skysight-inc/HackerNews huggingface dataset:
There is no need to reverse-engineer the drug, as its under an expired patent—so all of the processes and techniques used are open and theoretically (if the patent office has done its job right) should be easy for a competitor to reproduce.

this is in fact one of the stated goals of the patent system: a limited monopoly in exchange for the advancement of public knowledge.
Martin Shkreli Has One Idea, and It’s a Bad One
I love unison, but how do you use it with inotify?
Wanna give a non-paywalled synopsis for those of us without a WSJ subscription?

Edit: Mass-reply: Thanks all! Learn something new every day.

For those looking for the same thing, go here, click first link. Should bypass the paywall:
https://www.google.com/search?q=http%3A%2F%2Fwww.wsj.com%2Fa...
Amen. Writing software the "right" way is time consuming and sometimes difficult. With commercial software, developing more features and content is often a more valuable use of developer time.
Flatware was built to be an S3 caching buddy for Tabletop, might prove useful for you: https://github.com/jsoma/flatware
well, thats what I'm getting at. By getting 10mpg better, do you produce fewer total emissions than if you had the emissions controls in place, but burned more fuel?

I imagine than there are many possible solutions where it makes sense to use strict emissions controls at the cost of fuel consumption, but there are also others where the increase in mileage would reduce total emissions further than the emissions controls would.

rough estimate. on a 25 gallon tank of diesel, with emissions controls in place, the truck goes 350 miles. on that same tank, the truck goes 625 miles with the emissions removed. so, to go 625 miles with the exhaust controls in place would use ~44 gallons of fuel vs 25. Is that actually a net environmental benefit? My gut tells me that the environmental costs of refining, transporting and burning the extra fuel are higher than the marginally higher emissions in the unrestricted truck. I don't expect those numbers would work out the same in all vehicles or cases though.

I think public health and fuel economy go hand in hand. the total environmental costs of petroleum are much higher than the emissions that come out of cars. reducing demand through greater fuel economy should be factored in to the overall emissions equations.
Yes, a device which has been accessed physically shouldn't be trusted anymore (theoretically) but I was talking about the case of a booted device being stolen by an attacker, not the case of one having been returned.

In practice, If you can detect intrusion and the device has a secure boot system, wipe the device and issue it new keys, re-encrypt all data to the new keys with some backup cold-stored keys.
That is incredible that a presidential front-runner has that kind of market influence in one tweet. It is clear that Bernie Sanders also has similar intentions as the article mentioned him pursuing punishing these business practices in August. It is insane that Medicare Part D made it so the US federal government is not allowed to negotiate drug prices.
> Servo is one of the most important software projects, since it will hopefully give us a secure or at least securable browser

I'm very interested in Rust, and in Servo as a "killer app" that demonstrates its promise. But what if they go to all this trouble, and it's significantly slower than C++-based browsers? (Yes, Rust can be as fast or faster in theory, but C and C++ have so much more resources behind them.) How much is stability and security worth to you?

I see (admittedly abstract) tradeoffs made in favor of performance all the time in software where data integrity is supposedly paramount. Will we really make different choices in consumer software?
On one hand, I see what you are saying. Other systems make it harder to make changes -- I get it. But is "harder" and "slower" better? Or it just gives humans more time to correct errors?

Many things can be misconfigured -- should we avoid those things and prefer things that are harder / slower/ more manual to configure?

It seems problematic to hear you someone moving away from a solid, tested, automated, fine-grained, multi-layer permission system (AWS with IAM) because it is "too easy to mess up". Let me ask this: what would it take to neutralize the "it is too easy to mess up" argument?

I'd summarize the overall problem this way. People make mistakes. Mistakes take time to surface. Certain kinds of mistakes are worth avoiding, even if it slows down a process.

What are the solutions to this problem? A: Use a slow, tool that does not allow quick, possibly dangerous changes. B: Continue using fast, easily configurable solutions but build technology and process around them to provide the guarantees your business needs.

