skysight-inc/HackerNews huggingface dataset:
It's not too hard to obfuscate the actual domain for non-technical users, leading to easier phishing. By only displaying the actual domain name, it's much easier for people to see that they aren't on the site they expect to be.

IMO, the tradeoff of reducing phishing effectiveness is worth the small amount of additional effort needed to find this bug.
The intention may not have been to misquote, but that is the effect that I saw. I had a similar reaction that geofft did when I read the whole email: it sounds like a reasonable effort to start the process of moving to something better than what is currently available. The submission here does not seem to take that into account.
There is this odd concept that things might actually be useful to people called "users".

I think the integration is useful, and I've used it quite a bit. It's a lot better (faster, more reliable) than pocket's old extension.
Well Sketch I use, but I know what you mean.

I'd be happy to meet those people. I do from time to time but it's really random.
Ok. So businesses already have cameras. Yeah, privacy, schmiravacy. That horse has done gone left the barn.

So, the second problem with cameras/face tracking is cost?

I wrote this: https://github.com/jwcrawley/uWho

It does what your hardware does, but also does facial recognition. It's still early in the build process, but I'm working on a commercial (non-QT) version of this.

But right now, it can accurately count unique people, as well as remember people. So when Jane walks in front of the camera, it remembers that her database number is 1234. Tomorrow, it will also remember that she's 1234. And tracking is all stored in few XML config files for easy calculation.
My favorite podcast "Judge John Hodgman" has the honorable judge singing Happy Birthday more than once to the tune of the Alphabet Song.

Happy birthday to you! hap- /
-py birthday to you! Happy /
birthday to you! Happy birth- /
-day to you! Happy birthday /
to you! Happy birthday to /
you! Happy birthday to you!
IMHO these (and their failures) are an argument it's indeed somewhat crazy.
Security for building modern web apps
10 things you need to know before developing for the Gear VR
SCCA Spec Miata. I rent the track privately sometimes.

This would have been much more exciting if it were closer: https://www.youtube.com/watch?v=vfQC0135Vfs
If the author is correct (which I am not questioning or doubting) and very high profile projects are using this feature... and Oracle refuses solicit input from the community... those developers with clout can and should maintain a fork of OpenJDK to include this feature. If things like Netty only run on the forked version of the JDK, and the developers are committed to not porting or working around a lack of Unsafe support, Oracle will be forced to reconcile with the community or risk burning down their own house.

Do not be surprised if they remove this feature from the GPL'd OpenJDK but maintain an analogous feature in their proprietary JRockit JVM. There is a good chance that this is a "shot heard around the world", and now is the time to start fighting back.
I agree. But I think there should be a distinction between being on someone's property and being recorded for security and being in a cafe, having your face recognized as someone that frequented a sex shop last week, pairing that with an online profile, and then being pushed a retargeted ad campaign about your fetish.
Create VR Games for Students Learning Foreign Languages
Not sure if it's necessarily better. The Lilly also requires a tag to work, but it can only handle 20 minutes of battery with no way to insert a backup. This is relatively low-tech and seems to be capable of enhancing your existing hardware, rather than replacing it. That's a big win.

Still, the Lilly is really cool.
Anyone who's ever actually written a website using vanilla CSS and then gotten to write a site with Sass knows that not using a preprocessor in this day and age is insane. It makes things 1000x easier to write and more importantly to maintain.

Writing vanilla CSS after using a preprocessor is torture.
I just checked Autotrader too. 46 listed there. Car search is tricky. It's something I've been thinking about for a while now.

[Edit] I'd love to see someone do car search right!
Boring front-end developers also aren't involved in the project planning or design process so they're low-status. Of course I expect them to follow the spec and do things the boring way, because that's what they're paid to do. New tech? That's a new risk, better find someone else who will do exactly what we ask and not try to "improve" things.

What I see from the frontend developer community with all these new frameworks and tools is a rebellion against project managers and clients and the whole agency model which makes creating websites the most bland process imaginable.

Every single thing listed in the article is more fun. Being boring is fine but you better be paying the dev either very little because you don't really value them, they're simply a machine for turning your ideas into code; or you pay them a lot because you know if you don't they'll leave and take their great ideas and work for a competitor or start consulting and stealing clients.
What are you scraping? These all seem to be from dealers, marked up a ton.
One of the companies I worked for used an applet to load data from a webapp and insert it into an Access 1.0 DB file in the users hard drive.

After exporting the data, the user would have to run a really old gov't program (to which the Access DB file belonged) to upload the data to a legacy server, over X.25 (click an icon on the desktop).

The most important requirement is to use the DB file installed in the user's hard drive (always same directory, no way to change it): can't generate new ones because the gov't program stores some cryptic arcane data in it, and even though we could reverse engineer it, we wouldn't be legally covered if we sent the wrong cryptic data.

