skysight-inc/HackerNews huggingface dataset:
The resolution of the "full disk" (i.e. whole earth) natural color images appears to be 11000x11000 pixels every 10 minutes. I can't find any realtime access to these images though - could anyone else?

They do have a cloud service for disseminating the imagery, but only for "official use":

http://www.data.jma.go.jp/mscweb/en/himawari89/cloud_service...

"Until Himawari-8 becomes operational, NMHSs wishing to release Himawari-8 data and products to the public are requested to consult with JMA beforehand."

Edit: Here is at least a tile-zoomer with some sort of realtime access to high-res imagery: http://himawari8.nict.go.jp/
The day the computers betrayed us
Saying "don't allow remote control of this stuff while driving" also assumes perfect security.

We can discuss the plusses and minuses of various intentional access points, or we can discuss security. But they're different topics.
I used to do a bit of this and it's a sort-of paradox. (I'm referring entirely to my last job, not my current where I have not done hiring yet and we've brought on several people in a very short period of time)

On the one hand, we hire because we desperately need someone to fill a role we're now doing in addition to our current work.

On the other hand, we are so miserably overwhelmed with work that going through the mess of things with HR to get everything figured out takes way longer than it should. In the middle of that might also be something happening to the position itself -- it was open and available when we listed it, but now the company's financials came out and we don't know if the position is still available. So we sit on it, for weeks, waiting to hear back from a VP. It gets approved but, nuts, the candidate's found another job already.

But within your question you seem to be asking for help in getting the job. You think you've interviewed well so you might have been within the top few candidates and just didn't get selected. The person who got selected, obviously, was notified. You were not and I guarantee that this will happen most of the time. As an interviewer, we didn't handle any of that communication -- you came to me with a resume attached in an e-mail from our hiring team. I don't even know how to get in touch with you. It sucks and I'm very sorry about that, but at a big corporation, it's pretty typical, unfortunately (and that speaks to a lot of other processes that tend towards being terribly impersonal).

I'd also hate to say it but too often I'd be stuck between 4 adequate candidates and the decision came down to superficial things. The best advice I can give you there is: add some superficial things. Get the work mailing address of the person you interviewed with -- the one who is going to make the decision. Write a hand-written Thank You letter expressing your desire for the position. I've gotten one of those in my life, though I've written one every time. My boss was so impressed by that extra step that I didn't get to pick the person I wanted for the job in favor of the other gal. She turned out to be a fantastic hire, so no hard feelings, but she literally won out because of a thank-you note.

Edit: To clarify I'm referring to a large corporation, not a startup. Can't recommend working for a good startup enough, it's been a way better situation for me.
I'd say it is consonant with it. Making salaries public has a strong flattening effect - it makes it much more difficult for people of the same rank to have different pay. Someone else said in Norway all salaries are public, which fits the Scandinavian idea that one person shouldn't be much wealthier than another. In America, there has traditionally been the idea that you as an individual might be able to get rich.

I'm not taking a position on which side is better or worse, just noting that whether you aim to get richer than your neighbour is probably going to be the main thing determining whether you think salaries should be public or private.
Can you elaborate? (Either by direct explanation or by reference to something explaining the hazard there?)
This was one of the points that stood out for me in the article too, also because I strongly disagreed with it. There is nothing inherently wonderful about doing everything client-side.

You get a much more limited range of languages and libraries to work with. You get to use overcomplicated build and deployment processes with ever-changing tools. You get to reinvent the wheel if you do want to use things like URI-based routing and browser history in a sensible way. In many cases you are going to need most of the same back-end infrastructure to supply the underlying data anyway.

Also, it's tough to argue the SPA approach is significantly more efficient if it's being compared with a traditional web app built using a server-side framework where switching contexts requests exactly one uncached HTML file, no uncached CSS or JS in many cases, and any specific resources for the new page that you would have had to download anyway.

