skysight-inc/HackerNews huggingface dataset:
NYCHA has a huge capital shortfall -- to the tune of $18B.^1 Neither the city, the state, nor the federal government looks interested in putting in that kind of money. As it is a significant fraction of the total number of apartments are being held empty because of needed repairs, at some point in the not too distant future entire buildings are going to be uninhabitable if repairs aren't made.

There was a proposal need the end of Bloomberg administration to sell project parking lots(!), mostly in Manhattan, to developers that would build market rate housing. The money would then be used for capital repairs. The plan was bitterly opposed by residents who apparently value massively subsidized parking over non-falling-down buildings and/or believe that the money is going to magically appear in some other way. DeBlasio has put out a modified version of the same plan, it involves a mix of "affordable" and market rate apartments being developed on the same parcels. That of course, will mean less money for NYCHA, which means fewer repairs, but I guess he doesn't care.

Personally, I think it makes the most sense to sell outright a few of the most valuable properties and use the money to make the necessary capital repairs on the rest of the system. If enough of those empty apartments can be fixed up, it might not even be a net loss of public housing.

1 http://www.nytimes.com/2014/08/12/nyregion/new-york-public-h...
Exploits have broken out of the sandbox before using OS-level security holes. The sandbox is not anywhere near 100% effective. If you feel safe using Flash in Chrome because of the sandbox, you might want to re-evaluate.
> At 95% of companies, there is zero career development and advancement once you become a "Senior Software Engineer". Fix that and you'll see more engineers stay put (where they're likely happier and more productive).

In many companies I see more undermanagement than overmanagement, so starving out the management track doesn't sound like a great strategy. And if a company is going to have better career development and advancement, it's managers who will make that happen. The pithy answer is "why don't you become a manager so you can fix that?" – and maybe you don't want to and that's fine, but you should hope that some other enlightened person chooses differently.

Re: advancement: to have greater impact than a Senior Software Engineer you need to do more than hack or stay late to fix bugs. What we define as "management" might not be the best way to do that, but it's got to be something. And at a certain point impact based on individual skill is hard to scale. I don't think we have a very good model for what it means to be more than that, so there's something precarious about the upper levels of the technical track. I recall seeing an article describing the developer equivalent of "The Wolf" (the character from Pulp Fiction), and have encountered people in that position; it's kind of like a wildcat manager role, diving in to fix problems that are typically both technical and organizational. There might be other models of what it means to go beyond Senior, but I think they aren't as well understood as they should be. And a lot of them will look somewhat like management because a large component is doing work that makes other people more productive.
"Quotas". In English, we use a plain S to denote a plural.
Wage Inequality in the United States by State
I really miss the dynamic features of objective c in swift. Writing a JSON mapper or serializer is really simple if you learn the run time.

You can't do that in swift.

Objective C was a compromised version of small talk. And swift is a compromised version of a true modern language.

I'd much prefer a non compromised small talk.It's better for medium size mobile apps.

And until the rest of the libraries are in swift it doesn't feel very different.

It's like you're writing Python but you're forced to use Java libraries and Java style apis.

I hope apple doesn't ram it down our throats. Well their own frameworks depend on its dynamism and In many ways in my limited opinion objective c is better for developer happiness.
FYI for those who prefer to watch videos at faster speeds.

Instead of realm.io, I went to the youtube url instead:

https://www.youtube.com/watch?v=2s7UR-rNFss

The notes say: "THIS VIDEO IS NOT MEANT TO BE WATCHED ON ITS OWN. We went to great pains to synchronize it with the speaker’s slides,"

Well, the embedded youtube at realm.io only allows speed of 1.5x.

The direct youtube url has the speed option for 2x, so I watched it there. However, before I saw it, I spent a few seconds to flip through the slides to get an idea of what Aaron was speaking to.
This is an interesting question. But do you have any source for the proposition that TPP or TTIP actually says this?

