skysight-inc/HackerNews huggingface dataset:
>> So that I can work without having to blast music through $300 noise-canceling headphones (which itself impairs focus, but is the lesser of all evils)?

Rather than listening to music, you can listen to brainwave entrainment audio (Neuro-Programmer 3 is a good program to generate these). The lack of words prevents distraction, and the audio can entrain your brain to whatever frequency is best for what you are doing (focus, brainstorming, etc). There are videos on YouTube that show EEG readings changing to match the frequency of the audio.

Also, Cerebrolysin or Fasoracetam + Coluracetam (especially when combined with exercise and keeping the body in ketosis) are much more likely to be effective than Piracetam.
Regulation. Specifically, as I somewhat implied, business doesn't get to ask people to give up privacy, for similar reasons to why you can't ask people to sign contracts that give up various other important rights. Any alternative to this needs to bring along liability for anything that happens to someone's important privacy rights.

For ISPs, we already have a model that we should be using: common carrier. It may need adaption to the realities of ISPs, but the basic idea that you get certain immunities if you only provide transit.

Dan Geer was talking about network neutrality, but I believe his solution should apply to privacy as well when he explained[1]:

Channeling for Doctor Seuss, if I ran the zoo I'd call up the ISPs
and say this:

Hello, Uncle Sam here.

You can charge whatever you like based on the contents of what
you are carrying, but you are responsible for that content if it
is hurtful; inspecting brings with it a responsibility for what
you learn.
-or-
You can enjoy common carrier protections at all times, but you
can neither inspect nor act on the contents of what you are
carrying and can only charge for carriage itself. Bits are bits.

Choose wisely. No refunds or exchanges at this window.

In other words, ISPs get the one or the other; they do not get both.

[1] http://geer.tinho.net/geer.blackhat.6viii14.txt
No, the name of an array is not the address to its first element.

For instance, this equivalence is not required:

(sizeof array) == (sizeof &array[0])

though it could be true by coincidence.

If array were the address of the first element, then it would always have the same size. Be careful with words like "is".

Oh, the above is "in C", by the way. We wouldn't want not to satisfy your key point!
I'm prettu su
If you get good quality sencha, especially the (somewhat pricey) Gyokuro, you get a high dose of L-theanine and an absolutely delicious taste. One of my favorite pleasures in life!
I'm pretty sure people who use Linux assemble PCs themselves, so no impact here.
As for average Joe - Linux is not an option anyways.
I don't think you read the article. It says that Fedora paid VeriSign the $99 to sign the loader.
> Domain validated SSL was always a bad idea.

It's more like the way domain ownership is validated is awful. If the only way to validate domain ownership was to ask the domain owner to create a TXT entry, with both the entry name and its contents being nonces chosen by the certificate authority, it would be much harder to do these attacks (one would have to be able to MITM between the certificate authority and the domain's DNS servers, or compromise the DNS servers).
> I prefer BSD based OSX and Linux myself, but to think that a large enough number of buyers care about Linux support to "spike" sellers is just silly.

Hopeful rather than silly, I'd say.

Many people like you (who prefer BSD and Linux over MS) are still voting for MS with their wallets (dealing with majority MS manufacturers/sellers) and their discourse (the variations of how it all is "silly").
@zyx got it. Certainly there are always going to be people who are head and shoulders above the rest, but the context was typical/median salary. I would expect that those truly talented individuals make more. Your average web dev? I would say that 100k is an inflated salary and that it involves very little of what most would consider to be "engineering".
Melatonin and DHEA are hormones and are OTC. But just because they're OTC doesn't mean they should be taken lightly. Hormones are highly regulated in our bodies and taking extra can cause decreased natural production.

Adrafinil is not OTC, it is unregulated. That means you can sell it in the "research chemical" grey market but not as a drug.
but I'd have to first run a random blob I refuse run because there is no way to verify what that blob does

There's always reverse-engineering... an option which I believe could be far more powerful, and Stallman should've argued for; the ability (and right) to figure out what some software does and modify it is the fundamental key to the freedom he argues for, and while having the source code can certainly help, it's not the only possibility.

