skysight-inc/HackerNews huggingface dataset:
I, of course, whole heartedly agree with this. I think the author could be a bit more helpful though in suggesting that people run for an office related to their town or village first. To learn what "running for office" is all about. And that they use that knowledge to run for higher office as they get more experience with it.
System test running 24 times faster after 2 performance improvements
> It is like that, but with stronger guarantees and less overhead.

Smart pointers in C++ are very slim, which overhead are you referring to? And which are the stronger guarantees?
I think how a continuation is represented is an implementation detail that depends on many things, one of them being the ambient programming language and typing system (which may enforce e.g. linear usage of continuation).

But in all cases what you do with a continuation is the same, you define a point in the computation (that's what callcc does) that you can go back to (by executing throw).
That's why I like to explain callcc / throw by analogy with goto.

Once that behaviour is clear, the question of representation is natural and comprehensible.
90 seconds per person?

I've never seen any meeting go that fast.
The interview would've probably been a lot more fruitful if questions centered around what he knows about the surveillance capabilities of the agencies he was involved with, in technical detail, than asking for his opinions on technology policy, an area where he is admittedly not an expert.
Show HN: GUID API
We run about 20+ parallel projects in the company, with teams ranging from 6-10 to 40+. Retrospectives are a terrible way to share information in such a context as teams get formed and changed all the time. I frequently spend time helping 3-4 projects every week on top of my assigned project.

We simply don't wait until the end of a project to fix problems, there's often too much at stake. Just like we don't wait the next day's scrum to fix an issue - we use scrums to make sure everyone is on the same page. We instead have monthly all-company short presentations by teams wanting to show their results during lunch time as well as more focused monthly presentations on company time.

It's not perfect, but I'm pretty sure it beats months of smiley faces. What does it even mean to aggregate smiley faces? I fail to see the value of saying "we were happy 75% of the time during the last project" without understanding why.
That's a great suggestion @donall. I'm already crawling the web for information and not just reviews, but the location database would be awesome. Is there a specific class of program you guys have for free data?
I'd be more worried about eating chips of (sharp, hard) enamel than any toxins - the firing process is not going to leave much other than the ceramic behind.
The whole article sounds funny.

"VirusTotal had no immediate comment."

"[...], Kaspersky denied using this technique. It said it too had been a victim of such an attack in November 2012, when an "unknown third party" manipulated Kaspersky into misclassifying files [...]"

"The former Kaspersky employees said Microsoft was one of the rivals [...] They declined to give a detailed account of any specific attack."

"In a subsequent interview on Wednesday, Batchelder declined to comment on any role Kaspersky may have played in the 2013 printer code problems or any other attacks. Reuters has no evidence linking Kaspersky to the printer code attack."

"Avast Chief Operating Officer Ondrej Vlcek told Reuters in April that he suspected the offenders were well-equipped malware writers and "wanted to have some fun" at the industry's expense. He did not respond to a request on Thursday for comment on the allegation that Kaspersky had induced false positives."

So, no one says it's Kaspersky, someone called "former employees" says it was, but can't provide any example...
Agreed, did you see https://petitions.whitehouse.gov/petition/pardon-edward-snow...

> If he felt his actions were consistent with civil disobedience, then he should do what those who have taken issue with their own government do: Challenge it, speak out, engage in a constructive act of protest, and -- importantly -- accept the consequences of his actions. He should come home to the United States, and be judged by a jury of his peers -- not hide behind the cover of an authoritarian regime. Right now, he's running away from the consequences of his actions.

Ridiculous. They literally don't know what "whistleblower" means.

"Go to prison because you deserve it in our clearly unjust system" ...the gall.
I've experienced this. I suspect however this has rapidly become the same for JS projects as well.

