skysight-inc/HackerNews huggingface dataset:
I found the comparisons wanting, as they only estimated the delays caused by the downloading of the data. They apparently made no attempt to measure the performance impact of actually running all the trackers/ads in the browser. From results posted elsewhere, I believe this is also a meaningful amount of time for many sites.

So the net improvement of an ad blocker may be even higher than stated here.
You are still not understanding me. You know nothing about me or my living situation. My state's unemployment maximum amount per week is $538. That barely covers my rent each month.
Want to be kept updated on an awesome Guide - 'The Sketch App Design Handbook' that I'm currently working on? Join the Mailing List, and you'll be kept in the loop (with an awesome bonus for signing up early).
Do we really believe that science, if faced with the immense challenge of orbiting debris, won't find a way to regain access to orbit?

When did we become so pessimistic?
Sure, why not. France already seems dead set on making sure Google can't do business there.
This is what is assumed to have happened to STS-7 (Challenger, not fatal), check the photo of the impact crater in the window here:
https://en.wikipedia.org/wiki/Space_debris
Outlook for Mac 2011 on OS X 10.11 hangs during account sync operation
If you haven't seen the movie Gravity and the imagining of high velocity orbital space debris yet... go see it!
I would love to see some form of this concept implemented here in the US. Does anyone know of any startups trying to work on this? I wonder what some of the larger obstacles are from having this created.
I cant believe you tech worshiping nerds think satellites are real. Look in to how hot the thermosphere is, theres no way satellites exist. Go try and find any picture of a satellite out in space, its all cgi and paintings.
Agreed - I about the ease of use - example:

Yesterday, I logged back into to look at their new UI (which is very pretty) and it took me 5 minutes to figure out how to remove someone from the workspace

Trello doesn't have the design that Asana has, but it gets the done. You can also add task lists using markdown in Github issues, which is my personal favorite.
Calling R in Python
Biuro rachunkowe Płock
You might just as productively argue that there is no such thing as a modern single-user system, since Windows isn't that either. His point is pretty clear.

OTOH: The debate here is a little confusing. What SIP is doing w/r/t/ /usr/local isn't unprecedented; securelevels and the immutable flag could have the same effect on OpenBSD all the way back in the 1990s.
Seems trivial. You go to the CDN page to get the script URL and right next to it is the hash. Maybe they have the whole tag for you to copy and paste.
Agree. You can have all the skills in the world, but sometimes you need fate (or whatever you want to call it) to fall in your favour.

A small example, not related to this, but when I started DJing about 15 years ago, I put on a party that was a warm-up party for a bigger night. I told John Digweed (who was running the bigger party) about it. John Digweed was one of the worlds biggest DJs at that point, and as 'luck' would have it he was releasing a new mix CD. So the world's music press was there to interview him.

He came down to my party with the world's press and suddenly my first ever party was in magazines across the globe. I started getting offers of gigs all over the world after that. There were much better DJs around (I was pretty average back then), but I'd had the stroke of luck which ended up in a pretty successful 'career' (I put it in quotes because I always treated it as a hobby, but by most people's measurements it was pretty successful).

Knowledge and skill is obviously important, but luck definitely plays a role, especially when it comes to areas of life that very few succeed in.
He's asking because you brought FHS up.
Hi! I'm a bit confused by this.

What would the attacker here be doing, and how? I read the piece on your site, and it's not clear to me what the attacker would be updating, and what effect it would have. Can you explain?
8 am - 4:30 pm, 30 minutes lunch (optional: 60 minutes/5 pm finish) and two 15 minute breaks.

US, programmer, state-education.
I've been on the hedge fund algo side for years. You're spot on and it's what a lot of these guys on this thread are clueless about.

Basic or simple approaches can be combined with others and be statistically/mathematically sound and robust.

Some work for periods of time, some don't, some stop working. Algorithms degrade over time and that's continued optimization is a must.

Case and point: LTCM and the story behind black scholes algo running up against a black swan.

