skysight-inc/HackerNews huggingface dataset:
> entirely fair to judge them (excessively) negatively

This is tautological. Maybe try expressing this more usefully?

> Companies don't go out of business because employees are distracted by chat messages and noisy conversations

Why not? Unending distraction raises costs and encourages a focus on the urgent rather than the important. That will raise prices and lower the company's ability to do strategic rather than tactical work. That seems like a major risk to me.

I agree that there are risks the other direction as well. A company can become too insular or too scattered. But that doesn't mean that one can ignore the opposite risks.

> being distracting because that's not the point

I agree that's not the point for them. But as a user, it's definitely a point for me. And if you're looking for ways that companies go out of business, doing what they want rather than what the user needs is a common one.
Camera freezes time at 10 trillion frames per second
The Slashdot page links to https://techcrunch.com/2018/10/11/pro-privacy-search-engine-... (discussed in https://news.ycombinator.com/item?id=18194452) which more or less is a summary of https://duckduckgo.com/traffic (discussed in https://news.ycombinator.com/item?id=18100243)
Does hitting the "web" link underneath the URL help in this case? You could pull the Google cache I think.
A farewell to Brazil, country of broken dreams
Instead of an article about an article the real interview is on Forbes https://www.forbes.com/sites/parmyolson/2018/09/26/exclusive...
>How do you know when Micro Snitch spies on you? I couldn't find the source code anywhere.

Source code isn't really necessary. Nor sufficient for that matter even if it was there, you'd need verifiable builds and an assurance of no self updating capability too, basically for certain minimal products you need some level of trust. As far as extra verifying though you'd probably start the same way you would minimally blackbox anything: stick it on a virgin test box and monitor all I/O in a controlled setting (VM could work too, though if you're super paranoid you might take into account that can be detected and runtime behavior modified). I guess you could start disassembling it and poking around its memory and such too if you wanted.

But seriously, it's a Mac product, so source access everywhere should kind of obviously be off your list already. How do you know when Apple spies on you? You won't find the source code. And the answer is you blackbox it and mostly you trust that it'd get noticed at some point and Apple would get the crap sued out of them and be investigated by governments worldwide etc etc. Objective Development is a very long standing dev and has put out a far more critical long standing security product that has been used by a lot of sec people for a very long time. Sure they could be compromised in the same way any dev could, but on the lowest critical factor level they're unlikely to be the biggest risk in most users' threat model.
How OpenStack Barbican deployment options secure your cloud
Kali Linux is not desktop distro, please don't make a mistake of installing it as your main one. Eclipse is also not graphic intense software, you just need a bunch of RAM and that would be it. I can't recommend you any Chromebook because if I would be you I would buy used/refurbished Lenovo Thinkpad X or T series and if I would ever need serious GPU power on them I would buy, in the future, external GPU case with proper, desktop grade, graphic card. That combo works pretty nicely under Ubuntu.
> Power consumption is related to difficulty and the rewards, which is linked to the price of a Bitcoin.

Difficulty is determined by the hash rate of the network. One would expect there to be a link between hash rate and price but that's correlation not causation.
How to regulate this is up to each and every country, just like it is up to each country how to regulate things like pollution, traffic and infrastructure.

That a bank who can't handle security compromises their customers user experience rather than their customers security is a good thing.

The reason the regulate these things aren't because it is fun. It is because there are fundamental security problems that needs to and will eventually be fixed. Companies like Apple have largely already, or at least potentially, fixed these problem just only for themselves. If you want to fix it for everyone you very likely need some sort of mandate.
These are great links. Thanks for sharing and your work.
Yes. Funded by state taxes. It is an effort to reduce brain drain, attract higher wage business and diversify the economy. From my datapoint of 1, it seems to be working. My brother in-laws wife is a nurse. WY is in desperate need of nurses and she found a well paying job there. Had my brother in law not gone to law school there she would have never looked for a job there and they wouldn’t have been able to fill that position. Btw, her salary in WY is way higher than on the east coast.
I find the article and paper somewhat frustrating.