I'd chalk it up mostly to a fast pace of Ruby-land but the reality is it is hell and the complex tool chains we deal with today make it exceedingly difficult to pick back up side projects at times.
Being the Machine: A Student's Journey to Becoming a Human 3D Printer
But there are a few fully automated lines. The Taipei brown line is fully automated, granted its not the highest volume line, but still very busy.
Happy to see the GTI not listed on there but why would that be any different from the other models? You think they would use the same across the board.
Building Distributed Systems with Apache Mesos
Great idea. In fact, you could sign up right now - and get notified via your phone/email when it launches too. There will soon be non-location specific functionality available.
What I want to know is why the car will continue to accept 100 trial keys per second after the first 100,000 attempts failed.

Shouldn’t there be some kind of exponential back-off after failures? If after the first 1000 failed keys it would only accept e.g. one new try every few seconds, it would then take 2–3 orders of magnitude more time to brute force.
Highly recommend the Coursera Course called "software security".

https://www.coursera.org/course/softwaresec
On the ambiguous line between view and controller: a piece of code belongs to the controller when it touch the model, and to the view when it touch the DOM, the corollary being "don't write code that touch both the controller and the model". Put that way it doesn't seems that ambiguous.

The fact that react suggests you organize the views in a component's hierarchy has nothing to do, imho, with people calling the models from those components. It's just bad practices, whatever is the view library being used.

But I get your point nonetheless: flux & all do try to make it clearer that react should only get called from events and update the DOM as a consequence.

For the record, there's also good things being done in that field by the clojurescript community (Om/Reagent for example).
Of course. The idea is for clients to be able to input their ticket info and immediately see the legal fee of the available law firm(s) to fight the ticket. The user may choose to research the law firm(s) further or hire the law firm, but it is always the decision of the user whether or not to hire a law firm to fight their ticket.
The "plain vanilla" cars are the ones with the highest theft rate: http://www.forbes.com/sites/jimgorzelany/2014/08/18/the-most...

It has been this way for about two decades. It is much easier for thieves to slice-and-dice a common vehicle into hard-to-trace parts, since the hot parts will disappear into a sea of legitimate used and reconditioned parts. High-end cars are comparatively rare, and thus harder to dispose of discreetly.
And in the United Status, 95% of USGS maps use NAD27.
What I meant is that at most he could loose one week's salary. As long as that is less than 3k it's a net win.
Show HN: HelloBacker – Matching for event planners and sponsors
it looks pretty good. How about database, can it connect to database like MondoDB, and make custom request?
Standing up is not dogma. Every description I've ever read of standups explains why you should actually stand. Read the article.
> "David Sheets did some work on rebuilding portions of the protocol in MirageOS: https://github.com/dsheets/ocaml-dnscurve . This level of interproject coupling is just fine by me -- the whole point of library OSs is that we can pick'n'mix these things much more easily over the years, and that's working out fine."

Yes, collaborating in that way seems like a good approach.
A search shows :

https://www.linkedin.com/in/millerj2
Show HN: VR Dinos – Unimersiv's new VR educational experience
I am happy to see a link to the list itself is contained within the list. I can have a sound sleep.
Did you see "Thanks to Jeff Miller (@JeffMiller) for @newsyc20" on https://github.com/ducu/twitter-most-followed

You posted that URL just minutes ago so maybe you missed that sentence.
I am fine with haters who've done their homework before passionately hating, but you are not one of them.
Version 4 UUIDs.

[ being those with bits 48-52 set to 0100 and bits 64-66 set to 10 ].

This uses python 2.7's os.urandom ( on GAE ).

Change /16 to /64 to get a padded base64 encoded GUID/UUID.

In the seemingly unlikely event that this exceeds its free quota, it will become a for-pay API.
This whole article feels very, very shaky to me. I'm no Kaspersky fan but nothing about this feels very convincing.
What if your work consists largely of research and experimentation? No tasks or stories, mostly many long spikes.

What if research and experimentation happens over a period of time and only later there is a period of focused prototype development?

Have you experimented with alternatives to daily standups? Standups three times a week? Changing the routine based on the stage of the work (research vs. development for example)?

What if standups are misused for micromanagement?

