skysight-inc/HackerNews huggingface dataset:
It wasn't explicitly mentioned, but I assume they are referring to a percentage of gross income, not net (after taxes) income? 50% of gross is gigantic, which would be a much higher percentage of your take-home pay. I remember as a student in NYC many years ago, some friends would spend about 70% of their take-home pay on rent, which on average would probably be half their gross, give or take. So I guess the numbers make sense, but that is still hard to imagine.
Just to be clear, unless you're in the margin account beta, "free-riding" is impossible in Robinhood, so users will never be breaking any day trading rules.

disclaimer: this is not legal advice

http://www.finra.org/investors/day-trading-margin-requiremen...

>Day trades can occur in a cash account (only) to the extent the trades do not violate the free-riding prohibition of Federal Reserve Board's Regulation T. In general, failing to pay for a security before you sell the security in a cash account violates the free-riding prohibition. If you free-ride, your broker is required to place a 90-day freeze on the account.
تور بالی
Agreed.

There is a major issue, not sure if in the rest of the world, but in Canada, the service provider has to request, and commonly pay for, the patch to which the manufacturer completes and then the service provider then pushes out to their devices. At least that is how it was when the E911 issue happened, it may be better now, but knowing Telecoms in Canada, I wouldn't be surprised if it wasn't.
The "forced" you so easily dismiss is entirely the point. In case you haven't noticed, people choose when (and if) they upgrade, for a variety of complex reasons. One of those reasons is to wait and see if the early adopters complain of any issues.

The problem of inspecting the code itself is a separate issue entirely, though at least in the area of Free Software that inspection is possiblea, and reproducible (deterministic) will simply the problem. Good luck doing the same with Windows (or any other closed software).

> Rampant paranoia and conspiracy theorizing

Now you're simply resorting to either insults (and/or wilful ignorance).
Nice! Thanks for the tip.
Only in enterprise builds x.X not in Pro..
I should definitly start using Windows 10 Enterprise LTSB again..
Former Facebook intern fired after exposing privacy flaw
So, a security engineer, working at Google, cannot catch that a 4 lines patch is ineffective?
Note that several U.S. states have varying requirements for a cookie/privacy policy also.
Things don't need to be "serious projects" to be cool and worth showing off.
> That Sweden recognise his asylum claim in Ecuador as valid, which the Swedish prosecutor does not have the legal authority to do.

I wonder what recognizing that asylum would do to Sweden's ability to prosecute. If Assange (or Ecuador) is, in effect, saying "you can talk to him about it, but you can't prosecute him for it", that's a pretty cheap trick to avoid the charge.

But even if it's only talking about whether it's valid for Assange to claim asylum to avoid extradition to the US, why should Sweden have to agree to that before investigating a sexual assault accusation?
IANAL.

Short answer: lawyer up or don't get paid.

Longer answer: You don't have any relationship with the recruiter. The client, however, does - they likely agreed to hire you through the recruiter for some period of time. If they wanted to hire you, they should have reached out to the POC at the recruiter's office. They didn't, though, and opted to work directly with you. It's extremely likely that they'll have to pay a percentage to the recruiter, but that shouldn't affect you at all (in terms of what you're owed): they engaged you for work and they owe you compensation for it. Take it to court and see what happens (or don't and probably don't get paid).
It's unclear to me how these situations are not a violation of the Eighth Amendment.

United States v. Salerno: "the government's proposed conditions of release or detention not be 'excessive' in light of the perceived evil."

Stack v. Boyle: "excessive" is "a figure higher than is reasonably calculated" to ensure appearance

I guess it's easy to beat up people who don't have the means to defend themselves. Someone should start an Occupy Justice movement and have everyone request jury trials to cause a system crash.
The CEO Selling Clothes That Speak Internet
The SSDs seem to win there.

https://gist.github.com/akx/61302f35a9a58bd9371d
It would be nice, if it would be that easy.

