skysight-inc/HackerNews huggingface dataset:
>And when every app requests at least half a dozen permissions

I think this is the core problem here. The "list of permissions" system doesn't make sense to anyone and just seems like some project manager following a list of checkboxes from a list of security practices.

I recently stopped using my Nexus 10 due to getting an iPad3 for a steal. I love being asked if an application can use my location, as opposed to having god knows how many apps on my N10 silently sampling my position. I love knowing that the entire OS isn't dedicated to better selling ads for app publishers. Apple, for all its faults, isn't in bed with the ad industry like Google is.

I really was hoping features like this would come to Lollipop, but apparantly this isn't a priority for Google. Instead we get a byzantine line of permissions no one understands and we all say "Yes" because we want the app. There's no alternative. If the Amazon Kindle app has a permission I must accept it to read my books. I can't just say "No" to location awareness or contact list reading.
Doesn't "private navigation" work for this?
Did you use gpg instead of disk/partition encryption for that scenario?
The expvar package – metrics for Go
Code Speak Loop Podcast: an application and a system programmer talk about coding
There is one full-time developer, but if you look at the git history there were contributions from other people as well:

$ git shortlog gnupg-2.0.9..gnupg-2.1.1|grep :|grep -v ^\ | wc -l
25
Bing is behind the german version of Google globally...
A very scathing article. Anyone who has interacted with Marissa have any inside information? Be interested to hear about what she has done well.
Deflationary currencies reward saving over spending. Aka, you can just sit on your money and it increases in value.

That's really bad for an economy.

My ideal cryptocurrency would constantly "leak" money, trying to maintain a 0.1% or so inflation rate a year, to prevent this problem.
A well drafted NDA is appropriate between sophisticated parties [with regard to what constitutes a well drafted NDA]. In this case, it appears that the potential client may lack the domain knowledge necessary for sophistication [in the limited sense], and this [and perhaps a concern over their own sophistication] is a cause for concern for the freelancer.

Some projects and tasks are worth the investment of educating the client. But trying to convince an untrusting individual to trust you over their attorney is one that should only be undertaken by the optimistic with time to burn.

In the end signing or not signing an NDA is a business decision and if it doesn't fit the freelancer's business model then it shouldn't be signed. That's just business.
This is a nice article, that clearly demonstrates the great value that hedge fund managers contributed to humanity along the years
Faker is python-specific, and not really about creating databases, but of course you can tack that on easily. It also gives you specific values instead of a set schema and supports different languages. I use faker too, and my favourite is to tack it on to factory_boy (http://factoryboy.readthedocs.org/en/latest/) for unit testing data with random but reasonable values.

Maybe a cool idea is to merge these two projects or use faker to do the value generation part here, but add more stuff in this project that's about generating a consistent schema of related values - fake users that post fake posts from fake locations in a consistent manner.

edit: Actually it looks like this does use faker!
This anecdote is almost too perfectly aligned with the narrative to be true:

> Reared in Google’s data-obsessed culture, Mayer tended to require countless tests about user preferences before making an important product decision. But when it came to media strategy, she seemed perfectly comfortable going with her gut. As a teenager in Wisconsin, she grew up sneaking into the living room to watch “Saturday Night Live” and occasionally recited sketches during meetings; in April 2013, Yahoo paid an estimated $10 million per year for the “S.N.L.” archives. Even though the actress Gwyneth Paltrow had created a best-selling cookbook and popular lifestyle blog, Mayer, who habitually asked deputies where they attended college, balked at hiring her as a contributing editor for Yahoo Food. According to one executive, Mayer disapproved of the fact that Paltrow did not graduate college.

Well, I can think of one obvious difference between Mayer and Jobs...
There is a limit on information to area in space. Eventually, bitcoin is going to be impractical to store even if you have a very large storage device at absolute maximum capacity.
Gah, call me lazy, but this article really is tl;dr. I feel like the web is the wrong medium for this. If I were offline with a printed copy of the NYT, and no internet access, I may more gladly spend like 15-30 minutes to read through the whole thing, but during my morning HN round-up, I really don't feel like it.