I'd highly recommend watching this for the others reading this thread that really just are familiar with the whole space:

https://www.youtube.com/watch?v=lmvxZgnwwD4
Is there a way to bring back the voting prompt after it auto-disappears? Personally I'd rather hear more of the song before voting good/bad.
There's an anime adaptation that's very well done. It explored the ideas of debris in space and clean-up efforts surrounding it pretty neatly.
Definitely. Some types of living beyond means (buying expensive toys, regularly flying to expensive vacations, eating out a majority of the time) are easy to correct. Loans and depreciating assets will be much more difficult.
thanks man!
Bullshit. Nobody forces you to live in an expensive city. Nobody makes you buy a million dollar house. You chose your own destiny. Stop putting the blame on others.

I lived in Chicago on a $800/mo salary for a year and a half. Yes eight hundred dollars a month, in the city of Chicago. I had no money, but I made it work, then I moved back home to small town Iowa and make a lot more now, and live a better life. Nobody made me do either of those things.
that seems a bit too expensive. Where do you live? I can't imagine how it would cost more than 100 bucks for those ingredients, and I feel like if I went out to buy the ingredients right now (Chicago) I'd be able to make it for 80.
The alternative is that Microsoft, Apple, Facebook, etc build their own Great Firewalls and become countries. I'd prefer that but many people have a strong sentimental attachment to countries based on geography.
Home office desk of former ESPN designer
Of course we'll find a way.

But who will pay for it?
Civil aviation is a big user of weather forecasting too. Trans-ocean flights could get risky without it.
Ditto. And Homebrew's policy of avoiding installation of built-in packages by default means that you don't accidentally break your whole system when MacPorts shadows a critical core package.
Nope. My argument "Any server today should be able to saturate it's network connection serving static content." still stands. Which I wrote as clarification to stop someone from thinking / posting what you did.

It doesn't matter how many requests for same images. Any server should be to fill network link serving static content. Even slow Apache could saturate 100Mbps 15! years ago. https://www.devside.net/articles/apache-performance-tuning

Those 200 images all fit into memory. All the server is doing is answering requests and copying those to the network interface. No disk IO, no computation, maybe not even the copy if server/nic can do zero-copy.
1. Not many people hand-write HTML tags these days, they tend to get generated at the level of apps like WordPress (which already has an SRI plugin) or frameworks like Rails (which can already do things like javascript_include_tag :application, integrity: true).

2. The people who do hand write HTML tags tend to be precisely the type of people who would go out of their way to generate an md5 checksum on the commandline, or write a script to post process their HTML files.
My food budget is 3 times your food budget.

My housing is 3 times your housing budget.

My student loans are $200/month.

My car payment is 300/month.

Income tax rate 9%.

Sales tax: 0

Medical insurance: $8000/year

Auto (and other) insurance: 1200/year
What are the compile times like? Is a simple watch script with a re-compile sufficient?
Death in the city: what happens when all our cemeteries are full?
Panorama Education (YC S13) Launches Playbook to Give Teachers Some Answers
I don't know of any declarative tools, although I've written some tips on using Rails migrations here:

http://illuminatedcomputing.com/posts/2013/03/rules-for-rail...

The problem with a declarative tool is managing change over time. What happens when you want to change a relationship from one-to-many to many-to-many? How does the declarative tool know how to migrate the old data? There are lots of examples where you need to say specifically how to get from point A to point B, especially once you're in production and can't just throw everything away and start over.
>First degree price discrimination would be an auction system. We would see spots at Harvard, Stanford, and MIT going for tens of millions of dollars. Merit would mean money. Thankfully, we aren't at that point yet.

Actually, we are:
http://www.forbes.com/sites/eamonnfingleton/2012/11/30/do-th...
https://www.quora.com/Do-rich-people-really-pay-their-way-in...
For travel, the local radar is more useful than a satellite picture or medium term forecast (where the sat data matters more).

For food, forecasting lowers production costs, but it isn't good enough that our agriculture actually hinges on it.

I realize my phrasing is blithe, but I simply don't see a lot of deep dependence on weather forecasts, they are used to good advantage, but would not be such a huge loss.
Low earth orbit is about 8km/sec. That means you could have a collision anywhere in the 0-16km/sec relative velocity range.
How the black swan attacked the black scholes algorithm [video]
We'd have to adapt.

