skysight-inc/HackerNews huggingface dataset:
It's often thought that "fair use" covers any sufficiently short selection of another's words. But this is urban legend. There is no such principle in law. A creative joke is fully copyrighted and not subject to fair use even if it's just several words long.

Even the de minimis doctrine for music sampling has now collapsed.

More clarity about what counts as publication would be pleasant. If three friends post something they heard at a comedy club and discuss it and six others read that; but hundreds could have found it - should that count as publication? So far, Facebook seems to be saying no. And the patent office? We don't know.
Exploiting the third world part of America is also good for business.
But in the real-world, the shopkeeper would have to ask you to leave. And online, they'd have to use some actual access-control barrier.

The EFF's argument allows that in such a (alternative) case, real 'unauthorized access' could have occurred. They write:

Of course, Craigslist has the right to restrict access to its data through, for example, requiring a username and login, which would password protect access ot its other users' advertisements. If defendants bypassed that security measure by trying to break through this barrier by systematically attempting passwords or "hacking" their way in through some other method, then their access to Craigslist would necessarily have been "unauthorized". ...

But once Craigslist chose not to password protect its data – a decision that would undercut Craigslist's successful business model – it necessarily authorized the public to view the information on the public website.
The majority of what you have been told by your media are "narrative" stories that are removed of all actual facts and details (to fit the narrative). Its pure politics.

What's the narrative? To what end?

And that's still leaving allot out.

You were there, I presume? I mean, obviously _any_ recollection of a complex course of events will leave out a lot, but the way you phrase it makes it sound like you know more about what happened. Care to shed some light upon this?

And a watermelon soda is an ice tea

Now this is getting interesting. Do you argue that there is a widespread media cover-up to hide the fact that Mr Martin bought a certain kind of soda that might be used with cough medicine? I can't even...

And that's about 5% of the falsehood story. I could go on and on.

Am I correct in my understanding that you claim to have knowledge of lots of errors in the reporting of the killing of Trayvon Martin, but you only tell us about the watermelon vs ice tea... thing? That's weird; why not give us something more substantial, something that's, you know, actually convincing (or at least, something that is... anything)?

Cops kill a reported 500 or so people every year. Maybe twice that much in real numbers.

Yeah, no. It's 500 reported killings during the first 6 months of 2015 already. Killings by police in the US are way up during the 2000s.

You're not convincing. If anything, it sounds like you are stuck in a narrative. Please provide something more substantial from your other 95% of truth.
JSCert: Certified JavaScript
> Pleople here should compare this against early Android/iOS, not with their 2015 version.

Why's that? Android and iOS are available in their 2015 versions right now.
It's hard to find anyone who doesn't think he earned that price, even among those economists who roll their eyes very hard at his current political writings.
I don't understand.

>> The Court has ruled that users—not craigslist—own the copyrights in their postings.

>> ... Craigslist finally conceded in Court that no such harm or impairment ever occurred.

>> Craigslist completely rewrote its Terms of Use, removing many of the most abusive clauses.

Everything above seems to be against Craigslist. Then why does 3taps have to agree to a settlement to pay Craigslist $1 million?

And if there are other parts of the court ruling that went against 3taps which this blog post doesn't mention, then how can Craigslist be forced to forward that money to EFF?
There's a fair bit of lockin here, but ~no technical information on the website (which is also pretty sparse).

Is it just "we'll run a PBX and backhaul your calls to you over SIP to a client on your phone?" Is it an MVNO? Is it forwarding between PSTN?
The post was so incendiary/insulting my natural inclination to strike back in kind got the better of me but I recognize fighting fire with fire does not make for a good community so I'm sorry about that and will watch it.
It isn't carbonated.

Do you see how easy it is to get trivial details wrong? Now imagine if you were actually upset about the death of a human being; it would almost seem insignificant that it was juice instead of ice tea.
https://github.com/bricss/dope
Hopefully the next step is going to be switching from Google to a different provider.
Here, have a look at this data model: https://github.com/OpenSourcePolicyCenter/Tax-Calculator
This is purely an unsubstantiated insult devoid of content please follow the HN guidelines.
And also, that knowing the traits doesn't mean you can change yourself to adopt them fast enough or at all.
And again, as I said, that was 5% of the facts, I could go on and on.

Please do. Because right now with this soda business, with due respect, you're coming through as a little bit looney.
I feel you are talking about a situation that rarely exists. It does happen at least somewhat when you see a large incumbent versus a startup, but in those cases a startup is generally nimble and has a fighting chance.

IMO, if technical debt is what destroys your startup then you probably so poorly understood the customer problem early on that you engineered a solution that was going to fail either way. In all the companies I help I almost always see bad technical decisions, but their marketing is what is hurting them the most not their tech debt.
Right - gotcha.
3taps may not have been able to keep fighting it, but they were able to keep Craigslist from profiting by driving them under. I wouldn't be surprised if there was some element of "agree to this or we spend it all making you pay your lawyers then fold the company with all assets completely exhausted - we'll even sell the name and spend that against you."

