skysight-inc/HackerNews huggingface dataset:
It's funny how the US complains about China propping up or even owning (usually partially) big corporations there, but they do the same with Boeing and many other companies.

At least in China, the government is the one that has the final say on everything, and the state-owned corporations have to do what the government wants. Here, the corporations get to do what they want, but they still get subsidies from the government but without being required to operate in the interests of the government or the nation at large.
> One of our processes.

This process needs some work. It replaced the girl with an entirely different girl, and swapped her Metallica tee for H&M, effectively removing her taste.
I'm very interested to see this open sourced. I don't really use the social features of GoodReads so a tool like this is perfect for recording my reading journey and sharing it in a slightly more useful manner than my ZettelKasten Zotero notes.

For those wanting the code directly: https://github.com/nprapps/book-concierge
Many don't realize that we really only have two options for protecting yourself and your family:

1) A weapon, like a gun
2) a camera

Sure, we have the police, but by the time they arrive, it's usually after the fact and not easy to actually catch the person that did it.

Many countries, like Australia and England, have terrible gun rights, but essentially have turned into a surveillance state in its place, with the number cameras. It puts the fear into thieves because they know they will most likely be caught.

If you reject both, it will only result in more innocent people getting hurt or killed and crimes going unsolved.

I have ring cameras inside and outside my house. A group of 3 people broke into my house while I was on vacation. They saw the camera inside, and ran out of the window they broke through.

Nothing was taken, but if I didn't have the cameras, something would have been taken. On top of everything, this all happened about 5 minutes before my brother-in-law came back home for the night.

Cameras have also shown us all sorts of crime we would never have known: package thieves, trespassing, and just a better general awareness we never had before.
I see your Avast and raise you McAfee protection on everything. Thankfully we were able to remove it. It was literally destroying the machine (do anything it considers a risky process and it would crank the CPU to 99% and start to melt the thing) and rendering it unusable.
I can't believe no one has linked L. J. Hart-Smith's classic 2001 paper "Out-Sourced Profits" yet!

http://seattletimes.nwsource.com/ABPub/2011/02/04/2014130646...

It offers a detailed look at Douglas Aircraft and their doomed attempt to boost profits via outsourcing.

Those familiar with the commercial aviation business know that Boeing's "purchase" of McDonnell-Douglas resulted in wholesale importation of Douglas's accounting wizardry to what had been a largely engineering- and safety-driven corporate culture.

Relevance to the MAX fiasco and the tardiness of Boeing's NMA designs is left as an exercise to the reader…
CadenceX promises a powerful alternative to classic dynamo generators
Deploy Common Lisp Apps with Confidence
There I was, ready to be furious and dang strikes yet again with nothing but reason. Thank you for your service!
I mean, people have passed laws saying that pi=3 (and once even 4!) so I'm not even confident we can get that far.
Evolution of FIFA Graphics
If there is a smaller part of your business that can generate $, it can be a good way to help you stick around/simmer until the timing is right for the demand to increase.

Products are about as much as deciding what part of your solution you're building that lines up with what the market is ready to actually do and growing from there incrementally.

A neat example of this I read about was how the iPad was designed for many years before the iPhone came out, but the iPhone in a way was a starter/training device for a larger touch computing experience.
Why React experience is required for almost every programming job
Maybe blockchain can help with this:
https://www.iotex.io/securehardware
Does it? On OpenBSD, Chrome cannot read my ~/.ssh directory, can the same guarantee be made on Mac?
While I agree with the overall idea behind your post, your assumption that the activation lock can be defeated by sheer git and determination is silly. If implemented correctly (and I have no idea if it will be) it's very likely that it won't be bypassed.
"18. By Keith Devon on September 7, 2018 at 11:04

If Google only cares about a faster, more semantic web, then why not just give an even bigger ranking boost to faster, more semantic websites? Where does the need for a new standard come in, other than to gain more control?"

The above is a comment found in the OP.

Is there a requirement that AMP sites host resources with Google?

