jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
> The excerpts we published included passages referencing both the file server and the encrypted chat room.

Interestingly, if you look at the link http://www.wired.com/threatlevel/2010/12/wikileaks-conspirac... nowhere does Manning say anything like 'Assange set up an FTP server just for me which I then used for the video and cables'.

What he actually says is that hypothetically speaking, one of the best ways to transmit hot stuff is through SFTP, but he immediately mentions that one could also transmit over HTTPS (plus Tor) to get stuff into the Wikileaks submission queue and discusses general considerations like senior sources getting looked at first.

The only way you could read Wired's claim into that excerpt is if you made stuff up or are making a large inference based on other non-public logs. So at least with that claim, Wired is bullshitting readers.
Hard to disagree. But it sure ain't priced like a service pack!
>You can add you own searches, too, and activate the extension to add a little microphone switch to other web pages' search boxes.
>There are alot of people doing incredible things (Sam's point I might add) and focusing on the Bubble makes you miss out on companies generating real revenues.

The 2000 tech bubble also came and went without every single company going bankrupt. So the fact that some companies are doing great things means squat when it comes determining whether there is a bubble or not.
> you only contributed to creating $20,000 of that

That's an interesting way to think about it, but as long as the employee is getting a base salary, the employer couldn't justify granting enough options to achieve this goal of compensation being equal to (theoretical) value added.

If we consider base salary fixed, then options are more leveraged, but a similar reward structure could be achieved by granting the same number of RSUs and reducing base salary by the exercise cost.
This article is very interesting. However, while reading, it sounded like a late night infomercial. There may be real value in this style of teaching Math, but as my first introduction, this Times article feels like the sponsored hooks used for products such as those baby reading flash cards and acne medication.

I hope that the Jump system is real and that it solves the problems outlined in the article.
A little confusing that the title refers to "Node" rather than "node.js".
Must we have the same discussion every single time he posts one of his income reports?

Just accept the fact that in Poland that is actually a very good salary.
Still, his conclusion is presented as a result of the improvisation game, not after he tried to verify it.
>Yes, but as any cognitive psychology banks his career on... we are also information-seeking creatures: basing survival strategies on our ability to predict, control, and assess the degree of our control, etc.

That is actually to my point. I think feeds satisfy the information gathering aspect of our needs quite well. However, I think in large part, these services fail to provide our need to meaningfully share and to build valuable connections based on that sharing.
Node is actually the real name. It is often referred to as node.js just to distinguish it from other concepts and stuff named "Node". If you go on nodejs.org, you'll see that they always refer to it as just "Node" in the About section.
I think the "in the hands" is the part up for debate. The question is a matter of responsibility, ultimately, in my view.

A better rephrase would be "if you are default-dead, you are probably default-dead", which is less depressing.
So what you're saying is DNSSEC isn't finished yet. They need to standardize some equivalent to HSTS that will actually work with browsers on real-world networks, and also some kind of record that prevents SMTP TLS downgrade.

When they do that, maybe I'll re-evaluate DNSSEC. In the meantime: the more people who deploy DNSSEC, the harder it gets to fix the broken crypto, so we should just stop.
yyyy/mm/dd is ordered even more correctly. With dd/mm/yyyy the most significant digit is the 5th of eight and the least is the 2nd.
So path tracing is only used for the secondary rays and beyond?
"Tools to permit you to wipe out your HPKP mistake would be usable by attackers, though."

I meant tools to prevent you from making the mistakes in the first place, not for fixing it after the mistake.

The non-enforcing mode doesn't help. When I talk about mistakes, I mean things like losing access to your cert or timing mistakes in rolling the cert. If I roll it out today, it will be fine today. It will probably fail at some point in the future though, and fail hard, unless I follow very strict processes.

HSTS is considerably less dangerous. Once it's set up, it will continue to work without you having to do anything extra. HPKP on the other hand requires you to actively consider when you generate new certs, and when you add extra HPKP headers to your responses, and when you roll the certs etc.

I can change my CA or generate a new key today on a whim, because I don't do HPKP. If I did do HPKP, this would require considerable thought and preparation in advance.
I am doing this same work for the company I work for. I think it's going well, but it's taken far longer than any estimates I have planned.

The Ironic guys are amazing, really great people to work with. The guys in IRC are good at working with us.

Just hope we can provide some value to the project as well to return the favor.
This seems like a great reason to virtualize everything possible.
I'll say thank you, and not make any further requests.
I thought I'd add a few tidbits here on gender differences.

I play women's football and coach high school guys football. Football is one of the most teamwork-dependent sports out there. Everyone has to be doing his job every single play. There's no way for one player to carry the team.