I believe the term is pyrrhic victory.

And there may also be a (future) kneecapping element to it with the release of their scraping source code.
I live in Fairfax county. It has some excellent officers but the dept is atrocious when it comes to transparency and honesty with the citizenry.

The officer involved shootings of unarmed people are consistently swept under the rug.
The word "damning" seems a bit strong. "Qualifying" might be better.

The author, Richard Bernstein, concludes:

in extrapolating from the experience of Ms. Ren to make assertions about that “vast majority,” the paper has put its tremendous prestige and power behind a demonstrably misleading depiction of the nail salon business as a whole.

But what's his demonstrable evidence of institutional bias? As the upstanding "part owner of two day-spas in Manhattan", he's never seen anything like the practices described in the article? An equally broad extrapolation.

Even his investigation into the phantom $10 / day ad seems a bit disingenuous. He can't find an ad quoting that rate and it does seem odd that a salon would advertise such a low rate when it could just list no rate at all, which Brownstein concedes the majority of ads do. But he seems to misconstrue the article's quote that "the rate was confirmed by several workers" to suggest that the Times' reporter was using the workers to confirm that such ads were all over the place when the reporter intended instead to confirm that this was a common rate in the industry (regardless of the ad). If it turned out the ad couldn't be substantiated, but the practices described in the article were accurate, it'd be worthy of a correction. But not a retraction.

What we get with Richard Bernstein's article, one might hazard, is a "demonstrably misleading depiction" of the New York Times article from a motivated industry apologist that plugs its own anecdotes and loose figures into a narrative that seems to have its own populist agenda: the New York Times is not much better than HuffPo or Fox News when it comes to real journalism. Does that mean we should also give up on the New York Review of Books? I hope not.
>This is the problem with reporting in general --it's full of half truths and poorly researched pieces

I largely agree with you, and it's very possible that the original nytimes article is questionable. But a lot of what you said ("poorly researched", "want to forward an agenda") can be said about this article too. Not even attempting to interview the subject of the article (I assume that's what happened based on this tweet: https://twitter.com/SarahMaslinNir/status/625085019199934464) is very poor journalistic standards.

Instead of getting caught in the middle of these two journalists, I'm going to wait for more, solid evidence.
So the two shared_ptr instances just share the same (heap-allocated) reference counter?
Higher quality images are encrypted, but the basic stuff is open.
Hacking Team: a zero-day market case study
Does serving someone with a cease and desist count as asking them to leave?
> My "favorite" is when a site will throw a browser dialog asking to install the app version of their site.

Yes! If I wanted the app I wouldn't be on a browser!
Very cool. Any idea how this compares to lthread?
Yeah, I was actually hoping it was a high-level synthesis tool. I appreciate your review on the ease-of-use aspect.
Show HN: BetterSpark – Connect and collaborate with businesses in same demographic
The eggs are hatched! I just caught her feeding them.
no it doesn't. the user delegates their rights to the non-profit which has a democratic governance model. in fact this argument of it being user owned and controlled has totally been proven unworkable. most users don't give a shit, hence it's irrelevant what they think or do. they rather delegate their rights to someone else and let them manage that.
The text processing of Hacker News is described at https://news.ycombinator.com/formatdoc.

HN only supports the two formatting types you described, plus auto-linking of URLs written out in full, such as the one in the previous paragraph.
An imposition? What do you mean? That nobody's forcing you to do it, or that it isn't an onerous job, especially if you don't have money and family connections?
But this is another case where analogies to tangible property can easily mislead.

Even though we metaphorically call viewing a website 'a visit', I'm not occupying any of the website's property, or even particularly using it a consumptive/rivalrous way. I haven't traveled anywhere or opened anything. Even the kind of 'access' is very different from the 'physical access' of passing through a door or entering a shop/home – though the reuse of the same word can lead to semantic confusion.

Instead, I'm communicating. The website is sending me information, in response to simple requests. It can withhold whatever it wants.

If the website hasn't even so much as enforced a click-through assent-agreement – much less a password-login! – what 'property' is being 'accessed' conditional on some narrow 'defined purpose', when I'm simply viewing things that area also open to everyone else without preconditions?

If it's intellectual property, unlicensed reproduction or use of that is a very different cause-of-action than criminal 'unauthorized computer access'/trespass. (I believe that issue also came up in the case, and individual posters rather than Craigslist were found to be relevant rightsholders in individual listings.)
How many people work for square?
It's a very strange dichotomy that $10 for a training or learning position is considered oppressive, but if it was unpaid (internship) or the trainee had to pay tuition for classes, it would be totally a non-issue.
IIRC, Facebook uses (or used) Tilera machines for memcache nodes, they seem to be focused on network applications now.
And in my opinion it's still very confusing. If there was a more confusing version of this message and it was refined to this then I'm inclined to believe the deception was intentional.

libav is not the successor to ffmpeg. libav is a fork. How'd Debian move so quickly to a(n) (immature) fork?

