skysight-inc/HackerNews huggingface dataset:
Ya, I don't mind the unboxing videos, but the other day my 5 year old had somehow gotten from Frozen sing alongs to a weird manga-version of Let it Go. I figured from that point she was probably only a few clicks a way from really weird videos and made her go back to the eggs...
YouTube Kids App Launched
My experience is different. "We need feature X" almost always comes with an implicit or explicit "as fast as humanly possible".
Ask HN: How do you manage passwords in teams?
What tools do you use to manage passwords for shared services in your team?
I know of: Okta, OneLogin, Bitium, Meldium, LastPass, 1password but is one of them substantially better or worse?
This thread is already pretty old: https://news.ycombinator.com/item?id=6507679 so I'm resubmitting the question.
Temporary jobs
How exactly is advocating users' freedoms "defending malware"? By the same reasoning that advocating privacy is "defending terrorists"? I wouldn't want to use Privdog or Superfish, but if someone voluntarily wants to change how he/she views the Internet on their own machine, they should be well within their rights to do so.

The only site owners who aren't hurt by this type of malware are the terrible ones with no regard for their users

...or the ones who don't put any ads on their site? I do happen to have such a site, and the reason it doesn't have any ads is because it doesn't need them.

In my experience, the most ad-filled sites also tend to be of the content-farm type, providing little in the way of quality content.
Like I've said elsewhere, it's not the MVP-nature or the beta that's really the problem. It's that they want to start a service that charges 25% more in exchange for selecting which service to use, with a significantly worse user interface. It took me much longer to type in the order on my phone that it did to select the order from Postmates, the service they likely were using to actually do the delivery.

Even if everything had gone perfectly and I hadn't spent over an hour waiting for responses, I still wouldn't use this service. To pay more for a worse interface? No thanks.
ITT: mean-spirited people bash the hard work of others.
Also covered on HN first:

https://news.ycombinator.com/item?id=9078536
Your objection is probably more powerfully expressed as "waiting for a middleman to hire another middleman".

Of course, if you're intimately familiar with all the various services available to you in SF then this is not going to be a useful service. I mean that perfectly straight, not sarcastically; they basically tried to charge you $9 to "know Postmates existed". But there will be a lot of people who may still be willing to pay for not knowing all those various services. I'm personally skeptical but it's at least worth a try.

(I can't speak to the complexity of keeping track of the SF services, since I don't live there, but my impression is that it's challenging.)
If it takes 30 seconds to route a request and you have 5 people stand by you can process 10 orders per minute before you get a backlog.
It was probably discovered by accident when trying to get stuff working.
Product Hunt Was Our Launch Day Rocket Fuel
> Site where I buy software still has the categories distinguished & separate,

Typically the "OEM" purchase of the ISO Disk comes in just a plain white envelope (with COA sticker somewhere on it) and "no official microsoft support" since it's intended for "systems builders" who microsoft expects to have their own support for consumers. A lot of people who build their own rigs choose this option because the "OEM" package is usually $10-$30 cheaper. The "Retail" packaging just comes with the fancy case with color inserts, etc... and "official microsft support".

If you are building your own rig, you're probably unlikely to call Microsoft for anything. If you are some company's internal-IT, you're unlikely to call Microsoft for anything.... Heck, if you are installing your own Windows installation, you're unlikely to call Microsoft for anything... So i just always buy the "OEM" packaging when I need a new license.

So the difference there is really just the packaging the ISO/Disk comes in and whether or not it has "official" support by Microsoft. Otherwise the ISO image on the disk is identical. :)
>>> for they are literally the only game in town

I live in the Midwest and thought the same thing. After some research, I found several smaller companies who offer high speed internet, including the local telecom company.

I guess it boils down to if you're willing to pay more or pay the same and get slightly slower speeds without having to deal with Comcast and their horrible customer service.
Ask HN: Concurrency Theory and fundamental knowledge
I was wondering if anyone knew a good MOOC or book on concurrency. I'm talking then more about the theory, and how it relates to language design and the different implementations. I have practical experience with both concurrency and parallel programming. And even though I have a basic understanding of how it works, I still have the feelings that my fundamental knowledge in this area is wonky. Therefore I was wondering if anyone knew a proper course on it that I could follow online or like I stated earlier a nice book or so. This should hopefully help me get a better grasp on multithreading, (a)synchronous communication and parallel programming.
Exploring a meta-rule space isn't hard.

Exploring a meta-rule space and finding rule sets that create results that humans find interesting is much harder.

If you skip that you tend to create systems that seem too random, or too repetitive and obvious.

This is why most algorithmic art is so uninteresting. It falls on one side or the other of the randomness/repetition valley, without hitting that sweet spot that the best human creativity finds.

