skysight-inc/HackerNews huggingface dataset:
Using Google Analytics with R
Would it kill news organizations to promote someone's personal brand? The public realizes it's a home video so why resort to white labeling and completely fucking over someone? I don't get it
The Cost of Not Going to College
> Stockholders sued CEO for incompetence

To be fair it was the CEOs brother who sued and was part of a long time feud and not about the new minimum wage.
Yeah that was my point. There are always "experts" to be found who can't imagine a particular exploit working. Reality is not limited to some dude's imagination, so we should have read the initial articles for what they were: "nothing to see here, move along." If we knew then what we know now, such articles would have piqued our curiosity. Therefore, the fact that they were published does pique my curiosity.
Founder of Open Source Hardware Association Shares Her Story
You mean the tens of thousands of $$$ SSD in the topic?

This can be had right here, right now. Upgrade it to modern tech (LTO6), and you get ~2.5TB/tape for about $60/tape. That's still the absolute best capacity-to-cost ratio for bulk storage that you'll get in 2015.

LTO7 is just around the corner and that tops out at 6.5TB/tape.
I'm kind of tempted to fork this, parse the text into a data format (such as CSV), and then write a script to fetch Github stats for each list, particularly last commit time, number of commits, number of contributors, and # of stars...it probably took a lot of time to gather all these links...but a massive list of links with not much differentiation (until you click through) ends up being a limited resource...but it's just a few steps from being something that's easier to filter and categorize.

Edit: Maybe I'll work on it this weekend...half-hoping OP just has it in a spreadsheet and is generating the list from that...
You should take the time and watch the documentary. Its a good perspective of his intentions. You can walk away from it with your own opinions if he did the "right" thing.
Which is why you should put those assumptions in contracts. Preconditions, postconditions and invariants were made exactly for that purpose.

I used to think these were a distraction from actual programming until I realized how much debugging time they save.
But When Will They Go Public? A Profile of the Average Company at IPO
A return to what differentiates Android
This kind of gets at what you're asking. It's more for people who might be better known in their sphere of interest. http://lifehacker.com/tag/how-i-work
I'm curious about an example for (5), mind sharing one?
This is why I always bought a full copy of Windows; because having to install the previous version in order to install the current version is bullshit.
You can download the Windows 7 DVD from Microsoft here http://www.microsoft.com/en-us/software-recovery

They used to have it on Digital River but it's been removed from there http://www.howtogeek.com/186775/how-to-download-windows-7-8-...
The current situation is that anyone can read DNS. If DNSSEC and DANE were implemented, that group would be restricted. In that sense it's better than the status quo, though admittedly only a little bit.

I'm all for implementing the perfect protocol if it exists or there is a known credible path to get there. But to my knowledge noone has proposed such a thing (namecoin maybe?), certainly not in a form that my grandmother would be likely to use.

Do you have a suggestion for how you would like to see DNS evolve to fix these issues?
https://news.ycombinator.com/item?id=10051613

https://news.ycombinator.com/item?id=10053262

https://news.ycombinator.com/item?id=10054978

https://news.ycombinator.com/item?id=10056503
If you're employing a cast and crew at sensible rates, plus the costs involved in set building, lighting etc, skimping on the camera is just perverse.

Edit: Having said that, I'd have to agree that a lot of people buy expensive cameras for no reason beyond having too much disposable income.
No. DNSSEC does not encrypt the DNS. After DNSSEC is implemented, everyone will still be able to read DNS. The major difference will be that sites will store their TLS keys in the DNS, and will thus have vouchsafed them with a new set of CAs controlled by the Five Eyes governments.

DNSSEC isn't an imperfect protocol; it's harmful, a net loss.