There is plenty of stuff in these treaties that I don't like, but this particular claim does not strike me as very plausible. But I could be wrong!
Hidden Costs of Convertible Notes
Rdio to Get Live Radio Feeds from Cumulus This Month
> This is magical thinking. If I just wish it to go away it will … sorry, that’s not how the world works.

And it's not what I said. I said caring so much about gender just serves to reinforce the problem. You're more likely to get results ignoring it than focusing SO MUCH on it and forcing quotas. The article explains why really well.

But yeah, well done on disregarding the rest of my post. I don't know why I bother writing more than 140 characters if it's just to get cherry-picked.
Pretty sure a lot of what you said about Google isn't true. I personally know at least one Principal Engineer who works on the Search team in Google NYC; it's possible he was promoted after you left, but even then, he would've been Senior Staff and highly regarded.

Also, upper management in Search is still on the engineering ladder. These are folks with 2000+ and 500+ folks reporting to them, one of whom reported directly to Larry when I left, with net worths probably in the hundreds of millions, and they've chosen to stay on the eng ladder.

I also know folks who were special hires (tech celebrities elsewhere in the industry, with independent press and a strong publication record) who were hired in as Senior SWE with a salary befitting their previous accomplishments.
Ramon,

Could you share some of your gulp optimizations so that I can incorporate them into the project?

You don't have to share their code if you don't want to, but if you could write down what the gulp tasks are, I could incorporate them into the JAWS Command Line Interface.

Thanks for the positive feedback btw :)
> "RSA BSAFE had support for DUAL_EC."

That line you quote isn't in the article. The only reference to DUAL_EC and BSAFE is in the timeline and says:

> Early 2004: RSA allegedly accepts payment to make Dual_EC the default in BSAFE, their crypto library.
>Extending the ag-gag law beyond animals to children and elderly sickens me, but is not surprising considering the state legislature's high level of what I consider traditional conservatism (think Old South).

yep, in Grand Scheme of Things it is just typical reaction of conservatives to progress (in this case to 2 specific pieces of progress - in technology and in moral - ubiquitous cameras and increased empathy toward and recognition of at least some animal rights). While such reaction is ultimately doomed, in the [pretty long] meantime it will serve as a significant drag on the progress and cause a lot loss and suffering, to the society as whole, to individual people and animals affected.
It's pretty awful for men who are ethnic as well. I come from a poor hispanic background but I keep getting lectured on my male privilege by upper middle class white people.

I'd say it's pretty awful for non-upper middle class white men as well. I think we need to make sure everyone has the opportunities they desire, but repeatedly telling 50% of the population that they're privileged when that's most definitely not the case isn't helping anyone.
Brilliant article. Unfortunately, Rae's perspective does not fit the narrative of most HN readers.
Square’s Board Adds Former Brown University President Ruth Simmons
Ανακαλύφθηκε+νέο+Gspot+στις+γυναίκες+-+Sex+Escort+News
If Google Shouldnt Apply Right to Be Forgotten Globally, Why Apply DMCA Globally
That's actually super handy. Next time I have to add someone to a shell account, I'll probably just look them up on GitHub first to find their public key instead of asking.
Hah! That guy stole my heart with his comments on accepting gay marriage.

https://www.youtube.com/watch?v=MYntFCsukNk (really gets going at 0:40)
Yup, ObjC is light and scripty. Whenever you don't like what it's doing you just make it do what you want, categories, cast to id, swizzling, respondsTo, NSSelectorFromString, etc, and when it's too slow you write those functions in C/C++ which it integrates well with.

Swift you're always contorting yourself to express things in a way that the language wants, it reminds me of writing java, it worships far to heavily at the altar of type safety as if type safety was a goal in and of itself.

ObjC is practical, Swift is academic.
Full Paper (at the end of the article) https://www.scribd.com/doc/273510197/Replication-Prohibited-...
>It’s a hack, sure, a dirty one, even, but as far as hacks go I think it’s quite nice.

