skysight-inc/HackerNews huggingface dataset:
And I'll note just for future reference this Ars article: http://arstechnica.com/gadgets/2015/08/watchdog-group-says-s...

As a quick summary, the levels they violate are calculated by finding the level at which there's reproductive toxicity in rats, then dividing by 10. Then dividing again by 1000.

And, the same group "As You Sow" also has a variety of outstanding complaints against chocolate makers for the same thing. The companies there? Ghirardelli, Godiva, Hershey, Lindt & Sprungli, Mondelez, and Earth Cicrle Organics.
With a method called "shallDie", no less!
It is controversial as the farmer was actually doing breeding himself 50 years using his own seeds. His actions were the actions of the breeder.

https://en.wikipedia.org/wiki/Percy_Schmeiser#Monsanto_v._Sc...

"In 1997, Percy Schmeiser found Monsanto's genetically modified “Roundup Ready Canola” plants growing near his farm. He testified that he sprayed his nearby field and found that much of the crop survived, meaning it was also Roundup Ready.[2] He testified that he then harvested that crop, saved it separately from his other harvest, and intentionally planted it in 1998.[2] Monsanto approached him to pay a license fee for using Monsanto's patented technology without a license. Schmeiser refused, claiming that the actual seed was his because it was grown on his land, and so Monsanto sued Schmeiser for patent infringement on August 6, 1998.[2]"

Nobody disputes that it was a case of cross-pollination. He was sued for keeping the results of that cross-pollination. Why shouldn't he if he didn't use the seeds from Monsanto but his own?
Do you honestly not understand why it is problematic for the president of Harvard to try to explain away a political issue he is in charge of and has no business trying to explain away?

I am also amused how salty you are about leftist academics when the very same argument (which isn't very substantial and mostly tiresome) could be rephrased as an assault on economics, which gleefully assume ridiculous things about societies in order to prove liberal or right wing ideas that also happen to be allied to power. But no, economics is completey apolitical right?

Larry Summers was being completely apolitical and acting appropriately in his role as president of Harvard in making that remark. The reason why he came under fire is clear to me, but it's not clear to you. I don't think I could explain it to you. Your post drips with contempt for a certain class of people you do not name but characterize in the same way other unsavory ideologues do.

> yet nobody in electrical engineering ever uses the term

That's probably because electrical engineering is enormously easier to understand than more complicated disciplines.

> Nobody in the physics department who is trying to make sense of puzzling data from some space probe ever consults the critical thinkers in the ed school to get the benefit of their better-trained reasoning powers.

And yet the theoretical physicists who try to push the boundaries of what we understand to be possible quite often employ thinking that has a deep relationship with the processes that underlie more philosophical disciplines. Not all of life or even science is reading bits streaming in from the outer solar system.

And before my ability to perform quantitative or critical reasoning is impugned, I majored in mathematics and ended up in a discipline that hasn't quite been hammered down the way, say EE has been. Somehow I survived such an education without becoming so mean-spirited towards people who study far more difficult ideas than spinors and circuit diagrams.

> In attempting to defend himself, he clearly felt that evidence of his political conformity ("I'm a lifelong liberal with a long record of...") mattered more to the decision makers than empirical evidence of the phenomenon. If the top leadership at Harvard, arguably the world's leading educational institution, believes that other top leadership at Harvard is more persuaded by argument from political identity than argument from empirical evidence, what is it they are really promoting when they so vociferously promote "critical thinking"?

Maybe he's not so good at thinking his way out of putting his shoe in his mouth. Authority does not make you good at everything. Neither does prestige in one particular field.
I love his wristwatch, just perfect.

I hope there's more of this interview computerphile will release in due course. It is a fascinating time to hear about from the guys who -- essentially -- engineered our profession.
> The most important process is acquiring evidence.

Neither evidence nor thought are useful without the other. But people are more likely to be deficient in a manner correctable by training at processing sense data to produce useful and correct conclusions (thought) than they are to be at merely receiving sense data (acquiring evidence as distinct from the thought process of determining what it is -- and is not -- evidence of.)

> Though if observing what you know counts as thought, then sure

Determing what you can reasonably conclude (and what you cannot reasonably conclude) from evidence is not "observing" anything, it is reasoning -- thought.
A solution to Codility Kalium
If it does have 3 radios, that's awesome. They should make that much more explicit. I've looked all over their site, and I can't find anything that confirms this. Everything on their website just references plain old simultaneous dual-band with MIMO antennas.

For me, at least, a 3rd radio will be on the list for my next AP, so I'll take a close look at this one, too.
That was an interesting read!

tl;dr: Bittorrent and extensions can be exploited to cause a reflected DDoS.

