skysight-inc/HackerNews huggingface dataset:
Their "fix" is also similarly insane:

> According to their paper, at least some chip-and-PIN card readers now send a command to verify a PIN before the user even enters it to check if the card responds with a spoofed “verified” signal.

Trivial to detect and control, e.g. have a discrete button on the card that you press exactly when you enter your pin that enables the spoofed response. There are probably more sophisticated methods.

Hopefully they've done more than just that though. Hopefully.
You've got me there. Ultimately being secure is Brennan's responsibility.

Maybe we need a secret service for tech that's outside the command structure of these agencies.
Not a great article.

First, there are 1000s of banks in the USA. In many/most other countries, there are fewer than 10 making it much easier to coordinate.

Second, there's much more "pull" in the USA where recipients pull funds from senders. This is a key reason why commerce is so much larger in the USA. "push" adds a lot of friction to commerce transactions.
Isn't the US chip-and-signature?
>Possible, but if you want us to the ignore the hugely differing economic incentives for men and women wrt pregnancy then the discussion isn't going to go anywhere.

What possible incentive is there for a man to impregnate a woman, especially without her desire? I don't think many guys are out there begging to pay child support.
A Lastpass replacement which has a free software client, high availability, first class GNU/Linux support and Yubikey support. I'll easily pay more for this than I paid Lastpass.

(I don't trust Logmein and want to move away from Lastpass and haven't found a satisfactory alternative).
I think this is the best thing that can happen to America. We have gotten fat and way to comfortable. America does its best when it has real competition. China and Russia are now real competition and global supremacy is not, as many Americans believe, a birth right.

America earned its place as a super power in the 60s-80s, and even in the 90s (through the tech sector) but America has just been sitting back on its laurels since 2000. It will be good for the country if they can mobilize the citizenry like they did in the past.

That means funding science again (NASA, DARPA, etc.) and dumping money in math and science education. If America wants its title as the world's only global super power, it is going to have to earn it.
It doesn't take some shady secret black site to find cops who will knowingly keep an arrestee in the dark about his/her rights for the purposes of obtaining information. This is completely standard practice at _every_ precinct in America.
Right, "intentional" was not the correct word. What I mean is that sex has to be the primary motivator/discriminator of the action (whether the motivation is conscious/intentional or subconscious), not just a statistical artifact, as in your example with interrupting people and women tolerating that more.
Could there be an element of self-fulfilling prophecy explaining why intelligence analysts, on whose advice governments decide their actions, have a better success rate at prediction than others who do not so closely influence government decision making?
I'm not aware they argued that even in 1934, when they were focused on removing handguns from the NFA's licencing and prohibitive tax, $3,500 in 2015 dollars (and that in a period where the Depression had gotten truly Great).
I am vastly in favor of hard tabs, as it doesn't enforce tab size. Question, why do you say that the standardize on tabs as 8 spaces? I've done all my golang programming with 4 tab spaces.
See the very first example of "channels" in that 2009 version:

"In the previous section we launched a sort in the background. A channel can allow the launching goroutine to wait for the sort to complete." ...

c <- 1; // Send a signal; value does not matter.

That's using a channel as a lock on shared data. Not seeing that in the new book. This is a step forward.

(What Go really needs is Rust's borrow checker and move semantics, so that when you communicate on a channel, the compiler checks that you're not sharing too much.)
Comparing a group that wants to take things away to a group that wants things to not be taken away is questionable.
This is sorta misleading. A quote from the article, "The changes in the MariaDB source code leading to those impressive performance improvements are part of porting MariaDB to Power8."

Pretty frustrating. I was pretty excited since MariaDB is a drop in replacement for MySQL (more or less). But you have to use it on a totally different architecture which can't be justified without a lot of deliberation.
This seems like a misinterpretation to me. The NRA draws the line in many places, especially with anything that stinks of military hardware.

