skysight-inc/HackerNews huggingface dataset:
The history of SDMI vs. iTunes and AACS vs. Windows XP has taught me that DRM "requirements" are just the opening position in a negotiation. Apparently Mozilla doesn't have enough leverage to get rid of DRM completely but they have enough to water it down a bit.
Im not sure I agree with this, especially when you want to get your lab to switch at first. The fact that its free is a huge bonus to get my lab to "just try it"
We're dealing with mostly clueless millenial "journalists" here, so cut them some slack.
And as others have noted, this doesn't make sense given that passwords are case-sensitive and are required to include uppercase characters.

If there's a mechanism for specifying case on the phone, there can be a mechanism for specifying Q and Z unambiguously. I certainly have used VM systems that explicitly told me to "use 7 to represent Q and 9 to represent Z."

A contractual requirement is one possibility that could explain it, but my suspicion is rather that some legacy code in the system uses Q and Z as special escape characters or delimiters (because of their absence on the phone dial), and it's not worth the cost to try to fix the ancient code (or do all the testing necessary to be confident of deploying a workaround).
Not yet. Is it worth it?
Considering the Moto X (on Verizon even) was the first non-Nexus phone to receive an upgrade from 4.3 to 4.4, I would assume it means that the Moto E will get whatever major release comes out after 4.4.

But I would also be willing to bet that the wording is intentionally vague such that if Android 5.0 comes out next, and makes it "impossible" to upgrade, that the lawyers will be happy with just a single security/bugfix update.
Be wary of the no money down iPhone 6
Stuff like this is why I like Dropbox even though it's more expensive. File syncing is their bread and butter. It's their main business, not a sideshow. They're always going to do this better than anyone else.
It will be laughable to think that CDM won't be PMP-based.

Even on Linux and OS X?
It may be wrong, but is it, perhaps, a harmless and useful way to understand Haskell?

(I have a friend who always tries to show me examples of neat stuff he's done in Haskell and I can never wrap my brain about it)
That's funny. I held onto my DOS 286 laptop for many, many years so I could write on a single-function device with no access to modern software.

I used Norton Commander editor or vim to write documents and found it easier to be creative with a text editor instead of a word processor. If editing what I wrote on the first draft forces me to rearrange line endings, I find that I tend to edit my words less often while creativity is flowing.
The Android version is new (only a few weeks old) and new features have been released today.

But you're right, wording needs to be changed.
Mozilla should have done the right thing and stood by their beliefs that DRM is harmful to the free web. Instead, they folded to the media corporations and implemented EME. I understand the tremendous pressure they must have been under, but it was the wrong decision. Mozilla is not serving the users by allowing Netflix, Amazon, and others to trample their freedom for the sake of watching TV shows.

Mozilla, please remove this anti-feature. Do the right thing.
I do, and I have no issue with them. I eat lots of apples, sugar, broccoli, mushroom, and cheese. Daily. I eat goat yogurt (I like the taste better) but I eat some regular yogurt too. I typically don't drink milk (taste again) and eat almond and coconut milk instead. (Trader Joe's gets lots of my business)

I eat very few processed food, canned food.

I eat all fruit (except kiwi--i get irritable bumps on my tongue), meats, cheeses, vegetables, rice, potatoes, dairy products, wine, and non-beer, non whiskey alcohol. (Also, some Shoju is made from wheat, so I only drink those from sugar cane, potato, sweet potato, etc).

I eat very little fried foods. (Although I won't pass up french fries on occasion).
Ken Thompson's Turing Award Lecture: "Reflections on Trusting Trust"

http://cm.bell-labs.com/who/ken/trust.html
https://github.com/beansight/beansight-website/blob/master/a...

51 lines for imports and 45 lines for code..

that's all about java..
Or, you know, just use a new word processor and turn off all the features you don't like.
Part of the experience is actually being disconnected. You, your mind, your writing implement (be it pen and paper, typewriter, old DOS box or a more modern OS with no network connection (see Knuth)).

