skysight-inc/HackerNews huggingface dataset:
The solution to that is to only request extensions when they're needed, and to give users prominent options to grant access "only once" or to revoke access (both of which should be undetectable from extensions without extra work).

This isn't perfect, but it comes with some advantages. It's more work for an extension author to check for the permissions than to just write their application logic normally. This means that the lazy authors start coding their apps correctly (just try to do the thing and let the OS handle asking for permission), and only the malicious authors are left nagging for permissions early.

If you have more legitimate than malicious app on your platform, you can at least sort of train some users to think what the malicious apps are doing is weird. If most of your apps don't ask for permissions up front, then the ones who do start to look weirder.

If I go to a website, and a permission pops up asking to access my webcam, and I didn't do something to make that permission pop up... that is really weird and I'm going to click 'no'. And when I click no, if the website wants to be cranky about it, they have to write extra code to hide whatever content is already loaded and pop up a dialog complaining. If I click OK and then immediately click a button and revoke that permission, they need to have even more code continually running in the background to detect it.

Again, it's not hard for a malicious extension/app to do that, it's just that only the malicious extensions/apps are going to do that. So it becomes easier to educate users with simple rules like, "if a site asks for a permission that's unrelated to what you're doing, always say no." It also becomes easier for users who are already careful about permissions to be paranoid and grant them carefully, because they don't have to decide up-front whether the app is worth installing -- they can decide later on whether or not they trust it to have access to something.

Part of having fine-grained permissions is in getting rid of what I call the Terms of Service version, where you just stick anything you might ever want inside of a manifest and then users either accept everything or the app doesn't install.
That would create the exact same environment that municipalities create when they incentivize police officers to issue tickets by allowing them to keep the fees they collect.
> The important thing is your first few hours after waking go to your most important goals.

Why? I find I'm often more productive at the end of the day than the beginning. And more productive late at night than early in the morning. I find the obsession with waking up early very strange (and often counter-productive).
Myth, as referred to in an update to the link you provided: https://sidsavara.com/fact-or-fiction-the-truth-about-the-ha...

Though it's claimed that the myth did prompt an actual study (not peer reviewed?)

https://sidsavara.com/wp-content/uploads/2008/09/researchsum...

Which claims to support a fuzzier notion that writing things down helps achieve a goal.
This is terrifying, I had no idea this kind of practice is already in place! In Asia, so far I never got asked for my phone and equipment, but now I wonder what the best way is to handle this. Killing my phone and restoring after entering is one way, but for a laptop that's more annoying unless you live in the cloud. Might still be a good practice to have your devices in a state where you could easily wipe and restore them in no time.

If I randomly got asked to do that, to be honest, I would rather turn around and go back instead of taking the risk that they maybe find something out of my past that can get me intro troubles.
As others have noted this is easy enough to thwart if you prepare, it will only catch the unsophisticated. So they aren't going to catch terrorists with this, but it probably will catch a few people intending to work while on a holiday visa.

But it would be nice if the phone manufacturers made it easier to side step.

Android is close already: it has multiple users. If it allowed you to hide a user (so you had to type in a name, for example), it would be mostly there.

One thing I really wish they would provide is a decent backup service, ie something that allowed you to backup everything on the phone, to an encrypted binary blob. Mainly I want this because having a backup that allows me to restore my data if the phone gets destroyed would help sleep easier at night, but of course it also solves this problem too: backup the phone to a hidden cloud account, factory reset it, restore it on arrival.
The big problem is all the major indexes are driven by search engine measures, and those themselves are highly sensitive to any change in the underlying search engine methodology itself. So a small change in Google's ranking algorithm will see a language move up or down dozens of places.

I would tend to focus more on job ads personally because those are at least linked to "real intent" to use a language for something tangible. You don't put it in an ad because something is controversial or had a lot of news lately etc. which can all lead to things being Googled a lot or getting a spurt of search activity.

Github's index is nice in that it is based on actual code, but then it's also heavily biased by what is open source and therefore doesn't fully reflect industry use of languages (which is why I think it deviates from other indexes to put Javascript and Python a bit higher, and less emphasis on say Java and C#).
Stoked to see service workers will use Workbox!
No, in fact it's likely very beneficial. Virtual DOM is meant to avoid the overhead of interacting with the real DOM (reading and writing to the DOM is slow). Being inside a web worker means that you're still interacting through the DOM, just via a web worker now. So the cost of reading and writing to and from the DOM is still present, plus there's the added overhead of communicating with the UI thread. So vdom in this case makes a meaningful difference by allowing the thread to get more work done in a shorter amount of time.

