skysight-inc/HackerNews huggingface dataset:
No government should have to resort to 'sneaky' measures like this.

That's tourist thinking.

If you want to play in their country, you abide by their rules.
> You realize that automated credit scores are a thing in the US right? China is taking the concept a step further, but it's not unique to them

That's a disingenuous and misleading comparison. Your American credit score isn't going to drop if you criticize the president on twitter, or do investigative journalism that makes a government official look bad.

https://www.theglobeandmail.com/news/world/chinese-blacklist...
That's pressure not to jump in front of cars. You don't have to jump in front of a car to trigger this rule, you just have to put one foot into the road.
>Take what I said with a grain of salt though, I don't really know what I'm talking about here.

I take it all with a lot of salt until we have a wide range of animal languages down. One thing I found interesting is the recent work on dolphins has found entire images of things they have echolocated embedded in their clicks, suggesting a possible pictorial language.

Here's an excerpt from the summary -

>"We discovered transient wave patterns in the water cell that were strikingly similar in shape to the objects being echolocated. To further investigate the shapes in these Cyma Glyphs we converted the images to 3-D models. As far as we know, this the first time such a method has been implemented.

>Transient wave images were found for the cube, cross, flowerpot and a human by examining single still frames, or single frames acquired in bursts, usually where there was high power and dense click trains in the recording. The parameters involved in capturing echolocation images with the CymaScope include careful control of the acoustic energy entering the visualizing cell. Water requires a narrow acceptable “power window” of acoustic energy; too little energy results in no image formation and too much energy results in water being launched from the cell. As a result, many hours of work were involved in capturing the still images of the echolocated objects. The imagery for the human subject was captured in video mode and has been approximately located in time code. The image formed between 19.6 to 20 seconds into the recording and may derive from a set of dense clicks at approximately 20 seconds. The video was shot at 24 frames/second with a possible audio synchronization error of plus or minus 3 frames."

https://www.omicsonline.org/open-access/a-phenomenon-discove...
StockX Is a Stock Market for Nikes and Rolexes
After Curiosity's "helicopter drop but on Mars" style landing normal landings like this seem boring by comparison. I can't believe that was 6yr ago.
Node people highly follow the single responsibility principle that is prevalent in Linux. By your logic, Linux is sloppy and inept too.
Here's some advice. Don't feign passion. If you could give to shits about the product wait for a better opportunity. Next. Your coworkers are competition. Treat them as such. Next. Ask for at least 20% more than you'd settle for but only after you receive an offer. Last. Don't become a JAP. You're welcome.
He'll decline the request or say it should not be accepted. Declining the request is just fine, and a reasonable thing to do. There are many mathematical results that are in fact uninteresting (to just about anyone) and it's fine to suggest those be rejected from a good journal.

I've had many paper rejections, none because of false or uninteresting claims but almost all because "it's not good enough for this prestige journal" or "it's too specialized for this journal". I expect a certain number of those, because I submit to reach journals now and then and hope I get a reviewer and editor that like the work :) If I wanted certain publication immediately I'd submit to lower-tier journals first, which I have also done when I just needed something out.
my family and friends
You should elaborate with some detail instead of ad hominem.
That's a nice approach. Do you control the radiators using other inputs?

Our current system works using a CalDAV calendar with repeating appointments providing information about work/home/sleep times. This is combined with presence detection using our mobile phones and Z-Wave motion detectors. This also controls lights, light color temperature and our ventilation system. All events go to InfluxDB / Grafana combo. OpenHAB 2 is the spider in this web of IoT stuff.
I know folks are obsessed with market cap for some reason, but I'm curious here: what portions of either company are public vs. privately held? Is there a material difference we should be considering here as a multiple instead of basic "outstanding shares * share value" to make this apples to apples? For example, if outstanding shares are 95% of MS, but only 92% of Apple's equity, etc.

