skysight-inc/HackerNews huggingface dataset:
What's wrong with just taking a screen shot? lol
This is great! I love overnight trains!
This is the lesson to learn from Elixir/Phoenix and every web framewrok that does not come with a strong security concept: if you do not build solid authentication and authorization into the framework from the ground up, there will pop up bazillions of half-baked libraries and even more blog posts about how to do auth "the right way" and still there will never be the right way as long as the framework does not implement this.

Many eyes on security relevant code is one of the most important reasons for using open source frameworks for web development - so it is very unfortunate if exactly this part is missing, it will always look incomplete.

Of course this leaves room for professional services, I understand that, but I believe the damage done is greater than the opportunities generated. The current situation for "Phoenix auth libraries" is horrible - as a developer you will

* waste a lot of time researching and testing all the available solutions
* or just take one "random solution from the internet" that "looks good enough"
* or you will just implement another solution yourself.

Instead you want to build on the solution that is provided and maintained by the core framework community.

This is such a sad story. Elixir / Phoenix looks so nice, but without a strong security foundation it looks incomplete. Authorization and Authentication is not even mentioned in the docs - that is absurd!

I simply can not understand why the project leaders are ignoring this important area.
Yeah, I love the feeling when end up with your own answers... You feel so stupid that you didn't remember, but also happy that you wrote that answer back in the day ;-)
Acid reflux or GERD, sign, complication, and treatment
Upvoted, but such optimizations might exist for integer math, too. I’m not aware of any compiler that gives constant-time guarantees.

The best you can do is to write statements that you think map to certain instructions, and to check every release build to see what instructions the compiler chose.

You also may have to make sure that the buffers you use don’t cross page boundaries.
One thing that bothers me about new code editors/IDEs is that their developers really don't do a good enough job researching and deriving inspiration from the editors that already exist.

For example, I have yet to find any modern editor that draws inspiration from the brilliantly designed ideas used in Plan 9's 'sam' and 'acme' editors.

For example structured regexps, 3 button mouse chording, and the 'plumb' feature thats basically a context-aware, smarter version of a unix pipe between two executables.

I mean i can go on and on but another thing that i find absolutely annoying about newer editors is that they all use Webkit as the base of their apps core foundation.

This makes it irritating to consider trying to make changes to the code that I believe would overall improve the editor and make it more useful. (at least as far as im concerned)

I can literally make a list a mile long of things I like in other editors and wish i could see condensed into one ultimate code editor to supplant all code editors that had come before.
In this case, the trainride IS the vacation. You don't take the Trans-Siberian primarily to get from Moscow to Vladivostok / Beijing, but to check out everything else along the way.
This is a perfect example for software that tries to solve a problem that doesn't exist.

It can be done with whatever:
- record video (notebook / smartphone / ...)
- send / share / embed into some other software (messenger / wiki / ...)

You are obviously good at marketing stuff (to people who don't know better) and monetizing stuff that is basically free.

That cries for an award with a title like "silver ferengi medal" ;-)
> And with soft keyboards, touch typing is non-existent

I have to disagree here. Touch typing in the sense of feeling the keys is of course impossible but it is quite common to type on the phone without looking at the keyboard and without mistakes.

> Half of all emoji usage is drunk dials. The other half is precision cyber bullying and organized crime. Only the margin of error is left to be considered as conveyed in earnest by the sober minded, prudent and cautious fellow citizens we share the road with.

I curate my Twitter follows quite heavily and the few people I have there use emojis quite a lot and with obvious deliberation. I know it's popular to hate on emoji but looking down on all people using them is not useful.
The article reads like advertisement for A16Z.
While that's true at the moment, I had hoped that the web being such a big market, it would entice content producers to deploy without DRM for fear of losing market share to other content providers who do.

But with the introduction of DRM into the standard, this is no longer possible.
Languages change at vastly different rates. A new creole in its first generation of native speakers can evolve to almost unrecognisable by the second. Meanwhile, a language can be remain intelligible for millennia and many do.