Second requirement is: users are ignorant, don't know how to save files and how to navigate directory trees, 'computers = magic' to them.

How would you address this situation?
If that were the best I could realistically do, yes (though that itself isn't realistic, there are many other criteria). Any other technique would, by definition end up unfavorably affecting a greater number of people.

Any imperfect criterion will always exist at the expense of some group of people (tautologically, the group of people to which the criterion is unfavorable). What difference does it make, ethically, if the group happens to be identifiable?
Ask HN: What's fair equity for cofounder without day-to-day responsibilities?
As part of a fun side project my friend as I accidentally invented a product that has become successful in a niche hardware market. My partner, who is in a more fortunate financial situation than myself, was able to work full-time on this from the beginning with little/no pay. I needed my day job so I spent nights/weekends on this. For many many months I was doing 20-30 hrs/week at the startup on top of the day job. He was working at the startup during the day as well as nights/weekends with me so he was definitely working more than me.

We’ve since rented a building and hired employees. While we're barely sustainable at this point, if I went full-time I would be making 1/3 of what I make now and I would lose all benefits. I truly LOVE my day job and have realized that I’m not passionate about working at the startup. It's successful side tangent in an arena we both know little about. I would also have no work/life balance. I've also realized that I don't work very well in business relationship dynamic that he and I have. He wants to pursue it, I no longer want day-to-day responsibility.

Obviously, a 50/50 split isn't fair any longer. We renegotiated our split based on amount of time spent working on the project-which I thought was a little dubious given the amount of time, money, hundreds of hours of design/engineering work (both our names are on the patent), and the fact that it took us both to start up. Either way, I obliged now own a little less than 10%.

He's now seeking outside investment and asked me to sell all/most of my shares back to him (at a VERY low valuation) because he thinks it’s unattractive to potential investors to see a large stakeholder who isn’t full-time.

Questions:

1. Does he have a legitimate concern about the large stakeholder issue? I feel like I've already let go of too much.

2. If so, what percentage would be considered "small enough"? I definitely don't want to throw away all my shares.

Thanks!
standard track lighting that was installed in my rental house. Just a straight bulb swap.
A more plausible explanation is that that's the only way people discover new functionality. Prediction: it won't be the default eventually (after people get used to the idea that they can easily pick and choose sharing services https://activations.cdn.mozilla.net/en-US/ to show).
Please don't copy-paste a comment from elsewhere in order to flame it on Hacker News. The local supply is excessive as it is.

The substantive point you're making is fine, but would be better and clearer if you expanded on it a bit and dropped the indignation.
It was not obvious to me that the other side of that link would be a living document on current uses of Unsafe.
Well, there's no guarantee that it will do anything. Over 30 years, taking a supplement may lead to other problems, or it may become less effective when you really need it.

Personally, I'd probably wait until my early 50's. Hopefully, at the very least, in 20 years, they'll be able to detect and monitor the effects on the body with more precision.

At the very least, billions more in research will have been done.
Not quite.

I wanted to get a picture of whether the socketpuppeting that is done on reddit was colored by particular objectives - whether US and partner sockpuppeting is allowed where adversary sockpuppeting is not - and whether censorship of certain types of content was performed on the behest of partnerships.

Basically, an overall clarification about the policies, the technologies and the coded language for reddit's stance on sockpuppeting and content curation.
Perhaps you want this 1988 quote from Edsger W. Dijkstra:

My point today is that, if we wish to count lines of code, we should not regard them as "lines produced" but as "lines spent": the current conventional wisdom is so foolish as to book that count on the wrong side of the ledger.
Thirded. The hard part of Apple Pay is figuring out whether you can use it. The NFC icon isn't always obvious. When in doubt, I don't try. But when I do try, it's fast and easy. I just wait until the terminal shows my total, then I hold my phone up and it goes through. It's not a game-changer or anything, but it's a nice convenience.

(One exception to the above: Home Depot had terminals that claimed to do NFC but would hang for a while and eventually time out and error if I tried Apple Pay. That was annoying.)
Germany is the largest financial contributor to the bailout fund. It's power is the power to say "no more."

http://www.wsj.com/articles/germany-has-a-lot-to-lose-in-a-g...
The privacy curve
Ignorance alert: I'm no economist nor an European.

Since Greece's economy has been in the doldrums for a while, I'm wondering why don't European powerhouses (like Germany) move some manufacturing there? Greece is a popular tourist destination; so how come I'm not hearing of lots of outside money moving in to buy hotels, resorts, etc.?
FUCK Your WESTBORO BAPTIST CHURCH MUSIC VIDEO
Except that those of us on the Java community that follow Java development are fully aware of the 2014 survey, done by Oracle about how Unsafe is being used and what is our opinion on it.

