skysight-inc/HackerNews huggingface dataset:
I'm pretty sure it can't coherently be an end in itself and deliver no value.

I responded to the juxtoposition here: There is no reason to apply economics to education. "Value" is not only monetary.

I'm not insisting that you view education through the lens of economics, I was pointing out that what you said about value was not an argument against economics (because economics doesn't care about what form value takes).

You keep looking for a word other than value to describe this thing that you think should happen because then I can't point out that you can analyze it economically, but this is not a way to argue that education should not be analyzed economically, it is a misunderstanding of economics (it was really clear when stated as "Value" is not only monetary, but "we should do it just because" is still an imputation of value...).
I am unaware of the security warnings etc. against Linus and Linux in general as I am a bit out of touch with Linux, having moved to OSX a few years back.

Do you have recommended reading or links so that I can get up to speed?
One thing to remember, "from Google" is not equal "the only framework to solve X from Google".
CCProxy 8.0 Crack with Serial Number and Register Code Free
That's the worrying issue then the Police and the Home Secratery are not getting on at the moment - I can see the lords putting some amendments down to kill off general access by the plod.
A safer way to be productive on the go
Oops I meant declassified docs
Kibana visualizations that change with browser reload
Reminds me of a project I signed up for, where I said I could commit a couple of days a week to ensure they were on the right lines. I ended up as the full time product owner / business analyst in charge of 5 staff for 6 months.
Could Detroit Become the Next Silicon Valley?
> opium is much less addictive

No, opium is highly addictive. It tends to be eaten, drunk, or smoked, not injected, and that route of administration makes a difference. But the actual substance is addictive.

Opium poppies provide their own seeds. A small garden provides plenty of space for small scale opium growing.

If I was in pain I would want a refined quality controlled product. I wouldn't want variable unpredictable doses. I need to be able to function (so too much is bad) and I want to control pain (so too little is bad).
The correct answer for using URLs as capabilities (which is what a 'secret URL' really is: a capability to a resource, which can be handed out, copied &c.) is to use a 256-bit value as part of the URL. Thus, rather than 'http://example.invalid/TEAM-DOC-SHORT-RAND/' use 'http://example.invalid/w6uP8Tcg6K2QR905Rms8iXTlksL6OD1KOWBxT.... If you're really paranoid, double the length. I guarantee it won't be guessed, in either case.
Summary from my read of this: (the article does a great job of couching the process of exploiting this, as well as motivating why these numbers are too low, but here are the vulnerabilities...)

- Slack chose to use a 6-hexadigit/24-bit "secret code" as the only/final code required to download "privately" shared files. That's way too short; people have botnets almost that big, such that even aggressive IP-based rate-limiting wouldn't stand a chance.

They might have also made these fairly common mistakes (which served to compound the vulnerability):

- Returning different/distinguishable error codes when the request matches correctly on some parts but not all. This allows attackers to guess each in turn.

- Considering values such as the "file ID" to provide additional security/entropy, when in fact these IDs are generated semi-sequentially, and thus a moderately-sophisticated attacker can narrow the search space dramatically.

- Considering values such as the "filename" to provide more security/entropy; however, you can make no guarantees about the length or uniqueness of filenames, so you shouldn't consider that a security feature at all.
FreeBSD supports Mandatory Access Control, implemented as part of the TrustedBSD project. It was introduced in FreeBSD 5.0. Since FreeBSD 7.2, MAC support is enabled by default. The framework is extensible; various MAC modules implement policies such as Biba and Multi-Level Security.
Hm, this is a nice example why software patents are wrong.
Assuming it falls into the category of mass-market software/product, it would indeed be forbidden as a precondition to sell VW cars.

But if, for instance, VW cars were measured to have too high emissions, I see nothing in this article that would prevent justice from demanding access to the source code to audit it.