The spiciest method exploits Message Steam Encryption(MSE) which combines the dynamic port nature of bittorrent with just-sufficient crypto to make mitigation a nightmare. MSE can get between 4-32.5 times amplification depending on available peers; its robustness makes up for the middling amplification capabilities[1].

Mitigation on the uTP protocol level is as simple(?) as switching to a three way handshake but that would be quite the change for such a widely deployed protocol.

[1]https://en.wikipedia.org/wiki/Denial-of-service_attack#Refle...
I was serious, however the scope I had in mind was perhaps different than what you are suggesting in that:

1) The target is not just women, it's founders (men and women), and specifically founders at incubators where the work effort is intense. That way the scope of the proposal is limited to manageable proportions.

2) We're not talking about any onsite daycare but a very specific case.

3) The main goal is not to "entice women into the workforce" or to increase women in tech (although this great benefit may come as a side benefit) but to disrupt childcare for this particular scenario.

So the important questions are: how would preschool childcare be done different, how can kids really create something useful, can a company use this as a sustainable resource, etc.
Made a quick recording of the game: http://sikhnerd.com/junk/sidemo.html
The only cheap/practical way to do this is to sample a subgroup chosen because they can be measured. Say, YC S13 founders today, or Stanford alumns in a specific group on campus (START?) 5 years later who are in close communication.

The group will not be representative of the total population of entrepreneurs/founders, but the group will give internally high response rate and thus significance for that group. And an ACCURATE survey of Stanford alum founders will actually be more representative of overall founders than a voluntary-response set would be.

You then ALSO ask better questions. That's also bad in this survey, but not the worst part -- the voluntary response bias is.

(I want to be positive overall, though -- it is awesome that you are surveying this. I just want you to do the best job possible.)
Prebid.js – Header Bidding Made Easy
There was another comment (since deleted) and this one[1] when I posted that.

[1] - https://news.ycombinator.com/item?id=10060281
Hi scrollaway, no IRC gateway yet, would love your help designing one. All contributions welcome--ideas, designs, feedback, code, bug reports: http://www.mattermost.org/many-ways-to-contribute/

First step would perhaps be filing a feature request so the community can upvote: http://www.mattermost.org/feature-requests/
Ok, I looked it up and apparently it was an April Fool's Day joke:

http://www.npr.org/2012/04/01/149804404/n-y-preschool-starts...

I've assumed this was true for the last 3+ years. I'm not sure if I'm gullible, or if they should care more about journalistic standards?

It seemed plausible to me because that's about the age I'd start teaching a kid to program. C++ is obviously the wrong choice, but I think a 3-year-old could start learning Python.
SubredditSimulator: Automated subreddit with posts created using Markov chains
It's not that they are "too important" for profit, it's that the supply and demand laws are such that a free market is very hard to establish.

Taking healthcare for example, the incentives of the buyers (patients) and sellers (doctors) are inherently conflicting, as the former seek health, while the latter benefit when the former are sick. Furthermore, the patients very often urgently need help and don't have the time (nor the knowledge) to "shop around".

Or education. The "value" of a college is the increase in lifetime income vs. a high-school education, but given the slow feedback cycle (30 years or so of working) the market equilibrium is trending towards the price of college being the discounted value of all discretionary income of the graduates. This is aided by the US government that guarantees the loans and prevents them being discharged in bankruptcy.

A similar field is also infrastructure.

None of these fields must inherently be constrained by the government, but they need to be regulated in such a way that a free competition is encouraged.
Not that I am the best person to advise you on how to pitch to investors (I run what is disparagingly called a lifestyle business by the VCs), but my experience in pitching in general is to try and look at the pitch from the perspective of the investor. They worry about two things: 1. How are you going to make them money (the 100x return). 2. How are you going to minimise their risk. Your actual technology is almost of no importance.

You need to structure your pitch around these two questions. Go through your deck and make sure every slide and every bullet point is answering the two critical questions. Anything that doesn't answer these questions needs to removed or changed.
and you're on hacker news and not the typical consumer. An out of style status symbol isn't a very good one.

No one is buying beats headphones because of the amazing sound quality.
Ah, but does your landlord ask you to clean the bathrooms as a condition of staying there?
I don't know how I would feel about Google having a device in my house that monitors all my internet traffic, I think they already know enough about me and I'm not sure I'm in a position to I trust them. Made me think of a funny comparison: I wouldn't buy a car or condom from Microsoft.
I am a moderator of several large (300k plus) subreddits. Same username here as there, or also @gmail.com. I'm happy to chat about the challenges of moderating these large communities.
> How do we generalize this solution such that it helps programmers building compiler platforms like LLVM and Roslyn? How will it help programmers researching neural networks? How will it help programmers writing line of business applications? Databases? Apps? Financial backends?

I've given this idea quite a bit of thought. I've been wanting to do something in this space but haven't had the time to work on it yet.

