skysight-inc/HackerNews huggingface dataset:
1. Yes, you have higlighted a source of frustration: currently to limit certain features one must either install half a dozen extensions on chromium or firefox, or stick to ESR versions of firefox, or gtkwebkit browsers (which I'm afraid do lag behind the apple upstream when it comes to security fixes). Hopefully with CEF and servo swapping out an engine for another will be easier, so the situation may improve a bit.

In an ideal world, this would be the purpose standards are: all the browsers agree on a set of minimum features, and security conscious users or administrators can decide to stick to that (I have no clue on whether other browser vendors would be interested).
This would break websites in a predictable manner. After all sooner or later browser vendors will probably decide to break all tls-less websites.
Some websites would be broken, but for people using a screen reader the web is already broken, and at least the would have a clear metric to point at when dealing with banks/news sites/institutions: if it breaks firefox/chrome/safari/edge safe mode, the webdesigner is doing something wrong.
Similarly the limit imposed by organizations would help: if you are an entrerprise website you must render correcly in this mode. I'm convinced that administrators enforcing a "no IE policy" on the workplace did help move us away from a world in which frontpage's HTML was acceptable.
My parents and users of entreprise workstation don't have browser choice anyway: they cannot install software.

2. Sure, the problem with modes is the problem with the UAC: you end up asking permission so often that you devalue the role of permssions, or you require the user to constantly check the current status of the application (e.g. the lock icon for SSL), which most users won't do.
Polaris probably suffers from similar problems, as all "restrictive" extensions do.
I'll admit that my solution is squarely aimed at users that cannot switch browser (or cannot switch browser mode), similarly to the gatekeeper role of apple on iphone, only giving the power to switch to administators/technically advanced users, which apple does not.
I'm aware of what a SaaS is. :)

Great analogy though!
So that is after the officers filter of society. Officer picks 100 people to be suspected drug dealers out of N ...

Out of the 100 the officer picks the dog is choosing 93%... but is only right 55%... the dog correlates to the officers choice and both are only right about half the time
This headline is pretty terrible.

Keep in mind when looking at these statics that the number for this dog is not based on a random sample. Therefor it is impossible to actually gage the dog's accuracy from these numbers, since we don't know the ration of false:true negatives, only the number of false:true positives. The ratios could be identical, which would make the dog's alerting behavior random. There could even be a higher ratio of false:true negatives, which would make the dog worse than random.

The only meaningful number is the 93% ratio which basically means that the dog is very close to being a 'probably cause generator' as mentioned in the article.
Would anyone in B2B sales be interested in trying our collaborative selling app?
Respectfully, this doesn't reflect my experience at all. I live in Chicago. I was referred to a sleep specialist, saw them, had a sleep study (the Matrix wiring and unpleasantly early sleep time is accurate, though), got my machine, set with the sleep study's calibration, and began sleeping with it. No additional sleep studies for calibration.

Or, to put it another way, for me, it was 1, 2, 3, and a not-as-long-as-you-describe 5.
Can't we discuss the new/changed/deprecated items?
Exploring Montmartre in Paris
The article's whole analysis is fucked up because it ignores the prior probability.

> In U.S. v. Bentley, we see just how damaging the Harris decision really was. Lex, the drug dog that searched Bentley’s car, had a 93 percent alert rate. That is, when Lex was called to search a car, he alerted 93 percent of the time. He was basically a probable cause generator. His success rate was much lower, at 59 percent.

In other words, drugs were found in 55% of cars in which he was brought in.[1] The base rate for drug possession in a car is almost certainly a tiny fraction of that. So between the human judgment to bring in Lex, and Lex's sniffing, the police are able to find drugs at probabilities that are multiples of the base rate. In contrast, if you searched cars based on a coin flip (i.e. randomly), you'd expect to find drugs exactly at the base rate.

[1] Being successful > 50% of the time is pretty much the definition of probable cause.
iTerm Tricks
Nice to see bors in the contributor list!
I think it depends on the project. I get a ton of feature requests that are off the beaten trail. I basically give people the feed back of: We have limited bandwidth, but I'm happy to point you in the right direction.

"Contribute or shut up" worded differently may not be an ideal answer but it's an understandable one. Imagine if you were a resource constrained engineer having hundreds of queries and emails a day about certain things users want and then not only have that feature not be something of interest to anyone but that user but also have it be something that isn't even on your road map.

Technology that's general purpose enough (in our case machin e learning/scientific computing) will give you this.

There's a huge delta between say: a resource constrained but heavily used project and a javascript lib that only provides a slightly better basic widget.