See my answer here:
https://news.ycombinator.com/item?id=10055866

Can you name examples, where big corporations got "Serious" penalties for privacy issues? I don't know any. I only know, that in Germany, we always say, how important the issue is, but at least under our current government, privacy issues and the officers are laughed at by the big politicians. They might say different, but that is the reality (in Germany, everything is double-correct, until you look under the carpet!).

The trouble is, besides the juristic impact here, when you go on this level, it gets political and many influential German politicians don't want to mess with the US and with big corporations (their motto: "Sozial ist, was Arbeit schafft!"), particularly in the current government! And don't think, that the EU is an independent entity -- the German government likes to make it look as such, but in reality, the EU does nothing, what the governments of the most influential countries do not want.

(I also don't think, that the current German government will change soon -- it is a mess!)
Right, but my point is that if some bit of adware is capable of checking that box without being able to do far more nefarious things (like outright patching/replacing Firefox itself), then one particular symptom of that ability ought to be the least of users' - and Mozilla's - concerns; that indicates an ability to modify the execution state of a program during runtime, in which case probably nothing on that computer is safe.
What would it take to get the w3/html5 folks simply add a src-hash="$algo:$value" to any tag that can load remote resources?

Seems like a low-impact way to significantly boot the usefulness + security of CDN's. If the source page (requested over https, and presumedly not MITM'ed already) declares "I want to load that resource over there, and I expect it to hash to this value", then we get all the benefits of caching + trust that it has not been tampered.
I use google to search the site Quora and find that it works much better than the search that they've built for the site.
Could you not create mock embedded devices?
Is "more frequent commits" really a good thing?
Congratulations on what look a very challenging task. I'm assuming a part of those tests hit a database. How have you dealt with it? I assume that a single instance, even on a powerful bare server could be a road blocker in this situation. A few insights on the Docker/Containerization part of it would also be nice!
That's great news, Solomon - thanks :)
Applying a Logic Analyzer to the Surface Touch Cover
Things like this is why I trust an iPhone enough to handle two-factor auth for banking (in Sweden: "Mobil BankId"), but not an Android device.

I hope Google will raise the security level now that they have reached global dominance, in no small part through lax security (as a consequence to their liberal licensing models).
I am unsure of terms for the SuperBowl, but if I want to watch Motocross online I have hoops to jump through to prove I pay for an NBC channel in my cable/sat packege. I do not have a cable/sat package, so therefore I cannot watch on their website.
Doesn't seem very responsible behavior by the reporter. Google accepted the suggested patches, fixed the original cases. Now some other cases are discovered for these larger numbers, OK, that seems like a new thing to fix next. Not sure why I have to read paragraphs of hate when the company put the suggested patches in already. Seems like just an excuse so they can ride the page view wave.
I thought facebook was located at 1 Hacker Way not Hacker Lane
We currently stream episodes via PBS, so I'd been assuming (perhaps errantly) that this arrangement would continue.
Don’t Overpay for Web Development Rates: A Side-By-Side Comparison
Because there are still sales organizations within these companies whose bonuses are based on driving video revenue. It takes a while for a large company to unroll those organizations/incentives/etc. As it is, the primary customers of their video products are older adults.

But long-term, video is a non-issue. If prices don't come down, the cable providers will move to a la carte. There's just too much content available online via YouTube, Netflix, etc. It will still be a product, but it will be IP-only, cheaper, and offer more granular video packages.
While your point about content providers is well-seen, let's be clear about what we mean by "unbundling." I think the consumer expectation is true a-la-carte, i.e., channel-level granularity in package choice. What Verizon has implemented is packages of bundles of channels, plus a required minimum base package. While this is progress, it is not real a-la-carte.

Personally, the add-on fees and mandatory equipment rental accounted for 50% of the nominal price of my FiOS TV bill. Packages would have barely dented this. Therefore I canceled FiOS TV earlier this year.

By the time the cable providers actually implement a-la-carte, no one under the age of 40 will be subscribing.
Can you help me understand this? They're complaining about a bug in the patch implementation and the patch implementation did not exist prior to the patch; ergo, if Google didn't patch the code, they wouldn't be able to write the article.