Literacy, sacred texts and political stability are factors in language stability. So is the "one damned thing after another" path of history.

But to your question... I'd say English is the "outlier" or at least the example that needs explaining.

Old English isn't really English. A better name would be Saxon. It's far closer to other languages from the north sea mainland, and not at all similar to modern English. Frisian is still spoken, for example. It's basically a sister dialect to old English. Saxon was spoken by the "Anglo Saxons" who migrated to/colonized to Britain in the early mediaeval period. They barely wrote (Alfred's chronicles being a notable exception), and literacy was mostly Latin anyway. They were also a minority language for a long time.

Then the "English" (Anglo Saxons) lost political power to the normans. French came with the Norman Empire and Latin was the written & liturgical language. Various dialects of "Middle English" became "regional" languages alongside Irish/Scottish, Welsh/Cornish, some Danish, and possibly others. A lot of French got mixed in.

Eventually the Norman empire subsided or evolved into the British one, settled in England and "went native." They became the English nobility, and their posh dialect became early modern English (like Shakespeare).

Underlying a lot of this instability is the fact that Britain, Saxony and NW Europe generally was barbarian country. They (we) didn't live in cities, were borderline illiterate. Etc.

Old native traditions (ie, not Christianity) were remembered in epic songs and sagas, not books.

Languages evolve and get pushed up and down the pecking order much faster in barbarian country. Barbarian culture usually evolves much faster and more flexibly than conservative civic culture.

The parts of Europe colonized by Rome (the British outpost doesn't count) speak Latin today. None of the (more numerous) Roman conquests in "the east" speak Latin. The kept speaking Greek, Egyptian, Aramaic and such... languages that had been spoken and written in capital cities for thousands of years... even back then.
> Open-source projects never die

They do kind of die. Most of them, when the founder quits, the project just remains in github (etc) forever, not exactly dead but not alive either.

I am really in favor of companies that go out of business or products that quit open sourcing their software. I mean; all the popular Google products that were pulled, like Inbox, Rss reader and whatever more; why the hell didn't they open source those. I know ; probably something something legal, but that is a total waste.

I guess most companies, even after going out of business, will never do this.
Because most people need to be protected against themselves; a lot of people, even tech savvy ones, only find out later that their data has been stolen or their privacy breached.

I mean a random but common example is stolen credit card details. Out of automatism most people will fill those in when they're ordering something, without wondering whether the site is secure. And usually they are secure enough at the time of writing, only a few years down the line someone dumps them onto a public S3 bucket by accident. Whoops. If the system was secure by default - that is, CC data never passing to the webshop - that would be a preventable occasion.

Email in this case is the same - don't give FB access to your emails in the first place and they'll never be able to "accidentally" read all your emails.
That means if you have access to a LTO-6 tape drive (best price per TB right now at around 8,88€ per TB) it only costs around 622€ ($700) to create a backup.
I'm gonna take a punt on the root cause of this mess: cost cutting / bonus seeking managerialisim. In my experience people high up in the decision chain with no technical expertise often have blind faith in what "technology" can accomplish.
The user that found this and is cited in OP's article mentions there was no alternative to giving Facebook your password: https://twitter.com/originalesushi/status/111249895877604966...
There's no denying that Google of today is no longer the same as Google of the past, however the values their services provide to society are still enormous and far greater than most other corporations out there.

We have learned that Facebook were indeed running various online campaigns to smear Google's reputation, just to take the public heat and focus off themselves. Many people fell for those traps during that time. I personally feel that those effects are still lasting, or at least still lingering around the community even until this day.
The question here rather than why are you asking for mail passwords is what is facebook doing with the passwords? All possible answers seem creepy as hell.
I feel like I must encourage everyone to play Transport Tycoon Deluxe, or OpenTTD.
I enter it only once and then enable the fingerprint login
Can you provide examples? Some local stations in Australia have switched on DRM and I can't save anything. Over the air is still unencrypted though.
Thanks for this comment. I had no idea - other than regularly seeing POLi as an option (that my bank didn't support) when visiting some of the websites you mentioned.