I couldn't find this information myself in a cursory search, but I'd gather it's easy enough to find out if you know where to look. Thanks for the help.
Most valuable US company, or worldwide?
> We're here because of mass progress

What is "mass progress"? There are two options: a) let the masses learn to use the inventions of individualists (which happened with C/C++, PHP and Python for instance), or b) let the inventions be customized to the mediocre capabilities of the masses.

You want option b), obviously. I wouldn't call that "progress".
> I don't want to defend or encourage gatekeeping

Goes on to defend and encourage gatekeeping.
A long tail of subtle event and reentrancy bugs, where an event loop wasn't getting an event it needed (leading to dropped or mishandled OS events), or a function that doesn't expect to need to be reentrant was suddenly reentrant.

Most of these could be worked around, but some of them are unreasonably difficult given OS event apis.

We replaced it with just making the calls that might need to be asynchronous use `async`/`await`.
US can do that because FB is US company. UK cannot just because you happen to visit.

Didn't the U.S. arrest a Volkswagen exec wanted in connection with the emissions scandal, when he visited?
I'm very skeptical if employed humans labeling will generate enough training data. I don't see how this method is superior to what Google is doing with captcha.

Also this is already being done by many American corporations hiring people in countries like Bangladesh.
> My opinion is that $40 is not a fair price for a single article, and yet it's required to make the subscription business model work.

It's not. Unless it's a way to drive people to buy subscription. That is: "pay $40 for a single article, or pay just $19.99 a month to access all of them". Which is also crappy.

> Obviously these opinions are in conflict with the business with which I'm involved, and are certainly not shared by most others within the industry.

This is true, unfortunately (same goes for media such as audio and video, sadly).
I wonder why the helicopter drop was necessary then but not now?
I mean, you could definitely convince me that it's not an aside worth including in the article for the sake of staying on point.

I'll still take Ars at its worst over most general news sites' tech reporting at its best.
https://github.com/tonsky/FiraCode
You nailed it. That's precisely what he's doing, and he knows it and is doing it on purpose (see below -- or better yet, don't bother). He doesn't really mean anything he says, and his civility is just a shallow pretense. The fact that he's shadow banned shows how well the moderation system works! Thank you again, moderators!
really thought they'd be close to dying by now.

https://www.theverge.com/2018/4/26/17286900/microsoft-q3-201...

> 135 million active Office 365 business users, alongside 30.6 million Office 365 consumer subscriptions.

> a 93 percent jump in Azure revenue.

> Microsoft has once again returned Surface to the important billion dollar business target.

> Xbox software and services revenue has grown 24 percent,

> LinkedIn has now been included in Microsoft’s earnings reports for a full year now, and the social network was responsible for $1.3 billion of revenue this quarter.

> Pro licenses of Windows grew 11 percent this quarter

Like, which bit of this sounds like a company "close to dying"?

"Nobody uses Windows anymore, it's too common".

In a few moments googling I haven't been able to find if SQL Server is still a billion dollar business, or the other ten billion-dollar things they used to have still hold up today (Windows, Windows Server, Office, XBox, SQL, System Center, Exchange, SharePoint, Visual Studio, Dynamics, Advertising). Off the top of my head I'd guess Exchange and SharePoint income moves to Office 365 and System Center moves to inTune Cloud, but even if the rest have declined seriously, it doesn't seem likely that corporate use of Visual Studio and SQL Server and Bing Advertising would all have fallen by >75% in 8 years, does it?
1) Volume -- Javascript is the most popular language right now and it's not really close [1]. Attackers typically focus their efforts on systems that offer the most potential targets.

2) The language -- Javascript has relatively few convenience features in the standard library (at least compared to ruby, which is my point of reference) so more of those features are implemented in userland (and thus imported from npm). I think this is the biggest cause of massive dependency trees -- things like left_pad simply exist natively in many other languages.

3) The ecosystem -- for whatever reason, installing floating package versions was the default for a long time; floating package versions are obviously an order of magnitude more vulnerable to an attacker publishing a malicious update.

