skysight-inc/HackerNews huggingface dataset:
Depends. Throwing outliers out without thinking is obviously wrong. In many instances outliers can be just invalid measurements and you should ignore them.
I didn't flag this story. I didn't see it either. I have flagged similar stories after looking at the comment thread and seeing the behaviors that are exhibited in the comment thread of this story.

Thinking about this particular story, it's not really about climate change. It's not new research findings. There's no science at all. It's a story about the politics of climate change: even if Exxon is successfully blamed by an elected prosecutor, there won't be less CO2 in the atmosphere or more. Personally, that makes it less surprising that it elicited the behaviors in the comment thread that it did.
I closed the page as soon as I read the title.
Why anything mildly succesful (or largely, as slack) in this field must be immediately labeled as an email killer?
Why are we trying so hard to kill email!? Nothing like slack, which is extremely useful and productive, can substitute the naturally delayed nature of email. It's freeing, it's free of expectations of a quick answer, but it can be fast and paced nonetheless. Email is still wonderful, and open, and available everywhere. It's the best piece of technology we ever invented in the field of personal communication. And it's damn resilient.

Slack is great and somehow revolutionary. It doesn't need to be downplayed by being defined as the n-th email killer that wasn't.
Swallowing knives is bad for you
The concept you list are orthogonal to most sources of kernel vulnerabilities and most of grsecurity's defenses: C-related exploitable memory safety bugs.
grsecurity's C exploitation mitigation tech is just a band-aid for these.

Of course a kind of Amdahl's law applies to these: eliminate memory safety related vulnerabilities, capabilities and such become important
in eliminating the rest of the bug classes...
Alpine Linux ships it, and while they're not a major distro, I get the impression they're not "insignificant".
Let's not forget that while the official excuse for the closed market was to (somehow) foster the country's industry, the real reason was that Brazil was a dictatorship and the dictator was giving control of a large booming industry to some of his best friends and holding the country hostage.

It's 100% corruption. There wasn't even a law saying what you could or could not import, you would just get your imports confiscated if you happened not to be in the group of friends of the military.
> I would like to point out that our patent system is basically something like this: We as a society will protect your intellectual property rights for your machine only if you show us your blueprints.

Sure but, right or wrong, the general consensus of developed countries is that software is protected even if it is closed source. (That is, they have decided that patent protection requires disclosure but copyright protection does not.) A few other countries may disagree, but the whole point of TPP is to harmonize disagreements because (it is claimed) the frictions they introduce are worse than the micro-optimizations that individual states make.

Incidentally, in practice these sorts of disclosure agreements are used by states like China for protectionist reasons, not as part of some open-source ideal.
I wouldn't agree with the statement. The Android app store is filled with apps that steal user data and malicious apps. It only get cleaned up when somebody does some research and tracks things down and it ends up in the press.

Or maybe that it's just cost effective to have others do the work for you?
> Because a dedicated library could change its API in version 2.0, and at the same time fix important security flaws.

The correct thing to do is back-port fixes to the 1.x branch, or come up with an alternative fix if the 1.x/2.x transition changes too much (in the latter case, the 1.x and 2.x versions would essentially be different libraries which just-so-happen to share the same name). Anyone can (attempt to) do this patch, including the library authors, the browser authors (who may be the same people), or any other users of the library.

If upstream don't accept such patches, and repeatedly indulge in such uncooperative behaviour, there is always the option to fork (and, in the process, perhaps strip out the parts which the browser doesn't need to make maintenance easier).

As an aside, the situation you describe sounds a lot like the Firefox/Iceweasel drama in Debian!
Consize and interesting.
My understanding based on anecdotal comments over the years is that people who overuse the flag link sometimes see it disappear for a while.
The Enterprise Public Cloud Wars Are Over. Let’s Talk About What’s Next
> The other stuff (bold, pictures) requires host support (more than regular powershell.exe provides).

PoshConsole made a nice stab at it. Sadly it is no longer developed, I think.

