skysight-inc/HackerNews huggingface dataset:
Wait, why could we not render the HTML on the server and only let the browser to the compositing? If there only was a protocol that would allow us to exchange input events and some drawing commands over some arbitrary network.. let's phantasize for a moment and call that protocol X. I would use it when it's mature so maybe from X11 on onwards.

Naturally, sending draw commands has a big downside in efficiency. Maybe we could later exchange X with something that only sends bitmaps?
I hope it has a pile of the dead 3gb seagates. Perhaps in an interactive exhibit where there are some implements of destruction.
I didn't mean to imply you were definitely a hypocrite, I merely meant to point out that all the wishing and desiring for a better world is meaningless if you are not willing to take action toward creating it yourself.

As is often the case with forum posts, it was meant just as much, if not more, for the general audience as it was for you in particular.
Brilliant! Much of my early teens was "wasted" playing Castle Wolfenstein on a green screen Apple II. Great memories.
this is a whole new level of security bugs
IETF should be concerned since one solution to this problem is to hijack the DNS. Namely 8.8.8.8
More concerning to me was the fairly recent removal of non-phone-app setup. It used to be that a chromecast would display a 4 character code on screen, which could be used to activate it from the browser.

Now, they require that it be managed with the google Home app, and have discontinued the method that allowed chromecast use without installing additional google software on your phone.

This made for a really disheartening christmas experience, when I first assured my mother that no, we could skip this stuff with your phone, only to find out that no, she would indeed have to make that sacrifice.

Especially frustrating is that my same devices, validated with the old method, continue to function just fine.

Does anyone with more knowledge than I have know of a reason for this that isn't data-greedy or consumer-hostile? From my perspective, "Don't be evil" has been dead long enough that the bones are sunbleached.
Istio (part of that demo) or Spire (SPIFFE) do that for you.
Duck is Bing.

https://www.quora.com/How-is-the-Bing-API-used-by-DuckDuckGo

There are effectively only two competitive search engines in the U.S. and European markets today. In those markets, Bing is the only market pressure keeping Google honest.
> Is there no longer a panic over letting an attacker know that an account does exist?

There's simply no way to get around this if users can pick their own usernames (other than assigning them in an unpredictable manner). In other cases, usernames being publicly available is a feature, not a bug.

[0] https://imgur.com/a/qCupYyQ
I disagree. People who care about not hitting 8.8.8.8 simply do not own a Chromecast.
OP said:

> The Chromecast Ultra isn't sold here
> 2. Don’t break completely on valid passwords because there’s a char you didn’t expect, testing is a good thing in security critical code.

I can't tell you how many sites won't allow passwords with quotes, apostrophes, or colons. (too concerned about SQL injection, are we?) And too many don't like high ASCII characters in passwords; no one's going to guess something like úú©íWq¿S®&ßþDx¼åi4ÒÀÛ'ÓªýS.¾¥ùìbÓöð
I've not really been a fan of sci-fi or fantasy, but this was an amazing reading. It straddled the line between what we see online today and that outlandish but seemingly very possible malfunctioning future.

Specially timely in light of the open.ai work shown yesterday on advanced language models [1]

[1] https://blog.openai.com/better-language-models/#content
AFAICT, this is kind of true for a lot of F#: F# is where they do the experimentation, C# is where they do the more heavily engineered "fast" version.
Two things

1) if the first table is self identified data I would strongly expect it to underrepresent how many people are mixed. Unless you have gotten genetic testing, it’s hard to know like I mentioned. And there is social pressure to identify as white.
2) Even then, whites are still pretty much a minority in most countries, especially the ones that have more significant immigration to the US.
It's convenient at signup and every login, and with a company Google Apps account, especially convenient when a person joins or leaves!
> Most people I know use a tiling window manager with terminals. So plain boxes with text in them seems to make sense for many people.