Of course, many HNers that hate Java aren't aware of those discussions and post comments without knowing the full background.
Yeah - I'll be honest, a big reason I went for it was that they are MUCH less fragile. It used to be a fairly common occurrence that I'd hit a board into the fixtures on my ceiling. With the LEDs, I no longer get covered in broken glass a mercury powder. Instead, the bulb just flexes.
I can only speak to my own experience: but the the connotation you are looking for just doesn't exist.

As long as some people are let go and others keep their jobs, people will assume there was a reason they got let go...not just because the company had to make layoffs.

Short of committing a deliberate fire-able offense, being let go as part of a layoff feels exactly the same.
So the evilness of Germany is not donating Billions of Euros? Evil is not what it used to be anymore...
It wouldn't hurt to ask them if they could pay "market value". After all, those other offers are proof of your actual market value - not some abstract idea of what you are worth.

I wouldn't mention your other offers unless they press you to justify how you arrived at your "market value" number. No one wants to be in a bidding war. If they give you the "We think we are offering matches the market." then ask them if it would change their minds if you could show them what the actual market it.

"I've considered everything and if you raise the offer to market value and add bit more vacation I can start on Monday."

"I'm looking forward to working with you. Make it $N and X weeks vacation and we have a deal."

Let's face it though, some places just do not value engineers. If they are cheap at the start, they will never, ever "make it up to you".
Oracle did a survey last year exactly as input for what to do.
As a rider, Uber has improved my life substantially. A lot of startups claim to better peoples' lives, but how many actually do it? If Uber is destroyed to feed the schadenfreude and ideology of some groups that indicts the political system.
According to some of the amazon reviews, it doesn't work within 50 feet. I suspect it does in fact use GPS, as 50 feet would be far enough that you're going to be somewhere in the frame. Couple that with just measuring the delay time, and possibly a compass or something and you'd end up with what they have.
This is really nice. I like the lighting model but also the attention to detail, e.g. scratches on the Chrome material. One thing, that might be specific to my renderer implementation - the specular reflection seems to be point sampled. Is this to do with a float texture limitation?
There's no shortage of advertising on The New Yorker.
What would a MS fanboy suggest as an alternative?
GPG is awful; GPG is terrific.
There are other means of administering nicotine (as well as other beneficial effects): http://www.gwern.net/Nicotine
As for Haskell, I was... fully functional, programming with... multiple techniques.
The civility rule isn't conditional on where someone works.
I wrote my first Go program this weekend. The syntax felt like a cross between Python and C, notably doing away with parens in if statements and returning multiple values.
And, the battery is non-replaceable. Once it dies (two years) you have to buy a whole new card.

Nothing about Coin ever made any sense to me.
> someone not ready to handle the incredible momentum of the industry

The momentum of the industry certainly presents some credibility questions, but I'm not as sure as you are if they're about anyone who isn't content with a treadmill as their professional lot.

Here's big quote of the article: "The BFED will develop a site based on the context of the problem and provide a solution accordingly."

A BFED isn't necessarily someone who's reflexively resistant. Skeptical, maybe, because another way of describing the "momentum" of the industry would be that it's filled with tools whose adoption is often carried along by their own adoption/social proof as much as their unique merits as solutions (and that's the good case, we're not talking about the problem of hyped products whose merits might be deeply in question).

And if CSS preprocessors are an example of industry momentum presenting necessity... well, I've worked on lots of projects with LESS and SASS and lots without. They can be nice, but there's no way I'd draw them inside a circle of necessity. There's a set primary problems they can address relating to keeping source keystrokes down and keeping values defined in single places. They tend to produce some of their own problems (emitted code size and source mapping). There are other solutions a good team that knows CSS and a good text-editor well can use -- good enough I'd be willing to bet on such a team's ability to keep up with (or surpass) than a team that reflexively uses LESS or SASS and considers their problems solved because that's How We Do Things Now™.

What about build tools?

http://blog.keithcirkel.co.uk/why-we-should-stop-using-grunt...

http://blog.keithcirkel.co.uk/how-to-use-npm-as-a-build-tool...

Not a repudiation of the concept but the "momentum" of the industry has given us some questionable implementations.

And they're hardly new ideas being born. They're new implementations. Any developer worth their salt is going to think first about their problems, and second about whether these new implementations should be adopted.
It’s not so much about supporting legacy software as having something that’s likely to show something in any browser, from Firefox to IE6 to Dillo to Lynx.
All they did was kick the can down the road for the 32nd time. This is the most boring sovereign default in history.
Do we have any evidence around the frequency and/or magnitude of US federal government pressure/censorship tactics towards social media sites?

I don't doubt that it happens, but I would expect much more noise about this if it was truly widespread.
>Oracle

>the shame and brand damage of making such a terrible product
It looks like the intent is to protect AMZN's customers from IP lawsuits related to their use of the service offerings.