I will certainly steer clear of this process in the future.
This is a perfect example of a comment that undervalues simplicity and ease of use (https://news.ycombinator.com/item?id=9224 is another one).
Apple still led the way: Because Apple did it, Android vendors followed suit.

Cryptophone and the other products were a niche market and no one really knows if they are good enough to withstand a nation state attack or if they are just good enough to provide better opsec for companies than regular phones did.
https://www.idpass.org/
Looks interesting. I will take a listen tomorrow on my drive to work.
> I was only pointing out that

No, you were pointing it out and then saying that the flaw of this system was that the judiciary could be corrupted.

> If there was verifiable proof on a globally distributed blockchain that evidence had been tampered with by a judiciary member of a democratic country

Putting aside the many many political and practical ways in which this fantasy will stay firmly a fantasy, why does this need a blockchain instead of simply a published list of documents, if this is globally distributed?
decentralized finance has a place in the present and future of our planet

There is no guarantee that decentralized anything has a place in the future. So far the trends have been depressingly centralizing, whether it's government, finance, manufacturing, or even our great hope, the Internet.
I've been on the wrong end of a couple of cell phone calls at movie theaters
Concert goers, Broadway aficionados, film buffs, and many more would not need to worry about such rudeness if theaters utilized jammers that kicked in the second the lights dim.
https://www.brouilleur-fr.com/brouilleur-2g-3g-4g-wifi-15
Sure, there's always emergencies, or doctors on call, or parents who must be sure the baby-sitter can reach them, etc. But those people should find a different way to spend their night out.
The pilots were trained on how to deal with a runaway trim stabiliser. The procedure hasn't changed from the old 737, the only thing that has changed is that it is that the failure mode is more likely to occurr on the 737 MAX.

From the article:
“A properly trained pilot should be able to solve an MCAS anomaly or any uncommanded flight-control input through procedures that are taught to all 737 pilots,” said Menza, noting that the emergency information Boeing distributed in December reiterated those procedures.

Here's a video of a competent 737 pilot showing those exact procedures:
https://www.youtube.com/watch?v=xixM_cwSLcQ

Obviously the MCAS system is badly designed, but any automation system can fail and pilots need to know how to deal with it.
Yeah we live in an age where professional athletes, musicians and celebrities play an integral role in shaping global socioeconomic policy.

What the fuck could possibly go wrong
Probably smart; if he makes any political statement, ANY, he'll draw in a lot of drama, media coverage, angry mobs with pitchforks - shit he can't and shouldn't be arsed with.
This also happened with routing messages - they are periodic and start at random offsets but they bunch up without added randomness https://ee.lbl.gov/papers/sync_94.pdf
Completely agree. I’m a very big user of labels. I have more than a hundred, and have set up about 50 automatic filters to apply these labels, so much that 99% of the emails I receive have at least one label applied to them automatically.

This extension is geared towards Inbox users who want some less UI overload but without all the automatic features. Seems more like a coat of paint than a plugin.
One of the interesting things I've heard the Soviets did [1] was operational research: The lifespan of a tank on the Eastern front was less than 6 months, and once in combat was less than 14 hours. Less than 1000 miles driven.

Knowing they didn't need a tank that lasted more than 1000 miles let them lower the number of parts and man-hours for each tank, allowing them to get them off the production line that much faster.

You can imagine what an advantage it was that the Allies produced four times as many tanks as the Axis powers.

[1] https://youtu.be/N6xLMUifbxQ?t=2295
Agreed, this is actually demonstrated by Anscombe's quartet, a set of "four datasets that have nearly identical simple descriptive statistics, yet appear very different when graphed" (https://en.wikipedia.org/wiki/Anscombe%27s_quartet)
Justices? Trump has nominated exactly one.
They really need to end these tax exemptions for planes. It makes no sense at all. But old treaties can be hard to end.
There's already small swimming pool complex in Mszczonów city, built on thermal spring source - hence the name Termy Mszczonów.

