skysight-inc/HackerNews huggingface dataset:
So what's the new Hipmunk? Most other sites - Orbitz, Travelocity, etc. - are pretty terrible. HM got more crashy over the last year but even with that, still better than the alternatives.
atomic elements doesn't really extend to arbitrary HTML, which is fine for the simpler editing solutions but not TinyMCE.

To do something like that in arbitrary HTML you wind up locking at the top-level-block boundaries. Locking sounds great as an engineer but it leads to a garbage user experience.
I didn't mention whether I thought the increase in IPOs was worrying. (In fact, I do think we may be reaching/reached saturation.) IPOs per year is a highly volatile number [1], based upon lots of factors, such as perceived market conditions (sometimes by the underwriters, not the company IPO'ing). [2]

[1] https://theweek.com/articles/770020/americas-disappearing-ip...

[2] https://www.youtube.com/watch?v=sC7ht0CAQsk&feature=emb_titl...
I can think of several reasons - some to do with tech implementation and some to do with things like dimplomacy with publishers and copyright issues - why it would be better for this to be handled organically by the community.

I know the status quo seems imperfect; it absolutely is, but thoughtful consideration always leads to the conclusion that the status quo is the least-worst of the available options.
A CERT person on Twitter was explicit about this impacting all of X.509.
But unlike either, they make commerce, travel and emergency services possible. What an asinine comparison.
Wow! Congratulations! This is a great story. Best of luck with your new position. São Paulo sounds great.
Thinking with my tin-foil hat: Same date as windows 7 last patch right? Not sure if this was a risk decision or an intentional message.
The guy you were responding to was talking about Silicon Valley.
I had this feeling exactly listening (great, as everything Aaron does) presentation about manipulation and transformation of trees in APL, https://www.youtube.com/watch?v=hzPd3umu78g
automation of an LLC seems like a pretty dangerous thing considering you are trying to automate dealing with 1) secretary of state and 2) irs and 3) creation of a business bank account.... does this really need to be automated? it seems like a solution looking for a problem. It also seems like a minefield from an automation perspective because there are too many errors that can happen through automation at each step in this process. Its mostly an information gathering process for step one and step two, step three is information gathering and verification of what you submitted... it takes a few hours to this by yourself online and in person at the bank, and when it fails, you will need various humans in each step to figure out what went wrong. For example, IRS.gov will block on SS4 filings for various reasons, i.e. only one filing per day.. Seems too error prone to try and automate, and I bet they are using screen scrape tools to do it and so its probably going to break when the endpoint changes any form variables too..
Performance is not zero to 60 times.

I want a car than can handle well. Going 200mph, drag racing ability is not a useful feature or qualifier.
Thank you. São Paulo is a great city. Every food you want to try, from every nation. you can rent a eletric scooter from the street with just your phone. I'm really having fun here
Vsync off gives tearing, right? Maybe you're noticing that and not the latency.
The questions nobody answers when it comes to all of these so-called solutions are:

How much energy will this require?
How will we generate it?
Will generating that energy produce CO2 or other problems?
What resources are we going to need (chemicals, etc.)?
How are we going to extract or produce them?
How much energy is that going to require?
How are we going to produce that energy?
Will generating that energy produce CO2 or other problems?

Conservation of Energy is an ass. It does not care one bit. Which means we can't solve a problem with less energy than what went into creating it in the first place.

A common misconception is that humanity added a bunch of CO2 in a couple of hundred years. That's not true. It took millions, if not billions of years. Sure, in therms of use using petroleum, yeah, we did it in a couple of centuries. However, the reality of this fuel is that it took billions of years to create. THAT is what we burned; billions of years of stored energy.

That was the other revelation I had during my research. We are looking at this with the wrong time scale. In a couple of hundred years we burned millions or billions of years worth of stored energy. And to clean-up that mess you need far more energy than what it took to produce the mess in the first place.

