skysight-inc/HackerNews huggingface dataset:
Interesting licensing (normally AGPL/commercial but MIT just for Gitlab); I'm interested to find out more about how this is even possible:

1) "GitLab Mattermost" is available under an MIT license as a compiled version of "Mattermost", and

2) the MIT license does not apply to the "Mattermost" source code

https://gitlab.com/gitlab-org/omnibus-gitlab/issues/654
> The core of webXray is a python program which ingests addresses of webpages, passes them to the headless web browser PhantomJS, and parses requests in order to determine those which go to domains which are exogenous to the primary (or first-party) domain of the site.

Naturally this means a different user agent and finger print which could ultimately mean the script is fed a different page altogether. The odds of that are probably low but still; someone could have a really shitty website that uses hundreds of trackers but could serve WebXray something completely without them.

I would like to see this type of stuff as web browser extensions. That way we can get the exact, most correct information possible. Also would simplify a semi-convoluted build process that seems to have tripped up a few readers.
How about Chernobyl exclusion zone? "Ukrainian officials estimate the area will not be safe for human life again for another 20,000 years" [1]

"The time frame in question when dealing with radioactive waste ranges from 10,000 to 1,000,000 years" [2]

[1] https://en.wikipedia.org/wiki/Chernobyl_disaster#The_Exclusi...

[2] https://en.wikipedia.org/wiki/Radioactive_waste#Long_term_ma...
When public clouds go bad
A Guide to JavaScript Engines for Idiots
Long time Fedora user here. Love it. It's so clean and generic. No fuss, no bullshit.

The workstation build they have worked on for a few releases now was a real boon.

Just like OSX, I just get on with it, and I don't notice it.
On one hand, it is a shame to see potentially informative research (such as the drug user study mentioned) stymied, on the other hand I can't help but be pleased with this development. The amount of information Facebook holds on every one of us makes me uncomfortable, and the idea that much of that was available over APIs for anyone to consume is quite concerning.

The article includes:

> hopes to salvage his project by asking Facebook for access to eight types of data, including photos in which a user is tagged. He hopes to reconstruct a person’s friend network by seeing who they socialize with through their photos. Dr. Crosier says he won’t be able to see the images themselves, just that a user was tagged and by whom.

I don't particularly want random researchers to know who I socialise with. If this researcher (who may or may not be well intentioned) can reconstruct my friendship network, so can anyone.

It's scary enough that Facebook has this information - it's even scarier that anyone with some Python skills and a basic understanding of APIs can get it too. I'm not often wont to praise Facebook, but I think in this case they are (reluctantly and finally) doing the right thing by restricting data access.
It's impolite to accuse people on an HN thread of being deceptive. It also doesn't add anything to thread itself, so why bother?
The 8088, 80188 had 8-bit buses, but I haven't met anyone who claimed that made them 8-bit chips. Neither really affected programmers and it was a maneuver to make the chip a bit cheaper. The 68008 was the same way, and used in some Sinclair designs.
PicoPower - I can't tell you the specifics, as comparing power consumption is a bit difficult (you need to figure out which peripherals you need running, whats the system clock, input voltage, sleep/wakeup regime etc and calculate from there), but they do have STM32L0 series of ultra-low power based on Cortex-M0+.

As to why do I like ST:

1. They are very easy to design boards for. Each IO pin on the Cortex micros maps to up to 16 different internal functions. That gives amazing flexibility from the board design perspective.

2. They have fantastic long term migration paths. You can directly go from Cortex-M3 to Cortex-M4 to Cortex-M7, while, in many cases, retaining package compatibility.

3. They have very good design validation. Their errata sheets are quite shorter than what I remember working with other manufacturers.

4. They have a huge amount of useful IO, such as timers (I have one design using over 15 timer channels) and a quite flexible and powerful ADC architecture.

5. They probably have the widest selection of Cortex microcontrollers in the industry.

There are downsides, too; I generally find their peripherals less advanced than Atmel's (regular CAN instead of CAN-FD, USB inferior to Atmel's, I2C that's really sucky and prone to errors, slower clock and no dual precision FPU on the new F7 family). There was also some story with ST's 2MB flash parts, being not really usable - but I'm not sure what was that about.

Overall you can't go wrong with ST. The long term migration ability and board design flexibility are well worth the downsides.

Coming from an AVR, you're immediately going to get way more memory, much higher clock frequencies, ARM CMSIS libraries (fun if you have any math/DSP going on) and more industry standard tools.
The Single Keyboard Button That Can Boost Your Productivity
PrinceXML is definitely the best tool, but there are a couple similar commercial alternatives and wkhtmltopdf have become a decent open source solution as long as you want basic docs.
You can google "Russia united stated oil price" and find authoritative hits supporting the other argument.
It's not running on fumes. It would have been more accurate to say that it is growing more slowly (and as of the last few quarters, has seen its growth flat-line).

