skysight-inc/HackerNews huggingface dataset:
If I bought a picture for $5,000,000 and later find out it's worth $2, do I get my money back? No, didn't think so.

Lottery tickets are not a parallel, given that it's luck of the draw that determines the value of the ticket. At the time of purchase, the ticket is worth exactly the price of the paper it's printed on.

Here's a better, less extreme but real example. I just purchased a mandolin from a seller of vintage guitars. Paid $750, and were I to be patient I could probably get $1200 out of it. I have no plans to sell it, as I bought it to play, but let's supposed six months down the road I do sell it. Do I send a spiff back to Jimmy's Vintage Guitars? Nope. Jimmy admittedly doesn't know jack about mandolins. Jimmy didn't even get the model right, even though sixty seconds on Google would tell you the one easily-seen distinguishing feature that says it's a Gibson A-50 and not an A-40. I don't feel bad for Jimmy, because if he's going to take stuff to sell, he should know what he's selling because it's his business. Jimmy better have a big pile of "Vintage Instruments Value" books on the shelf, and know how to use the internet. I also assume that whether he obtained by trade or cash, he felt he got an acceptable deal when he took the instrument. So even though I got a bargain, Jimmy came out okay, too.

Now, I'm not a total bastard. Were I to find, say, a 1923 Gibson F5 at a yard sale for $50, I'd give the person $500. Two reasons for that: such an instrument is worth several thousand dollars even in rough shape, and I don't expect a person selling Grandpa's mandolin at a yard sale to have any idea of its value. They're not in the vintage instrument business, they shouldn't be punished (too much) for not knowing what they're selling. They get 10x what they were asking, and I still get a steal, everyone goes home very happy.

In the end, someone got lucky and it wasn't the person that sold the picture. I might very well kick back a little to the original seller, but I most certainly wouldn't feel obligated to do so.
... but clients can guard against weak server-side DHE by rejecting DHE ciphersuites. So I think the GP was correct that this diagnostic should be updated.
It's not hard to understand.

People believing you are a bigot is bad, because bigotry is correlated with stupidity and ignorance, which are correlated with low status.

He was called a bigot and he believes he is not a bigot.

That's enough to cause a bit of offence.
I've had two cofounder friends (both non-American) who sponsored each others' H1B. Seems like a loophole but it seemed to work :)
At the simple level of SEO that we are discussing here, the thought process should be simple. There is one rule: Do what is best for your users. If you read Google's recommendations for SEO, that is what they tell you. Don't think about how your changes will affect the search engine, think about whether they are better for the user.

So in this case, the second one is much better. I would much rather type the second one into an address bar than the first. I might even be able to remember the second one, if I visited frequently.

If you are going to change your urls, I would also recommend losing the .html file extension and serving the page dynamically. so it is just toys/lego-star-wars Such a url can transition easily whenever you make technical changes to your framework.

Finally, you want to be super careful about changing any URLs. I would minimize the number of changes you make (it will always set you back) and make sure you have 301s from the old to new.

Speaking of tracking, testing, and measuring, keep in mind that traffic--not rankings are your end goal. I would use the ranking stats provided by google wmt as a rough indicator, but focus much much much much more closely on your traffic.
This recent publication illustrates a problem that we have trying to keep our communications secure. If we all use a single "strong" prime number with our crypto then the NSA has a huge incentive to pre-compute results from that single strong number. Now that we know that the NSA is doing this, we won't all use a proven strong number, and we will all start to do key exchanges with another method, and it will become the common thread that the NSA can attack.

So the NSA will pretty much always attack whatever common procedure we all use and find the weak point. If we all used different methods for key exchanges and encryption then we will all be fractured and the NSA can easily pick off their targets individually. What's the answer to this problem? Is there crypto that we can all use that the NSA won't be able to crack even if they have a strong incentive to do so? And why aren't we all using if such a solution exists?
Correct, the banner shows it was last updated in 2011.

http://allseeing-i.com/ASIHTTPRequest/

Given the problems we found with SSL domain verification in another networking library, you definitely don't want to be using unmaintained code for this.

https://sourcedna.com/blog/20150420/afnetworking-vulnerabili...