If someone wants to summarise for me, I would be grateful.

edit: Dear downvoters: you think I should just shut up and spend the 15-30 minutes to read the whole article instead of kindly requesting a summary, right?
Maybe the first one prevents other intelligent species from arising, and the anthropic principle applies. We're the first, otherwise we wouldn't be here.

Another idea is that basic game theory and physics applies to everyone. It's virtually impossible to defend against attack by objects accelerated near the speed of light. The only way to be safe is to destroy potential threats before they destroy you, and be very very quiet.
Not a chance. Here's the map: https://mapsengine.google.com/map/u/0/viewer?mid=zp15b_P5ERV...
Here's a slide deck on how it works: http://dedis.cs.yale.edu/dissent/papers/ccs10/dissent-slides...

Very interesting work!
Isn't this easily mitigated by making all request that change state (update data in any way) as post requests?
Mr Care
This is basically what weev found out about AT&T that got him put in jail.
Uncle Bob – The Cycles of TDD
Also the scheduling of it all; when building ships, there are things which must be done be for others such as welding in parts A,D,L before piece C is installed because if piece C is installed first, parts A,D,L can't be installed due to new physical access restrictions. It's a coordination master-work all by itself.
Indeed. This will be the first floating LNG (FLNG) processing facility, not just another Big Fucking Mega Boat(TM).

And there will be more of the FLNG facilities, too.

Studying and mitigating the effects of wave motion and wind interference is also a particularly impressive feat in industrial engineering.

Since the facilities will be rated to withstand weather conditions comparable (or better) to standing ones, one could even say that they're more reliable with increased uptime.
[Guide] Block Buyurl.net Referral Spam
If you do that, then you have to model program state not as objects, but as database rows. Have fun using ORM on all your projects, for everything.
Isn't that the point of services like Instapaper or Pocket though?
Yep, there's definitely a high cost to reading that book, it made me see the world very differently and woke me up to so much. Not in a happy way.
I find it sad how people are so lazy when it comes to long form content. I understand we all might not have time at the moment for the long form content, but there is time somewhere in the day. Somewhere.
The problem is that the proxy that the attacker is using could ostensibly alter the outgoing messages from his phone's web browser to mimic the browser fingerprint of Steve's desktop perfectly.
Show HN: “Building Software Products in a Weekend” Free EBook
I guess if lazyness == not giving a fuck to read the whole thing because I'm busying doing cool shit (to me) -ness
> And don't come back and say, "it's perfectly fine for them to use print."

I'm going to do exactly that. You having garbage print handwriting and pretty cursive hardly means that everyone is the same way. With the lack of cursive practice that most people get, you're much more likely to find someone with legibile printed handwriting than legible cursive.

> If you can't write legibly unless you're using a computer, how can you be called literate?

How can you even say this, and then go on to say "About 6 months ago, I looked at the piles of jumbled-up notebooks in my closet and was horrified at the chicken scratch on it. I could barely make sense of it. I might as well have not even been taking notes." ?
Nice work. It makes it far too easy to see that there's still no sensible alternative to my S4 mini Duos.

I'm on the lookout for a replacement for my Lenovo X230, which I got specifically because it can take 16GB RAM and has a <13" screen. It would be very helpful if the RAM slider for laptops was max RAM that they can take rather than min RAM from factory.
Something tells me the author started writing this article before the firefox news... (slightly after Napolean's invasion of Russia)

While I can't speak to the intepersonal management practices, this article seems to feed the tech killing stockholder demand for quarterly profits.

The company is doing much better than before, but "not good enough."

Whether the conclusion is correct, this article, despite it's length, doesn't make a case for Mayer not achieving the long term goals so far. (edit: fixed some messed up wording)
> So, in some ways, this thing is conditioning parents as well.

