skysight-inc/HackerNews huggingface dataset:
I don't think it is free for foreigners. It is just that those fees you have to pay (maybe a few hundred Euros per term[0]) are nothing compared to what it costs to attend an US university.

However, since more and more Germans want to go to uni some fields of study are jammed with students in recent years. This in turn means that the quality of education goes down (for example: not enough capacities for tutors and not enough actual seats for students) So from that perspective it doesn't make sense for German taxpayers. If capacities are already stressed getting more students doesn't help.

On a more human level it is probably beneficial when Germans and Americans form more friendships and thus learn to understand eachothers views of the world.

---

[0]"Although you can study in Germany for free at public institutions as an undergraduate, there is a charge per semester for enrolment, confirmation and administration – usually between €150 and €250 (US$170-280) depending on the university. There may be an additional charge of around €100 for a “Semesterticket”, which covers public transport expenses for six months. If you exceed the standard period of study by more than four semesters, you may also face a long-term fee charge, which could be as much as €800 (US$920) per semester." www.topuniversities.com/.../how-much-does-it-cost-study-germany
This analysis doesn't just prove the attack orriginated in China, it shows that it takes place immediately inside the first Chinese network the connection reaches on it's way into China. The second piece of analysis shows that this is the same network layer in which the network blocking performed by the Great Firewall occurs. So the great firewall and this attack are both being implemented at the same point in the network infrastructure.
Is there a readily accessible list of the CAs you're deleting? Ah, it's in the shell script itself, and there are just four of them. And this looks to be specific to Mac OS X only -- /System/Library/Keychains is not a frequently encountered path on, say, Windows, Linux, or BSD (non-Mac) boxen.

How does this work, e.g., on systems which install root CAs from standard packages? I think you'll find you'll need to 1) re-run the script and 2) that you're not getting the benefit of retaining the root but flagging it as untrusted.

I just posted on flagging the CNNIC root as untrusted in Debian. That's better than deleting the CA, as it should now show as negative trust if I'm grokkign things properly.
They didn't have a clue about $.ajax with a 'script' data type did they?
Currently yes, because so few people are running them on a desktop. There's nothing preventing that from changing other than momentum though, Android is set up to handle varying form factors already, so if someone wanted to create an app which scales from mobile through tablet to desktop they can do so.

Now that there's a supported way to get Android apps running on people's desktops I could see this becoming more of a thing, especially for things like photo and document editing.
I've always thought it illustrative to compare the NUKEMAP results for Little Boy and the Tsar Bomba at Hiroshima. It gives a good indication of just how much more destructive and terrifying warheads became: where Little Boy destroyed a city, a 100 Mton Tsar Bomba would have destroyed much of the region, and caused fires on other islands. And for ICBMs, MIRVs meant that even smaller warheads, themselves still vastly larger than Little Boy, could be launched together to have the same or worse destructive effects.
Yeh would be interesting so what performance would be like with the origin served through the CDN or even using dns-prefetch or tcp-preconnect

I think all we can gather from this example is that MaxCDNs TLS implementation wasn't optimal and they were working on it

Would be interesting to see how this behaves for other CDNs or with link rel= optimisations in place
I think it is funny that you say I wouldn't believe you. How do you know? I don't think I implied that these are small minded people. I'd be delighted to hear about these things, so I can build a better understanding.
When nukes stop being about the M.A.D. concept and more about being a propaganda tool... It was designed to shock. And it surely did. Soon after the detonation, Andrei Sakharov himself (behind the Soviet "Third Idea" nuclear weapon design) began speaking out against nuclear weapons and became a Soviet dissident.
Real world color is not actually 3 channels. It's an infinite number of channels (not all equally informative, of course - we've evolved to see 3 of the most informative ones as far as humans living in nature is concerned). Healthy people see only 3 channels[1], which are usually referred to as "X", "Y", and "Z", but which can quite faithfully be represented with additive combinations of Red, Green and Blue .. RGB (as done in CRTs and DLP projects, and individual LEDs) - or subtractive combinations of Cyan, Meganta and Yellow .. CMY, as done in print[0] and on LCD screens.

