skysight-inc/HackerNews huggingface dataset:
What you say might be going on, but I would not expect this source code sharing to constitute IP transfer. It's an audit or inspection. The government isn't allowed to use the code, and I doubt they intend to or have the ability to.

I haven't been involved in government audits of source code, but I have been involved in private audits. We invite the third party into our offices, where we provide them access to a laptop that has the source code loaded onto it. The laptop's network access has been disabled. They're free to examine it for as long as they wish, but they're not allowed to copy it or remove it from the network.

These kinds of mitigations are presumably what they're referring to when they say: “Strict procedures are in place within these technology demonstration centers to ensure that no software source code is released, copied or altered in any way.” Note the term technology demonstration center, that is, physical location.

This kind of audit is fairly routine when an important customer is considering your product, for a number of reasons. After all of the security events in the news recently, any foreign government would be right to worry about backdoors in technology provided by US firms. Source code access is one way to mitigate those concerns. It's an audit, not a technology transfer.

Last but not least: I could imagine a certain kind of software where it could be damaging, and could reveal IP, to allow anyone to see any part of the code. Imagine if I invent a better audio compression algorithm that's twice as good as typical MP3 compressors, while producing MP3 format. Then showing someone even a snippet of code could give away my trade secret of how it works. However, the source code of large software products like IBM's is unlikely to have any especially valuable secret sauce. The value of the IP comes from the whole, not of any one special part. In that circumstance, allowing someone to peruse the code at their leisure doesn't give much away.
I don't have a citation handy. I had a college class on homelessness some years ago. I have read a fair amount about poverty. I am currently homeless. My medical handicap is a primary underlying cause of my lack of housing and challenges involved in trying to resolve that.

It is too late to edit the comment. It may not be "most" poor people (ie more than 50%) but it is certainly many.

I can also confidently state that a high percentage of homeless individuals have either a medical or a mental health condition that is an underlying cause of homelessness hy substantially interfering with their ability to make their life work. I believe that for the homeless population this is well over 50%, though I don't have a citation for that either. However, my previous college class and firsthand experiences suggest that health problems lead to homelessness. I know that once you are on the street, it can be hard to take care of yourself and homelessness often does cause or worsen health issues. I think this reality masks the degree to which health problems both precede and contribute to incidence of homelessness. I think most people think people on the street are ill because they are on the street. But everything I have seen indicates most of them were ill before they became homeless and that fact contributed to them ending up on the street or outright caused their homelessness. In many cases, being on the street does cause a worsening of their health, but that should not be misconstrued as "Well, they are only ill because they are homeless."

Everyone I have ever known reasonably well who had a serious health crisis experienced significant financial stress as a consequence, above and beyond the high medical expenses per se. Some things I have heard over the years: Job loss, time away from the job, passed over for promotion, took a demotion to a lower paying position. There are also additional expenses incurred beyond the medical expenses, such as higher food costs due to being too sick to work, transportation expenses if they need to travel to get care, etc.

I also recall reading in an article that the most common factor in cases where women were on welfare for very long periods and could not seem to get off welfare was that she was de facto responsible for providing care for a relative with high needs of some sort, either a special needs child or elderly parent in poor health or similar scenario.
(Unofficial) YC Research Application Form
Hello! If you're a curious & ambitious researcher, Sam Altman's announcement of YC Research (ycr.org) left you salivating for more. This is a mock (really rough) idea of how the application might look like and I want your feedback. I am more than happy to discuss your application with you and make the results of this survey public, so all of us can learn from each other.

Here's the link: http://goo.gl/forms/E1835GnmcZ
> So we're at the point now

Has that not been the case for most of our history? Prior to the 20th Century most humans couldn't read legal documents of their time because they couldn't read. There's a reason "scribe" was a profession.

As for the 20th century, is there any evidence that legal documents were more legible earlier than they are now?
One of the complaints against Theranos is that they've published very little peer-review research about their results, nevermind their methodology and technology. [1] [2]

Since you 99% sure that other labs have problems, are you suggesting that all the other labs rely on technology that also have a dearth of peer-review published results?

[1] http://jama.jamanetwork.com/article.aspx?articleid=2110977

> As of January 5, 2015, a search in PubMed using Theranos as a search term identified affiliations for only 2 unrelated articles coauthored by Theranos Inc employees, although these 2 reports do not offer insights about their company.