(SourceDNA helps developers secure & improve their apps, and one of the things we identify is out-of-date static libraries.)
It might help readers to know Krebs is the security investigative reporter; he is probably the single most important reporter in the world on this particular beat.
See also: Alpine Linux; http://wiki.alpinelinux.org/wiki/Alpine_Linux:Overview
This is a great win for fair-use, and matches Google's original rationalization for why their scanning was justified.

Note, though, that Google in the middle years of this dispute sought to acquiesce to a class-action settlement with the Author's Guild. That would have more-or-less abandoned the (strong and ultimately successful) fair-use argument, and set up a system where Google and the Author's Guild were economically aligned, with a precedent against other (less deep-pocketed) groups who might want to make a similar fair-use argument in the future.

Third parties including the American Libraries Association, EFF, and ACLU objected to the potential negative effects on competition, privacy, and free-speech of that proposed settlement, which helped prevent it from being accepted by the courts. That forced Google to fall back to its original defense, and led to this broader win for fair-use principles. For more details, see:

https://en.wikipedia.org/wiki/Google_Book_Search_Settlement_...
The upcoming http://sta.li distribution tries to solve this problem via git which apparently does reasonable efficient binary diffs out of the box.
I think you are the one that is misinterpreting the percentage. 95% means that 95% of the reviews were "positive." Of course it says nothing on whether you will like it or not, because it has no idea what you would like.
> Since when does the right of the owner shift to the consumer with respect to artistic creation?

It doesn't. However, this isn't about rights shifting from the owner of a copyright interests to someone else, its about power to exclude particular uses that the owner of a copyright interest never had (note that statutory fair use is largely a codification of pre-existing case law on fair use which was grounded in the First Amendment, and so generally addresses powers that not only the copyright owner never had under the law, but powers which Congress could not give the copyright holder, because doing so would violate an explicit Constitutional limitation on the powers of Congress.)
Brewed coffee != espresso. I think that might be the essential piece you are missing. Espresso is brewed at very high pressures and as a result the grind size and consistency has a large impact on the resulting shot. The difference is not at all subtle and is quantified by the extraction time for each shot.
Like doxygen?
Ok (thumbs up)
Interestingly, I recall reading once (forget where) that Gibson didn't see his world as that pessimistic. It was no utopia, but it was also not a radioactive post-WWIII or post-ecological-collapse wasteland. Keep in mind he was writing just after the 70s during the height of the Limits to Growth hysteria and also during the cold war when nuclear armageddon was viewed as a strong possibility.

The series also ends on a positive note with what felt to me like a real sense that things could get better.
I'm a little confused by augur. It can only predict things well based on a large crowd of people betting on it? So the more specific or niche the event, the less chances it will be correct?
Ask HN: Does Facebook sift through your image cache?
I got a strange contact showing up as a friend recommendation. The wierd thing is I don't know the real name of this person and cannot figure out how facebook got it! (And I am pretty sure the other person doesn't know my real name either). So the only possibility I can think of is FB looking through my browser cache or something and doing a face/image detection/recognition of sorts. Any idea ?
The image purports to show a mass of hidden iceberg underneath the water. What it show instead is two above-water icebergs, one of which was flipped upside-down. That is totally fake in my book. If it happens to be accurate (and like you say, we have no information about that), it might correctly illustrate the idea, but the photograph is still fake.
That skills are legendary
https://www.reddit.com/r/programming/comments/8l3bq/wolfram_...
It doesn't matter until SETI is announced and I get 24/7 coverage on all stations.
The US has by far the most expensive health system as percentage of GDP and I haven't seen any statistics that show that the outcomes are superior. In some areas outcomes are very good, in other areas not so much.

