skysight-inc/HackerNews huggingface dataset:
We are pretty open here in the US, sure. I mean I'd never expect things like [0] from China, let alone (what I'd expect to be) comparatively loud work coming from academia.

I say let them keep trying, with some security tweaks here and there as needed/justified. But redouble our connections with academia. We need to harness massive growth in the face of such a conservative opponent, not more excuses to slow things down and stabilize around security so soon.

0. https://madsciblog.tradoc.army.mil
‘Privacy-Focused Vision’ for Facebook
I don't know about others, but I would rather Instagram stay separate to facebook. I know it's only messaging, but it's a step in that direction.
Here's the kicker, which I think others have pointed out, but I want to say this succinctly:

First, to quote the article:

> The big gainer, interestingly, is under the same roof as Facebook. It's their co-owned Instagram

Now, to my point: The average person does not care about privacy, just the illusion of privacy (I suspect people reading this site intuitively know this. At some level, nearly everyone is in different ways, it turns out.)

Instagram provides that illusion by not injecting opinionated content into your feed (The most obvious example: you aren't seeing injected news stories in your Instagram feed, generally its only ads and people you follow, and the ads are marked)

Rest assured, they're getting their data's worth, maybe not the same way, but photos (particularly metadata on the photos that most smart phones, for instance, default collect) are just as (if not more so) valuable, not to mention there are still a myriad of other ways of collecting privacy intrusive data about users.

Hows about that?

(just to show my assertion is not completely unfounded, check out this survey:

https://www.pewinternet.org/2015/05/20/americans-views-about...

The survey says: 9 out of ten americans care deeply about privacy (particuarly around data privacy and collection)

Yet, our actions, even faced with the outright knowledge of those very things being actively and routinely violated by services, is not enough for people to leave platforms for good, simply, people shift between social media outlets, like those leaving Facebook over privacy concerns yet still continue to use Instagram, in fact, Instagram is projected to grow as noted in this article, in part because of people migrating away from Facebook)
Well, not unless they consider their users to be dogs.
It's fairly common at my university. You publish 3 papers surrounding a singular theme or topic and you use that for your PhD. You still need to write an intro and have some boilerplate stuff, but it's not uncommon at all.
Sometimes I wonder if all journalists do is browse reddit all day. Invariably, something I see on reddit gets a "news" article a few months later.

The last blockbuster apparently has an official beer too.

https://www.reddit.com/r/mildlyinteresting/comments/9tx0y3/t...
So people who die in war don't benefit from the war... and?

My point was that war is not always entirely negative if you zoom out far enough. It can be entirely negative or partially positive, just like many other things. Would you rather the British to have surrendered to Hitler and the Americans refuse to fight in WWII?
I travel a lot and enjoy taking pictures and sharing them with friends so Instagram was a lot harder for me to give up then Facebook. I just disabled my account though and so far it feels like a positive move. Instagram isn't entirely without benefits but overall it just started to feel like an obligation and a distraction.
Now, Everybody---