Before I started coaching guys' football, I had heard consistently from other coaches in my women's league that women are way easier to coach than men in the game of football. Reasons given included less attitude, less individualism, less ego, more willing to work together, etc. When I started coaching high school ball, this was exactly the case. So much of my time was wasted beating the individualism out of these boys and getting them to play for each other, not themselves.

Maybe it's that football attracts a certain type of male. But I think women might be more naturally disposed to working on a team than men on average.
In the south of the UK (the part where most of the jobs are) housing is a dominant cost in most people's lives. Since there's a shortage of housing and buildable land, the cost of housing goes up with people's ability to pay. This absolutely trends towards a zero sum game, so income distribution is a clear concern. Political power is also purchasable to some extent in virtually every country, so income inequality matters there too.
But we aren't starting from a position of knowing that a majority of society agrees, which is my point. If you state that you don't know much about x, so have no opinion, but believe that most reasonable people believe y about it, then you still are stating an opinion about x, even if you are doing it at one level removed by saying what you think other people might think.
Still have my Amiga 500 with 3rd party add on Hard Drive/RAM in a box plus 108 0 monitor, extra floppy drive, modem, and lots of disks.....
This exactly, as I stated elsewhere I was in the gifted program but because my parents were unable to be involved more thoroughly from both working whether I was in that program or not doesn't really compare to the lack of parental support in terms of how it all worked out for me.
I regularly invoice internationally. I can get a crypto payment through with a small transaction fee (a few cent for $20k) which clears in ~5 minutes, or I can get a payment that takes several days to clear with a larger fee. Crypto works perfectly for me!
There are plenty of folks for which getting to a vaccination site is already a hardship - having to get time off work, arranging transportation and childcare, etc. Doubling that effort unnecessarily leads to poor outcomes, too.
And parents that work odd hours, multiple jobs, have insecure income streams, and whose parents also suffered the same so they also don’t have the necessary knowledge and network for success.
So, thats a loophole, just get it done with the camera's rolling?

In the US much of the vaccine resistance is a result of the news/propaganda channels a particular party (which Greg Abbot belongs to) uses to generate fear and doubt in order to win elections. So they generate the problem, then they get to help show its safe? I mean they aren't going to convince any of the hardcore conspiracy theory people they weren't just injected with saline.

Plus, many of the politicians assume they are more valuable than the political system which is designed to replace them every couple years says they are. Particularly in TX where the governorship is unusually weak.
FoxPro 2.x was fast and easy to use, this made it enormously popular back in the days. In mid to late 90' it was the first choice for most apps, even in small to medium companies. The success was coming from performance and ease of use.

In the 90' Turbo Pascal and FoxPro were languages that anyone could understand and use quickly without a lot of training. It made it accessible for learners with or without CS background, so I had many colleagues that knew and wrote a bit of FoxPro 2.6 for their needs - from small task automation to entire apps covering what the company IT was not able to do because it was not a priority.

Fast forward 30 years, the situation is not better, even if one would expect progress. We have hundreds of languages, the language landscape is way too fragmented. Do you want to write some code? Jim will do X, Joe will do Y and Jane will do Z and they will use different languages and everything will not be compatible and they will not understand each other's code. For data we have SQL and we have ANSI SQL which makes it partially compatible, that is great, but for general coding... no. And if you want to write a small data app you cannot just fire up FoxPro, you need to install a SQL server of sort, configure it (and that can be a small dark art in cases), get something like VS Code and write in a language that will not be SQL, but will interact also with SQL. Too complex, too complicated, too easy to give up. And if you want to explain to a non-IT person OOP and why a single line of WriteLine('Hello World') needs a class and a method and what is OO using the old story 'imagine you have animals, and some animals are mammals and mammals can inherit properties from the animals class' just to write Hello World on the screen, then we have a problem of accessibility: 'Man, I just want to write 2 words on that bloody screen!'.

So this is why FoxPro was easy to use: just fire it up and write some code, there is not much to prepare and nothing much you can break. And no dependency management, no unsafe downloads from all over the Internet, you can learn everything in a week and forget it in a year.
Ah yes, this was mentioned in the article. I was going to google it but didn't. Thanks, another 'tab for the weekend'!
This is not new information though. Every page on the QuicksBlog contains the sponsorship information at the bottom of the page.
Excellent, thanks for confirming. I've got a lot on my plate so presuming this was the famous MIT "drinking from a firehose" I decided to shelve it for the time being. But if it's one of the better ways to get started, I'll give it another try soon.

Edit: I just watched through the intro again and I clearly wasn't paying attention at all when I first watched this, as he says exactly what you described. I will blame my wandering mind on the fact that I was hungry and my girlfriend was cooking up something tasty in the kitchen at the time :)
The don't need expertise it is just an index fund, like the majority of ETFs, it is based on the ISE Cyber Security Index http://www.businesswire.com/news/home/20141111006259/en/ISE-... and has a bit of Juniper and a bit of Splunk and other publicly listed "security" companies.
the old microphone/webcam in the bedroom retort usually illustrates to people that they have got something to hide, then in their own time they will discover they have more they don't want to share.

make stuff that doesn't leak privacy, then you should feel no shame.
Cloud servers
=============

Xen supports virtual TPM.