Pro-choice advocacy has been on the rope for decades and with recent state laws many abortion access difficult or impossible for poorer women. For example, not is really fighting to overturn the Partial-Birth Abortion Ban Act of 2003. NARAL's website concedes with this language, "NARAL Pro-Choice America does not oppose restrictions on abortion after a certain point in the pregnancy as long as there is an exception to protect the woman’s health." I think society is always going to have a discussion on what kinds of abortions are allowed and at what week. NARAL seems to be part of this conversation and doesn't oppose it.

I don't think either group is special and both work with the status quo of advocacy and lobbying.
TokuDB is a very modern engine that uses a data-structure called "Fractal Trees". Imagine something like a B-Tree with buffers in the non-leaf nodes. It also heavily compress the row data.

The main point of TokuDB is not writing everything to the disk thanks to the buffers, and with the very efficient compression, more data fits in the memory and saves the space for big-data applications. ( please someone correct me if I´m wrong)

In our tests TokuDB was vital for our startup. With it, we can use cheap dedicated servers and our performance is amazing. We tried PostgreSQL, MongoDB 3.0 and MySQL 5.7 and they can´t fit our data in a 2TB disk or were slow in our tests.
I think for application status codes it makes sense to always return 200 and do as you have done.

Of course, if your API has received bad data then better to return a 400 and a similar payload.

And if your application has caught an exception which is not part of any form of validation then better to return 500 and the payload.

Got to do the best we can with the hand we're dealt hey!
Assuming the black-market networks created as a response to prohibition shut down completely, of course. They may have continued operating as a means of tax avoidance, leading to less taxed consumption post-prohibition.
Yes, just using built-in packages, and not depending on too many third-party packages is definitely attractive to me. The code full of "if err != nil" is an issue that I've also noticed. However, I'm hopeful that this may actually remind me to be more exhaustive in error handling.

Why did you mention the container? How kind of benefits would you be getting from a container for Go?
The reason this is kind-of a terrible idea unless you're AirBNB is the fee structure is setup in a way where a high amount of the transaction would be going to them.

https://www.airbnb.com/help/article/104/what-are-guest-servi...

So if my napkin match is correct, we have 3% Booking fee and 6% low end guest service fee, you're looking at a 10% off the top of the transaction which in the end, doesn't really need any middle-man in there.

It's common for the first month's rent to be guaranteed via cashier's check or equivalent, then usually you are building a trust relationship yourself.

I suppose in cases of short term renting, there isn't time for this trust to be built, so the value-add is the security the service provides. Perhaps that really is worth 10%?
> Little economical incentive to cannibalize its own market.

Wait, what? Couldn't you interpret that as a new company/startup entering an existing market? "Little economical incentive for Samsung to cannibalize on Apple's market."
Ask HN: Whats the best way to visualize event data?
Entity data is what people normally think of when they imagine data in a database.In contrast, event data describes actions that happened in your application. And scale between entity data and event data is on the order of 1:100 if not 1:1000 depending on your app.

So whats the best way for me to visualize whats happening over a period of time.
Once upon a time a customer asked why Linux was more efficient on the same Power hardware than AIX. IBM assigned a customer engineer to write a paper explaining this, making sure that IBM's own product looked good no matter what.

This paper may or may not mean anything else.
We adopted LeakCanary the day it was released but we don't find it useful at all. In fact, it makes the app almost unusable for us. Every 2-3 mins, it would just freeze the app to capture a heap dump. As our app is quite complicated with a big memory footprint, this just aggravates the problem. I just hope it was more usable.
Propecia was "designed" as a prostate drug, but didn't do so well ... but mystery unexpected side effect! Kind-of-sort-of baldness cure! So yeah, that's what that drug is for.

Nilotinib was "designed" as a leukemia treatment, but ... didn't go so well.[1] Oops, just kidding - it's a parkinsons/dementia treatment!

(also, one of the erectile dysfunction drugs, I forget which one, was also "designed" for something similarly unrelated...)

The real headline here is that these people have no fucking idea what they are doing. They are throwing shit at the wall to see what sticks and then informing the marketing department as to which side effects were the most interesting.