Is that not a new bug almost definitionally? Please help me understand if I am incorrect.

I understand the underlying issue which was first reported did not get patched properly, but, if someone found a bug in the heartbleed patch today and disclosed it immediately with the original patch date as justification, I would imagine many would be screaming bloody murder.
Eh, fuck google. They still haven't patched the original stagefright for android 4.4.4 on my nexus 5, and I don't want to upgrade to android 5, which I shouldn't be required to do to get security releases.
There was an Android update pushed to my phone recently. I wanted to know if it was an urgent security fix so I checked the diffs. It's hard to tell but it doesn't seem to be. It's a bunch of fixes to do with video out, SIP etc.

I thought maybe the patch fixed this security flaw. It wasn't clear what it was for from the phone. I had to do a fair bit of digging. Are there any change-logs or release notes for these system updates?
Does RobinHood support ACATS (broker to broker stock transfers) now? At launch, they did not.

Edit: As of July, they still do not: https://support.robinhood.com/hc/en-us/articles/203583765-Br....
I sympathise with your point, but one complicating factor is that when big security vulnerabilities like Stagefright are found a lot of people then turn their attention to that code. Either finding other issues in the same code, or that the patch isn't fully effective. It was similar with Shellshock, where there was a series of patches as more issues were found because suddenly people were looking at this bit of code that had previously been uninteresting.

I'm not sure keeping it secret for long serves much purpose in this kind of situation; the eye of Sauron is already gazing on the code in question. I doubt these people were the only ones to notice that the patch didn't completely fix the problem.
> The person I saw in the mirror wasn’t as likable as I’d once believed

One of the many realizations I've had from doing meditation. The next hurdle is to stop beating yourself up over it...
Well, the rich countries are getting richer. It's just all going to the top 1%.
Gross margin is the income from sales less cost of goods sold, before items like R&D, salaries, capital improvements, etc., are considered. As I said above, Tesla has a positive gross margin, but a major net loss. When that net loss is averaged to units sold (which is a common metric for measuring financial performance in the automotive industry), Tesla has a loss of approximately $4000 to $17000 per car. This doesn't mean that Tesla is actually losing money each time a car is sold, it simply means that Tesla isn't selling enough cars to achieve net profitability.

If Tesla were to sell more cars, its average loss per car would go down (and eventually become average profit per car). Unfortunately, Tesla announced that it's cutting production and sales estimates for the remainder of the year, so that's not going to happen in 2015.
Fair enough, I did not sufficiently qualify my statement. But my main point is that looking at just mortgage vs rent is leaving a lot of costs out of the equation.

If you can get rent for less than the monthly mortgage payment, then the landlord is basically subsidizing you to live there and it's a pretty great deal. Buying in those conditions is a sucker bet.
IANAL either, but I suspect there is a certain period of time (like 6 months) after which the client is allowed to contact the OP directly, even if he got his details originally through the recruiter.
Lazy Sorting in Clojure
So why isn't that checkbox / configuration option / etc. under the same protections? If malware's able to check that box to say "yeah, Firefox, unsigned extensions are okay", then it's surely able to wreak all sorts of other havoc (turning off the pop-up blocker, changing the homepage, redirecting "youtube.com" to "redtube.com"... these are just the mundane things). I can't imagine that Mozilla designed Firefox to be externally configurable by malware running under a user context.
> you're still trusting his server every time you run it.

Is there any way to initiate transfers between two browsers over WebRTC without the use of a server?
It would probably be fairer not to compare Apple's products today with Apple's products from yesterday, but its products today with other companies' products today. As technology and tech culture and users evolve, so too do the interfaces. Now I have not used a Windows computer in a couple of years, but when I made the switch to OSX, I found it much easier and more instinctive to use. I'd probably say the same about a Windows computer from 2 years ago vs. an Apple computer from 15 years ago, which like in this article, is an unfair comparison.
> Lesson learned on not invoicing often enough, many lessons learned in fact.

