TileMill – An open source map design studio - <AUTHOR> https://tilemill-project.github.io/tilemill/ <comment><USER2> It's important to note:

> TileMill has shifted to an open open source contributor model and moved to > its own organization, tilemill-project.

A shift which has come a year or so after the project was abandoned by Mapbox in favor of Mapbox Studio (the official, supported successor to TileMill).

TileMill alone is still useful for creating one's own raster tile set, as long as the application remains in working order.

However, last I checked it gave me tremendous issues running on Linux as many dependencies had become outdated.

Although, I haven't checked back in a while since I moved to Mapbox Studio.

</comment><comment><USER3> Check out also Kosmtik, [https://github.com/kosmtik/kosmtik](https://github.com/kosmtik/kosmtik), which is a similar alternative and which many in the OpenStreetMap community have shifted to using.

<comment><USER4> We use maputnik now because we want the style to be MapBox GL and not CartoCSS: [https://github.com/maputnik/editor](https://github.com/maputnik/editor). We use the MapBox client libs, but host the vector tiles and styles ourselves. Raster tiles seem so 2010 :)

MapBox hired the maintainer of maputnik though, so the future is unclear.

<comment><USER5> What do you use for hosting the vector tiles?

<comment><USER4> AWS

</comment></comment></comment></comment><comment><USER6> This would be helped by the landing page actually explaining what this is and what I would do with it. A central collection of technical links shouldn't be how you introduce a project.

<comment><USER3> It's a UI around the Mapnik raster map rendering engine and the CartoCSS styling language. The idea is that you write your stylesheets and see the map's appearance change accordingly. It was originally developed by Mapbox, but they've since moved to vector rendering.

(Not disagreeing with your point.)

<comment><USER7> That's a little better but I don't know what most of those terms (Mapnik? CartoCSS? Mapbox?) mean. What's the use case, in plain language?

<comment><USER8> I think that description is more than a little better.

> Mapnik raster map rendering engine

An engine that renders maps as raster images, called Mapnik. Should be clear from the quote.

> CartoCSS styling language

A CSS like language to style maps (change the looks of) instead of HTML. If you know CSS, that should follow from the description.

> It was originally developed by Mapbox, but they've since moved to vector > rendering.

Should be pretty obvious from context that Mapbox is the name of the company that originally developed the software.

ELI5: It is for drawing pictures of maps.

<comment><USER7> Yes, but it's still grounded in technical terms. What kind of end user use cases are supported by this tool?

Does this help me create an overlay layer for Google Maps? Does this help me embed a map widget on my own website? Does this help me remix open-source mapping data to produce a customized rendering? Does this help me create maps for my fantasy RPG campaign setting?

Yes, I can do some googling and research these terms and figure it out, that's not the point. The point is that this website does not do a good job of telling a random person (or random developer) why they might be interested in this tool and what it can do for them if they are not already familiar with web map viewer technology..

<comment><USER3> Not every website is intended for a random person (or random developer), especially in the open-source space, and especially when the developers don't want to take on the support burden of users who do not have a certain degree of background knowledge.

</comment></comment></comment></comment></comment></comment><comment><USER9> I used TileMill quite a bit in 2014-15, but stopped after Mapbox abandoned it. Last I checked it wouldn't even run on MacOS anymore. The latest release was in 2012, and based on commit history there hasn't been any movement for ~8 months.

I was a lot of fun to work with, CartoCSS allowed me to be immediately productive with it. In the end though it was too expensive to serve tiles from AWS.

</comment><comment><USER10> A few years ago a good share of the client browsers would choke on complex map renderings, lets say, more than a few thousand SVG complex polygons. At the time, for this kind of use case often it was faster to generate bitmap tiles at the server side. I wrote a tile server using Mapnik bindings for Python - and TileMill was of great help.

It is no longer the case, modern computers and browsers have acceptable performance when using vectorial maps even for very complex maps. The need for firing your own tile server is very unusual.

<comment><USER3> Open-source vector renderers don't yet have the cartographic chops that raster renderers do.

The most glaring difference is that label placement in common vector renderers is generally "try once, fail if no room", whereas in Mapnik (standard raster renderer), for example, you can supply a list of positions to try in order of preference.

There's a lot to like about client-side rendering (which is why I wrote [https://github.com/systemed/tilemaker/](https://github.com/systemed/tilemaker/) to generate vector tiles) but it's not up to feature parity with raster rendering yet, and for some of us those features are important.

<comment><USER10> This is true, but I'm not a cartographer. I know enough to appreciate a well rendered map but it is not my job.

In fact most of the time I can get way with just a vector layer over a 3rd party tile layer using Leaflet and some fancy fireworks showing labels on click/hover events.

I'm really glad I don't need to render tiles in the server side anymore but I remember the time when I had not choice but manage my own tile server simply because many clients could not handle something simple like a choropleth map with all the voting districts in my state.

</comment></comment></comment><comment><USER11> From back when Mapbox was about free and open-source. Great tool!

</comment><comment><USER12> Curious if anyone knew a decent geoJson editor similar to tilemill for Mac

<comment><USER13> geoJson or vector style editor? For the former, QGIS is a good bet. For the latter, maputnik.

<comment><USER12> GeoJSON. Was hoping there was something lighter than QGIS as I just want to create a collection of markers, no unique shapes, point clouds, etc.

<comment><USER13> Maybe check out geojson.io then. It may be too lightweight but perhaps it meets most of your functionality (assuming you will have a web connection).</comment></comment></comment></comment>


A List of Open Questions - <AUTHOR> https://www.gwern.net/Notes#open-questions <comment><USER3> > what and why are furries?

You know how some kids like to pretend to be animals? Furries never quit doing that once they grew up.

> When did furries become a thing? I have yet to run into a clear reference to > them before the 1980s and they may primarily postdate even that

If you want to be aggressively inclusive you can go all the way back to the earliest recorded myths about talking animals. If you want to limit yourself to "people who called themselves furries" then it started somewhere in the mid-seventies to early eighties.

[https://en.wikifur.com/wiki/History](https://en.wikifur.com/wiki/History) \- be sure to check out the external links at the bottom, Patten's history is pretty good, though I advise skimming once the "Burned Furs" come up.

> Is this true, why are furries so rich and well-funded, and why tech, > specifically?

A confluence of the timing of the growth of the Internet and the growth of the furry scene. You needed a certain amount of technical acumen to hang out on Furrymuck and roleplay as an animal person; as the Internet started being an important thing, it was not uncommon for someone whose day job was in tech to pass job opportunities on to their friends who were looking for excuses to get the hell out of Middle America.

There are also _plenty_ of broke furries, for what it's worth.

<comment><USER4> Yeah furries are not rich. The majority of them are about 18 years old and have as much money as your typical highschool/uni student.

I also think its become a much more diversified group. Still a lot of furs working in tech but probably less than 40% of furs work in tech now.

</comment></comment><comment><USER5> > Does listening to music while working serve as a distraction, or motivation?

There was a study which determined that people do mundane, routine work equally well with music or without it, but if the work required creative thinking, music lost to no music. A possible conclusion is that music engages the regions of the brain which are required for creative thinking.

That's just one study, however, and I doubt that I would be able to find a link to it now.

Personally I find that if I turn on "Techno Live Sets"[1] when mashing the buttons, I'm risking doing all the work that's to be done, in one day. On the other hand, some neo-prog post-industrial breakbeat doom would regularly steal my attention. But I've already listened to months if not years of techno cumulatively, while I'm very much in the market for some post-industrial breakbeat doom.

Also, I have a distinct thing about voice in music: the clearer the words, the less suited the music is for the background. Mumbling to complex hip-hop rhythm ok, clear and loud declamation not ok.

Most notably, I can mostly turn off my attention to words in English, which is the second language for me, while my native language gets straight into my brain's speech recognition centers—I've been suffering from this quite a lot when around TV or pop music. Inane lyrics in my language immediately throw me into stupor of trying to find any sort of reason behind them, while I'm comfortable with any random drivel in English until I explicitly try to decipher it. I've also noticed that I can consume text in my native language pretty fast without any conscious effort, while I can't really skim text in English—I have to pay attention or I drift off. It seems like for the second- language English, parts of the brain that transform it into meaning have to be consciously engaged, while the native language gets the treatment on the subconscious low level.

[1] recommended! [https://www.techno-livesets.com/](https://www.techno- livesets.com/)

<comment><USER6> IMO it goes more like this: Music makes you happy, being happy makes you more productive. Don't overthink this too much.

<comment><USER5> That's addressed right in the post linked in the question: [https://www.gwern.net/Music-distraction](https://www.gwern.net/Music- distraction)

</comment></comment></comment><comment><USER5> > Why does writing in the morning (anecdotally so far) seem to be so effective > for writers, even ones who are not morning persons? While programmers, which > seems like a similar occupation, are invariably owls?

I frankly didn't read the whole linked article, but do the writers, by any chance, do the writing in the morning, but not editing? Because personally, I regularly have a sorta-confused rush of ideas and notions early after sleep, that subsides after a couple hours―after which I may find the morning ideas stupid, or sometimes discover a gem among them, but almost always I find that calm logic of the day doesn't produce such wild reaches. It's pretty much how creativity on drugs is usually imagined. I would also guess that if I have a solid sleep and then a sharp cutoff instead of lingering in bed, the effect is more pronounced―and this behavior is more of a larkish thing, I think.

Meanwhile, I can't code in that state until I wear it off with articles from HN and such stuff. But I can code when I should've been in bed many hours ago and may keel over at any minute.

