skysight-inc/HackerNews huggingface dataset:
A browser is not a decent platform for anything.
If anybody is interested in working on a k8s based data science platform, drop me a line tristan@sense.io.
Calculating context on mobile is a huge win for content providers, who can use the context to create deep links into other apps.

Example: I'm reading an article about James Bond, and ideally the phone can calculate that there's a new Bond movie, and I'm near a theater, and I'm free on Thursday night, and then create a link to buy tickets.
You beat me to it, haha. I was going to make the point that the vast majority of bugs found don't do anything significant for a hacker. A program crash or corruption at worst. It wouldn't surprise me if NSA just discloses the ones that hurt availability while weaponizing the few hitting confidentiality or integrity.
How about we learn to deal with the fact that they're not storing data that is yours in the sense of ownership, but only in the sense that it's about you? They're not storing data for no reason; They are storing data their customers have provided for the purposes of contacting you. They are storing data about you for the people who, like it or not, you shared your data with.

The nasty 90s database-dump sharing is over; Companies hoard this data and consider it their private treasure, not to mention the nasty and ill-considered privacy laws that have already sprung up around sharing it. Facebook is not selling your info to marketers; They are selling your eyeballs to marketers if you use the service, and using your data to better target it. For all the egregious offenses that Facebook is guilty of, this is not an offense.

I have the right to a little black book. I have a right to a diary that calls you names. I have a right to free speech, and sometimes your name is on my lips.
James Clapper's congressional perjury will probably make the history books as an example of modern corruption. For a crime committed against the very core of American democracy, the press gave him a pass and the president gave him a promotion.

Maybe he blackmailed everyone using NSA data...

http://www.hasjamesclapperbeenindictedyet.com/
The idea of a good language evolves over time, and varies among people. Look at how many languages transpile to JavaScript today. If you ask the users of those languages, they'll tell that their language is the "better language" you're looking for.
The Breakfast Club.

https://en.wikipedia.org/wiki/The_Breakfast_Club
Already posted twice today, first one here:

https://news.ycombinator.com/item?id=10533619
MP3 files, seriously? A lossy audio encoder will remove much of a static noise floor (and sacrifice some of the signal in the process). That's the point.
I think I'd much rather use something like Midnight Commander. You can move using arrow keys (right arrow to cd to a dir, left to cd back, up and down to select file/dir), as well as use the traditional 'cd' command, as well as move through history using M-y and M-u, as well as incremental search, as well as using bookmarks/directory hotlist.

Plus, you don't have to clutter your bash history with loads of 'i' commands (I know about HISTCONTROL=ignorespace and HISTIGNORE, but still).
The traditional pure mathematical of looking at it is that vectors are members of a vector space. Matrices are linear maps, and matrix multiplication is composition of linear maps.

So what algebraic concept do tensors correspond to?
"Bill Thompson, a psychologist at Macquarie University in Australia who specializes in music perception and cognition (and whom I once served as a graduate assistant at York University in Toronto), suggests that we may have lacked a mental template, or schema, for categorizing these rhythms, and were therefore unable to perceive them clearly"

Reminds me of the research into not perceiving colors for which we have no word.
The Kaleidoscope Craze in Victorian England
Agreed. Theano has trouble dealing efficiently with very deeply nested graphs.
It's good news to me. The NSA's mission means they're going to have to get in somehow. FBI, too. Bulk collection and subversion have huge issues. Targeted collection with 0-days in endpoints that we know are insecure is much closer to Constitution than most of what they do. If people want that to go away, they could always apply methods for building secure systems from ground up. I've posted plenty here and elsewhere about high assurance security along with tons of Comp Sci and case studies existing.

If not, they've chosen to accept that risk from NSA and others hunting 0-days. Most choose that. Most platforms have tons of risk and attack surface. So, I'm all for them collecting 0-days for focused attacks and relying on it rather than pushing subversion or L.I. harder.

Anyone worrying about this should be focusing on the organizations creating 0-days with known-insecure development practices rather than those exploiting them. They're the problem and the demand side (users/customers) that doesn't give a shit. Excerpt from a counterpoint to Bruce Schneier on why users/customers, not manufacturers, were the problem in terms of security of our devices and services:

"Why does this problem (insecure everything) exist? Because manufacturers don't focus on building secure systems. Why don't they build secure systems? BECAUSE USERS DON'T BUY THEM!

Most users want the risk management paradigm where they buy insecure systems that are fast, pretty and cheap, then occasionally deal with a data loss or system fix. The segment of people willing to pay significantly more for quality is always very small and there are vendors that target that market (e.g. TIS, GD, Boeing and Integrity Global Security come to mind).