I'm no Amazon EC2 expert, but a quick google exposed a few keen souls who tried to use vTPM and failed. This would suggest that Amazon does not yet support vTPM.

Re-entering passphrases
========================

Well, unless the machine is permissioned by default you will need to give a fresh instance new authorization. Permissioning by default is the same security problem you're trying to avoid though... just shifted. Your overall goal is to have the credentials inaccessible to sniffing, right ?

I guess you could set up some form of ssh-agent handshake to make the process less manual.
I agree, but then I noticed at the bottom it was originally a speech, and in Dutch at that, so I let them have some slack.
Perhaps 'excessive' would be a better characterisation? I agree, but that doesn't really have much to do with the organisation/planning of the games themselves.
Thanks guys for your hard work.
Sure you can "put the genie back in the bottle." There are plenty of social norms that inhibit possible but obnoxious behavior. Some even have laws that reënforce the social norms.
I dream of a future where there is a standard rest interface for cloud file storage, that somebody will put an API in front of any non-compliant services, and that applications can talk to any datastore with minimal hacking.

This has been done before with, eg ODBC.
He omitted a really big one - the beginning of spring. Most people are convinced spring begins at the equinox around 20th March but are also quite happy to talk about Mid-Summer's Day at the summer solstice around 20th June. Sorry, ya can't have it both ways. If the summer solstice is mid-summer then the spring equinox 3 months earlier must be mid-spring. It all boils down to how seasons are defined and here I find even astronomers can be really lazy in their thinking. Seasons are defined by the intersection of the Sun's apparent path and the equator so equinoxes are where the Sun's path crosses the equator and the solstices (Sun standing still) are the maxima and minima of the Sun's path. However, a maxima/minima can only be the mid-point of a season since points either side of a maxima/minima are equal in terms of the relative amounts of daylight. Seasons are defined by the amount of daylight, hence the summer solstice in the northern hemisphere, around 20th June, is the mid-point of summer when we celebrate "Mid-Summer's Day". All else follows from this and spring begins around 5th February in the northern hemisphere.
> Swiping pressure-sensitive paper over the raised numbers (the original method) is still possible

I actually had to do this in 2013! Working as a waiter at Chili's, whenever the power went out (happened once or twice the year I worked there) we'd dig out a quite heavy apparatus and make carbon copies of the credit cards. Every time I used it, my customers commented they'd never seen such a thing before (I suppose the clientele was either too young or had bad memories).

Earlier last year, I was at Shake Shack when their online payment system went down. They decided to just stop charging people (even if they had cash!) and gave out free meals. I much prefer that system.
I've wondered if it would be a good idea to have some sort of external indicator on cars that indicates to others that are driving, cycling, on foot that the vehicle is in autonomous mode. At least then maybe one can understand the potential risk driving around them. (Noted that an indicator doesn't really help if the vehicle is behind you in a lot of instances!)
Or maybe Von Neumann machines can't be built because they're impractical.

Consider that you need an AI that can deal with a huge range of potential environments, build extraction, processing, and assembly machinery, and do all of this with perfect error correction and oversight. Pretty much eternally.

It's an interesting thought experiment. But as a practical engineering project, it really doesn't sound even remotely credible. Not without appealing to "Yes, but one day..." magic unobtanium technology.

I wouldn't be surprised if there's some kind of hard entropy limit on how long complex systems can remain functional and stable. Sooner or later you're going to run out of memory, and if you restart a build process from scratch at each iteration without accumulating information, what have you actually achieved - beyond a rather pointless machine infestation?
I was half expecting to see a reference to Chris Morris's recent film Four Lions. That film has been dubbed "controversial" here in the UK precisely because its protagonists are portrayed as nitwits, albeit nitwits with bombs.
Michael Owens's _The Definitive Guide to SQLite_ is good, too. It's a couple years old, but provides a good overview of both SQLite (standalone, its C API, and a couple wrappers) and the relational model. SQLite's biggest change since its publication is that it now has optional foreign key (http://www.sqlite.org/foreignkeys.html) support.

If you want a more academic treatment, I would recommend C. J. Date's _An Introduction to Database Systems_.

Also, it's been my experience that books which claim to cover relational databases in general, but which actually assume MySQL throughout, are usually pretty bad.
Sure. And it's her premise I don't buy.