EDIT: This could be done with a VM or something, but really you need some software that'll lock down your computer and not let you just alt-tab back to your normal, internet connected experience.
I don't think their Markdown flavor supports any Latex extensions, that would be a good start, IMO.
So I guess what he has to worry about is someone handing him a sketchy floppy disk...
Also, people who let their machine and browser rund 24/7. I'm currently stuck with an 8GB machine because I hit the maximum RAM supported by the mainboard and I don't have the time to go through a full productive machine migration right now.

So I restart my browser every 48 to 72 hours to reduce the memory footprint (which is one of those clunky "hacks", but it still works).
Mozilla employee here, speaking for myself but pretty close to the info source.

That's actually what we're looking at doing: the sandbox would be in there, harmless, by default, but the actual crypto module (the "CDM") would download from Adobe upon first need. (And they have committed to support the platforms we support, Linux included.) The exact UI is still up in the air. I could imagine us using the opportunity to display a message to educate users as to what DRM is and whose phone number to call if they don't like it. ;-)
Or do all of your math in cents. Then you've only got to worry about FP at the displayed end.
Hand-written snail mail letters-- I like it, Old School!
I find Sublime Text distraction free mode very good at that.
Just like they worked very hard to prevent EME?
"Numbers every programmer should know"- Probably the most interesting part of that article is the slider. As you move it up and down, you can see how all the different things get faster over time.

... Except for the final one, "Packet Roundtrip". Networks have reached a physical limit of the universe, the speed of light.

http://www.eecs.berkeley.edu/~rcs/research/interactive_laten...
Do you offer any pay-as-you-go or API request based pricing?
Except said "competitor" is most likely Comcast who is no different.
Intellisense is a good point. If you already have the variable there, getting the free "list of stuff I can do with this" can be pretty handy.
His writing presumably gets to the outside world somehow (last I checked). Presumably that means floppy disks, which are an attack vector.
A dupe of https://news.ycombinator.com/item?id=7732320.
And RSS is great. What are you getting at?
> From a social point of view, if you want to associate yourself with interesting, smart people and engage with interesting social activities, you will have to identify and seek those out from among everything else.

Other than less desirable job opportunities, this was the worst part about going to a school that isn't top ranked. Most of my classmates and people in my social circles were there to go through the motions and weren't interested in anything academic. Although I enjoyed college, the whole experience really made me regret not taking high school seriously.
I was looking for a joke along the lines of "that's why the world he depicts is so cruel, and that's why he kills characters so often", haven't found it, and by this comment am adding it.

On a serious note, whatever tool does not distract you while writing fiction is best. Usually you don't need an IDE for that.

OTOH a saga of that size might benefit from cross-referencing, timeline, etc IDE-like tools. Stephen King is known to employ a special person who checks his works for consistency with previous works in the same universe.
Tags can be moved in Git. How much you want to trust the tags depends upon your use-case.
He writes for TechCrunch. That normally means he also believes there are no Mac viruses (or flaws).
RemoteBridge: intercept just about any third party internal Java and COM object
At least as feasible as a feature-compatible flash replacement.
I love KDE. They've completely dropped the ball so far in ditching their design baggage and starting fresh.

Meanwhile, everything in GNOME 3 looks great out of the box and is just smooth and slick.

But I hate client side decorations and GTK+. Come on KDE devs, this is a steal.
Direct link to the calculator in case you just want to play around with it: http://awstcocalculator.com/
Thanks, that's what I meant (and cited). That's what I get for typing quickly on my phone, haha.
I wish I could be against all DRM. Like many things in life, it's not that simple. I'm proud of Apple for successfully taking DRM out of the equation from music sales. But what about non-sales interactions?

We don't get DRM-free copies of all our music from Spotify, nor should we reasonably expect that. We are subscribing to a service that allows us access to music so long as we are paying customers. Why shouldn't there be light-touch DRM in place to keep us from flagrantly abusing the system and retaining all copies of the music after if/when we cancel our subscription?