This dovetails nicely with their other favorite activity: finding efficacious natural compounds and then tweaking them just enough into a synthetic compound that can be patented.

[1] "Interim results showed Tasigna is unlikely to demonstrate superiority compared to Novartis's Glivec® (imatinib)*, the current standard of care in this setting." (wikipedia)
As everyone else said, this is a major red flag. You need to look for something else immediately. This person will use you as long as he can.
"Show me your cool clock"? What could be a nice political message? Ahmed and this teen applying as CIA directors?
http://www.cnn.com/2015/10/16/politics/nra-hillary-clinton-g...

""I think it would be worth considering doing it on the national level if that could be arranged," she said in response to a question about Australia's nationwide buyback initiative that began in 1996."

I, uh, would have to say that checks out?
I don't think any from that list is really cultural. They range from basic professional behavior to basic polite society behavior. I've run into people with the hygiene part. I've dealt with farmers who have just dealt with their pigs that smelled better than some folks I've encountered.

Also, "sweetie", really? When I was younger (teens) I offended someone by saying "Ma'am"[1], but I'm pretty sure I would have took a swat to the head from my parents if I ever said "sweetie".

1) I'm pretty sure at this late date (20+ years ago), she was a bit ticked that I used "Ma'am" instead of "Miss" implying she was older than she was. I'm pretty sure she was between 18 and 20, and I was 15 and looked a lot older.
Another example: https://github.com/sindresorhus/pure

This uses zsh-async: https://github.com/mafredri/zsh-async
Do you think the universities would really be getting anywhere without the help of the industries they are now pissing on?

Take away the faculty awards, industry collaborations, donated labs, donated computing time, hiring of interns, etc.
You presumably bought the tools at a fair price that reflects how much value they add for you.
Hobbyists rarely pay the bills. Go upmarket or suffer in perpetual purgatory.
Saw an article with a little backstory about this on Reddit today - http://www.infoblizzard.com/the-blog-smog/engineer-invents-a...
> I think for most people it offers security for the male only.

I'm not sure that would be the main reason. If you're concerned about security, pills/vasalgel/anything except condoms won't really save you from the worst consequences. Only a barrier method can be completely effective (and even that fails).
Yet another ad for software that is not available. The website is just collecting email addresses. After giving my address, I got an email to confirm my subscription to a mailing list about VQL. Chose not to join.
I don't know why you are getting downvoted

Because he implied that a man's word that he's taking a daily contraceptive is less reliable than a woman's.
Or like saying that industrial machines will take all our jobs in 1799. And people did say that. And they did take a lot of jobs. All the ones nobody wants.

If your job can be made better by just doing it cheaper you probably don't want that job anyway.
It's a bit easier to be blasé about testing when your worst-case-scenario is that somebody misses a ride, vs when you kill ~150 people. The rapid cycle of innovation is a tradeoff that SV is able to make (and finds amazingly beneficial) because we're working with soft tools and have backups of our data. I'm certain that were human life so cheap, Pratt and Whitney would have a much shorter dev cycle, too.
The Language of Choice
Do you know of any modern OS X apps written with Qt that have a native look and feel that, in particular, take advantage of Core Animation for UI transitions?

All the Qt apps I have touched (Google Earth comes to mind) have neither looked nor felt native on OS X, much like Swing and SWT apps don't at all feel native. Whereas all the best apps are written in native Cocoa.
Maybe GP is in another country? What he mentions sounds very much like Prime in Germany for example (50 euros, free next day delivery).
> They are insured against it, they will refund the money back and their risk analysis probably indicates that loosing all that money to fraud is cheaper than waiting and properly deploying and testing the solution.

This. Some behaviour i encountered by acquiring banks when working on backend software for interfacing with them:

- Authorising a transaction when they failed to contact the issuing bank, because the value of the transaction is lower than a certain threshold.

- Overloading fields in the APACS spec to get around 3D Secure / Verified By Visa, i.e. passing the cardholder straight through the process and then marking it as bypassed (a poorly implemented one factor auth becomes a "eh, this looks ok to me" zero factor auth by the issuing bank).

