skysight-inc/HackerNews huggingface dataset:
Everything we have been taught about our origins is a lie
No. We won't.
Keep in mind that chess engines are heuristics based hill-climbers (essentially they enumerate all their options, then optimize that process). That these don't respond the way a human mind does is quite understandable.

Deep-learning networks should already be a lot closer to how a human mind would react.
Gaming start up which wants to help gamers create their dream game
I really can't recall. I wasn't looking up!
Which RFC 4122 are you not talking about, the one that came first or the one that came before?
Stefan is not just some random guy on the Internet. I can assure you the relevant folks at Apple know him and most likely he knows them.
So you accept that stifling private enterprise is economically harmful to an economy? How and why did they stifle free enterprise?

If 'free enterprise' has two potential outcomes,
1) 'lose money' (high probability) or
2) 'make lots of money (which then gets taken by the government) leaving you a little bit of money' (low probability)

wouldn't that also be 'stifling' to private enterprise? And therefore harmful to an economy?

Regarding Sweden, it makes more sense to compare things with their natural control groups if available. If you compare North Korea to South Korea, or East Germany to West Germany, you remove a lot of the cultural, geographic and other potentially confounding factors, so the differences in outcome between those pairs are more likely to be related to the policy differences.
React.Component vs. React.createClass
I'm sure we can all agree we can make up shit that can happen till the cows come home. I'm not going to act as if someone robbed me until they do. Hold Esser responsible if someone hacks a large number of people because of what he did. Otherwise, stop living a thousands lives.
There's a comic for this -^_^- http://i.imgur.com/833CgHX.png
Fearless Change Patterns [pdf]
On the History and Future of Cosmic Planet Formation
Wichita State mathematician says Kansas voting machines need audit
Lack of women developers is hurting the industry
There are a few things that have some potential, but then I enter in the ethical part of if its OK to take something I have been paid to built as a base for my own business.

Specially because those few things that might be interesting enough are projects that I developed to give some competitive advantage to a specific client on a specific area, so If turn it into a SaaS I burn them.
This one, albeit local only, was a lot of fun too:

https://www.securemac.com/macosxsetuidroot.php
That looks like decimal to me. I didn't convert it to test, but I see a couple 8s. :)

Regardless, there are valid dotless decimal, octal, and hex representations for every IP address. Library support is variable.
Shit FILIPINO MOMS SAY
Do Big Corporations Hurt or Help Small Corporations? (study)
I am really surprised - "From standstill to about 650 km/h (400 mph), the EJ200 takes the strain." - that EJ200 can only take the car to 400 mph, should not it be higher than that number. Anybody has any idea why it is so low ?
Privacy Badger 1.0 Is Here to Stop Online Tracking
Canadian Filmmaker Fears for Creative Freedom Under the TPP
I seriously wonder if issues that have highly polarized responses aren't some sort of rip in reality.
Yeah I thought I was going to get to read up about the bug; wasn't expecting an access denied since it's linked from their public advisory page.
Easier to read:

Look up Black Sea deluge theory. Black sea was supposedly flooded (a bit later than the actual sea level rise from the ice melting after the ice age), around 7500 years ago, with levels rising up to 70m and turning it from a freshwater lake into Black Sea, and increasing its size 1.5x-2x.

That event is one of possible explanations for the spread of what became Indo-European language/culture/people group, which a good deal of us belong to.

Until the evidence for the Black Sea deluge was found, the Indo-Europeans were theoreticized to have come from area north of Black Sea (it is still so), but I think the initial push came from the now flooded areas.
In related news, ice cream consumption causes drownings.

Spurious Correlation is a good source of these:
http://www.tylervigen.com/spurious-correlations
I don't think there's any truth to this. Because here in Andhra (India) people only eat spicy food and I see most people don't live longer than 70-80yrs. To quantify the spiciness: Most Indians from other states just run away from Andhra cuisine
yup, you completely missed my point. good job.
There're some other options for regex syntax:

https://github.com/VerbalExpressions/JSVerbalExpressions
It was a little while ago, but I think it was because we wanted to use foreign keys, and it just seemed easier to do it directly in sql. We also wanted to use some postgres specific types that weren't supported at the time (range types) as well as a custom data type.