Simple unicode characters (the smilies etc as used in OP) does work in powershell ISE.

[1] https://poshconsole.codeplex.com/
>Most of the security issues we've had in the kernel have been just completely stupid bugs...

Wouldn't that be an argument to be more stringent in reviewing and auditing the kernel code? I don't know to which extend they already do audits, but if you find a bug of a certain type, maybe consider combing the tree for other instances of that type of bug. I believe that's the approach OpenBSD has taken.
>A fail-safe or fail-secure device is one that, in the event of a specific type of failure, responds in a way that will cause no harm,

Key statement "Specific type of failure". In theory any particular piece of large software has tens of thousands of fail safes in it all ready. For example, when you send an oversized buffer to an application with input checking it does not explode in a ball of flame (unlike programs from the '90s) and warns you about the problem. But that is where the analogies break down between mechanical items and software, software is far more connected internally than almost all other machines are.
Diesel pollution kills hundreds of thousands of people each year.
I strongly doubt that that had anything to do with it. Submitting more interesting content is typically encouraged.
As time goes on though, as we can already see, specific components that make up the plant will be taken out and used on their own. This is already happening with THC and CBD with the plant being made into oils and concentrates. If cannabis becomes legal, I'm sure pharmaceutical companies will continue this trend in an aim to find the purest and most effective way to administer the drug, just like opioids today.
Show HN: A community curated RSS feed reader platform
Also a very nice engineering detail that makes this building unique is the usage of multiple paradigms.

This is in fact the reason why it is used as a cover of CTM (in many ways an awesome SICP sequel):

http://ecx.images-amazon.com/images/I/51JGRqYyy+L.jpg
The signal wouldn't have to be very strong, it should be relatively harmless for the operator. (Most rc rf transmitters send with <<1W PEP and a low-gain antenna.).

Also, at multiple GHz (most rc rf links used today are 2.4 GHz (no, I don't mean WLAN)), the waves don't penetrate the skin very well.

Also, Yagi antennas have (not perfectly, of course, but approximately) unidirectional beam patters; that's what the reflector elements at the end are for. The back lobe isn't very strong.

Also, the exposure would be for a very short amount of time.

Many radar operators are exposed to much, much stronger radiation on a continuous basis. Though admittedly, they do get cancer.
I had big hopes for today's work, but it involves some UI stuff that would be much easier if the devtools hadn't been almost entirely broken since September.

https://github.com/facebook/react-devtools/issues/229

I'm not sure how to quantify the bigness of our app. It's kind of Twitter-like in structure: a list view of cards containing images and texts and which on click transition to an expanded card view.
Robots may shatter the global economic order within a decade
But you can imagine an internal AI that can tell whether it's being watched by the government with arbitrarily sophisticated means. In fact, that's just an extreme example of how VW broke rules. It wasn't, as I think you might be imagining, a case where the emission measuring device was lazy and just took the car's word for it. Rather, the car's software determined that it was being tested (based, I think, on various cues from how it was being driven), and lowers emissions in those situations.
Thanks for the comment and advice.

Part of me wants to focus on the things I believe will improve processes and make life easier for everyone. But I feel like in a rut so I find it is difficult to push myself.
A quick tour of JSON libraries in Scala
> Strictly speaking, he said "Kdbus ist nich tot"

Is there actually a subtle translation difference that I'm missing, or is this nitpicking on the order of "Ceasar didn't say 'you, too, Brutus?', the English language didn't even exist at the time!"?
There's a neat upside down model [0] somewhere in the exhibitions of the Sagrada that shows how Gaudi figured out the shape of the strange organic columns to perfectly distribute the weight: he made an upside down model where the columns are represented by strings, and the weight of the cathedral by, well, weights. When upside down, the compression pressure in the columns becomes the tension in the strings. It's quite a brilliant way to 'compute' the statics of the cathedral with a physical model like that.

