skysight-inc/HackerNews huggingface dataset:
| The west should start demanding reciprocity to China in lots of ways.

Agree. It makes my blood boil that we're handing over the culmination of years of research and development, both academic and corporate, for the sake of a few short term dollars. There will always be some moron happy to the the one to hand over everything in order to make a quick buck.

I am way out of my element as I have no legal training, but how are there no export controls? It is in the US's best interest to not allow this to happen. Do we really want to live in a world where China can copy any western technology at will, but never divulges any of it's own secrets? What a load of crap.
It's illegal to incite people to violence and make death threats in the USA, even on YouTube.
Link to the HD discussion of the actual post from Docker, Inc.

https://news.ycombinator.com/item?id=8962367
I'd rather people were able to post animal cruelty videos. That shit needs to be stopped and people need to be aware that this stuff happens.

How are you meant to expose animal cruelty if youtube censors it?

I doubt what you were watching was an exposure video but the content you want filtered is the same.
>adding backdoors

Aka give us access to the backdoors you were already compelled to insert by USG.
Syria’s President Speaks – A Conversation with Bashar Al-Assad
From a technical point of view, the TI stuff was great for starting out. Their Sensortag is a great little bit of hardware for getting your brain wrapped around embedded dev, plenty of code samples (for both the firmware and integrations). OTA updating the firmware from an iOS/Android app is great too.

That said, the requirement of using IAR to compile (which is a minimum of $2.5k after the 30 day trial) sucks pretty hard.
Large scale spamming botnet detection [pdf]
Iran is in the throes of an unprecedented sexual revolution (2013)
Yeah, I might have been a little bit flippant in my dismissal any danger at all, I just found it a bit melodramatic to act like the video is some huge danger.

I agree, I don't want to stumble on a violent video while browsing youtube. I just don't think it is actually a threat to our safety.
Internet Archive: All the Web in 1 Website
It's always a delight reading well-written code. I think this one fits the bill, so I'd like to share it here on HN.
Our API is entirely focused on identifying comment spam; we don't have anything that would be useful for identifying spam signups.
Could we get a more informative title?
I wish, system administrators and devops engineers who does not code for a living were this much appreciated.
We only brushed over how hashes work in college, so I may be totally ignorant, but-- wouldn't rearranging the order of the data (rotate, flip, etc) necessarily change the resulting hash?
Hahah I would say it does. I suppose I do! ;-) Have a nice day sir or madam!
Covert ugliness certainly happened; during the Cold War I had a friend at a research lab where they got some sort of NSA blessed network land-line terminating communications device, it had to be in its own special room that was beefed up so that breaking into it would be detectable.

As one of the two in the group with access to that room to maintain etc. it, he was required to get a special clearance, and one of the requirements was that he never ever visit certain parts of NYC (where he was from) and Long Island, where we know the UN KGB types spend a lot time (including on the beaches :-). That's because too many of our people just up and disappeared while visiting those areas....

Very different from a completely overt hit like this, or shooting someone with a rictin pellet (http://en.wikipedia.org/wiki/Georgi_Markov), but, still, it happened sub rosa.
> I can understand this, but... The DOM is already incrementally rendered by the browser. That is, changes to the DOM are not direct, but are performed by the browser in a way that is as efficient as possible. So, why the need for a render() method?

The browser tries to batch updates as efficiently as possible, but because of the model there are limits on that, reflow and layout thrashing are easy pitfalls to fall into for instance. React's model obviates these issues so the system can make significantly more assumptions about what is happening, and it can combine and batch more aggressively.

Furthermore, React's updates can trivially be delayed as much as necessary (in browsers, usually to sync them with the next repaint using requestAnimationFrame), not so for DOM mutations.

> Also, the render() method itself could be quite big and thus could take a long time to run, and almost completely nullify all advantages of incrementally updating only the display.

It could be but it usually isn't, and more importantly for these cases (and others) the system can be told that there's no need to re-render the component (`shouldComponentUpdate` in react), the previous result can be reused as-is.

