skysight-inc/HackerNews huggingface dataset:
It's clear that people will work hard for many things besides money; to suggest otherwise is absurd. The evidence is right in front of our noses, every day: Consider artists, scientists, scholars, soldiers (some of whom risk their lives in the worst working environment you can imagine, and need food stamps), teachers, FOSS software developers, explorers, parents, political and social movement leaders and members, etc.

(I wonder how much Adam Smith made? I also wonder if he really said the things he represents to us now.)
It's also known as "automatic differentiation" -- it's quite different from numerical/symbolic differentiation.

More information here:

- https://justindomke.wordpress.com/2009/02/17/automatic-diffe...

- https://wiki.haskell.org/Automatic_Differentiation

The key idea is extending common operators (+, -, product, /, key mathematical functions) that usually operate on _real numbers_ to tuples of real numbers (x, dx) (the quantity and its derivative with respect to some variable) such that the operations preserve the properties of differentiation.

For instance (with abuse of notation):

- (x1, dx1) + (x2, dx2) = (x1 + x2, dx1 + dx2).
- (x1, dx1) * (x2, dx2) = (x1 * y1, x1 * dx2 + x2 * dx1).
- sin((x, dx)) = (sin(x), cos(x)).

Note that the right element of the tuple can be computed precisely from quantities readily available from the inputs to the operator.

It's also extensible to derivatives of scalars that are functions of many variables by a vector (of those variables) (common in machine learning).

It's beautifully implemented in Google's Ceres optimisation package:

https://ceres-solver.googlesource.com/ceres-solver/+/1.8.0/i...
Previously: https://news.ycombinator.com/item?id=10139069
How does this not violate due process and equal protection?

Edit: Hell: add the Fifth amendment (double jeopardy, due process, just compensation), Eighth (cruel and unusual punishment), Ninth (generally), Thirteenth & Fourteenth (if one cannot work gainfully, what options remain, equal protection), and Fifteenth (statistically given crime and conviction statistics)?
Two problems I can see: 1. You'd need a hydrogen source. 2. Exactly how much vapor does it release? Water vapor next to sensitive electronics, in your pocket, can be very bad.
>To ban a market order is to tell me I'm not allowed to enter/exit a position in a single order, that's non-sense.

You could carry on trading as you currently are. If a stock is trading $100/$100.1 and you want to buy it ('now' as you say), then just set your limit to $1000.

Of course, you will have no one to blame but yourself if, during the ~50 milliseconds it takes for the order to reach the exchange, the market makers have switched off and you end up crossing a massive spread and buying the only available offer at $600 or something. An incredibly unlikely scenario, but it can happen.

So I imagine you'll set your limit to something sensible, like $101. It'll still get filled 'now' 99.9999% of the time. But you won't be taking the risk of doing something epically stupid. There, that wasn't so hard now was it?
Facebook Case Study: Atlas and Tommy Hilfiger [pdf]
There is when they keep refunding people for having their account hijacked and on the other end are giving away CPU resources to the bitcoin miners.
*Jack Kilby

Sorry, but until I did further searching, you had me believing that a comic book artist was also responsible for the development of the integrated circuit!
This wouldn't withstand federal judicial scrutiny for a second.
AWS do do things. They have service limits and routinely waive charges from abuse events like this.

I do wonder if GitHub's events firehose has benefits that outweigh all the compromised credentials, though. Not just limited to AWS keys.
Wow. So let's make absolutely sure that people who have made mistakes in the past can't get their lives in order or do anything legitimate.
Welcome to America, where the point of putting someone in jail is the vile intention of pure revenge instead of resocialization.
This is what C does, so I don't think Go deserves much credit for innovation on this point...
Is there a version including the figures?
This is a really good point. There was another post recently linking to a search for id_rsa files (SSH private keys) on GitHub. Instead of allowing people to publish sensitive things like that accidentally, GitHub really should require an extra confirmation.
Amazon are well known for refunding erroneous charges like this, they've done so many times in the past - get in contact and ask for some leeway.
20 awesome board games you may never have heard of
Let's Play Half-Life Upside Down [video]
> or at least prevent it from spinning up any new instances

This is the answer I would like to see implemented. If they can detect the key they can put a freeze on the account so that only existing resources are available.

They should also have a timeline of all created instances in every zone so you can see what has happened in the last x hours and kill all instances at once.
I don't know much about Virginia law, but based on the wording here, it sounds like you probably need some kind of license to do business in Virginia even if you're incorporated in another state.
> The amount of bad faith people ascribe to basic usability functions utterly astounds me.

I think most of it comes from how Google (and the industry in general) has evolved. There was a day[0] when things were labeled clearly and the default behavior wasn't to vacuum up as much data about users in the name of basic usability functions.

The amount of trust people have in companies to keep their private information safe from prying eyes is what's truly astounding.