[0]: https://www.flickr.com/photos/stuartmadeley/10340979205
I first visited Sagrada Familia 5 years ago and remembered it to be one of the most amazing structures I had ever seen. But as the years passed, I wondered if my memory was fooling me because Barcelona is a beautiful city and you can get caught up in its ambiance.

Well, I got to visit it again last month, and it was just as amazing, if not more so. The inside is even more impressive than the outside.
But still only a bit more than half of the cognitive papers replicate, so I think there are still deeper issues.

That puts them in the general level of quality for all bio-medical research, so, yeah, deeper issues indeed, but I find it fascinating that this sub-group is so good.
Gene editing saves girl dying from leukaemia in world first
Has Linus commented on ESRs claims about honeypots. I want to say 'ESR is a nutter' as I always do when I see his name. But I kinda want to see Linus to say it too.
Data analytics tools: It's an issue of integration
Three Ways Video Ads Can Boost Your App Monetization Strategy
You beat me to it...
HN should be able to discuss climate change. When I see a climate change thread I don't flag it until the comments have collapsed into bad natured bickering. They almost always do, so I almost always end up flagging those submissions.

eg for the thread in question: https://news.ycombinator.com/item?id=10516225

I suspect that post is suggesting the world would be better if the HN member littletimmy was dead. (Although the parent post has been deleted, so maybe I'm wrong. I apologise if I am). That's clearly not acceptable, and stuff like that attracts flags for the comment and the submission.
and how much of the system is protected by trusted bsd by default: none of it

how many people ever bother to write and deploy a trustedbsd policy: (to first order approximation) nobody

Defaults matter, a feature matrix checkbox is simply deceptive because the fact something isn't on (and configured) by default often means its an insane amount to work to try to enable it and/or thing are unfixably broken when you do (from a user point of view)

unfortunately both these things are true of trustedBSD
Uber drivers consider legal action
https://news.ycombinator.com/item?id=10518487
This seems to me to be a clear cut case of poor incentives in the academic research sector.

No graduate student is incentivized to re perform existing experiments to verify them, no they find much more success in creating a unique experiment which tests a previously untested hypothesis.

This is modern academic science. If you aren't doing something newsworthy, you're not getting any funding.
Seems like a 12 gauge with birdshot would do a pretty decent job of taking down any drone I've ever seen.

Seems like that might be a little cheaper than developing ECM to target drones. Although if it is really just a pork-barrel, then a $200 shotgun with $25 worth of shells is much less efficient than a multi-thousand dollar radar jammer rifle.
A Websocket Validator for Server-Side Origin Header Check(#websoc #sec)
This should indeed inform potential users of additional security risks of using Slack, especially for communication of corporate confidential information. That said, this isn't a realistic threat to my own social use of Slack.
>You also cannot infer that the majority of people disagree with them.

The majority of people voted for non-Tory politicians.

>It sounds like you're proposing a system where we're perpetually under a coalition government to ensure that enough MPs to represent 50% raw votes are involved. No thanks.

I'm not at all sympathetic to your argument. Especially when the Tories said that a Labour-Lib Dem coalition in 2010 would have been illegitimate since it didn't have over 50% of the popular vote. What's so bad about coalition government anyway?

In 2015 the Tories got 36.8% of the vote and ended up with 330 seats (50.8%). Labour got 30.5% of the vote and got 232 seats (35.7%). The SNP got 4.7% of votes for 8.6% of seats. UKIP got 12.7% of votes for 1 seat. The Lib Dems got 7.9% of votes and 1.2% of seats. The Greens 3.8% of votes for 1 seat.

So you have a situation where 24.4% of the voters are represented by only 10 seats, which is only 1.5% of the seats! That kind of democratic deficit isn't sustainable.
Why your manager loves technical debt (and what to do about it)
Yes, it's probably inevitable.

I can't find the link now, but I recently read a paper from Israel about how the effects of CBD acted in a bell curve when administered alone, but were much more linear when taken as part of a whole plant.