It doesn't say anything new about da Vinci, and it sure doesn't seem to add anything which isn't already an accepted idea in biomechanics. The article revives vascular constraints as a strawman before beating it down again, as if it's still a theory of limb structure thats taken seriously.

My takeaway: da Vinci's rule is easily explained by modern foundational biomechanics.
>turn a phone into receive-only device without worrying about what it's broadcasting

Then all the spy software has to do is receive a signal to begin recording, saves to a buffer, and waits for you to check twitter before uploading.
FYI, it doesn't serve exactly the same purpose, but macOS Mojave requires a permission prompt for software to access the camera and mic.

Of course, if a program has access to it (including Apple's own permission-exempt software) an unauthorized app may be able to use the authorized one as a route around the sandbox:

https://objective-see.com/blog/blog_0x2F.html

But Mojave also added an "APP_1 wants to control APP_2" permission prompt, so I don't think that workaround is typically possible. When the malware tries to use Quicktime to run a video/audio capture, the AppleScript should trigger a "Badware.app wants to control Quicktime" permission prompt.

https://apple.stackexchange.com/questions/335848/mojave-disa...
This is not a rhetorical question, I'm just trying to better understand how this process would work. Who would be designing and brainstorming these laws in the government?
I agree, never heard of picovoice
”If someone replaced/modified it […] counting on unveil() still working […] might let you down.”

Might is an understatement. If somebody changed what you run, there’s no guarantee at all that it even still calls unveil.

However, I would think chances that your system is set up such that third parties can tamper with your binaries are about equal to those that the system setup allows them to ‘tweak’ your SELinux configurations.
Thank you, the article is very to the point, easy to understand and interesting. I'd maybe add 'product' and 'maintenance'
Location: Moscow, Russia

Remote: Yes

Willing to relocate: Yes

Technologies: Java, Scala, JavaScript, SQL, PostgreSQL, Cassandra, Hadoop, Spark, Kafka, Mesos, Marathon, Docker, Spring, Hibernate, HTML, CSS, AngularJS

Resume/CV: https://drive.google.com/open?id=1ygBuYoFy0tJKZa0V4pLs1KMAgl...

Email: mperepelko@gmail.com

Hi, I'm Max, Data and Back-end Software Engineer that is also having a full-stack experience. Last years is mostly working with cloud technologies and distributed computing in a distributed international team. Feel free to contact me for more details if interested.
It's been here since middle of January.
In the US, lighthouses have been sold to private individuals. There's one I know on Cape Cod that's some sort of vacation rental. Apparently the Graves Lighthouse in Boston Harbor is also now privately owned. [1]

A couple points of information that you may know but others may not realize:

1.) Not all lighthouses are particularly isolated. Sure, some have only boat access and have difficult landings--see the Graves. But many are on roads on the mainland or on large islands.

2.) Again the Graves notwithstanding, the lighthouse keeper's house is often a cottage off to the side as opposed to the "lighthouse" itself.

[1] https://en.wikipedia.org/wiki/The_Graves_Light
This is a classic debate — but I think it's mixing two very different ethical questions.

* Should any two people be able to reproduce using their own genes? Should a homosexual couple, or an individual with a gamete disorder have that option?

* Is it worth mouse suffering? More broadly, is any medical research worth animal suffering? It is routine. Is there a difference between animals suffering at the hands of humans vs suffering in the wild? Honestly laboratory protocols are often more humane than what happens in my backyard every day.
Same here. We also have quiet offices with no more than 2 people per room for our devs. Maybe it’s no surprise we have a strong company culture.
Eclipse is 'graphics intensive'?

I think you'd be better off getting an older thinkpad. Linux support on them tends to be excellent and are highly upgradeable (RAM, hard drive, etc)

Chromebooks are notoriously underpowered and not easily upgradeable..
.. and that "Someone" was nearly always the same guy: Leonardo da Vinci. He must have been maybe the most curious man ever.
I think it's a good sign as people get more and more aware of being able to search privately and duck duck go is a great search engine
Learning quickly and understanding implications of cause and response.