[0] http://images.devshed.com/sc/stories/Google_Desktop_Search2b...
Most UIs for programmers still seem to lag behind the command line tools a lot. I wonder if it will be possible again some day to create apps like in Delphi without some black magic happening in the background.

P.S.: never ever put keys into repositories. Except those repos are deployment config only.
> unlike Pascal-style strings, they can be usefully sliced, especially if you can modify them strtok-style.

Slicing Pascal-style strings is also easy and constant-time: just track the buffer, offset, and length of the slice of characters you want. Java used to do it implicitly whenever you called `substring`.

> unlike (ptr,len) "Modern C buffers"/Rust-style strings, references to them are pointer-sized, and they can be used as a serialization format.

Every C method that takes a character buffer either a) has a corresponding length parameter or b) is avoided because of the security risks. In practice this means that C also stores the length information, just on the side instead of combined into a struct with the buffer.
Games are not the usual fare on Hacker News, but with this creative twist I believe it would qualify as something hackers (and nostalgic Half-Life fans) find interesting.

Part two and three are located here:

https://www.youtube.com/watch?v=NBIZt8Pp31Q
https://www.youtube.com/watch?v=ZO5_Cv21KsQ
Sure, but he shouldn't have checked keys in to any repo, public or private!
Bullshit. Our society runs on money. Not having enough money is a good reason not to be happy.

It is possible to have enough money based on your exoenses and those people are happier.

More people are unhappy because the economy is shitty.
There used to be the notion in this country that after a person was released from prison they had "paid there debt to society" and should therefore be able to go on with there life. How did we get to a place where no one seems to believe this anymore ?

I would think that a punishment for a crime that includes forced destitution for life independently of the nature of the crime would be considered cruel and unusual. But the Bill of Rights doesn't seem to be taken seriously anymore either.
When people run up a huge bill and don't pay it, that's an incentive.
Thanks -- these are both great ideas; I've opened a ticket: https://github.com/sagemathinc/smc/issues/93
I don't know. Even for private repos, it's bad practice to commit private keys to source control.
std::string isn't reference-counted in a conforming implementation (that doesn't do atomic ops just for fun).
I don't think you're describing quite the same thing. You're talking about forward-mode differentiation, whereas backpropagation corresponds to what's usually called adjoint-mode differentiation (I think it's called reverse-mode in the post). The difference is in computational efficiency when the number of parameters is large.
Tell them to get us a MIPS64 that we can afford. That way people can have their OS's that refuse to deal with MIPS32 issues. Maybe an insanely cheap Warrior core that gives people a taste of its capabilities but can't hurt Imagination's sales in servers/embedded due to configuration of board it comes with. A few benchmarks on that thing and open-source tool development might help increase adoption. Same with MIPS64 board in general though.

Meanwhile, people might have to play with soft-cores such as Plasma and Cambrige's MIPS64 BERI core. FreeBSD already runs on BERI, so that should help. Full cores are still way cheaper to license than ARM, too. ARM pricing is horrific and is about the ecosystem more than the CPU performance/cost.
On extremely brief inspection, they avoid a bunch of the problems by not actually running user mode (CPL3) code. That means no SYSRET garbage, no weird IRET states, no SWAPGS, etc.

On the other hand, using virtualization for everything means that you pay a full host/guest switch cost every time you context switch, and that's much more expensive than SYSCALL + SYSRET.

Their exception handler asm looks highly questionable, but maybe they really never have exceptions :)
> Microsoft's engineers added support for DirectX 12 to UE4

Don't you love it when everyone is competing on a level ground?
Well, it is partially his mistake, which he acknowledges:

> I am certainly not innocent here and some mistakes were made on my part. [...] To this end, having encrypted access keys or excluding configuration settings from GitHub would have prevented the AWS charges - and this is certainly the approach I would take from now on.
Does Amazon actually end up charging you when this type of thing happens or do they eventually wipe the bill after you talk to support? If Amazon tried to charge me, I would definitely be in touch with the credit card company I have attached to the account. This is rather straightforward fraud/identity theft so you should be covered by the standard consumer protections most credit card's provide.
Well, except that the Lisp's NIL (and Python's None) only works with dynamic types, where you never had any kind of guarantee to start with.

C and Haskell for example have a void type, that is not null, and in Haskell has a value. But a static void is completely different from a null.
I took it less as hubris and more of a way to imply to readers that no matter their experience they are not immune to the mistake he is going to tell you about.
when I was doing my stab at this problem (see comment above), the contextual power structure was important.

that's why I coupled my model with flow analysis on the mail server end to assign subordination relations between parties when possible.

A general solution is OK for liaisons but that's about it.

The IBM demo appears to be just positioning Watson as a general business concierge here and doesn't seem to be concerned with a true assist on what Gardener calls interpersonal intelligence.