That pool is going to be a part of larger aqua park located 5 km away from Mszczonów, in Wręcza village.
The Mac or the Lenovo?

I'm not sure about the Macbook's bundled SSD.

For the Lenovo, I'm incorporating the cost of upgrading to a 1TB Samsung 970 Evo Plus NVMe SSD (which has a stated sequential read/write speed of 3500/3300 MB/s).

And because the Lenovo is not using a proprietary connector (as my current Macbook is) and does not have soldered RAM (as my current Macbook does), I can upgrade both of those components down the line too.
It is now April 3rd and Inbox is still working for me, both on iOS and Web. Is it too early to hope they may have changed their mind?
This is also what I used to do. But also, I think it's good to remember the master password, it's really the safest place where to keep it. I anyway moved away from LastPass to bitwarden, that has the same fingerprint functionality or a pin one.
It's too long for the HN title box (I tried to submit the same story yesterday), but I agree that it should have been closer to the actual title, like "NPM job cuts leave staff angry"
Hi from CodeX.

Currently we does not have ready to use implementation for converting JSON into HTML after saving. It is a trivial and specific task, that depends on plugins you use.

CodeX Editor is the previous "working" name of early version of Editor.js. We have decide to change name on beta-testing stage.
I'm surprised didn't expect those figures for Amazon sellers, sort of seems like a saturated marketplace with razor margins for most sales. Would you be willing to share a bit more detail on what kinds of things these fairly successful Amazon sellers you know of sell on the site?
CDU/CSU playing dirty tricks to avoid Bundestag vote on internet upload filters
You're completely right, fixed the suffix.
Thank you so much for your kind words
Ture, but for some companies the "technical phone screen" is multiple interviews + a take home. Etc.

If I get to skip 10+ hours of interviews and coding work, that's a significant time savings
> It's a pity that a man with such influence has no message that he wants to spread

Maybe he just like playing with computers?
Amazon consumer biz celebrates ridding itself of last Oracle database
If you are self-aware enough to write this comment, why wouldn't you be self-aware enough to think through the baggage which might hinder philanthropy?
At least they not afraid to kill semi failures
> and has use cases that beat regular cash,

Tell me.
Congratulations, Zuckerberg just beat Gates in complete lack of Ethical behaviour
Silly people want silly rolemodels? /s
It's the one thing I keep coming back to as well: https://news.ycombinator.com/item?id=19554475

Reminders among emails just makes a lot of sense. I'm going to miss them.
When buses are clumped like that, the leading bus shall not stop at the next bus stops until the distance between them becomes sufficient.
Best Free Logo Design Software
That is exactly backwards. Doctorow was the EFF representative on the committee, and the EFF resigned from the W3C as a result of them approving DRM. https://www.zdnet.com/article/eff-resigns-from-w3c-in-wake-o...
The sad story of people is that they give their email password to everyone who are asking, I keep telling my friends that please don't tell me your password and just type it but they keep laughing at me i.e: stop it! you and your crazy tin hat. it's the sad reality really.
This criticism refers to DeepMind's late-2017 results however. In late 2018 DeepMind have published a follow-up paper[1] in Science where they claim to have beaten Stockfish 8 under non-cherrypicked conditions, specifically the conditions under which the latter won TCEC 9 in 2016.

AFAIK there are no AlphaZero results against either the current stable SF release (Stockfish 10) or the SF development version which narrowly beat Leela at TCEC 14.

[1] http://science.sciencemag.org/content/362/6419/1140.full
This.

If you work in the field you know the 10-100 people who provide most expertise and you can build trust relationships with them by delivering interesting thoughts and then get their feedback on These ideas. That's the healthy approach. And if you work hard and the stuff you do is reasonable you will also become known in these circles.