Of course some web apps are sufficiently interactive that you do need to move more of the code client-side, and beyond a certain point you might find it's then easier to do everything there instead of splitting responsibilities. I'm not saying everything should be done server-side; I'm saying different choices work for different projects and it is unwise to assume that SPA will be a good choice for all new projects.
Could you please point to an explanation why random access CTR decryption is dangerous? Or why it's more or less secure than random access CBC decryption?

Or is random access CTR encryption dangerous? I don't see how, unless you reuse the keystream / make it a two-time pad.
Almost any technology low in Apple's stack is called 'Core ...'. A quick search at developer.apple.com yields Core Animation, Core Video, Core Text, Core Graphics, Core Image, Core Data, JavaScriptCore, WebCore, Core Audio, Core Bluetooth, Core Foundation, and Core Media Framework.

That convention started with Mac OS X, when they had to somehow unite the low-level technologies of classic Mac OS and NextStep.
Frida: Putting the open back into closed software [video]
Looks awesome, hope this will be updated for V2X (Vehicle to Vehicle and Vehicle to Infrastructure) / DSRC / Wave

I would have bought the Kindle e-book for sure - Does Amazon allow pay-what-you-want?
Planed obsolescence and similar repulsive concepts are products of shallow minds and unchecked human flaws. I hate it.
You can at least try to fight it

http://www.digitalrighttorepair.org/

https://www.youtube.com/watch?v=YcuAF3OJIoU
At GitLab we use Chef Omnibus too and we love it. More than 100k organizations use GitLab with Omnibus and it has lowered our support effort enormously. https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/REA...
Didn't Steve Jobs and Google pay $324'000,000 because of this?
>What improvements are in the works to mitigate the effect of these sort of hijacks?

I happen to have published research in this area[0]. There are two systems being developed to secure BGP.

The first is the RPKI which aims to provide a Public Key Infrastructure to attest to the origination of IP addresses. To grossly oversimplify it: everyone would get a certificate that says "AS X is allowed to originate IP prefix Y". Many routers already support the RPKI[1] and the RPKI is currently undergoing deployment[2], but it should take some time before operators begin using it to make routing decisions. Once used the RPKI offers substantial security benefits[3].

The second protocol is BGPSEC which is designed secure routing paths. It will use the RPKI as its foundation.

[0]: https://www.cs.bu.edu/~goldbe/papers/sigRPKI.pdf

[1]: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp...

[2]: http://rpki-monitor.antd.nist.gov/

[3]: http://arxiv.org/pdf/1307.2690v1.pdf
Yes thanks for the advice. I do hope to follow up with some calls soon.
Well, that killed my productivity for the day.
Not unless you have discovered a novel technique for distinguishing between good crypto and bad crypto over the wire.
Students wearing “worldview protectors” in history class. [story]
And yet here we are, living and experiencing the universe.

Most matter that you interact with is not in your body, and much of it is not in a usable form to your body, yet it still sustains you. Why should this not hold true at a larger scale?

We cannot survive in the colds of space, yet it is the tendency of matter to clump together, creating that space, which also gives us a sun and a planet and an atmosphere that was necessary for our existence. We cannot survive in the lifeless molten rock, yet we also could not have formed without its heat. It's usually at the edges of things where the most interesting and varied phenomena arise.

Much of the universe is hostile to human life in its current form, yet it is also the universe that gave rise to it. Whether human newborn or microscopic insect hatchling, the experienced world is at its most incomprehensible, and the organism at its most vulnerable, at the beginning. Growth allows for greater experience, and experience can lead to greater growth. Our knowledge of what's possible for a species extends only backwards, and only on one single speck of dust.

The universe has no inherent vastness, hostility, emptiness or silence without a conscious being to assign it those properties. I choose to imbue it with aspects of magnificence, intelligence, organization, perhaps even benevolence. We are not in a cosmic battle to conquer a dumb, hostile substrate; we are embedded in a rich, nurturing agar whose purpose it is, at least in part, to help us to flourish.
XNU: The Kernel (2003)
I was disappointed the article was so vague about the technical details/hardware involved; anybody have a link to something more specific?
Exactly, how can the police order an ISP to commit a crime? Why did the ISP committed the crime? Hopefully both will be charged now.