The problem with the problem A, as described, is you lose the benefits of the fast, nimble system because you want to slow things down.

It seems to me that (B) is worth considering. Perhaps you could look into additional internal tooling and/or process to verify permissions.

(Keeping configuration carefully controlled is essential in any case.)
>The mass market was loath to cough up Cartrivision’s asking price of $1,600 (about $9,100 in today’s dollars).

Jesus, nearly 10 grand just to be able to rent movies?
You can read it: https://h4labs.wordpress.com/2015/09/14/hacker-news-faq-1-ho...
Yes, it was probably partly backlash against the way skepticism of feminism is treated by much of the media as either heresy or misogyny.

And with everything that happens online, there's thousands of people on either side, throwing mud at a small number of targets. An internet famous person gets treated like a politician or celebrity, without the benefits (and without necessarily having signed up to it).

And as with anything 4chan gets involved in, there was some pretty nasty trolling.
https://www.google.com/search?q=Apple+Speeds+Up+Electric-Car...
Google the URL and access it from search results and the paywall disappears:

https://www.google.com/search?q=http%3A%2F%2Fwww.wsj.com%2Fa...
“Tearing apart the products of U.S. manufacturers and potentially putting backdoors in software distributed by unknowing developers all seems to be going a bit beyond ‘targeting bad guys.’ It may be a means to an end, but it’s a hell of a means.”

The government continues it's never ending campaign to save us from ourselves (or each other?)
It's not fine to say it if it's not true

How about the example where the hiring manager says "this is all we can afford to pay for the position" when there are other employees at the company making much more for the same job? Shouldn't the employee feel equally taken advantage of? I was in this situation early in my career where I was told $55k was the highest they could go for this position, that's all they had in the budget, etc. This was a large publicly-traded tech company (at the time, private now). I knew for a fact it was a lie, but I took the job because I needed experience to put on my resume, so I wasn't totally naive. At my 1 year review, I later found out that other developers on my team were making $70-80k, so I used some of the techniques described in the pastebin post to get another offer for $65k, get my employer to match, then I got the other company to beat my employer's match with $70k. I stayed at that company for 3 months and then left to go to a better company for $80k. In this case I was completely honest about my salary, but my company flat out lied about what they could pay. After a year at $80k I switched companies and was able to jump to $110k by exaggerating my salary. I didn't lie about it, but I reported my $80k plus 20% bonus (that I had a good chance of getting), perks such as 401k match, free concert tickets, etc as a "total compensation" of $100k.
The exodus was from the Kenmou board who refused affiliate marketing on their board they claimed was data mining their IPs. The desktop clients weren't banned, just really old browsers they were using were no longer supported due to new methods of embedding ads. A lot of them used legacy browsers like this one which is no longer in development https://en.wikipedia.org/wiki/Kazehakase
There is a chart in this article that shows how significantly lab-grown meat decreases water use compared to meat from cows, sheep, pigs, and chickens. And this is referring to a process that is in very early stages! http://www.washingtonpost.com/news/wonkblog/wp/2015/05/20/me...
Maybe because lsyncd have nothing update from a year
https://github.com/axkibe/lsyncd
Of course there is non-exponential growth. Easiest counter-example is linear growth, or perhaps in the real world a steady paycheck:

p-next = p-start + growth-amount * t
Pro-tip: You can generally take any paywall blocked article, copy the URL into the Google search bar and click the first-result to get a non-paywall blocked version. Works for NYTimes, WSJ and a few others I can't remember.
rsync can be run in cygwin.
If the problem is abuse, that a proposed successor system may not be better is a major source of concern.
The only way you'd ever get users to disable their ad blockers on your website would be injecting them with a fast-acting poison and publishing directions to the antidote. If a regular publisher of article-based content tried this, they would just end up with no readers.
I skimmed through the paper and they used a punching bag for venting out frustration. I think that and video games are fundamentally different. Punching bag do not give you a sense of objective fulfillment which video games do. Also video games generally have group dynamics, even in quite a few of single player games. But agreeing with you on the broad point, other research papers do suggest that violent games increase aggression. Although another interesting link(http://www.huffingtonpost.com/2014/04/08/violent-video-games... :the actual paper is behind a paywall) seems to suggest that it is not violence but our failure to master the game play that causes anger.
The non-expert answer is: Because crypto math is difficult for randos to analyze, and it's not obviously the case that running an algorithm 4,000 times is 4,000 times harder to break than running it once.