As my human-computer interaction prof said back in undergrad: You are not normal. There is a reason that no modern operating system outside the "Other Linux/BSD" bucket ships with this as a default.
Resting needs feebacks
Hi everybody,

this is my side project Resting (https://addons.mozilla.org/en-US/firefox/addon/resting?src=external-hn)
Resting is a firefox addon to test and analyze REST API.

It's under hard development and I need feedbacks about to understand if I'm following the right way.

Thank you for every feedback
Mirko
As a European early adopter I still remember the day i switched from recommending Altavista to all my friends and family to Google. Speed was definitely not the reason. It was purely about the usefulness of the results. There was just a point in time where Google surpassed everyone else in relevance of the 1st page of results, and there was no going back.
I agree. It has the flexibility of Scala without the extra power/abstractions Scalaa gives you. I don't love Scala's flexibility but I put up with it because of its power, the trade off isn't worth it for C# to me.
Not so nice for the next guy, though.
OpenCollective's method of emailing you a link that sets a 30 day cookie is a pain for me as I have to be logged into my email on another tab and it seems very insecure to me.
I would argue that this level of dedication would be within the top 1% of credit card users and that probably is beating the system. Product prices are increased, but since the price increase is spread out among everyone (including those who pay cash), it seems likely to me he makes a good return. Maybe not $/hr, though.
"Virtue" itself seems to largely be a tautology backed by the status quo and inertia as opposed to outcomes or impact on how others are treated.

The gladiatorial colloseiums, hunting hellots as a rite of passage, and human sacrifice and flower wars were all "to promote virtue". All it needs to do is be sustainable and self-perpetuate - not be optimal or righteous in any way.
A proper Turing test allows you to ask questions whose answers must indicate novel introspection, learning, and social awareness. It's absurd to think any computer system today would pass such a test.
But they're not competitors. They just happen to provide the same service.

Cooperation is the way to maximize profits for both companies.
Something embarrassingly small. It’s not worth it.
This is zone of the things I like more about HN. You read a random answer to a comment and end up discovering he's one of the original authors of QT. Thanks for the nice work!
Local functions can be a serious win over the alternatives of far away functions with no closure semantics or huge lambdas.
I'm sure there's a use case for this but, for me, it's pretty rare to need pull new data or persist anything after most events, let alone every event. A single fetch and single save is usually all that's needed.
FWIW, Chrome does this as well. Its DNS prefetch feature will ignore your local hosts file and configured DNS servers. It creates annoying problems if you have a VPN where some hosts resolve differently than they do publicly.

Granted, in this case if you block Google's DNS servers from routing, Chrome will use your system's name resolution configuration.
I mean, yeah, that's good for a limited pool of consumers (myself included, as well), but really we're just being subsidized by other consumers who pay with cash, debit, or even credit cards that don't generate as high rewards. There's no reason Visa and Mastercard (as well as the banks) should be able to rent-seek the insanely high fees that they do on most retail transactions.
For my mother-in-law who can't keep her single, reused-everywhere password straight, magic links approximate a miracle. I wish Skype used them so we could save 15 minutes every time we want to video call.
I've noticed the same thing and have been actively working over the past 5 years trying to make introductory robotics approachable.

I've been a software developer for a long time, but robotics always felt like a mystery to me until I had someone show me the basics. I recently started a small company trying to teach the basics of robotics. The biggest challenge is that robotics have a real price attached that normal software development doesn't have associated.

With Javascript, I just need a text editor and a browser, but with Robotics I have to make the leap and purchase a kit and trust that the kit will do enough to teach me what I need to know to get started.

We designed and built a low-cost kit and have been using it in middle-schools throughout the southeast teaching kids the introduction, and so far that's been working really well.
Yeah, but the recipe isn't the same as when the conquistadores discovered America.
Unless changing the past splits time into 2 with both outcomes.

Many-worlds [0]

[0] https://en.wikipedia.org/wiki/Many-worlds_interpretation
"It's foolish to assume $2 is more valuable than $1 just because it has more purchasing power."