So, if users demand the opposite of security, aren't capitalist system producers supposed to give them what they want? It's basic economics Bruce. They do what's good for the bottom line. The only time they started building secure PC's en masse was when the government mandated them. Some corporations, part of the quality segment, even ordered them to protect I.P. at incubation firms and reduce insider risks at banks. When the government killed that & demand went low again, they all started producing insecure systems again. So, if user demand is required and they don't demand it, who is at fault again? The user. They always were and always will be.

On the bright side, those same users are the reason I can send photo's to friends on a thin, beautiful smartphone. They also gave us short-lived 1TB hard disks whose low cost made the short-lived part tolerable. They are also probably why I have a full-featured, fast, cheap wireless router at the home. So, at least some good comes from the users choices of demand. But, they definitely don't accept the tradeoffs of real security, they don't demand it, it doesn't pay to produce it, & that's why it's their fault. "
At Last, Jetpacks Done Right
To be fair to EVE players:

* They likely bought virtual currency (which you can do legit by the way).

* They likely bought (or built!) the ship in question from players, using in game currency, who had made it (or the components) in game, hence it isn't pay to win.

* The ship already existed and was available for comparison to other ships and review.

* The ship has resale value at the price it was purchased (assuming you don't get blown up without insurance).

* Or they purchased (real money only) skins for ships that are already very popular and with known stats.
Five rules for game development conferences
Seth, the wasm "Text Format" doc at [1] says one of its purposes is "Presentation in browser development tools when source maps aren't present (which is necessarily the case with the Minimum Viable Product (MVP))" and that "Debuggers and profilers will present binary code using this textual format."

However, bugs like [2] suggest to me that the Chrome and Firefox teams do not place an especially high priority on readability and debuggability with source maps in plain old JavaScript. Basically, it's impossible to use Chrome Devtools to see original variable names from the source file (e.g. 'jquery.js') instead of the minified file (e.g. 'jquery.min.js') mapped by the source-map file. This essentially makes source maps useless for debugging complex code and has been a known issue for almost two years.

The most recent comment in that ticket notes work is blocked until a new version of the sourcemap spec is shipped, but the linked resources indicate there hasn't been any public activity on them in three weeks with the Sterland proposal [3] and three months with the Fitzgerald proposal [4].

If keeping the web open source is indeed a priority of Google and Mozilla, then why haven't more resources been allocated to develop those specifications?

In brief, the lack of urgency for bugs like [2] suggests to me that Google and Mozilla don't take "The JavaScript Trip" described by Stallman [5] seriously. I fear that wasm could make it much worse.

-

1. https://github.com/WebAssembly/design/blob/master/TextFormat...

2. https://code.google.com/p/chromium/issues/detail?id=327092

3. https://gist.github.com/asterland/edf028ed7947c8c258d1

4. https://github.com/fitzgen/source-map-rfc/blob/scopes-and-bi...

5. http://www.gnu.org/philosophy/javascript-trap.en.html
> A federal judge on Monday partly blocked the National Security Agency’s program that systematically collects Americans’ domestic phone records in bulk just weeks before the agency was scheduled to shut it down and replace it.
The graphics on that page are adorably cheesy.

I haven't heard of stimudents before, the principle seems to be the same as the tepe interdental brushes which are more popular here in europe (http://www.tepe.com/products/interdental-brushes/how-to-use/)
Good layperson overview:

https://en.wikipedia.org/wiki/Remineralisation_of_teeth
Reviewers are generally not reimbursed but full time editors probably are, there are also day-to-day operation and administration duties to be carried out by salaried workers. Depending on the type of journal they will also have to maintain a brick-and -mortar office, print physical copies and post to subscribers, etc. Suffice to say there is a substantial overhead.

Previously submission by the researcher and subsequent publicaiton is effectively free; the real cost is paid by subscribers such as university libraries as well as commercial entities.

Under the open-access model the researcher pays the publisher directly for each submission and this can vary from hundreds to thousands of dollars. PLoS one currently charges US$1495 for each publication.

https://www.plos.org/publications/publication-fees/

The exact burden depends on the subject, STEM may be better funded, but this is still not a sum that one can just shrug off. Often grant money also come with strict stipulations on exactly what expenses can be paid with them - publication fee is usually not provided.
Bath Towel Monkey Island
Wow, someone found this in my github repos. Reformatting it to make it readable directly without HTML has been on my TODO list for 3 years, as indicated by the README.

https://github.com/thwarted/whatsthepassword
>The fact that to date nobody has been held responsible lends a great deal of credibility to your conspiracy theory.

Do you mind explaining why you think that? I do not think it makes my theory any more credible.