There are many cannabinoids, and they do often seem to work best when taken together.
The text draws a distinction between mass market software and infrastructure.

I haven't studied it closely to see how narrow those meanings are, but it seems like emissions control software might fall under infrastructure (I also guess that mass market is talking more about shrink wrap software than embedded software, you don't use an ECU in the same way that you use a word processor).
Golden, especially with the .stl discussion in this thread.
You could, and still are, able to download html/javascript/css to the phone, and then load those files in a web view.
Toyota to invest $1B in new Palo Alto artificial intelligence lab
Whoa, never heard of Artist mode. This is awesome! Thanks :)
Because I'm curious: What honeypots?
> Responding to a request for comment for this article, a media relations representative for Bank of America expressed concern and assured me the appropriate IT employees would be informed of the issue.

That made me chuckle.
A friend of mine is a social psychology researcher, who's published work destroying the statistics in other papers. He says this claim of unreliability is a lot more dubious than the media portrays.

In many cases, they say a finding was not reproduced simply because the new study didn't quite meet the cutoff for "significance." However, if you do a meta-analysis of both studies, you find that the likelihood of the effect being real is higher, rather than lower.

In other cases, the replications were done poorly. The first step of many studies is calibration. You do tests to find out what sort of things your subjects are familiar with, and calibrate questions accordingly. A common mistake in the replications was to skip the calibration step, and simply reuse the questions on subjects with different backgrounds.
I use it everyday, super helpful to keep up with what is happening in the financial world and what that means
It does not take 8.5 seconds on my machine, the author must have a slow machine (no SSD?). I just tested and I can launch a full qubes VM in about 3.5 seconds. This is for a pretty-much-default qubes fedora template.

Disposable VMs are much faster, because they are essentially hibernated, and the hibernation image is stored in RAM. So there I can boot and launch firefox in about 2 seconds (really doesn't feel any slower than launching firefox on any other system).

Qubes is trying to provide a pretty bog-standard linux machine in the VMs, so as to be the most useful. They do have their own kernel, but I haven't looked at how stripped down it is.
Maybe someone needed time to brute force all those tasty files hanging around ;)
Panels And Panelsets: Common accessible and responsive patterns
Might be nice if this code was packaged up as a library.
Gentoo-Hardened
Same could be said for opium.
Dup, most relevant previous discussion:

https://news.ycombinator.com/item?id=10341334
>You do realize Hacker News itself is a Lisp application on the web?

...and now we finally arrive at the fundamental quarrel that I have with using the terms "web" and "application", such that, when linked, can lead to a state of confusion about the nature of the technologies involved.

In the generic sense, there is application vs theory, so that everything that has to do with a real computer program is always going to be an "application", and therefore, any arbitrary program that is used as a backend for a website, can indeed be called something of an "application for the web".

But this is not what normal human beings are thinking about when they use the word "application" in conjunction with their own computing devices. They are thinking about whatever is running on their machine that they can sense, and can thus physically interact with.

In this way, the correct dichotomy is application vs service. So, the Lisp backend for HN is just a service for the user facing application (the web browser).

All of this goes hand-in-hand with my larger point about styles of informing that are not quite as informative as they can possibly be.
Demystifying product interviews
Radio SETI Observations of the Anomalous Star KIC 8462852
> probably not entirely legal

Everything can be made either legal or illegal.
What do you mean? Yes, you need to submit your e-mail so you can receive the daily e-mail...

Feedback can be sent to hello@finimze.com
I've shared an side project of mine (simplestoreapp.com)[http://simplestoreapp.com] on here and it has gotten me off to a really good start. Most importantly getting feedback from other users on how to make it better.

I think sideproject is right in stating that "relevance" to the audience where you are sharing is important. Best of luck!
You want repeatable conditions for tests so that you can compare results between models, and against the norms.

When you have repeatable conditions - software in the tested product can detec that and act differently in these conditions.

That's exactly what happened in VW case.

