skysight-inc/HackerNews huggingface dataset:
I run multiple exits and consider much of what is written about the risks of running exit nodes to be overblown scaremongering, so it is nice to see an article about the actual reality of running exits: it's boring.

There are legitimate fears for people living in certain countries but many of the people handwringing about it aren't in those countries.
More precise quote from the Nature article: "... Yitang Zhang ... finds that there are infinitely many pairs of primes that are less than 70 million units apart without relying on unproven conjectures."

I agree that there is a difference between "twin primes" and "pairs of primes".
Tangentially, there are studies that state that the information rate (information per time) is about the same in all languages, and languages with lower information density per word are spoken slower.
> NYCHA has a huge capital shortfall -- to the tune of $18B.
> entire buildings are going to be uninhabitable if repairs aren't made.

This isn't the problem. It's the solution. Those buildings will become uninhabitable within a few decades. They will be torn down. The land will be sold to developers, with stipulations of affordable housing as part of the deal.

Mixed housing actually works. It actually has a measurable effect on the income of those residing in it.

"Projects" don't work and they truly deserve their reputation.

As far as the raw numbers of affordable housing being made available, the city has a lot of leeway in terms of pressuring developers. Virtually every building needs a variance of some sort. They can easily grant those in return for various guarantees.
Poker is a Waste of Time
I should clarify: I am not being asked to offer help as the company lawyer per se (they have legal counsel and I am generally familiar with the deferred payment model)... this is more of a "asking a friend for [free?] advice" situation
Early Adopters for New Social Media
Good suggestion, but I'm looking for something a little more wholesome. Like a hired hitman.
For your web inspector console:

$("body").html($("body").html().replace(/Clyde Frog/g, "the NSA"))

Update: more proper

$("body").html($("body").html().replace(/Clyde[\s\r\n]Frog/g, "the NSA").replace(/\. t/g, ". T"))
Actually, Guix and Nix aren't just package managers, they also provide a fully system configuration management tool complete with the ability to roll-back to earlier versions of the system. You don't need Ansible or Docker when you use Guix or Nix. The same framework for providing reproducible software builds is also used to provide reproducible system configuration.

See: http://www.gnu.org/software/guix/manual/html_node/Using-the-...
Twin primes are pairs of primes which differ by two.
After WWII, through at least the early 60s, the US military discounted risk quite heavily. Human experimentation with virtually uninformed consent was not uncommon. Knowledge of the effects of radiation exposure, and diagnostic methods, was limited. And so they tested on poor people and prisoners.
Wells Fargo – security issue – how to protect yourself?
I'm encountering a Wells Fargo security issue that doesn't seem to have an answer. Any advice is appreciated.

Wells Fargo Executive Office reps tell me that customer accounts are protected by security authentication questions called "out of wallet" questions. The branch manager tells me these are for high security transactions, and these answers should be known only to me.

However, when I call Customer Service (U.S. 800-869-3557) and ask for my "out of wallet" authentication questions, they are all trivial, such as "What is your area code?" and "What is your street address?".

So far, no one at Wells Fargo seems to know how to change the questions or answers to anything more secure.

This seems like a security issue to me. Any comments? Any way to fix it?

Wells Fargo tells me that this issue will get looked at faster if people call in. Call the number on the back of your card, and ask the rep to tell the "out of wallet" questions. If the answers seem like they're guessable or public, then ask to escalate to the "Executive Office" and ask how to change the questions or answers.

Any advice is much appreciated.

EDIT: if you have any experiences with this, and are able to write about them in this thread, that will help because this thread is going to the Wells team to see what they can do to fix it. Or PM me if you prefer it to be private just to me. Thank you!

