skysight-inc/HackerNews huggingface dataset:
Having grown up with a cat lady (17 cats at some point) I can tell you that anyone who claims 'look in the mirror' and try to apply human ethics to their pets is completely irrational.

Most of the time these people will actually make up complete nonsense story to justify the pet behaviour, including completely stupid stuff like "it's Tuesday, he always like to be on the dinning table on tuesday" and endless other nonsense.

There are several papers [ Example: http://blogs.scientificamerican.com/science-sushi/toxoplasma... ] describe how Toxoplasmosis could not only get into owner's system, but also change their behaviour; they had demonstrated that mices infected with it would actually be /attracted/ to cats completely irrationally.

When you look at this and extrapolate on how many people are actually /crazy/ about cats [ Check, the interweb! ] and could be affected by that sort of brain damage --all of them driving, voting and making 'rational' decisions-- it's really worrying...
Data Science Interview Questions
Usually yes, but we are in talks with companies which will use the software to provide customer support, help desk support, and/or for conversational commerce. Additionally we are working on some single user features integrated into the client. All this will help to lift the project over the problem of having not enough users at first.
Are you volunteering? :-)
So anything that monitors your clipboard (basically every spyware worth its salt) will have a copy of all your passwords then? That doesn't seem very secure.
Depending on what we mean by "distribution", patents could soon cover distribution with a new license to go with them. The MPEG LA is attempting to form a patent pool for MPEG-DASH: http://www.mpegla.com/main/pid/MPEG-DASH/default.aspx
Ah, when I asked about scalability for commercial usage, I meant - how do you plan to make enough money out of this to scale it. An automated bot that answers questions about me is a novelty, I'm curious about whether you would make enough money out of it to sustain it:: which would then make it worth my time to enter data about myself.
Titanic victory for fair use
Not just American (I'm not American, but I recognize the tendency. It's not broken, so don't fix it... and even if it is broken, just fix it, don't try anything fancy.)
Thanks, I'm so lame!
It's a way to get from point a to point b, I don't think creepiness is a big factor for me. Good lighting is a different story.
more bookmark managers online: http://www.eduhub.io/b/social-bookmarking
Reassuring to learn that the word 'meritocracy' originally came from satire and not from serious proponents
If the failures of meritocracy and elitism interest you, I highly recommend reading "Twilight of the Elites: America After Meritocracy" by Chris Hayes, who currently works for MSNBC. Aaron Swartz wrote a wonderful review on CrookedTimber: http://crookedtimber.org/2012/06/18/guest-review-by-aaron-sw...
Seems to work on IE10/Win7, but I don't get the auto-typing message I get in chrome.
> you need to be the one that monitors and accepts all pull requests

I disagree at least in part. On my team all of the engineers have the ability (and responsibility) to merge PRs. It empowers them and gives them a feeling of ownership. I let the experts in the affected area decide when code goes in/gets deployed as they're able to manage that better than I ever could.

That being said, when something breaks, it's still the tech lead's problem, even if he/she didn't hit the merge button.
BugMagnet – Chrome Extension to Brings Test Cases in Your Right Click
Driverless trucks used at mines to slash costs
It was said in the sample project on market site: "this project is fully customisable and hackable". You may create and bring in the project any React (and not even React) component you wish.

When team of Material UI components will make stable their library for react 0.14.0 I will publish project with Material UI components on market.

Would it be enough to say that this is customisable ?
Agreed. There's definitely room for improvement.
BTW, did you try to do something in Structor ?
"Secure connection failed"
Not lame, new :). HN isn't exactly intuitive, but that's AFAIK a design decision.
Stop being everyone’s friend
As someone from a rather poorer but still with free-ish education (Portugal [1]), 33k is indeed a metric shit-megatonne of money.

[1] Here, tuition fees in public higher education are around € 1k/yr.
The node-machine project for JavaScript is worth a look here

http://node-machine.org
Why Startup Hubs are beneficial to high-growth startups? Plus 5 steps guide
I've found this to be the single greatest challenge I have as a tech lead. It's incredibly tempting to say "oh, I think I'll have time this week, so I can take that Trello card". If it's on the critical path, leave it for someone else. You won't have time.
Understanding Indirect Blocks in Unix File Systems
> I don't know if this is even worth worrying about considering the baseband.

