skysight-inc/HackerNews huggingface dataset:
Why do you assume Google wouldn't be affected by a Windows bug? Have you forgotten about the compromise of their corp networks by a Chinese APT in 2008/9 which leveraged Windows as the attack surface? The reason for disclosures like this to expedite bug fixes is because they have skin in the game.
Show HN: Boxball – Prepopulated Baseball Statistics DBs Using Docker
I think you need to treat "commonly searched" and "commonly hit by users while browsing" very differently. It's not popularity of searching or articles written about a CDN that determines the cache hits.
State of CSS 2019
Blackhats knowing is what makes companies patch the vulnerabilities. Not enough people care about there being an undisclosed vulnerability for the company to expend resources.
How is the Chinese government with regards to IT quality?

I've come to believe that most governments are inept when it comes to the management, security and general quality of their software.

With the government holding so much critical information, it seems a very obvious and valuable target for hackers.
Quite frankly, a multi billion dollar software company like Microsoft should be ashamed of themselves for not fixing a 0-day in 90 days. Even with all the non-coding involved and rolling it out properly they should probably be ashamed if they can't do it in a week.
> This is standard terminology within programming and cryptography

Within cryptography, yes, but in programming in general, absolutely not.

The cryptographic definition of constant-time postdates the algorithmic one by decades, i think. It's a shame the cryptographers didn't pick a different term.
Ah I see, that is quite unfortunate. I'm guessing the changes are mostly a cover for inevitably having to raise prices.

Also, I've been watching their stock price, so presumably they have been too.
CERN ditching Microsoft software, angry over price increases
Very nice service but how do you manage the CDN subresource integrity (SRI) if the packages are different for each individual user?

It's possible to check subresource with es6 module but only if you know the signature first.(https://stackoverflow.com/questions/45804660/is-it-possible-...).

Even Webpack will not handle it with webpack-subresource-integrity (https://www.npmjs.com/package/webpack-subresource-integrity)

Of course HTTPS is strong but not a foolproof solution against man-in-the-middle attack.
How to Raise Money Even When You Don't Have 'Traction'
You don't need to use these tools if you don't find it worth it. If you want to write the same sort of JS as we wrote in the old days you can still do that. If you want to write modern JS, you'll either need to restrict your audience to the most recent browsers, or you will need tooling to help you.

But it's perfectly possible to write a modern PWA using modern js, modules, and a library like react (loaded from a cdn) without any build step at all. I've done it, and it's not all that hard as long as you don't mind only targeting the latest browsers (and writing out a bunch of file names manually).
> "How would you model into code the operation of an elevator?"

"I refer the honorable gentleman to TAOCP, Volume 1, page N where DEK discusses this extensively."

I think it's V1 but it's been a while
Uh... What?

It's the reason Starbucks exists. People are on the go, and they don't want to make their own coffee.

This is literally the same as going to the corner coffee shop to buy a Frappuccino.
Going to Starbucks is not the same as having coffee delivered to your home, especially not if you walk there.
> Although it does provide shortcuts for automatically generating accessors which I don't think Smalltalk did / does.

Most Smalltalk browsers do actually offer this capability
> Processing foods is what likely helped Homo to get enough energy to evolve big brains.

Hm cooked food maybe; processed food, not really, at least according to the current definition of it.

https://www.foodindustry.com/articles/the-4-categories-of-pr...
I wish I could remember where I saw it so I could share it with you all, but the argument was something like using more voltage levels to fit more values in each bit of the IP address. (It was probably in one of the ietf mailing lists, this sort of crankery seems to get posted there often for some reason.)
Hyperspace in the 1970s: Tony Buzan’s early hypertext system for paper
> The sheer amount of unregulated, harmful practices that has come to define our current lifestyle is abominable.

As someone who is tired of hectic urban life, I certainly concur with the above statement. It is an extremely disturbing trend. I know I don’t want to turn a blind eye to what is happening, but at the same time I don’t know what else I can do except being stoic.
Microsoft is one of many companies that did things like that in the past (and some still try). This abusive behavior in the past is why many groups have strict release policies after some amount of time, and even why some people will drop anonymous zero days. You cannot trust these companies to do the right thing. Time and time again they have gone as far to attempt to make security research illegal.
Apparently not big enough of a threat to organize protests as big as those in Hong Kong right now.
> Practically every image editor on the planet

I do not have many editors installed here, but Paint does have all formats on Save. Paint Shop Pro also has all formats on Save. I do not have it installed, from what i can see in the documentation[0] Paint.Net also has all formats on Save. LazPaint also has all formats on Save.

I'm sure i can find many others if look for (i think GraphicsGale for example also does that but i'm not 100% sure). Those are from the top of my head.

Maybe with "Practically every image editor" you really meant "Photoshop"? Because Photoshop isn't the be all end all of all image editors nor all image editors are meant to be Photoshop clones.