If there is, then Google has hijacked the purported goal of of promoting websites that consume fewer client resources (and are therefore faster) -- arguably a worthy cause -- in order to promote the use of Google's own web servers,[1] thereby increasing Google's data gathering potential.

If there is no such requirement, then is it practical for any website to host an AMP-compliant site, without using Google web servers?

If not, then AMP sure looks a lot like an effort to get websites to host more resources on Google web servers and help generate more data for Google.

1. When I use the term "web servers" in this comment I mean servers that host any resource, e.g., images, scripts, etc., that is linked to from within a web page (and thus automatically accessed by popular graphical web browsers such as Chrome, Safari, Firefox, Edge, etc.)
Thanks for All the Silo Busting
Let's not do this here.
> If everyone had the same amount of money, these things would still be allocated on the basis of who's willing to pay the most for them - that is, who's willing to give up the most other things in order to get that thing.

Though that's arguably a better situation from the equality perspective. Right now we have people who are allocated everything they want and others who are allocated none of what they need. Taking redistribution to a monomaniacal extreme is probably a bad idea for well understood reasons, but that doesn't mean that redistribution doesn't have its place.
It seemed to me that many of the darlings of investors in the last few years in the data space were "solutions" companies even if they claimed not to be. That is, Mongodb, Cloudera, Hortonworks, Continuum Analytics, etc.

These companies generally had an open source product and then either support contracts (e.g. solution) or proprietary extensions frequently of dubious if not negative value. (e.g. in the devops age, a web user interface slows down how fast you can make a Hadoop cluster, it doesn't speed it up)

Many of these companies have had a reckoning, others still fly high.

In A.I. or anything else that is really new you will have to give customers special help if they are going to succeed with your product, if anything I would point investors to all of the self-service A.I. products out there that are a complete joke (e.g. IBM Watson text recognition, BERT if you care if your results are useful, etc.)

Here is a buzzword I like:

https://en.wikipedia.org/wiki/Software_product_line

You can make a model of a customer engagement that includes some revenue from the product license and some from the "setup" part, probably this is also some maintenance work you need to do too.

You can ask questions like: can you get the setup effort down over time since you do similar things for different customers, build a toolbox, etc? can you or a customer hire out the setup work to a third party?

I know some people who have interesting ideas in the "low code" space that are partnering with a solutions integrator, which is a really great idea.
Yes, because the store is local rather than being a warehouse some distance away and the store has a limited variety of things available. I don't really see how this comparison is useful.
Well, that looks very cool! My contribution: "the amazing tau-prolog, a Prolog interperter in Javascript" contains a spelling mistake. And why the close bracket in the first sentence?)
> somehow whatever AMP/Google is doing results in less bloated pages on these AMP pages.

The article links to another page that dives into this: AMP isn't actually creating less bloated pages.

The speed increase is because Google Search preloads the content for all AMP results so you're effectively getting a cached page when you click on it.

That is incredibly monopolistic behavior because it can't be reproduced any other way.
>That doesn't sound "highly opposed" to me

They marked the proposal as "harmful", and it remains marked that way.

I wasn't trying to exaggerate. I could cite other passages that support "highly opposed".

Mozilla did publish a pretty extensive document that explains their position and plans: https://docs.google.com/document/d/1ha00dSGKmjoEh2mRiG8FIA5s...
I think if you gave a philologist living in 1880 AD a clay tablet with a binary inscription of a fragment of an English poem encoded UTF-8 they would decode it very quickly.

This is what the philologist would see:

>...ABABABBBABBABAAAABBBBAABAABABBAAAABAAAAAABBABAABABBAABBAAABAAAAAAABAABBBABBBABAAABBABAABABBBAABBAABAAAAAABBAABAAABBAAAABABBABBBAABBAAABBABBABAABABBABBBAABBAABBBAABAAAAAABBBBAABABBABBBBABBBABABAABAAAAAABBBABBBABBABBBBABBBABABABBABBAAABBAABAAAABAAAAAABBAAABAABBAABABAABABBAAAAAABABAABABABAAABBABAAAABBAABABABBBAABAABBAABABAABAABBBABBBAABBAABAAAAAABBAAABAABBBAABAABBABAABABBBAABBABBABABBABBAABABABBBAABAAABAAAAAABBBAAAAABBABAABABBBAAAAABB...