For "pure" components (which simply map application state to render state) it's easy to implement, and downright trivial when using persistent datastructures: it's just an identity check (which is why systems built from the ground up on persistent datastructures like clojurescript/om or elm.html are faster than "naïve" react OOTB: they can assume components are pure, will only use their parameters/state to generate UI state, and that said parameters/state hasn't been screwed with; React being a more general-purpose JS library can't afford to make these assumption, it has to be opted in explicitly)
The Mysteries of Seattle's New-to-Town Tech Workers
Great article.

I find it quite helpful to have historical context when learning about math and science. Somehow, learning the who/when/how helps immensely in learning the what. For instance, the book A Brief History of Everything by Bill Bryson is very good at presenting things with a context.
The project name is pure gold!
I just plop Browserify into a project's routes (eg., using browserify-middleware [1]), and have everything automatically build when the browser requests it. With this [2], you get fast incremental builds.

[1] https://github.com/ForbesLindesay/browserify-middleware

[2] https://github.com/bjoerge/rebundler
But it's certainly not a good, modern regulatory infrastructure.

Of course not, but then again, is that even realistically possible these days? Serious question.
I love Ricky Jay. My dad is a slight of hand specialist and his entire basement is essentially a magic library. Anyway, when I was a kid I took particular interest to Ricky's book on how to throw playing cards as he used topless models to demonstrate form.

Knowing how hard you can throw a card, I feel like I'm lucky that me and my brothers escaped childhood with our eyesight intact.
On a cruise a couple months ago. I survived.
HSMs are tamper-resistant/tamper-responding devices with memory/processor inside the protected envelope. With an HSM, your key lives inside, and all operations happen on the security processor.

HSA is an Amazon term for a PC with an HSM inside. The data-at-rest might be protected by the HSM (full disk crypto with a dongle used to decrypt at boot), but the actual keys get decrypted into the host PC's RAM, and further customer-accessible calculations happen in the PC CPU.

Anyone who can tamper with the PC can read the keys!

There are two risks this exposes you to:

1) Someone goes into the datacenter and physically attacks the HSA.

2) Someone legally compels the owner of the HSA to subvert the HSA.

I'm not as worried about #1 (these are equinix tier-4 datacenters; someone rolling in with some M4s and a bulldozer and such is great for Hollywood. Insider threat probably still exists with the HSA even though normal operation is two-employee, though.) I'm incredibly worried about #2, since the bar for #2 is hella low for emails older than 6mo.

I believe ECPA older-than-6mo would be sufficient to compel the email KMS key as mere instrumentality, so even a the fairly low bar today of warrant wouldn't be required.
Great for SEO!
I understand that's a drawback of k-means. I was just wondering if this was something that Spark solved natively. Looks like the answer is no for the time being. Thanks for the pointer to LWPR :)
Thanks for the correction, Richard!
Ask HN:How do you approach investors /investor firms
How do you approach investors or investor firms when you have a product and a business plan? I understand many investors prefer a referral of "someone I know". What if I don't have this kind of connection, and I am not at Silicon Valley.
You can do that with some funny inline-block wizardy on Vanilla CSS by the way.
I don’t currently know if flex-box helps here. I think not.
Namecheap: Free .Me Domain with .Edu Email
I'm patiently waiting. Keep up the awesome work.
The draft antiterrorism law pushes even further, calling for companies to store all data related to Chinese users on servers in China, create methods for monitoring content for terror threats and provide keys to encryption to public security authorities.

Sounds pretty backdoory to me. (Technically the article is talking about a few different laws/policies, but the underlying philosophy appears the be the same: the government wants access to everything.)
If you think these systems are meant to catch terrorists you are truly misinformed.
Building Ansible Playbooks Step-by-Step
The link you gave was only a paragraph long, and not very informative. Thanks for the followup that he had been arrested! That brought me to http://www.dispatch.com/content/stories/local/2015/01/28/tom... which had more details about the arrest.