[0] https://www.getpaint.net/doc/latest/FileMenu.html#8
Wouldn't be surprised if they made the whole thing up. Perhaps they can get more for the content this way. Nice hype boost.
To be honest, I don't get the mania for processed meat substitutes when there's excellent vegetarian/vegan fare from cuisines that have been doing it for millennia.

There's a term for vegans who don't actually eat whole foods: "french fry vegan". It's as derisive as it sounds. If you're eating processed meat substitutes all the time as a vegetarian, IMO you aren't doing it right. I'm sure plenty of other people would agree.

And yet, vegetarians do eat those things sometimes. It's cultural. In the West (not just in the USA, in much of Europe as well), a lot of traditional foods are either meat-based or contain meat. My friends and I want to go out for a burger and a milkshake, because that's fun for us; I want a damn burger. A grilled mushroom on a roll is equally delicious, but it just isn't the same.
Logistic Regression from Bayes’ Theorem
Besides the actual words from which you can--most of the time--immediately see or at least infer where the comment falls into: politeness and tone. I don't think it's usually hard to know if someone is being aggressive and demanding about it, as far as I can say.
Who called, and why were they angry (at you)?
Things I Wish I Knew Before I Started Web Development
There's a pretty big difference between:

'free media'

and

'doxing individuals who's identities were protected because if they are publicly revealed not only are their lives at serious risk but it also exposes their close family and friends to rape/murder/torture until a time at which they are found and violently murdered because terrorists and hostile governments actually do this sort of thing to their perceived enemies, just like what happened to journalists (not informants/spies) like Jamal Khashoggi and many of the REAL journalists listed at https://cpj.org/data/killed/ '
Just because Assange did one (or more) good things (Collateral Murder) does not make everything else he does, also good. Assange is not a journalist, and ceased being a journalist when he decided to enforce personal agendas and arguably work with nation-states to harm other nation-states. Even if you believe he's a journalist, journalists should not be above the law even if part of their work is for the good of the people.
They're maximizing the layout, as per the guide.
It is illegal to refuse cash in China but it takes a while for the shops to be found and fined.
I'd suggest to delete as spam all the new links on Hacker News that are behind a paywall or a mandatory sign-in.
> Reality contains as many positives as negatives!

That's an interesting hypothesis, but is it true. There are actually two separate suggestions here:

1. Reality contains as many positives as negatives - possible, interesting philosophical assertion

2. Reality contains as many newsworthy positives as negatives - seems unlikely to me. No-one is really that interested in 'Kitten doesn't die, continues living as normal'.
I agree. It is mostly the people who have employers rich enough to sponsor them. Or some very dedicated amateurs doing it out of passion.
A bunch of people spend A LOT of their time developing a FOSS alternative to photoshop and the first comment online is someone bitching about a small GUI change 7 years ago.

The "small GUI change" was a big fuck you to existing users who've gotten GIMP to the level of visibility it's at today. The existing users just weren't flashy and high status enough.

The "small GUI change" was the GIMP devs pushing a file format absolutely nobody uses in order to attract professional users that aren't going to migrate to GIMP anyways.

Meanwhile actual pro features like CMYK support (because it's more difficult than mangling the UI), tablet support on Windows/Mac (because porting to GTK3 is less important than mangling the UI), and cryptographically signed binaries (because nothing screams professional product like getting binaries from an unknown developer).

Mangling the save/export workflow was done purely out of spite and to minimal/no benefit. And now we have a new version of GIMP on an old version of GTK slowly chipping away at the supposed competitive advantage that GIMP's own format has. Meanwhile integration with actual professional products like Lightroom will continue to be more awkward than necessary.

Kudos.
To me demand is a precursor for suggestion, or at least underlines it. Neither are really bad, at least there's communication.

That being said, there's a difference between

"There seems to be a lot of demand to bring back feature x, how much work would be involved in including it in the next release?"

vs some variant of

"It sucks you got rid of feature x, bring it back!"
So the difference is really how you perceive what someone is writing? What if your perception is wrong?
China Facial Recognition Database Leak Sparks Fears Over Mass Data Collection

https://www.forbes.com/sites/kateoflahertyuk/2019/02/18/chin...
WeChat is a private company owned by Tencent.
"Regular cocaine user" and "law abiding citizen" are in conflict. A cheap price isn't coercion.
Improving Security and Privacy for Chrome Extensions Users
So's stealing an unattended bag of money off the back of an armored truck. Still criminal; still not a coerced act.
I'm about as big a Firefox fanboy as they come, but... I don't understand the problem here?

The Chrome devs are thinking about whether a <toast> element would be useful. They float the proposal early on, and announce that they will implement (not ship! Web developers cannot use it) it to get some real-world experience with that to inform its design.