Humans are more valuable because we have more power. That may not be a suitably saccharine notion for your delicate moral sensibilities, but reality isn't really designed to appeal to those anyway.
I thank you for the opportunity to describe the changes necessary. People will test my statements: is it really that important to be vegan? How much does my travel impact climate change?

With even a small amount of research, people will discover the importance of these changes and might join me. Compared to optimism and platitudes, my comment describing what I'm doing could be the most important one I write today.

Thomas had an important role.
You are playing a mini-game to increase Visa & co.'s profit margin.
When to use different machine learning algorithms: a simple guide
Definitely don't do it through VR. You have FEEL the consequences of violence, not see them. Seeing the consequences means you see it on others which makes it a very abstract concept. You have to feel it yourself.
My biggest (related) one is…

In the sign-up process, validate the email (don't trust the user). I get a lot of emails that companies never validated, including for a while, from Wells Fargo.
Deblasio was also involved in the negotiations but yes, this is the real reason why this didn't go through. I can't imagine how much additional red tape would be tacked on if state and city legislators got involved in the process so I can understand the want for secrecy.
Of course. They also share most of their customers. Their business model is the same. A lot of their metrics probably trend similarly. Each would definitely know what the other is up to without talking directly.
But fragmented. The word was fragmented.
The worst offender I have seen in the wild is treasurydirect.gov. The password must be click in on an online keyboard, and they do not allow password managers to enter the passwords.

Screenshot here: https://en.m.wikipedia.org/wiki/TreasuryDirect
TIL. Thanks for sharing!
Rather than trends, I picture waves of bad advice that surge forward and then are slowly retracted.
From my own experience, it's well above minimum wage, and even very pessimistically, above $150/hr. There's a high hours/$ learning curve up front and then after that you just do it on autopilot and it doesn't take any time at all.

(IME, CC bonuses are less time intensive than checking/saving bonuses. You just sign up for a new card off one of the blogs that tracks current offers as soon as your min-spend is met on the last one, and put your ordinary spending on the new card.)
I think the AWS failures on iops tests should've been examined more prior to publication, or at least explained more to the reader.

AWS General Purpose EBS volumes scale based on volume size, so a purely naively-done test with a default AMI's performance could be as low as 24 iops (8GB*3 IOPS per GB) once exhausting it's burst iops quota. I think it's unfair to compare apples to oranges here, as you can make these volumes scale to absurd numbers, if you have the cash.
I don't understand, why does he have a google product if he doesn't want to support google?
also, you skip email validation (which is a PITA) and google store's the user password instead of yourself.

kind of a win win imho.
Is Burning Man casting out the super-rich?
How is it that you could refresh your supplementary index and then couldn’t?
@rpath is pretty standard. It works on both macOS and Linux, although many of the details are different.
it sounds like it does a "best effort" and then gives up, unfortunately, the article doesn't describe exactly to what lengths it goes here.
Take something like curve fitting. That's not done based on some rigid methodology it's based on best guesses by the individuals. And because you are dealing with something as politicized as climate change that basically means that the validity of these metastudies is at least questionable.

Keep in mind without climate change fear there is no need for climate change scientist. The climate is always changing but the scientists can easily cover that.

You should at least apply the same kind of skepticism to the climate change scientists as you do to the oil industry.

The climate is changing but lets' stop pretending the hockey stick is science. It's not it's an interpretation of data a very very very different thing.

On top of that. The claim that we only have 12 years left to do something about things is NOT science its speculation based on interpretation of the available data.

Of course, the models aren't science. If it was science we wouldn't have different outcomes based on different inputs. We wouldn't be talking about a spectrum from almost nothing to +6 degrees.

What exactly did they predict though with regards to the martian weather? It's is orders of magnitudes simpler than ours so that's not really an argument and no you can't trust the models cause they are based on very different things.

What I am saying is that neither you nor anyone else has shown scientifically demonstrated consequences of climate change we don't know how to deal with.