It's nontrivial to fix the test so that it is still repeatable and hard to fool by company determined to fool it.
If you wanna try all that without installing, you can have a look at http://sandstorm.io
Basically they're saying: "To succeed you need to have an awesome idea that hasn't been done before. You need a great team and build a great product your users will love".

Wow, thanks for the advice, why didn't I think of that.
I've been using SendOwl for a few years now to sell music education eBooks and albums directly through my website.

I can't recommend it highly enough.

Here are a few things I like:

- It works 100% reliably, has never let me down

- The checkout process is easy and neat from the customer's perspective

- Supports PayPal and Stripe which is the ideal imho

- Integrates with all popular email providers so you can do product-specific followup sequences with bonus gifts, etc. after purchase

- Provides simple support for running an affiliate program

- Support it absolutely superb: personal, swift and effective

- They handled the EU VAT mess better than anyone else I saw

- Monthly fees are very reasonable, I think I pay just $20-30/month

- It's easy to issue refunds and/or re-issue download link emails if you need to, so customer support can be handled quickly for those things

- You can create product bundles to support multiple products or discounted versions of products. After trying e-junkie and Clickbank before SendOwl, I can't tell you how much easier this feature alone made my life!

- You can do upsells/cross-sells during (or after) checkout

- They've been continually improving and extending the features offered in substantial ways - but without making a total mess of things.

- The reporting/analytics is simple but effective.

- In integrates effortlessly with e-commerce in Google Analytics so your sales (including dollar amounts) just show up in GA automatically.

Okay, that turned out to be more than a few things. I love SendOwl.
Well, or Fred Brooks.
"when some plants (like opium!) produce the same effects is disingenuous."

I'm pretty sure poppy plants didn't evolve to produce massive amounts of Tylenol in order purposely poison people using the plant outside the religious beliefs of the ruling class.
8 Reasons Young at Heart Entrepreneurs Lead the Way
What in the frack are they thinking?
I would think jamming signals on anything flying is a bit on the dangerous side. Yeah some commercial drones will gently land but there's no guarantee. I'd also think it would not take the criminals they are trying to stop long to realize it and find ways around it. Such as preprogramming flight paths in and allowing them to fly without any need to have radio communication.
Actually it does mention that briefly in "What are the origins of Flutter?"
Ask HN: What intranet to keep a directory, wiki & files for a growing startup?
Our team is growing (heading towards the 30+ headcount) and I am trying to find the right tool for an intranet, as we are opening new offices around the world.

What I want is simply: A directory of people to know who does what, as well as a wiki and simple project management.

Asana and trello are in use, but they don't do the whole wiki/directory part, and we use insightly for our CRM and heavily Google drive/dropbox, which would be nice to integrate. I've poked around Jira, Podio & co, but not convinced yet.

What do you use?

Thanks!
This might be good news for open source: No competent government will use software with classified information if it can't audit the code.
> "Assuming completely random mating"

I'm not sure this is an entirely sound hypothesis given the observable state of this country over basically its entire history.
Hey everyone,

Just a bit about why I create this service.

Basically, I created Finimize so we, the millennials, can finally start understanding finance. Too many hours are spent forcing ourselves to read the Wall Street Journal or listening to bankers -- and we don't really understand what they're telling us and, in the case of bankers, if it is actually true. But it's important that we at least have a basic understanding of what's going on in finance, so we can manage our savings (especially in a world of basically zero interest rates on saving accounts) and somewhat understand what all these up-and-coming FinTech startups actually do (from robo advisers to lending providers).

So we built Finimize to give you a tool to de-mystify this complex world of finance. We want your finances to suit you, not the suits ;)

I would love to hear your feedback on what we're doing! You can either post it here or e-mail me at hello@finimize.com

Thanks,
Max
http://lmgtfy.com/?q=honeypots#

In computer terminology, a honeypot is a computer security mechanism set to detect, deflect, or, in some manner, counteract attempts at unauthorized use of information systems.