And a hack that can backfire when people start incorporating the existence of the quota into their judgment about someone. For example, in a place where a quota exists to ensure a minimum number of A are hired, people will begin to assume that B's are more competent. And if the quota is actually working, they will be correct. (It is possible for A-ism to be so bad that the average B is worse than the average A even given the quota, which may mean it is even worse for A as people will often not realize this is the case and think that the average B must in all cases be better than the average A when there is a quota helping A.)
"a startup called Converus has developed an exam based on eye movement and pupil dilation"

Philip K. Dick has the prior art
Then so be it. We shouldn't _not_ talk about it.
Alibaba Hires Goldman Sachs Veteran to Grow Its International Business
The public keys should be ok. But the comment on them may be a problem.
I'd be interested to see the actual subsequent discussion with the FBI following the initial subpoena.
The attacker doesn't have the TLS private key, they have the RNG key. But they don't have the RNG seed. Recovering the seed is necessary to predict other RNG outputs and break TLS, but requires observing more RNG output than one typically sees.
Battery Attributes Can Be Used to Track Web Users
Ask HN: Future Web Pledge, tenets for a sustainable web
In the last few days there's been much talk about what direction the web is heading. These discussions have been prompted by three articles regarding how the internet has evolved from a developer's standpoint:

bit.ly/1JOOMlB

bit.ly/1OL6sSU

bit.ly/1gAPHPq

These articles serve as important reflection on the current state of the internet and a bit of an omen about where we are headed as the web continues to develop without any specific focus. As is, it's important to have a discussion about where we (the developers) want to see the web going, everything from a technical level to a larger philosophical perspective on what the web fundamentally is and how we can put ideas into practice to maintain what's left of an open internet.

With no clear position in the past the direction of the internet experience has been dictated by the biggest players on the web. As the popularity of Facebook, Twitter, and their way of consuming content grows we lose more and more of what the traditional internet experience represents, and as we continue to lay silent we give permission to let the web experience be dictated by these companies.

At this juncture I think it's important to have a discussion about where we want to see the internet go. Do we want a future of walled gardens, bits of content, and a lack diverse opinions or do we want to help users embrace the internet as a whole? These opinions would serve to create fundamental tenets of development, a Future Web Pledge if you will, for an internet that creates the most good for the greatest amount of people.

Being able to boil down these philosophies into an actionable framework would serve as a common reference for current and future developers, helping to promote an ideal direction we want to see the internet move towards. I'd like to start collecting these ideas and opinions and publish them into some form so that they may be shared and improved upon.
This really need to be better known.
> "a lottery for the working poor and lower middle class who desire to live among the upper class and rich"

This isn't even remotely true in the typical case. It is a lottery, to be a certain, but most NYC public housing is not in rich neighborhoods.

Living on the ass end of Bushwick, East Harlem, Crown Heights, and Coney Island is not opulent, nor has it ever been. All of these neighborhoods are still poor, and while some are gentrifying none of them can be identified in any way as upper class, or even upper-middle class.

There are notable exceptions - the projects on the Lower East Side for example were built when the neighborhood was one of the poorest in Manhattan, but in the past ten years has transformed into a playground for the wealthy with shiny new glass skyscrapers going up every which way.

The public housing system in NYC was neither intended as, nor does it generally have the effect of, mixing the poor with the rich. All of the complexes were built on what was at the time land that nobody ever expected would be worth much, the mixing of economic strata was not a major concern - in fact the design of the public housing system was in large part driven by a desire to segregate the poor.
> If we think it's important to have such disparate classes living close together even in high cost of living areas

While this may be true, this is definitely not the only way to talk about public housing in New York (i.e. the whole city, not just Chelsea and other hot areas in Manhattan).
It occurs to me that you could use this same mechanism to reduce the configuration load on machines that provision users using cloud-init(8).

Right now, cloud-init accepts a list of GitHub usernames that should be allowed to log into the machine (which is pretty clever in-and-of-itself), and then creates users for them and sets their authorized_keys to whatever values the GitHub public-SSH-key API returns.

