skysight-inc/HackerNews huggingface dataset:
This data is from North America, and it gets cold and people stay in more October to January.

It would be interesting to see if the trend is reversed in the Southern Hemisphere, although you'd be hard pressed to find anywhere that gets as cold in the winter as North America does that has a similar wealth as North America.
I've had issues with other registrars revoking certificates for questionable reasons (i.e., any reason other than obvious loss of control of the private key).

Is there a "bulletproof" registrar that doesn't revoke? If my client loses thousands of dollars per day of downtime I'm sure they'd be willing to pay through the nose for it.

I understand the reasons for having a revocation system but it's often not a benefit to me on balance-of-risks basis.
I wonder what sort of bias might be introduced by starting out with those who bought life insurance? At the least this likely under represents folks at both ends of the wealth spectrum.
New York CIty, NY; Full time; VISA Transfer only; ONSITE only; Will relocate; VIMEO

Vimeo.com is looking to hire Software Engineers for the following opportunities…

Senior Android Engineer – Cameo App...http://bit.ly/1MI5Boq (Android, OpenGL, C/C++, Java, 3+ Yrs Exp)

Lead Front-End Engineer...http://bit.ly/1P0uZUZ (JavaScript, React.JS or Backbone.JS, 5+ Exp)

Senior Application Engineer...http://bit.ly/1NYhirL (PHP or Python, Big Data Knowledge, 3+ Yrs Exp)

API Engineer...http://bit.ly/1E4xcbr (PHP, JavaScript, OAuth, 2+ Yrs Exp)

DevOps Engineer...http://bit.ly/1N4DfSw (Linux, Chef, Puppet, AWS, Python, 2+ Yrs Exp)

Front-End Engineer...http://bit.ly/1E4z0Bd (JS, HTML5, CSS, SASS, 2+ Yrs Exp)

If anyone is interested in hearing more about these opportunities please email Samer Zaben at samer@vimeo.com
We don't actually need to butt into the Halting Problem or Rices Theorem, though.

Ideally, we would have proven-to-terminate non-turing complete DSLs that can be composed together to form more powerful DSLs. The problem is that we don't really know how to compose programs well, and when you demand the ability to peer into arbitrary executing code and modify it on the fly, you don't make it easier to learn how to do this.

If you were forced to use an architecture that separated things properly, you'd be forced to deal with those composition problems, rather than 'hacking' programs using a level of power that is unnecessary for the problem you hope to solve. (And you are hoping to solve a problem, not just run a program that fails to terminate.)

(I'm not arguing that this is the 'right way' to do things. It's just a way that should be considered properly.)
It's like Python, but you can transform the structure of your program with the language itself.
Ok, that makes more sense. If I were at Google, I'd still be very upset about those images being disseminated, as that design will likely provoke ridicule among the mass market.

Kind of the same way that a Segway is neat tech, but riding one is a defacto declaration that you don't care how goofy you look. Not good marketing.
Laser pointer can disable a human piloted aircraft too.
And in general, I'm pretty sure I could drive in a sufficiently confusing way during my commute tomorrow to confuse human drivers enough to cause an accident that would have been theoretically avoidable if they had responded better.

"Attacks" on self-driving cars that could already have been conducted on humans, and clearly aren't, because it just isn't worth anybody's time, aren't very technically interesting. One could make a case that there's a socially interesting aspect in that someone could use such an attack, in conjunction with social fears of self-driving cars, to do something like trash somebody's stock price or something, but the "social fear of self-driving cars" would be an irreducible element of such an attack.

It's the attacks like the Jeep attack, where I can hit fleets at a time, because the cars are all intimately networked together or something, that are interesting.
Your production is top-notch. But your focus seems to be a bit off. You are near the top of the language learning pyramid. Is this where you want to be?
A $60M pork kickback?
Right, but someone had to create that image, even if it's CG. The image itself is a liability to the eventual product's marketing.
Israel has had military police psychologically-profiling travelers for its entire history.
> The only relevant thing is your ability to formulate and solve problems.