Plans to colonize Mars and the like would have to be postponed.

Important satellites would have to hug Earth's atmosphere to stay (somewhat) safe. They could look somewhat like this: https://en.wikipedia.org/wiki/Gravity_Field_and_Steady-State...

More fiber optic cabling would be required. Local stations to retransmit information would have to be created (or existing infrastructure, such as cellphone towers, would be retrofitted).

And so on. We'd do fine, I guess. But not without an enormous cost.
Isn't most of the debris moving in the same direction? I'm imagining that being in orbit is like being on the freeway, where the traffic is all running the same direction. Yes, getting hit by a car going 70 MPH would normally be catastrophic, but two cars bumping into each other around 70 MPH is not always a big deal.
Different sites usually use different versions of libraries. Also nowadays sites use to put caching headers for all their resources so the cache quickly gets filled. I think there would be low cache hit ratio.
I'd love to see this make it into F-Droid! Fingers crossed!
I think the point is that this problem is a lot easier to deal with before it is actually a problem. Reminds me of climate change, in that way.
5 things that make me suspicious of Morgan Stanley's report on Apps v Mobile Web
School bans the internet in the classroom and at home
Well, to answer my own question - nope, still having problems with Bluetooth in 10.11. Normally, I wouldn't complain about something so basic, but it's really, really annoying when something that I use every day (like my BT mouse) only works sporadically in Mac OS X.

Edit: I've tried creating a new network location, resetting PRAM, resetting SMC, deleting Bluetooth PAN, re-installing the OS. Nothing seems to work reliably, and I don't know what else to try at this point.
If anyone involved in the project is reading this the DNS entry for "www.logswan.org", available as a link on the github page, does not exist.
0. evil.com hosts evil.js, <script src=evil.js integrity=foo>.

1. you visit evil.com and the browser stores evil.js with the cache key "foo".

2. you visit victim.com which has an XSS vulnerability, but victim.com thinks it is safe because it uses Content Security Policy and does not allow inline scripts or scripts form evil domains.

3. the XSS attack is loading <script src=www.victim.com/evil.js hash=foo>

4. the browser detects that "foo" is a known hash key and loads the evil.js from cache. Thinking that the file is hosted on victim.com - when the file is in fact not even present.

5. the evil.js script executes in the context of victim.com, even though they use a Content Security Policy to prevent XSS from being exploitable.
Enough satellites are in polar/retrograde orbits to be an issue. Explosions from Chinese/US anti-satellite tests and accidental collisions go every which way, as well.
Ask HN: Ways to detect and prevent outgoing netscans?
Hey there;

I'm looking for ways to detect and actively prevent netscans. It is needed for a service that routes traffic like a VPN, but netscans, e.g. 175.123.54.0/24 whereas 175.123.54.1, 175.123.54.2, 175.123.54.3, .. are scanned for :5900 (VNC), :110 (pop3), .., shall be prevented and actively blocked.

My current solution includes hooking libpcap, having a LRU-ring for connections whereas each entry has a TTL of 5 seconds and consists of 1) first 24 bits of the IPs and 2) the target port (for detecting whether a subnet is scanned for a specific port, et al.). When a specific threshold is reached, e.g. subnet+port counter > 30 in lte 5 seconds, the subnet is banned. If the subnet is whitelisted, it will not be banned when a netscan was detected.

However - before I start over engineering that solution - is anyone aware of a solution that already implements preventing outgoing network scans?

Thanks
Unless you are on windows, you can try cargo-watch[1] to re-compile and run your code when the source changes.

1: https://github.com/passcod/cargo-watch
> The irony is if everyone went to an index fund and no one went it alone or with the help of a financial advisor, the markets will be compromised

I'm not sure where the irony is in that; sure, it would be bad if every dollar invested in the markets was invested that way, but no one that I've seen has ever suggested that every investment in the market should be done that way; the closest argument I've seen is that individuals whose primary focus isn't personally, actively managing investments that just want good returns for, e.g., retirement and financial security should prefer index funds.
There is a difference between being very useful and being critical.