Color blind people see two channels (different causes for color blindness select different channels). Very few people can see 4 daylight channels (google "tetrachromat"). IIRC there is also a one-channel color blindness (at least theoretically) but it is ultra rare.

Now, what these glasses probably do (video won't work for me, can't see if they give a description), is that the filters make sure you see three different channels among your 4 input ones (2 eyes * 2 channels). It doesn't necessarily give a depth effect - more like a semi-transparent overlay saying "this greenred here is actually green" or "this greenred here is actually red".

And, yes - these filters necessarily select one (or two) channels which normal people can't actually see.

[0] In print you also add a Black (K) because it makes life easier, and because CMY subtraction dynamic range is harder to get right.

[1] there's another channel for darkness optimized for moonlight, which is not one of the daylight three.
My proposal: usability experts should identify an acceptable range of alerts on a per-order, per-encounter basis. End-users of all disciplines should have the opportunity to provide feedback in real-time, in the live environment. Just like Amazon reviews, "Was this alert helpful?" If you always vote "no", your feedback will be down-weighted. With a few exceptions, like wrong patient or 10x overdose, all the other alerts will be ranked in order of utility and only the top x% will be shown.
Edward Snowden's smashed laptop goes on show in London
Shouldn't reviewers sign publications with their private keys?

Signature from a renown scientist would matter more than from anonymous one. Also you might verify signatures and track patterns in usage of even the anonymous keys to spot troubling patterns.
hmmmm...I wonder if creating an account and upload wikileak document would be good incentive for Github to amend its ToU.
It would also have been far more terrible even in the 50% yield if it had been let to touch the ground for the energy to turn into seismic waves. The energy corresponded to a 8.1 on the Richter scale.
Where do you live? Woods? Mountains?
Many people did leave the country - there was a large diaspora in the 2000s to Canada, NZ, Australia, and the UK. Many others wanted to but couldn't because they couldn't get visas or they simply couldn't afford it.

I was only able to move the UK because I found out I could get a British passport (so I did) plus my company paid for most of the relocation.
Show HN: Distributed ID Generation with Redis and Lua
True. There is big discussion on how to pay benefits in the future and how to stay competitive in global markets. To me the only way to solve this two problems is to attract smart people from foreign countries.
No, pod is a collection of multiple images, not a single fat one.
(shakes fist)

I'm deaf in one ear and stereo audio has only ever been an annoyance for me.
As an American it would be much easier to move to another country, anywhere in the world, than it would be for someone from an undeveloped country.

There are thousands of people looking to get into any country that is considered "safe".

Asylum seekers are being denied every day at borders, whether they're crossing the border into the Southern US, or floating ashore on a raft in Australia.

Your qualifications are meaningless, ask your next 10 taxi drivers where they're from and what they studied. More than half will have a degree from their home countries.
So they should be chinese gov, right?
> Natural language is imprecise and vague. And it is relying on a lot of your experience.

Yes. That's because if you need to be precise you remove yourself farther and farther from natural language towards professional jargon where words have more specified meanings and towards math and computer languages that you can call precise.

> The top layer is the syntax layer, and it should follow the path of natural language which takes in human context (the human interface).

It would be nice to keep at least some part familiar but more often than not you can't because some 'top layer' constructs you need to express have very cumbersome expression, if any, in natural language.

For example natural languages lacks constructs for deep composability or indirection.
Natural language is perfectly fine in daily work, like deciding what's for dinner, but trying to explain any non-trivial concept with natural language quickly becomes too cumbersome and person trying to convey the message moves onto more expressive and precise tools like math or drawings or pseudocode.

Please look at how theorems and proofs looked before invention of math symbolism. That's natural language stretched to extremes.

Also please read any modern code of law. That's what we get when people go out of their way to express concepts in natural language instead of creating some explicit domain symbolism.