If you, for instance, blew away the whole DOM and re-rendered it (e.g., setting `innerHTML`) on every state change, the cost is going to be far higher than just tweaking the few things that might need tweaking, like on a keypress. If you're not keeping a virtual DOM around, there's no way to know what the diff is between your new and previous state to be able to make those tweaks.
Twine | Onsite | NYC or Bay Area | Data/Platform Engineer

Twine (https://twinelabs.com) builds people analytics software that helps companies make better decisions about the lives and careers of their employees. We’re changing HR the same way Salesforce did sales and Hubspot did marketing: we empower functional leaders with better data products and insights to create strategic value for their firms.

We're hiring a Data/Platform Engineer to create the enterprise-scale infrastructure that drives our business. This includes everything from designing data flows and ETL pipelines, to architecting our core data models and schemas, to building services and interfaces that deliver data to our product endpoints.

We’ve generated amazing traction and a product users love, but we’re still small - you’ll work directly with the early team and have full autonomy and leadership over your domain. Primary technologies include Airflow, Python, React/Redux, and growing for scale.

Send me a note at nikhil@twinelabs.com
Why do you think that you couldn't become the CTO? Serious question. What qualities are you lacking?
In parts, but there are gems like this:

> From the memories of Christ: "my first comp with him on the tape was a" musical sequencer "as a music demo was a polonaise of Oginsky, no worse than a synthesizer poured, and programs from the micros approached," and the program for a light pen - it was a screen filled with dots like this ... ... (pseudographic).
Nothing like the good ol days. Burning a cd at 1x with your Yamaha in windows 311. Move the mouse and BOOM buffer under run. Kids today will never know the struggle.
My phone is a Galaxy S5 with Android 6, but it's here:

Settings > Call > Call Rejection > Auto reject mode

Set it to "All incoming calls".
Getting up early is not a sign of discipline, going to bed early is. Getting up early after having slept 9 hours is easy.
The Army May Have Found Its Next Rifle in a Colorado Garage
Very cool! Does it have C or C++ support? Last time I looked it didn't.

Something that understands Python calls into C and vice versa would be interesting to me as well.
I think this is quite insightful. There was a post on here a while ago about William Faulkner being an absolutely atrocious postmaster when he was in college. Of course, a lot of artists tend to have a more meandering paths than a lot of CEOs, but his habits as a postmaster were probably just as important to his writing career as his later habits.

This may be more applicable to artists, but my own take is that a lot of people would be surprised at how much a lot of really successful people looked like "losers" for a significant part of their early lives, due to them living in their own world and not working hard enough on anything they didn't care about because they spent all their time thinking about the one thing they really cared about.
Stealing: The felonious taking and removing of personal property with intent to deprive the rightful owner of it.

Copyright infringement is copyright infringement, not theft. Playing word games like “piracy” or “stealing” doesn’t strengthen your case, rather it exposes a central weakness. If what you’re claiming is so terrible, why do you have to pretend that it’s actually something else? This is an old game that was started in the 80’s by industry groups, and its sad to see it internalized by people on HN who should know better.

If you want to argue the merits or downsides of copyright infringement, do so, but don’t move the goalposts to unrelated crimes.
It's very good of measuring documentation quality. As in, the better your documentation, the less activity there will be.
Have you found any source for this kind of information. Sometimes I’ll look over the work histories of founders LinkedIn, but employment history is pretty superficial information.
Can someone with more experience of these things tell me how these breaches are discovered, and how they know what information was taken? I presume it's not an exact science.
Yeah I remember keeping everyone away from pc to avoid mouse being moved causing a buffer underrun.. windows 311 :-/
A lot of people are arrested for pot (nation wide) but very few are held.

Some related stats here: https://www.vox.com/policy-and-politics/2018/4/16/17243080/m...
The problem is that this is not true and everyone knows it. What you've hit on is the core problem facing digital media today. I subscribe to several online news services but the WSJ is not one of them. I wouldn't mind paying the $0.03 (or whatever) to read this article but there's no way I'm going to add another $100 per year subscription to my media diet, and particularly not given the state of the WSJ political and opinion sections. I love the finance and tech side, but, my God, the rest of the paper has become a parody of itself! I'm sure many other folks out there feel the same way about WAPO or NYT. The regional papers have it even worse, even though they perform, arguably, the most valuable service of any outlet.

