skysight-inc/HackerNews huggingface dataset:
Context: https://en.wikipedia.org/wiki/Death_of_Alberto_Nisman

Autotranslation with a few tweaks:

> The Trojan sent to Nisman is the same as that was sent to Jorge Lanata [a journalist]

> Personally, I think the same person that activated this to make intelligence of Nisman had targeted Lanata.

> Behind this are the murderers of a prosecutor or the national intelligence or a group of para-intelligence.

> (The e-mail of Lanata was redacted for logical reasons.)

> This is the mail received by the objectives of this intelligence cell.

> The source account simulates to be Judge Claudio Bonadio. Refer to the reception date to make sense of the simulation, which rules out spam or general objective.

>* Attached http://www.megafileupload.com/4Ybp/attacheado.txt .*

> @julitolopez
I don't know if all of this applies to OSX, but I'll answer from Linux perspective. (some of these are in common, I'm sure) There are restrictions for your user that you can set up as root, but your user can't touch. For example firewall, process restrictions, security labels, etc.

What does it mean in practice: if you set up appropriate restrictions and run (for example) `curl http://...` and curl gets exploited via malformed response:

- it cannot write to system configuration

- it cannot write to user configuration

- it cannot spawn shell

- it cannot bind port to get remote commands

- even if it could, it cannot receive traffic, because it's configured as outbound-only

- while it can send data on the same connection, there's not much to send, because:

- it cannot read your browser saved items (password, history, etc.)

- it cannot read your ssh configuration / keys

...

So yes, superuser access is still important, because it can set up defences which only superuser can override. Not many systems use it so far, but the frameworks are available.

I think the biggest impact currently in this area is the Chrome sandbox, but this one can be actually user-activated.
What great timing. I _just_ finished a Minimax algorithm to programmatically play the game of Rota. I did this as fun project to teach myself Golang. If this article seems interesting to you, I would suggest doing something similar.
Soylent found to contain unsafe levels of lead and cadmium
Speaking of data, (to nitpick):

"I’ve been at Amazon since March 24, 2014, which means I have 18 months of data to draw from..."

Um, that's less than 17 months, unless my calendar is broken. They should given their Engineering Leads better calendars.
> the extra resources for OO

Thinking like this annoys me, because it assumes a specific implementation for OO. Are people conflating OO with Java? Are they conflating it with Smalltalk? Are they unaware you can write C in an OO style?

> It's not until the time I graduated college that machines and VMs of managed environments started to get faster than "embarrassingly slow" in mainstream hands.

Yes. People are apparently conflating OO with Java or Smalltalk.
Good point. I think a lot of these sites do per-project pricing only.
Bobby Fischer
I would say so. Pretty much the only Android worth paying attention to is the phone and tablet version.

The market hasn't responded very well to Android TV or Android Wear (wanna guess what the reception's gonna be for Android Auto?). I would think that Google would be very interested in keeping it alive regardless of market response but then again you'd say that about Google Plus.

That said Chromecast is still alive so if your app can support that it's probably worth the effort.
Dynamic animated GIF
So, I was experimenting some stuff and ended doing this, a node backend that uses your ip to find your location, fetch gmaps images and return a dynamic animated gif.

Nothing major, but for some reason people are freaking out, maybe most people didn't think they could be found just by using their IP address or maybe they think that's a hacker's thing.

Wanna see it? http://www.redraw.in/here.gif
http://c2.com/cgi/wiki?DefinitionsForOo

Given the above link, I deny there's any single useful definition for OO: It's been defined and redefined over and over again for decades, to the point people can't even agree on what languages are capable of writing software in an OO style.
Good for them. I'm glad they stepped up to serve the sector of people who wanted increased security when searching the web. Most wouldn't try to build a competing search engine these days.