(BTW, dunno if it's just me, but: I don't ever remember dreams from the deep phase, however I have vivid and lucid dreams if I briefly wake up and then drift off again, i.e. after an optimistic alarm. Notably, if I'm imagining music in this state, it's best stuff I've heard, way off usual patterns and genre clichés, and it comes effortlessly, while in the day I have trouble coming up with anything like that.)

<comment><USER7> >Because personally, I regularly have a sorta-confused rush of ideas and notions early after sleep, that subsides after a couple hours―after which I may find the morning ideas stupid, or sometimes discover a gem among them, but almost always I find that calm logic of the day doesn't produce such wild reaches.

I think sleep clears out working memory, and starting the day writing lets your brain express some things that had been cached previously. I find that writing in the evening after reading / web surfing / normal daily activities results in output that is derivative or responsive to what I've read that day.

</comment></comment><comment><USER8> > [abuse] why does it appear in the biographies of so many people who achieve > greatness, often middle/upper-class?

Because other people don't write autobiographies?

<comment><USER9> There are enough unconfirmed assumptions in this claim that the first open question is "are the author's assumptions justified?"

</comment></comment><comment><USER10> >Why did it take until the late 20th century for Brazilian Jiu-Jitsu to develop and the Gracie family crush almost all other unarmed martial arts at the start of MMA, when humans have engaged in unarmed combat for millions of years and every major country has long lineages of specialized competitive martial arts and tremendous incentive to find martial arts which worked and quick feedback loops?

I suspect the most obvious answer is the same as the issue with other forms of grappling and wrestling - they are very good in structured 1v1 combat where there is a guarantee that a friend of your foe won't come along while you are both on the ground and bash you over the head with a large rock.

<comment><USER11> MMA is new, historically speaking.

BJJ is the best fighting style that fits the rules of MMA. Change the rules a bit and a different style will work better.

<comment><USER12> Whats the minimal change in the rules that will bring a striking based martial art to the top?

<comment><USER13> I would guess, the following rule changes will help a lot.

* Increase the minimum size of the wrist padding and gloves. Which makes it much safer to throw punches. Additionally, the design of the gloves can be regulated so grabbing someone is harder than it is now.

* Perhaps, add rules about how long you can stay on top of someone on the ground without doing significant damage. A lot of matches end up with a takedown at the start of a round followed by 3 minutes of light pounding and no serious attempt/success at a submission hold. A 20-30 second limit on no serious on the ground action will go a long way.

* Finally, we can directly change the judging criteria to make it easier to win rounds via striking dominance instead of grappling.

<comment><USER14> One of the more famous Royce Gracie wins was against a western wrestler (Severn) who maintained control on top for almost all of the 15 minute match before being caught in a triangle choke.

</comment></comment></comment></comment></comment><comment><USER15> The question about Gracie jiu-jitsu is not so interesting anymore: In the early 90's, there were simply very talented jiu jitsu practitioners who were close to the UFC. Now we've witnessed many strategies used successfully in MMA, like American college wrestling (Ben Askren, Matt Hughes), Thai clinches (TJ Dillashaw), kickboxing (Holly Holmes), and Judo (Ronda Rousey). In fact very few fights end with an interesting jiu jitsu submission anymore, the armbar and the tear naked choke are the most common. These techniques were never unique to jiu jitsu.

<comment><USER16> I feel that jiu jitsu makes UFC / MMA less interesting.

I'm more interested in of the stand up combat sports like kickboxing.

I reckon UFC is missing out by not having a pure standup division, without the wrestling/bjj.

I know a former world champion kickboxer who says "Ground and pound? Where's the honor in that?". I thought about it a bit and realised he is right - <USER2> is the honor, sportsmanship in beating the heck out of someone on the ground.

<comment><USER17> Why is there more honor in beating someone while standing?

The reason to include wrestling is that it makes the contest more closely approximate a real fight. In a real fight your opponent does have the option to go to the ground.

<comment><USER18> How likely is a real fight to be one-on-one, just you and the guy you're trying to kill?

<comment><USER17> Probably more likely than that it's a one on one fight where you both agree not to wrestle.

<comment><USER18> By definition, an unrestricted one-on-one fight is more likely than a specific subset of one-on-one fights, since the first possibility includes the second.

But neither is likely at all.

Also unlikely: picking a fight with someone who weighs about the same amount you do.

<comment><USER17> I don't think your logic follows. Unrestricted fights and restricted fights are both subsets of the set of fights, but restricted fights aren't a subset of unrestricted fights. By definition, unrestricted fights are distinct from restricted fights.

Either way, I regret pursuing this topic and won't comment on it further since I feel this is a discussion not worth having, reading, or writing. I don't write that to be rude, just as an attempt to hold myself to some standard for discourse.

<comment><USER18> I expressed myself poorly. The unrestricted class "one-on-one fights" includes the restricted class "one-on-one fights where both parties agree not to wrestle".

</comment></comment></comment></comment></comment></comment></comment></comment><comment><USER8> >Why did Jean Calment live so many more years than other centenarians, breaking all records and setting a life expectancy record which decades later has not just not been broken, but not even approached?

> she requested to be woken at 6:45 am and started the day with a long prayer > at her window thanking God for being alive and for the beautiful day which > was starting, sometimes loudly asking the reason for her longevity and why > she was the only one alive in her family. Seated on her armchair she did > gymnastics wearing her stereo headset. Her exercises included flexing and > extending the hands ("a distinguished woman must have beautiful hands"), > then the legs, > [https://ewikipedia.org/wiki/Jeanne_Calment#Daily_routine_at_...](https://ewikipedia.org/wiki/Jeanne_Calment#Daily_routine_at_ages_111%E2%80%93114)

I don't believe in god, but I believe in prayer: meditation/mindfulness + appreciation + possibilities + supernatural aid (as in the Hero's journey).

But perhaps not a blessing to outlive one's grandchildren.

<comment><USER19> I'm sure you probably realize this, but it's hard to believe that she would be the only one to have this type of routine. It seems fairly common...

</comment></comment><comment><USER20> > Why did it take until the late 20th century for Brazilian Jiu-Jitsu to > develop and the Gracie family crush almost all other unarmed martial arts at > the start of MMA, when humans have engaged in unarmed combat for millions of > years and every major country has long lineages of specialized competitive > martial arts and tremendous incentive to find martial arts which worked and > quick feedback loops?

This one is easy. Because Gracie jujutsu (spell it right please) with its emphasis on ground technique is only effective when you are unarmored and your opponent is unwilling to use lethal force. In military and/or life and death situations it is a good way to get yourself killed by a trained opponent. It's not surprising at all that Gracie/Brazilian jujutsu only developed after the popularization of MMA like sporting competitions with rules that the Gracie brothers learned to exploit.

</comment><comment><USER21> >Why do humans have such a large mutation load..

Modern technology?

[https://evolutionistx.wordpress.com/2017/07/24/evolution- is-...](https://evolutionistx.wordpress.com/2017/07/24/evolution-is-slow- until-its-fast-genetic-load-and-the-future-of-humanity/)

</comment><comment><USER22> > What happened to the famous genome sequencing cost curve after late 2012, > which stopped price decreases, damaged genetics, and delayed the advent of > whole-genome sequencing by perhaps a decade? Was it really just the > Illuminati's fault?

Note that the Y-axis is logarithmic; so this is simply a matter of diminishing returns. The massive fall in 2007-2008 was due to the invention of so-called "next generation sequencing", but this is bound by technical constraints -- not least the sheer deluge of data -- that have basically been hit. Newer methods of sequencing, which are now starting to come online in anger, ought to start pushing the price down again; although note that the data/processing constraints haven't really gone away and this is now the principal bottleneck for analysis.

</comment><comment><USER23> > Why do humans have such a large mutation load on common genetic variants?

This one is answerable. Two reasons.

1\. The human population is not in Hardy-Weinberg equilibrium since it has expanded so much in the recent human past (agricultural revolution and all that).

2\. The human population over the last 10,000 years has experienced very strong natural selection that has carried a lot of deleterious mutations along for the ride.

What is more interesting is why we have so many chromosomal abnormalities - humans have something like 100x the rate of chromosomal abnormalities as other species.

</comment><comment><USER24> > Why do humans, pets, and even lab animals of many species kept in controlled > lab conditions on standardized diets appear to be increasingly obese over > the 20th century? What could possibly explain all of them simultaneously > becoming obese?

Because diet is only part of the equation. The other major factor being exercise/physical activity (and probably some genetics). If you eat 'well' but sit at a desk all day, calories in != calories out and you'll probably gain weight.

Also, since this doesn't cite any sources for the conclusion presented here as a question, do we know that the 'conditions' were held constant? (hint: no, probably not)

<comment><USER25> I personally believe carbs are mostly to blame (as opposed to fats and protein). In the Western world there is this idea that fats are bad, carbs are good but somehow this idea coincidences with astronomic increase in obesity. We load everything with high-fructose corn syrup and kick fats out of our diet. There is not much research behind this and my claims aren't evidence based either. I'm more than happy to refuted if you can provide papers.

<comment><USER26> Definitely. I don't understand why you're getting down-voted without actual refutals. I guess it generates some internal/psychological discomfort, but I expected better of HN readers.

Indeed, the only animals suffering from obesity and modern civilisation diseases (diabetes, cardiovascular disease, Alzheimer's and other degenerative or systemic diseases) are humans and those animals of other species unfortunate enough to be fed by humans.

Diet composition is obviously to blame, but not just carbohydrates (be them complex or simple, refined or "natural"). Omega-6 polyunsaturated fatty acids (and especially their ratio to omega-3's) in the diet lead to inflammatory responses throughout the body, which can, and do, wreak havoc on health.

If you look at trends in modern nutrition, carbohydrate and omega-6 consumption are at their highest and have sky-rocketed in the past 60-70 years, as have rates of prevalence for various diseases. Of course, correlation is not causation, but many studies are coming out in the recent years showing the mechanisms through which all of this takes place.