(Cross-post from https://www.reddit.com/r/security/comments/3fsh29/wells_fargo_security_issue_how_to_protect_yourself/)
skip talk radio, news, social media, etc. Focus on your goals. If your on public transportation, you have many options.
If your driving, you are a bit more limited with options. You can record your thoughts on a voice recorder, or you can listen to books or podcasts about something you want to learn.
Thanks for sharing this. Just a note that the project (including visualizations) is open source: https://github.com/meredithmmyers/model-company
The trajectory of the bullet generally doesn't matter with city ordinances. If you don't have a reason to be using the deadly weapon (self-defense) you generally aren't allowed to use it in a populated area.

I had a neighbor who was shooting his assault rifle into the ground in his back yard (a typical suburban neighborhood). After a few shots, the police were called, and they showed up with an entire SWAT team. Confiscated his weapons and threw him in jail for a couple days. He wasn't waving it around, and wasn't threatening anyone. It was only 3 rounds, actually, but it was enough.
Skateboard parks; amusement parks.
Google has an API for charts.
[1] https://developers.google.com/chart/

I preferred their older image charts which are now deprecated.
[2] https://developers.google.com/chart/image/?hl=en
> symmetric is sufficient for nation-state security

Is that a verifiable assertion? Would love to read more about it.
The percentage of CS degrees awarded to women has fallen by half since the 1980's.
Show HN: WiFi sharing app through QR codes
How to move an island
I am one of these people with a newfound attention to security (I would not call it detail). I was unaware of the ~/.ssh/config param you mention.

Very cool, people like keep me hooked to HN. Keep it up!
After the question of adding this server to known hosts OS X asked me for the passoword of my private key. Is this normal? Of course I refused and got the message like displayed in other comments.
Why I Don't Like Mocking Frameworks
It was a test to test the design.
As a German, I gave up on online contests and giveaways if they are written in English. Luckily I have the ability to see from the language almost instantly if it is available here, but I’d imagine for an Australian or British person it would end up a lot harder.
50 Cent Bankruptcy: By the Numbers
Why was this comment downvoted?
He could just run the code in multiple process. Enough with the GIL bullshit.
Tor exit ;)
> Living on the ass end of Bushwick, East Harlem, Crown Heights, and Coney Island is not opulent, nor has it ever been. All of these neighborhoods are still poor, and while some are gentrifying none of them can be identified in any way as upper class, or even upper-middle class.

Maybe 10 years ago, but the Jefferson L stop is mega upper class nice at this point. Indoor climbing gyms next to circus themed bars next to coffee shops with zen gardens, all within quick walks to public housing. Hell, I don't make enough money to get a lease off the Franklin Av stop in Crown Heights, at this point...
I've seen this demonstrated on github before w/ defunkt's account/email
That study is likely closer to BS than you might think. http://www.wired.com/2009/09/fmrisalmon/
Nix(OS) does configuration management too, Guix(SD) does it too but only for the base system as far as I know. There's no need for ansible on a NixOS system.
If a user could upload their public GPG key to their account (as they can their public SSH key), GitHub could easily verify signed commits, which git itself allows with `git commit --gpg-sign[=<keyid>] ...`.

It would be trivial for them to shell out to `git verify-commit <commit>` in order to verify that the claimed originator has signed his commits with a key tracked by github (by email address, which can belong to only one github user).
It's missing the accent mark, but it's the name of a video/card game.
We use signed commits in the Cryptech project and it works really nice. So much in fact that I now sign all commits for all git repos I work on. It would be nice if Github displayed the signature though.
Maybe a prototype for magnetic roads and hover cars?
It is a Git issue. In any Git repo, you can spoof anybody's name or email. All Github did here is show his Github account instead of e-mail. That doesn't really make it worse.
"Wow, you don’t look like you went to MIT!”

It's a compliment and she should take it as one. Most people that go to MIT don't really care about their appearance (male or female) and spend most of their time in front of a computer or in a lab. When you look like you spend a couple of hours/day on your makeup and your appearance, it really makes people wonder if you are an actual engineer. I would think the same thing if you were a man.

If I took a job as sales and came into work sloppy (didn't comb my hair, brush my teeth, or showered). Should I be offended if someone asks to see a sales person? How about if it continues to happen?