It's hard to pinpoint a "best," but I agree that this one (from Gravity's Rainbow) it quite, quite good, one I recall often.
Then you lose Amazon's main value prop: Limitless selection
~~~I'm making it up~~~

You , my friend, didn´t made it up. I am sure.

I am sure someone else made it up.

You better eat the Evil Itself, Magnesium powder, then eat literally Shit. But maybe is a hard choice between Magnesium and shit (literally, poop) and Magnesium powder or even Almonds, that contains Magnesium, in my eXperience, like in a federal good wife´s court, your Honor
> Instagram and WhatsApp are running strong with barely no competition

TikTok
¿En un lugar de la Mancha...?
The scammers aren’t there because of prostitution, both categories are there because Craigslist attracts unsavory parties and does little or nothing to police them.
Glasses can have a markup of 1k%. Former LensCrafters executives reveal why
My mom died a few months ago, she just turned 63, from the damages of smoking, even slightly like she used to, and stopped 6 years ago. It was rapid, painful, suffocating, and unstoppable.

I was already before that not a fan at all of cigarette fumes, since then, it just strengthened my hate for cigarettes
There’s been a lot of press recently about shady data brokers selling information to Facebook. I would be genuinely surprised if those same data brokers don’t sell to google.

(In addition to full time data brokerage firms, there are third party phone app api’s that slurp data and feed it to advertisers. Facebook has at least one. Presumably google does too...)
Actually the battle scenes in War and Peace were written under significant influence of Stendahl's in la Chartreuse de Parme. I don't know, how the French treat their novelists, but from a Russian perspective, Stendahl's a big literature, and Hugo more of a teenage reading. I'm pretty sure Tolstoy shared this view.
Plus, the groove on the outside is moving past the needle faster than the inside. The best sounding track on an album is going to be the first one.
How do you do it? I find myself so wrapped in what feels like a fundamental struggle for our future, which could be so amazing or so horrible depending on the glacial shifts in collective will and which I may be able to influence if only I ignite enough low-bandwidth arguments.

Posting is warfare.
SAR = search and rescue. It is pulling wounded people off cliffs or burning boats.
I can surely do a pre-order DFS and record the order of the nodes I visited, and then another DFS to modify the pointers? That would still be O(n).
I would have faith in the survival of facebook if whatsapp and Instagram stay with their own brands, but this move seems suicidal in sullying them with the Facebook name.
I frequently find myself thinking the Greatest Novel Ever Written is either War and Peace or Anna Karenina, depending on which one I re-read most recently.
You know, I have one that I found at an estate sale in upstate NY. It was never used. But I just can't bring myself to sell it.
The OP’s entire point is that effectively no one has looked at the whole process in a more robust way than the Google Chrome team. They are literally at the vanguard of that issue, yet they got owned up by a well known code problem.
Tell that to some investors in Toronto, I think they missed the memo. :P

https://business.financialpost.com/personal-finance/mortgage...
> You can't steal in the course of an investigation what was already stolen as part of the crime.

Sorry, what?
> Can you provide an example of a dangling reference of any type (not just a UAF) being exploitable for RCE in a managed language like Java, Rust, or Go?

The point is that it doesn't matter what language is hosting the JIT. You can write this same bug in a program with a JIT hosted on the JVM, in a Rust program, or in a Go program. The code generated by the JIT is the equivalent of C FFI or an unsafe block, which completely ignores your "managed" language. V8 calls directly into and out of the JIT heap with a couple stubs a handful of instructions long, code in the JIT heap is whatever you generated, and can do whatever you told it to.
Huawei is suing the US government
You think you're safe with your 30,000 tools -- yet all of your crypto funds are in bitcoin? Centraliser. I spread my wealth across 30,000 different currencies.
You’re forgetting about the opportunity cost of locking up all of that capital in an asset that has a high carrying cost (maintenance, taxes). The initial downpayment could have been used for other investments, so you have to compare how much you could have earned if you’d invested and rented instead of bought the house.

https://youtu.be/NZR_vMTLfIk
I co-run a small board game group in SF, and we have been using FB for years to organize events.

I've considered moving to eventbrite or meetup.com, but the app buy in with FB and FB messanger means we can post an update or send an IM and assume people see it, which isn't the case with either alternative, unless people check email.

I really wish there was a ubiquitous open standard open source IM client, so people could download one client and use it for everything.