<comment><USER25> This might be true but is very surprising (since Omega 6 polyunsaturated fatty acids are found poultry, eggs, nuts etc... which I thought to be rather "healthy" in general) I found this [1] abstract which supports your point. Is there more evidence? Also what's the relation between inflammation and obesity?

[1]: [https://www.ncbi.nlm.nih.gov/pubmed/29610056](https://www.ncbi.nlm.nih.gov/pubmed/29610056)

<comment><USER26> The amount of omega-6 PUFAs in eggs is almost negligible compared to MUFAs and SFAs [1, table 1]. Assuming that a single egg yolk is around 20 grams, that's less than 1 gram of omega-6 per egg. One would have to eat an absurd amount of eggs daily (think >50) for it to matter.

 _Some_ nuts and seeds do contain high amounts of omega-6. Sunflower seeds and peanuts especially. That is why non-high-oleic sunflower oil is so bad for health. Almonds, hazelnuts, macadamias and others have much better fatty acid profiles.

In general, all industrially extracted vegetable oils are rich in pro- inflammatory omega-6 fatty acids. Replacing them with animal fats or cold- pressed vegetable oils (olive, avocado or coconut, all of them relatively low in omega-6) is a very easy dietary intervention that should have a profound effect on health, similar to cutting sugars.

Here is a non-comprehensive list of studies and articles if you want to dig a bit deeper:

\- [https://openheart.bmj.com/content/1/1/e000032](https://openheart.bmj.com/content/1/1/e000032)

\- [https://www.hindawi.com/journals/jnme/2012/539426/](https://www.hindawi.com/journals/jnme/2012/539426/)

\- [https://www.sciencedirect.com/science/article/abs/pii/S10988...](https://www.sciencedirect.com/science/article/abs/pii/S1098882316300363)

\- [https://openheart.bmj.com/content/openhrt/5/2/e000898.full.p...](https://openheart.bmj.com/content/openhrt/5/2/e000898.full.pdf)

\- [https://breaknutrition.com/omega-6-fatty-acids- alternative-h...](https://breaknutrition.com/omega-6-fatty-acids-alternative- hypothesis-diseases-civilization/)

\- [https://www.physiology.org/doi/pdf/10.1152/ajpheart.00480.20...](https://www.physiology.org/doi/pdf/10.1152/ajpheart.00480.2004) (especially interesting as it points to a possible synergy of omega-6 fatty acids and carbohydrates)

I hope that helps.

[1]: [https://academic.oup.com/ps/article- pdf/79/8/1168/8203403/po...](https://academic.oup.com/ps/article- pdf/79/8/1168/8203403/poultrysci79-1168.pdf)

<comment><USER25> Uh this sucks peanut is my favorite thing in the world :( Thanks I'll check those links.

</comment></comment></comment></comment></comment></comment><comment><USER27> > Is there something qualitatively different about personal meetings, and if > so, where is it? Is it eye contact? Body language?

Over 50% of our communication is nonverbal language. Body language largely, and no small part olfactory plus auditory (which video conferencing interferes or blocks). This is not an open question.

> when humans have engaged in unarmed combat for millions of years and every > major country has long lineages of specialized competitive martial arts

Because combat wasn't formalized then funded to be inclusive and communicated to the world. This is not an open question.

I'm sure there's more on this list, but maybe someone can update it.

</comment><comment><USER28> "Why do so few people in the United States exercise their right and privilege to vote?"

<comment><USER24> "Why does nearly every political race for office in the United States come down to only two choices: turd sandwich or giant douche?"

<comment><USER29> Because not enough people vote in the primaries? I get that you only really have a choice between two parties come the general election, but you get lots and lots of choices in the primary.

<comment><USER30> Voting in the primaries would help. IMO, a ranked choice ballot would help even more.

I don't need to choose between people who will make essentially the same policy decisions as much as I want to be able to vote for a third party without throwing away my vote.

</comment></comment></comment></comment><comment><USER31> That's "Jeanne Calment".</comment>


Capitalism Must Focus on Stakeholders to Survive - <AUTHOR> https://www.foreignaffairs.com/articles/2020-01-16/capitalism-must-reform-survive <comment><USER2> This is only partially correct. What we have today is social just Capitalism. If one person is offended. a social media campaign is started against the company and shareholders get scared and the stock price drops temporarily.

The great part is if you have some money, you invest when this happens (because it's artificial..the value of the company hasn't really gone down because of accusations)..and you make money when the stock price goes up in a few weeks when it blows over or everyone moves onto the next outrage of the week.</comment>


How do you abbreviate million? m? M? MM? - <AUTHOR> http://arstechnica.com/civis/viewtopic.php?t=1144032

<comment><USER2> M, as per the international standard SI, duh! [http://en.wikipedia.org/wiki/International_System_of_Units](http://en.wikipedia.org/wiki/International_System_of_Units)</comment>


Ask H: How much developer time to allot for R&D? - <AUTHOR>

Like most of you I'm sure, our team has a never ending list of requests and tasks.  We have customers and management to keep happy.  We have pressure to deliver these tasks.  But as we plow through our backlog week after week, it can sometimes feel like technology is passing us by.  Most of us do things in our spare time at home, but I feel like there should be some company time for this kind of work.
I find that management is supportive of this type of thing in principle, but that doesn't always mean they will accept having project work delayed.  The other issue is that some developers will take advantage of the time to goof off.
I'm curious to hear from other people if you have a strategy for R&D and other types of "free" time for developers?  Or, if you are a developer, how does it work at your company?  For example, learning a new language, investigating some new framework or just some wild idea. <comment><USER2> When I worked at 3M, we had 15% time. What this boiled down to was basically every Friday afternoon, we would work on something that we wanted to work on.

It's a refreshing way to end the week, and if everyone is doing it, it doesn't seem like a 'burden' or a lack of productivity.

It would be hard to just implement this if managers aren't on board with the idea, but try it out one Friday a month. If it starts working well, bump it up to two, and hopefully you'll get to every Friday.

Here's link about 3M's 15% time - [http://www.fastcodesign.com/1663137/how-3m-gave-everyone- day...](http://www.fastcodesign.com/1663137/how-3m-gave-everyone-days-off-and- created-an-innovation-dynamo)

<comment><AUTHOR> that's really cool - reminds me of I think of a similar program google has. Having it at a specific time seems like it could be good. thanks for sharing</comment></comment>


Show HN: Spanish newspapers AI Twitter bot - <AUTHOR>

We have launched a new service using our natural language technologies.
This service is a twitter bot (https://twitter.com/#!/DimeloBot) that analyzes the different RSS of the most important spanish newspapers and discovers the important topics in realtime.
You can see the web front end in the following link:
http://dimelo.revolumedia.com
Please, let us know what do you think. Although only available in spanish, we are planning to release an english version soon.
Thanks! <comment><USER2> While the idea might be interesting i think you should focus also on the design of the page. Good luck!</comment>


A parser/class browser for the original Xerox Smalltalk-80 sources in C++ - <AUTHOR> https://github.com/rochus-keller/Smalltalk <comment><USER2> Nice project. Are you aware of Hobbes (Highly Objectified Blue Book Equivalent Smalltalk) that is able to run Smalltalk-80 V2 images? The Squeak/Pharo version has, however, not working file access needed for sources access.</comment>


JSON-Schema Validation - <AUTHOR> http://www.asbjornenge.com/wwc/json_schema.html

<comment><AUTHOR> Lately I've been doing some JSON-Schema validation in two of my web clients at work. It was news to me that I could. Really useful stuff, cleans up your code quite a bit. So I wrote it up and hopefully someone else will discover it too :-)</comment>


ZFS on Linux 0.8.1 Released - <AUTHOR> https://github.com/zfsonlinux/zfs/releases/tag/zfs-0.8.1 <comment><USER3> Is ZFS SIMD still hobbled by Linux kernel GPL fundamentalism/militancy (backported to LTS kernels, no less)?

<comment><USER4> Do you consider anyone with strong beliefs that run counter to your own fundamentalism/militancy?

Last I heard, the Linux Kernel was under the GPL and needs to comply with that. Is "follow a contract I opted into" fundamentalism/militancy?

<comment><USER3> I'm describing a _retroactive_ change that has no technical justification, only political motivation. I have very liberal license preferences, but that move was beyond the pale: a big middle finger to a kernel module which is clearly not a derived work of the Linux kernel.

<comment><USER5> Engineering, technology, and science are deeply political, where politics isn't restricted to governments, parties, or official state systems. Refusal to recognize that doesn't change it.

The GPL is a licence that was created by people well-aware of the political significance, and it is the embodiment of certain political intentions in form of a licence. Projects that consciously use it can be expected to act upon those political intentions. Not understanding actions upon those political intentions is rather a sign of not understanding the situation.

</comment></comment></comment></comment><comment><USER6> Does anyone know what the "real" reason is for not exporting the kernel function in 5.0+ anymore? Is there a technical reason, additional work or is it just a middle finger to ZFS devs?

<comment><USER7> The functions/symbols being used were __kernel_fpu_{begin,end}. These were designed for use within the kernel, and not for external modules - <USER2> external modules used them since there was no other alternative. At some point the kernel announced these were being deprecated, and have now been removed.

Since they weren't designed for external modules, someone submitted a patch to make them exportable. However the patch enforced EXPORT_SYMBOL_GPL, so only modules that report being GPL licensed can use them.

Now ZFS is in a position where it can't use the original kernel symbols since they were removed, but can't use the new ones since they are marked as EXPORT_SYMBOL_GPL.