How it would probably go:

1. Hmmmm there are only two symbols A and B, these symbols can't be words since no language has only two words. Thus the words must be made of a string of these symbols.

2. Every 8-th symbol* is a A. Lets try putting the symbols in groups of size 8.

3. These groups of 8 can't be words because they repeat far too often and they would only allow 128 possible words. Thus these groups of 8 might be letters in an alphabet.

4. Does the frequency of this possible letters fit any known languages? Yes, English.

5. Which group of 8 is "e"?

A few minutes later and the clay tablet is decoded.

* - This is not always true in utf-8 but true in most encoding of Latin alphabets including this example. Even with some variable length characters thrown in this fact would stand out.
> but their "Companies should prioritize on ease of repair even if it makes the devices less portable and less secure" narrative flips me.

Everything wears out eventually. Nothing made in the past ten years is made to last forever and the trend is accelerating. Everyone uses their devices differently whether they're carefully stored in a laptop bag when not in use or sit out in a machine shop and everything in between.

Processors aren't really getting that much faster so devices can last a lot longer than the did in the past.
To spite this, build quality is getting worse and everyone is gluing batteries into their devices that WILL degrade to uselessness after 2-3 years of regular use.

This mentality has to stop if don't want to create mountains of useless e-waste.

Edit: also, nobody is asking for less security. Device theft isn't that big of an issue. This is just apple trying to screw with the resale market because they're struggling to sell more new devices when their existing ones aren't being obsoleted at the rate they used to.
The Consumer Electronics Hall Of Fame: Sony Trinitron (2018)
You can also create your entire Fargate environment in a couple lines of TypeScript / Python / Java code using the AWS Cloud Development Kit. The AWS CDK is a declarative SDK that generates and deploys CloudFormation on your behalf, while offering you prebuilt patterns for many common deployment architectures: https://docs.aws.amazon.com/cdk/latest/guide/ecs_example.htm...
Sorry, I agree with you. I think the 15 represents the truthful amount of serious injuries. I'm saying the 3-4 was likely underreported to some degree for whatever reason.
A. It's a detective and corrective control so you can more easily claim losses with insurance and the police, see what has been taken, and know that someone was there.

B. It's a preventive control. People doing recon on your place will see that visible security is in place and that you have done some level of risk management. Perhaps you have other security measures there as well such as an alarm, or maybe you secure your valuables with a safe or they are stored off site which they can't know until they get in. It makes you a less appealing, higher risk target. Additionally, in most neighborhoods you can't walk around in a ski mask without attracting attention, so many burglaries will be done with faces exposed. If someone bursts in and sees they are on camera, maybe they leave without taking anything.
My solution for this problem is apk's virtual packages. I'll do something like this:

apk add -t .myproject-deps py3-foobar py3-foobaz

This creates a fake ".myproject-deps" package which depends on py3-foobar and py3-foobaz, then I can just uninstall ".myproject-deps" later and it nukes the rest. `head /etc/apk/world` is generally sufficient to get a list of projects I've forgotten about whenever I feel like some spring cleaning.
The RFC explicitly says that "host" doesn't necessarily mean an actual host and you still insist the opposite. So I don't really know what to say.

> One of the common security advice banks used to give is "check your browser address that you are in our server"

So you say that everyday users have an expectation that they're "in the bank's server"? That doesn't seem very concrete, since that could mean anything. Surely there is some kind of expectation they have about actual behavior or property. Something that will happen / can't happen right now, but the opposite with signed exchanges.

> Anyone who has the file can intercept the form data from that page now - a complete phishing attack.

Uhh... And just how would they do that? They can't inject anything into the page, and they can't modify the page. How do you figure they force the browser to submit the form to the wrong server?
It will be interesting how Boeing/Airbus/traditional carriers react when China fully enters the market with Comac-built/branded planes. Commercial flights of its first plane, the C919 are slated for 2021.