Yup. If you are worried at all, don't own a mobile device.
This clause does not apply here: I assume it is intended to avoid "hacked" OCR libraries that e. g. work with Win32 apps. But as with any hosted service, I do not distribute any code.
He finishes up with A Modest Proposal.

Edit: Oh no! I am getting downvoted by HN users who didn't get the reference and/or have completely no idea what I believe with regard to the issues at hand in the article.
The Fundamental Physical Limits of Computation [pdf]
Depends on what you mean by Unix.

But OS X is UNIX. www.opengroup.org/openbrand/register/brand3602.htm
Fatih Fare İlaçlama,Fare İlaçlama,Fatih İlaçlama
I know this opinion won't be popular, and I know encryption is a very complex topic, but ... TLS is simply vastly too complicated. How many of us here could write a TLS library even if we wanted to? So you end up with code so complex that even the smartest people can barely understand it, let alone debug it, and you get terrifyingly long CVE lists like for OpenSSL as a result.

Compare that to a basic unencrypted HTTP server, which you can write in ~10KiB of code. Complexity breeds these kinds of problems as a natural consequence.

I do know that verifiability is significantly easier than all of this (signatures; hashing), but it's quite possible there is no simpler solution for the secrecy aspect of TLS. I certainly wish there was more support for HTTP+integrity, for those who didn't need the secrecy component. These constant CVEs in every TLS library put our servers at risk in cases where secrecy simply isn't necessary.
Never knew about hnnotify, thanks for that!
I disagree on #1. There's no need to be a martyr as a tech lead. Assign the tasks based on who is the best person to get it done (based on competency, knowledge of affected components, etc.). Treat your employees like adults. They don't need to be coddled, they know there are unpleasant tasks sometimes. Just try to be fair and ensure that your employees are not getting too such tasks to the point where they feel bogged down. Ask them "are you bored?" whenever you have a 1-on-1 meeting.
GARCH Models for Time Series Analysis
Constructive criticism: A better soundtrack / voiceover is key. This one had too many things going on
2. You need to explain how the sound thing works. Is it frequency or amplitude based? (would help me understand what environment it would and would not work in)
3. I tried a demo and it sent the test code but showed me a different number on the screen.
Try Kifi![0] I love it. It has most of the stuff you mentioned - the killer features for me are:

1. easy icon to bookmark any page

2. TAGGING! i can place multiple tags on each thing.

3. full text search across all bookmarked articles!

ability to "follow" and browse other peoples libraries is nice too.

(i'm not affiliated with kifi, just a happy user).
[0]www.kifi.com
FFTs in JavaScript
You can have your content blocked from archive.org also by robots.txt - didn't check archive.is

Are you a lawyer? I am not - anyway, I can't really agree with that falls under fair use.

If I charge money to scrape someones site and then hand over the material in whatever form my customer uses - I am bound run into problems sooner or later.
I don't want to be your Facebook friend
No they can't

Notice the format of the URL

example.com/fileA#encryption-key

All MEGA has logged is: example.com/fileA

encryption-key

is generated client side and only sent to recipients, not the provider.
Thanks for the tip. I have Workflow on my home screen, combined with the 3D Touch menu this is very easy to use.
I think that for the majority of use cases when it comes to packaging and shipping Python programs, we really want to ship OS packages. We don't want users (that includes sysadmins/operations teams in this case) to deal with having pip available, understanding what virtualenv is, and so on. We just want them to be able to use apt, yum, or whatever they experience as most common on their system. Yet at the same time, we don't want our application to take in regard ancient versions of OS packages to depend on.

I think in the end we want a self contained OS package, to offer a sane install method for any target OS. Why would users have to make a difference between e.g. a C program that they install through apt, or a Python program that all of a sudden requires a completely different way of installing?

Here are some interesting thoughts on it:
https://hynek.me/articles/python-app-deployment-with-native-...