[https://marc.info/?l=linux- kernel&m=154689892914091&w=2](https://marc.info/?l=linux- kernel&m=154689892914091&w=2)

<comment><USER8> Just to finish off @keeperofdakeys comments: here is the ZFS answer:

[https://github.com/zfsonlinux/zfs/commit/becdcec7b9cd6b8beaa...](https://github.com/zfsonlinux/zfs/commit/becdcec7b9cd6b8beaa2273495b97c06de24e9e5)

</comment></comment></comment><comment><USER9> Thanks to the kind folks putting in the effort and bringing this to linux, every release excites me! I've been a long long time fan of ZFS on BSD and Solaris (yes I'm old).

</comment><comment><USER10> I wrote a script that installs zfs 0.8.1 on Ubuntu 19.04 at no work. Works for me and all pitfalls avoided

[https://github.com/haraldrudell/zfs-0.8.1-on- ubuntu-19.04](https://github.com/haraldrudell/zfs-0.8.1-on-ubuntu-19.04)

That's like github haraldrudell zfs-0.8.1-on-ubuntu-19.04

</comment><comment><USER11> What's notable in this release? Found it difficult to grasp from the detailed change log.

<comment><USER12> Probably the most notable thing is compatibility with the upcoming 5.2 kernel, otherwise just minor bugfixes.

0.8.0 came out just a few weeks ago and was a pretty huge release. It added encryption, TRIM support for SSDs, ability to remove disks from zpools, performance improvements, and more.

[https://github.com/zfsonlinux/zfs/releases/tag/zfs-0.8.0](https://github.com/zfsonlinux/zfs/releases/tag/zfs-0.8.0)

</comment></comment><comment><USER13> Great work everyone!</comment>


D&D Gentleman Class – Courtesy of Old Spice - <AUTHOR> https://nerdist.com/dungeons-and-dragons-gentleman-class-old-spice/ <comment><USER2> It's not a "courtesy", it's pure marketing, and a gross attempt at that. If it was _courtesy_ , the class would be playable, but it clearly is overpowered compared to virtually anything else.

<comment><USER3> Overpowered? You can only insult enemies for the first few levels.

Also, what is with that picture? Looks a little pale to me.</comment></comment>


New clean Google SERP design? - <AUTHOR>

http://cl.ly/1T2g1V451s3x0L2T182M
http://cl.ly/1Q1c0L0h0J2k3l071P2M
http://cl.ly/461E1x1A3e3g1f0K2J0Y <comment><AUTHOR> Clickable:

<http://cl.ly/1T2g1V451s3x0L2T182M>

<http://cl.ly/1Q1c0L0h0J2k3l071P2M>

<http://cl.ly/461E1x1A3e3g1f0K2J0Y>

</comment><comment><USER2> Are you making a suggestion for how it should look or have some inside look at a future design. In either case, nothing earth shattering.

<comment><AUTHOR> Future design. Likely an experiment.

</comment></comment><comment><USER3> This is the iPad version is it not ?

Do you have the right user agent set for your user agent.

<comment><AUTHOR> I was using google Chrome. I don't have an iPad so I don't know what that looks like</comment></comment>


Arch Linux ARM - <AUTHOR> http://archlinuxarm.org/ <comment><USER2> I love this project, and have even written a write up for linking the pogo with a roku, but am curious as to why this is being linked on HN.</comment>


Show HN: Hacker News in your terminal - <AUTHOR> https://github.com/mtharrison/hackernews <comment><USER2> When I type hn on my Mac running OSX Mavericks I get

stream.js:94 throw er; // Unhandled stream error in pipe. ^ Error: CERT_UNTRUSTED at SecurePair.<anonymous> (tls.js:1365:32) at SecurePair.emit (events.js:92:17) at SecurePair.maybeInitFinished (tls.js:977:10) at CleartextStream.read [as _read] (tls.js:469:13) at CleartextStream.Readable.read (_stream_readable.js:323:10) at EncryptedStream.write [as _write] (tls.js:366:25) at doWrite (_stream_writable.js:226:10) at writeOrBuffer (_stream_writable.js:216:5) at EncryptedStream.Writable.write (_stream_writable.js:183:11) at write (_stream_readable.js:585:24)

<comment><AUTHOR> I've created an issue for this on Github and I'll try to replicate/fix: [https://github.com/mtharrison/hackernews/issues/5](https://github.com/mtharrison/hackernews/issues/5)

</comment></comment><comment><USER3> Looks cool, not sure if it's working 100%. It prompts me to 'Type post number to open' but when I do, It just gives me the same prompt until I type 0 to exit.

<comment><AUTHOR> It should open up the URL in a browser when you choose a post, it looks like the 'open' command which I'm using is Mac only. What platform are you on? I'll look into fixing it.

<comment><USER3> I'm running centOS. Thanks for looking into it, this is really cool, as I'm always checking HN in between spurts of writing code.

<comment><AUTHOR> Thanks man! I've pushed a new version to npm that should have support for Linux and Windows now. I've tested in Ubuntu but let me know if you have any more issues.

<comment><USER3> Just tried it out. Works great now. Cheers!

</comment></comment></comment></comment></comment><comment><USER4> Looks cool, you get an upvote from me. Does it offer a way to get the 'ask' page or others?

<comment><AUTHOR> No but great idea, if people like it, I'll add some more features.

</comment></comment><comment><USER5> This is cool, works just as expected. I added in a designer news feed also so you can do both.</comment>


Stop saying learning to code is easy - <AUTHOR> http://www.hanselman.com/blog/StopSayingLearningToCodeIsEasy.aspx <comment><USER2> Regex is pretty easy, IMO. It's just a bunch of patterns... About as predictable as any bit of logic can be. They can become complicated by virtue of composition, but are not intrinsicly complex.

<comment><USER3> Rexeg aren't that difficult, but the syntax is not in any way intuitive.</comment></comment>


Show HN: Futurenda – AI Task Scheduler, Now with Google Calendar Sync - <AUTHOR> https://www.futurenda.com/?utm_source=hackernews&utm_medium=showhn&utm_campaign=0628 <comment><AUTHOR> 1 point by fnlCtrl 7 days ago [-]

I'm a cofounder of Futurenda, we're building a task scheduler that can plan your day by itself just by telling it how much time is needed for each task and when they are due. It divides your tasks into sessions and fill them into your calendar where there's time available (Not occupied by events). Besides being a task scheduler it's also a time tracker & task timer (like a pomodoro timer) We've just launched Google Calendar Sync, so you don't have to manually add events if they're already in your Google Calendar. Why're we buildling this? As university students with lots of projects and deadlines we wanted something that can just plan it out for us: follow a schedule and rest assured that everything will be completed before deadlines. Besides, it should tell us how much free time is available each day at a glance. Ask me anything :)</comment>


Don't Trust iTunes Movies in the Cloud - <AUTHOR> http://danhon.com/2013/02/13/dont-trust-itunes-movies-in-the-cloud/

<comment><USER2> They always use that "I know how upsetting/frustrating that can be" BS, straight from the book.

</comment><comment><USER3> Ironically, this article is so old that Anchorman is back on iTunes (in the US at least).</comment>


Analysis of the Alexa Top 1M sites - <AUTHOR> https://blog.mozilla.org/security/2017/06/28/analysis-alexa-top-1m-sites/ <comment><USER2> I'm an appsec person and security person. I'm surprised about the hundreds of people talking about CSP, HSTS, HPKP and it feels like I'm the only one talking about insecurity headers.

Within the Alexa Top 1MM I discovered about ~1000 sites that had turned SAMEORIGIN policy off with their CORS configs [[https://ejj.io/cost-of- security-headers/](https://ejj.io/cost-of-security-headers/)] (including Atlassian/Bitbucket, Zulily, and several other big ones).

I asked Scott Helme to add looking for these problematic configs to securityheaders.io but didn't have any luck. I would love some help getting traction on this issue. CORS is fundamentally ... not good and people will keep getting it wrong unless people do something.

<comment> 52-6F-62 I'm actually just coming across this at work. I work for a large media company and I'm petitioning in this capex round to build assistant (alexa, google assistant, siri, snips, etc) apps for the different brands including radio.

The radio brands have streams that pass through Akamai into html and other sdk players that remove CORS protections, sometimes as the only way they function.

Can you list a few good resources for dealing with these situations, or point a guy in the right direction?

<comment><USER2> I am probably the right person to help having a ton of cdn experience, but I don't fully understand the situation.

Feel free to email me at evan at segment dot com

<comment> 52-6F-62 Thanks, I'll likely reach out if I can get the projects approved and initiated.

</comment></comment></comment></comment><comment><USER3> Making a change to secure a site further is fairly invisible: you make the change, and hopefully nothing breaks. If you're the type of company to blog about your tech stack, you might make a post on it, but otherwise you just hope nothing goes wrong. And while a major security breach will get you in the news, an army of angry customers will hurt you too.

So, it's not surprising that the features that have gotten the most adoption (like HTTPS itself) are those that show up visibly in browsers, get direct publicity, or unlock access to other things. Features like CSP, while quite useful, don't make the news when you adopt them, and don't unlock any key functionality.

<comment><USER4> That's exactly right and it's a useful lesson. Browser vendors and internet infrastructure engineers need to do more than simply make security tools available - the tools need to be publicised and visible too or they won't be adopted. Sites need to actually break if they're not using necessary security options, or at least show a warning to the user.

<comment><USER3> Perhaps, just as browsers have started to take steps to show insecure HTTP as actually _insecure_ , rather than just an absence of security indications, it might make sense to introduce such measures for other features as well. For instance, perhaps browsers could phase in requirements for the most critical security features (e.g. secureonly cookies) to be marked as secure at all, and some of the features (such as CSP) to be marked as EV.