It's no excuse for OSS devs to be rude but I hope you can understand what it looks like from our side a bit.
Foldit: an online puzzle video game about protein folding
I hope this was downvoted by mistake, because it's true that Rust is still in early-adopter territory. It's only been stable for three months! :P
You have completely missed the point. Zero error is not achievable. You have to choose to accept either false positives or false negatives. In a free society, false positives are supposed to be considered the greater evil.
Not the first time, nor is this the worst offense perpetuated by drug dogs. A town in New Mexico used one drug dog with an expired certification, "Leo", in order to justify invasive anal probes on two men--neither of whom had drugs. To add insult to injury, both men were later billed by the hospitals for this non-consenting search.

Timothy Young, 2012: http://krqe.com/2014/07/28/nm-driver-tells-story-of-sheriffs...

David Eckert, 2013: http://www.dailykos.com/story/2013/11/05/1253274/-Absolutely...

Both cases were eventually settled, leading to Young receiving a $900,000 settlement and Eckert receiving $1.6 million: http://articles.latimes.com/2014/jan/16/nation/la-na-nn-new-...

These two cases are an absolutely horrifying violation of human rights and I'm really glad to see drug dogs being taken to task as part of what led to both of these men being violated.
You may have noticed that the US media was comparably silent about US agencies. German media is relatively silent on German involvement (but reported on the US and France).

That's just what the media needs to do to keep getting interviews with high ranking politicians.

I doubt that the approach is to try to hurt the US, but to limit the impact on domestic relations to public officials.

As for Facebook, that's one of the things that users _can_ do something about (however little the impact of such action is). If there were a French Facebook, the same could apply there as well - but besides Daily Motion (which is public by default), what is there in France where people could adapt their behavior?
Are there marketplaces, in any industry, which take your approach to improving efficiency of matching?
There is also https://chrome.google.com/webstore/detail/pdf-viewer/oemmndc... :)
Is anyone else thinking of the film Demon Seed?
Actually, go check out @Actually_HN on Twitter
> GitLab is really hard to look at. All of our devs are having trouble visually locating comments in diffs. We're always scrolling through the left-side menu looking for the issues tab. It's hard to visually differentiate between items like comments in merge requests. Our eyes just can't find and follow things. Even BitBucket looks better.

I agree out interface can be a lot better. Our first interaction engineer will start September 1 to improve it.

>GitLab-CI has poor documentation on runners, and a rather buggy test runner registration process that doesn't provide any debugging output and produces false positives quite often.

There’s a lot of going on in this field. We are listening to people’s user cases and trying hard with the rest of community to extend documentation that will cover them. I agree the test runner registration should give better feedback if there are failures. False positives shouldn't happen, please create an issue if they do.

> GitLab-CI has no unconditional cleanup directive, like CircleCI does... but if you're re-using a test runner instead of tearing down the server each time, unconditional cleanup is the one thing you need. And no, the Docker executor doesn't solve this because we don't want to test our Docker containers inside Docker.

Agree, we have that on our roadmap: allow to run commands in case of script failure.

> CI is based on commit IDs. You can't run particular CI events on merge requests. For example, this means no way to run integration tests on merge requests.

I don't know what you mean exactly. Do you mean you want to test the code that will result after the merge instead of the commit in the feature branch? It would be a nice option to test the merge of the feature branch with master instead of the feature branch itself (you will have to retest all MR’s every time master is updated). BTW The new build trigger API (to be released in a month) is one of the upcoming features that will allow more build customisation.
Lenders and credit score companies already have enormous influence and access, do we really need to open the door to our friends and family? I suppose this is in line with previous reports of users getting different quotes based on what browser they use — admittedly your friends are probably a better measure of your credit — but it's yet another dive into your personal life by creditors.

I think Facebook's going to find that if your social network can directly impact your money, people are going to behave differently. I can think of at least 50 friends I'd cut today under such a scheme. How does that help Facebook if suddenly its users have fewer connections?
Read eval print loop
It was only posted an hour ago, give it some time. :)
Looks great. Your formatting on the result page is messed up in my browser (chrome on osx). You can see a screen shot here...

https://annotate.driftt.com/view?i=99nffsejxeiittq%2F2015-08...
Ah, thanks for clarifying. I suppose it wouldn't have execute permissions if downloaded from a browser, but it could if copied with Finder from a network share (or directly accessed, of course), so that sounds like a potential vector.
There is a really easy way to evaluate ideas to see whether it would make a good niche startup: does it involve one or more complicated spreadsheets?

If the answer is yes, and the spreadsheet is connected to a problem with currency attached, you've got a decent shot at building a better mousetrap, because the mousetrap they're using now sucks.

If the answer is no, then its probably not a hard enough problem that people are willing to pay for it, or their current solutions aren't a pain point.
As with most things, it works great with the design ideal person in the key positions. All organizational structures can work fabulously well when all you have are good managers and employees[1]. The question then is how does the organizational structure/guidelines deal with bad actors? All management structures include some sort of performance management, both for individual contributors and managers. Generally there is an incentive plan, a retention plan, and an attrition plan. You provide incentives to encourage people to perform beyond their own expectations, you provide a retention plan to keep the people who are delivering day to day, and you provide an attrition plan for helping people who aren't working out into a position somewhere else where they have a chance of being more successful. This is just management 101, the trick though is forced attrition and grain level boundaries (outlines of various attrition pools).