I love writing ruby code, but the extra layer of indirection didn't seem to have much benefit to us in terms of time and effort, and we kept running into features that we wanted to use from postgres that we couldn't use from activerecord.

We do write a separate down migration script.
This article is more than a decade old, but a lot of content is still relevant.
http://web.mit.edu/tytso/www/OPTIONS-HOWTO/OPTIONS-HOWTO.htm...
That would be the wrong conclusion to draw from this exploit. PDFium has had vulnerabilities too.
Cornell's Macaulay Library: world's largest archive of wildlife sounds
“duraation” or change how to track and manage time by your phone
Where the New York City Subway Doesn't Go
With 65 being the average life expectancy in India (vs. 76 in the USA), maybe 80 isn't all that bad? Drop those same Andrha folks in a cleaner, less stressful spot on the globe and maybe they'd live 90-100s?
You definitely can't take code you wrote for other people, but attacking similar problems is usually fair game. Even better, I've seen a few instances where a freelancer agreed to tackle something for a reduced rate with the express agreement that they would also be re-using, reselling that portion of their work.

This struck me as very clever as it was a way to keep cash flow up by continuing to freelance, but also to get that crucial first paying customer who can help guide you in building a product.
> I believe in defense in depth. ... While I appreciate OSX having a strong security model, secondary solutions are desirable too me.

You might want to check out mtree(8) then. It's serves well as the FreeBSD/OS-X Tripwire[1] equivalent.

1 - http://www.tripwire.com
Types of Software Consulting firms-which do you work for? (2010)
Politicians’ entitlements and expenses: help investigate four years of data
What's the difference between 127.0.0.1 and 0.0.0.0?
The proposed ban on offensive autonomous weapons is unrealistic and dangerous
Frogs from Hell: Their Venomous Head Spikes Could Kill You
Third of all teens who meet strangers online are meeting them in person, too
Secret US-Pacific trade pact leak exposes power of the copyright lobby
200 miles isn't all that far for a ham radio signal. I'm not trying to diminish the achievement at all, however.

People interested in RTL-SDR (software defined radio on a USB TV dongle, basically) might like to know that ISS transmissions can be heard on 148.500MHz. Requires a little bit more effort, and a licence, to chat back.
> I'm seriously shocked. This is ridiculous. This looks like possibly the easiest root exploit ever discovered on a desktop OS ...

Ignoring the nonexistent "root" privileges on Windows-95 (which allowed anything to change anything it felt like), also one of the easiest to fix:

mv /usr/bin/sudo /usr/bin/some-other-name-that-you-like-and-there-ya-go
If I'm reading the disclosure right, the injection is into a non-privileged part of the PDF reader. But the PDF reader is loaded from the local filesystem, so presumably that means it has access to files on the local filesystem and can disclose them to a third party. This would be a violation of the same-origin policy, since the PDF is coming from a network origin and shouldn't be able to touch local files.

I'm not totally clear on this though, since usually file:// is treated specially to avoid security exploits. Maybe PDF.js is loaded from a local filesystem origin that doesn't have those restrictions (chrome:// or something equivalent)
I'm John Scalzi and This Is How I Work
11 Images That Capture the Incredible Vastness of Space
I don't have any stats to support my 70-80yrs lifetime claim. It's just my observation. And, I didn't think about how it compares with our national average. Looks like a bit better
Prior discussion: https://news.ycombinator.com/item?id=10017778
Is there a test to determine if the patch is successful?

Edit: as noted in Esser's blog [1]:
$ EDITOR=/usr/bin/true DYLD_PRINT_TO_FILE=/this_system_is_vulnerable crontab -e

I found this test failed in both a patched (10.10.4) and un-patched system (10.10.1) so not sure what these results mean.