</comment></comment></comment><comment><USER5> Independent and unrelated to Observatory project, but if anyone is curious to dig deeper into Alexa top ~500K and how it changed over time, take a look at the HTTP Archive dataset. Some examples @ [https://discuss.httparchive.org/latest](https://discuss.httparchive.org/latest).

E.g, to identify sites with CSP: [https://discuss.httparchive.org/t/which- sites-have-content-s...](https://discuss.httparchive.org/t/which-sites-have- content-security-policy-to-prevent-xss/589).

You can access raw HAR captures, as well as pre-aggregated stats via BigQuery.

</comment><comment><USER6> How representative is Alexa data? Are people still installing dubious toolbars in 2017?

<comment><USER7> It's a fundamentally flawed metric and not really indicative of the top 1 million sites or anything else, all it shows is people who have that cr*p toolbar installed, and that's usually just actual website owners who should know better.

</comment></comment><comment><USER8> Implementing above the fold optimizations is not nice for a frontend noob like me when using CSP. You can use a nonce or sha256 for style and script, but not for inline event handlers (onload="..."). Which means for now I have still a 'unsafe-inline' in my headers (which also works as a fallback for browser that don't support CSP2, and will be ignored by browsers that support nonce-/sha256). But it seems there will be a way in CSP3.

Ideally there would be a way to get async loading css without onload. Is putting the style tag just before </body> acceptable? It's not valid html if I remember correctly.

<comment><USER8> Since I can't edit anymore: I meant the link tag before </body>, not the style tag.

</comment></comment><comment><USER9> Is the data available anywhere?

</comment><comment><USER10> Wow, I thought I knew a few things about web security but it turns out I have a lot to learn.</comment>


Obama Administration Halts Construction of Dakota Access Pipeline - <AUTHOR> http://www.huffingtonpost.com/entry/obama-dakota-access-pipeline-halt_us_5844882be4b0c68e04817323?section=politics <comment><USER2> Wait, people are now holding this up as an Obama victory?

It's the US Army Corp of Engineers that issued a temporary halt on things. While Obama is commander in chief, i think it's a little bit of a stretch to declare this some huge Obama victory.

<comment><USER3> If it were done under the Bush Admin the title would have said Bush Admin. Things done under the executive branch are usually attributed to the administration. Don't be hyper sensitive.

<comment><USER2> The last sentence was unnecessary. However, I have seen multiple social media posts from people that now believe that President Obama himself stepped into intervene, whereas the truth is that he's said nothing about it.

There was nothing hyper sensitive about it at all.

</comment></comment></comment><comment><USER4> I wonder how long this is actually going to last? A few months from now and I suspect there will be an entirely different view from the new administration.

<comment><USER5> [http://www.snopes.com/will-a-deadline- of-1-january-2017-kill...](http://www.snopes.com/will-a-deadline- of-1-january-2017-kill-the-dakota-access-pipeline/)

[https://www.reddit.com/r/news/comments/5ghzwg/us_army_corps_...](https://www.reddit.com/r/news/comments/5ghzwg/us_army_corps_of_engineers_to_look_for_alternate/dasf06j/)

[https://www.reddit.com/r/news/comments/5ghzwg/us_army_corps_...](https://www.reddit.com/r/news/comments/5ghzwg/us_army_corps_of_engineers_to_look_for_alternate/dasgy7s/)</comment></comment>


Go (Golang) Port of Apache Lucene - <AUTHOR> https://github.com/balzaczyy/golucene <comment><AUTHOR> really impressed with this code base. so much easier to read and understand than java.</comment>


Some Amazon employees say they will make less after the raise - <AUTHOR> https://finance.yahoo.com/news/amazon-employees-say-will-make-less-raise-174028353.html <comment><USER2> But assuming that $15 is only a "living" wage; The RSUs and ESPP were very risky behavior.

</comment><comment><USER3> Isn't there an Aesop's fable about this sort of thing?</comment>


A Real Web Design Application - <AUTHOR> http://jasonsantamaria.com/articles/a-real-web-design-application/ <comment><USER2> Neat ideas.

He mentions "true to browser type rendering" multiple times, which basically means "shitty type rendering." Browsers, at worst IE and followed closely by Firefox, are horribly bad at performing proper antialiasing for some reason. (The only exception to this rule is Safari, which does a decent job.)

I don't think we should bring the ridiculous shortcomings of browsers backwards into our design/mockup apps. I think we should continue designing stuff in a way that doesn't force us to conform to the lowest common denominator. Sure the depictions we might see in design apps are not strictly "accurate", but I don't have problems watching the graceful degradation of my designs through the various browsers.

It's the browsers that need improved type/graphics rendering, the not mockup/design applications that need to bow down to them.

\----

Finally, I don't know if it's actually a good idea to create a web-focused design app yet. We're still in the very early days of the web, and I don't think the long term conventions and standards are in place yet. We're in the flux. The blank, non-assuming canvases in Photoshop and Illustrator are good for fostering new ideas and pushing forward the state of art on the web.

That those apps weren't designed strictly for the web might end up being a net positive, especially as we go into the future and define what the web will look like in the long term.

<comment><USER3> Agree that emulating browser type rendering isn't necessarily good in the long term, but why not build in support for a variety of different type rendering engines? Adobe is halfway there with Smooth, Strong, Crisp, etc... they could simply add options for WebKit, Firefox, IE...

Also, a web-focused app may not be necessary, but I think a digital-focused app is (well, I guess that would be Fireworks). Photoshop and Illustrator really are terrible tools for designing digital applications, for the simple fact that working with pixel-level detail is a pain in the ass (e.g. try making a 92px by 147px rectangle with no sub-pixel edges in one of those applications). Fireworks actually comes pretty darn close to what Jason is asking for, but Adobe seems to neglect its core functionality in favor of expanding on useless export options and plugins.

<comment><USER4> I would love to see additional type rendering options, but this would have to account for the OS as well and Adobe tools would have to accept WOFF and EOT files, which counters FontFont's point of offering web fonts DRM-free.

And I still don't think there will be a tool that makes code better than a hand, not that such a tool couldn't assist in a great way. TextMate snippets and CSS preprocessors maybe, but that's not exactly WYSIWYG to HTML.

</comment></comment></comment><comment><USER5> I'm currently building a web app that, long term, I want to do a lot of the things the author is looking for. The minimum viable product, which I hope to launch in a few weeks, will be a high fidelity mockup tool which creates pixel-perfect designs that are indistinguishable from actual websites. Long term, I want to implement an export feature that generates quality HTML/CSS from the design.

If you're interested in helping test it or have any feature requests, shoot me an email (see profile) or leave a comment below.

<comment><USER6> I don't see your email in your profile, but mine is is my profile, and I'd love to test you app; it sounds potentially superb.

<comment><USER7> > mine is is my profile, and I'd love to test you app

Mine too, and me too.

<comment><USER5> Got it -- thanks.

</comment></comment></comment></comment><comment><USER8> I don't know, I spend 5+ hours a day in Photoshop and I just don't see enough shortcomings to justify trying to build a new app. Photoshop is incredibly powerful and I don't know if I would give up the flexibility just to make things I can already do easier.

Of course Photoshop is incredibly expensive so I can see a market for a <$100 app.

<comment><USER3> Photoshop is incredibly powerful, but not for interactive design.

\- type rendering looks nothing like any browser or OS (as described in the article)

\- subpixel rendering makes drawing shapes and lines with clean edges a chore.

\- direct selection tool is difficult to use and therefore makes the layer palette the primary means of selecting layers, which becomes tedious with large files

\- no support for multi-page documents

\- positioning and resizing objects at a pixel-level is difficult

\- slicing and image export system is kludgy

\- no support for symbols

\- objects with rounded corners are a pain

Do you use Photoshop for 5+ hours a day designing web layouts? I'd imagine you'd have a hard time going back to Photoshop after using an application that is better suited for interactive design. I actually started using Fireworks a couple years ago, and while I pretty much hate it, I will never again use Photoshop to design a website.

<comment><USER9> Maybe I'm just ignorant, but why were you designing web layouts in Photoshop? It never has been the right tool for that job. My goto tool for mock ups and layouts is Illustrator, which fits the bill far better, and has been around just as long as Photoshop.

<comment><USER3> _why were you designing web layouts in Photoshop?_

It was a company practice at my first job — didn't have much choice.

I've always found Illustrator to be equally bad for web, though. It's a vector tool, but the web is still a pixel medium.

For me: Photoshop for manipulating photos, Illustrator for illustration, Fireworks for web/application layouts (although it can handle some basic photo editing and illustrating, which makes it even better for layouts).

<comment><USER9> The web really isn't a pixel based medium though. CSS has more in common with vectors than rasters. Creating flowing layouts that work with the user's DPI, browser's renderer and all that is much easier than trying to force pixel precision layouts.

<comment><USER10> As long as we are using primarily PNGs, GIFs and JPEGs for graphical design elements then the web is a pixel-based medium.

<comment><USER9> That's exactly my point though, most sites really aren't. I haven't used a raster image for a design element in a website in about a decade. The exception of course being a site's logo if it has one, but the logo rarely needs pixel precise layout.

<comment><USER10> I don't know where you're getting your data, but most sites use at least several dozen images for basic design purposes. You are definitely the exception to the rule.

</comment></comment></comment></comment></comment></comment></comment></comment><comment><USER11> The author suggests a design app based on web kit and then clarigies in the comments that he meant any layout engine:

"Why Webkit? Do we really want a design application that is specific to a single rendering engine?

WebKit is just one option. Gecko could work too. I guess with the advent of Safari for Windows and Chrome, WebKit just seemed like the go-to. I don't actually know that it's important which browser gets used, just so long as it's on a healthy development track and is consistent enough to be predictable. Whatever the option, it wouldn't replace testing in the browser, just merely provide a consistent window to it."