The maximum level of abstraction available for your language is indeed a hard upper limit on how you formulate and solve problems. Solving a complex problem on a high level of abstraction can be trivial, and the same problem may be nearly impossible on lower levels.
But even with today's SSL CA system, those entities (registars, TLDs, ICANN) have full control. They could easily override the NS records and/or WHOIS for a domain targeting a domain-validating CA, and receive a valid certificate.

Might as well place the CA authorities with the TLDs, then. At least that would limit their authority to their subtree, instead of the free-for-all that is the current CA club. It might even let end-users make a semi informed trust decision: ".be seems to run a tight shop and appears trustworthy, .ly not so much" (random TLDs picked for example purposes only).

It would even make it worthwhile for site owners to pick a more reliable/valuable/expensive TLD (and thus CA), since it would bring a generally-accepted-to-be higher level of trust.
Video is not working... Video is hosted with 'wistia' and the ID is 52endf5e4h, can someone stitch together a working URL? I'm on mobile
Perception of safety... to other drivers on the road. This is a research prototype, there is no target consumer yet. The main goal is having a car that people will feel comfortable seeing driving itself on the street, not buying, yet. So, "toy car" is what they should be going for, at this point ;)
There's a reason I said "blatantly illegal". If there's a dispute, it's not blatant.
The same is true in maths as well.
If your startup is dependent on solving chicken and egg marketing problems the choice of Lisp vs. something else is fairly irrelevant as you said. This is the case in most startups that take a traditional business (e.g. Taxi) and modernise it (e.g. uber). The level of tech required to do that is not going to be cutting edge. It is quite rote to solve these things in RoR or PHP.

On the other hand there may be some startups where the choice of language really matters. One thing I can think of is how a lot of Enterprise software is a big feature fest with massive complicatedness coming from a mixture of the real-world muckiness of the problem, and poor architectural choices. Such shops require armies of programmers to maintain their bloated wares. Maybe a startup with a much more thoughtful approach, using a Lisp/Haskell/etc. type language and a small number of developers can have a big competitive advantage.

Customer "we need a new feature". Startup "sure we'll add a rule and you'll have that tomorrow". Old business "that will take 3 months and cost $1m"
As a prototype, Google want their cars to be instantly recognizable, not just 'another car'.
Maybe people shouldn't sell cell phones to drug dealers.

But what Geotrust did was suspend all cell phones for a certain block of people. In my case, this caused me extra effort and is black mark on clients trust for me. This might be like disabling every minorities cell phone which they legitimately paid for because some minorities used the phones to arrange drug deals. It truly is ridiculous.

How about phone sellers just sell phones? We have other agencies tasked with catching drug dealers.

Never mind I was able to get a new cert from Commodo and was back in action anyway so at most they have annoyed and inconvenienced some folks.
There's no way to take the surface of a sphere and flatten it out into a rectangle without distorting it in some way. It's called 'projecting' from 3D to 2D.

The projection used for the underlying map here is the Mercator, which stretches everything near the poles. It makes Greenland look almost as big as Africa, which it is not. It's the most common projection, but it's awful for accurately visualising the whole world at once.

But the Mercator is actually a really good projection for stuff like Google Maps, because it keeps shape and direction (not scale) accurate all over the world. Say you zoom into Iceland and then Ecuador... OK you'll need a different zoom level to get to the same real-world scale (e.g. to get to 10 miles per inch you need to zoom in closer to Ecuador than Iceland) but who cares. What matters is that, in either location, north is pretty much straight up, east is right, south is down and west is left. And also, a 10 mile road going east–west will look about the same length as a 10 mile road going north–south.

Other projections don't have these qualities, but are better for keeping overall scale the same all over the map, making relative sizes of countries look more like what you get on a 3-D globe. But most people just use Mercator for everything.
Fascinating.