And here we have Snowden twice advocating for it.
Cardiogr.am – Heart Rate Analytics for AppleWatch and AndroidWear
If you want updated packages as soon as they are available you can always use ports.
Install? PCs of the future will have Windows 10 in onboard NAND flash (or futuristic equivalent) -- and no other OS will be supported.
A beautiful, super-thin laptop that makes Linux shine
No team is perfect and even great people on great teams are frustrated sometimes. What gets optimized is what is measured.
I'm still not clear on the difference between deep learning and machine learning. Also are there good primer books on machine learning fundamentals?
Other Dan…
Why would I care about 7 letters? No explanation about what is at stake. Yawn.
We call this "dumb, unquestioning" layer the "link layer" (layer 2) in the 7-layer model.

The thing is, nobody lets their computer act based on arbitrary packets coming in from the internet. We at LEAST make them take place in the context of a TCP session (layer 5). More likely you'd require node authentication (a function of the application layer, layer 7).

I have real doubts that manufacturers can/will implement airgaps and read-only circuitry properly. Jeep tried, and now they're doing a recall. Auto companies are only starting to realize that they are actually in the business of computer security now, and it will be years before there's been enough of these recalls for them to come to terms with the magnitude of this task. The fact that they are still operating on the walled-garden concept - inside of which all messages are taken on face value - is ample evidence of this.

Real airgaps imply a severe degradation of functionality from what both consumers and auto companies have come to expect. The days of your entertainment unit being able to control anything in your car will be gone, as will things like over-the-air firmware updates, remote door unlocks, etc. This is just not going to happen in a feature-driven world. And all it takes is for someone to leave one firmware-flash bit unset and the entire thing is worthless. Expecting that airgaps and read-only circuitry will be implemented, and implemented perfectly, every time, is wildly unrealistic, and with that security model the failure case is brutal. Once they're into the garden, they're in.

Burying your head in the sand or bawling about the cost of the fix is pointless. Cars are now connected to the internet and broadcast wifi networks, they can no longer blindly trust messages on their internal networks. That's the thing auto companies have to fundamentally come to grips with, regarding them now being in the business of computer security. If you want cars to be on the internet, validating signing for messages, firmware updates, etc is not optional, regardless of what you would prefer. We need UEFI for car hardware, and we need messages authenticated on a session level. The brakes need to be able to realize that there's no valid reason for the head unit to be sending them commands.
https://en.wikipedia.org/wiki/Whistleblower

"or threat to public interest"

It doesn't have to be illegal.
Thinking outside of the box when you’re stuck on a problem
I think it's a shame how mainstream media suggests that Snowden is a "coward" for not "coming home to face his charges." It's clear that he released confidential docs to reporters and this would be incredibly easy to prove in court, thereby landing him in prison for the rest of his life. I don't know any sane person that would surrender to this type of treatment, considering that he wouldn't be able to defend his actions legally. Stay on the run, Ed. Thank you for releasing this information so that the American public has some idea of the degree to which we are electronically surveilled on a daily basis.
I guess it depends on whether or not his investment was for purely financial gain. From what I've read, it sounds like he was in it for the love of film.

He is directly responsible for revolutionizing the film and TV industries. That's a pretty good ROI if you ask me.
Play GTA V in Ludicrous Mode! (with your eyes)
If you can insert the ESC character, u001B, it's easy. (Though note that it appears as the two characters ^[ in the blog post, so your code should start ESC[5m with only one bracket.)

Unfortunately Sublime wasn't happy with me trying to type it through the Mac Unicode Hex input, but I was able to copy-paste it in, and I was also able to enter it directly in other programs, like GitHub desktop.
Computer animation shows how Mars could look
User Onboarding
Testing on Emulators vs. Real Devices
If you did that, then it would no longer be a list of lists, it would be a list of resources.
A look inside Mondo, a bank that's just an app
It _is_ a subfield of machine learning, based on neural networks and usually the features are learned and not engineered.
Yeah, I agree, they obviously might end up adding a couple of extra companies depending on who applies. Especially for a first pass at something, though, it makes sense to aim smaller and grow from there. Ultimately, it's hard to know what the optimal cutoff is, but I think we're on the same page here.
Other than the occasional technical book, I refuse to buy e-books when reading for pleasure.