I've been using DDG since I heard about it.
Not sure where you're located, but if you're anywhere in or near the UK, check out Biurko: http://biurkobiurko.com/

Incredibly well crafted (& in full disclosure: made by a friend!)
I have not uses DDG in a while. Do they still get results from Goolge?
Abiti da sera Lunghi economici,Abiti da sera Lunghi online
Do they teach The True History of Pearl Harbor?
I agree that people should think about the proper tool for the job. And that hype can lead to poor decisions.
Yeah, Colin is good that way. But:

> he understood my side far better than you did (and another who came to his defense, then deleted the remark) and his reply was far more respectful, diplomatic and appreciated.

Holy shit you are a rude fuck. I'm sorry I even tried to be understanding and explain to an aggressive tool like you.

> I'm sure you meant well and I appreciate the good intentions behind your words

I can't say the same for you. It's been a long time since I was so effectively "damned with faint praise".

Edit: regarding mathematics, you are anthropologically an outsider, but you're complaining because you might be looked down upon for that. Well you either join a community or remain an outsider, it's not complicated.
> Is there an ethical issue with flooding the market with replica ivory?

It might lead to people being killed for knowingly or unknowingly passing off fake ivory as the real thing.
I've been writing a web app in rust for a while now (using a different framework though, iron's ergonomics didn't suit me for some reason). Overall I've found it a pleasant enough experience. The reason I like the it is that I write code for a wide variety of domains, from web apps to compilers, and so far rust has been a decently usable language in all the domains I've tried it in. I really like the "one language to rule them all" aspect of it because it simplifies my life - chances are good that whatever problem I'm looking at will either be trivial enough for shell scripting, or will be amenable to a rust-based solution. Narrowing down the language set seems like it could also lead to some interesting interoperability potential, like an easy web UI for a disassembler library or something.

I still use half a dozen other languages on a regular basis, so the dream of being able to really focus on just one is still just a dream. However, rust is getting closer, and I'm gradually migrating most of my work to it when the choice is up to me.
The GP is talking about what OO was like back at the time. What the heck are you complaining about?

There were very few fast OO languages and they were emerging at the time. The most prominent examples of those languages are those languages GP names, and they do not exactly live up to the promises of even contemporary OO research, much less modern research.
Am I the only one who actualy finds DuckDuckGo's search results overall better?

The main reason, I believe, is that Google's personalized search seems to get in the way.

Add to that the ! commands in DDG, and the fact that they aren't eliminating things from search in the same way google is and I find DDG the better choice for search as well as privacy.

YMMV of course, as the word "better" is so subjective, but I'd be interested if others have that experience as well.
The problem with DDG, as much as I respect their efforts and their official discourse, is that you really can't be sure they aren't tracking users based on some secret court order.

For this reason, I still have a very hard time trusting them in any meaningful sense.
“You can never know objective truth, because you’re stuck inside your own mind.”

I’ve heard this argument many times. Supposedly, we cannot know anything about the world because we cannot “get outside our own minds” to verify whether our claims are true.
==========================================

The author has heard this numerous times because it is the fundamental premise at the base of Kant's philosophy and the predominant philosophy today. Fortunately, Ayn Rand has identified this error and blown Kant's whole system of thought sky high. Unfortunately, modern intellectuals aren't wise enough to check their premises.

The essence of the error, that reintroduced mysticism back into Western thought, is a denial of the identity of consciousness (hat tip to Aristotle for identifying that existence is identity and Rand for identifying that that principle applies to consciousness as well). Kant's standard of knowledge is a denial of ALL knowledge, of consciousness as such. It is a demand for consciousness to be aware by no means whatsoever or transcend its means of awareness to validate its means of awareness. This is utter nonsense.