I'm not saying engineers are all sloppy, but you need to dress the part...or people will continue to think you are not an engineer.

I just wish people would stop taking things out of context and making something out of nothing (in this case, sexism).
Worked fine on my PuTTY, got the message after leaving an empty user at the "login as:" prompt
Mercurial 3.5 Released
A checkbox that requires push commits to be signed (you don't have to sign each one, but the top level of any push would have to be signed) would be nice. So would any indication that commits are signed in the GitHub UI. I've started signing my commits to GitHub, but verifying even that a signature is present (let alone correct) requires you to clone the repo and investigate it with commands you'd probably have to Google, as far as I know. No UI visibility whatsoever.
No, not related.
Previous discussion: https://news.ycombinator.com/item?id=9892157
The Distributed System ToolKit: Patterns for Composite Containers
I am not sure why you believe that universally enduring the public's contribution to discourse is morally superior to not doing so, especially on a moderated message board.
Yes one have to be careful when merging and signing. But otherwise it works really well.
Enjoyed the first few minutes. Will check out the whole thing when I get home.
Thanks for sharing!
It's mostly to avoid getting dragged into pointless arguments: https://xkcd.com/386/
Many of the housing issues that New York faces seem similar to what's happening in London: shortage of housing supply, soaring rents, property at ridiculously over-inflated prices. The London market is overun with buy-to-let investors chasing after the same properties as first-time buyers (guess who's more likely to be snapping up those properties and chasing up prices).

The article touches on the importance of neighbours. I think we underestimate how important community is in a neighbourhood. People will always come and go in a neighbourhood, but knowing your neighbours (even if it's simply saying 'hello') and knowing that there is a reasonable number of people settled in your neighbourhood makes a big difference to the street or block in which you live.

Research in the UK has shown [1] that many people who rent feel no commitment to the area in which they rent or don't see the point of getting to know the people they share a street with. Longer, more stable tenancies might change this (much like they have in Germany). Or the ability to purchase their own home (if homes were affordable in London).

Property as investment has had an incredibly damaging effect on the London housing market. Do property investors have any interest or concern for the neighbourhood in which they rent out their property?? If buy-to-let comes to dominate a neighbourhood, what kind of effect does it have on that neighbourhood? Can you ever build a community around such a neighbourhood?

[1] http://www.theguardian.com/commentisfree/2012/dec/09/home-ow...
What observations are made in physics experiments which don't end up expressed as a cluster of floating-point numbers?
I actually watched this the other day on youtube but would highly recommend! It's a very interesting interview about all aspects of scaling at Reddit and Netflix.
This is really interesting. I'd like to use cloud front so I be https
Isn't this just ssh functioning as usual? You can specify which public key ssh should use by updating .ssh/config

Otherwise, what's the harm in other people knowing your public key?
The official response to Boing Boing (the resulting "nevermind you don't have to appear" letter) is exactly what I'd like to see.
Reminiscences of Grothendieck and His School (2010) [pdf]
Just out of curiosity, are those jabber chat rooms public? tptacek mentions some jabber logs of the TLS working group.
There's nothing wrong with your setup. I personally just got a Macbook Pro 13 inch because I wanted to become familiar with the Apple ecosystem, coming from mainly Windows and Linux worlds.

I can honestly say given a couple of weeks, I could be productive on any of the platforms. But it just comes down to preference here.

The issues you mention for manipulating windows - that is "fixed" by installing a Window Manager such as one of the following (some free, some paid);

Free:

Spectacle
http://spectacleapp.com/

Paid:

Divvy
http://mizage.com/divvy/

BetterSnapTool
https://itunes.apple.com/us/app/bettersnaptool/id417375580?m...

=====

It sounds like you gave it a fair shot though, which is fine. Use whatever you are most productive in :)
Signing my commits doesn’t prove that I didn’t do an unsigned one.
Whoa that's really cool!
JAWS the screen reader is still quite popular, though an open-source one called NVDA (http://www.nvaccess.org/) is on the rise.