That's not even thinking about emotional associations, intellectual abstractions, social awareness, and models-of-mind. You might need all of them to make a genius-level creative AI, but I'd guess that the more you have, the more likely you are to get something worth keeping.
Why is AWK or SED not easy?

So yeah. There are a few languages which are quite good at text parsing nowadays. Another key argument was the huge amount of packages. But most languages have that now. There are also lots of scripting languages who can be written quite fast, like Python or Ruby. That's what I mean with there is not a single thing left that you really need or want to use Perl for beside having used it the last decade already. For everything that Perl can do there is at least another tool that is as good.

But all of that is not a shame. Every language will go that path, especially one that is so common as Perl was. Everybody wants to copy the best, until one day it's not the best anymore.
> Note that the "Magic is a beta product released less than a week ago" excuse is irrelevant.

Maybe in disneyland, but that's mostly how things go down in the real world. It's a startup, first week, got hammerred by HN heavily, probably others, that's as much as they can handle. Things will go fine, they just need the time to adjust.
I do not see how this applies. Below is an example of how you query the data. Map reduce not required

[
{"query": {
"_queryId":"office-query",
"sfql": "SELECT $phone.oid, $s:phone.name, $s:phone.value WHERE $s:phone.name='office'"
}},
{"query": {
"_queryId":"mobile-query",
"sfql": "SELECT $phone.oid, $s:phone.name, $s:phone.value WHERE $s:phone.name='mobile'"
}}
]
Providers Outside US Trump DTCC for Legal Entity Identifier Data Quality
There's probably an app-idea in there. Maybe an app that costs video creators some small amount, say $5, that gets their video in a "for-kids" video app. The $5 pays to have your video reviewed and tagged so that parents can filter what they want their kid to see.

As a parent, I would definitely pay for that app/service.
I re-read this story every year or so It's part of the culture of hackers/programmers, and one of the stories that everyone involved in programming should know.

It has, of course, been submitted here many times, and some of the comments should become part of the story. It's not enough to read and enjoy - we should also learn.

https://hn.algolia.com/?query=the%20story%20of%20mel&sort=by...
Thank you. Thank you. Thank you.

The lack of curation on YouTube has been a source of frustration in our house for a long time.

The kids just scroll down the list on the side of the viewer and hit whatever video they think looks interesting.

Then the next thing you hear is swearing, and there's no effective way to stop that from showing up on 100,000 other kid's feeds. (And it would be so easy to implement!)

Our kids love the variety of YouTube. Even Netflix is too slow and inconvenient for them.
I didn't rely on it. I tried it out to see how well it would work.

When I first signed up, they wait-listed me. Then, a few hours later they let me (and apparently everyone else) in. They didn't need to do that, but they did.
Being sure that this one tool is available all the time is actually a key argument I have to say. One of the reasons I started to learn vim.
A license, like a ticket, is what gives you permission where you otherwise would not have any. Its the answer to the question: What gives you permission to distribute copies.

MITs condition for granting this permission is a single term: "The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software."

You do not need to retain the original copyright notices as it exist in the files, so long the notice is included. You can remove the original copyright notice or license comments and copyright notices in individual files, as keeping them is not a condition of the license.

However, copyright also has a moral aspect to it, which include authorship. If you add your own copyright on something you have not made without clearly distinguish what is yours and what is someone else's, then that is most likely illegal since you are misrepresenting the copyright owner of the MIT licensed work. Its doubtful any license could ever grant permission to do this, as it would infringe on an inalienable right of the author.
I agree 100% there is a problem and all of us need to do more to address it, but hueving's comment is correct regarding this article (well, I wouldn't go so far as to call it click-bait, but it doesn't present sufficient data to back up the premise).

> A Harvard Business Review study from 2008 found that as many as 50%

How many is "as many as 50%"? That's an odd way to word it, maybe respondents were able to select multiple unranked reasons for leaving, maybe they lost half their survey results, maybe it wasn't multiple choice and it's difficult to determine what exactly falls into this category. What is the number for men? How does this number compare to 20 or 30 years ago? This article neither linked to the study nor provided appropriate details.

> including as journalistic and not scientific essays tend toward, real interviews from credible first-hand sources

The plural of anecdote is not data. If I find "credible first-hand sources" of women who don't feel they've been treated differently that doesn't mean we don't have a problem.
You going to put the Model S on its top to use an engine crane on the battery pack mounted to the bottom of the chassis?
Swift Podcast
I don't watch much on YouTube so they may already do some of this but it seems to me like this would be an easy problem to solve if they so desired. Add a rating system where the content creators rate themselves and an easy way for viewers to flag them as incorrectly rated. Add to that a confidence rating of how likely a video is correctly rated (based on number of views without flagging) and you could confidently let your kids view appropriately rated material.
You should unlearn netstat anyways. Its own man pages declares it obsolete. And it was obsolete before systemd appeared.

https://dougvitale.wordpress.com/2011/12/21/deprecated-linux...
Couldn't this be considered tortuous misrepresentation? Then the "damages" would be the full value of each laptop purchased.
Animating Abstractly
This will absolutely require some human filtering, even if only as a backstop. That parents feel safe and comfortable with the content -- and all "adjacencies," such as comments, ads, and so forth -- is critical.