Some early computers, such as the Elliott 803, had a built-in loudspeaker which received a pulse every time a jump instruction was executed. This meant you could tell which part of the program was executing, or whether it was in an infinite loop, just by listening. See, and indeed listen to, http://www.survo.fi/demos/#ex88
I've seen some impressive integration between Clojure and Emacs.

A quick edit - run cycle is a huge win. As are good debugging tools.
In the current SSL system there is no such concept as a "private key for a TLD". Every single one of the roots can sign anything. :(
Hah, had a lot of fun listening to those.
Some of them sound a bit like some digital rf modes.
There is a noticeable Christmas effect, with birthdays down then and up 9 months later.

I wonder if this has changed in more recent years with changes in demographics.
If the answer is no, then they cannot do what you said.

Uh, no. Plenty of companies already censor certain content without accepting liability for parts that they miss. There is no law preventing a company from not hosting content they find problematic, whether it's illegal or for any other reason. That doesn't give up their protection under DMCA. (CAs wouldn't even need DMCA, because they aren't hosting content or redistributing it).

Similarly, there is no law I know of that would disallow a CA from revoking a cert they issued. Maybe breach of contract, but generally their terms will prohibit illegal activities, so the other side will have breached contract first.
That's not a difference. The self-driving cars stop if blinded too. Did you even read the article?
In this case, getting injected with star fish killing bacteria nutrients is probably less harmful than stepping on one of these poison star fishes themselves...so the robots are actually preferable if one or the other has to live.
The short answer is, any water saved is a good thing. I see houses over in Los Altos Hills and Atherton and such, and these are large estates with the greenest grass you've ever seen. And I'm sitting here feeling like a schmuck for taking a short shower.

But every little bit helps, and the meter would be a good reminder to not be wasteful.
I guess I'll go with the default assumption that people at Google are smart. What worries me is that a company as smart and as experienced as DEKA could produce something as geeky as the Segway. Don't want to see Google afflicted by the same nerd-blindness.
> The difference is human drivers will stop the car if blinded.

So will the self driven cars, if you read the article.
Exactly. The challenges with convergence are akin to a simplified gpg+keybase... increasing its popularity needs further development and proponents to gather a critical mass of users and providers.

Trust is hard. For top-down TLS CA to work, the net needs a fewer trustworthy, sensible, well-secured/geo ip'd/leadership nonprofits to be the systems-of-record far out of reach of govt and corporate dictatorships. (icann, iana are a good start, but they could be better. ssl cert cert authority as another type common-good org.).

Also, having a zillion CAs able to independently issue endless wildcard certs for the same domain is lunacy... only the domain owner can be issued certs. It should be tied to common global record-keeping system as domain name registrars do and/or domain registrar-mediated challenge to prove ownership (control panel login / authenticated API calls, not just adding some spoofable TXT record cookie or link in an email). End MITM by rogue certs, at a minimum.
Stochator 0.5 released
i don't yet, but it can be done. actually, i have slightly different plans with all this and for that it may not be necessary
That's true; what cropped up after Convergence was TACK: http://tack.io/index.html

It too has seen not a lot of traction. However, Google has implemented a competing stack into Chrome (and Firefox supports it) in HPKP (HTTP Public Key Pinning) with sites having the ability to pin their cert, and these browsers will trust that bond all day.
The claim showing survivorship bias is from this comment (https://news.ycombinator.com/item?id=10181767):

> ...if my siblings an I were brought up just fine in the 80's without being in a "smart onesie", I'm sure we can do just as fine today.

There's no one here to say "I died because my parents didn't realize I stopped breathing". Yes, one can look at statistics, and see how many deaths would be prevented by this device, but the comment didn't do that. It's survivorship bias.
Just to play devil's advocate -- not every conception results in birth, and it's not implausible that the P(birth|conception) might vary over the year. For example, if a first trimester in the winter were more likely to result in miscarriage; or if more unwanted conceptions resulting in abortion happened in spring (??).

But, yeah, I agree :)
Sounds like a low-quality shop or one that isn't being paid to do the strategic thinking around their measurement to determine "if it works."