Eh, the Chinese aren't a threat despite what McNerney thought. If nothing else the C919 isn't Comac's first attempt at an airliner, the ARJ21 was.

Airliners are extremely complex. Take a look at Mitsubishi. They've got experience building planes, turbines, etc. Yet Mitsubishi is still struggling with the MRJ, in large part because the MRJ is the first Japanese built airliner in an extraordinarily long time. As for the Chinese, McDonnell-Douglas sold tooling to the SAIC (now Comac) so that they could build licensed MD-80s (some of which are flying in the US). The tooling was eventually used to develop the ARJ21 and Comac still couldn't make it work well. There are a few ARJs flying in China, but even the domestic airlines don't want them. The Canadians tried their hand at a modern airliner with the C-series, and that pretty much bankrupted Bombardier.

China could really be set up to take a lot of commercial aircraft market share over the coming decades.

Even if (or when) Comac were magically able to produce a competitive airliner, there's more to selling planes than just building them. Support is a huge issue. The Russians have significant experience successfully building airliners and yet even with western turbofans Sukhoi couldn't find a market for their SuperJet. They sold a few to the Belgians and the Mexicans but those have largely stopped flying. Why? There's no support. Boeing and Airbus have huge support networks all over the globe. Comac has absolutely nothing like this in the works or in place.
Wouldn't you expect the default action of SecuROM to ENABLE all installations if the contract goes bad?

I would urge all companies to stop using them if this is their stance.
You can surrender all of your liberties, and not actually end up any safer.

People are scared, and being scared, want to do something - and going through baggage checks, installing cameras, scanners, pat downs - well that all feels like doing something. Of course, it's not really, it's theater.
Happy Birthday Helsinki’s Award-Winning Central Library Oodi Turns One Year Old
Fortunately, enterprising reverse engineers have already released a patch that allows the game to work.
No you can't, not on HN. Please see the guidelines here:

https://news.ycombinator.com/newsguidelines.html
I will be posting updates as they’re ready. Keep an eye out! I would like to include some sort of blog format.
Are you saying that apps should be allowed to directly access GPS antenna/hardware without the system being involved at all? Because that is the only way I see that an app could use the data without the system being in the loop at all.

If so, that sounds like a terrible idea to me. Sandboxing off applications from the hardware is a key aspect of security here. My opinion: the system should collect the location data (IF the global location services switch is on) and then parse it out following the user's granular selections for what apps they want to receive it. And that seems to be exactly the case.
Self hosting isn't dumb. It is literally what was done for decades. The fact is that most crimes are smash and grab, and they literally do no have the time to wander around your house looking for a DVR. It's fine.
While brushing up on the encyclopaedists, I found this little gem:

"Among some excellent men, there were some weak, average, and absolutely bad ones. From this mixture in the publication, we find the draft of a schoolboy next to a masterpiece." — Denis Diderot

Taking the quote out of context (and aside from its historical male-centered language) - it sure rings true of the current state of the web, as well as books.

About the inverse relationship of quantity vs quality, we seem to be drowning in quantity! As you've pointed out, there's great need for thoughtful organization and curation.

I like how you break down the quantifiable aspects to draw a historical trend and future projection. The rise of "data science" and "big data" in the past few decades really makes sense in this light.

I'm sure machine learning and "AI" will play an increasing role in the task of organizing and processing all this information, but at the bottom I feel that the most value probably comes from human curation.

LibGen has been an amazing resource for me as a lover of knowledge, a life-long book worm. I've got bookshelves and boxes full of physical books as well, but it's a drop in the ocean..
Carbonite does enterprise file backup. OpenText is a big software conglomerate that tends to purchase slow-growing or declining (aka, "boring") enterprise software companies and consolidates them, cutting costs and milking the existing customer base for updates and support contracts. Basically they seem to bet on inertia surrounding technology in big companies, which tend not to change things that are working acceptably.
Yes, you can write custom sandbox profiles and apply themselves to yourself using sandbox_init(3).
I agree on the strong typing note.