And from a purely pragmatic perspective, why even consider it? You have a bcrypt/scrypt library, writing your own code is harder and almost certainly worse, so there is literally no reason to spend even a second thinking about it.
Well, internally the pattern password is literally stored as numbers, just like the pin. So If you go top right to middle right then to middle, then to bottom middle, your pattern will be saved as 3658. It's less secure than a pin, because obviously with a pattern lock a 3 can only be followed by a 2,5 or 6, and no number can repeat, so it's easier to crack than a pin.
All of which the Safari Developer tools do.
I have to tell you that free-market cannot be applied to every market. It doesn't work in education system and it certainly should not work in the health system. Of course nobody wants to die, and people would theoretically be willing to pay as much as possible to have a drug they need to survive. That doesn't mean that this drug has to have an extremely elevated price or not being produced at all if its non profitable. We are not talking about the new iphone here, but about drugs that people need to stay alive.
The VW cheat did not merely lie about what the car reported via the diagnostics port. It detected dynamometer testing for EPA certification and altered the engine calibration to produce compliant emissions.
First, just as a point of fact, WhatsApp is mostly mobile development and network engineering messaging systems, not web development. Disciplines that one would normally classify under "software engineering".

Second, you appear to be confusing Fundamentals of Engineering exams and Principles of Engineering exams. There is no Fundamentals of Engineering exam for any engineering discipline, including structural, electrical, etc. Only the PE exam focuses on individual disciplines. FE is for...fundamentals.

Finally, and ironically, they do in fact make a Principles of Engineering certification exam for software engineers[1]. It's been offered for almost 5 years now. As of last year, the majority of states offered the exam and license software engineers just as they do other engineering candidates.

1. http://ncees.org/about-ncees/news/ncees-introduces-pe-exam-f...
The one issue I have with that thought (without putting much thought into it myself) is the conflict of interest. By punishing Wired, Google is saying that the only approved (by Google) income stream is through advertising (Google's main revenue stream) and that other types of creative partnerships may lead to websites being downlinked (and downranking past the 1st or 2nd page is almost equivalent to delisting).

That line of thinking also begs the question whether only freely accessible information should come up on web searches, which would rule out any links to many professional journals which survive by subscription and/or fees per article. If you're punishing Wired for putting articles behind walled garden then it makes sense to punish all walled gardens and Google search becomes a search engine cataloging only free articles.
In my experience (and depending on the cost/product) a lot of open source commercial support gets bought for "peace of mind". The larger the organization, the more the higher powers want to be able to say "We've got vendor support" to assure everyone around them that everything will be "OK". The trench workers end up wanting the same vendor support, not because they think they need it, but because it gives them someone to blame if everyone goes sideways.

In the past I've paid for pfSense gold because it was only $100/year and it made my bosses feel more secure. We never needed it, never used it, but everyone slept better. Of course, that also goes back to how important the product is (which others have mentioned). If you're talking about support for OpenOffice (or whatever it's called these days) the likelihood of that getting bought is minimal.
Serious question: Why isn't there a "best practice" for this? A library everybody uses to store passwords in the most secure way possible, and when more secure ways are found, the library is updated and not your code?

Everything is so low level, manual and error prone for such a basic part of app security.
Slack integration for Django
Why Twitter Dumped Storm to Pursue Homegrown Real-Time Engine
Twice the allocations? That can matter for performance reasons.
Heh, this site offers as much "proof", as those shady news sites no one has ever heard of which pro-Russian internet trolls use to "prove" that there's no Russian invasion in Eastern Ukraine.