This will be an interesting litmus test for Steve Patterson because as everyone knows, Rand is a sociopath and a philosophic ignoramus. Time will tell.
AFAIK they've never used Google's index: https://duck.co/help/results/sources
Iridium device locations can also be requested from the network based on what satellite/beam communicated through which is "accurate to within 10Km 80% of the time"
Plenty of anecdotes like this, I'm sure, which is why the article. I also had a friend who interned at Amazon who did not want to go back.
You say like C/C++ applications are particularly more resilient to OOM situations. That hasn't been my experience. You can deal with OOM in C/C++, but that doesn't mean it is quite viable. Even popular C libraries just abort when memory allocation failed. Regarding C++, is there really a code that even tries to capture `bad_alloc`? If so, did they test the various OOM situations that the program may encounter? I highly doubt it.

I don't think that the "just panic" strategy used by Rust is pretty. It is mediocre at best. But I also don't think the way C/C++ handle OOM is great. They produce similar results in practice.
Post-Ferguson Reforms Require Look at Police Unions
Adidas Buys Fitness Tracking App Maker Runtastic
Note that a $5k/mo mortgage means a $1.2m+ selling price, for ~2000sqft. That's still insane (and doesn't include property tax, maintenance, utilities, or any of the other homeowner costs). Imho, anyone is crazy who thinks spending half their take home on a mortgage is acceptable.
This surprises me; what's so special about bittorrent trackers?
The short answer is not all the results. There are many sources. Here's a link with more details.

https://duck.co/help/results/sources
Exactly. Also there was no facebook, twitter, type services. If someone got an account some place to create a website (like say a university professor), that was rather special and they would also use it to host their family's pictures, maybe have a section for his wife's cake decorating hobby and so on.
When Success Leads to Failure
Take it a step further: why is there even still a root user? Separation of privileges doesn't require the user abstraction.
I normally agree with this, but I think it's ok to make an exception when bonuses are paid out in full each year and stock is grants, not options.
I do. (Sort of.)

I want the EU to become a successful federal _economic_ bloc. It already is a semi-successful federal _currency_ bloc. Some bailout institutions based on loan repayments have been created owing to this crisis. We need to go one step further and work out a system of fiscal transfers which upgrades us from a currency bloc to an economic one. We're one step away, that's all. Granted, it's a big step. I don't even mind if it happens covertly in the fine print of some labyrinthine deal because peoples' nationalism is a bogey that should be defeated by foul means as well as fair.

I doubt I'm the only one. I think anybody who calls themselves European first, and their own nation second would agree with me.
Very true. Our biases sometimes even get in the way of creating things that people want.
An interesting quote from his biography page next to his Perceptrons text:

> ... Many textbooks wrongly state that these limits apply only to networks with one or two layers, but it appears that those authors did not read or understand our book! For it is easy to show that virtually all our conclusions also apply to feedforward networks of any depth (with smaller, but still-exponential rates of coefficient-growth). Therefore, the popular rumor is wrong: that Back-Propagation remedies this, because no matter how fast such a machine can learn, it can't find solutions that don't exist. Another sign that technical standards in that field are too weak: I've seen no publications at all that report any patterns that porder- or diameter-limited networks fail to learn, although such counterexamples are easy to make!
It's a good, reasonable, reasoned response. Unfortunately, it's mostly bollocks.

http://www.pewresearch.org/fact-tank/2015/05/29/what-america...

A majority of Americans (54%) disapprove of the U.S. government’s collection of telephone and internet data as part of anti-terrorism efforts,

More broadly, most Americans don’t see a need to sacrifice civil liberties to be safe from terrorism: In spring 2014, 74% said they should not give up privacy and freedom for the sake of safety, while just 22% said the opposite.

Most say it is important to control who can get their information (93%), as well as what information about them is collected (90%).

Fully 87% are aware of the federal surveillance programs;

In most countries we surveyed in 2014, majorities opposed U.S. government monitoring of emails and phone calls of foreign leaders or their citizens.
> ironic given his hatred of mathematics.

Wait, what? Are you going off of a particular polemic of his?