Also technology can help weed out the complete b.s., see HN or Stackoverflow for examples on that.
From the information that keeps leaking out it appears the 737 MAX has some serious design faults.

What is going to interesting is to see how quickly the FAA certifies the new software changes this second time around.

The current perception would be the FAA was too quick to certifying the original MCAS as being safe.

I suspect the second time around that certification process is going to take a lot more time and effort and is going to be much harder to achieve.

And the final nail in the 737 MAX coffin might be that even when that certification arrives, Boeing then needs to convince paying passenger that is now safe to climb on board the aircraft.
I would think running your own foreign espionage operation as an American citizen would get you 25 to life. Or should.
> a service where millions of people are giving their banking credentials so some random startup can mine your transaction data

Wow, that's insane. I didn't think I'd ever be happy that all banks here in Brazil require you to install an invasive piece of software to validate your computer before allowing you to use online banking, which as far as I can see makes that sort of business model non-viable here.
Where's the slur? It's clearly a joke, and there's a link included if you didn't get the reference. I think it's absurd that Kazakhs would need to be protected from this, or that anyone would read my post as trying to elevate my country (which I never mention) over theirs.
You're the boss, but I'd like if you set a different tone.
If all three AoA sensors are mounted to the side, they're likely to freeze at the same pitch if they do freeze. So unless you have multiple different ways to measuring AoA three sensors do not protect against this failure mode better than two does.
The way I saw this done is through an iframe, I suppose it's something similar to 3DS/VbV (while ridiculously misguided, this iframe thing was done correctly)

But I'm not sure that's the way Klama does
Boeing announces its five GoFly personal flight device finalists
Despite claims on the contrary, the philanthropist model is a way for a rich person to use their money to control public policy and garner public support. I'm no expert on India, but with the wide scale corruption problem I'd guess they just skip the middlemen.
Same here. I even use SciHub to get my own papers. It's way easier to get them through SciHub then browsing through old file/folders.
If they're now an IA, they're not able to talk about their investments publicly? Doesn't that hurt the value proposition for startups/etc. taking money from the new a16z?
Everyone in the West should spend some time in places like India. Paying 21%VAT on everything doesn't feel so bad anymore!
Genuine question as I don't: what news?
Hi!, creator of Gimli here. i'll be happy to answer any questions you may have
Could the alternative be gasp not using facebook?
This sounds like you are calling me to work, I have sent you an email.
Automation is not bad per se. What I mean is that there must be an opportunity for human override at all levels of automation (and as seamless as possible) in case of machine failure. It does not deny that it could be done by one pilot only, or half a pilot or even somehow a remote human intervention.

When designing a critical system such as an aircraft, you must include human authority into it. No technology will ever be 100% foolproof. This is not a stance against technology, automation or innovation, it's a matter of concept : most of systems (and aircraft in particular) are human-machine systems.

You cannot design an unoverrideable automatic mechanism. Think of how you can appreciate the capacity of full control over your computer and your OS (happy OpenBSD user here, for the record).
try logomakr.com
Transferring money from one continent to another.
Kind of depressing that they gave up on the "GPs must have been operators" rule (presumably due to pressure by LPs or the press). Do any large VC firms still maintain that?
Downvoted - your Romanian stereotype is unacceptable and you need to know this
It has a big smile. How would you interpret this as despair?
You can't possibly be serious.

Google continues to make the majority of their money from advertising. And since those early days they have not released a single product which has helped to diversify their revenue stream. But they've had plenty of failures along the way.

Facebook is far more interesting in terms of diversification. Payments via Messenger/WhatsApp is going to be great for them and is already doing well. Spilling over into web services e.g. Dating is equally looking promising. And they've done okay in the enterprise space with Workspace.

Fact is that it's far harder to switch social graphs than it is to switch search engines.
Please elaborate. I'd love to hear the full story.