But, rather than "burning in" a set of allowed users, you could do something much more interesting: allow any key to authenticate, and then map it back to a user and find out if that user has write-access to the GitHub project!
>How can one lament the lack of women in a conference panel but make no mention of how lily white it is?

Maybe it is related to how the mismatch from base rate in prison populations in regards to race is a sign of systematic racism against the over-represented groups, but the same doesn't seem to be reported in regards to sex.
I don't think that post is the same situation at all - there, Crew made side projects that became popular and then received traffic from them. Here, corporate sponsors skew which tools a ChallengePost employee recommends for hackers - some of which I personally believe are not at all good tools for the listed jobs (S3 for static website hosting??).
Tech's Enduring Great Man Myth
You're correct. I meant my response as tongue in cheek, though that didn't really translate well in text, my apologies.
Kinda hard to not come up with it when setting up your credentials is the first thing git wants you to do before you can commit anything. BTW. You can also overwrite them by command line switches per commit instead of setting environment variables.

I guess it's worth noting here that you can sign your commits with GPG: https://git-scm.com/book/tr/v2/Git-Tools-Signing-Your-Work
I think this is pretty well known. You could always sign your commits if you're really worried about someone sticking your email address in their git config.
But that’s exactly what I say! You are engaging in magical thinking. Wishing the problem to go away won’t make it so! Really not, that’s not how the world works and that’s not how past oppression extends into the now.

You have to care about this and think about this deeply. I also agree that quotas are a dirty and inelegant solution and I always love to hear alternate approaches (e.g. two-phase selection process including first a call for papers plus targeted outreach followed by a blind review phase), but the point is you have to think deeply about the problem and actually engage with it deeply. It’s a hard problem – just wishing it to go away won’t make it so. That’s magical thinking.

You have to think about it more not less. Also, quotas, while a very dirty solution, are to my mind a hell of a lot better than status quo. But as I said, I’m sure it’s possible to do better than quotas – but not by just ignoring the problem.
Umm... spoiler alerts in for those people who haven't actually seen the show yet.

Might be nice to mention that in the title or at the beginning of the article.

The paragraph before the image mentions he's getting into this last episode, but the typical big bold text might be better for people that are skimmers since he rolls that mention in with talk about how many more people are watching every week.
Similar to the putative attitude of the organizers of these conferences, colleges have bent over backwards to get more female enrollment (indeed, there are now more females going to college than males). However,

"A new report from the National Student Clearinghouse looks at degrees in STEM fields (science, technology, engineering and math) and finds that the share of STEM bachelor’s degrees going to women ticked down over the past decade. The biggest decline was in computer science, where women received 23 percent of bachelor’s degrees awarded in 2004 and just 18 percent in 2014. On the bright side — at least for career prospects — both men and women are slightly more likely to be majoring in STEM fields today than they were in 2004; it’s just that men have shown more growth than women."[0]

The opportunities are there for those females who want it. Maybe most of them simply don't want to go into the computer field---individual men and women have different things they want out of life and out of their careers, which is ok! Why should everyone be a computer science major? The world would be a pretty dull place.

The author's points are quite valid; I would add that you don't want to push people into a field they have no interest (or aptitude) in. It makes the person miserable and cheapens the degrees of others (a smaller consideration in tech, I'll grant you, since it's more meritocratic than some other fields).

The smallest minority is the individual. If 95% of individuals who happened to be men gave the best auditions, they should probably be given the spots. I say "probably" because if it's a private conference, the organizers can do whatever they want, and people need not attend if they don't like the speaker choices. Ultimately, if women are dissatisfied with the "boys club", they can organize their own conference across the street.