Politics.
I'm sorry if this sounds like me being a jerk - that's not my goal. I just want to point out cold hard facts.

> but this is happening right now to a friend of mine's gmail account

I can't stress this enough but please enable OTP on your accounts. Facebook, gmail, and even your Windows system if you are paranoid enough. Yeah it adds some hassle - but the value of increased security far outweighs the hassle. Also backup the OTP codes somewhere.

> Scammer was able to social engineer the cell phone company to forward his number

If they are in the US please tell us the name of the provider so we know not to ever use them. This isn't the first this kind of attack has happened [1] (shame on you DigitalOcean). I use Gandi and they state in their documentation that they will not reset it if you ask them [2].

> Its so disturbing that there is absolute nothing you can do to reach Google once this happens.

It's a free service - what do you expect? I've heard this story many many times. Yes - google makes billions in profits and could in theory hire someone to handle gmail issues. But, they don't and it makes sense from a business point of view (why spend money on a guy who will support a service that doesn't make money?).

> It could happen on anyone's cell phone as well, how many fortune 500 companies have higher up employees with cell phones and gmail accounts?

If a Fortune 500 company uses gmail they would buy the google apps for work. If they buy google apps for work they get an 800 number to call if they have problems (and most likely a dedicated account rep because they are probably buying 1000s of accounts).

> Imagine in the future trusting google with a self driving car and home automation

Again - you would be giving money to google. And in return you will get support. I'm not saying Google is perfect but if self driving cars become a thing I'm sure (hope) there will be an 800 number you can call when your car becomes sentient.

[1] - https://news.ycombinator.com/item?id=9596258

[2] - https://wiki.gandi.net/en/hosting/gandi-expert/change-root-p...
> Contrary to popular belief, x86_64 assembler isn't really that bad to deal with.

I think most beliefs regarding x86_64 asembly is largely "guilt by association" with i386... It's amazing the difference just from making use of the larger register set.
In both the best and worst cases, technical debt gets 100% relieved. In the best case because growth requires an entirely different approach to solving rather different problems, and in the worst case because the company goes bust. Where technical debt matters is in the middle, lifestyle businesses and Enterprise IT and companies that aren't going to come close to monopoly due to market position.

Good luck.
I wouldn't have wanted to be a farmer when Lysenko was still considered "the man".
She did a great job. That is amazing build quality -- it looks sturdy and comfortable.

Hopefully nobody disturbs her and her young.
You don't. Not ever. 27 years later, you will still think about it... every... day. And you would do anything, give up anything you have and anything you've ever done for the chance to undo it.
From the documentation:

> BREACH/TIME/etc
>
> Both the BREACH and TIME attacks rely on measuring the size of compressed response bodies. Since rwasa supports dynamic content compression by default, the HeavyThing library's default setting for webserver_breach_mitigation is enabled and set to 48 bytes. For each rwasa response when TLS and gzip is active, this setting adds an X-NB header that contains a random 0..48 bytes that is hex-encoded to each response header. While this doesn't render response sizing attacks completely useless, it makes a would-be attacker's job much more difficult due to the highly variable response lengths.

It's my understanding that random padding doesn't in fact make the attacker's job "much more" difficult. Only a little more, or not at all?

Could you comment on how integrated the TLS stack is with the webserver? Normally I'd think that using some kind of dedicated SSL terminating proxy, either a new version of HAproxy -- or stunnel/stud or similar -- would make more sense than deploying a new TLS stack that hasn't been through any outside review?

That said, as mentioned by others here - openssl is clearly not a great example of a secure/good TLS implementation. I'm not sure there are any (yet). Hopefully libressl will become one. Personally I'd like to see a minimal library that combined a couple of AES/ECC primitives and implemented TLS 1.2+ only (No SSL), with a sane and clean API on top.

Something along the lines of NaCl but with a goal to support a subset of standard TLS with forward secrecy (and explicitly throw old clients under the bus, Android 2x be dammed).
What am I looking at? It clearly says $75 right there not $10.
Ask HN: Websites with C Programming Questions
Im looking for sites like CodingBat, that offer simple, difficult, really hard problems in C to work on.

Does anyone know of such a site for C Programming only?

I'm trying to learn C coming from a Python/Php/Ruby background.

Thank you!
Broadcast Channel API attempts to solve this but only Mozilla has implemented so far,

https://developer.mozilla.org/en-US/docs/Web/API/Broadcast_C...

http://caniuse.com/#feat=broadcastchannel
The fact that these people were returned to their respective countries allows for them to speak of their experiences.