The only one thing I trust here is the independence of the Italian prosecution system.
I know about OpenResty, but I am getting a blank page? Can't even open Chrome developer tools on it. Very strange. Works fine in Safari and Firefox.
jQuery CDN cache hit rate is 99.8%[0], Google CDN numbers should be comparable. So yes, you are leveraging browser cache for most popular libraries.

Also I was talking from the subsequent requests from the same client.

[0]https://www.maxcdn.com/blog/maxscale-jquery/
The bufferbloat-related changes made in CeroWRT (http://www.bufferbloat.net/projects/cerowrt) have been merged into the Linux kernel and the OpenWrt project.
Things To Be Wary of in VC Financing
Rent my private airport for your hardware startup
A distraction-free chat application seems like an oxymoron...
> because this blows node.js out of the water.

Using your same link I find this solution blowing node away in JSON serialization but the other benchmarks? Not so much. In fact complete opposite for some of them.

As far as I have found there is no "best at everything" language and framework so your binary question doesn't make much sense. I'm also not convinced of this solution in a large web application because debugging and unit testing would be nightmare .
Psychologists Shielded U.S. Torture Program, Report Finds
One person stands in front of the car to stop it. The next person smashes a window and jumps in. What comes next is a guess, but they would probably do something to override the controls. I imagine that there must be an override button on the car somewhere, otherwise you have literally no control over the car in the event of an emergency.

I don't know that they can prevent it through fail-safes. I think they can discourage it, at best, but as with any system, people will find a way to force the system to suit their needs.
2Factor Authentication – India Now Available on Mashape
"right" is subjective. there is always "good enough for right now, with the tools available, and the budget in hand".
That looks really cool, would love to see a mobile version of this.
Some books cover tools in detail, that can be great but those books go out of date. Will put it on the list, thanks.
Solid idea! I'll definitely be adding this to the to do list!
The Not-So-Obvious Design Feature of Apple Watch That Everyone Is Missing
That's 5 generations of devices that will be on the latest version of the OS.

You might in theory be able to run it on an iPad of the same generation as well, but ask a few people who upgraded their iPad to iOS7 or above how well it worked afterwards and you'll hear plenty of complaints, particularly about performance being much worse on the older hardware.
Early 2000s? The company was founded in 2003, and I can't seem to find any articles mentioning them prior to 2009.
Rails has most of this out of the box. Use Rails :)
> In particular, AIXI variants will be hard to approximate, precisely because they dovetail over all possible algorithms.

For this reason, I suspect that invoking AIXItl is begging the question. Positing unlimited computing power allows one to sidestep the difficult question: which algorithm(s)? In fact, this is not just a difficult question, it is the question (the one that AI research is trying to answer.) Absent the convenience of unlimited computing power, I suspect that AIXItl is a dead end, no matter how elegant it is.
Actually I started looking into it. I don't think I am going to make the AMI.

First I am not sure if the NVIDIA driver licenses do or do not allow this. Second I would have to tear down my current run and pay S3 charges to distribute the AMI. Third the instructions are long and ugly ( http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-... ) even after seeing the setup steps. Finally as people have mentioned in other comments there is a good to go Docker image for people to also play with.

Sorry about that.
'Mr. Robot's' Cyber Crime Expert Talks Accuracy, Hacking Misconceptions
How young? I'm 24 and I think this is the best thing ever
> If you are a business, then definitely yes. But the average self-taught developer will not have the resources available to hire a security consultant.

True. You don't need to hire consultants to perform a security audit. Ask HN and Security Stack Exchange are good free alternatives to get critiques on your approach.
Most (all?) encryption functions are also hash functions, they're just special hash functions with the extra property of making it extremely difficult to discover the source. (edit: I realized after posting this, that this item is incorrect in regards to the cipher text, which obviously changes in length in relation to the length of the source, unlike the output of a hash function which is a fixed length)

If OAuth is not for authentication, someone better tell Google: "Google APIs use the OAuth 2.0 protocol for authentication and authorization." [1]

TLS is basically just the newest version of SSL. The name was changed for legal reasons. So it is an understandable oversight [2]

The others aren't security related, so I didn't address them.