You list scenarios where good forecasts reduce risks, but the lack of them would not stop people farming or going out on the sea.
XKCD What if: https://what-if.xkcd.com/58/
Somewhat related I tried to compile nginx with --with-ld-opt="-ljemalloc" to make it use jemalloc for more performance and it did not really like that, threw segfaults at random during runtime. Don't understand enough to know why.
Our bank accounts do.
I'm pretty suspicious of the data and the analysis in this study - even though I "like" some of the conclusions. I wrote a post about it here:
https://www.distilled.net/resources/5-things-that-make-me-su...

Hope someone finds it useful.
Nest introduces Nest Weave, Nest Cam API and Works with Nest Store
OP wants to run it (ie, brew) with sudo, not them.
Thank you, I think mapping applications are generally still weak despite google maps etc.

I think opensource is the way to go with maps.
Thanks for publishing. Did you look into generating JPG or PNG instead of SVG?
Researchers at Texas A&M University[1] have been working on this problem with NASA JSC for years.

The approach has been to go after the large spent boosters (a few thousand of them), since they contain the most mass of any class of debris objects. Each upper-stage booster has a rocket nozzle that makes a great target for grappling.

As other comments have noted, the main issue is actually deciding to spend money bringing down orbital debris. As with many other issues we face, this is another case of kicking the can down the road, and we may not address it until the collision cascade has started :-/

[1] http://lasr.tamu.edu/research/proxops/#Debris_Removal
But as it gets cheaper to put new satellites up, cleanup gets cheaper too. And if access gets cheap enough I could easily see an international treaty mandating that all satellites have an EOL burnup system installed. When 20kg costs $2mm a lot of people will balk at the idea. When 20kg costs $200k or $20k it's a lot easier to require people to include it. It could even be a bolt-on kind of thing, separately powered and controlled such that it doesn't have to be re-invented for every new satellite.

Also with access being cheap enough we could start doing active cleanup, beyond just not making the problem worse. Aerogel is supposed to be great for capturing particles because it's basically frozen air. We could build a space-based aerogel factory and ship silicon ingots up which then get turned into aerogel panels to be used as replenishable armor for the factory. And once you have the factory up you just start making the area that the armor sweeps bigger and bigger. Build out sideways to clear a particular orbit faster, build up or down to clear orbits of various heights. It'd be insanely expensive right now, but if launch costs come down to $100/kg or $10/kg it starts to look reasonable.
The stereotype is that we don't work a lot because we're on strike ;) (Aside: There are a lot of strikes and demonstrations because our industrial and public sectors are very unionized and that's how unions negotiate here: a good strike (with or without demonstration) as a show of force.)

We also have a (theoretical) 35 hrs work-week which means around 7,5 weeks of holidays per year.
There's also a really, really large amount of space for maneuvering up there. Keep in mind the surface area of the sphere that's at 36,000 km from the ground (approx. average satellite orbit height) is ~22,567,880,697 km - that's entirely disregarding vertical room for maneuvering.
Indeed. I've lived long enough to see a whole lot of TEOTWAWKI scenarios panicked about and either were duly mitigated by sensible people or simply failed to instantiate. "Y2K Bug" was an ideal example (chronic programming flaw could have knocked out computer systems worldwide and knocked humanity back to the Middle Ages, but was recognized as a solvable problem and was indeed solved).

At some point I looked at my own anxieties and simply decided to not be anxious: do what I could about what I could given resource (time included) constraints, be prepared for eventualities within reason, and otherwise carry on.

My biggest recurring concern now is how I'm not anxious. Should something horrible happen, I may be disconcertingly unconcerned - having done what I could in good faith, there is/was nothing else to do but accept reality and move on.
> You might just as productively argue that there is no such thing as a modern single-user system, since Windows isn't that either. His point is pretty clear.

Correct, and nonprivileged users can't install software globally on Windows either. Because it's now a modern OS, and that's how things are done. For very good reasons.