Should we reasonably expect to be able to keep a copy of a television show that we streamed from abc.go.com? ABC makes far less money from showing us ads than if we purchased a copy from iTunes. They do this, part and parcel, because we don't get to keep a copy of the show after we're done watching.

From my perspective, DRM has no place in a "sales" relationship. We should have full usage rights whenever we buy a book, movie, or song.

DRM should exist for subscription services and ad-supported streaming. DRM should essentially serve to enforce the social and legal contract that says we are "borrowing" the books, movies, or songs for long as we have that relationship. Once that relationship is over, we can't use that stuff any more.

I suggest that we create an open-source DRM system designed to fairly protect the content creator in cases where the audience is "borrowing" the creative work (whether ad-supported or subscription).
I did not like the beta interface for RequestPolicy and I hacked in support for using regex matching for whitelist entries so CDN domains like CloudFront work correctly.

https://github.com/alyandon/requestpolicy/commits/release-0....

Caveats are:

1) I have absolutely no intentions of continuing any work on my hack. The changes I made meet my needs. Feel free to fork if you need additional features.

2) I don't pretend to be an elite javascript developer. I have no idea if my hacks are considered idiomatic javascript or not. I also make no promises that running my hacked version of this extension won't upload all your private data to a server in Russia or cause other problems like having your hard drive explode in a ball of fire.
No it seems most of them believe they did the Paleo diet.
I'm guessing the boycott is over?
"privoxy" not "a proxy"
It is the most polished Linux desktop IMO.
Imagine me explaining this with my eyes closed and my hands hidden in each sleeve. This is not an excuse, only a subjective observation:

Python has properties that are not congruent with the expectations of an inexperienced administrator. Its scent is unlike the other creatures that exist in our fold and it makes us feel inadequate that we cannot control it with the skills we use to control the rest.
A lot of different distributed storage and computation architectures are special cases of CRDTs, just with different sets of commutative operations and/or convergent types of state. (One of the aspects of CRDTs that I most appreciate, as it provides a framework within which one can compare different technologies in a thoroughgoing way.) Ones I like to cite as common examples that people have often touched before are datastores like Riak, CouchDB, and S3.

The document model treatment you describe is talked about some in the Shapiro et al. paper as a "continuous sequence", and is roughly what was used by Logoot and Treedoc. The latter is explored more thoroughly here: http://arxiv.org/abs/0907.0929.

I was only talking about network APIs in the original piece. The "set of names" bit was there to establish the lineage between "classic" programming language/library APIs and those that touch the network.

APIs themselves do exactly nothing. It is the computational service on the other side of an API that does something. This conflation is exactly the sort of thing that is allowed and encouraged by the construction of APIs as "just another function you call in your runtime".

I find the Facebook examples you offer very curious. APIs have no inherent model for authentication and authorization, and the same goes for CRDTs. So, why do you think that verifying authorization over a set of operations or set of modifications to some state is any different than verifying authorization on N operations attempted via N API endpoints? I'll certainly grant that the latter comes with a body of current programming practice and infrastructure, but that hardly an endorsement of its relative quality or suitability for the job-to-be-done.

My preferred characterization is that the Facebook API would be replaced with a data model. The original piece already hints at a number of advantages to such an architecture, and omits many others that I'll talk about at a later date.
Brandon Sanderson has some videos up on youtube that show how he writes his stories, including writing notes and referring to them:

http://www.youtube.com/watch?v=lxFySrqdi8E
Have you tried using Chromium[1] instead? Once I got serious with ABP/KISS Privacy/Ghostery I figured it made sense to switch from Chrome to Chromium.

And discovering Chromium-Updater the other day has plugged the only missing piece in the jigsaw, for me.

[1]http://chromium.woolyss.com/
[2]https://github.com/benbristow/Chromium-Updater/releases
As an experienced administrator, I can tell you most hate change. So, a lot of admins are still using Perl and Bash scripts.