Alas I would absolutely prefer states to mandate this sort of source code to be open-sourced, but I think that makes me stand firmly in the minority.
Welcome to VICELAND: A New TV Channel by VICE
http://www.thinkwiki.org/wiki/ThinkWiki
> perfect security will never be possible, therefore the only valid solution is reactive security

Yes, I've heard this implied before. This is effectively doing the adversary's work for them, and for free! Perfect truth is never attainable, therefore let's not do science?

To put it in more positive terms, achieving perfection is not important. What is important is a continual methodical process to keep improving, that more-than-offsets natural tendencies to deteriorate. In software engineering terms, it means not letting the project grow to a state where the exploit-discovery rate is so high. Since exploits generally affect the entire kernel, it's negligent and reckless, to be satisfied with merely keeping the bug-per-SLOC ratio constant.
Square Takes an IPO Bullet for All of the Overpriced Unicorns
To a first approximation, the conversation was fairly constructive compared to the rest of the internet and compared to the rest of HN fairly non-constructive. There's a lot of undesirable behavior for HN by my reckoning. My take is that certain topics attract people who are hell bent on exhibiting a set of undesirable behaviors. It's unfortunate, but HN's smart people are still people. On the bright side there are many amazingly good conversations here.
Did you read the linked article? Grsecurity people, gentoo security people and other security insiders have been urging Linus and other maintainers to change their views for decades. Nothing has happened except plenty of hand waving and ridicule. Visit the grsecurity forums, the IRC channel for more details.

Here is a recent example where PaX team are called "leeches"
by a maintainer: http://lists.infradead.org/pipermail/linux-arm-kernel/2015-A...

If this sort of attitude is not stupid, I don't know what is.
These people can't see the forest from the trees.
Marijuana is great, I'm a fan for both recreation and medicinal. However, it is certainly addictive and If used regularly, you will become dependent on it. Depending on how much you need for pain relief, withdrawal can suck pretty bad. I prefer it to opiates because i can control it better, and it doesn't affect my ability to program nearly as much. Especially since I can stop using marijuana to get through a hard problem, where opiate pain management plans require a constant level. Dropping below that level requires more breakthroughs to get above the pain. This increases your tolerance, and if you do it enough, you end up having to have surgery without any pain management because your at the top level of prescribeable opiates for your baseline, and would require ICU care for fear of your respiratory system shutdown. Marijuana has no such issues, but it still isn't magic.
This should've been on reddit.
Sorry but I have to disagree on pretty much every single point. In part you simply make factual errors.

I think the page looks fairly stylish. Could improve, but pretty great already in choice of colors and layout. ("Dehydrated urine" for a simple gold color? Seriously? Stop watching watersports.)

Being 100% free software as in GNU, meaning being entirely free of uninspectable binary blobs, and working hard to make the system easily improvable and amendable by the user community, is a big deal. Deal with it. GNU aims for people for whom these are important criteria.

The features listed in the second point are based in concepts that are nontrivial to grok. There is no short way to explain them on an intro front page, but not mentioning them would be silly since they are what sets Guix apart from standard package managers (which ironically is what you request being listed). Maybe you should look up the meanings of those terms instead of straight out assuming they're marketing buzz. Transactional updates, and unprivileged/user-level package management are pretty big deals. Likewise, providing clean APIs in a high-level programming/scripting language is very much a big deal; see how easily a web front-end could be made for Guix.

Redirecting newcomers to Nix would just add an unnecessary layer of indirection. The name is clearly a homage to Nix, and also otherwise "everybody knows" that Guix is Guile+Nix, so claiming there's malicious intent in leaving out a mention of Nix would be just silly. And Guix is not a Guile wrapper around Nix; it has an entirely different package recipe format and database. You don't use Guix to work with a Nix system; rather the Guix system uses a low-level component taken from Nix. Casual users don't need to know anything about Nix.

Lastly, functional package management brings immense pragmatic benefits (source-binary correspondence, reliability of transactional updates, etc.), i.e. it's not simply a dogmatic application of FP concepts to package management. You'll note that Guix uses Scheme, not Haskell. I think most people interested in functional package management are so for the practical benefits, so I think you have a pretty wrong image of those folks.