The power of RE comes from the fact that, while it's very easy to not release source code, it's nearly impossible to prevent someone from reading the binary on a general-purpose computer regardless of what the legal situation is.
How Motion Picture Film Is Made
How much are we talking about?
Lots of compounds being discussed here - seems like some could be useful. But how do I know what is safe?
Git.io shortener
It's less about Linux for me than about the other things I want to boot (MS is unlikely to disable Linux bootloaders on certified Windows PCs for lots of reasons).

By way of example, the company where I work today produces a hypervisor for x86. We're nowhere near big enough to exert market pressure on someone the size of MS or the hardware manufacturers. When we recently added UEFI support to our product, we looked at support for UEFI secure boot as well. Some systems made key management easy (obvious bios options, etc.), but others made it impossible. Upon investigation, this mostly appears to be more due to apathy on the hardware vendors part than any conspiracy theory, but for an end user the distinction is unimportant. Today we can work-around this by using an MS-signed bootloader shim, but this reduces the security of the end solution (any ms-signed shim will boot, a third party owns the root keys). And, as I mentioned in my comment above, MS can change their policies at any time.

I haven't run into an x86 system yet that doesn't at least allow you to disable secure boot, but the trend towards more locked-down hardware in general (esp. in mobile) worries me due to the potential for anti-competitive behavior towards both commercial and open-source software from third parties.
An app usually sit between the database and the user, isolating them from each other. This demo does not isolate the database, it is just a proof of concept.
I largely agree now -- in fact I think that women and men (since it's the 21st century and all types of people go on maternity leave) should be able to go on paid maternity leave. The leave will be funded by all corporations for social good -- no point in limiting it to the one the person worked for, since a person on maternity leave contributes equally to all of them. Paid maternity leave is a human right, like clean drinking water and fast internet, and I demand corporations provide us with it!
You seem overly pessimistic about autonomous driving software; it seems to me like Google's driving software could easily already be at a point where it might be able to consider the choice between hitting pedestrians crossing the street, or purposefully crashing the car.
I do find quite often when walking around my university campus that my phone's attempts to connect to 2-bar WiFi signals result in a much worse connection than just turning off WiFi and letting my iPhone use 3G or 4G. I mean, if it's 4 or 5 bars (inside a building), the WiFi's as good as, or better than, 4G. But outside, the phone keeps trying to connect to weak signals despite having the option of superfast 4G.

Another problem is just that so many WiFi hotspots are gated and require you to use a horrid web portal to log in. Their automatic redirection has stopped working properly for most major sites due to HTTP Strict Transport Security, so I have to deliberately go to an insecure site just to bring up the portal, and if my phone loses signal for just a moment, bam, need to relog...
The Terrible Things I Learned by Listening to Police Scanners for 6 Months
It's a hormone so yes, taking it can have negative effects. It can lead to decreased natural production. You have to be careful with anything hormonal.
Exactly. Joins and changefeeds being the big ones. We won't switch over everything, at least to start, but there are a few places where switching a collection to RethinkDB could give us huge efficiency/simplicity gains just using joins. And it shouldn't be too hard to switch single collections over by using Compose.io's Transporters to backfill into Mongo.
Oh come on HN. This is one of the important incremental techs that bridges the risky breakthroughs like metal-air cells. EV's. Quit ironing skinny jeans ^^
It's technically completely possible.

You do not /have/ to use the GWT serialization lib which comes with RPC. You can use JSON with GWT. It's actually very trendy and some new librairies simplify this.

But the combination GWT + node is surprising...

One of main advantages of GWT is you use the same language client-side and server-side. It's not at all "a swing portage" as it more or less used to be at the very beginning, but still, GWT comes from the Java world. If you want a strong-typed langage for your client code (big client application, huge dev team, or whatever), GWT is really the most mature solution today.