One place where health care is an economic disaster is the US.
Your experience point by point matches my own, the customer service feels exactly how it should. The premium product I need from Amex isn't the lounges and the prestige, just a credit card company that has my back and isn't trying to avoid me when I need to contact them.

Let me also note that since Amex has become a commercial bank, they offer a FDIC insured savings account[1] at an extremely competitive .9% APY. That was the highest I could find a couple years ago when I started looking. That product too, to me, feels very premium.

[1]https://personalsavings.americanexpress.com
The Qualys SSL Labs tester checks for weak DH parameters as part of its report: https://www.ssllabs.com/ssltest/
icebergs turn over quite often, as the seawater eats away at the bottom until they become top-heavy. When they do you get that really strange brilliant blue color which comes from dense glacial ice which has had all the air bubbles forced out.
Now the interesting thing to do would be to take one of these iceberg pictures for real. Since we can't see through this much see water the thing to do is make a huge grid of cameras and put it directly up against the iceberg.

Alternatively, once could lower a line of cameras to scan the iceberg.
Indeed, the problem here is too much reason (not applying the exclusionary rule when the incentives it seeks to create do not apply), and not enough religion (always applying the exclusionary rule to benefit the accused when the government makes a mistake).
>> I mean there is a reason why the phrase "statistically significant" is often used.

Not sure if this is meant to be satire / sarcasm?

By "classically" trained statistician, i meant someone who has taken a bunch of grad level courses in statistics (as opposed to CS flavoured ML).

A lot of Fisher's and Gosset's work was done in an era of "small" data.

>>if you can figure out how a "classically" trained statistician can create an acurate model with:

>>1) almost no data

>>2) inaccurate data

>>3) seasons in which the next one often bears no resemblance to the previous one

Stats / ML can't help much with 1) and 2). But wrt 3), dealing with issues of non-stationarity is very much a subject of statistical literature.
One important missing dimension-of-distinction here is 'zero-sum'/'negative-sum' vs. 'possibly-positive-sum'.

The lines can seem fuzzy in practice, but it does make good sense to reserve the term 'investment' for deploying resources, with the hope of gain, in domains where a net-positive-sum outcome for all is possible.

Meanwhile, pure 'gambling' reshuffles value in a net-zero-sum or even net-negative-sum process, and in many cases only persists because some participants ('suckers', 'marks', 'degenerates') have equally-persistent behavioral/decision-making problems.

Another related dimension-of-distinction is whether the randomness is an inherent product of a chaotic/complex/natural process, or synthesized precisely with intent to confuse.

Coming to understand (and either control or hedge) the randomness in nature or in complex hard-to-predict systems can be a very positive-sum process, and even generate spillover benefits for others (positive externalities). But engineering a game with fixed completely-deterministic odds, rigged against most players and (designed-to-be) just beyond the ability of their usual rules-of-thumb to model, is essentially predatory.

People generally shouldn't play such games, or confuse them with the other more-reasoned 'bets' made in other domains. Of course people will sometimes make the 'bad' bets, because they're not always easy to distinguish and everyone has to learn. But the end of that process would ideally be to better discriminate between kinds-of-bets, not to lump them together as 'all just gambling'.
The subprime ‘unicorns’ that do not look a billion dollars
My comment is not directly related to Morpheus Linux.

The first link on the page "Keep it simple" directs to "http://suckless.org/philosophy" whose motto is "software that sucks less".

I've never contributed any software to the open-source community (I hope I will one day), but I find it fairly unfair to all those devs that spent years making open source tools that are used by every single sysadmin to say that you want to write "software that sucks less".

You might want to write software that is "better" but not that "sucks less". Saying a tool sucks in hindsight is way easier than writing a tool that doesn't suck in the first place. After all, you probably learned how to write a tool that "sucks less" thanks to all of those other developers that made those mistakes for you.