After spending all day in front of a screen, the last thing I want is another screen in my face when trying to relax with a good book at the end of the day.
I injured my back in a fall a long time ago, 2 discs are bad. I literally can't stand for more than a few minutes without taking ibuprofen the rest of the day. It's time for standups to end and go back to the old fashioned sit around the table meetings.
I tend to agree for most questions, but feature requests and longer explanations are still useful IMO.

For example, I have an app that allows you to send postcards from your iPhone in which I get several emails a month asking if things can be shipped internationally. It's fairly explicit in the UI since it's for US style addresses, but I also plan on adding international shipping soon.

I have another app that lets you lookup the name associated with a phone number. I get 5ish emails a month asking what 'No results' means. The FAQ is helpful in explaining why this might be the case (skype numbers, burners, etc) that is hard to do in a constrained UI.

Just some examples of how I use the side project myself. Easier to try to answer the questions up front, while I keep refining the UX, than put in an hour a month on support.
Please, Run for an Office
The author uses female pronouns.
I just want to keep a couple of processes running without having to learn the DJB ecosystem

Try this 150-line C program, it's good enough for that one simple task: https://github.com/urbit/babysit/blob/master/babysit.c
Show HN: Ticket Titan - Fight Traffic Tickets
>on the low end of quality and capability

Uhh? It shoots in 5k.

>Most big-name movies of the last few years that were shot digitally were shot on Arri Alexa.

Movies like The Hobbit?

http://www.slrlounge.com/arri-vs-red-dominated-2014-academy-...

(I'm assuming you know more about this than I do, just curious how this fits in with what I'm reading online)
UX Archive
I'm slightly disappointed it doesn't flip over :)

That'll teach to to disobey the signs!
Besides locking your car into a garage, is there anything a VW owner can do to make it more difficult for these types of thefts to occur?
Good point!

At the moment it's iOS only (https://github.com/msencenb/AppFaqsiOS) with Android support in the works.
With compiler-checked format strings (the norm today) printf is just fine.
Demo Video: https://www.dropbox.com/s/uyk4ne4xb13y26i/tt.mp4?dl=0
"You Should be Standing Up." I use a standing desk so during our standup, while everyone else stands up, I sit down. The part about standing forcing people to be efficient and succinct doesn't really apply when you're already standing for 8 hours a day.
I enjoyed the quiz, but I am not a big fan of the positive_effect/no_effect/negative_effect classification, because it hides the error of the measurement.

Instead, I propose to use a slider, like:

> "In your estimate, how does the second response program influence the rate of repeat offenses?"

> Underneath, a slider on a one-dimensional axis, with appropriate labels. For example, on the leftmost side: "50% increase in repeat offenses", and on the rightmost side "50% decrease in repeat offenses".

> Clicking the "reveal" button superimposes the measured effect and its errorbar (this is important!) onto the slider.

That way everyone can see if the measured effect is relevant, or if the measurement error is so large that the study might have missed a relevant effect.

The downside of a slider is that the slider range will influence ("prime") the responses. But I doubt that it would influence the direction of the guess, so you could still extract useful information out of the reponses.
Or even to non-creative workers that have to spend 1/3 their life in that space. You want it to be comfortable. Either by literal ergonomic comfort, or by the creature comforts of the familiar and pleasing.
Closely related is https://usesthis.com/ , which focuses more on text description of people's working tools and habits than screenshots. Joey Hess' interview [1] was particularly memorable.

[1]: https://usesthis.com/interviews/joey.hess/
0 to 1: Getting started with Redux
I think the real game changer was that one could outright purchase a RED system for the cost of renting comparable units.
My POV: Even with extraordinarily high taxes at the higher tiers of the brackets, is that not enough for the rich to live quite well? IFF funding government (for example, if an effective basic income program was in place) was better than everyone doing their own thing, then I see no big loss from flattening the take-home income curve. If they want to live extravagantly, income tax isn't going to be a big hurdle, which is why I mentioned capital gains as well.
Well what does 'goto' do when you are jumping non-locally?