So :

* if you are ok with JS, and about making your backend in JS (I can't...), just use JS everywhere...

* if you want GWT, but a "reactive backend" like node, there are lots of good reactive backend-frameworks in the Java ecosystem
meth?
The Terrible Technical Interview
I have a weird experience with melatonin. It puts me out quickly, but I wake up about 4-5 hours later in a half drugged state. For the next few hours I'm awake but drowsy.
Title should be "Google decided to log even more data about your environment"
> There's no right or wrong.

If your argument ends in this conclusion, you should assume that there's a fallacy somewhere.
1. To-Do Lists
2. Scheduled breaks for mandatory distractions to see the outside world.
3. Checklist of what went wrong - way to keep the learnings
But that's not how UEFI works. Unlike your traditional BIOS, the settings can be edited from a normal OS by command-line utilities and such, too. In fact, often the only way to do anything useful, given how broken many UEFI setup pages are, is to edit the settings directly.
Hi,

I just recommended you to someone on weekendhacker chat earlier today. Glad to see another assembly launch.
> As a fellow devop, I say that you shouldn't need drugs to do your job.

You need to learn about mental health and, in this case, ADHD. You can't just wish mental health issues away.
Imagine if all those people were paid by Google and Apple to move.
Whenever we need something on leterheas, our GC makes up letterhead on the spot using images on our media resources page.
I'm sorry, but I fail to see how Android 5.0 rant is connected to the article at hand.
The most mind boggling aspect of PKI is that certs for a CN is not globally exclusive.

Hell even something as broken as DNS has one and only one place to find each domain's authoritative SOA record
How to make sure your content isn't read: "Do you want to give me your email address?" overlays with white-on-light-grey close buttons.
Secure Boot can (and typically does) operate without a TPM, so no separate hardware module.

However, flash writing can be limited in hardware, so it would be possible to store Secure Boot keys in a special region of the flash that's locked down right after the opportunity to get to that setup screen passed.
What happens if you try admin@xxx using an unicode homoglyph, i.e, the letter "a" in "admin" being the Cyrillic letter "а", U+0430 instead of U+0061 ?
I suspect it's downvoted for the mention of Betteridges Law of Headlines, which (rightly) earns downvotes whenever it's mentioned.
Sorry, I was asking about the way the changefeed feature is meant to be used, not about this demo specifically.
Browsing to http://example.com/ is perfect for finding the captive portal.
I miss this mode. So many games that... work in DosBox now, don't they. Welp, there goes my weekend.
Comcast is by far the biggest offender. More than half the xfinitywifi APs I connected to had no usable connectivity. Ended up removing the network completely and never connecting to any of them. As expected of Comcast, the Preventer of Information Access, I know.
I'm unaware of many "socialist structures" in either Europe or North America, with the exception of Mondragon. That is unless you define socialism as purely meaning "state ownership of industry", which is rather naive, even if widely accepted by the American public.
There are also stories of people dying and the locals dumping their bodies elsewhere so that they don't ruin others experiences or stop people from coming to try the 'Medicine'. IIRC, the primary drug in Ayahuasca is DMT, which can be acquired other ways (that are less likely to make you puke) than drinking their jungle juice.
I just browse to ajf.me (my personal site), since I know it's not got (valid) HTTPS.
Deadlock: Frog vs. Snake
I am still shocked the Navy is ok with a single engine fighter.
Tip: if you can't track each question and reply. Ctrl+ f in browser type "sama" and keep hitting enter.
That's their dilemma.

One one hand they are abusing CDN or cloud platforms for their broken "collateral freedom" project

One the other hand, every effective DDOS protection outside China has been blocked by China already, like Google Project Shield, Cloudflare, etc.
We updated the title to something more informative from the article.
Guess that will save time later if the candidate doesnt fit the role.