2012: $2.33b in sales

2013: $2.57b in sales

2014: $3.19b in sales

Their biggest problem is the inability to achieve profitability on $3 billion in sales after so many years in business. They still have $1.1 billion in cash however, and have reduced their bleed rate to a benign level.
I'll be honest, I know Groupon and its ilk are terrible business, but as a user of the service I've had lots of fun exploring activities and restaurants that I literally would never have bothered with or known about. In the last few weeks I've taken a Scuba lesson, a Horse Riding lesson, an intro to art class, found a couple new amazing sandwich shops. I took an amazing trip to Ireland for something like 50% off the lowest rate we could find, and it forced us to explore virtually the entire country since the package had us in different castles every couple nights. I've visited some oddball museums I hadn't bothered with before.

I would have probably not done almost any of these things, or been more judicious in what I went to. I've found some new things that I'll be returning to, and some things that I won't.

As a customer, these kinds of services are amazing. And really all they're doing is centralizing good deals. A less "grow fast and explode like a Unicorn" business model would probably make it work better for participating businesses.
Exploring Your Virtual Instance: Lifecycle, Utilization and Governance
Have you tried pandoc for converting LaTeX to markdown or word? It generally works well unless you have a lot of equations or references.
For the most part Amtrak runs on rails owned and maintained by private companies. Plenty of exceptions - especially the Northeast Corridor - but the vast majority of track is outside government control.
Railroads in the US are privately owned, for the most part.
things like http://www.sequenceinc.com/fraudfiles/2011/10/groupon-ipo-in... or http://www.thinktrade.net/ipo-fraud.php or http://www.bloomberg.com/news/articles/2013-09-20/groupon-lo... or http://www.bloombergview.com/articles/2012-04-04/groupon-ipo...

(edit: we're talking about groupon the corporate entity, not the product(s) they offer.)
He admitted it in his response here:

>in response to referral link comment: I host the site on my own dime so I didn't think getting $.25 from DO would make me a bad person...also, I really don't have time to learn windows to make instructions. I'm a grad student and make slightly above minimum wage annually, if I were to be evil and greedy I'd probably not be doing what I do with my life. I'm giving away thousands of hours of work and data I could make money off of doing evil things.

>its not worth putting the link there and have people judge you / your intentions.

This makes no sense to me. His intentions are clear. Far more clear than the intentions of third party HTTP requests on the big websites you visit. And you didn't even need to hear it from him himself to know that he hosts his site and needs a few shekels to support it. Of course, you're entitled to your own opinion, but I could really care less if people "judge" me for a DO link, and I hope the tilbert feels the same way.

I don't understand in general this hate for people who post referral links. Do you not hover over a link before you click it? See all the garbage appended to the query string in the URL? If I don't want to click it, I don't. I don't hate the person for adding a referral link. I don't understand the hate for the people who do. Again, you're entitled to your own opinion but I'm not a fan of this minutiae being hammered in this HN thread. I'll just go to the website on a clean window and search the same product/website/service.

Finally, the third party advertisers are judging him far more harshly for this software, anyways. Their corrupt model is (in a small way) subverted. If he was worried about "judgment" he wouldn't have offered this software in the first place.
Agreed, it's leaking private information. It would be awesome if the user could opt in to that leak. I feel the same way about Github - I wish I'd be able to show my full history (top) on my public profile page (bottom) http://take.ms/qiBMm
Yes, it is different. I think the author's intent is good (explaining that homelessness can happen to real people and trying to impart some of the psychological cost of being homeless). However the author clearly has more resources at his disposal than a "real" homeless person. For instance, it is unlikely that there was a danger that he would remain homeless. [Maybe I shouldn't be so quick to say that. Once you fall down hard enough it can be hard to get back up.]

That could have been played up more. Every year millions of Americans become homeless, many of them relatively short-term. Often they are not who we would necessarily think of as homeless people (children, people with jobs, etc). It has a high cost on our society yet is largely hidden from view.
> The person was me, and you're completely mistaken about what I said, much less the intent. "Actual quality" is not an objective metric, and many ads are promoting new products that are high quality.

And many aren't. The question is: what heuristic better matches the average person's definition of "actual quality".

Let's look at this as if you were approaching this as a fresh, new problem: you're trying to design a heuristic that finds products that most closely match what people want. You'd have to be an idiot to think that "products that paid me to rank them higher" is a good heuristic. Even very naive heuristics would be better.

Paid advertising serves advertisers and people creating crappy products who can artificially inflate their image. It doesn't serve consumers or people creating quality products.

> Ranking in Google isn't magic. It's an algorithm based (in large part) on popularity. You're basically saying no new business or product ever has the right to exist, because anything that isn't popular now has no right to become popular.