The idea I have proposed but haven't seen implemented anywhere is to follow what I call the "workbench model".

The problem is we are "programming blind". Instead of thinking of programming as a series of abstract steps in a recipe, just start with some sample input and manipulate it towards the output.

When you want to do woodworking you use a hammer, saw, sander, etc and manipulate it directly. It's intuitive and you can see what you are doing. The result is immediate. Modern programming is like writing G-code to run though a CNC machine.

Instead of defining things in terms of a series of steps and trying to figure out how to visual that, flip it around and do it the other way. Pass in some parameters and let the user manipulate it however they want in real time. Record the steps they used to go from input to output (like a macro). There is your function. This also works quite well, but is not limited to, a postfix environment like Factor (or the HP-48 calculator RPN language if are more familiar with that).

Now obviously there are multiple input scenarios that need to be handled uniquely. How do we do that? Simple, run each case separately and use pattern matching to qualify your actions.

Ideally, this would be combined with "first-class citizen tests" (another pattern I came up). Basically, when you define a function you give it some sample inputs for the different scenarios and edge cases. You specify the outputs for each corresponding input. When working on the function you choose an input and then work towards the output. When the output is correct it turns green automatically. This happens in real time as you are manipulating the input values. It also tests the other input scenarios as well. If one or more of the other inputs don't match the required output then you add more pattern matching. When all tests are green your function is done.
I'm thoroughly impressed! AND it's a Golang app!
> but it's actually just a branding thing

I've heard it's mostly a liability thing. When projects like the self-driving car were directly under Google, Google's assets were fair game in any lawsuit over that technology. With the current setup, liability is siloed in each legal entity which gives the cash cow, Google, more protection.

More here: http://www.theverge.com/2015/8/13/9149431/alphabet-google-co...
> It does Americans, not the rich or the poor not anyone, any good if the Chinese can use the fruits of our agricultural R&D for free.

It does the Chinese a bit of good. Arguably, it's bad for some residents of the USA but humanity probably benefits overall. I have no sources for this claim.

> I can drive over to Ted Turner's land in Montana and pitch a tent, and it'd probably be weeks before anybody noticed. But that doesn't mean he doesn't have a right to eject trespassers from his land.

We do have Squatter's Rights, but those usually take most of a decade to kick in. Do you think the laws around GM should have longer statutes of limitations?

> The Chinese can grow corn as easily as we can.

They have more of all of the same resources as we do - land, raw genetic material (crops), smart people, research facilities. But they apparently can't innovate. Why not? We should look to protect our innovative abilities, more than we protect their products.
Sorry, you are hearing things I did not intend. My commentary on how and why things were done during WWII is not intended to define scope of your project. You could just stop at "If you are serious, you could research how on-site daycare was handled during WWII." The rest of my comment is about history, not about your idea.
Why is YCombinator backing Vest?
http://www.businessinsider.com/vest-startup-protects-you-from-losing-all-your-money-in-the-stock-market-2015-8
I have a question. Would I be on firm statistical footing if I started looking for effects after the study, as long as I choose a p-value such that (1-((1-p)^n) < 0.05?

In other words, I run a study to determine if jellybeans cause acne[1]. The result is inconclusive (p < .05). Now--after the results are collected--I wish to check the correlation between color and acne. There are 20 colors. Would it be statistically sound to "correct" for my cherrypicking by setting p = 0.0025? That would result in

1 - (0.9975^20) ≈ 0.049

[1] https://xkcd.com/882/
Pandora is down
baked in browser add-ons shouldn't be a popularity contest. I'm sure a facebook add-on would make tons of people happy as well. Yet you don't have that built-in.
Their core point was predicated on the assumption that I responded to, that being happy to have a certain job is incompatible with being mistreated. Some drivers are happy with Uber but that doesn't mean that Uber is treating them as well as it could or should. Furthermore, just because Uber might be the best solution to a given problem for someone right now doesn't mean that it's an ideal solution. It's great that some people's lives are better because they can work for Uber but they should still improve their practices.

Again, apply this same logic to child labor. "Our family is happy to be able to make ends meet, even if it means our child has to work instead of going to school. We can eat more often than we did before." That's a compelling argument for sending your kid to work, but it's also a compelling indictment of the society that is failing to take care of those people. Ban the kids from working and then figure out another way to solve the problem of their hunger.

As others have said, try asking Uber drivers if they would like benefits and better pay. I've talked to many many Uber drivers, too, and even though they are clearly not being enslaved many of them see problems with various aspects of the current Uber model.
Tiny Habits: A Foolproof Method for Forming Good Habits
They're selling single-stock/index options?
Bezos Assures Employees That HR Working 100 Hours a Week to Address Complaints
Android Repo/Gerrit on your server
OpenPGP with subkeys and card
Reddit definitely makes use of it's CDN and caching for logged out users. Since they make up the significant proportion (exact statistics escape me) of visitors, it's not surprising that's where their effort has been directed.