Instead keep a open project expectation, expected time to complete and get that agreed.
Public Key Pinning could help for users running compliant browsers.
Show HN: Align sun eclipse images with python for a timelapse
Honest question: what's the defense that makes this not monopolistic behavior? This is MS going around trying to get all of the vendors for hardware to switch over to a system for which they are both the client AND the gatekeeper. The end goal is clearly to prevent anyone from entering the consumer operating system space without their express permission, giving them full monopoly over the consumer OS space. This would be like if in 98, they hadn't just been making it difficult to use other browsers, they had been asking all of the other OS vendors to add IE to their systems and disallow everything else that they don't like.
https://news.ycombinator.com/item?id=9240135
There are two ways to edit the key databases:

1. Without Secure Boot they're open to whatever you want to write.

2. With Secure Boot, they're open to whatever you want to write, as long as it's signed with a key that's trusted by the current database.

So if you can't disable Secure Boot, you need to ask Microsoft to sign your key data, before you can add it. Might as well request a directly signed key (within the MS trust chain) then - from there, you can also overwrite things to honor a new trust chain, and Microsoft is probably more used to requests of this kind than to the other.
The replies on this thread are very surprising... It seems everyone has tried them!!

The question you should ask yourself is why you would need to take pills to alter your normal brain function in the first place? Do you really need to be more focused / more relaxed? Where does the urge of being more productive come from? What is your end goal? Is that goal really going to make you happier?
"In contrast with a photomosaic," ehhh.. it's just a photomosaic.
I also remember those days...

A quick google search, and I found these: http://archive.gamedev.net/archive/reference/listed82.html?c... (clicked a couple of links, they do not seem dead)
Personally, I'm waiting Matthew Garrett (@mjg59) to explain.
I made the same experience.

If there's no reason not to, code you write tends to become optimized for the environment it's in. Maybe all software developed in-house in your company uses a specific tool for configuration, or there's a naming scheme for OS-level users. Or people want all tools to integrate with the ticket system, or ... the possibilities are endless.

Without a pressure to keep code clean of such influences, it'll slowly morph into something that can never be reused outside of the organization it was developed in.

So when a new tool or library needs to be developed, I can usually fit it either into the "might be interesting for others" or the "purely internal glue code" category. If it's in the former, I make it open source from the beginning. (My employer is very supportive of Open Source).
How mature is this compared to taipei torrent? https://github.com/jackpal/Taipei-Torrent

Shameless plug: I work on a BitTorrent tracker in Go https://github.com/chihaya/chihaya
This whole discussion is misguided. It's not about Linux on 'windows machines', there are no such things as 'windows machines', there are only computers. Giving microsoft the ability to lock out their future competition (emphatically not linux) is where it goes wrong. Computers are universal machines, this idiocy makes all this hardware an extension of a single (software!) corporation that gets to decide after you buy the hardware what you can do with it. If I decide to roll my own operating system I'm chanceless to get the kind of support I need in order to get off the ground in the first place.

Imagine Microsoft had had this capability in the early 90's, it would have been a complete disaster. That server you're running linux/FreeBSD/OpenBSD on today would have been running Microsoft software instead.
By reading the title, I actually thought they fixed the biggest annoyance, the endless-and-unfixable wifi connect-connecting-saved loop. But no, 5 years after I first saw this error, it still occurs with the newer versions.
There's more stuff here:
https://mapzen.com/tangram
https://github.com/tangrams/
The defense is that other vendors can get their key signed for $99, and Microsoft promises to only retract it in case of security issues.

Redhat made Linux compliant to this scheme (through Shim), so there's an example for the concept, and "choice".
Agreed. If you had a tool which could detect all of a particular class of exploits in your software one could just add it to your compiler so it would throw an error.

Of course this assumes that automated discovery is not very computationally intensive, which in some cases it appears to be. The search space of a program is enormous. Instead one possible world is one in which exploits can be found automatically, but discovery requires massive computational effort. This seems extremely likely to me because exploits that don't require massive computational effort will be found and limited quickly eliminating the low hanging fruit.o

Thus governments with the best algorithms and the most money/powerplants/datacenters/fabs have an advantage because they can patch their own software while developing exploits for other peoples software.