fox outlines “chicken safety vision”
I think it's just a UI dark pattern now. It doesn't look like you can skip past the email, but you can. As of last month at least.
Vintage computing used to be fun because it was cheap. Not too long ago exotic computers were sold for their scrap metal prices.

It is still unbelievable to me to see a cigarette stained 386 selling for $500.
https://xkcd.com/927/

Unfortunately, this happens way too often.
Parent-child play: It’s constant and exhausting, but is there a better way?
Mark Zuckerberg Discovers Privacy
Male and female actors rarely compete for the same roles. Many other jobs in the entertainment industry are dominated by men. Orchestras used to be, but blind auditions made them more balanced. Just pointing to the entertainment industry doesn't disprove a connection between sexism and gender imbalance.
Except CPUs hit 3ghz back in 2002 and have, in terms of what most of us use, stayed there. The grown in CPU clock cycles has not kept pace with the improvements in CPU speed that have come from superscalar CPU designs and specialized instruction sets. On the timeframes being discussed, it's a comparison that will underrate how much CPUs have changed since then, even on a per-core basis.
Even if they do, there's variation in what "full screen" means. Some people have the bookmarks toolbar enabled, others don't. Some have compact icons, others don't. Some keep a sidebar open, others don't. Some use a theme that changes the size of toolbars. Some have a dock/taskbar always visible, some have differently sized taskbars, etc.

This all leads to a huge variation between users of even the same screen size (e.g. 1920x1080), since the portion of the screen available to the page is different.

The Tor browser fixes this by having the window always be the same size on all machines, regardless of screen resolution. This is a bit annoying because it means you have less stuff on the page visible at a time, but since it makes you look the same as every other user, it's worth it for privacy conscious users.
I think they do actually care about privacy but are only ever offered illusion.

The problem really is lack of choice.
Does any know a scientific estimate for the mass-equivalent of all electromagnetic energy in the universe? Also, can the Cosmic Microwave Background mass-equivalent be separately estimated?
I'm mostly basing my comments on my knowledge of what the jailbreak community has made public so mistakes are likely me misremembering or not fully understanding something. Is there something in particular that I got wrong?
Like XMPP https://xmpp.org/ ?

I'm with you, and I didn't mind XMPP (having implemented a Jabber server before, it wasn't all bad)

Same deal with IRC (which I think is the best protocol wise).

They all suffer from the same problem: the openness of the standard is not data collection inclusive. The upside is better privacy, the downside is its incredibly hard to fight spam in such wide open systems.

Also, for a the briefest of overviews about the some notable issues with mass adoptions on XMPP, check this:

https://blog.samwhited.com/2019/02/whats-wrong-with-xmpp/
As a real-boy faculty member it's not just the power differential but the utter unwillingness of other faculty to police the actions of their peers.

Literally, they will observe that behaviors are wrong. They will tut-tut that so and so shouldn't do that. But given the chance to actually take action, they suddenly are unable to find their voice.

It's embarrassing. Everyone claims collegiality is important...but this isn't collegiality. It is the co-option of collegiality to protect bad faith actors. These are not accidental things or one offs or misunderstandings...these are malicous assholes who thing they are gods gift to research. The reality is the people who behave like this rarely make good researchers.

When you hear a story about a faculty member behaving poorly, I guarantee you that other faculty knew and did nothing. Remember that. The only reason they are letting their colleague fall under the bus now is because their behavior has reached the point where there are going to be consequences. They don't want to get caught up in that so they run like rats from a person who's bad behavior they have long turned a blind eye too.

One of my favorite things to do to disrupt these discussions is to consciously reframe discussions of 'students v. faculty' type nonsense into 'people v. people.' If you don't let them implicitly otherize a group but rather make them do it explicitly they won't. These types are totally okay talking in demeaning ways about students but when you refer to students as people they balk.
Stendhal also has a description of Waterloo in his Charterhouse of Parma, but I think Hugo did a better description, besides it appears Stendhal wrote Charterhouse in a great hurry, as I recollect, he finished the whole novel in 52 days, I do find it not as finely turned out as Les Miserables.

The problem with Les Miserables is that of wide circulation of translations which are actually abridgements, I fear many readers would have missed the grandeur of the whole unabridged novel. Same seems to be the case with Count of Montecristo.