[2] http://www.newyorker.com/magazine/2014/12/15/blood-simpler

> Clarke argues that finger-stick blood tests aren’t reliable for clinical diagnostic tests; because the blood isn’t drawn from a vein, the sample can be contaminated by lanced capillaries or damaged tissue. Holmes strongly disagrees: “We have data that show you can get a perfect correlation between a finger stick and a venipuncture for every test that we run.” When I asked for evidence, I was sent a document by Daniel P. Edlin, Theranos’s senior product manager, titled “Select Data.” It purported to show favorable results from numerous comparison tests. I asked Edlin if the tests had been conducted by an independent third party. He replied by e-mail: “The clinical tests were conducted by a combination of Theranos and external labs,” but he wouldn’t say which ones.

> When I asked Holmes for evidence that her tests were independently audited, she said that there have been “tens” of audits and “external third-party comparisons” of Theranos’s tests, including those done by the hospital groups that are adopting its finger-prick tests and the pharmaceutical companies that have contracted with Theranos for testing their products. Holmes says that Theranos is certified in forty-eight states, with two more applications pending, under the federal Clinical Laboratory Improvement Amendments of 1988. Under the amendments, laboratories like hers must be certified before they can perform tests for the general public, and their performance is evaluated three times a year by the College of American Pathologists. Holmes also pointed me to a pilot study published by Hematology Reports, an online-only peer-reviewed journal; she is listed as a co-author. The report, released in April, concluded that Theranos tests “correlated highly with values obtained” from standard lab tests.
Amazon generally has good customer service. They might refund you if you ask.
Another problem is that Dropbox can see which sites you are visiting.
Really interesting point. I'm not exactly sure what I think would happen, but my intuition is that GitHub wouldn't turn off access to GitHub pages just for users on our platform - even if traffic was excessive. I think this generates a lot of interest in GitHub in general which is beneficial for them.

But you are right, I believe a git based cms/blog that runs in some standalone fashion could be a v2 or v3 of this product. Or perhaps a one-off paid option if you don't want to use GitHub, you can pay to use our private git repo or even a git repo you host on your own.
Is this for their OpenCourse Ware thing? IMO MIT OCW is very underrated and looked over in favor of Coursera, which I've almost always found inferior.
Talk about germane, that's an excellent link. Thank you.
> Edit: I do think it's stupid to make the identity-equals operator overloadable. Identity-equals and value-equals are separate concepts. In C++ this isn't an issue because == is the value-equals operator.

In Ruby, == is value-equals at well (identity-equality being such a rarely needed concept in Ruby that it wouldn't make sense to privilege it with its own operator).

Identity equality in Ruby is provided by:

a.object_id == b.object_id
Stay loyal, but always keep your options open. Never stop networking, never stop exploring new opportunities.
If a person uses the word, "Agnostic", they are an atheist.

If a person uses "curious"... gay.

I used the word "Abort" and confused people but you have to abort a command.
I saw a movie recently which dealt with this topic of people dying with no obvious next of kin

http://film.britishcouncil.org/still-life2

though from a british viewpoint and somewhat cynical regarding the downsizing of the department handling these affairs (I don't know what really happens over here)

I was pleased to note that the new york times actually listed costs relating to the disposal of his estate, and even went and spoke to the people who did inherit some of whom had never even heard of George Bell.
Yeah, this is good work, but I don't see it as being remotely legal.
OS X does the same with Safari. There is always a notification asking me to try Safari after each OS upgrade.
True, we can always cut the ad's element out after they render.
I really need to go watch that machine run. They finally got four tape drives working, so now they can run a sort.

The 1401 is a strange machine. It's a direct descendant of IBM's electromechanical card machines, and it shows. It has a memory layout and ALU designed for fixed length strings of decimal digits of arbitrary length. The end of a number is indicated by a "word mark" bit, a special 7th memory bit on each 6 bit character.

In early computers, "business" computers had decimal arithmetic hardware, and "scientific" computers had binary. The IBM System/360 had both. This lives on in the binary-coded-decimal instructions in x86, which are used by almost nobody. (You can only do one digit at a time, because the x86 decimal instructions haven't been upgraded since x86 machines really were 8 bit.)
Absolutely. People care about UI, UX, and prompt updates.
A Protocol for Packet Network Intercommunication (1974) [pdf]
This is a pretty straight call on things. Nobody likes getting laid off, even if they had the day before been wishing they would get laid off. It feels wrong, it feels personal, and it feels bad.