I'll take math or even cobol any day instead of that.
Look for "China Internet Network Information Center EV Certificates Root" and "China Internet
Network Information
Center (CNNIC)" (thumbprints 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E and ‎8baf4c9b1df02a92f7da128eb91bacf498604b6f)
> Intranet-oriented thing

It used the discussion feature of Microsoft Office Server aka SharePoint Portal Server. The history of SharePoint is very complex but interesting:

https://web.archive.org/web/20120419073951/http://blogs.msdn... , https://web.archive.org/web/20080303180618/http://blogs.msdn... , https://web.archive.org/web/20120409232321/http://www.joinin..., http://en.wikipedia.org/wiki/SharePoint ,
https://web.archive.org/web/20120519235139/http://www.seocon... , http://en.wikipedia.org/wiki/Microsoft_FrontPage

I remember an SP2003 installation with thousands of sub portal sites, hundreds of GB (blobs) stored in SQL server. What I really don't understand is the almost non-existing upgrade paths (between versions '01, '03, '07, '10, '13) and the URL-hell (IIS URL alias would solve that).

Instead of Cairo-OS, WinFS, an improved Explorer shell & improved file server, nowadays SharePoint fulfill various enterprise needs. http://en.wikipedia.org/wiki/Cairo_(operating_system) , http://en.wikipedia.org/wiki/WinFS
Look at Singapore, where 40% of the population is immigrant.
I bet there are several applications where you can charge frequently and the battery is there for the baseline

Hybrid Cars seems to be one, or even purely electrical ones on a combined approach (You have the supercapacitor for fast charges/discharges - read breaking/acceleration - and the battery for main storage)
Germany has an abysmal fertility rate. It's probably in their best interest to attract young educated workers with subsidized college.
Whenever the Tsar Bomba comes up, the potential for it to have ignited the atmosphere is always brought up. What exactly, however, does that mean? (Apologies if that sounds sarcastic; it's a genuine question!)

My guess is that the heat/EM could induce a state change in atmospheric gasses into plasma. Would this be a chain reaction that ultimately encircles the world? Also, what are the implications of that (locally or globally)?...
Thanks for the explanation. So this means that Django does not support JSON or JSONB field types yet
I think riffraff went to the university here in Italy: https://news.ycombinator.com/user?id=riffraff :-)
What do you do when petrol consumption diminishes to the point that it's no longer a good revenue source? At that point, government can do things (increase vehicle weight through higher safety standards, refuse to invest in public transportation) to safeguard their cash cow.
How Pipes helped you in March 2015
absolutely! In general I trust pure commercial organisations more than govt. and non-profit orgs.
One doesn't necessarily have to move to the safest country, where naturally the competition to get in is higher.

One only needs to try to move to a safer country.

As a species, we've become very tied to our original locations. Stability had its advantages in the early days of agriculture. Today I wish we'd make our borders more porous, legally and bureaucratically.

Why should a remote worker be paid less for the same created value, simply because they live in a "cheaper" country?
I have a question with the method, hypothetically, if I am the attacker, I know the ttls of each packets tha tis passing through, right?

So when I get a packet with ttl so small that won't survive long enough to reach the target, instead of altering, I just leave it along. So the probe will never know where I am in the route.
Linkqlo - Palo Alto, CA - http://linkqlo.com - iOS Developer/Full-Stack Software Engineer, Full-time

Linkqlo is a fashion technology startup that connects people with better fitting clothes, with a freshly released iOS app - http://bit.ly/linkqlo

We’re solving an industry-wide pain point for both consumers and fashion brands in retail shopping, sizing and fitting, just like Paypal took on the online payment challenge in 1999.

You’ll be an early member with single-dight badge # of an exciting pre-Series A startup in a fast-changing dynamic space – fashion/apparel/retail, that is on a mission to redefine the way people discover and shop for clothes.