No, I'm saying that advertising breaks popularity as a good metric. If it weren't for ads, organic popularity would be a good metric of quality. But advertising allows people to manipulate popularity in their favor without actually providing quality.

> How exactly do you expect something to become popular quickly enough for a company not to go out of business without getting the product in front of enough consumers?

I don't. I think that creating something good takes time. Why do you think people are entitled to a get-rich-quick scheme?
I think as long as you're not compressing secrets and attacker controlled data together you're fine.
Predicting Winners of the Rugby World Cup
us. Apakau.com. contact me.
In addition to sanddancers comment, you can also do things like:
- issue ephemeral certificates (with expiration in the near future) to allow a machine to perform an action but only for a certain amount of time (for example: to fetch credentials from a source to store in memory during machine provisioning).
- use client certificates to authenticate your end-users for secure web apps.
- easily build machine-to-machine trust models that take commercial CAs out of the picture
>I don't think I've ever heard someone complain about political correctness run amok

What about getting fired over a private joke about forking a repository?
Google launches online IT degrees in India
The major ad blocking extensions could do this. They already know about the requests. It's also possible to change the user-agent (say, use the top 10) and quickly gather the data using a bunch of cloud servers.
they have healthy balance sheet pay this off. But most likely, they will take on long term debt to finance this.
done and done. But better and more enterprise. Most kind of see CloudFlare is low end for wordpress types.
Is someone forcing you to support it? Do you feel pressured by us to support it? I think it exists independently from our support - it's not looking for backers or donors or consumers.
When I was teaching at General Assembly, I pushed to us to use Github for all of our assignments, workflow, etc. Homework turn-ins were pull requests, feedback was given via comments per-line that any instructor (or student) could make, etc.

The process to get students fluid at the basic flow took a few days, but after a while it was great and I couldn't imagine doing it any other way. Any programming course using this is obvious, but I'd even do it for non-programming things if I could get the student trained on it in a minimal amount of time.

The only roadblocks with git are that there's so many basic ways to screw up, which are hard to fix. Let's say a student does a `git init` in their `~/code` folder that holds all of their git projects... and then makes a bunch of commits, and then can't figure out why they can't push to github. I wish there were some better failsafes to prevent such things, but they happened by accident once a week at least.
How Apple Music’s Human DJs Compare to Spotify’s Algorithms
I guess they are saying all of the Gitlab code is MIT and all of the Mattermost code is AGPL. That's perfectly permissable by both MIT and AGPL licenses.

In practical terms, you can take the Gitlab/Mattermost distribution and modify the Gitlab code without having to release your changes. But if you modify the Mattermost code, you need to release the changes you made to the Mattermost code.
Google Talk is still alive, well, and performing bi-directional message delivery between XMPP clients with a Google Talk account and Hangouts clients. (Or maybe alive but for the fact that a Google VP hasn't noticed that it's still up and running. shrug)

Any client that speaks XMPP should work just fine to reach into Google's IM silo for direct messaging. I make frequent, daily use of Pidgin for this purpose. Sadly, the only way to access group chats is through the official client.

Also: If you haven't already, check out TextSecure by Open Whisper Systems. It has the best group-SMS handling of any MMS client I've tried. It's also made and maintained by a group of folks who are really concerned with making secure software that also happens to be as easy to use as is possible.
Will Apple TV Be a New (Sale) CHANNEL for Retailers?
Symantec employees fired for issuing rogue HTTPS certificate for Google
If it was a scam they would have cashed out at the top.
AdStein – Google AdWords Optimization Tool
Right, that makes sense.

Programmatically they were still 16-bit. But as an OS engineer, the 8-bit bus was very much evident when writing drivers, moving data, initializing memory etc.
Lots of things might be great for consumers, but for businesses it just doesn't make sense. Besides what I've read, I've heard from business owners/clients who try "group" discount services, but walk away feeling that it did little to help their customer growth long term.

Would you be willing to pay more for those same experiences?
Same here. I've had a great experience with their DNS service. Zero cost, and just as good as Amazon's Route 53 in my testing.
Report: Apple's electric car given 2019 launch date
AWS Grants for Research and Education
The lifecycle of scholarly articles across fields of economic research
Sadly this is very common. The freight companies own the rails, and if there's ever a route conflict their trains get priority over passenger trains. This means long delays in shitty railyards, and you have no way of making an itinerary.
That's the limit per year. The figures you're seeing in this article are per hour. It's not immediately lethal, but it's drastically elevated.
Wasn't Wayland supposed to be 100% default in Fedora 23?
Racket Package Server Security Vulnerabilities
P.J. Plauger had an article once about a co-worker who coded a chess program, which had two serious flaws: he got the search algorithm wrong, so that it was very easy to beat; and he didn't program it to lose, so that it would start to add pieces back in when it was about to. Plauger wrote, If you think kids enjoyed beating it, you should have seen their glee when got it to cheat.
We unkilled that user's comments in this thread and made sure the account wouldn't get caught by the software again. We also detached this comment from https://news.ycombinator.com/item?id=10258192 and marked it off-topic.
Net and Nancy – parsing “multipart/form-data” requests
>> I think you are dangerously wrong on that point. Of course the EFF has an agenda which colours their argument, but right now the DMCA is being used to prevent independent scrutiny of devices that are essential to people's lives.