That said, it forces you to look at new opportunities and that can be a good thing. There was a person I knew at Sun who was layed off and that forced them to find a new job and they landed at a company that then went public and they made several million dollars. It really struck me how what seemed like something horrible for them really was the key to their future success.

The key for me was realizing that different people, in different situations, respond very differently to the folks around them. I've seen it work both ways where a "star" from Company A was recruited to work at the company I was working at and they flamed out miserably, and I've seen people that were very unproductive get layed off an blossom in a new environment into superstars.

I wish sometimes someone would do a long duration study of folks in the bay area to quantify the expected value of staying or leaving. My instinct tells me that the smart ones leave, the "loyal" ones pay a price for their loyalty that they don't expect.
Ironically, Amazon also offers a service that only requires a prime membership - I'm not sure how it differs though, other than selection. From the article:

"The new Amazon Prime Now delivery service offers standard ($99/year) Prime members free two-hour delivery and $7.99 one-hour delivery on a wide variety of products, including some grocery items, although the selection is much more limited than it is on AmazonFresh."
Wonder how services like Blendle (content micropayments platform) will fare if such blocking increases. Interestingly enough, Blendle got investment from Axel Springer (Bild owner) and NYT last year[1].

[1]http://www.mondaynote.com/2015/10/05/blendle-is-up-to-someth...
Yeah. I've been watching a lot of Apollo footage recently. Our concerns seem so mundane, by comparison.

That said, I think the next 50 years will be a new golden age for space exploration...
Hey guys. Thanks for checking out TinyPress.

I'm cataloging feedback I receive so you all know I'm listening, and will be iteratively adding these items as we move forward over the next week or two.

You can find the list on the post below. I'll be updating this post in real time from feedback I get here, on Twitter, or through Intercom (blue button on site).

https://tinypressco.github.io/2015/10/18/on-hacker-news.html
See my other comment in this thread for details about how these audits are usually done.
See this comment from weinzierl, which has an example of a system that needs to behave differently while in a test environment:

https://news.ycombinator.com/item?id=10409417
i cannot fucking understand offended customers. you dont want to pay? dont pay.
TIL the average salary for port workers is $147k.
>I will be trying out instacart in the future.

I thought of Instacart when I read the article. With so many options currently on the market, I wonder what made Amazon decide to roll out such a huge membership fee? This is a dangerous gamble IHMO.. Recode.net is already reporting people in Philly, NY and Seattle are already ticked of with the hike. http://recode.net/2015/10/18/seattle-nyc-and-philly-customer...
Tool to automate that: https://github.com/jakeogh/dnsmasq-blacklist
Pretty sure they could just hire 20k people to type in the OCR proof code.. i.e. the turk solution.
Thank you.

I am aware that Hershey was a company town. (I think it was, in fact, built by the company, but am not going to put time and effort into verifying it.) I did work for a large company for some years. For a variety of reasons, I chose to leave out examples I know of from that company that are a lot more recent than Hershey. It was the biggest employer in town, though certainly not the only large employer. My understanding is that in one case they did not even try to demand X from the city, they just began scouting for land elsewhere and the city came to them and an arrangement was made that satisfied the company's need for land.

So I am thinking that a) it isn't necessarily about having the power to cram your agenda down the city's throat, more about having a clear agenda to begin with and b) your first line -- indicating that they have other priorities -- sums it up nicely. It isn't that it cannot be done, it's that they don't really care that much about the issue.
The technique he uses to represent data structures is lambda is called a "Church Encoding" (look it up online). A nice paper on how that may be used even in more common imperative languages: https://www.cs.utexas.edu/~wcook/Drafts/2012/ecoop2012.pdf (here it's called "Object Algebra).

Also the general idea reminds of this mailing list entry by Joe Armstrong: http://erlang.org/pipermail/erlang-questions/2011-May/058768...
"... the manufactures or the products usually have no idea when this is done"

Some of them (or at least the marketplace resellers) do. In an article linked from another discussion here on HN [0], there is evidence that some of the fake reviewers would have empty boxes shipped to them so they would have the "Verified Purchase" qualifier in the review, the kindle book sellers simply put their books in a free promotion for 5 days so the reviewers have the "Verified Purchase" even though the cost was $0.00

[0] https://news.ycombinator.com/item?id=10402480
"would improve their chances of surviving a disaster"

A 1% improvement is still an improvement. If I think I can survive with X then I'm sure that having X+Y will lead to an improvement in my ability to survive.