IMHO This is a skill that should be a core skill in nearly all professions.
Hello HN!
6 years ago we launched our very first playground on HN (https://news.ycombinator.com/item?id=5407499). It barely worked, but a few months later we go into YC largely due to the awesome feedback we received from it. We thought we'd take a page out of history and show you guys how far we've come, with a version of the original playground, but fully integrated with CSS Grid.

The Webflow designer was built mostly in knockout.js in 2013/2014, but we finished a migration to React about a year ago. We’re still learning all the tricks needed to make a very large React app performant, but we haven’t looked back.

We'd love to hear your feedback!

The CSS Grid playground works in desktop Chrome/Safari/Brave/Vivaldi, as we're still working on Firefox and tablet support.
True story: I spotted Jack Dorsey 2 weeks rocking Balenciaga kicks and streetwear in Soho NYC. My point is fashion is just fashion and what you wear is relative to what you consider to be your "in group".
No idea if it's true but it's a solid guess. Canada has far and away the most coastline of any nation. Amounts vary depending on source but they have roughly four times as much as the number two on the list, Norway.

https://en.wikipedia.org/wiki/List_of_countries_by_length_of...
I literally just learned about that before reading your comment. Pretty amazing. I've sea kayaked out there and it's not an easy landing under the best of circumstances.
20 years ago, research fraud catalyzed the anti-vaccination movement [04/2018]
America is similar. Most of America's businesses are east of the Mississippi, where 1/2 of the American population lives in 1/3 of the American empire.
This info is already known, and therefore already priced into those companies stock price.
Yes to both, and also plan to write blogs about the content, and documentation for the library as it matures. I'm gratified to see the interest!
Not sure I follow. I didn't sign anything when I got my computer and have no special obligations to anyone.
Audio is an extraordinarily low demand task, and hardware is not the issue, and hasn't been for a couple of decades (even DSP offloading has virtually disappeared). A smartphone has many, many magnitudes of excess performance to handle extremely low latency audio. The iPhone has had a 7ms latency for many generations, and the 7ms is not some intrinsic limit but is simply a decent balance between low power usage and ensuring no glitches.

The problem on some platforms is one of architectural choices and prioritization. On Android we know they started with the already arguably poor latency Linux audio foundation of ASLA, then layered on and layered on (flingers and HLAs and user-mode transitions), each layer adding its own ring buffers.

Even on Windows, on the fastest PC known to man, audio has generally poor latency (because it's architectural) which is why audio software makers have their own hardware->application drivers (ASIO).

Low latency audio was not important to the project, and they dug themselves in so deep that for many years we've been hearing recurring "We've finally solved that latency issue" claims.
WhatsApp (and Instagram) itself was an acquisition via surreptitious data harvesting through Onavo - the free VPN app meant to "protect" users browsing data [0, 1].

> Facebook uses an internal database to track rivals, including young startups performing unusually well, people familiar with the system say. The database stems from Facebook’s 2013 acquisition of a Tel Aviv-based startup, Onavo, which had built an app that secures users’ privacy by routing their traffic through private servers. The app gives Facebook an unusually detailed look at what users collectively do on their phones, these people say. The tool shaped Facebook’s decision to buy WhatsApp and informed its live-video strategy, they say. Facebook used Onavo to build its early-bird tool that tips it off to promising services and that helped Facebook home in on Houseparty.

Apple has now forced Facebook to remove it from the App Store [2]. I'm not sure if data harvesting has stopped. It might have even increased.