I learned about him a couple of years ago through the book "Ship of Gold in the Deep Blue Sea", only to find at the end that he had sign-off over the final publication, which made me wary about how to interpret the book. I then looked for more recent news about him, only to find that he had recently deserted his rented mansion in Vero Beach.

I'm pleased that he's been arrested.
I wish more people would understand that net neutrality in it's platonic ideal will be nothing like the net neutrality that meanders through the bowels of the government sausage factory.
A better analogy, and one many people share.
Dissing Birmingham UK
Maybe using BP-Means: http://arxiv.org/abs/1212.2126

K-Means without preset K.
Yep, I overlooked that fact, yeah that's awesome. I can imagine a world where people just come up with lots of mappings for the result, modularly. That's awesome
It really depends on what you are using iOS for.

If you already know ReactJS, then it'll probably be a lot easier for you to learn React Native than Swift or Objective-C.

If you are working on a team with primarily JS developers, React Native is probably a better choice to go with.

Will this cause Swift to be irrelevant? Probably not.

--

If you are learning iOS and doing production / client work, you should be aware that using a third party framework could actually break your app. I'm interested in React Naive, but also very weary about it. Facebook released a framework called Three20 back in iOS 2.0/3.0 days and abandoned the project shortly afterwards. Of course being open source there is bound to be people who take over the project, but it's something to think about.
For those in San Diego – New app gives best nightlife and happy hour deals
Google is a private company not a state.
BuzzFeed is basically a supermarket checkout line magazine for the Internet. (So is Huffington Post.) It's less part of the Internet and more something the mundanes brought over from print.
The fact that you have a duty to do something doesn't mean you aren't also entitled to compensation afterwards for risks and costs you encountered. See the first paragraph of this article for an explicit discussion:

http://www.jstor.org/discover/10.2307/1288377?sid=2110519172...

The only thing thing I can't rule out for sure is that government salvors are somehow not entitled to compensation in international law even when private salvors are, but that would be pretty weird. In any case, it's definitely not true of "the entire maritime community".
I know someone who worked as an engineer on one of the incarnations of the ISS.

I told her I thought a ride in the shuttle would be a fun birthday present.

"You'll never get me up in that thing," she said. "I've seen the plans."

I also remember New Scientist running a feature with a ball-park statistical risk assessment of the entire program, which estimated that if nothing changed two vehicles would be lost before the program ended.

So... tragic. But predicted. And so nearly avoidable.
Not knowing a world without these things might just as well be a reason for upcoming youngsters to view our current mentality as "old-fashioned". And we all know how much youngsters hate old fashioned stuff. They might not want to step into our shoes; maybe they will be more conscientious about things we are currently not at all interested in.
So let's assume I have a listbox with N elements in it. I assume the render() method has to visit each of these elements every time an updates takes place, so it is O(N). Please correct me if I'm wrong here.

Now for a certain value of N, things will become slow, unresponsive. I'm guessing now that this value of N is above the value where the browser cannot handle this number of elements anyway. Is this correct?

PS: I understand that it is possible to completely optimize the listbox case. But that is not the scenario I'm interested in. I'm interested most and above all in the typical use-case. I'm just using a listbox as an example here. Just replace it by any other sufficiently complicated and customized UI component if desired.
Stream any content over HTTP (logs, video, etc.)
Philosophical thought of the day
Is feeling good, good? Is feeling bad, bad?
Why?

Is it because your instict tells you so?
Instict is survival.

Is survival good?
Who knows, but only survival matters, since all else is dead.

Catch 22.
Left as an exercise to the reader: write a program to interpret the output and massage connectivity until it satisfies whatever pedantic definition of "maze" you prefer.
What Is the Point of Academic Books?
That's why this is a tricky issue. In theory most of these demands are quite reasonable, but the context is that a country known for cloning and hacking is asking for "visibility" into technology developed by others. The potential for cheating is large. And if western companies refuse, they'll be displaced by domestic Chinese companies so China has little to lose either way.
Those a valid complaints. And I agree that they're overhyped.