[1] https://developers.google.com/identity/protocols/OAuth2

[2] http://security.stackexchange.com/questions/5126/whats-the-d...
BGP's transitive trust mechanism involves 2 parties. The router making an "announcement" or "withdrawal" and the router "accepting" or "origin validating" these. If one of the party announces a false/hijacked route to its upstreams it could have an adverse effect to the entire Internet routing table.

BGP itself, is a path vector protocol (came from standard and vetted Graph Theory algorithms) and therefore for the scalability of the Internet Prefixes - works perfectly with many network devices talking the standard protocol.

Work has always been done within the IETF wg on BGP attributes that the protocol carries for many use-cases and so far BGP has been the preferable choice for many networks, both within an AS and outside an AS(Autonomous System).

You wouldn't want the Internet be controlled by a central authority, that is an absolute NO - at the same time - you have to work together to make sure the "global routing table" or the "default free zone" is not polluted with unnecessary updates and churn and overseeing misbehavior from other ASes.

I believe with so many disparate organizations and networks around the world - we could not have built a common talking "language"/"protocol" without having accountability into it and constantly monitoring it.
Functions as Factories
i'm mildly terrible at poker, but trying to improve. unfortunately, it's hard to practice unless money is on the line. i'd like to be able to play online (with smaller blinds and rake than a brick and mortar casino). i'm not interested in being able to "cash out" ... it's a purely money losing proposition because of my lack of skill

any idea if there's a way i could play on any of these sites in this manner ?
This is kinda the coolest thing in the world, I've always wanted automated gif emotions!
I hope that they upload the images to some server that we can grab and make animations with. I can watch this all day.
This is useful only for long-lived connections. One of the big problems with web connections is that they're so short-lived. TCP never sees enough data to construct a good bandwidth/delay/jitter model of the channel.
(Video is a different case entirely - long connections, delay isn't a big problem but loss and delay jitter are.)

HTTP2 forces long TCP connections, which gives TCP a better chance to characterize the channel. HTTP2 only helps if all the traffic is to one site, though. This delay-gradient congestion control will work best in that case. They should pitch this to Google.

(The optimal case for HTTP2 is a world where every URL looks like "https://cloud.google.com/6e0790d661f75c65b10dc95293f79630". One CDN to rule them all. I hope that's not the endgame for the Web.)
Hana told Rob she had written a mobile app in go in 2 hours. His response: "why did it take you 2 hours?". Classic.
Ah brings back memories! Nice to see old techniques rediscovered.

If the OP is reading, then please add a license to your repo. Github even nags you about it now, but there's no excuse, even if you want to make it proprietary.
One of the more exciting possibilities afforded by DIY cloud game streaming is the ability to interactively share single-player gaming experiences with people, in games that otherwise do not support co-op. Games like FTL and XCOM: Enemy Unknown come to mind.

However, one thing I would be extremely wary of is running your Steam account from AWS or any other server environment. The last thing you want is to get flagged as a bot or VPN abuser and banned; Valve customer support isn't exactly known for being particularly understanding or responsive. Personally I would just load up a throwaway Steam account with a few games and use that.
The title and article are also for web apps, not web sites.
And presumably the only organisation issuing the certs will be the organisation issuing IP space, right? RIGHT?... Guys?
That day any notion of privacy will stop existing.
This won't have any impact on the node.js community. OpenResty has been around since 2011 and it's had some pretty screaming fast benchmarks for quite awhile, yet it still sees little traction. Lapis is great, Lua is super simple to work with and a total pleasure as well, but it just doesn't seem to be gaining much traction.