I'm not sure what their content strategy will be, but by way of inference from public record (job listings, this blog post, etc.), I would guess that they're priming the pump with content from established, kid-friendly publishers. They want to start off strong, with proven commodities, before opening the floodgates. There might also be a qualification process for new creators and publishers that is more rigorous than the process for all-purpose YouTube; that's just my speculation, though.
Ask HN: What do you use for external reporting?
I have been evaluating commercial vendors in the BI/Reporting space for the last several weeks and am shocked by the low quality of most offerings. The "megavendors" (according to Gartner) all have bloated products that seem to be the result of multiple acquisitions without proper integration. The interfaces are on par with Lotus Notes with 8-bit graphics, etc.

A number of smaller independent vendors have compelling products that address the business problem of understanding data, but are very weak from a reporting perspective (QlikView, Tableau, SaS Visual Data Discovery, etc). These solutions don't address the external reporting needs of most organizations including things like financial reporting, bank statements, marketing reports, investor relations, etc.

How do you create and distribute data-based reports outside of your organization?

Some of the options that I've looked at include: SSRS, MicroStrategy, Business Objects, Pentaho, and Jasper.
PyDev of the Week: Maciej Fijalkowski
Abstract problems are dangerous problems
Forbes, asking the tough questions.
When communicating to others,
just must
pay close attention to and consider
your intended audience;
for successful communications, your message
alone constructed independent of your
audience will, in practice, often give
some bad reactions and, thus,
is usually not good enough.

If don't pay close attention to your audience,
then you risk offending, confusing, or losing
your audience and creating emotional upset,
rational misunderstanding, and
maybe even hostility.

In paying attention to your audience, often
have to put yourself in the state, i.e., position,
of your audience. That is, from paying attention
to your audience, you have to try to understand
their backgrounds, thinking, and emotions,
anticipate (that is, guess in advance)
what their reactions will be, and, then,
revise your message for them, say, to
get your real message across and avoid
misunderstandings, terrible emotional
reactions, etc. This advice is especially
important in romantic and/or family communications.
Right, this extra step means that
in communicating you have to think about
two things, not just one, that is,
think about both the core content you
are trying to communicate and also
what your audience might be getting.

Especially good in one on one communications, one,
good, sometimes crucial,
general technique is reflective listening, that
is, asking the other person to summarize and repeat
back their understanding of what you communicated.
Or, in terms of electronic engineering,
write, read back, and then compare
what tried to write with what
read back! A big reason here is that
emotions, unstated assumptions,
various fears, etc. can
get seriously in the way of
even simple messages.

In particular, for a large fraction
of human females, often their first
reaction to any communications from
a man is to be afraid of various
things -- or just be afraid even without
knowing why. For some 101 level
lessons, maybe have a nervous kitty
cat (some are quite nervous, are
scaredy cats) and learn how to
detect when they are scared and
how to respond and, then, how over
time to make them much less scared.
Then for human females, slowly work
your way up from this 101 level lesson to
a graduate course!
You need to check all user authorizations for all resources. A potential n x m problem. The proposed solution means that you never give a 'user id' to the outside world. In REST parlance, a user isn't a resource.
Have waited too long for you guys to grow up, have family, kids...so you can make web usable for kids. This is better be good and without crapAdwares. Will give it a try.
The color, style, and usability are all great. Two things though:

I didnt know what the faces at the bottom mean until I clicked them. I dont think the faces should be changed, but maybe just a quick, "Hey, tap on this face if you don't know, or this face if you don't know and want to ask this question to someone else" at the app's first run.

Also, in my opinion, the "Please Wait..." should be replaced by "Loading..." Everyone know things have to load, but telling someone to wait makes them think that it is slow.

Good job making the app. It looks good, it is an interesting idea, but I'm not sure it's enough to keep people hooked though. I think it's a great platform to keep building on.

Edit: You should probably put the United States at the very top of the list if you think most users are going to want to select that.
Europe is bankrupt because the benefits giving by politicians to secure their reelections are not paid for directly thereby allowing the public to not feel the price of the benefits.

taxing corporations is a means to do two things, indirectly tax your own population and tax another countries population for your benefit.