No, for parents you get Amazon Echo.
As a recruiter, I would check the following:

- Do you know the magic methods? http://php.net/manual/en/language.oop5.magic.php

- Do you understand MVP and its value added? The fact that you use laravel may be an hint for a yes. Have you tried to do a bare PHP/MySQL application? You should, just to see how dirty it can be.

- Do you know and use var_dump?

- Are you able to write a Fizz Buzz?

- What's your knowledge about security stuff? XRSF / SQL injection / XSS

- Maybe some basic array manipulation involving array_keys, array_key_exists, array_shuffle.

- How would your test if a string is included in another one? The answer is of course using strpos but extra care has to be given to handle a FALSE return

- How to test for NULL, empty and FALSE?

- How would you do a key value iteration?

Tests vary a lot among employers and, in my case, I do not expect 100% good answers but it gives me a quick overview of your level.
"A week later, Smith published an open letter calling for Yahoo to...merge with AOL. Redundancies could be eliminated, thousands of people could be fired and two former Internet superpowers would be downsized into a single and steady (if uninspiring) entity...'We trust the board and management will do the right thing for shareholders, even if this may mean accepting AOL as the surviving entity'"

I see where Smith is coming from, but that doesn't make his case any less unsettling. Do some economists really believe that the "right" thing to do is fire thousands of people?

Are a company's shareholders really more important than its employees?
This is only tangentially related, but I was surprised that Apple, Amazon, Facebook, and Google were considered the "big four" technology companies. The comparisons to Amazon, Facebook, and Google make sense in that those three (and Yahoo) are all internet companies, but I don't see how Apple fits into this paradigm. The author focuses on Apple's revenues from hardware sales, which has almost nothing to do with any of Yahoo's business.

I also found it interesting that Microsoft wasn't mentioned once in the article, considering the fact that it makes much more sense to draw parallels between two software giants trying to turn themselves around (not to mention the fact that Yahoo search is run on Bing). Surely Microsoft is still considered a "Big tech" company?
Where I am today because of someone else
I should have been more clear about what I meant : I was thinking of failing as in downtime not the company being bankrupt.

Imagine a cyber-attack that would paralyze Github for one month ...
When Google's Search by Image Function Turns on Itself
>What is the point on even having a database password?

Fuck-ups happen, and an insecure password does a good job of preventing any activity that doesn't explicitly include the password.

Like, suppose you have some dev tool that does things to a database. If your local dev environment does not have a password on the db, and the application environment does, odds are your tool is going to work locally but not in the application environment.

Basically, it can be a form of "type 'password1' if you are sure you want to do things to prod".
Show HN: http://52wins.com
My friend and I, while working on an employee feedback application, worked on this productivity application in spare time.

This application will allow users to set 5 goals for the year and then ask two questions every week per goal.
Q1. What did you do to inch closer to this goal this week?
Q2. What lessons did you learn for this goal this week?

Since we are working full-time on another startup (which is in closed private beta), we are giving this app to be used free of charge to 10,000 users in the world.

I have put together a very basic page where we can gauge the interest of a person in their productivity by asking their goals.

Can you suggest if I can do something else as well?
And a little bit north you can see that big crane on a barge in the water. Very cool.
For efficient re-usability, you need at least three things. The first is reliable launches that don't have lots of delays. The second is reliable recovery. The third is efficient readying for another launch.

That last one is trickier than people think. It was the main thing that stopped shuttles from launching faster, for instance. It took months of work to verify that all the systems were as reliable as they were before launch. It will be interesting to see how SpaceX handles that.
> As a parent, I find this mildly useful in keeping my kids on their best behaviour

Indeed, I'm sure it's a useful substitute to talking to your kids like human beings deserving of respect and giving them real world reasons why they should not misbehave.

You're emotionally manipulating another human being through lies. But it's OK because they're underage and you're their guardian. Right.
I can think of lots of cases where testing is not useful in practice. Simulating random filesystem corruption when writing a Node.js app is pretty much useless: you don't know which files will be corrupted, and testing would take a huge (billions of lifetimes) amount of time to simulate all possible combinations even for a small program. Yet, this can (and in my experience did) take down a production system.