All in all, please make sure you have a proper understanding of a topic before making such inflammatory remarks. It doesn't help anyone.
Square S-1
Shift.js: Swift to JavaScript Transpiler
> it only speculates that the increase in availability will increase the incidence of these actions.

1 - not sure there will be an increase in availability. I don't know if it's always the case, but where I live, any kid can find weed easily. Ironically, it may be more difficult for adults!

2 - My understanding is that kids in the netherlands (where cannabis can be legally bought) don't consume more cannabis that those from neighbor countries.
Was this article paid astroturfing for the Drone Defender?

It made some vague allusions to that product's market and then suggested that federal regulations would prevent the sale of it to local law enforcement, but I didn't see any real argument for why local law enforcement should be able to buy jammers other than some isolated incidents in prisons. There also wasn't any explanation for why the FCC and FAA have the rules about jamming. I suspect devices like the Drone Defender are banned for good reason.
Need to post email to get any information? No thanks.
Germany is not part of the TPP, but assuming it were:

- probably not as a blanket precondition to allow them to sell cars,

- probably yes during the course of a trial if their cars were measured to have too strong emissions.

Not a lawyer either.
All these QML/js stuff smells rather artificially put (into Qt) to me... I mean, why not have a functionality to define the scene (and not just a logic) in pure C++? I think one reason for QML/js is to (try) attract contemporary js/web devs.
TPP will ban rules that require source-code disclosure
>* happy to be out of the BS VC silicon valley groupthink crap.*

If you have a 6 man company with titles like "President and Founder" and "CEO", you're buying into the SV groupthink a little.

Outside of SV, in the world of small/medium business (for which I've consulted), I don't think I've ever heard the title "CEO". Meanwhile, I've gone to tech conferences and have seen sole-proprietors refer to themselves as the CEO.
Solid+Reasons+to+Implement+Team+Time+Tracking
JavaScript Is Eating the World
The OSC Science paper separates cognitive and social psychology papers and journals, and cognitive psychology papers replicate at about twice the rate of social psychology papers. But still only a bit more than half of the cognitive papers replicate, so I think there are still deeper issues.
America hopes to use TPP as a model for a similar deal with China, so America has insisted on a bunch of rules you'd only expect in a trade deal with a banana republic - like investor-state dispute settlement.

At present, "Chinese officials have learned to tackle multinational companies, often forcing them to form joint ventures with [Chinese companies] and transfer the latest technology in exchange for current and future business opportunities" [1] which is good for China but bad for America. America wants a treaty with China that will stop them doing that.

Personally I'd be surprised if China went for such a deal, regardless of what happens with TPP.

[1] https://hbr.org/2010/12/china-vs-the-world-whose-technology-...
er does anyone producing these not know the radiation patterns for a yaggi - held like a normal rifle you would have a nice high power lobe right through the operators brain.

CISCO all ready do some very tasty airnet kit that attacks rouge ap's and hosts.
Playing the devil's advocate here, but you shouldn't need access to a car's source code to measure its emissions. The test is broken, not the software.
Yes, exactly this. It's not rocket science; it's odd how much effort Slack put into implementing (and then reimplementing in a slightly less broken fashion) a clearly wrong solution.
1. on frontpage right now: https://news.ycombinator.com/item?id=10519031
One does not need a PhD in chemistry or botanics or horticulture, or genetics or anything else to know, for example:

* This cannabis was produced without the use of a potentially toxic pesticide.

* This cannabis has been treated with no other adulterant.

Even knowing very little about the specific properties of the cannabis one consumes, one can have a high degree of confidence that it will not cause harm if they have grown it themselves.
USA to spend 500M on offensive and deadly Cyber Weapons [pdf]
Redistribute most of the $5 billion dollars of psychology and behavioral-related NIH research funding to historically high ROI areas like infectious disease research.

http://report.nih.gov/categorical_spending.aspx
>Obviously it primarily means CLI applications. I think you're being unreasonably pedantic.