If there are so many ways standups can go wrong maybe its not a good generic tool after all?
Yes, though for someone as spoiled as me working on 5k/8k hyperlapses with D810/5Ds and getting absolutely gorgeous RAW footage where post-processing filters can do miracles, I vastly prefer shooting 4k RAW, which puts a lot of strain on technology, be it camera, storage and computer as well (nothing on the market is fast enough and no amount of storage is sufficient). The results when viewed on a UHD TV via 4:4:4 mode are phenomenal though. Of course, with 4:2:0 H.264/H.265 it doesn't make much difference and for scaling it down to FHD ProRes 4444 is sufficient anyway.
Yeah, I have to agree, at least as far as the headline. Kaspersky is a serious and respected vendor in the industry and has been for a long time now. Identifying them as a "Russian antivirus firm" in this context sounds a little jingoist to me. (e.g. how often do you hear about "British CPU vendor ARM" or "Abu Dhabian semiconductor giant GlobalFoundries").

That said, the trick is pretty vile. Deliberately polluting public malware databases hurts us all.
Police officers are not infallible.
Standup has exactly one useful purpose: to generate Common Knowledge (see: https://en.wikipedia.org/wiki/Common_knowledge) that everyone is pulling their weight and defuse a culture of suspicion and politics before it starts. (That doesn't mean that it always achieves that. I'm only saying that that's the only legitimate reason to have a stand-up.) Often, a daily status meeting is a necessary evil that you put in place so people don't start asking the "Is Bob really doing anything?" sorts of questions that lead to a toxic culture.

The rest of Agile can die in a fire.
The only thing I miss when using my kindle is going to the used bookstores and hunting for treasures (generally obscure sci-fi for $1 per paperback).

But my kindle 4 lets me stay in sync with my phone (which I can use in the dark and outside the house unprepared, both of which come up a lot). So I tend to read kindle books still, despite a rather large collection of unread fiction.
Sure but, as redblacktree points out, you usually don't leave it behind in conjunction with your passport data.

Also, with RFID you give an attacker more options for gathering more data without anyone noticing. For example at the entrance to an airport you might gather hundreds of identities per hour.
This seems pretty crude. Particularly in that it ignores visceral fat entirely. Seems like a huge sacrifice in the accuracy of the output. The only acceptable application I could think of for a model with this level of detail would be for EA's "The Sims" game.
google already has live streaming. They do it here and there, like music festivals, etc.
No. We can't agree. Accidents for instance happen, and even if you're at fault it should be your choice to get a lawyer to help reduce your costs.
You seem to be selfishly focusing only on the benefit to you. You are (or should be) part of a team. Even with your low 1-2 times a week, with 5 person team that is 5-10/wk. In otherwords every single day.
Adopt a Phone Box – Community Heartbeat
Any details on how this process works?

Cursory searching reveals the procedure for manually adding blank keyfobs to Audis, but what you describe above seems... a fairly technically complex system to take on faith. (Given the article we're talking about)
In the future, your Internet-enabled fridge will get hijacked by Russian spammers ... if the future is 2013. http://www.bbc.co.uk/news/technology-25780908

Whenever anyone says "Internet of Things", reply "unfixable Heartbleed everywhere forever."

Sysadmins will be in work until we're 100 if we want to be, cleaning up after this rubbish. Like elderly COBOL programmers, making the big bucks after retirement.
have you tried arch? sounds like you would like it :)
Beginner's Gide to Proof-of-Work algos Part 1 (https://bytecoin.org/blog/proof-of-work/) and Part 2 (https://bytecoin.org/blog/proof-of-work-part-2/)
Which is why many people are installing their own dash cams.
They will come with the promise of legacy support without the necessary switches to implement said support.
Instead, I want to build a tool that constantly scans your plate number for tickets and auto-pays them as soon as they show up to avoid late fees.
...Because I deserved every ticket I've ever received.
Kaspersky Antivirus accused of creating fake malware for over 10 years
I think the pensions are a sizable part of their expenses. If they automate their retired workforce age out and there is no endless retirement pool to contribute to. So this would be a significant savings.
Really cool work - nice going! Great application of Deep Leaning.