You should write down summary of what you did for that day.

I had a client HR lady that handle the check that saw my invoice and she was like it seems like I'm getting pay too much for such little work. Nice lady, but she was dragging her feet making sure it wasn't a mistake or if I'm pulling a fast one.

I sent her my daily summary of each and every day I've worked, bullet points of what I did for that day. She stopped sending those silly email and the next email was my check.
I'm not familiar with this stuff either. What price per share is this $500M offer at? Who is selling and who is buying?
Ask HN: How to get experience deploying large scale services
I have 5+ years of .net development experience. All of it is for small to medium sized businesses (~ 100 users per min). I see a lot of senior dev postings requiring "experience deploying large scale services." I'd like to be qualified for such jobs within a couple of years. How do I acquire this kind of experience on the side?
Failover pair with a primary and standby. The primary streams write-ahead log records to standby as they're generated. Some script gaffer-tape to watch for primary failure and fail over. I think we haven't ever yet actually had to invoke this though :-)

This was all cobbled together following the docs. There are almost certainly better ways to do everything we've done so far.

The Postgres is just 9.3 out of the Ubuntu 14.04 repo. Oracle was STUPENDOUS overkill for what it was actually being used for, but MySQL wasn't up to the job.

The heavy lifting for the conversion is done using ora2pg http://ora2pg.darold.net/ Then there's a pile of faff and twiddling and unit tests and so forth. See also https://wiki.postgresql.org/wiki/Oracle_to_Postgres_Conversi...
Seriously, the SD on DTV is bad. Add to that the sport broadcasters using the 'not-so' latest greatest equipment(Canuck NHL teams, the worst) and it looks like you time-warped back to watching TV in the '70s.
Particularly when you look at any company which is growing very fast. SolarCity would be an example where the company is growing exponentially, but the returns are spread over 20 years instead of being realized quarterly.
We're already working with some developers to make personal cloud server apps and really want to encourage more developers to start. There are thousands of apps that need to be written and it's a lot more fun than working in propriety mobile environments!

And it's not just about writing "Portal apps", we want every app that runs on Portal to also run on competing personal cloud server platforms. That's what true decentralization requires.
Moving from vim to neovim
Exactly how resin.io uses support to drive development
SOLID refactoring exercise
(Vanilla JS is javascript on its own, no framework. Its a joke -- all of those features are native javascript features).
That's fair.

Perhaps I am more alarmed by the assertion of the author that they had given 100+ days notice... it came off like they talking about the patch and not the original issue.
[Event] Real-Time Analytics to Stop Data Breach: Demos and Discussion
Ask HN: Tools of the trade
I know, half the year is over already. But there was no "tools of the trade" thread yet. In the past I enjoyed those and I think it's also interesting in a historical context to have them once a year.

So I rolled up my sleeves and made an account to start one :)

What are the tools that you use nowadays?
Well, compare Python's:

for i in range(10):

...with Go's:

for i:=0; i<10; i++ {
}

An experienced programmer might have an opinion about these syntaxes but he can certainly handle both effortlessly. However, when I first saw for loops using syntax similar to Go's, I could not, for a long while, remember exactly what I have to type, and of course the compiler errors along the lines of "expecting some gibberish after some other gibberish" didn't help at all - and not knowing that they aren't supposed to help hurt, because I stared at them, trying to decipher them, instead of guessing that I got it wrong and looking up the loop syntax.

Now if you think about it, Python's incantation is very close to English ("for i in range 10" instead of "for every in the range of numbers up to 10" - you omit some words and you add 3 punctuation characters but it's close.) Go's incantation, if you try to read it, makes little sense ("for i assigned to equal 0; i less than 10; i plus plus [or i equals i plus 1]".) You mention i 3 times which is weird, because beginners actually intuitively expect DRY code (hence Java's AssWiper bill = new AssWiper [and I'm quoting from a toilet door in a CS lab] felt very weird to me for a long while.) You have those semicolons in the middle, and you're supposed to remember the order of these 3 parts - init, compare, increment.