The parallels between the techniques employed by the anti-GG/SJW crowd and those of the Russian state propaganda are uncanny.

Strange times we live in.
> CO emissions are reduce 40X to pass the test

NOx, not CO. And it's up to, not always.

> Meaning, the cars are 40 times too dirty to be on our roads.

No, it means the cars are up to 40 times too dirty in this one respect to be on our roads.
AWS Health Dashboard looks green, but dynamodb almost unusable
iOS 9 installed on over 50% of users' devices
So you essentially then end up with PBKDF2, as long as you're using an HMAC configuration with your hashing function you should be ok. That said, just go ahead and use a PBKDF2 library so that you match what others do and you have an easier time with interoperability if you have to use a different language or environment somewhere else with the same set of users.

The reason you want to use HMAC is the same as always, it provides better security against a number of attacks that could recover the secret, https://en.wikipedia.org/wiki/Hash-based_message_authenticat...
Web Dev Weekly #2
Liwe: Using smartphones as WebApps controllers, without the pain
I'd argue that the health impact of eating meat, especially when it's shot through with antibiotics and hormones and contains the pain of the suffering animal, is bigger than eating organic tomatoes with a tiny bit of sugar.
There a live demo available on http://liwe.github.io/app-circular-menu

This project is still on beta and unstable but I would love to have developers to play with it and get their feedback and see what new features they would like. This is just a side project for me, under MIT license, but without users it has no reason to live.
Colbert just had Tim Cook on his show (this past Tuesday) and put him on the spot about this very topic. Maybe related?
This is one of those classic "caught in the middle" problems. Small companies won't be able to afford decent support contracts, big companies will vertically integrate by developing/hiring in-house expertise.

The last place I worked was a medium-sized software company (60 people, $xx mil ARR) and we paid about $8k/month for MongoDB's enterprise support (generally quite good) as well as for AWS Enterprise support, which provided faster escalations when getting limits raised (EBS sizes/counts, EC2 instance counts, etc), as well as advance notice of upcoming features and architectural guidance on building our app. I probably wouldn't pay for AWS's service again, to be honest it feels like Amazon built it because bigco enterprise wants to pay for support, whatever diagnosis they did invariably pointed right back at our own configuration/operational error when dealing with AWS (gotta love those security group rules...)

I've long wanted a service where we could sponsor roadmap items for open-source projects. Not sure how putting $ into the equation would interact with an existing open-source product roadmap, but it's de facto what happens today, when fb/yahoo/etc. staff projects with their own developers, who they pay to develop features relevant to their own businesses.
Volkswagen shares plunge on emissions scandal, U.S. widens probe
Can't vouch that this is the case with keybase, but where I've seen this done before, the hash is calculated in combination with some kind of time-based shared secret at both at the server and the client and then compared, with the theory being it would protect against the TLS connection is MITM'd; all the attacker would get is the hash, which is then useless as the time element isn't known.

IMHO, MITM would be better defended against using HSTS, certificate pinning, and perhaps DNSSEC.
Translation: https://translate.google.com/translate?hl=en&sl=de&tl=en&u=h...
I take a contrarian view on this. Such advancements / toys / useless things are vitally important to forward progress. What this article fails to recognize is that innovation is often built on the current "pareto (efficient) frontier" ... that is, it is built around the universe of available devices/applications/protocols/technologies/useless-things ... rearranged and consumed in new and novel ways. While the final application might not be a smart oven, as it might indeed be a useless item, that final application could very well be an application that requires the availability of a smart oven from which to build on, or one whose innovation was triggered by the availability of a smart oven. In other words, a smart oven plays a role in innovation and society as a whole, and shouldn't be dissed.
tldr: Shipping something by 2019, hopefully.