As someone who is deep in the thick of that stuff, I'll be the first to admit the data is very fuzzy, and relies on a lot of statistics to really get a sense of whether things are working when there is not a strong direct response component (see: brand display advertising). Even the value things like paid search are entirely subjective depending on the attribution model you use and how you measure incremental lift.

But that isn't to say it is all voodoo that doesn't work. Its just that to measure it properly you need some very expensive technology and/or proper stats training.
I was confused at first but I believe he meant to say that the Oyo cut is approximately $3.5m per month and the article states that they get a fee from all bookings similar to a franchise fee, etc.
Do you think it should be legal for a fictional company called Goober to pay the CA for its fictional competitor Drift so that the CA revokes certificates "in the interest of public safety while the CA expeditiously researches the issue" within 10 to 15 business days?
Yes, this is true. For maintenance projects I've noticed that before I can sketch things out I have to translate the existing codebase into the proper abstract domain but in my experience this is just an extra step and does not negate the general approach of thinking in a domain that is completely free of programming language related issues.
You want to see useless security theater, go to China. Every building has a live-on-site guard who's entirely unable to detect or prevent thefts, won't intervene in a fight, or do anything other than lock the doors at night. Some of them wear military style clothes and have prominently displayed riot gear (shields and sticks), despite being clearly too frail to actually hold back anybody determined. Train stations x-ray your bags, not just for going to the train but also for access to the ticket office. They don't notice/care if you go through with kitchen knives in your bag, despite the recent terrorist attack that was done using knives. You can sometimes bypass the X-ray by just walking past and refusing to put you bag in it too! A Beijing train station has a podium outside with a soldier standing on it holding a stick. Not sure what that's for.
I still use mh (well, nmh now) programs for my personal email. There is nothing that beats mh's "pick" program for selecting emails.
I think you're making the case for language irrelevance even more. The reason big corp. can't move fast isn't because of their technology choices. It is because of all the bloatware and bureaucracy. You can be bureaucratic and bloated in any language.
There's no guarantee human-driven cars will stop, either.
The 12 cognitive biases that prevent you from being rational
But in some languages bloat is a best practice.
How about getting certificates from multiple, geopolitically diverse providers up front? It'll be an extra expense but lets you monitor your certs' revocation status and, should cert #1 get revoked, update your configs to use cert #2 and so on.

That might even be a good idea for CloudFlare to implement in their SSL offerings[0] if they don't already. They could offer multiple SSL certs from various providers (for an extra fee even) and the whole process would be completely transparent to your origin server, which can run its own self-signed cert.

[0] https://www.cloudflare.com/ssl
Learning Through Tinkering
Typed Racket working for me lately https://www.classes.cs.uchicago.edu/archive/2014/fall/15100-...

But again no massive ecosystem of libraries to simply plug in so unsure if 'secret weapon'. Also I have experienced the nightmare of trying to port non typed libraries to typed Clojure and falling into a rabbit hole of errors propagating. Haven't had the same problem with Racket but ecosystem is not even close to Clojure so anecdotes worthless.
I understand, and I'm not defending them. But the comment I originally replied to was going too far in the opposite direction, and saying CAs should never intercede.

Maybe people shouldn't sell cell phones to drug dealers.

There's no easy way to implement such a policy. There's an easy way to implement a policy of "revoke blatantly criminal websites that get reported to us".
> But that isn't to say it is all voodoo that doesn't work. Its just that to measure it properly you need some very expensive technology and/or proper stats training.

That's what I believe too. It does work when done properly, but most of the shops are not equipped to even begin to understand how to do it.