We’re looking for talented, self-motivated people who are also passionate about our mission and excited about the challenges ahead. If you believe you are the right fit, please get in touch with us.

Job # 1: iOS Developer who loves creating reliable, intuitive and beautiful user experience on mobile.

Job # 2: Full Stack Software Engineer to integrate our iOS front-end client with the server, build and maintain robust and highly available database, design and develop HTML5 web site, and ensure high-performance and responsiveness of the entire system. You are very, very good in java.

For detailed specs: http://linkqlo.com/jobs/

To apply, please send your cover letter/resume/portfolio to: join@linkqlo.com

Thank you!
Google services are nice, no questions. But more and more interesting alternatives are showing up done by different companies. And maybe Google's competitors are more hungry to provide better support.
Really? I just reread the article and I couldn't find anything about bcrypt containing the salt as part of its output.

P.S. The XKCD wasn't directed tptacek but at tedunangst who apparently felt my comment made this thread 'astonishingly tedious.'
>The method used to inject these packets on the wire makes this sort of analysis even harder to do this sort of analysis

I was under the impression that this was a man on the side attack, so they'd sent a bogus SYN-ACK back to you the moment that they saw a SYN. Theoretically, you should still only be dealing with one RTT.

>(and if there was concern, appropriate amounts of random delay and noise could be added).

I don't think China cares if it gets traced back to them.
Somebody checked that in the past, yes, but that check doesn't matter for your current connection. Your browser will accept any CA signed cert as valid for the site it's for... if a hacker hacks into a low-profile CA, not even the one that verified BoA, they can MITM you every bit as easily as if they hacked BoA's actual cert authority.

The problem here is that the delegation is too broad; we're delegating verifying all websites to all CAs and assume that all CAs are absolutely trustworthy for it to work. That's ridiculous.

Chrome has a sort-of-solution built on top of this with certificate pinning where the organization gets a cert from the CA, and then gives it to chrome and claims "Only this cert is valid for our site" rather than all CA's certs...

Continuing with our example of BoA, this doesn't matter because they have not opted in [0] to that and in any case that won't apply to non-chrome requests.

[0]: https://code.google.com/p/chromium/codesearch#chromium/src/n...
Correct. I don't have one myself, but for high-end acoustic work people actually use dummy heads, sometimes with ballistic gel inside, to get a very good approximation of the sound that actually reaches the ears.

For less perfect results you could just set up measurement microphones in the right position and then convolve the result with a Head-Related Transfer Function.

Here's one: https://www.neumann.com/?lang=en&id=current_microphones&cid=...

They cost about $10,000 unfortunately. I'd love to have one for film use but you don't really get the effect except when listening with headphones so it's a pointless.

Also, for film we totally fake it and pan all the dialog into the center, on both stereo and surround mixes. Otherwise it would sound like the room was flipping around every time the camera cut back and forth between two actors during a dialog scene, which would get very disorienting for theatrical viewers. So when I build the audio for a dialog scene in post-production, I aim for an approximation of what you would hear if you were floating in the middle of the conversation just above people's heads. What you're hearing when you watch a movie bears little or no relation to the actual acoustics of wherever the scene was shot unless it was very quiet indeed, but is rather a composite of 10-20 different recordings.
I appreciate your candor too, and I'm taking what you've said at face value, that you want to back up your claims, and have no reason to lie and nothing to hide. And that you would like to talk all day about politicians lying in front of congress.

So please answer my question:

Is James Clapper a protagonist or antagonist for lying to congress?
Beside what was already said, one needs to consider that German universities have a much lower expense per student. This is because the universities have a chronic lack of money. This means that little is invested into 'feel good' facilities e.g. university run Gyms / extensive libraries. From my experience they offer little that is not essential to studying, but this doesn't keep them from providing a great education.
Alibaba’s Fake Shoppers Hard to Beat, US Academics Find
Well done! I hope Google would do the same when related to NSA and other 3 letters agencies.

when was the last time Google made headline of hn for its technology?
> It seems to me that we have officially entered the era of a weaponized internet.
Couldn't agree more.