[0] https://outline.com/tkzkVb

[1] https://news.ycombinator.com/item?id=14970877

[2] https://www.theverge.com/2018/8/22/17771298/facebook-onavo-p...
the fault is with the person who used unlicensed code. OP did nothing wrong if he wasn't explicitly choosing to permissively license it. sounds from his reaction that he wasn't. that's ok.
Maybe automated processes yes, but not maintenance and quality assurance of certain jobs. Not to mention that quality assurance, customer care can be auto but I think these are the spheres where a human eye and contact is important and needed
I love snips. That's what got me into programming, to be honest
Yup, I agree there are other, more accurate representations possible. I just wanted to clarify what seemed to be conveyed by op, as there appeared be a misunderstanding based on the reply. Thanks for the additional example.
Brexit could mean UK users lose Netflix and Spotify
But they do pay the original artist to come to their show and play their original hits. Meanwhile other people pay less to see a cover band.
A mysterious grey-hat is patching people's outdated MikroTik routers
Maybe it was too ambitiously propped up. But it was also too early to get trendy. And it's a lisp, the amount of people that can appreciate arc's feature is probably a 4 digit figure.
I'm curious why the authors didn't contribute this directly to Tabula instead.
It happens more often when I copy and paste the search instead of type it in. So for example I’ve already searched on Bing and I don’t like the results. So I copy and paste the query on Google in a fresh incognito mode instead of retype (I use Safari on iOS so maybe that helps with recreating it)

Other times when I don’t copy and paste I’m just Googling stuff related to my work as a programmer. And I’m guessing since I don’t always use natural language it raises a few flags? I’m not sure.

This was before we had wifi at this house (just got it last month) so I was using a cellular connection almost exclusively, except when at a coffee shop or something.

But I’m a fully coherent human and I can attest that it happened often enough for me to get annoyed by it real fast.
This is my question too. I looked at Snips but they had no timeline on Windows support and were more interested in talking about their crypto coin than answering basic questions about their software.
Nice idea! One minor comment: I have the impression that the word “Roast” is being used as a linguistic reference. If so, non-native English speakers may not understand the name. Maybe consider a name that is more university understood?
You're right, I got confused with another Postgres-GPU plugin type product.

However, Postgres isn't columnar. How does PG-Strom (now HeteroDB) arrange data for the GPU properly?
If he felt so bad be should have stayed and gotten the money for charity.
Two traps in iostat: %util and svctm
It would be interesting to see Apple take a page from Walmart and require all their large suppliers to have an office near their headquarters.

Walmart revenues are around double that of apple, but they likely have a lot more suppliers and much lower spend per supplier than apple.
Retail’s New E-Commerce Headache: Delivering Workers to Warehouses
And two the year prior, bringing the count to 12 since 2016, for a total of 79 moons around Jupiter.
No, Google, We Did Not Consent to This
I looked at the implementation of the openStream() function:

AudioStream *AudioStreamBuilder::build() {
AudioStream *stream = nullptr;
if (mAudioApi == AudioApi::AAudio && isAAudioSupported()) {
stream = new AudioStreamAAudio(*this);

// If unspecified, only use AAudio if recommended.
} else if (mAudioApi == AudioApi::Unspecified && isAAudioRecommended()) {
stream = new AudioStreamAAudio(*this);
} else {
if (getDirection() == oboe::Direction::Output) {
stream = new AudioOutputStreamOpenSLES(*this);
} else if (getDirection() == oboe::Direction::Input) {
stream = new AudioInputStreamOpenSLES(*this);
}
}
return stream;
}

Result AudioStreamBuilder::openStream(AudioStream **streamPP) {
if (streamPP == nullptr) {
return Result::ErrorNull;
}
*streamPP = nullptr;
AudioStream *streamP = build();
if (streamP == nullptr) {
return Result::ErrorNull;
}
Result result = streamP->open(); // TODO review API
if (result == Result::OK) {
*streamPP = streamP;
}
return result;
}

Doesn't this leak memory if streamP->open() fails? I'm also surprised they are using new instead of unique_ptr, especially since one of their listed benefits is "Convenient C++ API (uses the C++11 standard) ".
The painting itself. But the right to reproduce the painting is covered by copyright, and ends up in the public domain 70 years after the painter's death, same as everything else. (Such a long time! It was originally 14 years with an optional 14 year extension period.)

https://www.arsny.com/copyright-basics/

So a (freelance) painter gets two things: the physical piece of art, and the right to reproduce it. A musician can get concert revenue, plus the rights to reproduce their music. I don't have a good sense about how the values of these things compare.
Detecting the language of a person's name using a PyTorch RNN
>We have government auditors come and review our technology once a year. These guys don't know what the hell they are doing. We have had blatant security problems (now addressed) that they couldn't see right in front of their nose.