I doubt that FS will come after this project for trademark infringement, since it's not a threat to them, not even in the same field.
If you're into algorithms try https://projecteuler.net/
I'm not even saying that they did a wrong thing here (I do believe that there are important experiments that can only work when subjects are unaware that they're participating; I don't have a definite opinion on this particular one) - it's just that it's hard to dismiss something as TFH if even the craziest stories turn out to be rooted in truth.
Yes of course, I got ONE interview (coincidentally, yesterday, in a company that makes cashier machines).

And I mean ONE interview over the course of 6 years looking for a job
I love the Stanford Encyclopedia of Philosophy; even though I don't use it as much as I did while I was in school, it's still something I read on a semi-regular basis (especially when I need to look something up).

I'm personally a much bigger fan of curated/academic encyclopedias like SEP as opposed to open encyclopedias (Wikipedia, etc.) so it's good to see it thrive.
Principles of Content Addressing (2014)
I pay $30 for 100mbit, I think it's pretty standard in the Nordics.

My amateur analysis is that the US has a few monopoly companies (with a ton of lobbying power), and these two reasons are primarily why broadband is so expensive.

http://www.websiteoptimization.com/bw/0711/oecd-broadband-pr...
At least at the time of writing, if you had enough foresight and engineering time to set something like that up, you had enough foresight and engineering time to not make your system treat email addresses as meaningful identities.
One solution which has some popularity in other places is corporate housing. So, if you work for ssamsung, for example, then you get to rent from them.

I can see how this can be viewed as negative as only those privvy enough to work for the corps who are willing to build would benefit and takes some of the responsibility from the state, this frees up non corporate housing stock for others pushing up the number of units overall.

Corp housing used to be more common in the us but seems to have waned greatly over time. I think people saw it as the employer taking back your money in the form or rent.
You can dos someone just by knowing their ip or how to get a hold of them. You can also sign up magazines to be delivered to their office address and DOS their workplace.

Public keys are supposed to be public.
In the video you linked, Terrence Tao calls this result "a completely correct proof" (at around 4:00). Pairs of primes includes but is not limited to twin primes.
Let's face facts.

Regulation, Zoning and Rent Control cause shortages.

Few folks want poor folk living in their neighborhood.
No, the other shoe could be that they get a subpoena for all their logs of any form on the Tor machine or any machine connected to it, or something of that order.
> And then someone prints a billion of those QR codes and drops them in bins.

From my original post: [...] as well as provide a unique code for each item so it can't be scanned multiple times.

> good luck being able to distribute the means of making unique QR codes to every manufacturer under the sun without the method being leaked

A registrar could issue one-time non-linear increment codes to manufacturers in bulk lots. The main issue would be a central point of failure, but few people would benefit from a billion 5 cent refund QR codes that can only be registered via a bin using a manual process. Also, codes considered compromised can just be deregistered by the registrar.
How the Lexus Hoverboard Actually Works
A NixOps-like tool for Guix is in the works.
True. But it doesn't mean that your team never has to work until 8 PM.
> in C++ when you put a method in a class, (although implementation details may vary) it works like a function pointer in a C struct

That's true only for virtual methods.

Also to add to what you said, no real way of doing stack allocated objects in ObjC is an issue as well.
I'll bite, and I will follow but what Mr. Helton is doing does not seem very thought out. he is an endurance athlete with demonstrably low body fat. There is NO doctor involved but more importantly there is no demonstrable evidence that Soylent is more, better or different than a glass of milk.

But back to body fat:

"...Low body fat levels can lead to incomplete recoveries after workouts; depleted glycogen stores; nutritional deficiencies that lead to further problems, such as bone loss; decreased performance; chronic fatigue; increased risk of infection; and injury, according to “The Complete Book of Sports Nutrition: A Practical Guide to Eating for Sport.” ..."
Marketing tech: $1.6B of VC in 2015; $4.3B in M&A
Sometimes people are just outright jerks, and it's nothing to do with trying to ignore dissent. I don't really see it here, though.
If I call you a retard it's probably not that insulting to you. But it does cause offence in a large group of other people. And those people were not my target. So the word retard is a suboptimal choice for those two reasons.