If you
don't save the calling environment, you are trashing the call-stack
leading to undefined behaviour. So this is not really even goto, it's a desaster ... That's why the C/C++ equivalent of
non-local goto, namely setjmp-longjmp, does indeed save the calling
environment. You cannot have non-local goto in a language with a
call-stack otherwise. In that sense, the callcc / throw combination is like goto, with the addition that the place you are jumping to
(declared in callcc) is hidden from the outside.

Likewise exceptions in C++ are a form of non-local jump (albeit
dynamically bound, unlike goto and call/cc) and they do clean up the
stack.

In my drive to give a simple explanation of call/cc, I clearly oversimplified.
I should have made it more clear that I'm talking about semantically
meaningful non-local goto in a language with a call-stack. Thanks for
pointing this out, sorry for the confusion.
> And knowing the complexity and lack of quality in encryption libraries(openssl anyone?), adding more complexity would just introduce even more risk.

What you're saying here is fundamentally that because OpenSSL has bugs that everyone should be using HTTP instead. That opinion puts you in the minority of the technical world, to say the least.

> Only solution i can see that really works is if the true sender "breaks the bus" when it detects a malicious sender is using it's source address, as is done when you get ID-collisions

This is a solution that requires perfect implementation from every component. As long as this is actually a specified behavior, written down somewhere that you have to implement to mark your part as "CAN2-compliant", that would be OK, but I doubt that's going to happen.

In general, though, I oppose requiring every node on a network operate perfectly to maintain security.

> The bandwidth of CAN is quite limited so including cryptographic signatures with proper strength in every message is not an option.

So don't include a signature in every message. Nobody does that in the computer world, you authenticate a session. There's still no reason for the head unit to be opening up a session with the brakes, and the brakes should reject such a connection attempt.

I realize that this isn't possible with the architecture of the CAN bus, but the CAN bus is just not suitable for nodes which are connected to the internet and broadcast wifi hotspots. The failure case of a CAN bus attack is just not appropriate - once you're on, that's it, you can do anything. There's going to have to be some changes, and the sooner we accept that fact the sooner we can start working on a solution. If we need a network with a cleaner electrical source and more bandwidth, that can no longer be driven with 8-bit micros on an unfiltered alternator, well, that's the price of having nice things. We'll have to buy the $1 part instead of the $.30 part to get the power windows onto the network. When you're connected to the internet, blind trust is not an option.

Within a year or two we'd see micros with onboard crypto accelerators anyway, and we'd be back to the $0.30 parts.
He tried. He found out that because he wasn't a government employee, those programs treated him like shit.[0]

> One of the things that has not been widely reported by journalists is that whistle-blower protection laws in the US do not protect contractors in the national security arena. There are so many holes in the laws, the protections they afford are so weak, and the processes for reporting they provide are so ineffective that they appear to be intended to discourage reporting of even the clearest wrongdoing. If I had revealed what I knew about these unconstitutional but classified programs to Congress, they could have charged me with a felony. One only need to look at the case of Thomas Drake to see how the government doesn't have a good history of handling legitimate reports of wrongdoing within the system.

> Despite this, and despite the fact that I could not legally go to the official channels that direct NSA employees have available to them, I still made tremendous efforts to report these programs to co-workers, supervisors, and anyone with the proper clearance who would listen. The reactions of those I told about the scale of the constitutional violations ranged from deeply concerned to appalled, but no one was willing to risk their jobs, families, and possibly even freedom to go through what Drake did.

[0] http://www.cnet.com/news/snowden-not-all-spying-bad-but-nsa-...

Every time I've been a contractor[1], I've been treated likewise.

[1]never been contracted out to a government agency of any level.
Unified and structured logging with Docker and Fluentd
Clapper and Alexander lying to congress is illegal.
Nailing that validation with React JS
I agree with you, which is why I prefer to communicate these issues in full context rather than put smilies on a board and lose said context.

