skysight-inc/HackerNews huggingface dataset:
> ⁇ If the server returned 404, the server returned 404. This means the client application/the user agent made a mistake, indicated by the leading digit 4.

Or the endpoint wasn't configured properly even though the client had the right address. Happens often when developing, maybe another developer changed the endpoint url? Or in production some endpoint hasn't started. (yes this problem is seldom a problem in production or you usually know from other things that the problem is at the server, annoying still)

I've had problems with not knowing if 404 is "person not found" type error or "endpoint address is plain wrong"

"Bad Request" doesn't describe the situation either very well, I've used it myself to eg. signal missing mandatory parameters.

But just using eg. the code 200 as someone suggested and returning your own status message seems a little bit overkill.
Contest organizer here. Really excited to kick this off! Will be happy to answer questions.
> How does that make what he experienced while there not true?

It doesn't make it true or false, of course. What it does (if true) is make his report that such a thing happened less credible.

This is because fraud is a form of dishonesty, closely related to the telling of lies.

Also, being fired for wrongdoing (again, if that is true) creates the basis for an obvious bias. A person who was fired for wrongdoing can't be expected to be objective in reporting something about the former employer, even if they aren't trying to deceive. If that person's report is relayed, but the firing is concealed, the journalist is effectively concealing that bias.

Of course, Jay Carney (Senior Vice President for Global Corporate Affairs at Amazon) has an obvious bias as well.

It's not clear whom to believe in this particular case---but biases and track records of fraud are generally relevant context.
Taking a high level approach here, there are a lot of details on both sides that could be disputed. But what remains true, is there is a reason this article was written about Amazon and not any of the many other tech companies out there. There is obviously an element of truth to the story, even if specific details can be disputed.
Can someone provide a 6-point bullet list with the TL;DR of this (meta-)article?
The Plot of “Back to the Future” in 10 Git Concepts
That's really sad. I was hoping to something similar to that. Do you happen to have any of those materials around?
I've been writing since the late 80's professionally and had to look up Perforce. Mostly we used stuff we created until the late 90s and then it was Subversion. Once dragged to git about 10 years ago I would never look back. We do host it ourselves for security using atlassian stash though. Love it.
What's this (Chip and Pin) being crap already disclosed here?
https://media.blackhat.com/bh-us-11/Laurie/BH_US_11_Laurie_C...
> I think your conception of a Ph.D. is off by quite a bit. Outside of their dissertation topic I'd expect a Ph.D. to be on par with an undergraduate, from the time period they graduated.

Aside from dissertation research, my understanding was that Ph.D programs usually include substantial graduate level coursework in the degree area (at least equivalent to or expressly including, Master's degree level work), so they should both have greater currency and greater education, even outside the specific narrow focus of their dissertation, than an undergraduate. The degree to which this is job-relevant, of course, may vary.
Video recommendation by dynamic content analysis approach
heh, and Go is great when you want to write throwaway code. Mission Accomplished.
I was looking over resumes 2 years ago. We saw a guy in his 50s. My boss's immediate reaction was "he's 50?! wtf? so old!"

Ageism is real folks.
Thanks for the link. I'm not a professional programmer but I laughed out loud at The Autistic Gopher Hypothesis.
> Don't keep purchasing at the same merchants; that's like Carder 101!

I know! It's the stupid details and extra people they bring in that seems to eventually get these rings caught.

> Surely they could have e.g. had the card sign a challenge in a way it could only do if given the right PIN?

Well, the article seemed to imply the chip put in the CC was from a different card, so maybe they know the pin for that chip, and the MITM is really about the authentication of the chip in the wrong card? Later they do seem to imply the fix was to authenticate the chip, but I'm not sure without reading the original paper if that's an over-simplification of what the fix was, and maybe it's better authentication of the chip.
I'm less concerned about the hacker, and more concerned that the Director of the CIA not only has an aol.com email account but also uses that account to transmit sensitive information.