Because it's hard to imagine someone who had to have learned enough math to do string theory, to be a true math hater, even if (I am assuming) he rants.
A lot of this sounds a lot like Google, but with a completely different management style driving the ship. I prefer Google's method, but Amazon's sounds way more "normal" and comparative to any large enterprise. I was an IT senior director at a large multinational until May and managed a large team of devs/SQA/DBAs/analysts and most of the stuff I've read here resonates with my experiences.
Compared to what?
When one says unsafe or safe, it's primarily about type safety and more so memory safety, so it depends if you consider OOM a violation of memory safety.

If you don't have a hard limit in terms of your buffer or memory allocations (and have an unlimited upper-bound) you'll be in trouble sooner or later. I'd argue that it would be a far more robust principle to institute an upper-bound than trying to catch OOM errors.
There's at least one wiki that's built on top of Git:

https://github.com/gollum/gollum
I'd still be surprised to pay for parking. I recently interned in Seattle, and the Bellevue Microsoft offices all had employee parking. Google's office in Lake Union was also attached to a parking garage for employees.
I share the poster's sentiment. OO is a mental box and a lot of people end up with overly narrow definitions or have trouble escaping the box thinking. You can apply the same ideas without language support. It is orthogonal to bytecodes, VMs, GC or even a "class" keyword. But a lot of people have very specific expectations and will have a hard time seeing this for what it is.
Parking is a perk that only some employees take advantage of. The rest take public transit. Why should the employees who choose to drive to work, which is basically the most selfish form of transit, get a bonus, whereas the people who take public transit to work get nothing? Keep in mind amazon isn't located out in the suburbs where land is cheap enough to pave a bunch of it - it is right in seattle.
ANZ Bank New Email Phishing Scam – MailShark
React encourages declarative usage. You declare some data and how it will be rendered in JSX templates, and React does its thing. As a consumer of a library I shouldn't have to care about what goes on under the hood, as long as I know the API and its proper usage.

> Both approaches do. React mutates state too.

Right, but I don't have to concern myself with the stateful system (the DOM). I can delegate that responsibility to React.

As to your other points, I agree that people should put more thought into their selection of tools.
Such a shame. I've no app at the moment but am looking at my options.

The Nexus Player is 99% perfect as a TV box, but it makes no sense the things it misses; like YouTube subscribing. Why would Google cut such a feature from their app?

I have none of the network issues that others complain about and I'm not interested in pulling my phone out of my pocket, unlocking it then waiting for an app to load just so I can Chromecast something to the TV.

I think Google made a big mistake making the app selection so curated. Well it probably would be okay, if they were actually going to curate it on a regular basis and present now content.
I switched to DDG as my default search engine a few months back. Most of the time it's good enough. If not, a simple !g brings up Google's results.
/r/Bitcoin moderation changes over Bitcoin fork
Literate programming tries to make every line of code traceable to English (or some other natural language). It's as hard as writing the same program twice in two languages. Perhaps harder: one is for programming a modified lump of sand. Another is for programming humans. The latter is a lot harder to do well than the first.

Then the question becomes: which one is correct? Maybe it's just easier and cheaper to write in the language the lump of sand understands and be done with it.
It's formally called "Targeted Selection" and is a superset of behavioral interviewing, with some additional structure wrapping it. It works well and is much better than what most companies do.
Darknet Market Twitter Feed
If you can write programs without garbage collection, why should you use it? Because using it makes your life easier?

To me, Rust is easier to use than both Go and Haskell. Regarding Go, I don't like its inexpressiveness.

Regarding Haskell, I'm tired of its various aspects like

1. Insane defaults. `String` being `[Char]`, `-Wall` is almost always necessary, no record types, `import` imports all names by default, etc. Haskell is clearly showing its age.

2. Lazy evaluation. Not only does it complicate inspecting what's going on, but also it leads to memory bloat. Don't say you can manage it easily. I had tried that.