(Assuming I don't have to lug the extra Y around with me.)
To be or not to be (PCI 3.1 Compliant): The TLS 1.2 Only Dilemma
A few days ago, in what we didn't anticipate would be an expensive experiment, we accidentally activated the "TLS 1.2 Only" switch in our CloudFlare account.

We need to be PCI compliant and even though PCI 3.1 full enforcement won't come till next year, we were playing around with our Cloudflare Crypto settings previous to a PCI scan. We left the switch on by mistake for almost 6 hours.

TL;DR;
We experienced a 20% drop in sales during that period of time.

The long version. We run an e-commerce site with approximately 1,000 transactions a day. 40% from Latinamerica, 20% Europe, 25% US and the rest scattered all over the place.

We started getting support tickets with people complaining of "Secure Connection Failed" errors and (Error code: ssl_error_internal_error_alert).

Unfortunately, due to timezone issues with our customer service and IT staff teams, it took us a few hours to realise what was happening.

We turned off Cloudflare and the issue disappeared. We checked the settings, and disabled the culprit.

Just to be clear, this was not CloudFlare's fault. They specifically warn about potential traffic loss. Their FAQ says:

"We are monitoring browsers and traffic to track the percentage of TLS 1.0+1.1 traffic relative to the total volume of encrypted traffic. In October 2014, this traffic was approximately 30% of all encrypted traffic on CloudFlare's network. In February 2015, this traffic was less than 22% of all encrypted traffic on CloudFlare's network"

The questions is: What happens next year when, in order to be PCI 3.1 compliant, we must use TSL 1.2? Are people going to pass their PCI scans, and then simply revert to allowing TLS 1.0 and 1.1?

We have a pretty representative western based traffic pattern, and for us it was "only" a 20% drop, but if we include Asia and Africa, I'm sue that number is going to be higher.

Any idea of what other merchants or even payment gateways (Stripe et al) are going to do?
I've been watching Apollo footage recently too ;)

I am not sure about next 50 years, so far It looks like people would spend more on some selfie sticks than space exploration.
Practical Extensibility with Object Algebras (2012) [pdf]
WinZip made a similar choice with its encrypted archives: you could see the list of directories and files before supplying a password.

I would prefer that my account info be encrypted, but I can't use the new OPVault format, because it requires 1Password 5, which isn't supported on OS X 10.9.
> When you sign up for a Google account you give Google your name, date-of-birth (DOB), location and mobile phone number. This is some of your most private and personal details

> Information you give us. For example, many of our services require you to sign up for a Google Account. When you do, we’ll ask for personal information, like your name, email address, telephone number or credit card to store with your account

They include that.

> Google records your browing habits and activity against your account

Also clearly explained in the Chrome privacy policy:

> If you sign in to Chrome browser, Chrome OS or an Android device that includes Chrome as a pre-installed application with your Google Account, this will enable the synchronisation feature. Google will store certain information, such as history, bookmarked URLs as well as an image and a sample of text from the bookmarked page, passwords and other settings, on Google's servers in association with your Google Account

> - how long they keep your activity data before it is erased. Is it 6 months? 12 months? Forever?

I agree this would be nice to have more details on but they do detail some of the complexities involved and refer you to specific services pages for more information.

> whether they disassociate your identity from your browsing behaviour or web activity when they look at it

This appears to be really part of your next question:

> related to the above: who sees your data inside Google? ... This is too vague in my opinion

Can you give me an example of a way this could be made less vague in an acceptable fashion? I'm struggling to think of a way they could give me relevant information.

> Let me put it another way: if I asked you for your name, DOB, mobile number and location and then recorded your online activity against that information, wouldn't you expect me to tell you who sees your data, whether that data is anonymised and how long I keep that data about you?

Personally I'd make the decision ahead of time. I do appreciate your point, but only a portion of your post is valid as they are quite clear on a couple of the points.

There's a large difference (imo) between 'misleading' and 'not thorough enough'.
> the concentration of red blood cells and platelets is not affected by what you had for lunch

Sure. Except I never said or meant to imply RBC's and platelets change on the same day. Part of the context of the comment, were my own tests.

So the question is, why wouldn't one want to remove as many confounding factors as possible?
Why do we need modules at all? (2011)
Total Clickbait title (could be rephrased as):

Near Clone of Planet Earth Responds to Charges of Plagiarism in Best Way Possible.
One advantage is that the application gets full control over the page tables. At least one program I work on would gain huge advantages in that kind of environment.
The code war: Russia plans to free itself from iOS and Android