Well <http://en.wikipedia.org/wiki/KompoZer> is exactly that. A web design app that uses a real web layout engine.

</comment><comment><USER12> Here's a startup idea right here - I just tried to post this myself.

You've got a spec from Jason Santa Maria - is anyone going to go create? :)

<comment><USER13> I've started and stopped on this idea (mine has always been something along the lines of "Fireworks on the web... but better") several times over the past couple of years.

But I've always left it on the burner because, as technology stands today, it'd have to be an installed application. Importing a bitmap and deleting its background pixels, complicated vector drawings, etc. etc. would be impossible (or so damned difficult/manpower intensive as to make them near impossible) to build in today's browsers. And for me to be interested in sinking several years of my life into it, it'd have to be a webapp.

So, I just end up waiting for someone smarter/ballsier than I to do it. And waiting...

<comment><USER14> Me too, pretty much. Although I've not even dared to think about uploading/editing images.

My vision is something where you can create and use templates for stuff like header, menu, columns, footer, implement styles for fonts, edit styles such as gradients, shadows, corners.

Interface should be something like hovering to see which elements are affected by the current rule, and then picking attributes and changing them.

Basically a WYSIWYM for CSS3.

I am certain something like this will appear this year.

</comment></comment></comment><comment><USER15> Great idea - after fighting photoshop all weekend I'd love to have a tool like this.</comment>


PyCharm, JetBrains' (of IntelliJ fame) Python IDE with Django support - <AUTHOR> http://www.jetbrains.com/pycharm/index.html

<comment><USER2> I'll probably buy it because I already use IntelliJ for Java, Clojure, Scala, and some JRuby. I also use Rubymine for about 20% of my Ruby development. My Python skills are weak, so a really good Python IDE with auto-completion, turn-key appengine development, etc. would be helpful to me.</comment>


Ask YC: What do you think of CakePHP? - <AUTHOR>

Would you recommend it for a startup?
Is it scalable? <comment><USER2> We took a long look at CakePHP, Symphony and Code Igniter during the first month of <http://tinyurl.com/3amqf4> (democratic development = fail).

We determined that Code Igniter is a cleaner MVC framework, handles more requests/sec etc. <http://tinyurl.com/5dcjzd> has performance data.

<comment><USER3> If you like Code Igniter but want PHP5, check out Kohana - <http://kohanaphp.com>

</comment></comment><comment><USER4> disclaimer: I am not a great coder.

I think CakePHP is one of the easiest frameworks to deploy (you literally just upload the files and modify the config file and you're up and running) and given that it's PHP there are tons of tutorials for how to "do things" with Cake. Also just about every web host in the world supports PHP out of the gate, so you won't have to install anything extra.

Other than those things, I think it comes down to preference of programming language - if you like PHP you'll probably like Cake. If you like Ruby or Python, you probably won't.

</comment><comment><USER5> cake's ok. i kind of prefer codeigniter, but thats a personal preference. here's some performance numbers:

[http://www.sellersrank.com/web-frameworks-benchmarking- resul...](http://www.sellersrank.com/web-frameworks-benchmarking-results/)

<comment><USER6> We reviewed both Cake and CI and when it came down to it, CI won us over with one of the best user guides for any language framework (PHP or otherwise).

I haven't seen what Cake is doing lately, but I have nothing but good things to say about CI.

</comment></comment><comment><USER7> I'd have to recommend against PHP entirely for a. PHP makes deployment easy and development hard - which one will you be doing more of?

When asking for recommendations for tools and libraries, a bit more information about what you're doing and why you're considering what you are would be helpful.

</comment><comment><USER8> I have built web apps in PHP for 8 years now, and created a few crawlers in perl and python over the years.

I looked at Cake and Symfony and began creating sample apps, both are an improvement from building php apps without a framework but I opted for django instead.

</comment><comment><USER9> I played with CakePHP a little bit. It's a great Ruby on Rails clone, but it's just that. Why not go all the way to actual RoR?

(Personally, though, I think it's a great way to get PHP devs to understand ActiveRecord.)

</comment><comment><USER10> I'm finishing a big project on cakephp 1.1, this framework is great. But if you are starting something new - go straight to cakephp 1.2 It takes some time to go throw the learning curve, but it worth it.

</comment><comment><USER10> To answer question about scalability - just one link <http://addons.mozilla.org> (written on cakephp)

</comment><comment><USER11> I recommend Zend Framework. This is use at will and corporate friendly licensing.

</comment><comment><USER12> You guys should check out Qcodo!!</comment>


Show HN: InspectR – implement elements of gamification in programmer daily work - <AUTHOR> https://github.com/teonite/inspectr-dashboard <comment><AUTHOR> Command line tool that we run on the project: [https://github.com/teonite/inspectr-cli](https://github.com/teonite/inspectr- cli)</comment>


The Correct US Poverty Rate Is Around And About Zero - <AUTHOR> http://www.forbes.com/sites/timworstall/2013/09/21/the-correct-us-poverty-rate-is-around-and-about-zero/2/ <comment><USER2> The reasoning in this article is so obviously specious, it's almost embarrassing to read:

 _What this tells us is that the very poorest of the poor in the US, the bottom 5% (and thus very definitely below that poverty line) are in fact richer than 95% of all Indians. And 85% of all Chinese and 55% of all Brazilians._</comment>


Trent Reznor Facetimes W/ Dying Fan On Stage DURING NIN Show - <AUTHOR> http://www.kdge.com/pages/diva.html?article=11841457&desktop=true&desktopviewduration=72000

<comment><USER2> Best. Musician. Ever.

Which explains why I bought his albums instead of pirating them. He pulled the same stunt by calling out to fans to help pay for a fan's medical fees (IIRC). That was during (or right after?), the Year Zero ARG. Man, that guy has a thing for getting in touch with his fans...

</comment><comment><USER3> This reminded me of Faith No More streaming their Soundwave 2010 sets on chatroullette.

[https://www.google.com/search?q=soundwave+chatroulette](https://www.google.com/search?q=soundwave+chatroulette)</comment>


Breaking: Myspace acquires Photobucket  - <AUTHOR> http://mashable.com/2007/05/07/photobucket-myspace-3/ <comment><AUTHOR> It looks like pg has now reposted the exclusive valleywag article here, if you want to vote that up instead: <http://news.ycombinator.com/comments?id=20218>

It goes into more detail than this one.</comment>


Adsvise – The ultimate social and digital ad size guide - <AUTHOR> http://www.adsvise.com/index.html <comment><USER2> The navigation confused me because normally when I see Twitter and Facebook icons next to each other it's for sharing the page on social media. Only because I read the HN comments before visiting the page and someone said it might be useful did I put in the effort to figure out what was going on. Normally I would not.

<comment><USER3> Thanks brudgers, that is a very good point, something we will think about a way to make it more clear.

</comment></comment><comment><USER4> Every time I mouse'd over something I got a full-screen popup[1]. However after blocking it, the site itself seems rather useful.

[1] "We built Adsvise to help you! Now please help us by sharing Pouch with friends or family who would find it useful."

</comment><comment><USER3> Thanks for sharing this!

</comment><comment><USER5> very useful. loved the interface</comment>


Ask HN: Distributed lucene implementation - <AUTHOR>

Any good pointer/ analysis on how to implement distributed search using Lucene? Other information on how lucene works, and information about its scoring algorithm would be useful. Also any advice on good programming/ algorithm related blogs would be awesome as well <comment><USER2> I don't understand your problem, but you may be interested in investigating the existing solutions:

\- cluster of solr servers (but it basically means different indexes composed at query time, so scoring will be affected depending on how you shard, at least last time I checked)

\- katta, a platform for serving large lucene indexes

\- lucandra, a reimplementation of the Index(Writer|Reader) classes of lucene over cassandra (and of solr)

\- lucene-on-cassandra, implementing only the Directory interface over Cassandra

\- lucene over distributed memory(terracotta) or grids (gigaspaces, elasticsearch)

but once again, I have no idea of what your problem is so I don't know what you may want.

Basically I'd say the problem boils down on implementing the index in a distributed way if you want scoring consistent with the normal lucene, or just sharding/querying different indexes and reconciling the results if you can live without distributed tf/idf

<comment><AUTHOR> No specific problem actually, was just trying to learn and understand, what if some one wants to implement large scale search system using lucene how one should go about it. Also, all those options above look interesting, but I am also interested in what sort of thinking/ analysis should be done before you make a decision. In nutshell, I was looking for case studies/ blogs talking about implementing lucene in a distributed fashion. But thanks for your pointers.</comment></comment>


China bans consumption and trade of wild animals - <AUTHOR> https://www.ctvnews.ca/mobile/sci-tech/china-bans-human-consumption-and-trade-of-wild-animals-1.4824540 <comment><USER2> It can be banned, sure, but I don't see the superstitious side of the consumption being curtailed.

When you have a market for rare 'natural wondercures' being sought out, it only takes one mutation in a virus to spread on from another mammal to humans, add to that China's population density. A recipe for disaster.

<comment><USER3> You really think people in China haven't been scared out of doing risky things like eating wild animals?

<comment><USER4> No more so than expecting westerners to be scared out of all the dangerous things we do.

Even to the extent that most of us don't smoke or have lots of unprotected one night stands with strangers, there's enough who do that they and their illnesses are still a major part of our health systems.

<comment><USER5> Eating of meat and sugar are responsible for much more. No need to vilify those whose vices you don't share.

<comment><USER6> i have got to ask, i understand the sugar part, but the meat? Are you referring to the red meat or the fat in meat? Could you elaborate on the meat part?