I'm not just saying this to be a jerk - this should be grounds for immediate termination of his employment. This is clearly a guy who shows poor judgement with respect to the management of sensitive material.

Also, from the article:

"[The] problem with these older-generation guys is that they don’t know anything about cybersecurity, and as you can see, it can be problematic.”

On the contrary - these "older-generation guys" cut their teeth in an environment where we were going head-to-head with the KGB on a daily basis. These guys have a solid understanding and awareness of basic information security procedures, as well as a strong understanding of adversary capabilities. I don't buy it.
anyone else notice that the blurring of that 5th memo about their advertising/monetization efforts wasn't so good? Looks like CBS Interactive was twitch's advertising partner. Additionally their 'premium' CPMs were as high as $40. And the non-premium CPM were single digits. I couldn't quite make out the percentage breakdown between premium vs non-premium ads. They were both 2 figures. Once you have the percentages, it should be easy to deconstruct an educated estimate of the revenue of twitch based on traffic numbers from elsewhere.

Not sure it matters if this data is public or not, but it was interesting to see such an easily guessable blurring.
It's essentially a way to look up meta data about the different data files produced by the CMS detector. There are petabytes of data produced by the detector and these are stored in countless data file. In order to determine which datasets are available and right for your particular analysis you would use the DAS system to look for them and find out where they're located. This is a complicated task b/c the petabytes of date are distributed across the CMS computing grid that spans many dozens of institutes across the globe.
I think Go is a great language for sophisticated scientific computing. Go scales well to complex code bases, and thus it is a great language for building an ecosystem. The tools are not all there yet, but the foundations are being built github.com/gonum
Design and Punish: A Review of Prison Architect
I agree the article is a bit opaque. From what I've read the flu vaccine offers protection ranging between neutral to positive, with no real study ever finding the opposite. I still hear a lot of people say they are "on the fence" about this, which is why I started the poll.
This looks interesting, and I'd like to read the article more, but the graphs are so eye-drawing and completely unreadable that I'm unable to make sense of them. Please make your x/y readable (font roughly 200% larger...) and actually label which line is which.

Also to provide some article-related input, in some NoSQL style databases latency makes a very surprising difference in speed. Redis is especially affected. When network latency is introduced on even the 50ms level GET/SET operations drop to double digit (vs. 15k+/s in normal operation even on small servers)
^ This! It is one of the reasons I like Go. Effective Go is all you need to understand the language and be able to read even the most complex Go programs.
Actually, I would use that technique of mentioning a cutting edge or rarely used feature of a language, not to discretely test the interviewer as he does, but to show off my knowledge and redirect the conversation on something I will be familiar.
Here are some articles from the local Chicago press from the last time this came up:

http://www.wbez.org/news/chicago-polices-so-called-black-sit...

http://www.chicagotribune.com/news/local/breaking/ct-homan-s...

Not trying to defend CPD here, but the guardian seems to be alone in trying to dramatize this into a story about the Homan Square facility being sort of black ops detention facility.
Surprisingly, Michael Crichton's book "Timeline" is a gentle introduction to the state of the art in knowledge about the so-called dark ages, shattering many of the myths we learned about that era in school. The myth of the overburdened armor wearer is one of them. Crichton was a first-class researcher and his bibliographic commentary alone is worth the price of admission.
I've been building properly designed, syntactically rich DSLs for over a decade. It is much, much easier than building usable APIs.

DSL compilers are the simplest and cleanest code possible. They're nothing but a chain of very trivial tree rewrites, and with a help of a proper DSL you can write and maintain them easily.
That sucks.

What it shows is that when you were hired, there were no funds to pay you. The fact that on payday the founder ways honeymooning doesn't change that. It just indicates that the founder didn't want to deal with not paying.

Reading further down, I saw that the company has been around for three years. At this point, inability to manage cash flow via sales, investment, and/or loans is clearly a red flag. Not following through on payment two weeks running and blaming customers seems symptomatic of leadership that is not inclined to make hard business decisions.