There continually seems to be this belief that Lua is language only for game scripting; outside of that it is largely ignored.
This is actually a huge change for Apple as iOS and OS X would only use IPv6 ~20% of the time because of the IPv4 bias the old algorithm used. After this change, I expect to see IPv6 at the level's we see at facebook with our app to approach 80%, which is a huge improvement and hopefully results in a good rise in IPv6 usage on the internet.
Dota 2 is absolutely unplayable above 150 ms. Last-hitting and denying get hard enough, but at an even higher level you MUST be able to react to in-air projectiles with abilities such as Black King Bar, Manta Style, Blink, Naga's Mirror Image, etc to disjoint the projectiles.

Anecdotal evidence: historically I have a 60% winrate on US West servers (~40-70 ping) and only 50% winrate on US East servers (~110 ping). I've played on EU servers and it is absolutely miserable at 200+ ping. If I had to play regularly on anything above 110 and I'd probably drop to 45% or 40% winrate.
The FUD surrounding NAT going away both here and on other sites (Ars Technica in particular) is just completely amazing to me.

IPv6 with privacy extensions is just as "private" as NAT would be, and a default-deny firewall is just as secure. How these basic fundamentals of networking have escaped so many supposedly "in the know" people is astounding.
Mandelbrot Set with SIMD Intrinsics
Top Blogging Tips for Beginners in 2015
How does one carve out such a niche?
Not me :) I opted for the equity option. -Tom, Mobile Engineer @ Buffer
I've been playing Dota 1 and Dota 2 for 10 years now and I can tell you that with enough practice anything under 250ms is doable if there are no spikes in latency.

After a certain number of games you get used to it and start anticipating. It's not perfect, that's for sure, but it's definitely doable. Or are you talking about 5k+ MMR? In that case it is trickier, of course, but I know even pros managing to do it :)
To help poor people, give them money
1e100000000 would require about 41 MB [0] of storage so that's not as crazy as I thought. No idea what kind of CPU you need for anything other than an addition though.

[0]: log(1eN) / log(10) = N ; therefore: bits_required = log2(1e100000000) = 100000000 * log(10) / log(2) = 3.3e8 bits = 41 MB
> Most (all?) encryption functions are also hash functions, they're just special hash functions with the extra property of making it extremely difficult to discover the source.

The special property that encryption functions have compared to hashing functions isn't that it is extremely difficult to discover the source, but rather almost the reverse -- that for every encryption function there exists a function (decryption function) by which you can recover the unique source.

Hashing functions in general do not have an inverse function: while you might be able to recover several possible sources from them (and this might be easy or difficult), you cannot recover the single source, because the space of inputs is larger than the space of outputs, so there can be no unique mapping from outputs back to inputs that would generate them.
The MSDS[0] for ZnCdS is pretty telling, for those who are interested.

[0] https://www.mpbio.com/includes/msds/ghs/en/MP_MSDS_219945_US...
I can't help but notice the irony in your comment. So this guy comes along and having read one article, says "I can't call this good science."

A very basic summary of molecular biology of the cell:

DNA - library of blueprints, basically instructions on how to build proteins

RNA - copies of blueprints you take out of the library to build proteins so you don't expose DNA to unnecessary hazards

protein - catalyzes reactions so the cell can do stuff, including make new DNA when replicating.

A fundamental conundrum exists when it comes to evolution of this mechanism. DNA is needed to build proteins, but proteins are needed to catalyze the reactions necessary to build DNA. It's a chicken and egg problem... what came first?

When it was discovered that RNA can catalyze certain reactions, presumably because of their slightly higher chemical reactivity, it suggested a way out of this conundrum. What if life originated with RNA only, where RNA acted as both the hereditary and catalyzing machinery?

The problem with this RNA World hypothesis is that the reactions that current RNA can catalyze is very limited. But what if, at the origin of life, when nature could experiment, the genetic alphabet that RNA could play with was bigger, potentially leading to expanded capability? Scientists like Benner have worked for three decades to try to answer this question.

So, your characterization of "comes along, casually expand" a well-established code and claims it's better is grossly unfair.
Airbus beaten to first electric Channel flight
Unless you, I don't know, go inside?