Synthetic aperture radar. Perhaps the full body of the world’s knowledge extends a bit beyond your small bubble.

Considering the way you lambaste ideas that it is becoming increasingly evident you don’t fully understand, I’d be interested in your credentials.
Anyone starting out should know about GSV
I'm not a rep for the company or anything, I just discovered this through Product Hunt but the GSV Labs Passport is a program where you pay $600/yr and get $100,000 in AWS credits plus a whole bunch of other credits to stuff like Watson, Segment etc but for the AWS alone it's worth the sign up. I wish I knew about this years ago solely for the database savings. Figured this was a good group to put this in front of.
Ask HN: Best Practices for End to End Crypto with Multiple Devices
So end to end encryption between two online devices is relatively easy... they exchange public keys (preferably new but ephemeral keys based on initial with every message, so people can't decode past messages if they get key access).

Things become more difficult when users expect to be able to access their information from multiple devices, maintain that information over a period of time, when users aren't online 24/7, when you aren't using some sort of central server to handle introductions/discovery but instead some sort of distributed hash table or decentralized protocol, etc. Things get complex quickly.

So I'm wondering what the current best practices are, and what papers to read.
After reading this, the cynical part of me would say that the start-up world is in competition with the academic world to recruit the best talents. So, it keeps publishing biased articles about the drawbacks of doing a PhD. For similar reasons, it also publishes articles about bad experiences in the corporate world.

However, I do remember that, during my PhD, about a third of my lab mates had some kind of mental breakdown. Some suddenly cut the bridge and stopped going to the lab. They would not answer to emails or phone calls.

I would say that in the CS fields, successful PhD are most often a very positive experience, and bring a lot of professional opportunities. The program itself is very intellectually satisfying. And now, many of lab mates have very exciting jobs: startup founders, top AI scientists/engineers, professors.

However,some students that were used to study very well and have top grades, once they started their PhD program, felt completely lost and hopeless in this totally different way of working and thinking. They had to work (mainly) alone for years. So, if no output came out, they felt very depressed. On top of that, the failure to publish usually extends the length of the PhD program...
Guidance for Building a Control Plane for Envoy Part 2 – Identify Components
You can't. Even if you block JavaScript, they can still get it from CSS media queries, where the can say which file to download given a certain screen size.

The best solution is to use the same screen size as everyone else so you don't stand out. And that's what this does.
They measure counterfeit complaint rates with a PPM metric.
Why do you need App when you can browse HN in preinstalled browser?
They claim to be merging 'traditional' search results from multiple providers, explicitly calling out Oath (Yahoo) as well as Bing. So, hopefully, substantially. Realistically, somewhat.

[0] https://duck.co/help/results/sources
Nothing AFAIK. And that's not surprising to me; the locomotion requirements are very tough.

It has to be able to fit anywhere a small adult can fit. It has to be able to climb anything an adult can climb. There has to be a workable communication strategy (wirless, wired) through tunnels of solid rock. And it has to all that well enough not to need frequent retrieval.
Building a Control Plane for Envoy Part 3 – Domain Specific Configuration API
Best blog length in 2019 from the SEO Perception
IDA developers get paid. My company alone probably gives them more than two million dollars per year.

If we switch, it will be to Ghidra or to Binary Ninja.
I use a mobile app and have gotten errors saying I need to solve a captcha. Since I can't do that on this app, it just means I'll stop commenting for a couple days until HN decides to stop bothering me.

That's happened twice, and it really hasn't been a big deal. I've never actually done a captcha for HN, it's just not worth it to me.
> an asset that has a high carrying cost (maintenance, taxes)

I don't know who you think ends up paying for maintenance and taxes in a rented property - it's the renter, through their rent.
I'm not sure. I'd say the banking crisis was catalyzed by the lack of regulation, but it was going to happen anyways. The whole thing was largely a result of political pressure to create incentives for a home ownership society, and, if you go deeper, a result of political pressure fostering a growth-at-all-costs economic system that will periodically hit societal resource and efficiency limits, regulations be damned.
Very very important :)