In the end, if there's no payment, it's not employment.

Good luck.
In the case of the SDK in question, how much due diligence on the developers' part would you say is appropriate? Not necessarily binary analysis, but more along the lines of knowing who you're getting your tools from, reputation, whatever, etc.

Because as far as I, a user is concerned, that developer put that software on my phone.

Maybe I as a user have a similar due diligence burden. One thing I might do is never download an app from the affected developers again. But that doesn't seem like a desired outcome. Nevertheless, I don't see how a user could do anything more fine-grained and nuanced than that.
He's from NZ. Built the wheelchair in Otaki, North Island of NZ.

Some people can't tell where he's from. ;)
‘Star Wars: Force Awakens’ Tickets to Go on Sale Two Months Early
Crowdfunding and Lasers Make Possible the Worlds Thinnest Folding Knife
The statement should be assumed false until proven to be true by the accuser. A negative, public claim with zero evidence (nor even a promise of forthcoming evidence) should be viewed as defamatory.

>If the statements Amazon made are false, then they are clearly defamatory, since they accuse the employee of criminal action.

Here's a key piece. If Amazon is now claiming that their former employee took criminal actions:

1) Amazon took criminal actions.

2) Why reveal this now, instead of taking it to the proper authorities when it was discovered?

>Do you really believe that Amazon's expensive lawyers didn't vet this post before it went out?

Does it matter? Expensive does not mean they are competent, nor does it mean they are correct.
gonum also has LAPACK bindings

godoc.org/github.com/gonum/lapack/cgo

Assuming you need float64, BLAS and LAPACK are most easily accessed through the wrapper packages godoc.org/github.com/gonum/blas/blas64 and godoc.org/github.com/gonum/lapack/lapack64. This way code can be written to either use the native go implementations or the assembly/c/fortran ones.
Go is very contrarian, and I applaud this.

It takes more than reversing the order of parameters and using known-braindead ideas like codified tabs-are-good syntax to make contrarian ideas valuable.

Just because you change green lights to mean stop and red lights to mean continue doesn't make contrarian suddenly better than the way things were.
Freedom Chair – Off-road wheelchair
Lenovo Yoga 900: Core M ditched for full-fat Skylake, sensible keyboard returns
Most of the code I worked with was 30-40 years old. Often full of ad hoc DSLs. Refreshing this kind of code was easier than any other kinds - rewriting the DSL itself with the modern technologies was sufficient, 90% of the remaining code base did not need much maintenance then.
That was in fact a point I was making.

You may have chased a point there but you failed to make it.

In practice almost all such statements (I do not differentiate the style of partisanship) are some combination of disingenuous, lazy, or unintelligent. They are far too broad a brush to be on point, and far too divisive to use unadvisedly. So much so that there is a vanishingly small chance that the addition of such a statement was both necessary to your point, and improves your clarity of argument.

If your intent is intelligent discourse, compelling argument, or even just getting your opinion across clearly then use of this sort of language is actively counter to your purpose. Other aims exist, clearly.
All this time I had assumed when Brennan called for dangerous things like encryption back doors he must understand the negative impacts would be but just didn't care as long as it helped the CIA. Now I'm thinking he actually doesn't know what he's talking about at all which is somehow even worse. An AOL email account with confidential files in it? Unbelievable.
I could see an object-capability based scheme working well.

Apple is probably in the unique position to actually implement such a system successfully, controlling the hardware, os, and even language choice.
> The use of the word "disappeared" is completely inappropriate.

Isn't that why they put quotes around the word? As if they're mocking the use of that term?
Just look at the millions of dollars pot alone creates in tax revenue.

In a decade we will look back and think "how could we be so stupid for decades".

And I'm looking forward when "harder" drugs like cocaine, meth and heroin are legalized or at least tolerated - no more drug turf wars, no more shadow states in Latin America, and especially far fewer deaths and medical issues from contaminated drugs.

