skysight-inc/HackerNews huggingface dataset:
You're entirely incorrect. They're the one making an assertion, I'm simply asking them to back it up, not "criticizing" it.

Your comment is pretty terrible, from a quality standpoint, not something I'd expect from HN.
This is a bad move that will give users a false sense of security. Server-to-server SMTP is unauthenticated. Just because an email arrived at Gmail over an encrypted connection doesn't mean that the connection wasn't intercepted by a MitM that read the message and then relayed it to Gmail over an encrypted connection.

Opportunistic encryption is nice to have because it stymies passive surveillance, but it's not something that can be relied upon to provide security or privacy. Thus, its presence or absence should never be communicated to users, to avoid suckering them into a false sense of security.
"Three strikes" would be 3 major offenses like flagrant plagiarism/cheating. I was rather surprised buying answers to a final exam wasn't sufficient for expulsion. Didn't dig into the policy details further.
Survival data were available for 169 kittens. Overall, 127 of the 169 (75%) kittens died (n = 87) or disappeared (40) before 6 months of age. ...Eighty-one of the 169 (48%) kittens died or disappeared before they were 100 days old.

Well, some of them are bound to make it... http://pets.stackexchange.com/questions/9571/can-cats-surviv...
Dockerized Magento
For me, "locked down" is a choice I make when I buy an iOS device. It's not something I look for in servers or desktops, but in tablets and phones it is very much something I appreciate. Many people have other philosophies from mine: fortunately, so do many other computer vendors.

Apple doesn't blindly extend trust to app vendors - neither do I, particularly. Apple doesn't trust most folks to decide whether to trust an app vendor - neither do I, particularly.
Yeah everyone here seems convinced they're trying to game some system. I think Occam's razor is right here. They really just think those companies are worth less than they were.

But, I still wouldn't worry about that too much directly. As the article mentions, it's more art than science. If I were Zenefits I don't think I'd be sweating it.
Similarly, running "make" in the directory of a freshly downloaded repo is dangerous too. It's really difficult to check all code running on our behalf and to quantify the risks.

If someone take control of a popular git repo and push a malicious build script. How many people will be affected before the fix ?

But this doesn't seem to happen very often too.
There's no reason for anyone in upper management to trust this offer, but I don't see why VW would harass any normal employees coming forward over this. VW has a good relationship with its workers and a strong works council and they need their full support at this time.
>I wonder if anyone is building an app that recommends articles that provide a variety of perspectives different from your own.

When building Recent News (https://recent.io/) we considered adding the options of seeing news from perspectives both similar to and different from your own, at least as we understand them based on your usage.

We didn't do that. It turns out in early testing that users liked seeing a broad range of articles. For instance, a pro-2A voter might want to read a Salon.com article talking about how firearms should be banned--just to share it to argue how wrong it is! Or an anti-2A voter might be interested in a Fox News article talking about repealing anti-gun laws, if only because it reinforces how nutty those conservatives can be. (It also added more complexity when our goal was an MVP.)

The current version of our iOS+Android app includes a personal tab that is unique to you based on what we believe your interests to be, and a Hot News tab that is not unique to you. Neither filters by perspective, and not one person has requested that feature in the weeks since we launched--the feature requests have included things like dark theme, offline mode, text resizing, etc. instead.
I actually have had similar problems. In the past when I take antibiotics it fixes my GI problems.
Are you a cook or a chef? Programmer or entrepreneur?
Or are we all following the "startup" cookbook like good little cooks?
Great point, we've just fired another salvo in an escalating war. The only winning move is not to paste. :)
I suspect this will turn out to be due to some corporate mass psychosis similar to when an airliner suffers controlled flight into terrain because nobody wanted to disagree with the captain.
One of the main recurring arguments against legalizing marijuana is that it is a "gateway drug": people who try it are more likely to go on to harder drugs like opium or cocaine. This means that some people legitimately believe that legalizing it would get more people into these other drugs and increase the overall number of drug crimes.