[1] https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_fi...
You should be able to deduct the loss, but I'm not sure how that plays with the tax owed, since the loss is a capital loss and you're paying tax on an object of specific value (not a capital gain). It might not simply cancel out.
Yup, It is just a function that multiplies a value by a fixed number.

I just named it n-tuple because it rhymes : quadruple, centuple, but perhaps it was the wrong way to name it.

I was just surprised to realise that there is no limit to the value of n for this type of function that multiplies a value by a fixed number, so I put this on Hackernews.

It was a surprising result, at least to me ...
Anyone can cook. It may be the case that most people cannot cook to the standards we would expect of a proffessional chef, every non-disable adult (and most disabled adults) can, with little instruction, cook and edible and non-disgusting meal, and we generally consider this skill to be something that all independent adults should have.

In this same sense, everyone can, with training, program. It may be the case that not everyone can program at a professional quality, but they can still make simple programs to do the specific tasks.
Does this apply to all server boards or only some?
Download iOS 9 jailbreak Evasi0n9 Include Cydia iOS 9
great article!
Good question. Our lawyer has suggested that anyone exercising options should be prepared to pay taxes on the difference, but it would be interesting to know if you can avoid it if your other income is low.
I am not sure whether Pulsar would anywhere achieve the speed / throughout of a truly concurrent system like JVM, Go, Haskell, and Erlang. I don't see benchmarks posted on Pulsar's website, but I came across this discussion [1] where aphyr and KiranDave discuss about why Clojure/Erlang's model of explicit concurrency (which enabled parallelism) is superior to NodeJs' (implicit concurrency via libuv, and multi-process parallelism via clusters).

From reading the "design" section on the website, to me it looks like Pulsar is an attempt to replicate NodeJs (?) and by extension cannot compete with languages with truly concurrent runtimes?

[1] https://news.ycombinator.com/item?id=4306241
Oh man... when I read the title, I was thinking "sure, x86, whatever, but what OS is this rootkit for?"

Scary.
For quick overview go through: http://learnxinyminutes.com/docs/ocaml/

And: https://realworldocaml.org/v1/en/html/a-guided-tour.html

If you're a Haskeller: http://blog.ezyang.com/2010/10/ocaml-for-haskellers/
Ask HN: Does DevOps have a future?
With all the negativity towards DevOps over here, it makes me wonder if getting my hands into DevOps is worth the effort.

Suggestions, ideas, discussions and brickbats welcome.
Moving from code inside the browser sandbox to code outside the browser sandbox seems like a bad idea. (Chrome's integrated PDF support runs in a sandbox despite being native code, but Firefox doesn't have equivalent native-code sandboxes.)
It's not a private bug, it's a security bug. That means that anyone that is trusted by Mozilla to access this kind of bug, or that is explicitly added to the list of people allowed to access this bug can see it.
Is it a coincidence that newer CPU's aren't vulnerable, or was it fixed because of discussions with Intel?
I'm getting at the fact a shell script with this exploit can be made to look like an "app" and be "double-clickable", and doesn't require any code signing.
DevOps doesn't really mean anything. Do you like working on infrastructure problems and in general working with systems instead of products? The trick is to not style yourself as one thing or another. I like to tell people I'm a problem solver that happens to use code and systems to solve problems. It just so happens that currently the intersection of my interests falls under the heading of DevOps.

Also, why do you care what people think? If you can solve problems then someone will pay you money to solve problems. Continue to advance your problem solving abilities and you'll never be out of a job, DevOps or otherwise. Just to get the point across one more time: Stop caring what HN or any other place says about technology in general and just continue to advance your skills regardless of anyone's opinion.
`instancetype` was a few years ago. I'd be worried if they're only supporting ObjC without any modernisations like that and subscripts etc.

But that's not what I'm talking about. Here they've literally replaced all type declarations with `id` (not just return types where you'd normally see `instancetype`). Seems odd.
Should be tagged NSFW.
This book had a profound impact on my life for a span of 1.5 years
As the saying goes, "extraordinary claims require extraordinary proof". Unfortunately, this article doesn't even have a single reference to back it up, and no indication of where the photos came from.