Drugs are actually pretty safe, what makes them so incredibly dangerous is the contamination happening in the supply chain, from unclean manufacturing over normal degradation due to improper handling to stretching at the dealer level.
Basically they dismissed every implemented approach, despite generics obviously working in other systems. (And it's hardly a "new" feature unless we're counting in multiples of decades.)
VQL – Data Analysis for Non-Programmers
The link is to an image of the front cover of K&R2 (Kernighan & Ritchie, "The C Programming Language", 2nd edition). You probably meant the image to show up in your comment, but it didn't.
"signature validation "

I've left the back of my credit-card unsigned for 2+ years, and in that entire time, and north of 500+ transactions with a signature, I've been asked for identification less than 10 times.

I wonder if there has been a single person challenged on a signature in the last 5+ years with a credit card if they even made the slightest attempt to sign in a fashion similar to what's on the back of the card?
Can people post their opinions on static linking of go binaries? Doesn't it result in increased size of runtime binaries when compared to those generated by C/C++?
With all due respect, it's highly unlikely that a review from someone using it for four days

But, the review goes into a rant about how the Go community just thinks it's the greatest and refuses to listen to outside opinions due to a sense of inbred and ungrounded superiority... kinda like what you just did there.
This is going to be the standard text for the language. The quality of writing is exceptionally good. It's high time the AW professional computing series had another hit.
I don't think that obese people should be stigmatised as lazy... Guess that is why I didn't think I should be downvoted!
What’s New in Drupal 8.0 RC1 and How to Install It
I wonder if the AOL disk is still sitting in his CDROM tray at home.
I believe there is either Online or Offline PIN verification.

http://www.smartcardalliance.org/publications-emv-faq/#q14
I think of it as a cute, slightly self-promoting story in an inspirational vein: underprivileged kid gains valuable business skills by hustling family-friendly wares to fellow students, grows up to use those skills to realize his childhood dream. Also he knew Kendrick Lamar before he was famous. It's light, but I like it.
If this was anyone below him he would discipline and possibly terminate them.
Agreed. Registration of drones over 30lbs, or a wingspan of 6 feet carrying heavy RED cinema cameras, or similar criteria based on safety standards could make sense. But the millions of small lightweight quads and RC airplanes don't make sense to register (not to mention the tiny micro FPV drones you can hold in your hand).
But the chip is the only part of the communication that knows the PIN. (the protocol does not need a network connection to the bank).

The chips could be made to sign their response with a bank's private key and the terminal checks this against a known list of banks. But that would be cumbersome (lots of banks, lots of keys), the terminals would need to be constantly updated to keep the key list up to date, and it all falls apart when a key is extracted out of the chip.

Now if the protocol required a network connection to the bank, you could speak to the bank to validate a PIN instead of talking to the chip at all.
I've sort of taken it as the NYP's attempt to shame the head of the CIA even further.
Show HN: A daily sports newsletter for non-sports fans
The Wet Heat method mentioned in the article is NOT reversible if used for a longer period of time. It was initially thought to be, but it has since been found to cause permanent damage.

Also, if you need to resort to conspiracy theories to make your point, your point is probably not correct.

"men were interested in male contraception. Why weren’t drug companies interested? And why are they not, still?"

Perhaps because the main point of the article that there is no scientific barrier is not actually correct?
Previous discussion last week: https://news.ycombinator.com/item?id=10380513
Actually, what you do on company time is private. Or are you arguing that all meeting minutes should always be publicly accessible?

Also, you may have misunderstood the meaning of privacy. If I tell I'm terminally ill, it is no longer a private matter, since you know it too. Does that mean you telling the whole world is the right thing to do?

What you appear to be arguing is that your employer may choose to make public anything about you that happened on company time. That is a huge power imbalance, as you certainly don't have the same privilege about your employer, as you depend on them for your livelihood.