Being able to write concisely and well doesn't necessarily mean you can permeate communication walls.

A valid computer solution, in brief, involves continuous kernel application during the authorship; how the user responds to the system is itself part of the analysis. This isn't just binary sentiment analysis of product reviews using an SVM - that's childs' play compared to this.

Even with the best solution I came up with, it's still just culturally specific ... cultural to the geolocation of the persons and the heritage of the people, but also to the industry itself.

Something that may show weakness in one industry may show wisdom in another, hostility in another, and humility in another.

For instance, say you met someone with whom you had a serious romantic interest. Would you exchange business cards, and then arrange a 9am skype call the following tuesday? It's just all so contextual.

This rabbit hole runs deep.
The new move semantics use null references for things moved from.

No. When you move the contents out of somewhere like an std::vector instance, that object is left in an undefined but valid state. You're free to continue working with that object (though the only meaningful thing you can usually do without undefined behaviour is destruction or the equivalent of clear). That's very different from null references.
> As a senior developer with over 12 years of experience in the financial services industry, I didn't think it was possible that I could be the victim of a data breach.

Ok...

> Better yet, move access keys to a seperate config file, and exclude this from Git deploys with a .gitignore.

No shit?
You forgot Franklin on point 6. She deserves more credit than Wilkins, anyway.
It's not like quality pixel art is cheap.
Well, they had due process, since that's how one becomes a felon in the first place. But I suspect a blanket ban on being able to earn a living in a particular region will be found cruel and unusual.

Plus as a purely practical matter, banning former criminals from making a legal living seems like a pretty good way to ensure they continue to commit crimes.
Hopefully he posts updates about his unanswered questions. Since it sounds like the compromised key should not have been able to create ec2 instances.

And I don't blame him for making that mistake. That kind of bug should have been caught in QA.

On the other hand, I'm paranoid enough about things that I wouldn't push unsecured access keys to any server I didn't control. Even if I was paying for a private repo.
Thankfully, the author realizes later what it they really did wrong here:

> What could be done to prevent this?

> Always test new version control GUIs before using them in the wild. There could be a bug that could expose your data.

> Encrypt access keys in config files instead of just leaving them exposed in the config file.

> Better yet, move access keys to a seperate config file, and exclude this from Git deploys with a .gitignore.

The fact this supposedly security experienced and conscious developer thought it was okay to have any kind of access credentials stored in a git repository is glaring.

You should consider all data in any repository public for security reasons. Publishing to github publicly made it quite obvious - but he could have been just as screwed over by people he gave access to the private repositories and people who have broken into github and can directly access the repositories.

Sure the numbers on both those groups are lower than the numbers of people apparently scanning public github for access keys - but the severity of the risk of keeping access keys and other secrets in your revision control are the same.
While I'm perfectly fine with employers not hiring ex-con's under certain conditions for example not to hiring sex offenders (actual ones not a guy that was caught peeing in an ally) in schools, or some one who was convicted for financial fraud in banks or an investment agencies.

But unless other wise mandated (mostly sexual offenders stuff) It's up to the employer to make that decision, what right does a government has to force a private employer to fire their employees on any count?
Is it really on the web service companies to make sure you (the developer) don't do anything stupid?

The article author could have avoided a lot of headache if he simply checked the repo before walking away. Red flags should have gone up as soon as he received the first weird Amazon messages, but he still didn't think to check his own work.

The author calls this a "Data Breach" but in reality it was a "Data Leak".
> They have service limits and routinely waive charges from abuse events like this.

That's almost worse though. Maybe I'm being unfair here, but the fact that they will waive charges immediately if you ask, but don't just block them pre-emptively, tells me that they're hoping at least some customers (with deep pockets and automated billing that no one pays attention to) will just pay the bill and never notice. Maybe they're making more money from that than they're losing by waiving charges on compromised accounts for customers who ask.
Why? It sounded like he is very security conscious. Thought he was creating a private repo in VS, immediately after he was notified deleted and recreated his keys. A pretty spot on course of action I think.
When your outlook sustains, everything is good. But there is also a failure mode where you lose that motivation ("burn out") or never have it to begin with, and fall into a cycle of doing only what's required.

If that's only ever a small fraction of people at a time, then giving them food/shelter and letting them "freeload" is fine. But the worry is that by taking away any incentive to produce, that group will grow without bound and end up consuming non-neglible output from the people who do.

I'm not arguing to diminish your main point, but to strengthen it by adding nuance. The way I see it, our current system basically pushes people into burn out mode a priori, and only a lucky few escape to make money while still fully engaged. Which is why eg you visit the hospital and everyone there acts like what they're doing/saying actually makes sense, but when looking at the big picture it's obviously horribly broken. The Programmer's Stone (which I need to reread sometime) explores this phenomenon in depth while proposing a theory to explain it.