A quick search indicates that the photo of the Klerksdorp sphere was apparently copied from Wikipedia, whose article on the topic gives a scientific explanation of how these objects can arise through natural processes:

https://en.wikipedia.org/wiki/Klerksdorp_sphere
The inside story of the biggest hack in history
What does this imply?
I have andhra blood. My outer family eats medium spicy stuff. we eat lot of vegetables(we're vegetarians). Average life span about 75 years. There are parts of Andhra Pradesh where they eat too much spicy food. The life span in such areas is less than 65 years. I'm assuming that the article is not referring to this spice level. They're probably suggesting to the average Indian spice levels (which is higher compared to the rest of the world -- especially European and American).
still says domain not active for me. I tried doing a control refresh but still no.
One of my best friends helped invent supersymmetric string theory (knew Heisenberg, Feynman, Schwinger: all the big swinging dicks). He (resentfully) used email when he was still professionally active, and passing LaTeX documents back and forth with colleagues. Since he's retired, he refuses to use communication technology more advanced than twisted pair telephone wires.

I personally have been winding down a lot of internet crap, and have refused to purchase a cell phone capable of doing anything more than having verbal conversations, and have been a lot happier for it.

FWIIW, I also realized a long time ago (longer than Tinder) that online dating is hopeless for anything more than a booty call, and is frankly a waste of time for that as well, at least for me. I prefer not to be the hamster wheel of a dopamine loop. There's always another one. These things are not designed to make you happy: they're designed to make you come back to the website. It's easier to go outside and talk to someone who smells nice.
WTF is DNA Schedule?
"they were able to hack into the Model S and hit the brakes"

This is bullshit right? They were able to disable the engine, but the onboard logic makes sure that the car comes to a gradual stop.
This is a related article on alien life by Nasa

http://www.space.com/29041-alien-life-evidence-by-2025-nasa....

I would love to be able to help build cheap spaceships that can travel to Europa , drill into the ocean underneath it and fish for life in there. There could very well be life in there, and to find it would be an amazing hack ...
That 'fix' is going to break a lot of other stuff.
Many of the sleep specialists that do Sleep apnea studies in Chicago are booked until December.
Surpiringly just one mention of the 83(b) process in this fairly well populated thread. Here's a good explanation of why you must know this to avoid a huge tax bill in case of your stock options becoming valuable some day. https://www.cooleygo.com/what-is-a-section-83b-election/
The difference between poisonous and venomous creatures
Much better to simply buy their merchandise instead.
I'm extremely impressed you thought of checking for private IP addresses - everyone seems to forget that. But as you've described it, there's a time-of-check/time-of-use vulnerability: an attacker could set a really low TTL on the A record and swap it out with a private address between your check and the time you actually hit the URL. You really have to hook into the HTTP client for that check (in Perl, I recommend LWPx::ParanoidAgent; if using libcurl, you can use a CURLOPT_OPENSOCKETFUNCTION callback).
Care to make a citation?
I don't think you understand what the universal grammar is, if you're discounting DLM as merely being "likely based on human constraints," because that's the whole hypothesis of the universal grammar. It posits that there are physical limitations in the brain that force certain structures on language, as opposed to language being completely free form.
It's a good contender, but in 10.2, you could hold down a key in the screen saver lock screen and overflow a buffer, crashing the screensaver and logging you in. Seriously. Not a root exploit but embarrassing.

http://www.cvedetails.com/cve/CVE-2003-0518/

btw, discoverer claims to have written a kext fixing the hole

http://www.sektioneins.de/blog/15-07-07-dyld_print_to_file_l...
What happens when after exercising, you sell the shares for a lot lower than the EV the year after? Can you claim a loss and deduct the loss from the taxable income the year you sold?

Is your tax deduction = #S * (EV - SP)?
Making the best of private methods
It can affect what domain you end up at though, for example:

http://foo:bar.com\@example.com

Chrome/Webkit browsers will go to `bar.com` but Firefox will end up at `example.com` for the same URL! There's a fantastic book called "The Tangled Web" that has lots of examples of these pitfalls.
Well, if that is true, then why is German statistically the country with the highest average age in the world (on par with Japan), even though their food is quite bland?
Python Backend Developer | Budapest, Hungary | Full time | ONSITE

Opp.io - Meetings. Followed. Up.