Edit: 4) I think it's also probably true that Javascript apps are particularly susceptible to this class of vulnerability, but that doesn't necessarily mean they're less secure overall. Javascript teams tend to move quickly and stay on the cutting edge, so they install lots of packages/updates and are thus vulnerable to malicious updates. Equifax's Java app was compromised for exactly the opposite reason -- they didn't install a security update to Apache Struts for months. That class of vulnerability is far less likely to happen on a fast-moving Javascript app. It's all a tradeoff; the important takeaway is to understand the failure modes for your particular stack and be vigilant against them (which in this case means using a lockfile and doing your best to audit new packages/updates).

[1] https://insights.stackoverflow.com/survey/2018#most-popular-...
More questions to ask before joining a startup: https://www.aaron-gray.com/questions-to-ask-at-a-startup-int...
Both titles state "US company" so I'm not sure what you're getting at.
Where did you learn to do that?
https://www.youtube.com/watch?v=bGD_YF64Nwk - live coverage of InSight landing on the NASA JPL channel, started November 26, 2018 at 19:00 UTC, touchdown at around 20:00 UTC
However, my understanding is that this suite is about apple abusing the app-writing monopoly to also let only them sell apps, which is why I thought the console game analogy was sound.

Sure other game makers can sell games anywhere they want - as long as they do it in the console makers terms, get approved by the console maker,and pay the license.

Back in the cartridge days, only Nintendo could make the cartridges even for third parties.

Yes, I know Microsoft has a blessed app storeb however, like Android, you can still install your own, unsigned executables or use another app store

Not for the Xbox.
Mission Control Live Stream: NASA InSight Mars Landing [video]
The sky crane maneuver (as JPL called it) was necessary because if they descended propulsively to the surface, it could kick up a huge dust cloud. That dust could land on the rover and damage the instruments. See this awesome video: https://www.jpl.nasa.gov/video/details.php?id=1090
I am a little shocked that the market hasn't woken up to the problems that Apple has.

Consider all the people you know well. How many have switched from Android to OS X in the last 5 years? How many have switched from OS X to Android in the last 5 years? In my household, 2 switched to Android, 0 switched the other way. In my broader network I'm aware of several more switching to Android, none switching back.

There is a good reason for that. An iPhone with equivalent specs to an Android costs 2x as much. The user experience isn't that much better. (Many people who switch say that the Apple experience was actually worse.)

The cheapest phone that Apple wants to sell you is an XS for about $1000. You can get a top of the line Android for less than that - with specs that beat the best model that Apple has.

So Apple is fighting a rearguard action - squeeze the most profit that it can out of a clientele that is slowly disappearing on them. In this world, they can't afford defects.

So what happens? I personally have an iPhone X because my sister gave it to me as a present. This month the display became non-responsive (that's the bug that has Apple's stock falling). They fixed that after most of a week without a phone. I've now got it randomly deciding that Face ID no longer works, the volume randomly going between off and on, and it recharges when it feels like it wants to. I've got to wait most of a week for them to fix THAT as well. (Have you ever had your phone decide to dial its volume to 0 in the middle of a phone call or listening to a book on your commute? Yeah, it sucks just as much as you would guess.) In the meantime I'm looking at my wife's phone with a growing amount of envy.

When Apple stops being willing to fix their phone under warranty, what do you think I'll replace it with?
I think it's because Curiosity was a rover and Insight is only a lander. A lander can have rockets on the bottom that slow its descent, but a rover can't, as then the wheels won't work. So the "helicopter drop" puts the rockets on a platform far above the rover (so the exhaust won't damage it) and then it flies away once the rover is on the surface.
My goal for 2019 is to be even more deliberate in what I spend my time reading. This year I started being deliberate in my reading habits and read a lot less than I would in previous years when I was just consuming books en masse, but I find I'm retaining a lot more, or if nothing else, have less Dunning-Kruger cognitive dissonance.

What I would really like, is a streamlined workflow for incorporating spaced repetition into my reading. I usually read on my Kobo so not sure how feasible it would be to integrate it with Anki. I would welcome any ideas.