<comment><USER7> It's not just that meat and sugar are unhealthy, but also that presence of meat and sugar correlate with absence of healthier foods, such as vegetables, legumes, seeds, fruits and nuts.

<comment><USER8> Referring to particular foods as "healthy" or "unhealthy" is reductionist and unscientific. All foods have both positive and negative effects. Certain meats are generally quite good, at least in moderation, particularly for getting high quality protein. Eating too many Brazil nuts can cause acute selenium poisoning.

Be more specific. If you want to convince anyone here then please cite high quality studies which actually meet evidence-based medicine criteria. All of the studies so far which claim to show meat is unhealthy were badly flawed observational studies which relied on subject reported data, lacked proper controls, and only showed very small effects.

</comment></comment></comment></comment></comment></comment></comment><comment><USER9> Aside from the disease risk, remember that the Chinese appetite for wild animals as "traditional medicine" is contributing to the disappearance of entire species. Notable and well-publicized examples include tigers and rhinos, but there are many others.

Stupid shit like using rhinos horns and tiger genitals as aphrodisiacs are still widely held beliefs in parts of China. Xi Jinping's administration has actually been encouraging this nonsense, and in Fall of 2018 they proposed lifting restrictions on the trade and sale of endangered animal parts.

This tragedy has been extensively reported for my whole life. As a little kid I remember being brought to tears by accounts of the cruelty of Chinese traditional medicine, and the appetite of east Asian countries for exotic animals in general. Documentation is plentiful. Just an example, this Nat Geo article came in near the top of my search results just now:

[https://blog.nationalgeographic.org/2014/04/29/tigers-in- tra...](https://blog.nationalgeographic.org/2014/04/29/tigers-in-traditional- chinese-medicine-a-universal-apothecary/)

<comment><USER10> and it's not just china. many other asian countries, such as vietnam, consume illegal animal parts for traditional medicine and enable the trade of such things in china. couple all of that with socioeconomic struggles in africa that creates a willingness and incentive to supply, and you have a problem that won't disappear until the animals disappear.

in half a century, poaching, human encroachment on habitats, and climate change will see many animals (rhinos, tigers, polar pears, certain orca populations, etc.) disappear. humans are not organized enough to stop this.

</comment></comment><comment><USER11> I can't see how this can be successfully enforced without a massive education campaign and actual enforcement by authorities, including moving the so-called "wet markets" (which are outdoor butchers that are very important to the food supply chain in many areas of China) into modern indoor facilities for improved food safety.

Older people in China (the so-called lost generation) are set in their ways: remember that in traditional Chinese medicine, the medicinal value of an animal is directly proportional to its rarity. This of course creates perverse incentives to kill the last living members of endangered animals already under threat from poachers.

China has plenty of laws including a constitution that defends practicing free speech and religion, but in reality laws mean nothing if there's no enforcement.

<comment><USER12> This very important. Both the PRC and USSR constitutions, on paper, arguably provide better freer basic law than that of the US but in practice it's just words on paper.

However, also in practice the faction in power gets to capriciously enforce what it wants selectively, usually to solidify standing. So mr Xi and mr Stalin (née Jughashvili) get to purge all want-to-be usurpers.

<comment><USER13> > However, also in practice the faction in power gets to capriciously enforce > what it wants selectively, usually to solidify standing.

aka as "the rule of law".

From a continental European perspective, the US stance in rule of law seems a bit dubious as well, with the president pardoning his friends, or the enormous sentences afflicted to people once, but only once, they end up in bad public standing, or elected states attorneys incentivize to look hard on crime to their constituents.

<comment><USER14> I'm not sure how your examples illustrate your point.

For instance the power to pardon is defined within the constitution with a singular exception added to it. It doesn't say a president can't pardon their friends. That might be socially unacceptable but it is a power delegated to the president nonetheless. If the constitution made no such mention of that power and the president was pardoning their friends - or indeed anyone at all - then that would be a good example of capricious use of power outside the rule of law.

<comment><USER13> To give an extreme counter-example, imagine you had a constitution that legally gives unlimited supreme powers to a single person (which has happened, e.g. Germany during the Nazi years).

I wouldn't describe that as the rule of law, but rather as despotism. I think you can have a constitutional system that has powers codified that still violate the goals and ideals of the rule of law, without being technically illegal. It's not a black and white thing.

Does that make sense?

</comment></comment></comment></comment></comment><comment><USER15> Imho, anything short of:

1) A permanent ban on the sale of live animals at public markets. 2) A strict nationwide enforcement of food safety regulations. 3) A government backed re- education campaign against the use of traditional Chinese medicine.

and their efforts will again fail.

</comment><comment><USER16> We still don't know where the source is, and who the 0th patient is.

<comment><USER17> Yeah, we have no idea where the source is.

But we _do_ know that China is a country 9,596,961 square km in size.

We also know that China's National Biosafety Laboratory, their only Level 4 microbiology lab, is located at the Wuhan Institute of Virology, which is 278 meters away (as the crow flies) from the Huanan Seafood Market. Said market has previously been speculated to be the source.

Is it simply coincidence that in a country of nearly 10 million square km the outbreak may have started less than 300 meters away from this laboratory?

Fortunately the esteemed New York Times has assured me that this is a "Fringe Theory of Coronavirus Origins". [https://www.nytimes.com/2020/02/17/business/media/coronaviru...](https://www.nytimes.com/2020/02/17/business/media/coronavirus- tom-cotton-china.html)

Here are a few articles that speculate further about this "fringe theory":

[https://www.dailymail.co.uk/news/article-8009669/Did- coronav...](https://www.dailymail.co.uk/news/article-8009669/Did-coronavirus- originate-Chinese-government-laboratory.html)

[https://www.marketwatch.com/story/dont-buy-chinas-story- the-...](https://www.marketwatch.com/story/dont-buy-chinas-story-the- coronavirus-may-have-leaked-from-a-lab-2020-02-22)

<comment><USER18> [https://goo.gl/maps/9dzPVq8XBtChHRxJA](https://goo.gl/maps/9dzPVq8XBtChHRxJA)

<comment><USER17> Interesting.

It is about 14 km by car between the Market and the Institute of Virology.

What do you think about the Daily Mail article which says that the Wuhan Center for Disease Control and Prevention (WHCDC, not the Institute of Virology, my mistake) is 278 meters away? They state that virus research is being done there. From what I see on the map there are some Union Hospital buildings, but nothing specifically identified as the WHCDC.

Edit: part of the problem seems to be in searching for the _exact_ names of the facilities.

<comment><USER19> [https://map.baidu.com/dir/%E6%AD%A6%E6%B1%89%E5%B8%82%E7%96%...](https://email@example.com,3561792,18.79z?querytype=walk&c=218&sn=1$$$$12720468.15,3561529.56$$%E6%AD%A6%E6%B1%89%E5%B8%82%E7%96%BE%E7%97%85%E9%A2%84%E9%98%B2%E6%8E%A7%E5%88%B6%E4%B8%AD%E5%BF%83$$0$$$$&en=1$$$$12720425.96,3562036.29$$%E5%8D%8E%E5%8D%97%E6%B5%B7%E9%B2%9C%E6%89%B9%E5%8F%91%E5%B8%82%E5%9C%BA$$0$$$$&sc=218&ec=218&pn=0&rn=5&version=6&run=0&spath_type=1&da_src=shareurl)

I think Baidu Maps places WHCDC in the same complex identified in that Daily Mail article, directly across the street from the Huanan Seafood Market. (I'm a bit uncertain because I don't read Chinese, so please let me know if I've made a mistake here.)

</comment></comment></comment></comment></comment><comment><USER20> I hope it is enforced well. A lot of loss of wildlife (tigers, rhinos, etc) in the neighboring countries is attributed to the consumption for traditional Chinese medicine.

</comment><comment><USER21> Funnily, China has stopped issuing hunting licenses some 20 years ago, but it was still legal to catch a wild animal without "hunting" it, and killing it on the spot.

A great example of literal to the letter selective enforcement of law here.

</comment><comment><USER22> "prohibiting the illegal wildlife trade"

This site is in bad need for a proofreader...

<comment><USER23> If what you mean is those words are lengthy and repeated, that's actually how chinese officials talk and write.

<comment><USER24> I believe they mean that prohibiting something that is illegal is unnecessary.

<comment><USER25> On the contrary, you prohibit exactly "unlawful <sort of action>", e.g. "unlawful consumption of narcotics". That means that what _exactly_ constitutes unlawfulness of such acts is a part of a different law, and usually not even a law, but a by-law or a regulation.

For example, look at the German penal code, title 184f, "Ausübung der verbotenen Prostitution" — it's literally "Practicing illegal prostitution", and it's worded that way because there is also legal one.

</comment></comment></comment></comment><comment><USER26> China needs to go halal..

</comment><comment><USER27> No more cannibalism, too bad.

<comment><USER28> Heh heh, title is indeed badly worded.

</comment></comment><comment><USER29> Again.. maybee its time to admit, that propaganda announcements out of china - are simply not worth the time and effort.

They announce to go green, and produce a potemkin village of effort. They announce to ban trade of wild animals (2012/ 2017) and it just never is fully implemented or enforced.

China is actually even more chaotic then africa, because that nice facade of that utopian well working, strong government many int he west secretly year for, distracts from the actual chaos and routined subversion on the ground.

</comment><comment><USER30> hmm does that mean they no longer eat politicians?

</comment><comment><USER31> JFC, finally. Eating domestic animals is bad enough, wild ones is a complete non starter.

</comment><comment><USER32> There is a lot of stupid and non-sense talk about how the coronavirus was created, because of Chinese people eating bats.

There is no scientific evidence to support this!