OK, but this bug isn't in jitcode.
I was investigating massive reforestation as a means of reducing greenhouse gases a few days ago. I stumbled upon this hyper-dense technique called the Miyawaki method [1]. Sounds like it's resource-intensive upfront but might be self-sustaining after that. The guy mentioned in [1] has open-sourced the methodology here [2].

[1]: https://fellowsblog.ted.com/how-to-grow-a-forest-really-real...

[2]: https://www.afforestt.com/methodology
Or maybe they make more off of ads per month than they think any reasonable user would pay.
Oh they already know who you are. Too late to fight that fight
Show HN: An alternative to Apache / Nginx config hell
Concept wireframes: https://imgur.com/a/Qyvq5HF

HN,

I've been chronically frustrated by how challenging it is to configure nginx and Apache config files.

I had the idea for a simple, intuitive interface that could automatically generate and manage htaccess and SitesAvailable files.

Does anyone think it would be worthwhile for me to build this?
Yeah, if only there was a tool for managing 30,000 wallets in a centralized way, then it would be more obvious why decentralization makes the need for regulation moot.
Pachyderm Raises $10M and Is Looking for a Lead Enterprise UI Designer
World’s first jetpack motorcycle, The Speeder
You're downvoted because a significant fraction of HN readers live in leftist filter bubbles and are never exposed to serious criticisms of their ideas.
If you're going to go from a planetary population of 8 billion to one of 800 million due to global warming, I'm pretty sure that there's going to be a lot of "not because of old age".
I wouldn't go after a PhD unless being born into a rich family (with a potential fall back). Otherwise its a ticket to an early grave and or lost earning potential. I've encountered a few colleagues who are beyond gifted in what makes them survive the trial. I had a roommate finishing his masters and going for the PhD afterwards. Guy was making bank by prostituting himself to women every few nights. Slept till noon before going to work on his research. I cannot imagine how hard it must be if someone is pursuing the degree without any wealth helping him/her out. I doubt scholarships would be much if any relief. I definitely can see persons ending up in psych wards or taking their life if it becomes too much.
Run a React App in Docker Container
All companies incorporate in the UK must file annual accounts with Companies House. Most companies' accounts are audited, but there are exemptions for smaller companies. Some small companies qualify for 'abridged' accounts, which means only the balance sheet is shown, not the income statement.

For free, you can access:

- All of the accounts the company has filed in the past

- The list of all directors

- Fixed and floating charges registered on the company's assets

All of these can be found here: https://beta.companieshouse.gov.uk/

The best you will get from the above is a snapshot (from 6-12 months ago) and some historical performance. It won't tell you about the future.

If it's a company with 2k employees, it's worth searching on Google and Reddit to find things posted by its customers, or employees of its customers.
Leaked Documents Show the U.S. Tracking Journalists Through a Secret Database
Seems really cool. Serialization is the answer: manufacturer sends exact serial numbers electronically before shipping merchandise. Serial numbers are scanned with barcode readers on entry to fulfillment center and as they are picked/packed for delivery. There should be zero chance of co-mingling if done properly.
Interface in Go can actually violate memory safety because of object slicing when racing on a variable concurrently from multiple goroutines (unless things have changed lately). It's two words (data and vtable) and so there is a tiny window in which one goroutine could change the data pointer while another goroutine is reading the two words, and so have a type mismatch that could probably cause arbitrary code execution in theory.

I've never heard of this happening in practice, however.
This reminds me of how accessible the equalizer was in Winamp. I spent a lot of time creating custom configurations for my music. I had no expertise and the results were questionable but it was fun. I wish Spotify was more fun.
> black tie ceremony

OMG that trophy is indistinguishable from any other tacky chunk of lucite that, say, a particularly motivated carpet distributor might earn as a sales award.

Not to insult carpet distributors, whose work with tangible goods is worth at minimum 500x more than what any fintech slob contributes to the world.
The Microsoft App Store is a complete graveyard so it hardly matters what they do or don’t do with it.
How do you keep them all in sync when you rip new music?
You're forgetting. All these are cryptocurrencies. You need to have more than that. I own 30,000 different kinds of assets. Stocks, bonds, crypto, I even own all of the funds. You're suffering from way too much centralization.
Hopefully this will allow the government to show the evidence they have on Huawei in a court of law.