My concern is that checks and balances rely on oversight. Oversight relies on motivation. There doesn't seem to be any motivation to provide oversight of the NSA.

Anyone in a position to provide oversight can easily be bribed. Want to snoop on your SO or a love interest? Bam. They now have a reason to "glance over" the surveillance and use it for their own personal gain. There is zero motivation other than "integrity" for ratting on the NSA while the individual stands to benefit by keeping their trap shut.

Also because there are always the apologetic pro-authoritarian government shills out there: Yes. I firmly believe that all levels and positions of government can be corrupted or bribed. That doesn't necessarily mean that they are all corrupt. But it cannot be discounted as a possibility.
It's clear that it's city-owned at least to the intersection of the trail and the road that continues on towards the radio station (i.e. the westernmost sharp turn). At some point, the road "disappears" behind the yellow parcel, but that's much further down the road.

So, if you can see the road, especially if it's in the city limits (red dotted line), it's public land.
Clapper didn't get punished because he did his job. Lying and spying is what he's been paid and ordered to do. If he didn't commit perjury my guess is that he would have been disappeared. I'm not arguing for him or the system but I'm not at all shocked that it was swept under the rug.
Manhattan Associates Extends Relationship with IBM into the Cloud
In the particular context given, it seems more like an attempt to say "I will not submit to sealioning under the flag of reasoned debate".

Mind you, that's not saying that the perception of sealioning is necessarily correct, but it certainly reads to me like the perception is there.
https://news.ycombinator.com/item?id=10533858
And you're cool with them doing it to you?
Honestly, Gopher is clean and pleasant.
What a beautiful, understated piece of writing. This particular problem seems to come up a lot when thinking about how to use new Python classes (defaultdict, Counter) and affordances (list comprehensions, +=). It's nice to see it captured in timeline format.
sorry for the late reply, but I never got an email from a recruiter, just a link to a coding challenge
I'm pretty sure The Phantom Tollbooth, Alice in Wonderland, and Donald Duck in Mathmagic Land have merged in my brain into one school animated film blob.

Which one had "Inchworm" in it?

P.S. It's a billiards table.

You got one, two, three, four, five, six pockets in a table.
Pockets that mark the diff'rence
Between a gentlemen and a bum
With a capital "B,"
And that rhymes with "P" and that stands for pool!
IT hardware? Specifically what? notebooks or multi-million dollar servers? Hardware with the associated systems engineering gets complex very fast. Anyway, onto your question ...

If you are attracted to selling complex solutions then you are most likely looking to the enterprise software space. If you have any enterprise hardware sales experience then that will help get interviews. The sales cycles are long, 3 months (rare) to 3 years (not that uncommon).

Marketing automation? Are you thinking of SalesForce, Siebel or other big ticket CRM?
These are often sold by "consulting firms" who add on their consulting, training, support services.

Quite seriously you would be better off lurking the various job boards for sales positions. That way you will get a better idea of where the action is and in what areas.
Why limit to millenials? This seems like it could be tailored to be a good solution for the poor or fixed-income elderly as well.
Implressed: "Kubernetese running thousand node clusters, and running over a million QPS against a single cluster"!
US has the most to lose from having the NSA hoard vulnerabilities in popular software that itself uses. So by that logic, the NSA is actually harming national security.

> Most users want the risk management paradigm where they buy insecure systems that are fast, pretty and cheap, then occasionally deal with a data loss or system fix

I disagree. I think most people don't know what the hell they want or need in terms on security, but they do want to be "safe". Nobody makes the choice "should I buy this phone for $600 or this one for $300 that is 10x less secure?" - People assume all of these devices have relatively the same security, and then they buy on price.

It's the job of system builders (and I think the government, too) to ensure people get a strong standard of security with their devices. Just like it's the government's job to ensure people don't get food poisoning from buying a random item from a store. You can't expect most people to actually know what they're buying in terms of food - but you expect them to know in terms of device security?

People think the $5 food item has the "same relative safety" as the $50 food item from the same category. Nobody expects to die from the $5 one, just like nobody expects to get hacked for buying a $100 unlocked phone at one of the four major (and let's say trusted) carriers. And by nobody I of course mean "normal people".
Makes me glad I am not a sociologist!

The same basic problem occurs in all fields in that many reviewers and editors are basically idiots. When you get a rejection you look through the reviewers comments for the useful suggestions (mostly these are about spelling or grammar, but occasionally you will get a real gem) and send it out again. Whatever you do do not change the paper to suit the reviewers or editor. Just shoot it out again as quickly as possible.
I think that's pretty much correct.

A lot of the problems here are simply about the inherent tensions with intelligence gathering. The default statements from such agencies pretty much has to be, "if you knew what I new, you'd be very afraid". And the default reply, now that "we" know they are not trustworthy, has to be, "bullshit".