Corporate mobility like personal mobility is about the only means left to insure that there is some restraint on government spending. Hence the cries for one larger more encompassing governments; world or otherwise; which won't solve the problem but sound good to those who think they are being cheated of other people's money
If it creates buzz and makes money, it's viable. A few unsatisfied customers should be irrelevant in the greater scheme.
It's part of the story. The other part is promising benefits etc to the population that they can't afford to pay for.
and example result is in json format. Note two queries in one request referenced by query ID.

[ { "_queryId": "office-query", "cmdname": "query", "data": [ { "phone_oid": "3", "s:phone_name": "office", "s:phone_value": "111-112-1113" }, { "phone_oid": "7", "s:phone_name": "office", "s:phone_value": "111-112-1113" } ] }, { "_queryId": "mobile-query", "cmdname": "query", "data": [ { "phone_oid": "4", "s:phone_name": "mobile", "s:phone_value": "222:223:2224" }, { "phone_oid": "8", "s:phone_name": "mobile", "s:phone_value": "222:223:2224" } ] } ]
List of available 2 letter domain names
Maybe those improvements never goes anywhere because whenever someone tries to make some noise about the problems they are meet with this superior attitude. The people who know about it and act likes everything is fine, when not to being smug about it, are the ones who should be feeling bad.
I see a lot of calls for punishing Lenovo over this. However, I'd like to see a few more facts established before getting out the pitchforks.

First, did Lenovo commission the writing of Superfish, or did Superfish approach Lenovo (or most likely their marketing dept) with a request to be included?

Do vendors normally perform a full security audit of programs they include? Is there an expectation that they would give closer scrutiny to smaller outfits vs. top tier software vendors?

Also, is the bulk of the outrage over this incident due to the fact that Superfish serves no purpose that is in the interest of the users (i.e., its whole reason for being is to spam users with advertisements)? In other words, lets say that instead of adware, what if they included a malware detector that used the same https busting trick, yet was just as poorly designed (leaving the private key exposed) -- would there be just as much call for lawsuits and boycotts then?
Presumably this is an attack that would be targeted at an atypical user - someone security conscious enough to not give GPS permission to apps they install, and who would have switched off location services that would use wifi instead. In those circumstances you might assume that any tracking would be beyond the capabilities of anyone who didn't have direct access to the phone network. This proof of concept demonstrates that would be an incorrect assumption.
Really insightful perspective on luck. Thank you for posting that.
Pebble watch is the Nokia feature phone of 2015
It's also not hacking.

Viewing page source and navigating to a URL which is clearly visible is not subversive in any way.
That can be also said about Python now that they pretty much froze the stdlib. You are right, a language should be evaluated by it's general power, not just by it's stdlib. If you can easily install Perl packages every Perl package should be part of the equation.
> The difference between Apple and Google is that the former makes money by selling products and the latter

You mean renting products. A device without root, with locked bootloader, without the ability to install any software that you wish is not really sold.
Monitoring support for MongoDB is out now
I have uploaded the 3.4GB version too, sorry for the inconvenience.
> We were simply curious how the line worked.

I don't mean to be rude, but curiosity would've been viewing the source. Dropping into the queue early is when it got shady. Apologies if you lose your tickets, but it seems the fair way to handle the situation.
The list of root certs is distributed as an update through Windows update. It is not just an on-demand root cert. An organization that vets updates before applying them to production systems will also need to vet such an update.

The updates are indeed very auditable. Any organization who chooses to selectively apply updates will not have new root certs appear out of channel.

Of course Microsoft needs to be able to update the root cert list. It has been used to remove certs as well (Diginotar). However, when they do so, it needs to be transparent. Windows Update is transparent. The very article you linked even goes into details about this.

Which means that your claim that "Microsoft can add a new root certificate to a user's system at will" is false. If you do not automatically install all updates or if you use WSUS, root certs will only be updates if you allow the update through.

The process outlined in your linked article describes how Windows will attempt to find and install the Windows Update package from the cert chain. This does NOT bypass the Windows Update mechanism; it merely looks for a package in the catalog with the root cert that was requested by following the chain.
I've only read part of the article so far, but scanned it for the NSA's codename and am surprised it is not mentioned (there or here).

They're describing SWAP [0].
Cool they Kasperksy now has binaries to reverse-engineer.

What's impressive is the number of OSes and filesystems that are supported. Keep in mind the documentation publicized is from 2008, so they likely support ZFS, ext4 & btrfs as well now.

[0] https://www.schneier.com/blog/archives/2014/02/swap_nsa_expl...
Apple to Build €850m Data Centre in Ireland
I don't know the specifics, but if I were to implement this I would start by constructing a signal map of an area, then comparing the signature of changes to potential routes.

By having a sufficiently accurate map, you could determine the likelihood of a route by the changes in signal. Even without pre-mapping there are some estimations that could be made: a signal that follows a clean sinusoidal curve with a certain rate of change could likely be modeled by rural highway driving.
This article crashed my browser.