So, although I do agree with some statements made in the "philosophy" part of the website, like this one:

> Most hackers actually don’t care much about code quality. Thus, if they get something working which seems to solve a problem, they stick with it. If this kind of software development is applied to the same source code throughout its entire life-cycle, we’re left with large amounts of code, a totally screwed code structure, and a flawed system design. This is because of a lack of conceptual clarity and integrity in the development process.

I do think the domain name and mottos are poorly chosen.
I think this is an important concept for discovering happiness overall. You can work on this by keeping a rough journal of how you spend your time and then reflect on whether they are important/enjoyable.

Then try to increase the amount of time you spend on those things that important/enjoyable and decrease the others.
Methane is something like 20-70 times more potent a greenhouse gas (depending on timescales you look at, estimates for 100 and 20 years respectively) than carbon dioxide; it's not burning that would be a problem, but massive release of unburned methane.

Aunt Wiki[0] seems to confirm it may be a problem.

Anyway, I only learned about dangers and potential as energy source of clathrates from Fate of the World[1], so I don't claim to know much about the topic.

[0] - https://en.wikipedia.org/wiki/Methane_clathrate#Methane_clat...

[1] - http://store.steampowered.com/app/80200/
Read through Kreb's archive, he has screenshots and more info. If I remember correctly one was on the clearnet but required some sort of verification before you got access.
I occasionally get sleep paralysis. I've also experienced lucid dreaming. For me sleep paralysis is different than lucid dreaming. In lucid dreaming, I basically realize that I'm sleeping and then from there can direct the dreams. In sleep paralysis, I'm in bed with my eyes open and experiencing hallucinations. It's not the same as dreaming as you are looking at real (and unreal) things. For me, I can't catch that inconsistency that makes it a dream.

To give you a good example, in a dream it is practically impossible to read. If you are dreaming that you are reading, one of the tricks I have played to get into lucid dreaming is to try to say what I am reading. It is either impossible, or it becomes absolute nonsense because there is nothing for you to read and your dream is skipping over that detail. To get into lucid dreaming, you just need to notice that and then decide not to wake up.

For sleep paralysis, you actually are looking at your room. You can see the pattern on the wallpaper in exact detail. Everything is real (except for the hallucinations). Also, you can't move.

When I've got sleep paralysis, I usually feel like someone has broken into the house and I need to warn people. But I can't move a muscle. I can't speak. Sometimes I will literally see people in my room. Sometimes I will see other things (even bizarre things like flowers).

It's interesting, though. A colleague of mine opined that sleep paralysis was the absolute most terrifying thing on earth. I said flippantly that I had it and it didn't bother me much.

Unlike lucid dreaming, I don't seem to be able to catch the inconsistencies in sleep paralysis. But as soon as I realize that I can't move, I get really pissed off and it overrides my fear. It's hard to describe, but I have a kind of internal explosion that starts in my stomach and gradually forces it's way out and shatters the sleep paralysis. Often I end up shouting something incoherently as I emerge from sleep. As soon as I wake up, I feel absolutely pumped up and amazing -- empowered, I guess.

I hadn't really thought about it, but I wonder if the lucid dreaming has allowed me to subconsciously recognize the paralysis and trigger a way to get out of it.
You can't fix this on the client side, but on the server side.
Has NASA’s Kepler Mission Discovered an Alien Megastructure?
> All of this will certainly not help for Fly's later reinsertion, say, when he decides to get a job in IT.

Maybe he should find a career that's less likely to offer tempting access to other peoples' private information next time?
Not really. This precomputation attack only works because attacks on 1024 bit discrete logs were already plausible.

We don't choose cryptographic parameters to make the NSA's job harder; we choose them to make the job implausible.