But I do think that psychedelic drug experimentation match up with SV values. We're pro-risk and we're fine with breaking barriers. Psychedelic experiences can be good, but I think it's just a good signal on someone's willingness to explore, curiosity and bravery if they're willing to try it.

You might consider doing psychedelics with other engineers. It's good times.
When would this be open to the world? :)
Unreal Paris: Demo Link and How to Run in Oculus DK2
I know a bunch of people from the UK heading to SF fundraising over the next few months, would be great if something like this existed for people like them.
Personally I think an iPad is unbeatable for many kinds of content consumption. I do 90% of my comics reading on mine, it's vastly better than the computer or phone for reading PDFs, it's great for playing casual games, it's decent for surfing the net. If I want to do content creation, I have a laptop for that. It's not about one device to rule them all, it's about finding the right device for the each job.

That said, I didn't have a functioning laptop last week, and I actually got a decent amount of programming done using my iPad, a bluetooth keyboard, and an SSH app. I'm pretty sure that if I were a regular Emacs or Vi user, I could use it quite happily for that on a regular basis.
> just up and disappeared while visiting those areas....

Disappeared as in "assassinated"? That sounds a little too made up.

If I was the security officer of that employee I would also probably try to make up some scary stories to make sure he never even feels temped to go there by telling him "some" agents had been captured, tortured and dissolved in acid by secret and evil commie rat agents.
The Quantum Experiment That Simulates a Time Machine
The "truth doesn't exist" models has nothing to do with modern Russian philosophy. In fact the most common refrain today in Russia is based on Nevsky's quote of "God is truth". However, the same culture recognizes that while truth exists, it is fleeting, fragile, and is easily corrupted as soon at it becomes a subject of discourse within a society. The root of the conflict between West and Russia today is deeper than superficial slogans about who shot down MH17 or overthrew the Ukrainian government. West and Russia are fighting over whether the existing dollar based financial system will stay around or disappear. The virtual battles over Ukraine, Syria, and terrorism are just a sideshow to the deeper game.
A 100 line Node.js CSS preprocessor (vars only) with file watching
Drone maker DJI will disable its units over DC after White House crash
Shadowcash: Zero-Knowledge Anonymous Cryptocurrency
Will it work with Reagent?
> Before Hound, most engineers used ack or grep to search code,

…meanwhile, programmers used actual code searching tools like GLOBAL, cscope or ctags to "search code".
And it is way better than just leaving keys in VMs.
Charles H. Townes, Physicist Who Helped Develop Lasers, Dies at 99
There are literally millions of computers happily running Windows XP, Windows Vista, Windows 7, old versions of OS X, Android 2.x, and 2+ year old releases of Linux.

For what a lot of people do on computers, old software still works just fine. Yes, you don't get all the latest updates, but millions of people don't care at all. Certainly millions don't care enough to spend money to upgrade. More than that, a lot of people don't really notice the difference.
>> On the other hand I absolutely loathe the still-spreading BuzzFeedification of virtually everything online.

Agreed.

The analogy I use with my friends is to think of TV and for that matter Cable TV before reality tv and where TV is at this point - 95% reality tv, with little or no substance or redeeming qualities.

This is where I feel the internet is right now, but also take the view, the good stuff is out there, you just have to dig a little to find it.

I started taking this viewpoint after hearing Henry Rollins spoken word tour where he really thought punk rock was dead. He then related an experience where he had a friend of his in Chicago take him to a hole in the wall club where 3 punk bands he had never heard of were playing. He said it was amazing. People smelled, the club was dark, the lightening was terrible, and the sound system was sketchy. But the bands played their guts out and blew him away.