The other way to use retard as an insult is to use it against people with a learning disability. I don't think that's what you're defending -- verbal aggression by mostly rich programmers of mostly poor vulnerable people.

> I believe in freedom of speech above all.

Not right to life?
Does it depend on the state if you only record video (no audi)? I think that laws need updating to include video (at least in those states requiring consent for audio).
I agree with you "minimal" risk assessment. However we have all see companies do stupid things. I don't remember off hand if you are REQUIRED to defend a trademark for it to be enforceable.
You're not wrong. If I were managing that startup I would hit the ceiling about hacking JSON into SQLite. That is very unlikely to be relevant to the mission.
Thank you for the feedback, Ramon, AngeloAnolin and Gys. I really appreciate your time.
It does give a strong impression of authority that said user did indeed author a commit. Especially being a link to that user's profile.
Ok, as a total noob, what does this this suppose to demonstrate?
Link to the (paywalled) paper: http://www.pnas.org/content/early/2015/07/28/1502134112.abst...

Abstract: Explaining the variation between human languages and the constraints on that variation is a core goal of linguistics. In the last 20 y, it has been claimed that many striking universals of cross-linguistic variation follow from a hypothetical principle that dependency length—the distance between syntactically related words in a sentence—is minimized. Various models of human sentence production and comprehension predict that long dependencies are difficult or inefficient to process; minimizing dependency length thus enables effective communication without incurring processing difficulty. However, despite widespread application of this idea in theoretical, empirical, and practical work, there is not yet large-scale evidence that dependency length is actually minimized in real utterances across many languages; previous work has focused either on a small number of languages or on limited kinds of data about each language. Here, using parsed corpora of 37 diverse languages, we show that overall dependency lengths for all languages are shorter than conservative random baselines. The results strongly suggest that dependency length minimization is a universal quantitative property of human languages and support explanations of linguistic variation in terms of general properties of human information processing.
I am too building a SaaS app in europe and are looking at getting us customers, here in europe we charge by invoice but in the us we will use either stripe or cleverbridge as payment provider.

Edit: The nice about cleverbridge is that they handle all vat and EU Vat moss - Stripe is faster to setup.
Panelist.io
What are the biggest reasons for not using Smalltalk?
this is really cutting edge stuff, great job. Would be event cool to include polymer webcomponents (on client side) , AWS Cognito for authentication along with this.
How Git shows the patriarchal nature of the software industry
It's funny, but people in NYC rarely get to know their neighbors, regardless of rent vs. own. Cultural thing I guess. Maybe it helps ignore the extremely crowded population density.
Thanks for sharing. I've just started work on a server-free AWS architecture, but instead of using the AWS API Gateway feeding into Lambda, I'm working on static pages with AWS SDK for Javascript (served from S3) talking directly to Cognito, RDS and S3 with lambda for async processing:

https://aws.amazon.com/sdk-for-browser/

I'm surprised I haven't seen more discussion of SDK for Javascript since it removes a lot of the server requirements. Have you considered using AWS SDK for Javascript, or do you explicitly want a REST API as an abstraction layer? The API certainly provides some advantages if you ever want to migrate off AWS. In my case, the lambda functions get invoked by particular events on RDS, S3, or manual/browser triggers instead of AWS API Gateway invocation.
Well obviously you can ignore people completely and downvote as necessary but sometimes it's just better to not have to deal with their comments at all. I mean sure, some people aren't pro-censoring and that's fine, they don't have to - but some people prefer self-moderation to annoyances.
By not doing the commute. I know, it's not always an option. Podcasts that keep your attention ("Mixergy" and "Startups for the Rest of Us" are the ones that do it for me) or some learning on the side (say Coursera courses) will keep you occupied.
I'm pretty sure the behavior would be identical except for durability.
The Age of the Robot Worker Will Be Worse for Men