skysight-inc/HackerNews huggingface dataset:
I don't know. Ask a lawyer or judge. You can read the licence http://opendatacommons.org/licenses/odbl/1.0/ and look at the definitions of "Produced work" (a map) or "Derivative Database".

In practice, no-one's really done that or likely to do it. Either you'd do something silly like make the map a SVG with all data encoded as textual attributes and your "Computer Vision Algorithm" is basically grep (in which case it would probably be seen as a Derivative Database), or do real CV on a real image, which is very hard to do and will result in bad results. It's sufficiently hard that no-one's worried about it.

If you really don't like the OSM licence, you are free to go to another map data provider, pay them what they charge and agree to whatever they want, and get something else. If you want OSM, agree to OSM's terms.
It's not a strict calculation of "how much is development time". For things like IRAP, the time spent has to be cataloged against a specific R&D project you've received the grant for. For SR&ED, you will be laughed at for claiming 100% of an engineers time.

There's a chasm between SR&ED being "easy" with less than 5 people and when you have enough "operations people" to make this "easy again"; I would bet that most companies don't have the operations resources until they are well over 50 people. At 50+ people, you're past the point where these grants can have the most impact.
> IMHO the main reasons compared to, say Ruby, would be: native support for concurrency, Erlang VM, fault tolerance and speed. However, I'm also disappointed that there's no type checking.

You should check out Dialyzer.
A True Star Wars Collector
I don't really feel like the librem laptops offer much value when built using a processor with IME. It's offering a mostly open source laptop, but still has a massive gaping backdoor for someone to log your every keystroke and get every bit of your data - even if the laptop is off or your harddrive is encrypted (source: http://libreboot.org/faq/#intel)

I am more excited in the continued development of the Novena laptop (https://www.crowdsupply.com/sutajio-kosagi/novena) but it's a shame there aren't any suitable modern processors to use in it.
is this something like slack?
Yes, I've just tried bitcoin for the first time for receiving money and I couldn't believe how easy it was.

What options do you suggest for converting to local currency, USD in your case?
It isn't. Newlisp shares that not much with McCarthy's Lisp. newlisp does not even have linked lists, it has a different evaluation model, ..., no GC.

Languages like Standard Lisp, Franz Lisp, ISLisp, Eulisp, Emacs Lisp, Visual Lisp are in the Lisp tradition and share a core language.

newlisp is a different language. Call it ParenthesesScript, ContextScript or something like that.
That's like saying Google search is "objective" because it's "just software". Google engineers write how the software will act...In the same way, drones will act how the humans tell them to act in various scenarios.

When we get super-human AI, then maybe we can hope for that.
Here's a simple scenario and I don't see any mitigation.

A site exists, let's say "search.com", and having your searches leaked is bad. A victim opens up a new browser (no HSTS from existing connections) and goes to search.com. An attacker MITMs this HTTP request and injects their own session cookies and then redirects to https://search.com. At this point, let's assume full-domain HSTS kicks in and no more HTTP/MITM are possible.

Now the victim is on https://search.com, lock icon and cert are a-OK. But the user is signed in as attacker. The user might not notice this, and makes searches, which are now available to the attacker, in the attacker's history.

Problem: Fix this, without overly relying on the victim noticing they are signed in as the attacker. After all, they just opened search.com for the first time and aren't expecting to be signed in (though they are wary of HTTPS and do notice the green URL bar).

Perhaps it is slightly contrived and the answer really is "Well, always look on a site to see if you're logged in as someone else". But otherwise it seems rather difficult to fix, outside of HSTS preload. (And this ignores all the other issues noted in the paper.)
REST API Design – Nouns vs. Verbs
This documentary film was shot entirely in 4K on the new iPhone 6s Plus
Thanks, Patrick - that's a pretty fair overview of what we do.