That being said, IntelliJ's IDEA is fantastic at hiding a lot of the boilerplate in Java (like getters and setters and all those import statements at the top of the file) and modern Java is FAR FAR better about being less verbose than it was in 1.0

Java also has Lombok (https://projectlombok.org/) that hides almost all of the repetitive stuff completely.
No, that’s CA.
It's kind of a "pay no attention to the man behind the curtain" type of thing.

Google had the option of simply highly ranking pages that are performant and lightweight on mobile. They didn't take that option, instead they went with AMP. There's intent there. I'm not going to speculate on the intent, because it isn't relevant: the point is that because there was a simpler technical solution available that they didn't take, there is clearly intent in going the harder path. It's worth asking what that means.

AMP provides all the benefits that a well-built, well-architected site would, and that would have been the "non-evil" option. Use web standards and push people to respect them, imagine that...
Our cameras have helped us identify the person who broke into our car a few weeks ago. That is not theater.
Thank you for your reply. From my understanding, what you suggest is that a backscatter uses a return path email that does not exists?

My understanding was that a backscatter uses an email that is not his, in order to deliver a message without sending it directly (and making the bounce server act like a spammer).

Am I missing something?
> bob-firefox, bob-vim, alice-evolution, alice-calculator,... would be a nightmare to maintain compared to being able to apply policy to the program itself.

This is how Android works, btw. Each app has its own UID.

And the standard SELinux policies don't solve this problem, anyway - when there are a small number of apps, you can give them each a context, but maintaining one for hundreds or thousands of apps is a nightmare. For web serving itself, quoting from https://linux.die.net/man/8/httpd_selinux :

The following process types are defined for httpd:*

httpd_cvs_script_t, httpd_rotatelogs_t, httpd_bugzilla_script_t, httpd_smokeping_cgi_script_t, httpd_nagios_script_t, httpd_dirsrvadmin_script_t, httpd_suexec_t, httpd_php_t, httpd_w3c_validator_script_t, httpd_user_script_t, httpd_awstats_script_t, httpd_apcupsd_cgi_script_t, httpd_nutups_cgi_script_t, httpd_munin_script_t, httpd_openshift_script_t, httpd_sys_script_t, httpd_dspam_script_t, httpd_prewikka_script_t, httpd_git_script_t, httpd_unconfined_script_t, httpd_t, httpd_helper_t, httpd_squid_script_t, httpd_cobbler_script_t, httpd_mediawiki_script_t*

SELinux works elegantly on a very lightly configured system where there are a small number of apps and you got them all from the distro.
> If you reject both, it will only result in more innocent people getting hurt or killed and crimes going unsolved.

Please cite some evidence that doorbell cameras have a causal impact on crime rates. Or guns for that matter. I doubt there's anything compelling. There's probably a small marginal effect, but there are bigger levers we can turn. The way to actually help people not get hurt is to make it so that fewer people want to do crime. (Which, BTW, we've been doing a pretty bang up job of the last thirty to forty years! Good news!)
>

"> The burden of proof is on the people who claim that the current status quo, of CEO compensation is for some reason, out of line.

True."

Awesome! So you agree with me that the people who were claiming that CEO compensation too high have not shown this to be true, and therefore they have not proven that we should be worrying about this. (And that apparently you are an ultimate skeptic, who does not believe that we can show any evidence, on anything, or something?)

That is the main point that I am trying to make and is the only claim that I really care about. The people who said this, have not proven their statements, and you seem to agree that they have not established their claims, great!

And I am glad that we were able to come to an agreement on the main thing I was trying to explain which is that the people saying this have not proven their statements to be true. :)
A blockchain would help about as much as changing the endianness or translating it to Cantonese, which is to say it has literally no bearing on the problem whatsoever.
I tend to know recognize the networks my servers are on, because I only have one or two.
My Top Favorite Tools for Angular Developers