My point is that that style of conveying information is more propagandistic than it is truly informative. It is in the style of a typical startup in the valley run by Stanford whiz kids who are trying to impress their classmates as much anything else. Everyone who is already hip to hacker culture knows how to correctly interpret those kinds of statements, but everyone else is just left more confused.

Gnu-ish tools like Guile really have no place in the marketplace of "hipster in a Starbucks with a Macbook plastered with shiny decals" kinds of technologies, and to pretend otherwise is to do a disservice to humanity, IMO.

I just see this style of "informing" as an end of a kind of age of innocence, when seekers of deep knowledge about technology could go to the gnu.org domain, and be absolutely certain that they weren't being sold a bill of goods.
Having had surgery, and been prescribed mild opiates to deal with the pain, and being on them for a short enough time that I didn't get addicted, if I lived in a free country I would prefer to have a garden with some poppies and some marijuana (as well as hops and barley and grapes and apples…) and make my own medicine, but I'm a crazy DIY-type:-)

But I don't live in a free country, so I mayn't do that.
The problem is not with having public urls. The problem is with public urls that don't have enough random numbers or if these numbers aren't generated by a CSPRNG.
Opiates are currently the most commonly used medication in death by suicide in the UK. (Followed by tri-cyclin antidepressants, anti psychotics, combination opiates plus paracetamol, and then paracetamol alone).

They're also often the cause of accidental overdose.

If you do take opiate meds please keep them in a safe place; don't stock pile them; consider smaller more frequent prescriptions if you or someone you live with are vulnerable.
Just the raw statistics from github plus the direct link. Don't over-interpret it.

What you mean is there: https://github.com/flutter/flutter (99.1% Dart)
I think this video is appropriate here:

David Mitchell
https://www.youtube.com/watch?v=om7O0MFkmpw
>Showing source code to anybody (government or end user) does not make you loose your rights to that source code or the compiled application.

You lose control over your own property. That's enough. Similar to police officers entering your home without a warrant.
Watch Jetsons!
> No, opium is highly addictive

As you doubtless know, I didn't say it wasn't - I said it was less addictive that 'pharmaceutical grade' opioids.
That's a very interesting point, and a good idea! It does put the onus on us as developers to ensure we do a good job and get it right from the beginning, which can only be a good thing.

The plan for allowing a device to be free from defects for two years since date of purchase is good; since date of announcement is practically worthless, unless companies start announcing products and then waiting a year to release to shorten their support time?
U.S. Economy Added 271,000 Jobs in October; Unemployment Rate at 5.0%
No. Originally OSM was under a CC licence. In 2012, it was changed to the current ODbL licence. All the data from mappers who didn't agree had to be deleted. In order to map now, you have to agree to the "Contributor terms" which means the licence can be changed to any other "free and open" licence with a 2/3 vote of active mappers.
Ask HN: Freelance Contracts
I am going to start freelancing(in NJ,USA) on the side(initially websites) and was curious about contacts since that's something I know should be in place but don't want to get held up on it if it's not necessary to have a formal contact in place initially....

- When first starting off,is acceptable to use exchanged emails as a contract?

- At what point would you say it's necessary to switch to actual written contacts?

- Do you actually use written contacts of PDF?

- How do you go about the process of planning the specs with a client and updating the contract. With every new request after the initial contact, do you halt the development process until you receive back a revised contact?

If you have any templates that you wouldn't mind sharing that'd be greatly appreciated. (Email in profile)
Exactly, but there is some nuance on this point that doesn't get examined enough.
Ah more reading required. Thanks!
Yeah, let me know how you get on with a release build - we've had a few issues that went away with that on. How big is your app, ours seems fine with normal usage on a real device... Guess it does depend on what you are doing.
> Well, if our governments could see into the code. They could tell us.

They could but they never would.
Well yes, there's basically no financial knowledge in the general population. Basic stuff like time value of money is simply not known to most people. Then again, most people also don't have any savings apart from a house.