And GFW is indeed a WMD that must be stopped.
Hey, I also think you have to try http://tarantool.org if you wish to use persistent and an application server.
I think this would be more related to your 10 millibit connection.
because google won't display search result pages that show one view to the crawler but another to the person who clicks the link.
> Are things getting better?

That's not really what it's about for us. South Africans have become experts at making the most out of a bad situation so things are always "good" in a way that's hard to describe out of context.

When you ask if South Africa is improving you have to qualify that with: which class? Anything that the government controls is going backwards. The middle and upper classes, however, have in a way created their own functioning infrastructure.

* The police force is complete ineffective. Solution: build a fortress and hire private security.

* Continuous controlled blackouts because the power infrastructure is inadequate. Solution: buy a generator.

* Hijackings, muggings. Solution: lojack all cars (car insurance now requires it) and don't walk anywhere.

As I said, we make it good.
WSJ will get a better Google ranking by allowing the Google spider to crawl the whole article. If they allow the spider to crawl the whole article, then they have to allow users coming in from the Google results to see the full article as well.
In what way is Brython just JS with altered syntax, and not actually Python?
Why does the world need this in addition to React? I can certainly feel that there are reasons but I can't make them concrete off the top of my head.

Edit: Ok, I get it. Now we can add this behavior to arbitrary template engines or reactive frameworks, like Meteor for example. Thats awesome.
You use "Gigafactory" as if it was an established word. It isn't. It it the name of Tesla's battery factory being built in Nevada.
That still doesn't answer his question.

He asked: "Why do you feel that Snowden's alleged attention-seeking behavior is more important than the content of the leaks?"

You said nothing about why his behavior is more important than the content of the leaks. What's so unimportant about the content of the leaks, that you think something so trivial as your armchair psychiatric evaluation of his personality is more important than anything he leaked?

"If someone does something wrong, and gets caught, they get in a lot of trouble." Did Clapper get in a lot of trouble for lying to congress under oath?
It might get brought up because before the first atomic bomb was detonated, one of the physicists who worked on it (Edward Teller) suggested the possibility that detonating the bomb would ignite Earth's atmosphere. There's a bit more information here: http://www.sciencemusings.com/2005/10/what-didnt-happen.html
It's the reverse; there are no Google services in China because they already took a stand.

When the Chinese government demanded to be able to sniff all traffic, Google fought back, refused to play cozy enough with the government, and gave up its chance at a foothold.

There's a whole wiki article on this mess: https://en.wikipedia.org/wiki/Google_China#Ending_of_self-ce...
license if not anything else
That's contrary to all my experiences. Gym/sports/languages courses/... are easily on par with US private unis, except less expensive.
Nil Conditional Operator in Ruby
Thank you for sharing what you're going through. You chose a good way to get out of it.
> I don't think China cares if it gets traced back to them.

No they don't, and when time arrives, they deny whatever the accusation is, and claims it's a defamation.
Thanks for sharing your experience letting me discover burnout.io.
Not new idea to use lua in the db, but if you wish more use lua in the project. I recommend to see http://tarantool.org instead redis with lua.
Germans are not so obsessed about not paying taxes like e.g. Americans or Swiss. Nobody likes to pay taxes and everybody complains about the high taxes. But I think (actually hope!) that Germans understand (if only unconsciously) that happiness is much more depending on getting old without fear of poverty, knowing to be treated if ill, being able to go safely outside anytime anywhere, not dropping out of society if bad luck happens and getting proper education than on the single only monetary principle "I don't pay taxes!".
React is Bsd, this one is also bsd-ish?

edit: why downvotes?
According to the article there are about 100 American Students at the University of Cologne. That should be about 1% of the students. Having 1% more students more who pay exactly as much as domestic students isn't something that concerns me as German taxpayer, even if there would be no benefit for us. If I would have a problem with our budget there would be much bigger fish to fry.