We noticed that the buyer avatars we used in a podcast (Newbie Norms, Portfolio Paul, Lifestyle Larry, Strategic, Sally, etc.) really resonated with our audience. We've since expanded on those a bit in posts, later podcast episodes, etc.
Wow! Now it would be great to have this speech recognition service available as an API.
I think the details they give support that description well. He'd probably be a trip at a Makerspace or something. Relevant to this product, it's saying he can probably code up something pretty good based on that track-record and initial reviews support that. However, making a secure system or product requires a lot of expertise that most in NSA don't have because NSA largely got rid of that expertise like everyone else. IAD mostly just does the reviews of high security stuff with contractors having the few people that build it. An example of their high assurance work is the Inline Media Encryptor. They're usually pushing garbage like VMWare mods and SELinux, though, presumably to weaken us. So, I agree with you that "ex-NSA" means little to nothing without lots of extra context. We got that context in this article, though.

Solving secure email in a strong way takes incredible expertise in the email standards, common ways their implemented (prevent breaking stuff), OS interfaces, language, some cryptography, and protocol design. Every strong, usable product w/ legacy compatibility has a whole team backing it with a track record in these. They're also expensive. So, I have my doubts any time I see something like "these few people will solve secure email, on every device, and for only $48 a year." Unlikely lol...
The notion that Urbit believes it can solve all the problems, rather than tackling a single important problem, is one of the things that makes it unserious to me.

The inflexibility of the Internet service model is a serious problem. Poor formal methods for verifying protocols is a serious (albeit not lucrative) problem. Programming languages that make it difficult to express correct programs: serious problem. It is not clear to me how the solution to all three of those problems is the same startup.
Unfortunately in the US in many places we can't even get adequate paving, so expecting animal overpasses is a bit of a stretch.
"Incredible expertise in the email standards"?
This is still vulnerable to the same kinds of attacks you can do with login CSRF: http://seclab.stanford.edu/websec/csrf/csrf.pdf

Though the attack scenarios for that are always very tenuous.
The government is concerned with the shape of the society it represents as well as the end result.

No it isn't, it's concerned with perpetuating itself and its bureaucracy and maintaining whatever hold on power it and its people have established... and with grabbing more power when and where possible. Any social good the government does is just a happy accident / side effect.
1)There is sometimes a very slight performance hit as there is more space between arrays and you miss on cache

2)using something which is smaller than MAX_SIZE is never worse unless you write some safety critical software where a bug when you write to unintended but empty location is better than writing randomly somewhere and/or crashing. I prefer the latter in what I am doing (as it's easier to find something is very wrong)
> the Ad blocking companies are a bit of a fraud, as they're blocking ads then allowing certain advertisers to buy their way back in! Like an extortion racket.

I agree. This is so blatantly shady that I can't believe people actually do it.

> It's certainly a juicy topic for discussion.

I'll agree with that too.
> This is exactly the way it's used in shell scripting

You say that like it’s a good thing.
You might do more than just disagree. You might supply some reasons why you think Scheme isn't a Lisp. That would make a much more informative post.
i wonder on a grand scheme of things if this is really a waste/spend of resources that actually matters.

if people in 200 years from now look at our century's (or even generation) expenses - would they even see those kind of expenses anywhere?

on the flip side:

balance in nature is something we have still a very hard time recreating. reversing extinction is close to impossible. and imbalance of nature is potentially one of the biggest cost drivers for future generations.

i see this as cheap R&D for future investments in the balance of nature 100 years from now.
In the real world there are a hell of a lot of people who are homeless who have smartphones. They're getting pretty ubiquitous.
I discovered this a while back, because Nearly Free Speech has it as a CGI scripting language. The details of it's GC was rather interesting -- I've been meaning to implement it in one of my lisp projects.

EDIT: I just checked, apparently nfsn doesn't support that? Weird, now I have to work out what website I found it through...
This right here is what I mean when I suggest Urbit is unserious. "Green is just yellow and blue. Why do we call it 'green'? That name sucks. From now on, we're going to call it 'yellue'."