Still plenty of time for people to get involved, make objections, allow refinement, etc. Or am I missing something?
I heard something similar, I believe reported by the television news program “60 Minutes”, but the report I remember was about the Phalanx missile defense system not recognizing the Exocet as an “enemy” missile since it was a NATO weapon.

Edit: Note that I’m working off of very old memories, and the 60 minutes reports may not have been accurate.
This is what always happens with government spending. When this is not the case the system only is in an unstable state and will eventually collapse into corruption.
OpenFaaS for AWS Lambda (FaaS-Lambda)
Photos from the western front, autumn 1917
It's an ad for "K&R's The C Programming Language" actually ;)
Anatomically modern humans have been around for 100-300 thousand years (definitions vary and evidence is scarce and ambiguous). Our bipedal (i.e. hands free to do dexterous things) ancestors go back ~4 million more. If acquiring extra fingers was a net advantage we'd all have them already.
The nice thing about the gun is that if you need to Swiss cheese a jerk in a Toyota pickup (redundant description, I know) it can do the job with nearly zero risk of knocking over the school on the other side of the block and it is a dirt cheap way of doing that.

I generally agree with your comment though, the A10 doesn't work well enough without air superiority and is comically overbuilt for operating with air superiority. The platform is just... old. It needs to be retired, needs have changed but unfortunately the existing menu of aircraft can't really fill all the niche corners of the CAS role as well as the A10 can.
the windows client constantly keeps a 3d rendering context (chrome) alive preventing my gpu from downclocking.

as long as the client is running, my GPU is tacted at 1.6 GHz, if i kill the client GPU settles at around 0.14 GHz. this makes quite the difference in power consumption of my machine when left idle for multiple hours the day.

nowadays i only start the client when i want to sync files or expect to receive some uploaded by my peers. after thats is done the client gets killed immediately.

but why does it have an 3d context running you ask? for the small notification window where i can track the sync progress. i still remember the "native" solution they used few years back, did not have drop shadows, but the entire functionality was present via an WinAPI menus. Considering one can, with some OwnerDraw work, put progress bars and scrollable lists in Menus, i don't get the point of using an whole web browser to display a 600x200 popup.

They really should take a look at bvckup2, how fast and efficient a backup/sync tool could be done in native way
> You don't need to read since you can just send messages

How can illiterate people send messages?
Go fork it if you want it so bad instead of complaining to people who most probably aren't even being paid.

Ask the KDE guys how that works. Hint: despite the license the GIMP crew will happily throw a hissy fit at any fork of GIMP.
Small nitpick but the 8086 and 8088 had a 20-bit address space.
> Something that gives some kinda hint as to the storm ahead but doesn't hand out a pre-built bunch of stuff the script-kiddies can fuck your business over with.

I am not an expert, but an argument I've heard before is that this is worse, because a "hint" that describes the impact in even broad terms has a good chance of giving attackers enough a clue to figure out what the issue is. Meanwhile it will not contain a patch or detailed mitigation steps (because that would be too specific) so even fully informed administrators will be left helpless until whenever "full disclosure" happens.
Amazing the guardian are complaining. Their editorial line usually comes from MI6
The car isnt stolen. The owner still has the original. The car was copied and now there are two.

That's why we use the term copyright infringement.
> So as our kids have gotten older we will have them owe us a time out for when they’re more calm and can actually get something from it.

Some would argue that any delayed punishment is less likely to be understood (and so more likely to foster resentment) than one that's carried out immediately.
Kanban systems with real physical cards work pretty well. And you they are way more resilient than digital stuff.
Holy shit, postimg wants to show me notifications...

http://pichost.org/images/2019/06/13/ScreenShot2019-06-13at1...

Like what kind of notifications? "Bruh you seeing this?"
Flashing FPGAs with Your Phone
There are a few things which helped me get better at parenting:

* Timeouts rarely work. Try to respond with something which makes sense. Like if your kid throws around things, they need to clean up (with your help).

* If things get out of hand, I stay with or hold my kid until the situation gets better and then discuss/explain the current situation and how we will act next time.

* It's always good to figure out how your kid feels in a bad situation. Like: "I guess you're feeling <a>, because of <b>?" Sometimes kids do not understand their own feelings and telling them helps them cope better.

* Try to stay calm, always. Sometimes it's hard or even impossible. But getting loud or angry never helps. If I can keep control of myself I usually can control the situation and respond appropriately.

* Your job as a parent is to provide your kid with all necessities of life and with love. Everything else is extra, like toys, sweets, leisure activities. Sometimes it helps to tune down the extras if necessary.

* Admit your errors and say sorry if appropriate.