So it's exactly the wrong message to take from this paper that we should mix up parameters more; rather, the message is: don't use weak moduli.
> Nationalized healthcare is a disaster economically and in patient outcomes

In the rest of the developed world, universal healthcare (both nationalized and on other models) is consistently cheaper (per capita and per GDP) than the US system, and produces overall comparable to better outcomes than the US system. So, if it is fair to say that "nationalized healthcare is a disaster economically and in patient outcomes", it is only in a sense where nationalized healthcare is still significantly less of a disaster in those areas than the US system is.
I would hardly categorize Daniel Craig's refresh of Pierce Brosnan's Bond interpretation as "simple replacement." I think each new Bond actor has great potential to bring their own unique artistic interpretation to the role and to make it work for them.
Never write on the whiteboard
Are they from different countries?
I think it's important to mention that Google only returns 'snippets' of the text. The entire book is searchable and indexed but Google book-scanning project prevents use to read the entire book. The court ruled this is fair use since it enables the searcher to find out if the searched book has substantial information regarding their research/searching.
Brian Krebs has done this once or twice, so he's built a collection of resources already making it a lot easier for him.

A simple answer would be there is more to onion sites and 'the dark web' than just the Silk Road.
Note that the $100K cannot include salaries to the founders. If you pay yourself $40K, then you would have to have raised $140K to be eligible for the visa.
Dynamically generate API's
The problem (defined as narrowly as possible) should be as simple as finding every application that uses 1024 bit Diffie Hellman and making it use 2048 bit Diffie Hellman instead.
>Intrade’s system was designed to evoke sophisticated investment

No, it wasn't, or it failed at that:

1) They changed rules on bets midstream. I lost when they redefined the swine flu count as "the CDC's current total" rather than the original specification "number of cases as estimated by major media sources". (The CDC stopped updating.)

2) The bizarre $1 = 10% chance system. (Bet contracts would be set to have a value of $10 each, so a 100% chance should equate to a ~$10 bid.)

3) The flaky, designed-to-trick-you withdrawl system. When I asked for a check for my balance, there as a $X fee. So I asked for $Y, while leaving $X in the account, and was told I'd get $Y. Then they took $X out of the check, leaving an $X balance.
But they make great pizza there...
Tobii’s eye-tracking tech might finally come to devices you actually use
Marc Andreessen answered this question:

The IPO is Dying

http://www.vox.com/2014/6/26/5837638/the-ipo-is-dying-marc-a...

Basically, high-tech growth gains have been privatized. Most of the upside is made via venture capital now.
I don't understand Go but: It is the "goto" necessary? A "loop" will not be better?
That is a much better word. Thank you.
There are many reasons a business might choose to develop a web-wrapped iOS application besides not having the "bankroll to pay for native devs."
Show HN: Linx-server – Self-hosted file/code/media sharing website in Go
Do you need a Data Scientist?
Oh it's used to find them so you can CRAK DOWN on them. Yeah, that's totally what I expected, not an app or anything like that...
Hi there!
This is my first attempt at Go, in porting a personal project I ran for a few years in python.
This came out of the necessity to share files without having to register on some service, then have people have to login to download, and/or see ads, etc.
It can be very useful for internal deployments as well, where teams can share files very easily between them.

Any comments are welcome!
The full text of the study is paywalled here: http://www.cell.com/cancer-cell/abstract/S1535-6108%2815%290...

Fortunately the summary there has some useful information: "rVAR2 (recombinant malarial protein VAR2CSA) fused to diphtheria toxin or conjugated to hemiasterlin compounds strongly inhibits in vivo tumor cell growth and metastasis"

Anyone know how they're attaching those toxins/compounds to the malarial protein?
I know. That was meant as a joke.

I still sometimes forget that on HN, humour tags are obligatory. ;).
https://xkcd.com/567/
The Ultimate Guide to Reinventing Yourself
You size your bet with regard to the probability that the bet will inform a change in policy. Or maybe you hedge it by also betting on that change in policy.
Theoretically, that shipment of heroin could have ruined his and his wifes life for good.