We are looking for a Python Backend Developer to join our team in Budapest. We are working on a world-class productivity software (still in beta) to help teams and businesses collaborate more effectively. The candidate will take part in designing system architecture and in coding the implementation.

Responsibilities
- Take active part in software architecture planning and specification sessions.
- Implement the backend part of the agreed tasks using Python and MongoDB. This includes modifying and refactoring parts of the existing software architecture and also implementing new parts and modules.
- Regular communication with team members.

Requirements
- candidate must have understanding of the needs to serve a HTTP REST API based web application in a secure and fast manner
- deep understanding and hands on experience with web applications
- experience in Python programming, object-oriented design, HTTP REST API, MongoDB
- understanding of security principles
- comfort with collaboration and open communication
- fluency in English

What we offer
- the challenge to build a world-class software product
- the opportunity of working in a team driven by cultural values
- an environment that supports education and learning
- agile, never-boring development
- employee stock options

jobs@opp.io | https://opp.io/jobs
InMobi - www.inmobi.com | Full Time | San Francisco and Bangalore

InMobi is currently hiring for Javascript Architect and Data Scientist positions.

- Javascript Architect (SF) - http://grnh.se/l4q832

- Software Engineer Intern (SF) - http://grnh.se/gaso28

- Data Scientist (Bangalore)- http://grnh.se/olr42b

InMobi enables over 100 billion discovery sessions on mobile across a billion users every month, becoming the largest discovery platform in the world.
It could be that the flood myths (Atlantis, the floods in the bible and a lot of others) come from this time.

That would suggest that oral knowledge survive thousands of years (a little more than DVDs). It's pretty remarkable.
The PDF indicates this requires ring 0 to work, right? So you can't go from user to root.

However it does mention ring -2 is under the hypervisor, so.. that allows guest->host escape under VT-x?
I have started to write a series of posts on my blog regarding this very topic. So timely question.

> I get that if I leave my startup today I have 90 days to exercise my options.

The number of days to exercise depends on your contract. The typical number is 45 days. Pinterest's number for employees that have more than 2 years of service is 7 years. This number is not set by law, and can be set to anything the founders/investors agree to.

The 90 day number you are thinking of is the law stating that ISOs become nonincentive options when not exercised after 90 days after termination of employment.

> I get that I'll have to pay the agreed 'strike price'

You pay the "strike price" * "number of options you wish to exercise"

> Would I be paying tax as if I'd made capital gains in the amount of the delta between the strike price and the stock's value today? Would the stock's value today be based on the company's valuation at the most recent round of funding?

Assuming you were awarded ISOs, you do not owe capital gains tax under "regular income tax" upon exercise. You only owe taxes upon sale of your stock that you have attained through exercise, at some future date.

However, depending on your amount of gains, other income, and your effective tax rate, you may owe tax under AMT. Consult a CPA with experience in this. It should be simple for them. (I believe you get some tax credits for this AMT payment when you end up selling your shares in the future)

The company's stock's value is set by the BoD meetings. This may or may not be the same as the previous round of funding.

> If the company goes on to raise more VC funding, would I be liable in future years for the 'capital gains' on this stock?

You are only liable for "capital gains" when you sell the stock.

> If the company went on to fail, would I be entitled to tax breaks for loss of stock?

Good question! I hadn't thought of this one. My guess here would be "yes", you would be able to claim a capital loss equal to the amount of money you paid to acquire your stock.
Computer Go Mailing List
So I sent a request to join the computer Go mailing list , just waiting for a reply now ...
Totally. When I mean to get my heat on, I don't go washing it away with milk or water.
The Thriving World, the Wilting World, and You
My personal experience is mild elation and a brow sweat, best case. I can easily believe capsaicin has anti-depressant properties.