There's overreaching first-principles boil-the-ocean dorm room rethinking of concepts, and then there's renaming the ASCII characters.
Baltimore has an interesting network of outdoor walkways above street level connecting the inner harbor, convention center, and a few nearby buildings. I have long thought a city could do this for a much larger part of downtown at reasonable expense.

Crystal city VA on the other hand has an underground mall covering well over a mile including a subway stop. The upside is weather becomes irrelevant, but the downside it's a winding path making the surface faster and presumably it costs much more to build and maintain.
2015 The year of the chat clients
I don't see it as black and white like that.

Initially, the tech simply won't be good enough to blur that line sufficiently or to have it be "always on." So it will be a temporary thing you put on and experience.

When it is more immersive, and devices are more like glasses or contacts, you'll likely start seeing people spend more time with some form of VR component being "always on." Things like artwork on the walls, lighting, upholstery, paint colors, etc.

Taken to the extreme, if you are a poor person living in a shipping container at some point in the future, and you can afford a device like this, I don't think it is unreasonable to expect that person to spend a disproportionate amount of their time in the virtual experience. That said, they will know it is virtual--it will still just be preferable to reality.

It all comes down to escapism and how that works. This is just a better form of it that will be more widely accessible down the line. I've never argued that VR is a new concern for that--it is just a new tool to facilitate existing approaches.
If they don't have an impressive QER, I get axed. That's what I mean.
> What worries me is that certain developers, especially
> developers early in their career, may get the idea that a
> startup engineer is not a problem solver or computer
> scientist, but... their task is [instead] to memorize a
> new... language, framework, or library - in many cases to
> get limited benefits.

While I agree that it's possible that an early stage startup (and I mean _early_, like building their first version) might flounder around rewriting their app using different tech stacks and never actually ship anything, I suspect that it's more common to see companies delay releasing their first version due to reworking things that are perfectly acceptable for a rough first version.

(edit: Also, I think the idea of a "sacrificial architecture" is useful when starting out. If you're lucky enough to need to massively scale, you're going to have to replace everything eventually anyway, so don't get too hung up on trying to make things scalable from day one.)
But even with HSTS, if it wasn't preloaded, an attacker could inject cookies on the first visit (then take user to real HTTPS site). Or, if the domain doesn't have full HSTS for all subdomains, there's still a potential vuln as you can inject from non-HSTS subdomains. The paper notes that Google and some other big properties have technical issues in deploying global HSTS.
One-engine VTOLs need an ejection seat.

NASA built several "one big engine on a gimbal" lunar landing trainers for Apollo. Over the short life of those special-purpose craft, three pilots had to eject - two astronauts and a test pilot.
The Disneyworld one is still there. Funny that I rode it as a kid, then I was able to take my own children on it just a few years ago.

Disneyworld also has a railroad (and the monorail) that serves a purpose of serving the whole park. I went at peak season and the railroad seemed to keep up with demand, although I think that's because it serves the "outside" of the park, and if you're wandering the inner parts of the park it's just easier to walk to where you need to go.
I'm not sure this is a discrete, static problem that can ever be 100% solved. We're talking about the speech patterns of billions of people...different accents, vocabularies, dialects, health issues (ex, stroke victims), etc. I'm sure it'll surpass human-level recognition, but there will seemingly always be use-cases that will present unresolved challenges to the AI.
The federal government is not a for-profit corporation intent on profit.

Not on paper, no. In practice, it's a massive mechanism to transfer wealth to the rich, connected, insiders and the sycophants who hover around them and suck at their teat.

As with any customer, your goal should be to give the customer what they want, while educating them about what they need. At the end of the day, you need to make your customer happy, and for a federal agency that often means don't fail, don't get their name in the paper. Which generally comes from doing it in a predictable fashion with incremental change.