In contrast, every page load by a logged-in user requires unique database queries for things like vote status on submissions and comments.
Consensys emerges from stealth; www.consensys.net is live! dApps for Ethereum
Thanks for writing up your post. I'd say it certainly added some value that wasn't in the official release.
LuaJIT does not support 64 bit integers. It uses double NaN tagging for storing object references. That's the basic principle of LuaJIT design and one of the most important source of its superior performance. In this matter, it is very similar to JS VMs.

Support for 64 bit integers would require to abandon this model and completely redesign the LuaJIT VM. Mike opinion about that was very negative.

I believe that this was one of the reasons he decided to abandon the project: he was disappointed by Lua creators decision to introduce 64 bit ints and the fact that LuaJIT can't be made Lua 5.3 compatible without rebuilding it from scratch (but that's only my personal impression).
The nice thing about Software as a Service is that you can happily lose any single customer and not even notice it. If you get a creepy one, you can simply go dark and things will take care of themselves.

That said, this seems pretty rare. I've had casual questions at the end of support conversations (which seem only natural given the expatsoftware.com link in the product site footer), and I sometimes get asked how big the team is on sales calls for large accounts. But never anything so intrusive as you describe.

But if it ever happened, I wouldn't give it a moment's thought. Just mark the mail read and go on leading your life.
A practical use for NamedTuples
OK, I'm trying really hard to figure out the $199 price tag. My cheap as dirt N+ router works pretty darn well connecting 12-15 devices at my home. I almost never had problems in years with it.

All the smart services Google offers, work through cloud, like Cloud Print. Not through a router like Airport express. Even Android Wear now supports Wifi so having BLE isn't that attractive to me. All the smart features that can happen with BLE and Wifi combined are always better offered with phone. So I don't see home automation/IoT benefit here either. Phone is a better hub. So what's exactly the point here? The only thing I can think of is security patches from Google. But $199 is very steep for that.

I know it has a bunch of smart engineering and more antennas. But I don't know anyone having connectivity problems that are related to their routers.
One of the major reasons my current organization uses Hipchat is that it supports XMPP. The importance to us is that it allows us to use OTR between users with clients like Pidgin or Adium. As a security company, that is a very valuable thing.
Will Oracle Finally Put Its Tax on Android
Also, it occurs to me that the self reference can be avoided by an epistemologically insignificant dodge: "Are you about to say 'no'?" (This dodge is, I admit, a little dodgy; it admits things like "I wasn't planning to" as a perfectly sound answer. However, I'm taking it as read that we understand all questions as yes / no questions.)
How to deploy a Django site using Apache and mod_wsgi on Ubuntu 15.04
I think the sub-title of the article sums up nicely why this is a non-issue:

> Researchers say Windows machines that fetch updates from an enterprise update server not configured to use encryption are vulnerable to an injection attack.

And:

> The researchers said if network administrators followed Microsoft's guidelines to use SSL by default on the update server, that alone will be enough to prevent the described attack.

Essentially if you use WSUS the way it is configured out of the box then you're golden. You have to misconfigure your WSUS server on purpose, which exposes you to a MITM attack.

Windows has this constant stream of these, where someone will reconfigure the system into an insecure state, report how it is exploitable in that state, and then tech "journalists" will write fear mongering articles about how we're all going to get hacked.

Three other examples just off the top of my head:

- "Steal plain text DOMAIN ADMIN passwords from memory!1!!": Requires local machine admin and reconfiguring the system to enable wdigest for LSA (within HKLM), and a restart, and then finally having the domain admin login. Only then can you steal your plain text passwords.

- "Decrypt Windows passwords in 3 seconds!!!": Requires enabling legacy hashes and you need complete physical access to the machine.

- "You can bypass Windows login by replacing this signed executable with this other signed executable!!!": Requires unrestricted physical access to the machine (inc. no full drive encryption).

Ultimately a lot of people think these are issues because they haven't given it enough thought. If it violates the "The 10 Immutable Laws of Security" then it isn't a security problem[0]. Since if you have unrestricted physical access then you could theoretically re-write the entire OS to extract plain text credentials (since inherently you'll have that information somewhere).

[0] https://technet.microsoft.com/en-us/magazine/2008.10.securit...
Agreed. I came to the comments to post something to this effect.
This is to friends.

I am looking at switching, contract is up this fall. My wife uses a 32GB iPhone, so switching will be expensive hardware-wise for her ($150/$550 depending on contract/no-contract for 5s).

[edit]

Also, I have no reason to believe that the overall experience will be better with any of the other carriers. At this point I'm shopping completely on price as I have no reliable data that one carrier is better than another in my area.