Being an atheist I don't buy the God argument either, but Rands is in my mind simply taking the opposite extreme in her attempt to get out of meta land and by doing so becomes religious herself.
You're playing a game of semantics; redefining "work" to mean "work that you think is valuable." That's not helpful. If you want to say "I don't value her work for reasons x, y and z," just say that.
Buzz hasn't been able to convince me that it is a service I need. Facebook/Twitter/Tumblr have been working out pretty well for me and adding anything else to that list which doesn't satisfy a niche would be pretty useless.
In other shocking news, bankers don't do their own PowerPoint slides either...
There are people employed full time to do just that.

You mean associates and analysts? They at least fall under the category of "junior banker" and are on the right track to become deal closing bankers someday. Plus, the senior bankers make revision requests, so the junior bankers are like a high level programming language turning the comments. I don't think there is anything wrong with that.
That's why Israel has US.
That's 3 minutes of maximum generation at https://en.wikipedia.org/wiki/Ludington_Pumped_Storage_Power...

I guess that plant doesn't have an extreme amount of head or a particularly large reservoir.

It's about 7 minutes at https://en.wikipedia.org/wiki/Bath_County_Pumped_Storage_Sta... , which has a lot more head.

So you need a lot more pumped storage if you want to start talking about days of backup, and we already used quite a few of the best sites.
The benefits/vacation point is a poor one. So much of that aspect of compensation is driven by local laws so as to be pointless. In fact, it’s a major reason why even remote friendly companies won’t hire internationally.

Heck imagine a company founded in the UK committing to this. How would they deal with providing health insurance to their first employee in the US? Not offer it to US based employees?
Again, this is absolutely not the main justification for free speech.

As a thought experiment, suppose we had a way of knowing which speech would advance knowledge and which speech would hinder our knowledge; by your reasoning, it would then be ethical to silence the speech that we knew would hinder our knowledge, since the point of free speech is to improve our collective knowledge.

This is wrong on its face. It's not what free speech is about. The concept exists because it's unethical to harm others over what they say.
In addition, if you replace all mentions of blockchain/crypto with their fiat equivalents you'd pretty quickly realize it's a flawed business model.
Do corporations and other juridical persons also get a social credit score? This abuse was committed by a corp, not some farmer.
At the very least, it's an easier case to make that salaries should be equalized across states within the US. There are a lot of complications to making it worldwide and, yes, it probably means at a minimum that total comp including benefits is equalized, not salary.

To be sure, that means you probably don't pay especially competitively in the highest cost of living states--but frankly, that's probably already the case with many companies that don't have significant offices there.
Same tasks, same responsibilities might be a start?
When it rains, it pours?!
Did not get it fully, but will celebs also move to this clone to Tweet ?
it sounds to me he posted the idea knowing the vulnerabilities, so that he could then do the bot exploit and earn free money. Or he was sarcastic. can't really tell...
The bet is a punctuation point on a discussion. Sam is already taking risk on current valuations, another $100K here or there isn't going to move the needle. The real stakes are reputation for prognostication. And the point to me is getting VCs on the other side of the debate to put a public stake in the ground, and hopefully give their arguments for why.

So I don't find this taker particularly interesting. In the context of an industry wide debate, the opinion of someone who doesn't have an audience similar to Sam's doesn't really mean much. Not that they aren't smart, just that they aren't someone influencing the discussion. Which is what this is mostly about.

And to say "I take the bet" without any discussion of why really misses the whole point.

Of course Sam should take this bet. But I'd suggest that he amend his proposal: Find people with enough audience to change the discussion, who are talking about bubble valuations, and ask them specifically to put a stake in the ground on this.
My original remark was a bit tongue in cheek - here we really can define every life experience in terms of engagement metrics.

Aside from sharing, we like to photograph things as some sort of time-space marker for ourselves, even if we never do anything with it. "This is memorable, so I should take a photo to affirm that." That's why everyone takes a goddamn photo of the Eiffel Tower.
I'd guess the comment was less about 'what people think is proper,' and more about the fact that there are typically no mechanisms by which to short very early stage private companies.
It's not a dead place, and can't just be harmlessly stripped.

That's never stopped us before!
As a co-founder of Sand Hill Exchange (http://sandhill.exchange/), we're excited to see many people growing the burgeoning Fantasy VC ecosystem. I like Exchangel's focus on seed stage startups, as I feel this is where the most interesting entrepreneurial energy resides.

Obviously, there are many key differences -- Sand Hill Exchange in particular offers the ability short sell, profit, etc. We'll be spinning up a hacker news league on http://sandhill.exchange/ soon so you can all skip our waitlist!

--
Gerrit Hall
Co-Founder, Sand Hill Exchange
gerrit AT sandhill DOT exchange
MS CEO here — happy to answer any questions.

We're making big product changes to dramatically reduce cost to hire, and help candidates engage in what we've been referring to behind the scenes as "always-on job search".

Our thought is that if you have a dedicated channel to always know who wants to talk and why, you're better prepared to understand when a really special opportunity has come along.

Would love your feedback!