So very true. "Not getting their name in the paper" is probably a good idea for most customers.
Why Does British Humor Fall Flat in China?
This is a silly discussion because those who complain about curl|bash are also those smart enough to curl -o file http://... && vim file and read it before running it.
Mathematica programming – an advanced introduction (2009)
Cool because it breaks down types of humor in advertising and explains what categories of humor work.
Ah, so come to find out, the Jetta TDI 2009-2014 did not have AdBlue (I mistakenly believed the one I owned previously did, a 2010 model).

However, VW added the AdBlue system to the 2015 Jetta TDI -- perhaps because they knew that this was a problem:

http://www.bimmerfest.com/forums/showthread.php?t=765593

On top of that, even though the Passat has an AdBlue urea system, it's still affected:

On the open road, a Volkswagen Jetta TDI blew through the
U.S. nitrogen oxide (NOx) emissions limit by 15 to 35
times. A VW Passat TDI (with urea aftertreatment) was 5
to 20 times the maximum.

http://www.greencarreports.com/news/1100125_vw-diesel-emissi...

So yeah, I'm not a happy owner right now.
You can programmatically add as much verification into your shell script to verify it's not tampered. All the Attacker has to do is replace your shell script with their own to neuter everything you did.

You will never escape the insecurity of this because you are connecting to another server and accepting whatever output it gives you to run under a bash process. They can poison your process via DNS cache; using a transparent proxy to replace the content. Don't assume that just because they are using HTTPS that it removes all attack vectors.

This is lazy; and insecure. Ship a proper package in a proper repo that people can programmatically add using Chef or Puppet or whatever their moment inspires.

P.S. don't create curl https://uninstall.sandstorm.io | bash
isnt this basically the same idea as plan 9, but with some more opinions on "decentralised" networks.
I wouldn't be surprised if all the messages code is still in the app.
yep - very similar but with an emphasis on self hosting.
NewLisp was designed by a psychologist, who took meticulous care to endow it with design elements such that it would be instantly hated and denounced by anyone who has had anything to do with real Lisp, causing them to spew babble that is incomprehensible to NewLisp n00bies, save for the lingering perception that something gratuitously negative has been spoken. This, in turn, has the calculated effect of making them dig deeper into their trenches.

It is best to remain silent upon the subject of the NewLisp design. Let people make their bed and lie in it.

By the way, if you want to see a really crazy NewLisp zealot, search for Kazimir Majorinc. Wow ...

Maybe he's quit since (and even reformed?); it's been a few years.

> Changing the binding time for free variables within a closure

What closure? NewLisp has done away with those, and offers "name space contexts"

http://www.newlisp.org/index.cgi?page=Closures

These are basically something like modules with static variables.
Is this integrated with a vote counting method? Does it support preferential voting, multiple choice?
I asked this only after googling, and having done previous research.

The best I was able to find for RPM is https://www.redhat.com/archives/rpm-list/2001-December/msg00... , which involves creating your own RPM database in your user directory, and using --prefix. Unfortunately, --prefix requires an RPM to have been built with relocatability http://www.rpm.org/max-rpm/s1-rpm-reloc-building-relocatable... in mind, and my experience is that most RPMs I've found from RedHat, EPEL, and Fedora aren't actually relocatable. Further many of them depend upon other root-specific things like creating new users, editing init files, chowning, etc. Of course, with this approach, you also need to create a dummy package to provide dependencies for all of the root-installed things on the system, and keep it up to date yourself.

I looked through https://docs.fedoraproject.org/en-US/Fedora_Draft_Documentat... at your suggestion, but was unable to find the section you're talking about. Perhaps I overlooked it?

I'll also note that yum requires root unless you're willing to make substantial modifications to its source code, a process that I started but was never able to finish. This is outside of the scope of what I asked, however.

I'm less familiar with dpkg, but everything I've found so far simply suggests going around the package manager and instead unpacking the package and dealing with it manually.
The problem is that Canada chose to route their largest national highway, Trans-Canada Highway 1, right through a National Park. This is just mitigating the downsides of that decision.
Yes, this is true.