My other examples I already listed, I think, are examples of this too: you can test all you want against a spec provided by your external API maintainer, but if they don't follow the spec, you have a problem. We don't have a good framework (and I don't think we can create one), for testing layout problems in HTML that are caused by bad JS or CSS.

Basically, you do hit diminishing returns quickly, and you do get a false sense of security by having lots of small unit tests that don't actually prevent realistic failures.
I just skipped through it quickly, but have it opened in a tab to read later :P

For some bookmarks/history and window/tab management I recommend checking old Opera (<=12). I'd argue it's still the best browser when it comes to UI/UX, unfortunately it's dead[1] and not really usable nowadays. For no-url experience, see Yandex Alpha[2].

1. there's an open source project to get that feel back http://otter-browser.org/ (not quite possible without touching the Blink)

2. http://browser.yandex.com/future/
In principle the DC-nets scales just as well, asymptotically, as non-anonymous multicast communication.

Consider a standard tree-based multicast protocol, where in every "communication round" the root node sends an L-bit message to its B immediate children, those children resend the message to their <=B immediate children, etc. Each node receives L bits and sends BL bits in one round.

Now consider how we could (in principle) implement DC-nets in the same tree, this time with a plaintext message originating anonymously at one of the N leaves of the tree. All N nodes create L-bit DC-net ciphertexts and send them up the tree. Each interior node obtains the <=B cipher texts from its children, XORs them together with its own L-bit ciphertext, and passes the result up the tree. The root gets the XOR of all N of the L-bit cipher texts, the (anonymous) sender's plaintext pops out, and the root broadcasts that plaintext down the tree exactly as for standard tree-based multicast. During the DC-nets phase each node receives <=B*L bits from its children and sends L bits to its parent, exactly equal to the bandwidth total cost of the (subsequent) downward multicast phase.

So in principle the fundamental cost of adding DC-nets anonymity to a tree-based multicast protocol, via this approach, is thus basically 2x over non-anonymous multicast. This applies equally to bandwidth, latency, and processing costs.

This is "in principle" of course, because there are many caveats: it's not so obvious how to make this theoretically scalable tree-based approach deal with churn or disruption, or do all the other things Dissent and other more practical systems have to deal with. Actually bringing this theoretically achievable level of scalability into practical reality is one of our goals but still very much "work-in-progress".
Everything that everyone said about Mayer and Yahoo two years ago was pretty much true.
The way CSRF works is that I put a form on evil.com that submits to example.com. If there's no CSRF protection, example.com will accept that form submission as if it had actually come from a page on example.com. GET/POST has nothing to do with it.
You can have your own non-corporate stuff as well.
Yeah, when I'm offline, with no distractions, and with a printed copy of the NYT. The morning commute in public transit may be a good situation, but I can't easily get a printed copy of the NYT here every morning.
Linux has this capability in recent kernel versions (3.x?). I don't know what the implementation is called (prctl?), but DragonflyBSD add this in procctl(2) in release 4.0. FreeBSD already had a procctl(2) and added the same functionality to be compatible.

http://lists.dragonflybsd.org/pipermail/commits/2014-Novembe...

So now FreeBSD and DragonflyBSD have plans to utilize this exactly like Illumos and build lightweight process supervision without the need for something as disruptive as systemd.
The Email I Received from Google in 2007 When They Wanted to Buy Zilo (2012)
Would be great to also have radio capabilities (ie 3g,4g, lte, etc.) as a filter.

Looks awesome!
I think the DSL itself is great. I have a project where I'd like to use something like this in anger and I'll revisit when I get to engage on that peoject.
7 WEIRD Benefits Having a Bearded Face Has Provided Me
I recently got a Moto E as my first smart phone, ever, and after checking out some apps, I was astounded and befuddled by the access permissions that it seems every app needs.