How so? I think the EFF is going a bit off track here. They seem to imply that source code is required for independent testing. If we assume that's true, who gets to see it? How do they get to use it?

Emissions tests are circumvented by knowing the test conditions and/or sequence and having software behave differently during the test. You can either try to understand the software, or you can just change your testing sequence. Which seems more reasonable?

Now what if China wants to see your code to verify compliance? And Germany, and France, and every country to sell cars in.
It's a terrible metric that fails basic dimensional analysis. Anytime you see a ratio of logs, you should already be suspicious. Say algorithm A is twice as fast as algorithm B. Then we'll have alpha r/R log(T)/log(t). The alpha r/R is constant, so the only interesting part is log(T)/log(t) = log(2t)/log(t) = log2/log(t) + 1. We can make this apparently unitless number take any value we want just by changing the unit used to measure time (or if a unit were fixed, by changing the amount of data used to test).

It's sort of vaguely superficially sensible, but the idea of being able to reduce comparison of compression algorithms (which fundamentally trade off speed for compression ratio) to a 1-dimensional value is laughable. Charles Bloom's Pareto frontier charts (http://cbloomrants.blogspot.com/2015/03/03-02-15-oodle-lz-pa...) are one of the more reasonable options.
It's not about uranium but about plutonium .
Skype was down worldwide
The limit is 50mSv per year, not per hour. Sievert is cumulative unit that has to be either qualified by time or measured over entire lifespan to be meaningfully comparable.

But on the other hand quantitatively measuring and comparing radiation effects is hard problem as there is essentially nothing that can be precisely measured and at the same time has any meaning as to biological effects, in practice the conversions between various units are just done using various experimentally determined constants that may or may not be relevant to given situation.
That's a bug in the website.

The correct and active account is @gitlabstatus
Sort of. CloudFlare is eating into the bottom third of Akamai's business. A skeptic on that might say that Akamai's is an enterprise, high-end solution, and that CloudFlare is for everything else - and so they don't really compete. My contention is that CloudFlare will climb upwards, taking ever great amounts of their business (as so often happens in tech).
That bears the question of whether or not the law will select the right standard, or be able to change it when practical.

For instance, with USB Type-C coming out, with EU law be permissive of this transition? Or will the EU requirement adapt to allowing Micro-USB and Type-C for a while, and then eventually mandate Type-C?
CollabNet's New TeamForge Accelerates Enterprise Application Delivery
Coding, Visualizing, and Animating Bootstrap Resampling
Sustainable Energy Without the Hot Air has a section on the relative danger levels of various sources of electricity. I think we can assume Japan is similar to Europe in terms of regulation and safety.

http://www.withouthotair.com/c24/page_168.shtml

And I should say that Sustainable Energy is the best book on this topic you can find and that it's free online.
Cablevision Sold to French Company Altice for $17.7B
The problem which nuclear disasters have that almost all other disasters don't is the permanence of danger over such a large area. There have been plenty of large-scale chemical or industrial disasters - everything from Bhopal to Tianjing to Agent Orange to Deepwater Horizon - but they have the common property that the smoke clears and it's possible to neutralise, disperse or otherwise clean up the mess. Whereas Chernobyl and Fukushima are going to have exclusion zones that must remain covered for our entire lifetimes.
This is his writing style, he does shortcuts to keep thing readable and you have sort out the real world constraints yourself. That said the book is readable but some arguments that are difficult to understand.
> As for Quinn, no on here is talking about her or harassment other than the anti-GGers. I've been talking about Kotaku.

You brought up Kotaku in response to this post: https://news.ycombinator.com/item?id=10253942

The context is very specifically Zoe Quinn.

> In response to ethical breaches in your articles (opposed to your activism which I've broken down already),

What "activism" have you "broken down"?

> I'd say all of your articles are suspect given your publicly stated stance on non-disclosed relationships.

You do understand, right, that your standards and expectations for disclosure have nothing to do with any recognized standard for journalistic ethics, right? Just open a newspaper or read a website.

> How many of those articles are written about your friends without you disclosing it?

You tell me! You're the one asserting that I'm an unethical journalist. Surely you have some kind of factual basis to justify such an allegation?
Yes, exactly for all the criteria it is a matter of "the rates compared to marginal increase in risk".

Look at the 'A' grade. They're nice and safe intuitively, but in my opinion they're not a really good investment.
Virtualizing the locomotive