- Being sat in meetings where the max value of contactless transactions was explicitly stated as being that of a level that any contactless chargebacks were not defended because they're so low.

- Asking me to send PANs in clear text, split over two e-mails (no, i didn't).

Backend backing systems are horrible. Nobody really wants to work on them and they have so much legacy cruft that they're like concrete, so any change takes forever and carries massive amounts of dev/test/risk.

Even the seemingly sensible ones have major WTF's - One of the integrations i did at my previous job was interfacing to Amex's endpoint for online authorisations. HTTPS posts over the web, seems sensible enough right compared to APACS-70 over X.25? No, the ISO-8859-1 POST parameter values needed to be encoded as EBCDIC and then converted to hex (IIRC) before being sent.

Banks playing the chargeback cost balancing game is all well and good for them, but if you're living on the edge and experience fraud then this can lead to all sorts of financial problems.
I suppose, but I have personally found you can actually get higher rents through Airbnb. This might change as it becomes more popular, more clientele, etc. but we've made more on Airbnb as landlords (including fees) then we did just doing it all ourselves.

Don't forget all the marketing, time spent with potential renters, background checks, etc you have to do on your own.
They usually contact people who they think have money first. An average SaaS getting 10,000 emails per month is not going to hand hold everyone. It's also a good model because it filters out people who aren't even willing to provide a valid email (had a guy sign up with geurilla mail and complained why he couldn't get a trial). Better filter is to not accept free email hosts like gmail but only accept TLD domains.
While you're absolutely right in your diagnosis of the problem in the US, I doubt these problems are specific to the US government. I'm a Brit, and there are enough stories of technical incompetence here to make me assume it's a global problem. I suspect even non-democracies have the same issue. Who's going to tell Kim Jong-un he needs to rotate passwords?
https://letsencrypt.org/ should be ready shortly.
Scaffolding Sketches: Projecting bits of music onto an empty staff [video]
It's true! I did a fair bit of programming and other computery things in undergrad and had a pretty good track record for, say, transforming some trash from behind the CS department into a workable computer. I was happy with Emacs, resisted vi, could whip up a nice html page with some cutting-edge CSS 3. By no means did I have special talents but I was sort of up to date on a broad range of basic computer-related skills, from hardware to networks to web design.

But then... I went to grad school in pure math. Seven years later, I emerged from a rip van winkle sleep to a whole new world. Still hand-writing my html, like all mathematicians do, I was astounded to wake up to a world with... frameworks?! AJAX! Rails! widespread use of IDEs, an IDE for every language or taste, Javascript everywhere... Python and Ruby as non-fringe languages....

It was a bit of culture shock and it was fun.
> Does this non-medical phd demand to be addressed as doctor? (Yes, this happened.)

WTF is wrong with that!?!? It is polite to address someone the way they want to be addressed. I address my PhD holding colleagues as Dr. very often though none are medical doctors. I can't imagine how this is an issue for anyone ever.
Java. Static types (less sophisticated than state of the art, more sophisticated than Go), fairly easy deployment (you can easily make a package with everything except the JVM, so it's your one binary + /usr/bin/java + libjli + lib{c,dl,pthread,z}), concurrency is state of the art (whether old-school threads-and-locks with java.util.concurrent, actors with Akka, fibres with Quasar, whatever you like), is a quite small and simple language with a standard library that admittedly rivals any European capital for size, complexity, fascinating details, layers of history, and alleyways that stink of piss, tooling and debugging is state of the art, and fun, well, Java's really more golf than base jumping.

Documentation, performance, and community are varied but often excellent.

Libraries and frameworks abound (some are even quite good). Perhaps surprisingly, everyone seems to have settled on JAX-RS/Jersey as the way to write REST APIs. It's what's in the EE spec, so it's what guys in polyester suits in banks are writing, and it's what's in Dropwizard, so it's what gals with bright blue hair in startups are writing. The only real alternative is Spring MVC, which is really very similar, but requires that you buy into Spring.