I'm really curious about the Whatsapp and Facebook messenger integration, given that they don't seem to have published APIs. How did you do it?
Thanks. Found that page but didn't see the credits!

No sign of any source code yet. :(

https://twitter.com/JeffMiller is surprisingly blank.
whats missing is "bash" and "prompt". would love ways to improve bash,zsh,etc

nvm, theres this: https://github.com/alebcay/awesome-shell
Async standups may be a good alternative, you can do them over email or on Slack/Hipchat/Flowdock.

Different rules apply in async standups than in meeting-like standups. There's more focus on what your daily status can bring to other people.

I wrote about some tips here: http://andrzejonsoftware.blogspot.com/2014/05/async-standups...
I think the "Developer" tier has the most promise as a selling point. For apps you just want to get out there, I think some developers would be willing to pay 4.99 to quickly slap on a FAQ section. The reasoning might be "I'll do this for now, and implement my own solution later". Being able to update the FAQ instantly would be very important at first and is definitely worth 5 bucks. Very cool stuff!
Thinking About Pregnancy Like an Economist
Show HN: Mapping the Internet
Google Unveils New Chrome Operating System for Business Customers
> Since when is 'fun' the bar for frameworks?

Since Ruby on Rails
Here's to keeping your brain entertained
From what I understand, it's not that they are integrated. Those apps allow to send and receive SMS. In doing so, they can simply send the queries via SMS on those apps, allowing to receive the result there.

Edit: I was wrong!
Data, Information, Knowledge, and Wisdom
European Entrepreneurs Launch StartupBoat to Address Refugee Crisis
It wasn't the "security-industrial complex" that caused a security-incompetent vendor to use legal threats to try to suppress disclosure. That's the story here.
>In one technique, Kaspersky's engineers would take an important piece of software commonly found in PCs and inject bad code into it so that the file looked like it was infected, the ex-employees said. They would send the doctored file anonymously to VirusTotal.

>Then, when competitors ran this doctored file through their virus detection engines, the file would be flagged as potentially malicious. If the doctored file looked close enough to the original, Kaspersky could fool rival companies into thinking the clean file was problematic as well.

I don't quite understand - what about hashes? VirusTotal doesn't work as they say it works.
History Shows Time to Sell Dollar Is Now with Fed Near Liftoff
Redis.io is down
The secret of successful multiplayer games
This attack is against the RFID immobilizer for the engine, which means an attacker would have to break into the car, break the steering wheel lock and break the physical ignition lock prior to starting the car.

The full paper here: https://www.usenix.org/sites/default/files/sec15_supplement.... has a lot better detail.
This is what I was remembering: http://www.securityfocus.com/bid/6940/discuss

There was (and might still be) an escape sequence that allowed setting the xterm title, and another sequence that caused that title to be sent to the terminal AS INPUT!

I'd imagine this latter control sequence was eliminated.
Oracle and Google Java code dispute returns to court
I just asked Myra for a breakfast suggestion, and she told me to go to a laser hair removal specialist... don't think it's quite ready.
A SSD in Your Pocket (2015 Update)
That could be exploited to produce a trivial denial-of-service attack.
When a report comes out purely based some unnamed sources without any hard evidence, I am always suspicious irrespective of whether it is about US, European, Russian companies.
Re your second sentence, I think it's unfair to attack the author in this way. By my reading, the author didn't attempt took describe the discrepancy and just included the abstract of a paper that does. We should thank the author for their best effort.

This touches me because I've often been in the situation where my explanation was inadequate, and I was accused of trying to sound smart. We shouldn't be too eager to take people down a notch.
There's a benefit to teasing apart two ideas here:

- writing functions that expect immutable data (you get referential transparency and value equality → a system that's easier to reason about)
- using persistent data structures (makes it cheap and efficient to create new changes to your data over some messy Object.assign helpers)

Javascript doesn't promote applications written in that style though, so you're definitely going to want to use a library like Immutable.js everywhere for those kinds of guarantees.
> Vendors and governments use the internet, but they don't and shouldn't own it.