It doesn't really make sense to me, but it seems to be one of the most common rationalizations for being against legalization.
Though playing devils advocate here should not the civil servants and politicians who pushed diesel over petrol (and to hell with the known health risks) be in the dock.

I recall Mrs Thatcher queried this.
> In this case, she apparently does still have enough to pay a high-priced attorney.

Having representation is not the same as being able to pay for a defense. That's just the start.

> Just how expensive an attorney does one need before their Sixth Amendment right is satisfied?

Like you said, this case doesn't involve drugs, it's not petty crime. It's not a simple matter to ascertain guilt based on the facts, because the facts aren't simple. You need expert witnesses, paralegals to comb through the evidence, defending yourself in court against a white-collar crime charge is not something you can do adequately without a war chest.

Unless the government is proposing that they pay for her defense, then they're basically railroading her by not allowing her to fund it herself. The government is going to bring all its unlimited guns to bear on making her look guilty and she won't be able to make her case adequately. It's not a simple matter of looking at a videotape.
Ask HN: Open Source Monitoring Service
We all monitor our servers but just wondering if anybody have setup any Open Source Monitoring Service with notification. I know newrelic is awesome but wondering if there are any open source solutions available which we can install on our servers
>We can't go on being a nation that takes decades to build minor transit improvements due to walls of paper.

The sad thing is, the minor transmit improvements are lauded as "marvels". Being recently back from Hong Kong, taking 15 years to build a 2-mile bus route just doesn't impress me.

And when you consider that a system like this (only far more extensive) is already in place in Bogotá [0] and has been for about 15 years... well, this little 2 mile stretch seems a bit underwhelming.

Don't get me wrong, I'm happy SF is improving transit. I just wish it didn't take decades because it seems like other solutions are likely to come about in the mean time, which means wasted time.

[0] http://www.streetfilms.org/bus-rapid-transit-bogota/
> Such a feature would be useful for certain debugging situations, but it would be disastrous to have it enabled on a production box.

I've seen that exact thing (and worse...) on a production server in some job recently. But that big all-caps warning wasn't there, the docs were absent and there was no config bit to switch on/off, I found the file more or less by accident (wondering what all the io was that ate up the machine).
I doubt it applies, if it did any rent a coder site and even craiglist and forums with marketplace would be susceptible to it.

Uber has that problem because they have a partnership with their drivers that is more extensive than just what is basically a "for hire" classifieds listing on fiverr.
That requires more stupidity on the target's part. I think most devs know not to `curl | sh` random scripts, but something as innocuous as `ps -ef | grep /some/longish/annoying/path/to/script` would seem both safe at first glance and long enough to want to avoid typing.
Are regular promotions that important? As long as I get keep getting to do interesting work and keep getting reasonable raises I'm quite happy with my job title not changing more than once a decade.
Sounds exactly the same as FlightFox
Based on my experiences (formerly did activist investing for 8+ years) there's a lot more pragmatism for all parties involved.

Activist don't just suddenly show up and get board seats. There's usually an ongoing issue/debate that management teams/boards are dealing with behind the scenes long before an activist is actively pushing for board seats.

Also keep in mind, even if an activist ("easily") gets a board seat, there's still an extraordinary amount of work to be done. It's easy being a board member when times are great, but being on the board of a company undergoing a turnaround is a completely different experience.
Ask HN: Any proven natural (without meds) ways to "reset" and restore gut flora?

Context: I grew up in India and to this day, there is a tendancy by Doctors to prescribe Antibiotics for anything, even cold viruses and non-bacterial illnesses.

Erythromycin is 1 such antibiotic that Indian doctors prescribe for things such as the common cold, cough and similar seasonal illnesses.

Due to this, I've developed a lot of food allergies and my gut is hosed.

So I was wondering if anyone has been able to successfully "reset" their gut and regrow the good bacterial and improve their immune system.