Apart from that, I'd like to read some more Neal Stephenson. I LOVED Cryptonomicon (read it 2 years ago) and I've been unable to find fiction books with a similar style. Neal Stephenson has written a lot of stuff so I'm not sure which book to attack next.
Eh, again, this kind of thing is common for compiler output, and the use of such compilers is very common.

I think you'd have more luck looking at static strings and warning on any string that has a sufficiently high entropy. Sure, some of them will be hashes for verification, or compressed harmless data, but it it seems like it would be rare enough to be auditable.
Thanks. I also try to follow the latest info to be aware of the real condition on the market. Just read about new MotoCoin crypto. It is the first crypto which uses an innovative proof-of-play scheme for mining. Want to invest in it in the near future.
If I give the maid a key to the house, there's always an attack vector, but that doesn't mean I just go hire some rando off craiglist.

There are a number of factors that could be considered when giving somebody this kind of responsibility, including existing contributions to open source, contributions to the project at hand, and public profile. As far as I can tell, "right9ctrl" had none of these.
Social media, a challenging new platform for judges around the world
Future wildfires will be fought with algorithms
Landing on Mars: Curiosity's Seven Minutes of Terror (2012)
> Only in the sense that you can compare them, but then, you can compare anything, so literally anything is comparable in that sense, which robs the word of all meaning.

I think there's quite a bit more in common between a 1400's tribe and the EU than say, the star Polaris and trends of Swedish Cubism in the years 1950-1980.

The point here has always been that throwing up your hands and saying the original comparison is unreasonable is not a reasoned argument, it's flipping the table and walking off. The systems of social control in the United States and China are far more comparable than "anything to anything".
> sell your business and your copy of their keys to a criminal

This implies the seller _knows_ the one they are handing over the keys to is indeed a criminal. In that case it is certainly morally problematic.

I see your point but I still think calling the maintainer's behaviour immoral is going a bit too far. Perhaps careless. Or maybe naive. But not more than that.
I'm pretty sure they should say worldwide. Can't find a company more valuable than MSFT, so I'm not sure why the title says "US Company" when it could say "worldwide".
If a contributor's end goal is to publish a backdoor, then making them wait 0 or 100 commits to the project before trusting them doesn't change the end result.

In fact, if you had the energy to do the attack at all here (which took some work), having to fake trustworthiness doesn't require much more effort. Just look like a super enthusiastic contributor, put work into the readme, bike-shed over some issues every month, and bam.
Cryptocurrency Payments Using Django and Coinbase Commerce
Huh, I wonder if you could fit a CM-1 on an FPGA now. The small model had 16k 1-bit processors, with 4k bits of RAM each. (I haven't played with FPGAs yet and don't know what's available.)
> So I think you are just making stuff up here.

Apple has admitted that they slow down older phones, due to battery issues.

https://www.cnet.com/news/apple-slows-down-older-iphone-batt...
> How do you determine "safe to take at 45"?

I look at the roads that do have speed limits of 45mph.

> the environment dictates the speed limit

Yep! And the roads I'm talking about are built in the same way with the same environment as the 45mph roads.

I'll back down my "all" to about "90%" though, I remembered a short road where 35 actually fits.

But in general, if we accept that the 45mph roads are actually safe at 45mph, then there's a lot of 35mph roads would be equally safe at 45mph.
But who calls any grown man 'boy'? I have literally never heard it happen before in normal conversation.
We are investigating doing that! We're pretty excited about the possibilities too!
oh sure the criminal who put the backdoor in place, no-one's arguing his/her liability.

But the point that I was referring to is any suggestion that the repo. owner who handed it over could bear any liability for doing so, I'd suggest that's not probable/practicable.
Cool, let me know if there's anything there you'd like to see.

I'm in the process of working on a system resolver, but first have to refactor a bunch of stuff. We'll see how that goes.
is there any NON-garbage-collected functional programming language? Something suitable for real-time or deterministic timing usage?
Could put up one of those websites

is-there-an-ongoing-200krad-nuclear-event.com

[static html page saying "no."]
>We're not going to see any language supplant JavaScript in the browser. Dart got nowhere, and that was with the backing of Google.