And yet they do: we may play in this sandbox, but we don't make decisions about the infrastructure, we don't make decisions about the law around it etc. This is congruent to the American political and legal system.

As you pointed out, it gets more confusing when you get international, but it's informative to look into how much control the US (and West in general) has over global internet infrastructure.
فني تكييف – تصليح تكييف 24731328 – اعلانات الكويت
Just a small design note: the white on green is pretty hard to read. (Maybe it's just my monitor or I'm getting old.) I'm assuming that image goes a long way to explain how it works, so legibility is paramount.
Modified yeast produce opiates from sugar
If I read this correctly, the vulnerable vehicles are not really left in a worse state because of this defect. If they did not have cryptographic electronic start, they'd simply be vulnerable to old-fashioned hotwiring. I could be wrong, as I haven't been in a recent model, but I assume there is still a physical steering column lock that needs to be disabled, no?
Ditto for Iowa!
I find this a bit sad on so many levels. But mostly I find is sad because "Instagram followers" seems like a singlularly non-helpful metric for finding dates. My guess is that it would self select for shallowness.

A friend of mine from USC back in the day was a photographer and sought out and often dated people he had photographed that he thought were "hot" and that never really worked out. I asked him if it occurred to him that basing your selection criteria on "hotness" would lead to anything meaningful. Answer, "no." His defense was that if he did find the love of his life in the pool of really attractive people, that would be awesome.
Yup, MX has been offering post race viewing since 2012(AFAIK). Been waiting for SX to follow suit.

Original point stands, broadcaster streaming offerings are worthless to uncabled viewers if they cannot prove they pay for the cabled/sat option. Forget about viewers outside the US... That's where goatd comes in, I guess...
From what I understand, they have to capture two uses of the key fob to be able to brute force, so if you don't use it then they can't capture anything. Or they just captured two uses from a random car and now it'll work on any car. I wish the article went into more detail.
So the immobilizer does not immobilize as much as expected/hoped. While that sure isn't something the manufacturer should be proud of, it is hardly a really critical problem, nowhere close to "stop driving until resolved". Immobilizers may have lowered car theft before, but never fully stopped it. The incentive situation for thieves has shifted a bit, that's all, a gradual change, not a 180 degree bit flip.

The bigger mistake than sourcing imperfect components is the attempted cover-up and I am positively surprised that this is even reflected in the headline. (at least theoretically: the first glance takeaway message for this story will always be "security hole in car!", no matter how much the author tries to put the cover-up in focus)
I believe it's because some people view them as spammy. That, I believe, started when all the ad-heavy "how-to" sites began appearing.
Extending Watson to Interpret Medical Images
The Thai finance minister, apparently:

http://www.smh.com.au/articles/2003/05/13/1052591776195.html

"Suchart said he was on his way to give a speech to central bank officials from 17 countries when his ministry-assigned BMW car stalled on a road, not far from his house.

The engine stopped, the air conditioning shut down, the doors got locked and the windows wouldn't roll down, he said, adding that he was trapped for about 10 minutes.

"We couldn't breath because there was no air," he said.

Suchart and his driver waved at passers-by to draw attention to their plight, but it took a while to make them understand that they wanted the windows smashed.

Finally, a guard of a nearby building came to their rescue with a sledgehammer and broke a window. Suchart then climbed out of the car through the hole."
He was probably talking about Wine, not about Linux per se.
As a single consumer you don't do anything. And that's reflected in the fact that you don't write or contribute to the policy or infrastructure of the internet. The point is that the internet is not something that is fundamentally different or outside of our culture's existing political, legal and social framework. It exists inside it and replicates most of it. We shouldn't expect it to be different. It hasn't been constructed in a way that implies it will be different either, outside of extremely superficial ways (protocols etc.).
Did you know you can apply effects to your WebRTC video using WebGL Shaders?
No. The whole point of keyless entry is that you don't need to physically handle a key to enter and start the car. Its presence in your pocket is sufficient to enable the Start button to work. Or, as this article demonstrates, the car's belief that the key is in your pocket is sufficient.
Redux 1.0 Released