I can barely remember what I did the previous day in the morning scrums unless I worked on one specific thing only, I can also have many happy, so-so and frustrated moments every day.

This is why I feel such a board to be useless. You can't easily gamify or fake authenticity in face-to-face conversations.
So what manufacturers do seem to care about security? If I wanted to buy a car made in the last few years, who is least likely to be cracked?
Show HN: Tree-Talk – a system where objects talk to each other
If the article is accurate, avoiding use of the key fob should make it more difficult for the attack to be carried out (which admittedly isn't very useful).
Have you used a (non-backlit) Kindle or other e-ink display for any length of time? It's difficult for people who haven't tried it to believe, but it feels nothing like staring at a screen. I spend all day in front of a screen as well, but reading my Kindle at the end of the day is no harder on my eyes than looking at a dead-tree book.
well the idea is that you're going to talk to your colleagues anyway for updates, the only person who really needs the daily standup is a manager who doesn't interact with the work all day.

it's like being treated like a child at times as if we aren't trusted with our own time. other departments don't have a daily standup, why is that?
Machine learning is the name of the whole field, deep learning is one of the (currently very popular) branches of that field.
The legality shouldn't even be part of the conversation.

Government activity that is fascistic is usually going to be completely legal or made legal once revealed. We saw the government do this with the USA Freedom Act. Before that, they claimed to have authorization under the FISA and PATRIOT Acts. They do not want oversight, and the "abuses" are actually functioning exactly as intended. This is also why they endlessly lie to our faces about what is going on and don't get fired, even when they have been outed repeatedly.

Also, there's the documented fact [0][1] that whistleblowers at the NSA who go through the "proper channels" ultimately gets you fired, ostracized, raided, and prosecuted. So really, it's a non-starter to claim that they should have reported illegal activity.

[0]: https://en.wikipedia.org/wiki/Thomas_Andrews_Drake#Drake_act...

[1]: https://en.wikipedia.org/wiki/William_Binney_%28U.S._intelli...
I often have, is ports exempt from this quarterly system though?
This is my wish list:

* DNSCurve
* Certificate Transparency
* TACK
* HPKP headers
* HSTS headers
* TLS 1.2 minimum
* EdDSA TLS certificates (Ed25519 / Ed448-Goldilocks)

Implement all of the above, and you've obsoleted any argument that DNSSEC advocates can make.

Most of the people who I've seen advocate for DNSSEC are graybeard traditionalists who want centralized control, not cryptographers or security experts.

A decentralized system like Namecoin, but more like Stellar (with EdDSA signatures please) than Bitcoin, would probably serve as an appropriate replacement for DNSSEC. But even that probably isn't necessary. Every sane end-to-end encryption protocol assumes DNS is insecure anyway.
you have only been there 7 months. Unless you agreed, when joining, to review salary after X months, I would probably avoid asking for a raise right now. What I WOULD do, is ask for a chat with your boss or bosses and explain to them:
1) you feel you have performed well and exceeded expectations by X, Y and Z;
2) you know lots of people are leaving and you want to take on more responsibility;
3) you know you have only been there 7 months; and
4) you want them to think about giving you a significant raise in 5 months' time.

Then ask them for their thoughts and what you need to do in order to make that happen.

It shows them you are committed, not trying to squeeze every penny just when they are hurting because of departures and makes it VERY hard for them not to give you a raise at the 1 year mark.

At that point if you don't get what you are looking for, you move away.

Good luck!
There are articles where a guy hacks into it's hard drive controller, which I believe is the gateway to the drive ID and such, surely you can fake anything these days.

So let's spoof our hardware so that Windows still believes.
I understand where you are coming from, really, I do. My eyes are strained too and I recently got a Kindle (purposely without the backlight) and it is amazing. I'd recommend to give it a try - but I can't really speak for the backlit versions.
Could it be said machine learning is more surface AI like quality scores.

Whereas deep learning is going down the creating consciousness route?