My take is that basic economics predicts that as people become more productive they should become wealthier. So their marginal utility of keeping their time goes up, their rate should go up (assuming they're worth it), and they should also start demanding to work less. But this is clearly not happening on a societal scale. IMHO because debt is the gradient version of slavery, and advances in surveillance technology have made debt such a prominent part of our society.
I think it's definitely some hubris, because the mistake he made wasn't publishing to github publicly by accident. It was thinking a git repository was a good place to store secrets.
FWIW, I do, and I do essentially the same thing as OP. Your comment implies that the two are incompatible: why do you think that is the case?
I accidentally posted AWS credentials to the AWS EC2 forum, and got > $10k (US) of charges very quickly. They removed all the charges immediately, without me pushing at all. They offered it.
Two good probability cheat sheets (not primers, though) are

http://matthias.vallentin.net/blog/2010/10/probability-and-s...

https://github.com/wzchen/probability_cheatsheet
I'll cop to punching up the title of this. But I actually view it as highly significant that the law at issue forbids ex-cons from employing themselves just as it forbids other people from employing them. (Actually, it allows but doesn't require the government to prevent them from doing any of those things.) The only option left is subsistence farming. The original title is missing that. Was my title misleading? :/
Advice needed, Mid-Life crisis
I have been with my current company for more than 5 years now and currently I'm working as a Director of Engineering (I'm one of the early employees). I make around $40k salary and I have $300k in equity as well (I live in India and $40k is decent money here, though I've got offers for $150k in India) . Right now, I think my career isn't going anywhere and I don't see any personal growth in the company. I'm a hacker at heart and I can quickly build stuff which just works and that's the reason people value me. I've experience in hiring and building teams and getting the shit done.

Now I have 3 options:
1. Start something of my own. I've got couple of ideas which I really want to try and build. I've got some financial issues to take care of, and because of that I can't really quit my job right now.

2. Join a company which pays me a hefty salary. That way I can solve my financial issues and save enough in a couple of years to bootstrap something. But this will need some serious preparation.

3. Continue with my current company and expect to grow in future.

Please Advice what can I do.

P.S. I'm almost 30 years old and I have almost a decade of experience (if you count my freelancing days while I was in college). I know PHP(Codeigniter/Laravel), JS/Jquery, MySQL, Postgres, Designing and Slicing PSDs, HTML/CSS/SASS etc. and have used lot of tools/softwares such as Beanstalkd, Memcache, Redis, Gearman, Vagrant (for local development), Git/SVN, Supervisord and what not. I also have a decent experience working with Phonegap, Corona (built a small game), AngularJS (built a decent app) and Chrome extensions (wrote few extensions). I've worked on so many things that I can't even remember. I worked on pretty much everything which was thrown my way.
Offtopic from Sandstorm but on the topic of personal servers it would be good if somehow an email server could also respond to requests as a web server in some way. Or maybe respond to particular inbound emails as HTTP requests. Sort of makes sense since the server that your email address lives at is kind of your "home on the web".

You could configure your email then perhaps to respond with things like your personal profile, in response to anonymous inbound requests.
You have a 918kb background image. You use 3 different fonts including something that looks like comic sans. You have steel blue text on a black background...

Ugh! What did your visitors do to you in a previous life?
Well, before you go, I implore you to look into the actual computation and theory of 'p-value'.

A p-value is simply P(X|H). P(X|H) only means something when H is true. If H is false, P(X|H) tells you nothing. Since H is your null-hypothesis, if it does not actually hold in the real-world, P(X|H) is meaningless.

If you read the paper I linked, they never explicitly call out the null hypothesis (nor do, I believe, they show the work for their calculations). There should be another paper somewhere that describes exactly what it is, in the terms I am using. So, phrases like, "[t]hey don't see any problem in stating a p-value and rejecting the null hypothesis" make me think you have no idea what you're talking about.

The null hypothesis can never be 'rejected' (ie. p-value can never reach 0). I don't think you will find anyone working on the Higgs boson that will claim otherwise.
The monetary rewards need to increase, but here's another perspective regarding your comment on the world seeing scientists as tools.

Scientists discovered the elements, the atom, DNA, semiconductors, etc-- beyond money or fame, these were tangible huge advancements for mankind. To follow in those footsteps and stand on the shoulders of those giants is rewarding.
If my local politicians are any indication, the ones who were in office during the 'tough-on-crime' era, particularly of the 80's and 90's, tend to speak as if the convicted are reprobate, can never fully 'repay' their victims, and are destined for a life of crime. I suspect some of this rhetoric bled into their perceptions of the point of criminal penalties, leading to much more retributive and much less restorative/redemptive sentencing practices and laws.

But it's hard for me to separate that all from the general Calvinist/religious culture of the area where I live.
Not to worry, the FDA will stop them!