Imagine how many trees, plants, animals and solar energy went into creating the petroleum we burned. That's the start of the scale of the problem we are trying to fix. In other words, we can't fix it. Not without making a much larger mess.
Just a couple of weeks ago we had a customer complain that their customers were having problems using our technology in IE11 because it was too slow...

We had to recur to identifying IE11 to write workarounds so that it works there...
Battery was my biggest surprise. WiFi is off when screen is off and I get two days out of a charge on an old S7.
There are two possible dangers that you can fall into with science. One is to assume a conclusion with such force that it causes you to avoid certain questions or to suppress certain research. The other danger is to be so fascinated with doubt or so averse to a particular outcome that you ignore consensus, and place less weight than you should on the obvious conclusion that research is pointing to (and yes, I think the author is guilty of this).

I have been hearing for a long time about how scientists are scared to question climate change, or gender differences between men and women. From what I've seen, the reality is that there are pretty clear conclusions that we can draw in those areas: that climate change is human-caused and dangerous, and that purely biological, mental differences between men and women are usually overstated.

Frankly, I don't think that there's a particularly strong culture in science that is scared to ask those questions, and while cancel culture is a real thing, I don't think it's a real problem here. I do think there's a culture at the edge of science that doesn't like the answers researchers have found, and that is aggressively underestating the degree of confidence in those answers in the hopes that certain debates can be prolonged forever rather than used to influence policy changes right now.

In other words, pervasive doubt can be just as dangerous and just as politically motivated as pervasive certainty. There are certain topics (such as climate change) where we effectively know the right answer. Of course we never reach 100% certainty, of course there are areas where we want to learn more, but we're a heck of a lot closer to 100% certainty than we are to 50% certainty.

Because of that, some of the taboos you notice on the far-edges of the scientific community are actually justifiable defensive measures -- because running the clock down while introducing impossible standards of certainty is an effective strategy to circumvent scientific and social progress. We saw this happen with the sugar industry, we saw it happen with the tobacco industry, we saw it happen with race science, and we're seeing it happen today with gender studies, climate science, and anti-vaxers.

If you were to look at the subjects I just listed to pick out a common theme or lesson, I would say that it is, 'beware isolated demands for scientific rigor, particularly when those demands are selectively applied in ways that benefit a political or socioeconomic status quo.'
It's likely easier to go through periods where you contract for a few months, then don't work at all. The problem with part time anything is offering full-time benefits. An employer still has 75% of the costs if you work 50% of the hours.
You may be interested in this Chromium fork that Intel is working on which adds a machine learning API, loosely modeled on Android's NNAPI: https://github.com/otcshare/chromium-src/commits/webml

It's not likely to be standardized as is, but the code demonstrates how to integrate something like this into Chromium. There's a Web ML community group that's working to figure out what could be standardized in this area. https://webmachinelearning.github.io/
> The debate was called for by opposition parties after evidence came to light that a paper critical of carbon emissions trading was being suppressed

This is disappointing but it's not climate change censorship, it's ETS (as a solution to carbon emissions) censorship.

Edit - And he was probably wrong anyway, look at the results of the ETS in action: https://www.climatecouncil.org.au/resources/climate-cuts-cov...
You need to be very very careful, when parsing things that Craig says.

His statement is implying that he is getting access to the "private keys" which would allow him to actually have control over the 1M fortunate.

But, if you look at what he is actually saying, he is actually only claiming that he is getting access to the "public keys", which is just a list of his supposed holdings.

It is a very weasely way to imply something, and then when people ask to back up your statement with proof, he will go back and say "umm, actually it was this different thing, and I can't show you proof because private keys are not the same as public keys!".

You should expect another excuse soon, as for why he actually can't move his coins.
So can we finally stop saying it's better to have SMS 2FA then to not have it?!
Hmm. Maybe I'll generate some high quality OTPs for myself with a good CSPRNG. I could use any decent block cipher in counter mode, just need to guard against counter re-use, and then ship my OTPs off to anyone I need to communicate with.