This problem is so severe that I would argue that it's tearing Western civilization apart. So-called "fake news" is a problem that only exists because real news is expensive to create and needs be heavily subsidized to exist whereas fake news is cheap to make but heavily subsidized by bad actors. This is perhaps the single most important problem in media today. If you can solve the business problem behind content creation you'll be an absolute hero; but I really doubt that shaming people for reading pirated articles is going to do it.
Specifically, complexity will generate more questions than difficulty.
Do you have a screenshot of that graph? Won't load for me
This is a really good review of the new camera including why the facial smoothing happens.. needs more visibility!
Throughput Optimizations for FPGA-Based Deep Neural Network Inference
Being post-compression is actually new and currently only applies if you use WASM, though we'll extend it to everyone soon (and document it).
Paul Ford Describes Newly Released Library of Congress Digital Strategy
Very interesting -- and huge bonus points for diagrams that render properly in w3m.
Most robo-callers feel like Phishing scams. I've been contemplating giving up my cellphone and just using a Calyx mobile data (https://www.calyxinstitute.org) and use Signal, email and Mumble only. Anyone else do something like this successfully?
Android supports multiple user profiles on the same device. Maybe being logged in to a stripped down dummy account when crossing the border would be enough? I'm guessing the storage is encrypted on a per user basis, so as long as the customs officer isn't aware of it it even a device clone should leave your actual data safe.
What's new in the US, Canada and Mexico trade deal?
You can retroactively add devices as of iOS 11 they have enabled it through Apple Configurator on any Mac device.
Depends on when it happened. There have been times when there have been workable exploits that have been used by law enforcement agencies.

There's a fairly high-profile Israeli company that specializes in finding or buying zero-day exploits and reselling them in script-kiddie form to law enforcement agencies at high prices.
That’s direct revenue, enforcing laws has a deterrent effect that vastly outweighs the direct revenue gained.

Tax Evasion is around 40 times the IRS budget and gets worse with lowered enforcement as the cost / benifit heavy favors evasion.
I would go with the time fitness takes to bounce back after an environmental change...

So us, then bacteria, and so on.
I just got one of these that had me call a DIFFERENT number than the one that was on my credit card -- the whole time I was thinking it was probably a phishing thing as I was giving them all my info, but in the end it was to ask if I had really made a charge that I _had_ really made the day before (in a city I'm not normally in)... so I'm pretty sure it was legit. Probably?
This seems like a great effort. However, I worry what this means for the future of WebAssembly inside of extensions. There's an undeniable advantage to being able to write extensions in languages other than JavaScript. AgileBits has been writing the 1Password X extension, in Go, compiled to JS. While the JS isn't obfuscated per-se, it's also not very readable.

I hope they can find a path forward that doesn't kill off extensions like 1Password X.
Jon Skeet – The changing state of immutability C# (2017)
Well I don't even know what a cto does. I have been in many meetings with them, but besides making high level decisions and asking for status, I don't know what they do.

Besides I was born in poverty and needed lot of efforts to be able to socialize with people born upper middle class. I can only imagine what else I need to learn to socialize within upper echelons. I can't explain it to you fully.

Thanks for asking though, I never thought through this before.
I like the host access restriction policy they describe. I update and fix existing extensions for customers and about 90% of the time the previous author has added necessary permissions and access to URLs.
that is not true. in a private jet you don't need to go through security or customs at least in the eurozone. check out the podcast: https://www.npr.org/2016/10/25/499213698/whats-it-like-to-be...
It seems like such a dull choice of reading material. I could read about poetry, a math book, a biography of someone at the level of an actual historical figure, a great religious work, or even just the news. But instead I’m going to read about some guy who sold database software or ran a printing company.
Here's a good starting point:

http://nerdvittles.com/?p=75

Of course, with Asterisk, you can get downright crazy if you wish.
So here is a possibly naive question.

From my viewing of Youtube, Google transcodes uploaded videos (typically H.264 stuff) to VP9 only when a certain view threshold is reached, which makes sense from their perspective.

However, I have also noticed that due to the chain of encodes source -> H.264 -> VP9 (latter two available to Google), the VP9 stream is often of noticeably lower quality. Thus, whenever I can, I use an H.264 stream.

This problem will not go away with AV1. In fact, from an archival/local usage standpoint, as others have noted here, AV1 is pretty much impractical due to heavy encoding time increases that will unlikely go away with SIMD as compared to x265 or x264.

As such, from an end user experience point of view, what does AV1 offer that H.265/H.264 do not already?
How could the designers of old games possibly do anything other than design for CRTs? They were almost certainly looking at their art displayed on CRTs, and if it didn't look right on a CRT, they would adjust it until they did.

As for saying that pixel art conveys or implies a higher resolution image, I worded my point so poorly as to be wrong. It has nothing to do with resolution per se. You explained what I was trying to say much better: good pixel art presents an image with few details but conveys the impression of a much higher-detail image by encouraging the viewer's mind to interpolate. And you also make a good point that this feature is not unique to pixel art.

I also agree with your claim that the best pixel artists are simply good artists who happen to be working in the medium of pixel art.

Anyway, my original point was that you can't really get pixel art that properly conveys the important details and encourages the viewer to imagine the rest simply by down-sampling higher-resolution art.
This also happens very often in software.