Also per the other comments saying "dump the link into google". You can fake it with something like https://chrome.google.com/webstore/detail/referer-control/hn...
The only exception to this line of reasoning is that S3 buckets have the option of being open to the world---an option that may not be as flip-the-switch simple if the insurer needed to cobble together their own solution, because why would that information ever need to be world-visible?

Of course, cobbling together one's own solution opens up an entirely different (and generally larger) security surface.
The community is small and everybody knows each other.
I wasn't going for causation (or even correlation). Just to convey the general time frame.
Great point! According to research done on "Blue Zones," the healthiest community in the U.S. is a group of Seventh Day Adventists who are vegetarian. It would be so interesting to see what their diet has in common with vegetarians in Indian and Sikh communities.
The A-10 was designed for an anti-tank role. So, I suspect there rounds are generally overkill. A smaller round than you might think can penetrate a brick/cinderblock wall. For hardened targets an Air-to-Surface missile can have a lot more penetrating power. In the end some compromise between the two is probably ideal.

That said if you’re doing dedicated ground support I think you’re going to want a lot more round than an F-35 is designed for.
I suspect that if you print a double-sided record, you will get some significant cross-talk between both sides of the LP :)
I use rsync. Question for you (or any expert here). Is there any possible way that rsync can alter the source file (unintentionally I mean, by accident or bug)?

And what happens to an rsync file that is modified while in the middle of a transfer? [1](I haven't been able to find satisfactory answers to these questions hence the question here).

[1] Say you have a 1,000,000 line file that you are rsynch-ing and you delete line 50000 and insert at line 750000?
Django provides this and you don't have to worry about it. However, they did not for a bit, even as the discussions raged on about how salt + SHA1 is bad. The reason was that Django is 100% pure Python and at the time the only available implementations of any of this were C Python extensions. Ideally, I'd love to see bcrypt, scrypt, and PBKDF2 included directly in Python's stdlib so that people wouldn't have to re-invent the wheel every time they use the language.
Holocaust museum tool aims to predict, prevent mass killings
> The book was definitely satire. Heinlein doesn't come right out and say how absurd the whole thing is, he lets the reader figure that out. I guess some don't.

Everyone's entitled to their interpretation but you're getting downvoted because you come across as kind of a douche when you state things this way.

The notion that Starship Troopers was an antiwar satire is rare enough that you can't really link to a Locus story advocating it and then, boom, drop the mic. Successful writers who knew Heinlein, from Haldeman to Pournelle, have always characterized the book in a very different way.
> But is "harder" and "slower" better? Or it just gives humans more time to correct errors?

For risk mitigation, these are somewhat equivalent. There's a reason critical switches get molly-guarded.
I should probably re-read The Forever Peace. I, on the other hand, have The Forever War on my favorite SF list but nothing else of his that I've read--and I have at least a half-dozen on my shelf--have ever grabbed me enough the remember them.
Modern password hashes are designed to use a large amount of RAM in addition to CPU time in order to make password cracking using ASICs and GPUs more difficult. The paper on Argon2[1], the winner of the recent password hashing competition, would be a good read if you're interested in learning more about how password hashes are designed.

[1] https://www.cryptolux.org/images/0/0d/Argon2.pdf
It's literally just a shell script, it's not like it can't be ported to other *nixes

http://anonscm.debian.org/cgit/pkg-ssh/openssh.git/tree/cont...
The funny thing is, I find HTML5 to be much more predictable when it comes to formatting :)

But maybe that's just my ignorance of LaTeX showing, although I did manage to write two theses in it.
Soopa Groop Ft. Layzie Bone (Bone Thugs N Harmony)
I would take any triply-nested for loops, and reduce each loop to its own method. Inside that method would be nice, easy-to-understand stream logic rather than for-loops.

The Java compiler will unroll the methods anyways, so you get easy readability without any loss of performance.
Screen readers support Javascript, if that's what you had in mind. http://webaim.org/projects/screenreadersurvey5/#javascript
Bookmarklet?

javascript:window.location="https://www.google.com/search?q="+window.location