So I would love someone to be specific with showing something we don't know how to deal with and which would warrant some of the more extreme proposals we have heard such as ban fossile fuels and subsidies to sun and wind.

And I am saying there is plenty to worry about in your local environment which you can actually do something about and which is sustainable change.
Does FB have an AdSense-like offering?
And what was his first company?
As if Linux is any better, specially regarding glibc.
>We need more workers of all skill levels in the US.

Do we really though? The actual unemployment rate is about 8% representing over 10 million unemployed Americans, personally I think they should be the priority. I'm also skeptical of expanding our population indefinitely, our infrastructure is already unable to handle the amount of people using it- ask anyone who commutes to work in LA traffic
Classic Behavioural Studies Flawed (2009)
> Thanks for being respectful and well-reasoned in your response.

Likewise!

WebAssembly is a very good counter example, but still my feeling – or fear, really – is that this is not in spite of Google's hegemony but because of it. Let's say they hadn't gotten on board with WebAssembly and instead doubled down on PNaCL or come up with a different competing proposal. Even if all other parties rallied around WebAssembly there's a very good chance the dominance of Google would make it stillborn. If it's not in Chrome, it's simply not worth bothering, purely due to its dominance.

I recognize though that this is a bit of a straw man argument, and one based more in my opionins and feelings in the matter rather than anything resembling objective truths. I suppose that's also why we'll have to agree to disagree. :o)

> We're far from the days of ActiveX.

Thankfully!
Thousands of french millenials getting hit by the nostalgia feels as they read through the README.
It is a natural alternative. The "simpler but more cores" project works on paper (i.e. potential instruction throughput). In reality it falls apart for variety of reasons. The most fundamental is because of
the difficulty of exploiting thread-level parallelism. The complex Out-of-Order cores do a really good job of improving throughput by finding independent instructions to execute in parallel. The path-to-parallelism is much easier at the granularity of instructions than at the granularity of cores. Parallel programming is hard. Amadahls law cannot be avoided except through ----- speculation, so we are back to complexity again.
That could be Apple’s next naming scheme: iPhone XR Max Turbo Laser
A lot of our users would complain that writing on our product support forum was hard.

Since we added those option, the friction is gone.

People who need help that can be boiled down to "Did you plug it in? Is the battery full? What about turning it off and on again" have a hard time understanding how to register an account. Thinking of a strong password and then figuring out how to click on the confirmation link in their emails is apparently the hardest thing to do.
I love DO, but man in practice the CPU performance of their machines have been horrible in my experience. Like 2-3x worse than the same $ spend on ec2.
You might like project naomi.
So, it's OK for a group of, say 20 people to have enough disposable wealth to pool together to fund the amortized annual expense of buying and maintaining a superyacht.

But it's not OK for one individual to invest that money for 20 years and then buy it.
Yev from Backblaze -> We do have a drive crusher in the office, but mostly use that for small externals. It's quite satisfying!
EC2 (EBS in particular) has always had lackluster performance from my experience, compared to the alternatives. To be honest though, relative performance has never been a factor or even a consideration in most of the places I've worked at.

I'm not saying that to minimize the issue either, it's just that enterprise users/management simply don't care.
1. most files in /usr/bin are much smaller than 100mb when statically linked; 100mb is for e.g. gui applications

2. Even in an absurd world where each coreutils executable required 100mb of libraries, a busybox-like delivery would already shave ~10GB off of that. Other improvements can be made: binary deltas for security updates, performing the final link step at package install time, probably others.

3. libc updates have introduced security issues; shared library updates in general break things. I can take a statically linked executable from 1998 and run it today.