Python doesn't really bring anything to an admin's life that isn't covered by those other two workhorses from the 90's toolbelt, except irritating change.
Anyone know why the artist included at least two Led Zeppelin references? The font and shepherd in the first frame are alluding to Stairway to Heaven, and the sign in the last frame has the 4 symbols from IV.
I guess thats pseudo DRM. On the other end you have things like RTMPe, a proprietary highly complex binary protocol that is only implemented in the adobe flash plugin binary blob. Or something like HDCP (the copy protection part of HDMI) that builds a hardware encryption platform, with an central authority and certified hardware vendors.

Those are just 2 examples of "strong" DRM, but since even those two have been so thoroughly broken, we can just assert that any DRM that is based on W3C EME is gonna be childsplay. I don't think anyone actually believes that this W3C crap is gonna be "secure".
Guess that makes bug #923590 a RESOLVED WONTFIX.

Edit: right on the spot...
Do we need all that much? This isn't all of flash, which is a lot of work. This is just something that decrypts data streams, AIUI.
Off the top of my head, the only way I can find to hate python is if an application was made to not be able to run under virtualenv or any of the really great environmental separation tools that a modern python setup uses.

If "using python" means intertwining the app into the system python / requiring sudo, etc then I would hate it too.
Take a look at https://www.dropbox.com/developers/webhooks/tutorial#best-pr..., specifically the part about managing concurrency.

There are rate limits (per user) on the Dropbox side, but they're pretty high. I think the bigger concurrency issue is going to be on your end (making sure you don't process the same changes multiple times). Taking a lease per-user is a good start, and we're going to publish a more advanced sample in the coming weeks that uses a queue to really eliminate duplicate calls.
Works fine for me with OpenVPN on Android (4.4.2 on a Galaxy S4 and Nexus 7). It will only prompt to accept the VPN the first time it's run. If you leave it running in the background it will re-establish the connection whenever it needs to.

That being said, I also have an Xposed module to get rid of the confirmation prompt entirely (I use Tasker to enable the VPN automatically when my phone connects to unsecured wifi networks).

I can't speak to how Apple does it, so maybe it's just an OpenVPN vs IPsec thing. If you setup your own IPsec VPN you could possibly have it activated automatically. There was a post on HN a few months ago with a script to basically setup an IPsec VPN automatically for you.
You make some fair points. I am not sure what the right answer then is. I agree that the average lay person is probably not going to know how to reason on these matters. However, if we are building faith as an abstraction, how do we deal with the fact that the abstraction is leaky. There will be errors. How do we communicate that the errors don't necessarily mean that the system as a whole is broken but that it is the nature of the system, whilst maintaing this abstraction of faith?
> Replacing unsandboxed plugin APIs like NPAPI that can directly access the OS with sandboxed plugin systems like NaCl and emscripten that support sandboxed native code seems like a major improvement.

Until you want to write a plugin with a legitimate reason to directly access the OS.
Not for me. I've moved to Google Drive. Cheaper, faster, better and less pro-war!
It's Damn Hard to Build an Enterprise Software Company
Sometimes when coding I find it useful to make a conscious choice to go back to "inferior" technology.

For example, if I'm undertaking a huge refactor which will require a lot of reworking of tests, I'll usually drop down to Emacs (or keep using an IDE, but turn auto-compilation off) just to avoid the extreme amount of mental noise coming from all those compilation errors just sitting there and increasing over time. Sometimes it's better to just willfully ignore all that irrelevant detail for an hour or two, get into the flow and power through while you have the inspiration. Those test errors (compilation or otherwise) can always be fixed later.
It definitely does. Proof by troubleshooting: http://helpx.adobe.com/x-productkb/multi/flash-player-11-pro...
> It's now only a matter of time before images, CSS, JavaScript, hell, even the text, are delivered through OS-specific, locked down CDMs

Do you have any other sources that indicate this push? Seems a possibility but it's the first I've heard of this kind of lockdown. Seems like the cost would greatly outweigh the benefits...
Another biiiiiiiiiiigest hole is config :)

https://github.com/beansight/beansight-website/blob/master/c...

