are so desperate for on macOS that the developers refuse to port? Unless AppKit is going away, I feel like I am missing something.
> pathological sastrugi

I think someone just named the next big Ice band.

edit: Folks who work in Antarctica often refer to it as "The Ice".
Show HN: United States Dollar
Resource control at Facebook
not only that, but all perception is a constructive process based on predictions according to multiple competing models which run in parallel of which we are only aware of a few at most.
As such, other people have no single or objective perception of us either.
You are lucky! In Yorkshire, Stripe uses us!

https://en.wikipedia.org/wiki/Four_Yorkshiremen_sketch
this is not true, counterintuitively the less well-off donate more.

https://www.theguardian.com/society/2001/dec/21/voluntarysec...
Hey HN,
I find myself checking the USD against' a lot of currencies and I've been in a funk so felt like making a little project out of it. The source code is in the footer, let me know your comments or ideas
Average population density is your argument? Do you realize how stupid that is?

By your measurement nobody wants to live in California because everyone wants to live in New Jersey.