Forced attrition plans set up the dynamic that you find yourself in a pool of peers and you know that no matter what, every year one of you is going to get let go. You don't want it to be you, you know that you can be meeting all of the objectives of the organization and still be "the guy (or gal)" because no matter what, someone is going to get picked. My assertion is that bad managers, ones who embrace behaviors that good managers do not, can find ways to protect themselves at the expense of the good managers. It isn't good for the company of course, but the dynamic is already launched into motion. Given a very small epsilon that bad (in this case unprincipled) managers are probabilistically slightly less likely to lose their jobs, the system will slowly over time select for effective, but morally ambiguous managers. This is a very common evolutionary experiment folks run in simulation all the time. The smaller the epsilon the longer it takes, but it always happens.

[1] Sometimes that leads people astray into thinking it is their organizational structure, not their people, which accounts for their success.
Will the MIR/HIR stuff also help with adding features? I'm thinking of things like non-lexical scoping/SEME regions/etc. which might be easier to implement with it.
Project Astoria Developer Documentation Leak (download)
I have made no judgement about the relative evilness of false positives vs false negatives. I have merely stated that the dog's performance is dramatically different from that of a fair coin and that making that comparison is a misrepresentation of the facts.
3 Simple Tips to Get Valuable Feedback from Customers
Support is available on irc.freenode.net in #icfp-contest, and on Twitter @ICFPContest2015.
My first thought was Nuke :) Maybe because of too much use, in my case.
I also just canceled my Github subscription and moved all of my private repos to a self-hosted GitLab. I did this because I was very unhappy with the politics that GitHub recently decided it wanted to push.

The funny thing though, having my private repos on my own server just FEELS nice. I have total control over my projects. I wasn't worried about anyone "snooping" on them but there's a subtle psychological change when you know your code is on your sever and no one other than you has admin access.

I moved for political reasons, but found the intangible benefits of being the "master of my domain" were a great unintended side-effect.
The Go Playground
"You’ll finally institute a maternity/paternity policy"

This is just sad. So until the founder has a kid, employees don't deserve parental leave. I refuse to believe all founders are so oblivious.
Show HN: Curate, a fashion analytics app that dresses you
www.curateme.co
Official Vagrant FreeBSD Images
>Sure, just brush off a sudo vulnerability.

If it doesn't impact me, and has never had, I will. Just like I don't feel any need to run antivirus and anti-spyware on my Ubuntu box, whereas I do on any Windows box 1 own (3 of them).

>Virus != vulnerability.*

Well, the vulnerability has to be exploited to matter. Either by some virus, some hackers, some malware, creating a botnet, whatever. If it never does, or its always in the form of some trojan needing a stupid user to install it willingly, I don't care about it.

The mere existance of it is not really important. All systems had, have and will have some vulnerabilities.

I'm not some wide eyed believer in the invulnerability of OS X. I've cut my teeth on Sun OS (pre Solaris) and HP-UX, and I've run Linux since 1997.

I just don't care much for hypotheticals.

As for my data, I back them up. I can go back to a clean system, if anything happens, within 10 minutes with rolling archived bootable backups. And I re-install from scratch + dumb data in around 5 hours (I just did it a few weeks ago to try El Capitan).

>Security is like a backup. You only care about it when you have the random bad experience of actually needing it. I'm sure there are a bunch of Windows users who lament turning off UAC now that their files are all encrypted by ransomware. It has nothing to do with "market share" and has everything to do with risk: "UAC is such a stupid feature."

Well, it's kinda stupid. Even with UAC enabled the same users would just have gone ahead and authorized it to install the malware in the first place, not knowing what it is and just wanting to get it out of the way.

Besides, if they had earlier backups of said files, removing the ramsonware and restoring the original files would be a few minutes affair.

>I could leave my keys in my car ignition every night of my life.

And if you live in certain countries where car theft rarely or never happens, you'll be justified too.

There are countries were people sleep and even leaves their house with the doors unlocked and windows open.

Not because theft is impossible -- just because it's rare enough that barely even registers, and they don't feel any need to be paranoid.

It's a healthy lifestyle, even if 1 in 100.000 has something stolen from time to time.

Heck, it's healthy even if it's you that has had that misfortune.
You can't do straight averages of salaries because they're heavily skewed, especially in the case of tech. Either use average + confidence interval or use medians instead. (relatedly, don't use area charts for single statistics)
Ask HN: How does your support/sales/management inspect production DB data?
When you build a new product, there rarely is time to build rich internal websites to query production data and, in my experience, teams always resort to making scripts for the non-development part of the team, which are horrible to support (changes are hard to sync throughout the team, not everyone uses the terminal and so on) or they will hack some basic UI, which takes a significant amount of time and gets thrown away once there is a budget for something permanent.