Hang on, if I could come up with a way of securely sharing the key I used with my recipient, I wouldn't need to actually mail the OTP to them, since they could generate it themselves. Should probably include a nonce too.

Now, if only there were a secure method to share the key...
Still common in largely Jewish-centric grocery stores in NYC. While you are waiting your turn at the checkout isle, you can hear little kids buying food after school and the primary phone number is the account ID.

A recent observation:

Shop to a little girl: What's your Numbra?

Little Girl: 718-.....

Owner comes by: That's Sharon and Jacob's account. You are not his daughter.

Little girls freezes.

Owner continues: Unless you are their niece from Upstate who has come for Christmas.

Little girl visibly relaxes and the grocer bags her items.
> If we can't even get crypto libraries right (where you'd hope most of the formal verification folks are)

Personally, I'd hope most of the formal verification folks are working in firmware for industrial/medical embedded systems, and/or the microcontroller designs that go into those same systems. A lack of encryption (outside of military contexts) doesn't usually directly cause people to die.
In an All-Out Cyberwar, Iran Would Be a Formidable Foe
Worth noting that working on the side writes you out of most possibilities to get investment from VCs. (not discouraging it, in fact I'm doing the same)
My money is on Hal Finney being Satoshi.
I can see why the commercial web interests would want to get rid of user-agent strings. But to non-corporate persons, at least to techies, they're very useful and fun things. It's just text too so it's easy to deal with. Adopting some complex standard in javascript to replace it is no replacement.
“Jaywalking” Shouldn't Even Be a Thing
Haha I never noticed until now but you're totally right, the resemblance is uncanny: https://mobileimages.lowes.com/product/converted/728363/7283...
Congratulations. The hacking can truly open doors it seems. :)
If it's nothing new then why do people keep saying it's better to have SMS 2FA then to not have it. The research says "websites should eliminate SMS based MFA altogether".
I need to write a whole blog post about the subject of role models, but basically, yes. Even simple stuff like "how do I dress?" is hard to answer when you don't have role models. Or how do you resist people who talk over you without being seen as difficult?

You're right about unlearning behaviors, though easier said than done. I'm relatively self motivated when I'm not interfered with, but when I get negative feedback can easily get stuck in an analysis paralysis loop trying to figure out "what does my manager want me to do?" It's not a good sign when I'm spending time on the question of if I should even ask him or if that will be perceived as me not intrinsically knowing which will reflect badly on me.

And all that stressing about what my manager wants or how a given action will be perceived looks like laziness at best.

I'll admit, part of what I want out of being an EM is external validation that somebody trusts me to lead something. I've had a lot of bad experiences that really undermine my confidence and make me question myself.

An example: at my last job, I had a coworker who made it his personal mission to slow my velocity as much during code review as possible. One of the more egregious examples - he told me to consider using a regex rather than == to evaluate equality of strings. No particular reason. What resulted was an hours long argument... his main justification was that if I had just spent an hour to benchmark it we could have found out faster than the argument took.

You can imagine how when even extremely basic decisions of yours like that are routinely questioned it sucks out your confidence. The lead of that team explicitly had no interest in mediating this ongoing problem, and eventually promoted that guy to be the team lead so he didn't have to manage it. I meanwhile had to plan all my code around the times he'd be out of the office; I could get a month of work done in a week he was out, because somebody else would review my code. I got a reputation for missing estimates, but my timelines were entirely driven by code review cycles and thus at his whim and availability.

And yes, I repeatedly asked to work with literally anyone else, and it was only when I threatened to quit that anybody at the org actually made that happen.

There's a long history of stuff like that happening to me, and it means that I tend to just wait for somebody to tell me exactly how to do whatever it is, because the way I will do it will be seen as wrong. Who can forget the manager a couple jobs before who admitted to creating fake crises and yelling at us over nothing to keep us motivated?