Take ESPN's fantasy football app, which requires:
device and app history - whats apps are running, browsing history, bookmarks
identity - accounts on the device, profile data
photo/media/files - access to files on the device and the device's external storage
wi-fi connection information - whether wi-fi is enabled, names of connected wi-fi devices
device ID and call information - determine the phone number and device IDs, whether a call is active, and the remote number connected by a call

I can understand why it might need access to the file system to, for example, upload an avatar. The access to wi-fi seems innocuous, although I would expect something like network connectivity and status to be delegated to a kernel module or background daemon with which an app interfaces.

But is there any legitimate (i.e. some non-financial oriented mine as much data as possible) reason it needs to be able to see what other apps are running, my browser history or who is on the other end of a call? There might not be any reason, and ESPN could potentially build the app to have as many or as few permissions as they deem valuable, because people want an app to manage fantasy football teams first. While this example might not be the best, since ESPN is a huge brand and there is no alternative if they are hosting your league, the situation was the same with so many other apps; just absurd permission requirements.

None were installed.
This is where you can really tell that SpaceX is a private company. If something has a chance of going wrong, and they can avoid live-streaming it, they will.
The Firefox news is going to do more to bring down Mozilla than bootstrap Yahoo. Yahoo's search IS inferior, and forcing it on people is bullshit. Mozilla should allow users to choose their default search provider on installation.
You and he were...buddies, weren't you?
Dining cryptographers problem
> Mayer disapproved of the fact that Paltrow did not graduate college.

Wow , sorry but wow. Paltrow is famous,more famous than Mayer will ever be.If this thing is true,it tells a bit about her personality.

In business,you want to associate with famous people that can drive their audience to your product.Does it matter they graduated or not?frankly?
You may donate to Wau Holland, who take bitcoins for gnupg.

Stripe announced a long time ago that they will support bitcoins and they seem to have a closed Beta for this. However it has still not gone live. I try to avoid working with yet another payment provider just for converting bitcoins to Euros. For bookkeeping it is much easier not to take care of assets with large fluctuation.
[wk@gnupg.org]
Good news—Comcast is building a new skyscraper in philadelphia.
"Steve Jobs"-type people are rare. Marissa Mayer I'm sure has her strengths, but this comparison is unnecessary or perhaps, unfair.

This 1996 Microsoft Developer's Conference is one of my favorite Steve Jobs presentations http://channel9.msdn.com/Events/PDC/PDC-1996/PDC-1996-Keynot...
Faster Builds with Container-Based Infrastructure and Docker
I can say that because I don't consider myself to have truly been literate until 6 months ago, when I started using cursive. If I had written a letter to someone the way I usually wrote, they wouldn't have been able to read it if they tried. And I considered my own writing back then to be pretty okay, because I made it all the way through high school and college with it. Why all my teachers allowed me to write like that is a mystery to me.

I'm able to say this stuff because I spent about 20 years of my life not using cursive at all, filling whole notebooks with print, then suddenly using it and filling notebooks with cursive. So the difference is very clear to me.

Edit: And plus, you missed the whole second part of my comment where I said that even if they can print neatly, they certainly can't do it quickly, so it's still not as good as cursive in that regard.
Any way to block people submitting every single blog entry? https://hn.algolia.com/?q=how+to+block#!/story/past_week/0/h...
While I can't answer your question(s), I do wonder why Yahoo and AOL fill me with no feeling whatsoever. This, for as long as I can remember (save a few select years in the mid 90s). It's amazing how these companies can still be around, though I understand "Middle America" still uses them.
It's not always laziness; since nobody can read everything, people need help deciding which stuff to read.

I need a TL;DR and other's people's feedback on the piece to help me decide which one it's going to be.

Furthermore, for the ones I don't read, it's nice to have a TL;DR so I'm at least aware of the major points.
Do any cloud SSL terminators like Amazon ELB support forwarding the channel IDs on to the application servers (i.e. in a custom header)? For that matter, is there a configuration setting for i.e. Nginx if you want to roll your own SSL terminator to do this? Having trouble finding good documentation about how to handle this from the server side.