What kind of expensive technology do you mean in particular, if I may ask?
Surprised that Syrian refugees have smartphones?
See also Brett Victor's "Media for Thinking the Unthinkable": https://vimeo.com/67076984
Syria: how and why? The explanation in comic form
In this case, there's no chance of the robots proliferating out of control.
If the website did not do anything wrong, they can sue for breach of contract. I explicitly addressed this point in my above comment.
> retarded

Not to derail, but I'd avoid using language like this if you want to be taken seriously.
Kinda surprised the author didn't know about compacting GCs that solve memory fragmentation(at the cost if having a GC).
I just developed a browser to server based crytpo channel meant to replace the SLL certificate mess on a side project I'm working on. I know that there's a bad rap for browser based crytpo and rolling your own but I've got some knowledge and thought I would give it a shot.

The code is not public (yet) but uses DH key exchange (using the JS BigInt library) to exchange a 2048 bit token key and then uses sjcl to perform encryption on each packet/request using the resulting key.

It's lacking host validation (am I talking to the correct server?), but I'm still working getting that piece together.
BMW’s sector-defining 3 Series has turned 40
USA, baby, USA! Feel threatened? Answer with deadly force, it's the only way.
> Meaning that it is an actionable copyright violation which the copyright owners could choose to pursue and would likely prevail in court.

Care to cite some case law?
Not so different, see eg http://www.economist.com/node/17730360 and https://en.wikipedia.org/wiki/The_Nature_of_the_Firm in general.

eli_gottlieb sibling-comment is spot on.
Could you elaborate on creating access?
Who needs a laser? Self driving cars can be disabled with a three dollar box of roofing nails.
Apples and oranges. APUE is an application development book, i.e. it takes the Operating System calls mostly for granted. Operating Systems books explain how the syscalls and internal services are created/managed and what the trade-offs are.
I think an important distinction is that a human driver under attack will likely know he/she is under attack very quickly, whereas the passengers in a self-driving car might not know that the self-driving system is under attack without significant delay.
Human driven cars can also be disabled with funny sounds or women wearing short skirts or a bit of spray paint on the road.

We really need to remember that humans are atrocious at driving on average, and doing better than them is a pretty low bar. Not that we shouldn't strive to improve automation, but don't let perfect be the enemy of the good.
Can anybody guess in which way he used convolution for solving what is generally known as the change-making problem?
Wikipedia [1] mentions a "probabilistic convolution tree", but that seems much more involved.

Edit: Solved. I've missed that the problem only deals with change amounts that can be reached with one or two coins. So a single convolution is sufficient in this specific case.

https://en.wikipedia.org/wiki/Change-making_problem
> Why would you pick Lisp or Clojure over say Elixir, Scala, or even F#?

They are all great choices!

F# is an excellent choice if you are happy living within the .net ecosystem. I'd highly recommend it if you are a c# dev. Tooling is great. Ecosystem is really good etc. Performance is really good.

Elixir? Its a really good option for high concurrency apps. It's based upon Erlang and has access to heavily battle tested libraries. Tooling and ecosystem not as good for many kinds of applications as the jvm/clr.

Scala? Another good option somewhat limited by its complexity. I personally prefer F# and I think it has better tooling. Nevertheless it's a great option for the jvm crowd.

Why did I choose clojure? Mainly for its good defaults, a community focused on simplicity, data, and composability, a great jvm AND JavaScript story, macros, amazing tooling, and ease of learning.
Yeah, but at least they're immune to two-dollar boxes.
sounds like they were hacked and had to revoke all certs for that TLD
Ever since I first played Need For Speed 2, I've fantasised about a real-life version of the ROADRAGE cheat code I could use to cause those doing the rest of us on the road a disservice to flip over with a mere honk of my horn. We're not there yet, but this is a clearly a step in the right direction.
IIRC if your polynomials have integer coefficients with a bounded number of digits you can use FFT on finite rings and get an actual O(n log n) algorithm.
That's not really true at any level. There were decent i386 SVR3 releases before 1990 and some very nice SVR4 releases soon after (particularly, Dell). I deployed a lot of them as an alternative to workstations. HP and DEC were not cheap in that timeframe, though you could argue they were more capable. And while not a "PC", a 64-bit desktop showed up in the form of the R4000 in 1991.