This org is the first one that has actually respected me enough to do more, and where my manager's main complaint is that I act like I don't have any power, when I do. Everywhere else, it felt like they were really trying to make sure I didn't get any, and it's tough to unlearn.
Ive been a Python (among other languages) dev for about 25 years and I've never heard about this project until just now.
Congratulations! Don't stop now! Stick around and provide inspiration to others coming along behind us.
Right, but in the absence of everyone using their NOBUS-backdoored software presumably the next best thing would be to hoard zero days and hope they can work as pseudo-NOBUSes.
Nigh 50 year old reporting in - I agree 100%. Some of my fondest memories are related to video games, and I still have friends I've never met in real life that I enjoy more than many people I have. My wife, son, and I are a gamer family, and I think better because of it. I had very little connections to my parents (who were great) at the level my wife and I have with our son (11). We laugh and joke about gaming, share memes, and watch each other play. We also do other things together (hikes, fishing, board games etc), but I see people that don't play video games in the same light as those that don't watch movies or don't listen to music or don't read books - they're missing a fascinating part of life.
The Inconvenient Facts on Australian Bushfires
I ended up disconnecting my samsung tvs from the network for this issue. funny enough i just recently noticed one of my higher end samsungs has started broadcasting a bluetooth connection. i’m sure this wasn’t there before i disconnected it
It is against their law to use vpn. Hence 1 person “solution” is not a real solution dealing with totalitarian state. But as any individual you should do two. One this. The other one somehow get a political solution if available to you.
It’s not clear what this encrypted document contains. I agree that nothing matters until he actually signs some message or moves some bitcoin to prove he owns it.

Either way BSV has quadrupled in four days, so there are certainly people who are heavily betting something will come of this.
Looking at JPMorgan Chase's 4Q19 net incomes (numbers in millions):

All = $8,5xx
CCB = $4,231 (50%)
CIB = $2,927 (34%)
CB = $ 938 (11%)
AWM = $ 785 ( 9%)

Those are, in order:

* Consumer and Community Banking, aka Chase retail banking.

* Corporate and Investment Bank, aka JP Morgan investment banking.

* Commercial Banking.

* Asset and Wealth Management.

(NOTE: The extra 4% above is accounted for in corporate overhead.)
If you open up your home using vpn server, would it be more danger as every server on the net is hacked continuously.
Aww :( I know that other sites offer real advantages to Hipmunk, but to this day nothing beats their UI.
I was interviewing at a megacorp a long while back, my interviewer was solely responsible for the pie charts in some old application. He mentioned in the interview that it was totally feasible to run your own startup on the side.
Could be a red flag but it's not possible to know unless you can find out the number of women who were invited, the number of men who were invited, and the ratio of men/women in the field. Maybe they invited a reasonable number of women but they all had scheduling conflicts. Depends on the numbers.
> The Soviets were kicked out by the Taliban

The Taliban got their weapons and training from the US, all funded by the Saudis, orchestrated by a congressman [1] and oil heiress from Texas. The history is well known at this point.

> How could a democracy be started with them?

Democracy was probably never a goal in the effort, certainly not for the Saudis, and not for the Taliban or the US either. Weakening the USSR through bloodshed and drain of resources.

1. https://en.m.wikipedia.org/wiki/Charlie_Wilson_(Texas_politi...
The first internet was the telegraphy network, in fact, much foundational computer technology came from telegraphy.

"The Victorian Internet" by Tom Standage
No, just old approaches instead of just using modern browser features, or even modern JS features. Not every single thing has to be WebAssembly, but it is a good starting minimum requirement, cause it basically guarantees modern versions of JavaScript. I mention WebGL and audio etc cause if HTML5 is set to replace Flash, there's still small rough edges here or there.
I think the scariest thing about this is if this was a PR stunt, the release of an unknown vuln could be completely controlled by whoever knew about it. Best case scenario is a relationships between Microsoft and the five eyes. It could have just as easily been China, a independent group or whatever. It's even possible that the top of Microsoft and/or NSA might not even know. But if it wasn't planned, no one would admit it anyway.
I'll be trying this— I like Firefox containers a lot, but I dislike how session-oriented they are. You can force a particular site into container X, but every click from there will stay in container X unless another rule forces it to a different containers.