A feature gets a crippled UI that makes at awkward and hard to use or even discover. Then a few months later the feature is removed because stats are showing it doesn't get used.
Unfortunately his style sticks.
When Evasion is ~40 times the IRS budget we are a long way from over enforcement. Not paying your taxes is stealing from the general public, that’s really not acceptable behavior.
> me (design, product and marketing)

Who drafted the layout for your landing page + integrations pages + wrote the content? They are very, very good and look like the work of multiple people, not just one person.
It sure sounds like you're describing large effect sizes to me. The size of the effect you're measuring is large compared to signal uncertainty, and incidentally your systemics are also high.
You probably misunderstood the post you replied to.
It might be fun to include some variety . Hotel reservations all stored on Minidisc. Family photos on zip drives.
Funny then that they apologized for what were totally legal and non-partisan actions?
> A classic tactic is to underfund a thing you don't like, then point to it failing as an excuse for killing it outright.

I've seen this assertion made online a few times, but have never seen any actual examples. Are there examples that you're aware of at the federal level? Or maybe a couple at the state level? Just curious...
That makes a lot of sense. I can see a case if his/her/their intention was to deceive for whatever reason, like personal gain.

The creative solution to the “double spend” problem is the valuable piece. The other pieces, cryptographic hashing and proof-of-work have been around for some time. Algorithms make up the largest pool of software patents.

If it went private (it's actually patent pending once publically released; even if CC licensed, the license is null re: invalid ownership), an owner could do what MasterCard and Visa do: percentage of transaction, etc. I bet they could even make a case for ownership of his 1+ million coins ($6.4 billion USD).

The technology is already out of the bag, though, it's not going back in.

This article is interesting re: retroactivity: http://www.toikkalawgroup.com/blog/the-patent-bargain-and-th...
Thanks for running through the README and helping us prep the open-source release last week!
The Data Engineering Behind a Real-World Knowledge Graph (Interview)
True. On the other hand, I don't want bank employees to have never been told that cold-calling people to discuss their accounts is a bad practice.
Is this the thing that caused furore a while ago because it was installed on some editors and it sent all your code to a third party server, or am I thinking of something completely different?
The Library of Congress Releases a New Digital Strategy
> Together, these companies succeeded in bringing computing to billions of people. But these billions of people are still using software applications built by just 0.2% of the world's population (those who can code).

> The next step is to make it so billions of people, not just 0.2% of the world population, can build software (not just use it).

I must admit, this sounds indubitably noble.

But if you think that your software-engineering career is safe from (partial) automation, then these Sourcegraph folks have an iridium-plated bridge to sell you.

In not-so-tongue-and-cheek terms: if Sourcegraph succeeds, then tomorrow's software engineers will be - at most - as valuable as today's factory-robot operators.

* * *

(Of course, anyone worth their salt in this industry ought to be able to find the LSP's inherent limitations, and structure their codebases accordingly.)

EDIT: counterarguments are more persuasive than downvotes.
Ask HN: Does YC fund many advertising startups?
Over the years, I've read countless HN discussions about advertising and privacy. Advertising is something almost every contributor here has an opinion on, and it made me wonder if there have been many YC applicants trying to improve the state of affairs?

Not so much things like microtransactions or subscriptions, but a different way of handling the typical ad arrangements that drive so many sites on the web.
Effect of Digital CBT for Insomnia on Health, Psychological Well-Being
SteelSeries | Frontend, Backend and Firmware Engineers | Chicago | Full-Time | Onsite | https://steelseries.com

SteelSeries is a leading manufacturer of gaming peripherals and accessories, including headsets, keyboards, mice, controllers, and mousepads.

We're looking for frontend engineers (HTML, CSS, JavaScript) and backend engineers (Go, C/C++) to enhance our SteelSeries Engine software, a cross-platform application to handle all your gaming settings.

We are also looking for firmware engineers to write the code that powers our next generation of hardware peripherals.

If you're a passionate gamer and these positions sound interesting, please email me at tom@steelseries.com.
Google Voice could A join the system or B have ??? as their caller ID either one would be useful. Again, they can say whatever number they want as long as I can opt out and block unknown numbers.

However, the current system is largely useless when you get spoofed calls from numbers you recognize.
John Carmack – Oculus Connect 5 Keynote
A 5¼ inch floppy disk has gotta be pretty good "security" at the border in 2018.
You're perfectly entitled to your own opinion of why you think it's terrible and why it will fail and is useless, etc (and I would agree with some of your points). But I just don't understand:

> Just because some company wants us to do something or behave some way doesn't make us obligated to do so.

Don't use it if you don't like it ? Google launching something doesn't mean you're "obligated" in any way, so I don't know what you're trying to say with that sentence.
No, that is https://kite.com/ (absolutely no relation to Sourcegraph).
My theory is (I work in this space):
- Contact database was stolen
- User database with emails+passwords was not

Basically it's about the emails that they were scraping / guessing, not their users' emails.