Lastly, this is totally unrelated to the question because 971 statically linked command line applications will be well under 1GB, but a 250GB drive? The last time I had a drive that small was a 100GB drive in a PowerBook G4. Linux (and p9 from TFA) are OSes used primarily from the developers (at least until the mythical year of linux on the desktop). Springing $200 for a 512GB SSD upgrade seems well worth it if you are being paid a developers salary anywhere in the western world.
And my question again is simply what do you propose we should do collectively that's not going to be just as big a threat itself?
The US should have pulled out of NATO a long time ago but empires of even that sort are hard to give up. The EU is more than capable of providing for their own security and perhaps having to do it all would make some wavering member states understand that they are truly all in it together.
I agree to some degree. I think we have replaced a lot of physical aggression with psychological aggression which in my view can cause much deeper and longer lasting damage.

When I see some parents these days I prefer getting a spanking and be done like it was normal in my youth instead of ongoing emotional blackmail some parents do these days.
This guarantee is one TOS change away from vanishing...
That's dangerous advice. Having access to some (or a combination of) "less-secure" accounts could allow an attacker to get enough personal information to escalate privileges through reset fields, social engineering in customer support, or just plain weird interactions between accounts.

Besides, most people have enough "important" logins (social media, email, amazon, bank(s), computer, cloud accounts) and some have lots that there's no good reason not to use a password manager. Even with 6 passwords to remember (plus a 7th for all the non-sensitive accounts), it's hard to make them unique enough, and if you end up with a system it's pretty easy to infer the rest of the passwords.

Imagine this scenario: you are an average person. You have 90 accounts each requiring a password [1]. 5 of them you deem sensitive enough to have their own password and 85 of them share a password. One of those 85 is compromised. Now you'll spend all day stressing out whether one of those 85 accounts, in hindsight, is actually something you care about at least to some extent. Desperately trying to remember whether there were any other accounts that you should've secured better. (Anecdotally, this has happened to me before a password manager: I had different logins for important stuff and the same for non-important stuff; it's also happened to most of my friends at some point.)

Or you can use a password manager. Once you do have a password manager, you can go ahead and have unique random logins for everything, there's no extra effort needed. 2FA is another important security measure.

In regards to rotation, I agree, and NIST doesn't even recommend forced rotation anymore[2].

[1] https://blog.dashlane.com/infographic-online-overload-its-wo...

[2] https://pages.nist.gov/800-63-3/sp800-63b.html#memsecretver
Before we break up Google and Facebook how about we take a look at collusion and behind the back deals happening in these companies. This duopoly has been levying tax on huge chunk of transactions happening all across the world. How have they avoided scrutiny for so long?
If Plan 9 guys really thought shared libraries were bogus, they wouldn't have created the follow up version heavily based on dynamic packages for Limbo.
Juniper Networks CIO Reflects on 7-Year Cloud Initiative
while its true for amex, i dont think discover fees are any higher than visa/mc.

square lists discover fee 1.56% – 2.3% and visa fee at 1.43% – 2.4%.

of course, fees are negotiable and much less for the physical retail. durbin amendment sets the limit on /debit/ fees at 0.05%+$0.21
ping yahoo.com

Old habits die hard.
Businesses don't want working markets once their position has been established.
"Text pages of DLLs are shared between processes"

I thought this wasn't possible with ASLR'd relocations all over the place in the text?
That's income per capita, which is a little bit different than wealth.

There is no place, in the US, that rivals the wealth and power of NYC. Now internationally, that's where you start to get your Beijing's, and your London's, and your Tokyo's, and your Monte Carlo's, and your Paris, and Shanghai's etc. But in the US it's NYC at the center of the preponderance of wealth and power. Only place in a position to make a run at NYC is DC, and they'll need a lot more than Amazon to do it.

(There's also LA and Chicago, but those cities are not as "powerful", nowhere near as wealthy, and to be frank, making a run at NYC is not their ambition.)
Doesn't matter, "burning man" can happen anywhere it's just an idea. Set up for a few nights, tear down leave absolutely no trace.

It's the concept that matters.
https://www.nytimes.com/2019/02/15/us/politics/national-emer...
Yeah, no true scotsman links his executables dynamically.

Also, this is the definitive classic take on Dr. Epper.

http://linuxhaters.blogspot.de/2009/05/tribute.html