I build an app called Pagehop (https://pagehopapp.com) and I'm trying to figure out the demand of something I want to add, to remove the pain of the above-mentioned problem. Pagehop is a launcher app you install on your computer, you open it up with a globally assigned key shortcut, you write a query and it displays results and a preview.

I want to build Team Support, which will make it easy to sync scripts (plugins) within a company.

Use-case:

* you are a startup of 10 people;
* virtually everyone needs to be able to inspect data from the/a production DB.

If you use Pagehop, you can build a plugin to search your DB. Team Support will allow you to upload the plugin in your team account and it will be synced to all of your teammates. Whenever you need to change the plugin, you just upload the new version to the team account and the rest of your team will instantly get it.

What you get, using this:

* people writing tools for DB (and any web) queries for support/sales/management will be able to push instantly their work to everyone in the team;
* everyone will have a UI for looking at DB data;
* you will not spend resources building internal websites to-be-thrown-away;
* no need to train people to use the terminal.

Pricing:

* I'm currently thinking of charging $10 / month (per seat);
* There will be an annual deal discount (-1 month fee) AND an additional discount for teams that show interest now.

Thanks for your time and feedback.
NPR | Boston | Full-Time | Local Only

Systems Administrator

We are looking for a talented and knowledgeable Linux System Administrator with DevOps experience: someone skilled in and passionate about Linux, server, network and storage infrastructure as well as automation. We are looking for a person who learns fast and can figure things out independently—can show us a better way of managing, monitoring and continuously deploying complex systems to the web.

We run a highly reliable and scalable Linux-based private infrastructure with a virtualized fleet of servers deployed to multiple geo-locations. We are passionate users of and contributors to the open-source software. Current application stack includes: Java, PHP and Node.js software talking to MySQL and ElasticSearch, as well as: various document databases and key/value stores.

Senior Application Developer

Experience developing database-driven web sites and applications

Experience with either coding custom Drupal modules or Nodejs apps

Experience with RESTful APIs

Intermediate PHP Skills

3+ years familiarity with HTML, CSS, and client-side Javascript

Proficiency with both SQL (mySQL) and NoSQL

Experience with Git

Comfort on the command line, wherever it resides

Desire to learn from and contribute to team’s development practices and patterns

Passion for learning new technologies

Comfortable in an agile environment

Contact: kfleisch@npr.org
The coin flip comparison is bad, but I think the article is saying that the precision is very low (like half) but the recall is possibly high. https://en.wikipedia.org/wiki/Precision_and_recall
Indeed you are completely correct.
If you're using C and encountering memory safety problems, however, then you may want to consider Rust. Moving to C++ from C offers a small safety benefit and a large expressiveness benefit at the cost of a very large complexity drawback. Moving to Rust from C, on the other hand, offers a large safety benefit and a large expressiveness benefit at the cost of a significant complexity drawback. (I think Rust as a language is less complex than C++, and the complexity of C/C++ undefined behavior rules completely vanishes in safe Rust.)
Fire Phone one year later: Why Amazon's smartphone flamed out
How Fast Must a SaaS Startup Grow to Raise a Series A?
"Well then how do I get home from work today?" - Employed people everywhere
When I started reading your comment, I was ready to respond with "yes, one example is non-lexical lifetimes", sooo :)

Another is compiler plugins: it's much easier to stabilize an MIR than it is to stabilize the compiler's internal functions.
>if you have to pay for room and board

As opposed to what, living on the street and eating rats? Room and board is a sunk cost regardless of whether you're going to school.
The Five Characteristics of an Ideal SaaS Company (2013)
The XY Problem
Thanks, this is great! Shame I'm not in Js/Web anymore. I like your TV interface on your site as well. Keep up the good work!
Bots are people too! /r/botsrights! :)
Yes, MIR will help with non-lexical borrows.
Elecampane herb
puts fundamental limits on problem-solving

I wouldn't quite go that far. I don't see any problems that aren't being solved in Javascript, but that certainly doesn't mean that its easy and that there aren't languages that are better suited for the task. I personally don't worry about it too much though, because I also use and love Clojurescript :)
Wikipedia data is available under a choice of open licenses:
https://en.wikipedia.org/wiki/Wikipedia:Reusing_Wikipedia_co...
They're unlikely to sue because 1. They don't want to, making information freely available is kinda their thing, and 2. They'd lose.
Tire pressure monitor systems could reveal driver location
Go library to increase SQL performance and ease development
I think that's what the article is trying to say too, it just does a very very bad job of it.
Some people live with their parents...who waive paying rent while their child is in college.