Short of the NSA actually behaving as if civilian control over their operations was a thing, and doing so for a generation, I don't see how they regain the trust of folks they are ostensibly there to protect.

Which is a bit of a problem, assuming they care about such things.
Interesting that this post received no comments. Self-fulfilling prophecy. Sad really.
High expectations, no grasp of statistics, and a total misunderstanding of just how much of a role luck plays in everyone's outcome.

That was back when the first dot-com bubble was rapidly inflating, and it seemed that all you had to do was put in a few years at Netscape, Sun or SGI, and then go found a startup, and you'd be a guaranteed success. People really believed this!

In reality, the job environment consisted of those few known companies plus this big spread of unknowns (much like today, actually, except back then they were actually hiring). Nobody knew which ones would go out of business, which ones would succeed, and which ones would mean Maseratis for their early employees. I mean nobody had a clue. If you graduated in Comp sci or Comp eng or EE, you basically just rolled the dice and picked one, and that ended up being the difference between doing astoundingly well and just putzing along after 20 years.
"Choose" parents with a surname starting with A then.
Helm – package manager for Kubernetes
> web applications are inherently second-class citizens on every platform.

Yes. By design. If a webpage can impersonate a local app, you have a serious security problem.

> They make it hard for users to load/save local data

There are good reasons for a lot of that, from denial-of-service protections, limiting stealth cookies, etc.

> They don’t interoperate with other applications on the system.

That's a feature.

> They flagrantly violate UI design conventions on every platform.

The user agent can render the page however it wants. This is a feature.

> They can’t access most local hardware devices.

Are you trying to introduce even more security problems?

> They are difficult or impossible to build proper cryptographic primitives on top of.

That's not the place you should be implementing crypo.

> Accidentally pressing the back button can destroy hours of user work.

Ok, that one would be nicer to fix, but that's a problem for the browser, and shouldn't impact the page at all.

--

If you want to develop software that uses more than the web can provide, you should choose a platform that actually provides those features. There is a trade-off, of course, but making that kind of decision is a an important part of software engineering.

While many people have been ignoring some or all of the security aspects of programming, it is important to remember that anything connected (even indirectly) to a network is under attack, so security must be considered first.
Ask HN: What hours in the day are you most productive?
I am most productive from 9pm - 1am... Just wondering when people get the most work done.
Yeah. If I used insecure crap, I've already decided that it will be destroyed by opponents. If I want something safe, I use very secure methods to protect it. That field is called high assurance or high robustness security. Quite a few things in it stopped NSA pentesters. Very few of us left in that field but one can learn from what's published as I did. Build your security strong, obfuscated, and with tamper detection to give them real headaches. Otherwise, you're enabling your enemy by your choice of systems, software, and methods. It's your own fault given what you know of the world you live in.

Examples of high assurance thinking another comment:

https://news.ycombinator.com/item?id=10529676

Have fun with that rabbit hole. :)
The problem is that the anaesthetic dose of alcohol is close to the lethal dose.
That wasn't true when I was a grad student. My lab had an individual (paper) subscription to a couple of critical journals in our field. Many individuals subscribe to "Nature", which is arguably the most prestigious general sciences journal out there.

The landscape may have changed in the intervening years, with blanket institutional subscriptions making paper subscriptions irrelevant.

I also suspect that, much like with albums and music, nobody actually reads a journal cover to cover these days, instead they are consuming the papers they want in a random-access fashion as a collection of PDF's.
The Future of Quantum Computing Will be Hybrid
Some more info... I studied the Abbot and Costello routine for hours trying to get the back and forth flow just right, half of what makes "Who's on First" funny is the timing and delivery (some might say it's all timing and delivery). Some things are technically a little of a stretch to make it match their original routine better.
They've been telling client developers that they should move from screen-scraping to using the API (https://github.com/HackerNews/API) for a while now. I don't know if that's the problem with this specific client, but you may want to check with the developers and see if it is, and if so, what their ETA is for getting onto the API.
TensorFlow seems to have better multi cpu/gpu support than Theano.
Could this system be used to implement a Gaussian Process?
But is it safe?
1 - 25 minutes isn't very long to wait for comments but now that I look again I guess you mean on the post there. Though by my reckoning it hasn't been up 12 hours.

2 - Some people are psychotic so I'm not surprised people stay silent.
The solution to high CPU/battery usage is to send a static page. Invoking a new type of VM may help slightly, but it probably just moves the problem around.
Heh. Yea, I remember all that. If you know how to spell "HTML", you were certain to be a billionaire by 30.
Introducing Datazenit Community