And here's a tool that I wrote to be able to wrap up a virtualenv into an OS package, while specifying a precise list of OS dependencies. It's not perfect by far, and admittedly a bit crude, but it already does the job well for some real life "production" stuff. It's called vdist (virtualenv distribution).

https://github.com/objectified/vdist

Documentation is here:

https://vdist.readthedocs.org/en/latest/
It's pretty cool, especially for holding discussions over the course of days, long after the article has fallen from the front page.
Stop Scrolling Facebook – the extension prevent you from distraction of Facebook
Why isn't static analysis or "sanitizers" finding this?
> We would like to thank the LibreSSL team for their great work and their incredibly quick response, and Red Hat Product Security for promptly assigning CVE-IDs to these issues.

> Patch: http://ftp.openbsd.org/pub/OpenBSD/patches/5.8/common/007_ob...

> Releases: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/

I am glad that bugs are found. It shows that the audit is thorough, since bugs can still be expected in LibreSSL (still quite new) and OpenSMTPD (audit was explicitly requested).
PCI Audit &amp; Assessment Services, Managed Security Testing- Ya-Cpa
I use pass ( http://www.passwordstore.org/ ) too.
I don't see any good reason why someone should use steel over PasswordStore.

Its good to have competition, but without a significant improvement over the already brilliant `Pass` I don't see much value in switching over.
Xen is loosely based on a Cambridge research exokernel called Nemesis[1] (a very long time ago I toured the Cambridge lab and watched a cool demo of Nemesis doing some image recognition). However the evolution of Xen didn't really lead to everyone using exokernels - even if you're running your VMs on AWS, and therefore using Xen, you're not using an exokernel in the sense of this paper.

MirageOS is another project following in the same tradition, but again things have moved on and it's a unikernel which has aspects like an exokernel (choose your own abstractions), but also aspects that are radically different (no userspace and everything linked into a single image).

[1] https://www.cl.cam.ac.uk/research/srg/netos/papers/2003-xens...
> Complexity breeds these kinds of problems as a natural consequence.

But the bugs described are not complex - they are local problems that can be understood by just reading one function. The problem here is not complexity, but size (not enough people spend enough time to review all of the code) and the fact that the library is written in a language with manual memory management and unsafe memory access.

> I do know that verifiability is significantly easier than all of this (signatures; hashing), but it's quite possible there is no simpler solution for the secrecy aspect of TLS.

In this case, the affected component was related to the identity part (certificates), which are needed for verifiability. It was not directly related to secrecy.
San Francisco's $600-a-month shipping container village Containercopia
Fight the TPP
From personal experience, very much so. I really miss the spiritual and mental calm and resilience that the faith of my youth brought me. I have several personal examples of where prayer brought me the calm and clarity I needed to focus my mind to get through tough situations.

Once I realize it wasn't true and stopped believing all that went away, and in some ways I still mourn that.
Answering the Much Hyped Phase 2 of South Park – “Underpants Gnomes Profit Plan
Layer.com JavaScript api
The author uses a raft of terms he doesn't bother to define -- "top university", "prestigious occupation", "social status", and so on, so much that it makes the article meaningless.

IQ, and all the other "objective" measures he leaves as an exercise to the reader to define, mostly measure how well-adapted a person is to society such as it currently works right now.

If you believe we've arrived at the society we have now due to "human nature" or some other kind of natural settling, and not, to just pick one alternate hypothesis, an unimaginable amount of violence and plunder carried out across the globe over the last few centuries, then the conclusions in this article make sense.

Otherwise, it probably has some holes.
If you're looking for a chart, Wikipedia is keeping score:

https://en.wikipedia.org/wiki/LibreSSL#Security_and_vulnerab...
Well, one positive thing about this is that it's probably less exposed to cyber warfare. So when the big attack comes, the subway will still run.
Same image in free-ocr.com returned :(

BELL'5 SECONDTI-IEOREI’I:
WWINGSGWTW
HPPPBI‘BOFHSFHRFTHEYVIOLMELDCNJTY.
How the TPP can and will affect the internet
To all those players who became billionaires, and also to those financial advisors that show how anyone with modest income can become a multimillionaire in a 50-year working lifespan through the miracle of compound interest:

People have been investing in property, stocks, and in interest-earning bank accounts for centuries. Someone starting with $38,000 in 17th or 18th century would be worth trillions or quadrillions today[1], or at least their descendants would be.