What I want is something more like "jail site X in container X, and open every non-X link in a temporary container / container Y / whatever."
Part of me thinks that too, but if he was, why didnt he just admit it on his death bed?
Fun fact: the second largest industry in Utah (after tourism) are pyramid schemes. They do billions in revenue. It’s also the center of the entirely unregulated bogus, vitamin/supplement industry.

So not only are conmen alive and well, they’re a primary industry in at least one US state.
Does anyone actually look at the systemd log? I ignore it. Rsyslogd handles all of our logging needs in a sensible textual format that does not require special commands to view or useless make-work to pipe into a database.

To answer your question, I thought and still think it was a bad choice. The only time I would ever be interested in the contents are during early-boot failures, exactly the time when the toolset is limited and most folks aren't familiar with what's available - exactly when simple text is easiest to work with without finding another machine to stare at the `journalctl` man page.

The rationalization about detecting record corruption makes very little sense to me. (Now, there is a valid concern about potential log forgery, enabled by poorly written apps that directly log user input without sanitation. But that's better mitigated in the buggy app, which almost certainly is doing other unsafe things with user input. And if that were actually the concern, they had other choices that would have been far less annoying.)
That's certainly true; NSA is chartered to exploit vulnerabilities and certainly hoards them. But that doesn't address the question of whether you should trust NSA "on crypto". Here, they're the ones disclosing the crypto flaw; there's no need to "trust" them, because they're clearly right (Saleem Rashid worked out a POC for this on Slack in something like 45 minutes today).

Should you trust them about Dual_EC? Obviously not: the sketchiness of Dual_EC has been clear since its publication (the only reason people doubted it was a backdoor was that it was too obviously a backdoor; I gave them way too much credit here).

Should you trust them about the NIST P-curves? That depends on who you ask, but the NOBUS analysis is very helpful here: you have to come up with a hypothetical attack that NSA can exploit but that nobody else can discover, otherwise NSA is making China and Russia's job easier for them. Whatever else you think about NSA, the idea that they're sanguine about China is an extraordinary claim.
In the one time I've had to transfer more than $100K personally, the operation of wire transfer merely seemed klunky and not the least bit risk averse. I walked into my bank and talked about transferring the money to a relative's bank account in another state. The answer was "sure, we can do that but if you get even the smallest bit of information wrong, the money will go elsewhere and we'll wash our hands of the results". I finally just carried a check physically.
Spiking that story would have delayed Theranos's collapse a bit (it isn't like if one news organization doesn't report a story no one else will ever find it), but had Murdoch spiked the story and unloaded his stock while it was still worth a lot, he could have been in legal trouble for trading on inside information, something only sources within the company knew.

This kind of spiking backfires badly when discovered (NBC blocking Ronan Farrow because they had their own related problems, he wound up taking the story elsewhere).
Housing isn't exactly affordable if it doesn't come with a job to pay for it.

It's not just that manufacturing jobs have left. Every time we empty some mine of the last bit of ore, you get a town no one particularly wants to live in anymore. Every increase in agricultural efficiency results in fewer farmers, and thus less reason to live in rural farm towns.
> Makes me want to reread The Secret History though, it perfectly captured the weird cozy but suffocating vibe of being trapped in an isolated bubble with the same people for years on end.

The cozy vibe of murder?

Jokes aside, my impression of the school in that book was that it was closer to one of the fancy east coast SLACs that do have somewhat of a reputation, but it's been a while
Tactile and audio feedback matter a lot; think of eating (shelled) peanuts v. pistachios.