Probably not the answer you wanted. But not bad for a language that's a day older than Braveheart.
Graph of Memory Prices Decreasing with Time
I don't think it's technically possible because they do display some of the letters.

They are just probably stored plain text or encrypted the password somewhere but I don't there is way to be a one way hash.

I'll be on just plain incompetence.
Oh dont worry - he was probably only emailing with Hillary and as we know, she would regularly wipe her mail server with a cloth to ensure it was secure.
I'm working in a relatively locked down environment.. At least once a week I have to email myself something (nothing sensitive) just to be able to get to it at home, which requires a resource that's blocked en-masse at work, but none the less I need access to.
Layering API Defenses with Caching
Central Asia Could Be Birthplace of the Modern Dog
I'd like to to address a somewhat unfairly flagged sibling comment by russelluresti, on the topic of the ad hominem fallacy.

Disbelieving someone because of a bias or a past dishonesty isn't the ad hominem fallacy at all.

Ad hominem refers to a declaration that an argument is right or wrong based on the identity or attributes of the person making the argument, rather than its content, and relevant references.

The disbelief in a report based on the nature of its source isn't a declaration that it is false. It is rationally justified prudence.
Tokutek and some staff where common vititors to the boston mysql meetup. If I remember they were using "fractal trees" instead of b-trees. Trading cpu cycles for disk io. It was interesting tech.

http://highscalability.com/blog/2014/8/6/tokutek-white-paper...

Quote:"The idea behind FT(fractal Trees) indexes is to maintain a B tree in which each internal node of the tree contains a buffer. When a data record is inserted into the tree, instead of traversing the entire tree the way a B tree would, we simply insert the Eventually the root buffer will fill up with new data records. At that point the FT index copies the inserted records down a level of the tree. Eventually the newly inserted records will reach the leaves, at which point they are simply stored in a leaf node as a B tree would store them. The data records descending through the buffers of the tree can be thought of as messages that say “insert this record”. FT indexes can use other kinds of messages, such as messages that delete a record, or messages that update a record."

some other links:

http://web.archive.org/web/20150414215556/http://www.tokutek...

http://assets.en.oreilly.com/1/event/36/How%20TokuDB%20Fract...
If the distributor's cut becomes too large then some producers will switch to become distributors, and vice versa.
And in the case of renters, they usually have to pay a broker's fee (if used) which is typically 1 month up front. So 8% right there plus if you factor in time value of money could be more.
I think you can download .ipa file using iTunes. Alternatively, using iFunbox to backup apps.
I would've liked to set up an instance for a Show HN, but my demo stack likely couldn't handle it! Send me an email at jason@getvql.com and I'll send you credentials for the demo stack.

Even better, I'll set you up with your own instance to import your own data!
Novel see-through display enabling aesthetic smart eyewear
It's also 2 socket, 20 core, 8 thread per core = 160 hardware thread system. And it's not general queries, but just "point selects" from 20 tables of 1 million rows combined.

That's far from typical hardware to deploy maria/mysql on, and far from realistic workload.
For me personally, having a child is way worse that contracting an STI. I'm sure that's very different from person to person, though.

I would of course absolutely advocate using a condom with any new non-fluid-bonded partner.
Let's not lose sight of one thing -- this doesn't make chip-and-pin less secure than swipe-and-sign, it just makes it no more secure, in the worst case.
Amazon sues more than 1,000 sellers of 'fake' product reviews
Stalin doesn't own the word 'disappeared'. It's the word you use to describe a policy of taking someone off the street, refusing to acknowledge that they are in custody, denying them access to the outside world and their civil rights. That's what's happening here. What other word would you use to describe it?

I'd agree the connotation is unfortunate but that's simply because 'disappearing' citizens is rarely seen outside of brutal tyrannical dictatorships and in those cases it's usually paired with things that are even worse -- they are sent to gulags and tortured/killed/etc. But the fact that something characteristic of brutal dictatorships is happening in Chicago is exactly what's shocking about the story.