Guys,

you had to hide your gmail account user/pass

had to hide facebook keys

twitter keys

application secret..

I just successfully authorized on gmail with your account and can read lots of mails, responses.. not saying that I can send emails on your behalf..
Can you give another example than this? Don't get me wrong, I'm trying to justify the huge price difference.
Not for me. All I care about this announcement is the hooks that Mamdouh Habib was hanged on while he was tortured in Egypt, sent there by the CIA.

And one of the Dropbox board members was an ardent supporter of this and other despicable practices(also known as torture).

If Daniel Levine is fine with this, then I am definitely not fine with paying, using or promoting his product API.

edit: I switched to spideroak and am quite happy with the product.
The modern equivalent would be an RPI with nice keyboard, monitor, software of choice and no networking.
I can think of some simple things FIs can do to prevent fraud. For example they could leverage your cell phone's GPS at the time you make a purchase to make sure you're actually in the store where the purchase is coming from. For online purchases, they could text you a confirmation that you were the one who made the purchase. Just some simple things that seem a lot less complicated than machine learning that we haven't tried yet.
https://github.com/typicode/json-server
Yes, very regularly.
Im on it daily (desktop & app) & tweet/reply/rewteet 2-10 times/day.
Tweet about marketing, startups, entrepreneurship & travel.

I can honestly say I've gotten smarter since I've been on it.
One big key to getting value out of twitter is to chunk people up into lists based on interest and/or keyword (Hootsuite is great for this).
I don't know what that code sample means.

General-purpose computers are capable of doing anything if the right (wrong) code is executed, so it makes sense to be paranoid about them even if you believe the code you put on them is safe. A Furby is not a general-purpose computer and does not contain a recording device. It is no more capable of recording conversations than a plastic spork is. I'm sure someone could open a Furby up and install a recording device, but at that point you've just committed to banning all physical objects from secure government installations.
Less pathologically, loops and conditionals also expose mutability, hence phi nodes.
Ask HN: How to visualize active record associations
I'm new to Ruby on Rails and having trouble getting my head around Active Record associations. I would like to map it or visualize it in some manner but have not found any resources or tools to get this going. Clearly there is some mental model/map that precedes the code. If anyone has any tips or suggestions, it would be greatly appreciated. Thanks!
As someone who's become a React core contributor since React was released a year ago and had the opportunity to work with a handful of people from the Facebook frontend team, I want to say that I'm really impressed with the quality of the JavaScript libraries that Facebook has released. React is the obvious big one, but other smaller projects like regenerator and jstransform are awesome too. I'm excited to see Jest join the party.

Congrats guys. :)
There are unicode libraries for Lua should you need to do unicode manipulation. In real life though I rarely have needed much. What functions do you need?
The Oatmeal on the Tesla Model S
Interestingly your name anagrams with mosad.
When discussing technical matters, anything that isn't technically correct should be accompanied by a disclaimer.

I usually like to say "just about", "informally" or "while there are some exceptions, it can be helpful to think about it as if..."
Doing auth in OpenResty is a good gateway into using it for more stuff, it is really easy to do whatever auth you need without your application having to know.
Some Open Source PDF readers respect the "don't copy" and "don't print" bits, even though you can trivially disable them.
Wow I feel that pain. I designed a replacement for Sun's yellow pages service called NIS+ and with a couple of awesome engineers got it built and into production. It changed everything about the old YP. And if there is one thing system administrators really hate, its change that isn't compatible with simple mods to their shell scripts. That lead to an interesting effort to make a NIS+ light which was more like YP.

The evolution of BIND had very similar sorts of challenges it seems. Earlier version worked new version was all different. So different that their customers (the system administrators) seem to have revolted. Ouch.

When you are building a part of the infrastructure that lots of people have to manage to keep the infrastructure running, its a special kind of challenge. Both in deployment, change management, and service evolution. Even after going through the process with NIS+ I'm not sure if I could even chart a path for a replacement BIND.