People who were not returned (ie disappeared) are not able to speak of their experiences, so you would never know it happened.

Note that both Canada and England are allies of the USA. What happens to questionable people who are not from allied nations?
I'm a theoretic physicist who does computer simulations of laser plasma interactions. I'm just curious, how much of a scale difference (orders of magnitude) exist between your micro and macro worlds? We deal with femtosecond (1e-15 sec) and nanosecond (1e-9 sec) dynamics by using different simulations and feeding the short time sim results into the nanosecond ones. Is such a thing possible? I'd think doing something like that would be obvious, no?
Okay this is getting weird. I just read your link so this is all from my first impressions.

MyHDL is talking about co-simulation on the gate-level netlist. They do not recommend it. However they say MyHDL can do co-simulation on Verilog RTL. That will be cycle accurate I believe.

As I understand it Chisel can't even do co simulation at all.
Am I incorrect? Essentially once you translate your Chisel design to verilog you basically can't reuse your verification environment for the RTL simulation or the gate-level. How are you going to check timing if you wrote all your tests in Chisel?

So Chisel seems worse than MyHDL but neither can support verifying a gate-level sim so you are somewhat screwed either way. It's just a matter of how badly screwed you are.

That's kinda the problem with all these tools I believe. A while ago someone posted about Clash. Same issue.
>> " Most often, product owners and developers were not able to establish good communication, which led to developers basically creating a product that didn't match what customers wanted. Period."

Thanks a bunch for pointing this out! It's important for me to hear this here :).

Regarding my definition of technical debt is this:

* Lack for proper documentation where on boarding devs is becoming a burden.

* Lack of written tests to a point writing new features is almost inevitable from breaking the product.

* Delayed refactoring which has led to serious performance issues.

* Lack of alignment to standards where the engineers have written everything in Javascript like a 5 years old painting all the wall with same color, rather than using a different language for some specific purposes.

Some other Technical Debts that I meant were:

* How engineers go on a trajectory of writing code where no one knows something new have been added.

* Lack of clarity who have done what, regardless Code commits, this one is about knowing who lead a milestone or a feature to production.
Yeah thats one way to address the issue (or even using multiple emails), but you know what's even better than that?

Having competent customer support, that would be able to address situations like this. Esp. with the amount of people that are using these home automation services with "cloud" support, its only going to get worse the more integrated these services become.

My friend has had a similar situation with the good ol Yahoo eMail service, and after being on call waiting for 4hours, they told him they cannot help him, then hung up.

I also had a similar service, with my STEAM account, I emailed Valve, and within 45 min the account was restored.
I have seen it happen. But I have also seen startups skate by. Cost of capital is a real issue, and spending money on being perfectionist is not worth it if you arrived at a good-enough implementation despite being naive and cheapass.

More often it's not "technical debt" but outright failed implementation when technology kills a startup

See how far it takes you and if you are wise enough not to press your luck, you'll have the chance to do it right with cheaper money.
In some respects, assembler language is actually at a higher level than C.
Simply naming a logical fallacy isn't an argument. And in fact I claimed it would be fair to suggest humanity believes in souls, I didn't make the claim. Rather, I suggested it is far more reasonable (though not a fact -- "humanity" is an abstract subjective concept with no fixed meaning) to assert humanity believes in souls than that humanity doesn't, a silly assertion the article makes without argument.
Every time I travel (or am away from home for over a day straight on a weekday) I get a bit of anxiety from having to work on a laptop because it is so much less efficient. It is nearly impossible to be a company with say a couple employees total & stay competitive in saturated markets when one of the employees is on a laptop which lowers their working productivity by about 50%.

As a bonus, on my last trip, my laptop's hard drive had a corruption issue which I couldn't easily fix without wiping the drive. I should have had a backup laptop with me. Luckily I was able to borrow my wife's Windows Surface Pro & was flying back the next day after my laptop broke. But from my fear of working on laptops I really think the people who mention doing all their work from the phone are either crazy or they are thinking far into the future or they count chats / meetings at coffee shops as encompassing most of their work. :)

Granted, cell phones might eventually might get much better with keyboard and display hookups, but even the frequent moving them around (and the smaller size causing hot components to be closer together) makes them more likely to eventually run into some sort of issue than a desktop computer which just sits there & has more space to dissipate heat and such.
Nice idea, but is it from 2012? What is that implementation, just a list of businesses and nothing else?

I was kinda hoping this thing would work and get traction and so on, but this way it is impossible.
I'm sorry, you've held off on publishing on github due to missing source code highlighting? Or am I completely misunderstanding what you're saying (I think I am...)?
Ask HN: A tool for correcting perspective in videos
I'm wondering if there is an existing tool that can convert a video of computer screen shot at an angle and convert it to its original rectangular format
The Push Against Performance Reviews