So where are those trillionaires and quadrillionaires?

The problem is that over long spans of time (50+ years), there are wars, revolutions, devaluations, confiscations, hyperinflationary periods, and other economic disasters that have wiped out all savings.

There's no reason to assume that these things won't happen again when projecting over long periods.

[1] http://www.wolframalpha.com/input/?i=%2438000+at+6%25+for+40...
Is that even necessary for windows? Doesn't windows already have this abstraction layer with windows.js?
Note that MEGA is compromised: The NZ govt now owns a controlling portion of shares. Kim issued a statement saying not to use it, and to look out for an open source not for profit MEGA 3.0 when his non-compete expires late this year

http://www.wired.co.uk/news/archive/2015-07/31/kim-dotcom-me...
Bonus TL;DR: By setting "ProxyRequests On", which is only required to use Apache as a forward web proxy. (There's even a big red warning in the documentation about this!)
Nice! Looking forward
I prefer using git-encrypt https://github.com/shadowhand/git-encrypt

The concept is a bit different. The remote repository is always encrypted and the local is always not.
It breaks Pentadactyl external editor feature as every other WYSIWYG
editor do.

This will be a pain to use.
Definitely! I made sure to prefix it with "my" so it was clear :)

IFTTT integration is on the roadmap!
An Algorithm Helps Robots Fall Safely
This doesn't seem to be a case of a complicated spec causing a logic error. Just another case of a memory unsafe language in action. So it's more an issue of people wanting fast, runtime-free, portable code, and being OK with the security implications C brings in exchange. (A TLS lib written in Rust might eventually be an answer, maybe.)
Well, one could argue that just sending bits cannot be in violation of any patents, though I'm not aware of any cases where this has been tested in court. If you have any encoding / decoding anywhere in your company though, then you need a patent license and the licensor can pretty much ask for any terms, including those that include content fees.

Note that content / distribution fees have been pretty much a norm in the video and audio codec space. MPEG-2 had per-DVD costs, for example. H.264 was the odd one out with MPEG-LA's "free internet video" exception. While it's officially denied, many suspect that exception was added due to competition with WebM VP8, which was released about the same time.
I think the whole piece is satirical, but the satire is either too vague and lacks all humor, and so ends up being more disturbing than thought provoking or funny (which I can only assume was the author's intent). I'm afraid some people might take this joke seriously. In fact, I'm afraid the joke must be lost on anyone not familiar with the "scientific" social Darwinist writings of the 1920s and '30s which this piece clearly tries to emulate. A promo piece for "The Man in the High Castle", perhaps?
Louis+Vuitton+Outlet,Louis+Vuitton+Outlet+Store,Louis+Vuitton+Outlet+Online
Here here- this potentially offers a huge amount but is vague enough to offer all the promise of a childhood chemistry kit bundled with the realisation on unwrapping that you've been sold up the river with overhyped claims.
How hard would it be to generate your own dms sewuences? Could you order genes with appropriate restriction end points and insert that? Does the kit actually perform all transformation and selection automatically?
'contenteditable is inconsistent across browsers'.

We (the Guardian) created Scribe to tackle this:

https://github.com/guardian/scribe

(I can't take any credit personally though alas!)
Most Exciting Photos of Human History
Is it TLS specifically or X509 (both by itself and because it uses ASN.1)? I dimly remember X509 and ASN.1 being commonly criticised for their complexity, does TLS pile on additional complexity or just inherit it?
Ouch. I was not aware of this, so thanks for the info! I guess the reason for this surprisingly restrictive license is/was the version 1/first release character of the software (namespace Windows"Preview".Media.Ocr).

The good news: In Win 10 the separate library is gone and the OCR feature is a regular part of Windows (Windows.Media.Ocr namespace). Along with this, the separate OCR runtime license is gone. -> I could not find any hint that the new OcrEngine class (or Windows Store apps in general!) have similar "no server use" restrictions -> I will move the OCR app to a Win 10 platform asap.