His point, as far as I can tell, amounts to: applications should be able to trash permissions on convenient directories and not have the OS complain or repair their damage.

Perhaps I'm being ungenerous here? I apologize if so.

On re read, I realize that tptacek is responding only to the SIP part of the discussion. OK, SIP is surprising to desktop computer users. But it's a good feature that requires a little adjustment to work with. But really not much, and none for the vast majority of users who don't muck with system directories.
Black magic and astrology is what happens when one disregards mathematical tools and goes on guts, instincts, phone calls and hunches.
Jetbrains is working on an IDE for what seems to be your use-case.

https://www.jetbrains.com/dbe/
No. They injected code into some visitor analytics script (like GA) and those scripts are constantly updating so you cannot calculate and store the hash.
Question: what made you choose Wealthfront vs. e.g. Betterment?

It looks like they are essentially identical, except that Wealthfront charges more. I haven't examined them in too much depth, but is there a key detail that I'm missing?
When Evolution Is Infectious
Ask HN: Who is hiring? (October 2015)
Please lead with the location of the position and include the keywords
REMOTE, INTERNS and/or VISA when the corresponding sort of candidate is welcome.
When remote work is not an option, please include ONSITE.

Submitters: please only post if you personally are part of the hiring company—no
recruiting firms or job boards.

Readers: please only email submitters if you personally are interested in the
job—no recruiters or sales calls.

You can also use kristopolous' nifty console script to search the posts in these threads: https://news.ycombinator.com/item?id=10313519.
Ask HN: Freelancer? Seeking freelancer? (October 2015)
Please lead with either SEEKING WORK or SEEKING FREELANCER,
your location, and whether remote work is a possibility.
Ask HN: Who wants to be hired? (October 2015)
Share your information if you are looking for work. Please use this format:

Location:
Remote:
Willing to relocate:
Technologies:
Résumé/CV:
Email:

Readers: please only email these addresses to discuss work opportunities.
How does this differ from a reciprocal inter-insurance exchange[0] like USAA?

[0] - https://en.wikipedia.org/wiki/Reciprocal_inter-insurance_exc...
Savvy is hiring in San Francisco: Senior Frontend Engineer - https://angel.co/savvy-7/jobs/90384-senior-frontend-engineer
Savvy (http://savvy.is) is changing the way the world learns by enabling anyone with expertise to teach. We're building a global marketplace that connects teachers and learners for live, 1:1 video sessions
We’re looking for a passionate, senior frontend engineer to join the engineering team at Savvy. We're a small, focused, and ambitious team, so you’ll be working on creating a beautiful, interactive user experience using technologies such as React.js, Node.js, Coffeescript, PostgreSQL, Heroku, HTML5 & CSS3, Ruby on Rails, Stylus, and WebRTC.

This role requires technical chops as well as leadership. We’re communicative and collaborative, value diversity, and learn from each other within engineering and across disciplines

Savvy is in the start-up sweet spot. There are seven of us, we're well-funded by international VCs and Angels, just launched our Private Beta (http://bit.ly/savvyprivatebeta). You will be instrumental in our push to build a first class product from the ground up.
Are up for the challenge to solve tough technical problems as we touch many people’s lives worldwide? Get in touch: tom@savvy.is
Second Law of Thermodynamics, to call that "human" seems like unjustified exceptionalism.
MyDoc, https://my-doc.com | Singapore, ONSITE, VISA | ReactJS

MyDoc is a healthcare communications startup - providing doctors, patients and businesses with the opportunity to manage their healthcare systems reliably and efficiently. We are preparing to launch a new platform and are looking for a web/front-end developer to join our engineering team.

Our ideal candidate has experience building modern web apps with ReactJS, cares deeply about UI/UX, and is motivated to learn new technologies and to reflect on best practices.

At MyDoc we also use PHP/Laravel, Objective-C, Java (Android), Clojure, MySQL, and RabbitMQ. Experience with any of these would be a plus, but is not required.

If this sounds interesting, send your CV to talent@my-doc.com. Be sure to mention Hacker News!