I mean, it wasn't a huge trauma but I felt dumb for quite some hours until I got it.

(Note that i:=0 and then a while loop incrementing i are not nearly as arbitrary because you compose it out of sensible primitives. A Cish for loop on the other hand feels like one big blob of syntax which came out of nowhere. Of course once you memorize it, it's vastly more readable than a while loop because you pattern-match it and you translate it to "for every i from 0 to 10", and you assume that nobody fiddles with i midway through the loop; whereas if you see a while loop, you need to scan all of it because you will suspect that i is being fiddled with in some non-trivial way.)

Also - omitting some parts of the for loop results in syntax which is fairly crazy actually, if you read it out loud. Like for ; i<10; i++ - what's a semicolon doing after the word for?!
Stupid question, but my Mom lives in a really rural area. Pays quite a bit for internet and is charged by the MB. Can we ask Microsoft to pay for their bandwidth usage?

Since upgrading to Windows 10 she's been hit with $200 in overages.
That's a good point. For me though I have had plenty of cars that only last a few months before I drag them to the junk yard. I've used lots of parts from them for cores to offset the cost of rebuilt parts I need to keep another of my cars going. I've also borrowed the car battery from a running car that I'm not using much for art and audio projects. Considering how much some of them had cost another $300 would not have mattered much.
I'm sure if they could easily decide whats necessary, many would secure themselves.
Our testing running infrastructure spins up a pool of database instances on each worker machine, one for each worker process. The test spinup and teardown code handles schema management, hooking into our DB access layer to create and clean up database tables only if they're used by a given test.
No, I'm arguing that just comparing mortgage payments to rent payments leaves out a lot of the expenses involved in owning the property, such as maintenance.
In other words, it is because the tax code allows those with a greater investment in studying the tax code and in playing stupid accounting shell games to pay less in taxes.

It would likely be preferable to instead tie the effective tax rate more directly to those activities that actually address useful economic activity. I am leaning increasingly towards the fairest tax being a function based upon one's increase in wealth (subtracting some fixed amount for actual humans--probably median household income) that asymptotically approaches 50% as your positive change in wealth approaches infinity.

If you earned $10000 and spent $10000, any tax would just have to be offset by a subsidy somewhere else. If you earned $100000 and spent $100000, you're at least stimulating your local economy, and probably making wiser choices while spending your own money than anyone else would in spending other people's money. If you earn $100000 and spend $20000, that leaves $80000 that you didn't actually need to use this year. Everyone else would probably prefer that you had spent it. So maybe you're allowed a tax-free increase of $50000, and you lose $10000 of the remaining $30000 to taxes. If you earned $10M and only spent $100k, you might pay $4.925M for the tax. The same equation would still work for corporations, because paying dividends would count as spending for them. You end up only taxing the winners in the economy--those who are getting richer--and never more than they could reasonably afford to lose.

How could such a system be subverted? You would have to set up a system where you could control property for your own benefit without legally owning it. You'd probably see a resurgence in executive perks, such as company-provided housing and cars. It would definitely blow more air into the education bubble.
What?
If your intention is to apoligize Google, can you do it in a more clear way?
Samsung brings back the hardware keyboard for the Note 5 and Galaxy S6 edge+
I too live in a college town and have felt the same impact of landlords charging insane rates. Right now I am currently living in one where if say some part of the property is damaged or needs replacing all tenants will pay. Even though I don't use it or it is not my fault, the landlord divides the repair bill among all tenets as a "overage fee". So a laundry machine breaks, not your fault but you'll pay regardless.
Haven't we already established that crypto served over the internet is not a good idea (because a malicious actor can own the server and provide bad JS)?

Also, does this actually use the OTR protocol?
Anomalyzer – An Anomaly Detection Package
Extradition is a legal proceeding between two countries with an existing extradition treaty. It only becomes a diplomatic proceeding if extradition is sought for charges not covered by the treaty.