We have laws to remedy that power imbalance, that is why you have a reasonable expectation of privacy even in the workplace. It has nothing to do with "private" in itself. It is just one of the tools civilization has developed to prevent exploitation.
Does she have any prose or code online?
A good way to confirm that they know their stuff is to talk to their references. What tasks did they do there? What problems were solved using what tools and techniques used? Nobody knows their skills better than those who already worked with them. If their reference seems to be an idiot, that's informative too.

Ask them to bring in an interesting example of their own code to the interview. Let them explain their design and implementation choices. Ask about the problem they needed to solve, the range of input data, the form of output, the acceptable ways it could/should fail. Propose changes to each of these and how they would respond. Propose variations to their algorithms or data structures or fault tolerance or input data to explore their range. Ideally, make the variations appropriate to your business' practices and needs.
The secret US prisons you’ve never heard of before – TED Talk
And that ought to be done as neutrally and factually as possible. If I can see what the journalist's opinion on the matter is by reading their article, they did it wrong. Their job is to tell me what happened and why, not what I should think about it.

Saying that people were "disappeared" as this article does is not journalism, it is demagoguery.
While the content is good, I'd recommend not sensationalizing news titles. The fact that there was an XSS in a popular website has nothing to do with its valuation.
Once you've hacked the CIA it's probably easier to go public, so that you know the CIA probably won't just kill you.
A bit of a naive question but can someone answer this for me? To be a CIA Director, isn't it a requirement to have some sort of a technical background that way whoever is in the role is able to anticipate and always be a step head when it comes to these sort of problems?
I've thought the same way recently, in fact the anti-gun "zero compromise scorched earth policy" is part of the reason why I've grown to like the right to bear arms. Amongst other ideas that would be considered conservative.
Worse. It's a floppy disk.
NYT disputes it, see one of the comments above:
> Olson described conflict and turmoil in his group and a revolving series of bosses, and acknowledged that he didn’t last there. He disputes Amazon’s account of his departure, though. He told us today that his division was overwhelmed and had difficulty meeting its marketing commitments to publishers; he said he and others in the division could not keep up. But he said he was never confronted with allegations of personally fraudulent conduct or falsifying records, nor did he admit to that. If there were criminal charges against him, or some formal accusation of wrongdoing, we would certainly consider that. If we had known his status was contested, we would have said so.
If you have 2 years experience in programming, you should be looking elsewhere in the game industry. The first couple of years are rough, but after "paying your dues" for a couple years, you'll find you can jump into another game dev job without much difficulty. This is a bit more problematic if you're not willing to relocate, since UK is one of the lower-paying game dev markets. However 30k usd is far too low even for the UK for a fresh-out-of-college junior programmer.
Scalable code organization: one big repo
It's difficult to write a program without writing lines of code.

There are dumb measure, smart measures, and dumb ways of applying smart measures. We could consider a little intellectual generosity, that intentions were well-met, and not that a 50 year old used car salesperson turned programing manager was irrationally demanding X lines of code per day.
Behind the Scenes: The Daring – Steve Wozniak
Do you think that is a good tactic (both on effectiveness and on a moral level)? If so, why?
Why would he keep his AOL disk in the cup holder?
It is personal transportation, just focused on a particular set of users.
I noticed that the lissajous program in 1.4, as included, generates non-random lissajous figures since the random number generator is not seeded. I couldn't find any reference to this in the text and this could be confusing to beginning readers. Is there a recommended way to submit errata?
Yeah, it'd be a huge complication to maintain and update the keys across all the terminals, many of which are not network attached. Plus an attacker could extract a key from the chip (probably hard, due to anti-tampering technology, but not impossible)
There are some tiny USB sound cards these days! (Not sure if the quality meets the requirements though.)

http://plugable.com/2014/09/23/plugable-usb-external-audio-w...

http://www.audioquest.com/usb_digital_analog_converter/drago...