So if you were sued for using VMs or S3 storage by a third-party who had used AWS, you could invoke that clause.
Outside of performance, how are hosted dedicated servers different than hosted VPS?

Are you trading one cloud provider's feature set for another?

You still outsourcing via PaaS, and not actually investing in IT.
I wonder if you could put up a sign that says:

"If you steal this camera you agree to pay a $200 fine" - just having a sign is a deterrent but not a strong one.

Though, a better idea is to attach a speaker to it and when someone steals it blast vulgar sounds through it like "I'M A MOFO THIEF LOOK AT ME HAHA". I doubt any thief would want attention drawn to what they just did.

I've been wanting to do a social experiment where I leave a laptop out with a GPS tracker and a note with my information and see what happens. My guess will be that many people will attempt to steal it.
CRUD isn't technology anymore.
> The end boss is maybe one of the best end bosses I've ever seen in a game, the music is absolutely amazing

8-bit chiptune throwback before throwbacks were chic = jawdropping for 1995
Show HN: Ruby on Rails' AREL Full-Text Search Support
Yes, I remember when FrontPage achieved this very same revolution.
But it does not follow from that that the wheat and the chaff are pretty much the same since they came out around the same time.
How do you seek out folks that challenge you?
Apple stands alone in controlling the in-store experience
Ask HN: How do you find the right doctor?
I moved to the US (San Francisco) three years ago, and I wasn't familiar with the healthcare system. I have been employed, and have health insurance.

I find it extremely difficult to find the right doctor for a specific need.
Right now, I am looking for a psycotherapist, and it seems that the only way to find a good one is actually to go and try several (and pay for these visits), until you find someone that "clicks" with you.

Is there a better way?
My main issue with the kill-flash cult is auto playing html5 videos. I've asked multiple times on HN and have not gotten a working answer.

How can I block HTML5 videos and audios or at least stop them from playing automatically?
This.

1. Create pure UI component

2. Describe allowed state space as DSL/type - https://news.ycombinator.com/item?id=8963000

3. Plug in fuzzer

4. Watch till you catch an undesigned state

5. Fix & repeat
There was a great talk on Ted by Michael Rubinstein, with cameras they are able to extract audio from objects (visually) and they are able to detect the tiniest motions on magnify them, definitely worth watching:

https://www.ted.com/talks/michael_rubinstein_see_invisible_m...
That's not true. There are actuarially significant risk factors that exist and are known at birth. Think chromosomal defects for example.
Care to explain? Does it have a GPS that makes it stop working when it gets inside?
Is Material Design Lite a Bootstrap Killer?
I've read many articles about SPA issues. I don't think any of them can't be overcomed.

But when I say webapp I don't mean blogs or regular mostly static websites. I mean Web applications.
Fortunately though it's at the top of the article, so you've scrolled past it almost immediately, right?
History of success to inspire your business
1) Who else had 60fps smooth UI on a phone/tablet before Apple?
9) Marketing drives gimmicky features and empty specs - Samsung's hover touch and gaze detect that is off by default because using them is a pain, 4 slow cores instead of 2 fast ones, OS defaults that favor energy burning features (location services, true multi-tasking), screens with higher res that are indistinguishable to retina screens but with worse color profile.

Some companies have fixed some of those pain points with their recent models, but it's too little too late for the existing consumer base who buys flagship products.
The people commenting here are not those people for the most part.
I'm reminded of A Study In Emerald, a Sherlock Holmes style detective story in a Lovecraftian setting (with a licensed board game which I hear is quite good).
Cool, thanks! I should start doing that.
I am a PM at Placemeter. We do not "use facial recognition software" in our algorithms, as Density's website claims of video-based systems. None of our algorithms use biometric markers for our counting—we're essentially the same "dumb" counters as Density's IR with the added advantage of accuracy and area of coverage.

Placemeter does much more than pay lip service to privacy. We pride ourself on our privacy efforts. If you want to lear more about them, @afar email me: david@placemeter.com
> Yeah, privacy, schmiravacy. That horse has done gone left the barn.

So you're using the slippery slope as justification and welcome sign instead of warning. The world is all downhill from here exactly because people don't have the integrity and courage to resist.

Also
My wife enjoys playing with different rewards cards to take advantage of various temporary details. I often have one card for restaurants, one for groceries, one for normal purchases, plus an American Express for Costco.

I'm also a bit paranoid and have a fear of getting stuck somewhere because one of my cards stopped working, so I like having a large collection with me.
Finally some love for the anti-SPA crowd. Subjective here, but there's something nice about Post Redirect Get and Plain Ol' Hyperlinks from a User Experience. Whenever I interact with a regular web application, I am relieved. Not every "forms over data" or ecommerce experience has to be Gmail. Even in mobile.. SPA just isn't that much nicer. Also, I think maintaining these SPAs is ridiculously more difficult.

I don't think the SPA juice is worth the squeeze.