Unless extraordinary measures were taken at the time of acceptance, there will be no real way to prove what the actual text was that you saw and allegedly agreed to. Presumably the text of the contract and the symbol of your acceptance are stored in some fairly standard database. Almost all computer data can be modified to look any way a party desires. How can we know that the contract Google presents as evidence was the exact contract you agreed to at that computer terminal however many years ago?
It was a very interesting story to read. Glad they managed to build something that's is potentially strong while easy to use. That's difficult to bootstrap. Unfortunately, it's so difficult to design good cryptosystems, protocols, etc. that I can't trust the product until it gets strong, peer review from a diverse audience. Both the level of screw-ups in the field and massive investments in subversion by nation-states means a tool like this needs to be fully open-source plus local, build option. Note that they can do open-source w/ proprietary license.

The escrow is also a problem. There's the risk of hackers, malicious insiders, courts in regular legal system, and the court in the secret legal system. If you do escrow, it needs to run on the most secure and tamper-resistant systems you can throw at it w/ 3rd parties verifying this. Given above risks, it's better if they don't do escrow and instead switch to a private/public key model. Bernstein et al have given us some really fast and secure software for that, too. They just auto-generate the key-pairs locally & handle the public key management instead. Would be a nice improvement.
Nice work on Rockets: the website feels zippy. Not something you can say of web libraries these days.

What is a good starting point to pick up on newLISP for someone new with programming? I'd like to do some automation (parse lots of unstructured text) to get good data, create PDFs, accept data from email and have a lightweight web front-end.
> why create a lisp instead of a scheme?

In the broad sense, Scheme is a Lisp.

In the abusively narrow sense, where "lisp" is used to mean "Common Lisp", newLisp is not a lisp.

> What is the fundamental feature that makes NewLisp a LISP more that a scheme language?

Scheme is a restrictive group, roughly equivalent to Common Lisp. Common Lisp and Scheme are both members of the broader group, "lisp". Racket -- which was renamed that from PLT-Scheme because it was not strictly a Scheme -- is a Lisp that is neither Common Lisp nor Scheme.

NewLisp, while neither a Scheme nor a Common Lisp, seems to be more like a Scheme than a Common Lisp (though farther from Scheme than Racket is.)

Its differences from other lisps are discussed: http://www.newlisp.org/index.cgi?page=Differences_to_Other_L...
If you're a sociopath, that background reads as a proven ability to commit profitable but "plausibly deniable" crimes.
JVM threads are relatively heavyweight. The JVM would fall over trying to run as many threads per machine as BEAM will happily run. And you still have the stop the world GC in akka.

Obviously that's not the be-all-end-all measure of a VM, but in the context of actors it's pretty damn important. Akka is essentially an actor library bolted onto a VM that really doesn't like what it tries to do. Some people make it work, but there's a lot of friction from the GC that gives rise to some really undesirable performance characteristics.
We are all just bags of meat.
Except that his phonetic sequence probably wasn't entirely correct. We don't repeat what we hear, we repeat what we think we hear, after we put our native tongue's filter over it to try to make sense of it. So what he said to Google voice probably wasn't completely accurate, but it still knew what he was talking about.
Netflix planning to produce its own TV shows
My assertion was that a perfect algorithm, fed biased data, produces biased results. Given Ferguson, etc., data from the justice system may be biased, at least for some locations.

If the arresting officers are biased, the number of arrests are probably biased. I'm not sure that you can fix that with better data collection methods; the problem isn't with the data collection. The problem also isn't with the analysis.

It may be possible, at least in theory, to create an algorithm that will determine whether the officers are biased, or whether the race in question actually commits more crimes. I'm not optimistic about that working in reality, though.
Telomerase: Hacking your lifespan
Is there any technical justification for this or it's purely economical/financial?
You know someone's going to pop up and talk about the Russian names for blue, and how changing the word allows us to change the way we see things, right?

http://www.pnas.org/content/104/19/7780.full
Also open source (which means it can be extended / modified / etc).