And while I can not speak for Microsoft, I have good reasons to assume that the ocr api service is doing Microsoft a favor by advertising the great Win 10 OCR features. My web service allows for quick prototyping and testing on any platform. But ultimately no web api can be as responsive as a native OCR solution - which is only available on the Windows platform.

I would not be surprised if the OCR engine shows up in Windows Server 2016, directly usable from ASP.NET.
VP9 software decoder implementations are also far ahead. Both ffvp9 and libvpx are faster than current hevc implementations with one core, and ffvp9 also scales well to multiple cores. https://blogs.gnome.org/rbultje/2015/09/28/vp9-encodingdecod...
>Ask them "are you bored?" whenever you have a 1-on-1 meeting.

Why would they answer honestly and not what they believe is your expectation? I know I have been in lots of situation where I chose the nice over the honest answer and I don't think I am special here.
No, but the summary might help avoiding bothering your lawyer if you see there's something you don't like right away in the summary.

I guess that's mostly the point really.
iirc you can disable pentadactyl on a per page/per domain basis, unless that was some other vim browser plugin. it's been a while.
...and this is one of the many reasons that any organization that does care about security "still" uses BlackBerry
It may be a snarky comment but the potential is there.
When diy-biology gets going international drug smuggling rings are going to be a thing of the past, you're going to have a strain of e. Drugi that can produce your cocaine or heroin. The world hasn't even began to think of the possibilities, both good and bad, that are potentially around the corner
Can someone help me understand the benefit? Maybe I'm missing something. When the video says currently "Authenticating with OTP is not really easy", is it saying that typing 4~6 numbers is not easy?
Yeah I got that it is displaying correctly, I just did not understand what it did. Even reading the introduction again it is not clear.

I am not sure it is useful though, what developer doesn't have copy/paste as a muscle memory action? Furthermore the window management alone would be just a tad annoying to make it useful.

It is neat though, but a novelty as far as actual usefulness goes.
> even though we've managed to live with unsandboxed desktops without many such incidents

Antivirus is mandatory on desktops
Stop writing unmanaged code? This is just the same ol' story...
Server-side JavaScript was a thing in the 90s with Classic ASP.
Delude yourself all day, CIA. You must face God. If I wait 12 years, I am CEO of intel for 12 years. If I wait 15 years, I am CEO of INtel for 15 years.

I'm patient. You gotta pay the piper. Yer in deep shit, retard.
Help our developer research. Survey and prizes
http://etherpad.org/
> the library is written in a language with manual memory management and unsafe memory access.

C's simplicity is certainly a blessing and a curse. Right now, I'm of the opinion that C++ is the best we've got, even if not perfectly ideal. RAII, shared pointers and smart containers with bounds checking allows you to keep nearly all of the performance without the drastic downsides of tracing garbage collectors (obscene amounts of memory usage, nasty stalls, etc.)

And when you get into the really high-level languages (Python, Ruby), they simply don't scale.

Everyone's darling right now is Rust. I still think it's too early in its life to know how it'll play out (hot new languages follow a predictable path of gaining negative baggage and shortcomings as they increase in real-world usage), but I guess we'll see. Maybe it will indeed be a great panacea to these issues.

> In this case, the affected component was related to the identity part (certificates), which are needed for verifiability. It was not directly related to secrecy.

Sure, but I'm generalizing here.

I can (and did) write a SHA256 hashing algorithm in 3KiB of code. Combined with a package gist updater (these use signing with local keys for updates), that's enough to secure binary package downloads on the BSDs over plain-text HTTP.

Surely we can come up with a less complex system for verification alone. Something akin to signify, perhaps. I know that doesn't solve how to universally handle anonymously verifying public key authenticity, but surely we can make something less complex than the clusterfuck that is TLS and the CAs. Yet it doesn't seem there's much, if any, interest in even trying. Everyone has hitched their wagons to HTTP/2 and mandatory TLS; which to me feels like a huge step backward by means of making tech vastly more complex.
You need a 10.8% return over 100 years to become a billionaire with $38000.

10.8% would not be unheard of, over a shorter span at least, right?