He concluded this had become a theme in his life. A lot of things, like Punk music isn't dead, you just have to dig a little deeper these days to find the good stuff buried underneath all the BS and garbage we get feed everyday.
A Rudimentary Terminal for Ocarina of Time
Does this include desktop apps?
To be clear, I wasn't attacking BuzzFeed itself. If it existed in a vacuum it would be harmless (and I guess even entertaining to people who like that model) and easy to avoid. The problem is all of the other websites that have seen its success and attempted to emulate it. The model it uses has become incredibly pervasive with what I consider to be a lot of negative consequences.
Amid Trial Over Silk Road, an Online Black Market, a Debate Over Emojis
That is a common tactic. For example as soon as US declared War On Terror, Russians and others quickly took advantage and declared their "wars" are now not just regular wars like in Chechnya, but they are "Wars On Terror". And they sympathize and understand the struggles of their American brethren and are willing to joins hands in wiping the terror scourge of the face of the earth.
Is this your Hard Brick?
Articles like this appear pretty much every month. Anything from gay activists to artists to mainstream political parties have been subjected to Facebook's puritan censorship.

It's become a bit of a running joke.
7 White on Black iPhone 6 Mock-Ups
> 50 years everything we've done will be superceded by something vastly more cool and interesting. Within 100 years it'll all be gone.

Which professions don't have that property? Not many. Science and writing/art give you a chance for that kind of longevity, I suppose -- although even then, doing something that has any real impact 50+ years later is difficult and very rare.
There's a strong statist undercurrent on HN, which is somewhat hard to understand, as well as a low tolerance for trolling, which isn't. Sometimes telling the truth in an unexpected context is mistaken for trolling.

In general governments aren't exposed to the same criticisms as corporations, or held to the same standards, except when their actions directly impact IT and online rights (DRM, surveillance/security policies, and such.)
I appreciate that people are upset at the USG and I think the comparison to China helps the argument, to be clear they're asking for a lot more than the USG.

China is way, way, beyond the NSA. They block huge swaths of the internet and blackout televisions. They monitor every chat you send on WeChat, without even the illusion of a warrant or probable cause. And, they're not asking, it's a condition of WeChat's operation. Imagine if you DM'd someone on Facebook or Twitter and the US government stepped in and shut your account down. It's that.

Comparisons are fine, but these are not the backdoors "you were already compelled to insert."
They seem to be everywhere.

The twitter usernames are public, and reading a sample of those biographies looked to me like everything from 13 year old boy to female middle aged graphics designer.

And even though these comments look very much the same, these seem to be actual accounts with normal use, not some troll battalion.
Grants and job imbalances in academia
Though I am a staunch supporter of net neutrality (primarily because so much tax payer money and publicly owned assets have gone into laying the actual pipe), I don't really fear a non-open internet.

VPNs are already usable by any motivated main-stream desktop user, and point-to-point + next-gen wifi allowing ad-hoc fast networks are only a matter of time.

At best the telcos will be able to squeeze unreasonable rent out of their infrastructure with outrageous data-caps and surcharges, but the writing on the wall even for that.. municipalities are laying their own fiber, and google fiber is likely only going to keep growing.

Just like no amount of raids, laws, scare tactics, pr campaigns, etc were never able to put even a dent in media pirating: an effectively free an open internet is going to be accessible by motivated individuals, period.
This is really exciting! Can't wait to use it.
It isn't impossible to unwrap a key from an nCipher system. Getting out the master HSM key is harder but still possible. Really the important part if the steps required to get it out to prove authorization, aka a quorum on the security world. The quorum size is an implementation/configuration detail and only MS would know that on hand to speak to that depth.
Is Tech Liberating or Squeezing Freelancers?
When you install a card skimmer, you also install either a video camera or a thin, identical layer over the keyboard to capture PIN keystrokes.
When I read the article I understood it to be that individual actual DOM operations are expensive compared to the virtual DOM. So, if you have N operations, if you apply them to the virtual DOM, and then do a diff, you may end up with M <= N operations one must apply to the actual DOM to do to get it to an equivalent state.
I don't think "attack" is specialized vocabulary meant for an in-crowd.

For reasonable, common definitions of "attack," seeking to disable something or cause it to malfunction is an attack against that thing.