The strategy comes in at:

1. how many exploits do you keep in reserve given a particular rate of discovery, and how and when do you use exploits?

2. How do you handle the case when you and the target are using the same software? If you start to patch it, the exploit might leak to the target. If you use the exploit before patching, the target might use it against you.

Operationally protecting exploits from spies seems hard. A government with a technical advantage might well be a disadvantage to a less technically savvy government with a human intelligence advantage.

To quote the Honey Badger video:

>"You do all the work for us, honey badger, and we'll just eat whatever you find, how's that? What'daya say, stupid?"

To avoid this a government might use the exploit development capability only defensively in peace time, keeping no reserve of exploits, until they have an immediate need. Of course this might weaken deterrence.

tl;dr cyber
This looks like it could help make it much easier to profile my django web apps during development.
I like to think of them as being different and the equivalence - in some cases - only comes from what is known as the "array-pointer-decay" semantic:

http://www.lysator.liu.se/c/c-faq/c-2.html

This is why &a+n is not equivalent to a+n, something that a surprisingly large number of "C pointer tutorials" seem to get wrong.
CRLSet 2140 contains a public-key block for this. If you're on desktop Chrome you can go to chrome://components and check for a CRLSet update manually. If you're testing it, note that Chrome caches certificate validity results for a while so you might need to restart Chrome to see the effect.
It does not work in this case, rogue states like China are using national backbone internet as DDoS tool.

You can find research papers back in 2001 about GFW. The DNS spoofing "service" can be easily used as a x3 amplification tool by anyone.
Introducing the tco_method gem
Some background on Ayahuasca: https://erowid.org/chemicals/ayahuasca/
I assume we can then count the days until they simply block AWS as well? But that explains why they don't use one of these to keep the bad traffic away from their hosting infrastructure and instead of AWS eat all of it.
For some reason I thought it would be interesting to keep Windows 8 on my laptop to a dual boot with linux. Three hours of blank screen boots later I realized it was the microsoft boot-loader's fault (which absolutely refused to load Linux correctly or to link to a different bootloader, even with secure boot disabled) - and deleted it's entry in the EFI shell.

For the average user installing an OS is hard enough, without the gotchas of figuring out how to correctly adjust BIOS, UEFI and switch bootloaders.
Chrome and Firefox on Windows 7
Why no frozen meals?
This parody of the trolley problem is amusing: http://www.mindspring.com/~mfpatton/Tissues.htm
Yep. that was it. thanks.

Tangentially, I noticed my bank doing this the other day...
Is the mosaic of The Creation of Adam generated by Frankenimage? Judging by the results in the videos, it doesn't seem capable of making that.

Edit: I did a Tineye search and it is used all over the web, so it wasn't created by Frankenimage.
I think you're being sarcastic but if not, I agree with you.
Coders, this is a lowball offer for something you retain no ownership of - or right of commercial use or resale - afterwards. Negotiate!
Finland schools: Subjects scrapped and replaced with 'topics'
You have to distinguish hormonal regulatory mechanisms that are externally vs internally triggered if you're going to discuss decreased natural synthesis.

Oral testosterone? Pituitary measures it and says to the testicles, "we're good here" and testicles atrophy. Oral prednisone? Pituitary says to adrenals "we're good" and adrenals shut down cortisol production.

Melatonin, however, is externally regulated through blue light suppression. So taking it doesn't engage any feedback inhibition, it just increases blood concentration.
This thread changed my life.
AWS does not work in China. Tons of EC2 blocked. Rest are just too slow to connect (like >400ms pings)

Very few S3 CDN IP address left with 443 port open, so greatfire.org carefully picked those and hosting content mirrors there.

Although what they operate is totally free speech, legal and reasonable, but it's like your bad neighbor in a VPS who eats all your co-hosting CPU, bandwidth and disk IO. You have no choice but move to somewhere else.