3. No stack trace. No, enabling profiling won't help, because thanks to lazy evaluation the exact location of the error will not be given to you.

So, to me, Rust feels like a "saner Haskell". Having a trait system similar to Haskell's type class, but without many of its warts.

That said, if there's a mainstream language that is more similar to Haskell but uses strict evaluation, I will definitely be sold. Idris is one of the contenders, but it isn't quite mainstream yet.
Unfortunately, and this goes for pretty much every UNIX out there with hardened (grsec) linux as possible exception, not just OSX, once someone has a local user on your machine, it's trivial to get root. On OSX, you don't even need a local privilege escalation exploit, so many other ways based on the way subsystems interact together.

If you want robust security, you will need to forget about OSX/BSD/Linux and look at Qubes OS. It's the best we have right now and nothing else comes close. Alternatively, compartmentalize and segregate (at the hardware level, all virtual machines have tons of host escalation bugs) and accept the fact that you will get owned.
That's a lovely idea in theory, but in practice any recommendations made off three data points are far more likely to discourage than encourage you from ever using the service again.

Recommendation engines require a lot more training (by you) to be useful (to you).

Worse yet, without the modest investment in time, including thinking up a new password, there's a very high risk people will randomly click just to see what the results are, which muddies the water for other users.

In any case, non-identified recommendation source data would need to be kept in a silo until the user identified / validated they were not just fiddling around. And that becomes a major mess to manage the data.

Having said that, I do respect people's right to tilt endlessly at windmills in HN comments.
Its certainly one of those things you have to get used to.

I try to pick it up every few months in hopes its better but fall back on google bang too much and revert.

I'm disappointed they took the privacy route so hard and disabled / didn't implement bubbling for results. Bubbling is a pain sometimes but overall I think it provides much better results especially for those in certain fields (e.g. IT)
I think one reason there is a disconnect between the survey results and reality is that the answers are the answers one gets in an imagined ideal framework. Kind of like asking people if they would rather eat healthy or known unhealthy food. And most people will answer healthy --because that is their idealized answer but in reality it's too much work for many people so they eat unhealthy food fully understanding the consequences.

I think the same applies to the survey. Ideally people don't want intrusive government surveillance but at the same time it's not important enough nor egregious enough for them to mobilize over it, so they let it be --as long as it's not "too much".
Lifelong Kindergarten
C libraries are worse, esp. the desktop focused ones (glib and all of gnome). Network focused libraries tend to be better (lib libevent / libev), and you see people send patches to fix OOM cases since enough people disable over commit / don't run Linux.

In my experience C++ libraries tend to do better because of culture using RAI for everything. And the C++ servers I've worked with most of them had a std::exception handler some where near the top of connection / request handler and deal with it fine. And over the years, the bad_allocs helped us deal with some dumb (but not malicious) clients without going down. In one case the client was essentially causing a multi GB buffering window to happen.

I'd be curious if anybody at fb could share their experiences since it seams like they building a lot of stuff using their C++ folly / proxygen libraries.
The title as written is a smear against Snowden.

"How DDG Rode a Wave of Post-Snowden Security Concerns to Massive Growth"
Thats brilliant, seems well founded in research and well implemented. I really hope that it can continue to scale to more and more places. 445 communities is a smashing success already!
The Boy Who Loved Transit
While Second Reality is a classic. It was not the first megademo. I remember the term not being new in the late 80's on the Amiga and ST

http://www.pouet.net/prod.php?which=1331
http://www.pouet.net/prod.php?which=3119
http://www.pouet.net/prod.php?which=3242
http://www.pouet.net/prod.php?which=3972
This is your MSc. thesis that you are referring to? For anyone else interested:

http://thesis.eur.nl/pub/30170/MA-Thesis_Arik_Beremzon_41620...
Some even use overhead projectors
https://youtu.be/LCIsIfEOEI8
You are also probably not a senior leader at a major tech company. This guy isn't some random junior developer.