Instead, this exposes the deep-seated biases and prejudices, that Westerners (white people) have of Easterners, and specifically, the Chinese, in this case. It also didn't help that the Trump Administration went on a negative media assault for the past 3 years to demonize the Chinese, so they are now an easy scapegoat for all troubles in the world. This really does not help the situation.

Now, how about a different theory?

Animals normally develop immunity to their environment, and from the viruses that exist in that area. This is the law of natural selection in play. Those that survive, go on and reproduce, and carry the antibodies to protect their offspring. Those that don't, will die off, and their bodies will be eaten by vultures.

I suspect that the coronavirus mutated and appeared, because of an animal from one part of the world, was shipped to another part of the world, where it didn't have natural immunity to the diseases of that region. In this case, a bat carrying the virus.

Maybe an animal from Africa, was transported to Asia, where it would have never traveled there by itself. That animal got sick, and triggered a mutation, which infected a human handling it, which mutated again, and infected another human, and now, we have an outbreak.

The key to understanding this may be in how the MERS virus appeared. It's believed to come from bats, which infected a camel, which infected a human. Do people in the Middle East eat camels? No, I don't think so.

So why should SARS and this COVID-19 virus be any different?

Limiting the transport of live animals, to different areas of the world, should help minimize future virus outbreaks. But, humans have been transporting live animals all over the world, for hundreds or thousands of years, ever since boats were first invented. So I suspect, that it is only a matter of time before another novel coronavirus appears. And global warming may also be playing a factor too, in triggering viruses and diseases in nature, that had previously been dormant.

This is HN. Most people here are scientifically and technically educated. Do your part. Analyze the situation scientifically. Change the narrative. Otherwise, we risk devolving into our deep seated fears and prejudices. We lose our humanity in the process.

<comment><USER33> Wherever it may come from, I think many people are happy to have an angle to attack a certain category of Chinese for their perception and treatment of animals.

The hunting and extinction of species due to these ridiculous primitive beliefs is utterly repugnant in this day and age where we teeter on the brink of environmental disaster and mass extinctions with climate and other causes.

Exchanging true fascinating living treasures of earth evolved over millions of years all the way back to this planets creation for some baubles and to satisfy their tummies or supposedly treat some fucking wart, or even save them from a heart attack, really, those selfish beings are worth the torture and extinctions ?

It also simply hurts and inspires rage to truly consider and witness the absolutely mind boggling levels of cruelty shown in the hunting, keeping and processing of these animals. How is one to like humans that think themselves so superior and special over everything else that they may be allowed to do anything? Its the worst of "humanity" and we can be well glad to loose that aspect of it.

Unfortunately may these Chinese with disregard and 0 empathy for animals be a minority or not of, the scale of the country make it too many by far.

</comment></comment><comment><USER34> Nice but it won't solve Biosafety 4 labs from leaking viruses and then covering up the truth like chernobyl

<comment><USER35> Try to see the good side- after this, no more bio labs, cause politicians like that as much as they like militarys going rogue with nukes.</comment></comment>


Stanford May Have Just Cured Alzheimer's - <AUTHOR> http://www.rodmartin.org/happy-new-year-stanford-may-just-cured-alzheimers/ <comment><USER2> This is old news (and linkbait):

[https://news.ycombinator.com/item?id=8749691](https://news.ycombinator.com/item?id=8749691)</comment>


Anyone looking for a Non-Technical Co-Founder in SF, Boston, or NYC? - <AUTHOR>

I am looking to join a technical person or a team to work on a start-up. I had two startups before and they both failed. I have learned so much from each one of them. I know about the ins and outs of startup marketing, project management, and sales. Entrepreneurs never quit, so I want to take the lessons learned and try again. I have tried posting on HN before with little luck. I started my first business at the age of 15 in high school and my family is full of entrepreneurs so entrepreneurship runs deep in my blood.
I am willing to work my ass off including weeknights, weekends, or whatever it takes. Looking for someone who wants to start their own business just as badly as I do.
I am currently in NYC but am willing to move to Boston or SF if it's the right team or person. I have bunch of savings saved up that I can survive for up to three years without a job.
Here is a little about me:
-I graduated from one of the top undergraduate business schools in America (currently in the top five of the Business Week's top undergraduate business school ranking list)
-I have worked at Google and Salesforce in San Francisco for about a year and a half prior to moving to NYC. I am a male in my mid-20s.
-I am really good at people's skills, presenting, networking, and business development. I have high emotional intelligence and am pretty easy to get along with.
-I can SELL! I am also well-read.
-I am a go-getter, and do not need to be told to do things. I literally can do everything and am a fast learner.
I am looking for someone who loves coding and who is extremely dedicated and willing work their asses off to make a successful startup. If you are action-oriented, hacker-type, and are looking for a non-technical co-founder that fits the description above then please contact me at email@example.com. <comment><USER2> Try Rhode Island. It's a fantastic microcosm for startups. The state has just about every sort of infrastructure represented there within arms reach. When you succeed or fail, you know quickly. For the past 26 years the City of Providence has been turning itself into a great incubator for artistic ventures, and as such, IT, Engineering, Software startups do well here.

But of course, if you're not a person versed in running a company, you're gonna have a bad time. I watched the whole "38 Studios" fiasco take off, crash, and burn(in that order). They got caught up in the parties and amazing restaurant culture in Providence. It seems they may have spent more on team outings than some people make in a year while making no profit.

On the flipside, a very talented friend of mine started a graphic design company a few years back. They've grown exponentially and rapidly. Right now they're doing a very respectable trade in services and having a great time at it. Ping me if you wish to discuss further. Cost of living is far lower in Providence than in Boston. And the support structure extends to Boston. The whole state is technically "walking distance".

</comment><comment><USER3> You sound like a good fit for the CEO of a startup. Since you have a ton of savings why not try to start an idea based on your skills instead of waiting for a technical co-founder? Maybe a service business first.

[http://benogle.com/2013/03/25/an-idea-for-non-technical- foun...](http://benogle.com/2013/03/25/an-idea-for-non-technical-founders- service-first-business.html)</comment>


Black Hat Social Marketing Techniques - Karthi Keyan - <AUTHOR> http://secureslash.com/social-networks/black-hat-social-marketing-techniques/

<comment><USER2> +1 for such incredibly weird spelling and usage:

"SEO experts does not qualify to read this article."

"Weather you are being ethical or not."

"They will simply forgot about this"

"So, You can surly offer a % of discount."

"I think it messes the whole point?"

"(dont make google to suspect you)"

There's so many instances of bad usage that I can't entirely believe they're not purposeful. Also, the bad usage seems unlike the usual English-as-Second- Language usages. The bad usages seem deliberate.</comment>


Mark Zuckerberg: Facebook Can Help the News Business - <AUTHOR> https://www.nytimes.com/2019/10/25/opinion/mark-zuckerberg-facebook-news.html <comment><USER2> Breitbart in the "trusted news" section? Wow...

</comment><comment><USER3> Who defines what is "misinformation"? This is always my problem, these actors cannot be trusted to determine what is true and what isn't. It's putting history and current events in the hands of already extremely untrustworthy companies that are constantly wrong and have extremely heavy biases.

Would something like the Washington Post's 2003 "Irrefutable" [1] article jeopardize the Washington Post's ability to post news on Facebook?

[1] [https://www.washingtonpost.com/archive/opinions/2003/02/06/i...](https://www.washingtonpost.com/archive/opinions/2003/02/06/irrefutable/e598b1be-a78a-4a42-8e1a-c336f7a217f4/)

<comment><USER4> The Washington Post absolutely can't be trusted to report on American affairs. Doesn't stop them from declaring themselves an arbiter of truth with their Pinocchio meter.

Honestly I don't feel I can trust an entire journalistic outlet as trustworthy after what happened during the Iraq war. I'll just individual journos but not papers.

</comment></comment><comment><USER5> Non-paywall: [https://outline.com/PKvV6D](https://outline.com/PKvV6D)</comment>


Hackers just broke the iPhone X's Face ID using a 3D-printed mask - <AUTHOR> http://www.wired.co.uk/article/hackers-trick-apple-iphone-x-face-id-3d-mask-security <comment><USER2> I think that post title is a bit sensationalist.

 _The researchers concede, however, that their technique would require a detailed measurement or digital scan of a the face of the target iPhone 's owner. That puts their spoofing method in the realm of highly targeted espionage, rather than the sort of run-of-the-mill hacking most iPhone X owners might face._

Yes, if you have precise enough tools and can print a face that resembles the owner's, and you wear that face, you're going to 'bypass' the recognition software, but are you really 'breaking' it?

You can really see the researcher playing hard to the validity and value of the work here;

 _Bkav, meanwhile, didn 't mince words in its blog post and FAQ on the research. "Apple has done this not so well," writes the company. "Face ID can be fooled by mask, which means it is not an effective security measure."_

I don't know, it's not 'hacking' or even 'breaking' enough to concern me.

<comment><USER3> I agree with you. Particularly, this sentence is a bit misleading

"Face ID can be fooled by mask, which means it is not an effective security measure."

It's like saying "This lock can be fooled by key, which means it is not an effective security measure."

</comment></comment><comment><USER4> Clickbait title.

Think about the level of work this requires vs spoofing a fingerprint. It is much higher and requires much more information.

In other words : if you spend a lot of time and money, you can spoof Face ID, but it's a lot easier to do the fingerprint.

For reference, here's an article (also from Wired) about how they hacked the fingerprint reader: [https://www.wired.com/2013/09/iphone-fingerprint- cracked](https://www.wired.com/2013/09/iphone-fingerprint-cracked)

</comment><comment><USER5> It seems to me they may have trained the phone to recognize the mask as opposed to training it on a person and creating a mask.

</comment><comment><USER6> 'just' in title means Nov 2017.</comment>