I would suppose any robo-advisor could tell you ordinary things as part of a customer education process.
Expounding further - what government agency has the time or money to actually sift through mountains of source code?

From a pure financial standpoint, there's no possible way that it isn't cheaper to just measure real emissions than attempt some kind of software analysis for every version of every vehicle on the market.

Furthermore, an agency inspecting source code has absolutely no way to tell whether or not that the source they've been given is actually what's running on a car.
I'd rather want a user agent biased towards me controlling how articles look, attributing the source, but a lot of bad decisions prevented that from being the natural way to use the web.

Back on topic: People often talk about flow charts when transitioning to software, so the notion is not new. It may be rediscovered for some, but that's why we post or talk about things, right? To test our thoughts? Soon somebody will tell me; hey, have you tried user agent XYZ, it does exactly what you describe.
> the OpenStreetMap Foundation ... can change the license.

Not exactly. The licence can only be changed to a "free and open licence" after a 2/3 vote of active mappers.

http://wiki.osmfoundation.org/wiki/License/Contributor_Terms
That doesn't seem unreasonable. How much do you trust arbitrary 3rd world country's transport department to keep your trade secrets really secret? Any answer other than "hardly" suggests you haven't spent much time in poorer countries...
Why would you want VW to make available its source code?
Step 2. ???
I believe money was also a constraining factor in the speed of construction of historical cathedrals.
I care so much less about the data model. Document or Relational: I can see different apps preferring one or the other.

Two things are interesting to me:

1. What's the consistency model? Is NoSQL really NoTxns? Whether you need transactions or not probably affects your decision more than tables vs docs. Similarly if you still want some partial functionality in the face of larger failures, maybe forgoing consistency is worth it. (Note that some NoSQL systems support strong consistency and some relational systems don't).

2. Is your query language as powerful as SQL? First, SQL is not a great language, but it's probably still better than whatever your NoSQL store is using, once you move beyond CRUD and very simple filtering. Declarative queries with an optimizer is the right choice for most applications. The expressiveness once you get to "group by", joins and subqueries is difficult to replicate in a programatic query language.

You may not like SQL. That's fair. But there's a reason it seemingly can't be kept down. See CQL, Impala, SparkSQL, F1/Spanner, Presto, etc... Couchbase has been the most recent "oops" with their N1QL introduction and near complete messaging reversal (on this issue).
Much of the cannabis available today has very high THC and low CBD concentrations - arguably, at least partly, as a result of prohibition.

If you can, try to find a strain that has close to a 1:1 THC:CBD ratio. The effects are quite different, and you will experience much less of a 'head high'.
>No matter what model of stove or pot or starting temperature you have, water boils at 100C

And? Does water boil instantly, or are there factors that can affect how long it takes to get water to boil? Things like, say, your stove, pot and starting water temperature.

>You understand that it is physically impossible to have liquid water above 100C without applying pressure, yes?

Wow, thanks for the physics lesson.

I was referring to the OP stating "the process" takes X minutes from start to finish. Well, different stoves are going to heat water at different rates. Colder water from the tap will take longer to heat that warmer water from the tap. When I'm the one cooking my eggs, these things matter. Time-from-boil isn't relevant to me when I'm getting ready in the morning.

Learn to tame your nerd-rage and give people the benefit of the doubt that they aren't as stupid as you think.
I would think it is more to prevent the theft of sensible source-code (cg drivers, etc.) that would "magically" end up on the desk of local competitors...

Imagine that Google launches a self driving car in Japan, but the Japanese government ask access to its source code... How many hours before Toyota gets it and start "auditing" it?
This shows how the TPP could've been something great.

Sure, TPP uses the power of governments to impose interest of certain corporations.

In the other hand, TPP gradually weakens national governments by limiting their power over the individual.

Had it been restricted to providing economic cooperation and freedom between countries, it would have been amazing.
UUIDs are (usually) generated in a systematic fashion, so large parts of them are often possible to determine ahead of time.