[0]https://www.washingtonpost.com/news/rampage/wp/2015/01/27/wo...
Microsoft Toolkit 2.5.3 Windows and Office Activator Download
It is in the social circles I frequent. Really the only way to know what tech is like for people with X experience is to listen to and follow (in the social media sense) people with X experience. No one can fully understand how other people experience things.
Thunderstrike 2 “firmworm” for MacBooks Preview Video
jgon apparently took linkregister's advice to change "extended random" to dual_ec too literally, and changed a direct quote as well.
Let's see. The subpoena was issued on June 12, 2015. They were supposed to appear before the grand jury on July 1, 2015. The article was posted on August 4, 2015.

So they clearly missed appearing before the grand jury on July 1, and didn't get arrested for it. But yeah, it's a bit too soon to assume that no other shoes are going to drop...
That honestly seems like an unimportant little diversion that doesn’t matter.

Only used by people who really think there is no problem, used to argue in bad faith.

But, ok, can you suggest an alternative that’s not just proving up the awful status quo? I love more elegant solutions!
Good policies, the mere presence of an id_<ciphername> key in .ssh means you can be identified between multiple ssh servers. I identified this in the OpenSSH source a while ago and posted it on reddit at one point, but few people understood. Glad someone made a practical attack out of it now. IP correlation may seem a more obvious attack, but such an attack could be used to identify for example, someone running a darknet operation or using VPNs for privacy or simply to tie an IP to a name using a public key service like in this example.
Using GPUs for deep learning is like, step 1. This is really well known, and has been since the first big papers on the topic.

Hinton's "ImageNet Classification with Deep Convolutional
Neural Networks" has the word "GPU" in it 34 times.

http://www.cs.toronto.edu/~fritz/absps/imagenet.pdf
I guess the real uptake is that commits should really be signed by default (eg, by encouraging signing in the tools & ecosystem).
Indeed. So the issue here is to deduce the symetric keys generated with a Cryptographically Secure Psoeudo Random Function (CSPRF) seeded with information exchanged during the initiating handshake and using the respective public and prvate keys, without having any private keys.

Imagine now that with a handfull pseudo random bytes sent in clear with the TLS protcol an eavesdropper could deduce the internal state of the CSPRF and thus the symmetric keys. They could decrypt the channel.
>* If you want to see what I mean, mute and scan forward in the video paying attention only to the slides. It's almost impossible to tell what this talk is trying to convey from the slides alone.*

That's why it's a speech and not a slideshow.

(Besides who said you HAVE to summurize the speech in the slides? You could use them as supplementary material, and have people pay attention to your speech as opposed to PowerPoint BS).

And it's a generic speach, not him presenting some paper etc. Have you seen his research work papers?

>* Smalltalk did everything better

Well, compared to most things we have today, especially JS, it really did.

>* Software was better in the 60s and 70s

No, but thinking about software was better. We got far more breakthroughs in those days compared to today -- and not just because they were "low hanging fruit".

>* Alan Kay really dislikes the web.

Who doesn't? Compared to what it could be?
QUIC Performance evaluation
Live Interior 3D Pro Crack Plus License Code [ Windows+Mac ]
Functional package managers (FPM) to me are a viable solution to (cloud) deployment: what is the difference between a FPM controlling the totality of inputs and outputs of an application, and modern containerization solutions such as Docker, really?

I've played with Docker (and rkt) and there's something off putting about using this stuff in production, to me at least, while I'm itching to see how Nix and Guix grow; waiting for someone with more free time than me to really cultivate this potential.

Nix is more mature, but I dislike the Haskell syntax. I love Scheme, but I hate the free-software-only-religion around GNU Guix: I appreciate what GNU does, I'm a regular GNU/Linux user, but at this stage of development religious beliefs are just a hindrance to adoption and it makes me sad.

EDIT: and let's not forget about node provisioning, something you can already do with NixOS (no idea about GuixSD): forget Ansible and its declarative configuration, but define the totality of the system state and configuration in a single file. Tell the machine "OK configure yourself like this", and voilà, you have a node which is (formally?) proven to be exactly like you've described. That's the future.