I've seen the same issues in SarbOx audits. The auditors don't know beans about the underlying technologies. A lot of evidence requests take the form of screen captures showing x. Well... I can give you a screen capture showing you whatever you want whether it represents reality or not. Ultimately, with our without regulation, it comes down to people being honest professionals. Regulation is all for show.
I think wasapi has more or less superseded asio and has more support from Microsoft.

If you're programming in Rust, you can use the cpal crate, which wraps all these. I'm not sure cpal has astonishingly good performance in all cases, but I plan to work with the authors. It doesn't have an Android back-end yet, but such a thing should be possible.
You might want to consider adding a faq or about page to explain to less technical visitors what these are.
Some of these companies listed are holding companies for other companies, so the list isn't fully comprehensive.

Molex, for example, isn't listed. But its owner (Koch Industries) is.
I think there was a talk on breaking LittleSnitch at either Defcon or B-sides a few years back. I couldn't get in though; it was full. Whatever it was is probably fixed by now anyway.
"Spotify users might have their accounts blocked when outside the UK if there is a no-deal Brexit"

So only while traveling. Makes sense, that's a EU regulation.
I have a theory: I believe tweeting #deletefacebook was a firable offense and, upon being fired, he lost whatever vesting remained. He didnt knowingly do this. Almost every company has similar terms in place. I certainly wouldnt hand over another billion dollars to someone who did that my company after I paid him $15bn.
Figures someone already gave it more thought than I did. Good to know!
Watch a Guy Shoot Invasive Lionfish with a Glock 9mm
How to Fix ProxySQL Configuration When It Won’t Start
>It also seem pretty nippy to me

OK. (my experience since the redesign is the opposite.)
Thanks! This is really a fantastic resource. Something like a TLS connection is one of those things that seems really intimidating but when you see it laid out like this it makes you feel like 'I can understand this!'. Great work.
You can bet that if no record labels are speaking out against this law that it directly benefits them in some way.
First Man is a first-rate movie about America’s most revered astronaut
I just don't get the narrative. I can appreciate walking away from, and not being part of, something you don't like. But at that point the damage was already done. Seemingly they main thing that was achieved here was making the cost of the acquisition $850M cheaper for Facebook.
Interesting thought. I would assume some audits have been done via blackbox testing of some sort (e.g. hardware monitor, routing all traffic through a proxy and logging it, etc.) by some infosec group/Co, but I also haven’t researched that.
They do taper, the method is to drop branches and limbs over time. Look at an old tree and the first branch is often 10+ feet above the ground, where young trees have many branches much lower.
I like this. It's simple, progressive, delivers a real benefit instantly, cheap and easy to understand.

Entirely the opposite of SELinux.
> Are you asking about what I mean by "It was tough decision for me"?

No. I was referring to "It's not suited for risk takers". I was curious about where you see risks. What is the danger, what is the valuable thing you might loose by the move. Excluding trade-offs - "legal time till citizenship will reset" is more of trade-off or cost because you know it will happen. It is uncomfortable and obstacle and challenge for sure, I don't want to deprecate the difficulties involved, but it is not what I wanted to ask about.
My thoughts too. Get the money, and do something useful with it. It was an expensive and still pretty meaningless gesture. Now, maybe he didn’t want to spend more time at FB and bought his freedom with that money. Perfectly fine, but please don’t spin it like some morally applaudable act.
I'm not going to categorize a war torn country that's in chaos as functioning. You can have a low trust society and still have a good economy as well as production
If it's a space station, then accelerating it is less of a concern than keeping it livable, and a huge amount of matter surrounding you goes a long way to protect you from things that would otherwise kill you.

Now for a space ship, I agree. Though even then you might benefit from that extra matter in the same way.
Google Cloud Expands into Europe and Connects the Two Sides of the Atlantic
Not really. TypeScript is just a JavaScript superset, and developer code JS with all its good and bad with some annotation types. TypeScript is not like Dart or reasonML for which your analogy would have been correct if someone said Dart count as JavaScript.