Never say never (again. With apologies to Ian Fleming).
Just because Dart couldn't do it (even with Google), doesn't mean that nothing else can. I, for one, hope something better does supplant JS.

https://en.wikipedia.org/wiki/Never_Say_Never_Again

https://en.wikipedia.org/wiki/Ian_Fleming
right, but now he has much bigger monthly payments, and still owes that 500k back... so it seems all he did here was get a big loan....
It's all about the magnetic surfaces. Some pictures:

https://images.slideplayer.com/33/10482660/slides/slide_9.jp...

https://www.nature.com/articles/ncomms13493/figures/1

https://imgur.com/gallery/eikBLMX
I'd guess: Insight isn't a rover and thus less sensitive to a bad landing/getting stuck.
> I am supposed to lay out my entire financial history in a public wallet (which I don't want)

Monero offers an obfuscated public ledger that prevents others from spying on the source, amount, or destination of the transaction.
>I walk twice around the earth before even considering a subscription service.

I can't imagine going back not having music subscription service. I don't have to make a decision which album to buy anymore and I don't have to worry about my kids pirating music.
I'd say Rust is the closest thing. Cargo is fantastic, super ergonomic and with an excellent package ecosystem. Rust doesn't have the pretense of purity or immutability, but honestly, you can very easily write pure functional Rust (and it'll save you a lot of pain with lifetimes). Performance is excellent, of course.
You don't have to swear because of a typo, English is not my first language.

You look much dumber than the person you're correcting by acting like that.
Here's an example:

https://github.com/moriyoshi/s3-sftp-proxy

No FUSE. Pure Go so it's low on resource usage and high in platform compatibility. No OpenSSH. No screwing around with Linux users or whatever. Just a single declarative configuration file. You can run this baby in a Docker container with some adjustments to the host if you want this on port 22.

I had to sourcegraph GitHub a bit to find this thing. SEO is so bad on this implementation. I don't know why.
Fair enough. And I agree. However, to be clear, that's __not__what this article says. Per the quote I pulled.
Yes it’s possibke to distribute home brew games by using circumvention. Good luck trying to make that a commercially viable option. That stands up about as well as saying you can distribute iOS apps outside of the App Store for jailbroken phones....
My main issue is they got huge bail outs previously from the govt.

Nortel did not
Ask HN: How to learn censorship circumvention?
I have always had interest in tools like Psiphon(https://www.psiphon3.com/), Tallow(https://reqrypt.org/tallow.html),
i2p, Tor & Lantern(https://getlantern.org/).

What resources do you recommend where I can learn how to build such tools or understand how these systems work?

I obviously need to sharpen my networking & cryptography. But any specifically interesting sources you recommend?
NASA landing on Mars now
> Apple is strictly consumer focused.

Not true.

1- https://www.apple.com/business/resources/

2 - https://www.apple.com/support/enterprise/

3 - https://www.apple.com/newsroom/2014/07/15Apple-and-IBM-Forge...
Without locking in to a specific version you are trusting the maintainer in perpetuity. That trust extends to things like reviewing their own dependencies, reviewing pull requests, adding other maintainers, or just flat writing bad code. I don't blame the author any more in this instance than if any of those other possible examples occurred.

Security patches are part of my original point regarding why it is bad for a project to die. I have no data on this, but I have a feeling that there are a lot more unpatched security bugs in widely used dead projects than there are popular projects that are taken over by a malicious maintainer.

The simple fact of the matter is that you are responsible for all the open source code you run. If you allow the code to be updated automatically you are abdicating your responsibility to review that code as a trade for being relieved of the responsibility of keeping up to date with patches. You are the one liable when something goes wrong because you are the one who made that decision and misplaced that trust. That is an inherent agreement you make when you use open source code and is often spelled out explicitly in the license.
Learn the fundamentals of Java 11 programming
Trump Labor Department to Use New H-1B Form Against Tech Companies
Previous discussion: https://news.ycombinator.com/item?id=3179645

The top comment there explains a good use-case for this chip.