There's a youtube channel which I actually enjoyed while my youngest one was a bit smaller. It's a bit strange to look for help on parenting stuff on youtube, but a lot of his advice was actually quite good I tought: https://www.youtube.com/user/LiveOnPurposeTV/featured
Personally i'd see the first one as suggestion, but the second one is more complex. If it was just "It sucks you got rid of feature x" i wouldn't see it as neither suggestion nor demand (personally i dislike some changes in GIMP, see my other comments in this thread, and do comment on them if they are brought up, but these are just comments about how i see these changes, not suggestions and especially not demands).

The "bring it back" makes all the difference though and yeah, to me that makes a demand.
> The nice thing about the gun is that if you need to Swiss cheese a jerk in a Toyota pickup (redundant description, I know) it can do the job with nearly zero risk of knocking over the school on the other side of the block and it is a dirt cheap way of doing that.

I think the point was that a smaller gun would do. A Toyota pickup doesn't need an anti-tank round. Something more like what the Super Tucano carries would suffice.
Because you don't need much in resources to run a command center on diesel generators that can scramble some Russian surplus jets from the 1970s to start bombing runs on your carrier group. Electronic warfare is the next edge on the battlefield but you still need traditional weapons. There is a certain advantage to not have cutting edge tech in every facet of your society, how are you going to hack the power utility when they are still running the same equipment from the 50s?
The US already in an economic dispute with many allies (including Canada) citing national security threats. At this rate, the US might have no close allies left by the end of life of the F35s.
No sure what you mean? What sentiment and how would you analyze it?
Why dont they retitle inc.com fortune.com and businessinsider.com under the headline clickbait.com
I agree. I'm all for reducing our unnatural food-industry induced consumption, and unnatural feeding, and horrible holding conditions for animals.

Just not for throwing the whole eating animals thing altogether.
Pretty happy with OneDrive for Mac these days. They've been investing in improving it, and it shows.
USAF Made a Satellite Fuel That Is Less Toxic Than Caffeine to Replace Hydrazine
>Is it too much effort to just make your own coffee in your own apartment? Does that now also have to be delivered to you? The amount of waste involved in this just boggles my mind.

Not from China but have been different phases of life where have either preferred to have early morning coffe delivered/fetched/made myself in my apartment.
Different priorities would drove the choices for me.
Pricing differences between walking-fetching and having it delivered it on a schedule to my place were not much.
Making it often required me to maintain a lot of things , which i preferred depending on place, nature of work besides other priorities.
> This one remains the most important principle and it’s not without reason. Well paid focus groups have shown that the very first thing a user wants to do when visiting your web site in their web browser is to install a mobile application.

_hangs head_
Yeah, budos band and sharon jones, etc. are really awesome!
No one:

Medium: You read a lot. We like that. UPGRADE!
Show HN: Rebo - Portfolio tracking software for UK investors
There is a rather large difference between Google’s own OSes, software, and services; and the stuff Google uses. Google has the resources to mitigate problems with what they use from others much faster than most customers of the their competitors.
A lot.

The National Cancer Institute funds about 11% of new R01s, which is the mechanism that funds most academic labs. Their payline is among the lowest of the NIH’s Institutes, though to some extent this might be because they are one of the largest institutes and people chase the money: you could probably find a home for any proposal at two or three institutes. More data here: https://report.nih.gov/success_rates/Success_ByIC.cfm

With a few exceptions, the NSF doesn’t fund things that directly address diseases, so it’s hard to find a number for cancer specifically. Nevertheless, the overall payline is pretty similar.

That said, I’d argue that the solution is not (just) more money, but massive changes in how we fund and organize research too.
Square Enix: The Setbacks of a Game Dev Studio
In countries and regions where Chinese is spoken, people heavily use the voice message functionality.
I believe if we refrain to refer to it as "normal" and use "the current balance" it would be more precise.

And yup, we are changing that fast, not as fast as a supervolcano of the past or an asteroid impact but not so many orders of magnitude away from it, even more considering geological scales.
If you have so much as tried to grow a garden, much less farm at scale, you have a lot less sympathy for animals and their destructiveness. When you have racoons coming along at night knocking down your corn for the sheer hell of it, and not even eating it, or porcupines doing the same thing, or crows plucking out the stocks just as soon as they poke out of the ground, or deer mowing flat anything that isn't encased in an eight foot high fence, they lose their cute and cuddly charismatic aspects, and you start to view them like a horde of locusts, stealing the bread from your table, and prosecuting them with extreme prejudice becomes very, very attractive.
Real-Time ray tracing, and what it means for video games, explained
Medium always have had a problem with shallow content. Now they decided to completely screw their website and they are great at it. Stop posting on Medium, please. There really can’t be an audience on that monstrosity of a website, it’s just not worth posting there.
What about restic?

https://restic.net/
There is a button that you hold down and it sends a voice message (up to 60 seconds). They generally just send voice messages back and forth.

There is also a + for extra features like:
* Sending a photo
* Sending a short video
* Calling
* Money
* Location

You don't need to be able to read to use any of them.