Thank you!!
My notes from this month's LRUG
I'll have to take your word for trivially telling them apart. To my untrained eye, I wouldn't be able to tell the dangerous species of my region apart from the safe ones.

But looking at the math, the most fatal species belong to Amanita [0]. Amanita contains about 600 varieties (wiki lists 500ish). Of those 500, for my region only, I would need to learn how to identify about 30 varieties. A reasonably feasible amount! But wait... we can trim that number down some more. Ignoring the ones where edibility is unknown, that leaves only 10 or so to identify. Anyone who cared enough could likely easily learn to tell them apart. But with 5 being known as deadly and 1 of those being the angel of death [1], I won't be taking any chances. :)

[0] https://en.wikipedia.org/wiki/List_of_Amanita_species

[1] https://en.wikipedia.org/wiki/Amanita_ocreata
The author really screwed up by not going with this title.
I used to have them on the website but I just felt like if they were on there people would think they were biased. A user had some benchmarks a few versions back: https://www.reddit.com/r/waterfox/comments/2xle7k/browser_be...
The "Gateway Drug" argument is often used against cannabis. Some warned against cannabis legalization, saying that it'd increase cocaine and heroin use.

Heroin seems to be doing fine all on its own, thank you very much.
Cannabis should be treated the same as tobacco.
Three things you should know before you quit your job
> Two tweets containing same link can have very different and often contradictory messages.

That sounds really interesting! I like how that might impact people's bubbles.

I'm currently teaching a class where students are learning to build simple apps, and ask critical questions about the apps we use. Would you be interested in doing a skype session with my class (~12 students) about how you and your team are approaching this issue, from a social and technical perspective? They'd love it, and you might get some good insights into how high school students think about these issues in deciding which apps to use.
There's a way to fairly reliably mark messages as insecure when they're sent by clients that don't verify certs.

For every incoming ssl smtps connection, google could forge a cert the first time it encounters a connection from a particular ip on a particular day. If the client continues with the ssl negotiation, google would know to mark the message as unsecure, because the sender isn't verifying certs.

You could obviously adjust the frequency with which the recipient (eg google) tests each IP. It wouldn't have to be every 24 hours. You could also use additional heuristics to re-test, even going so far as to disconnect immediately and force the client to retry (giving it a forged cert test) if you trust the client ip but see a different helo than you saw last time. You could even use global bgp feed to invalidate any successful tests from a netblock when there's a visible routing change for it.
I wish we could declare San Francisco a hyperbole-free zone.
Google is all over the place with it's music services. There are 3 apps you can use now to play music on your phone Google Play Music All Access, YouTube, and YouTube Music.

It seems like 10 years isn't enough time for Google to figure out how to integrate the YouTube and Google brands together.
<rant>

They used to be good when they started. I only care about what they do with and to the technology. Whoever is on their team doesn't concern me.

My current issues with Mozilla/Firefox:

- Caving in with adding DRM support, which contradicted their principles because, duh, otherwise users would hop to Chrome to watch Netflix.

- Dropping relatively sane sync-1.1 in favor of sync-1.5. It's as proprietary Firefox-specific solution as it only could be, with internals being a terrible mess I can't call anything but over-engineered. And after more than an year it's still insecure. And they purportedly removed UI for self-hosted sync.

- Promoting Persona/BrowserID, contributing to the very wrong concept that someone's very identity is their account with a third party (email or domain address, as leased by email provider or domain registry). Good thing they put this on hold.

- Simplifying UI where it's unwanted. Say, just recently the "green lock" UI was crippled to the extent it doesn't provide any useful information anymore. To heck with "secure connection", I can see this in the address bar already.

- Bundling more and more stuff into browser, like it's a new Netscape Navigator.

- Gradually showing more and more "hints" and "useful tips" all around, without means to opt out once and for good. Like that annoying popup at the bottom of the "top sites" page on Android (the only UI to disable is about:config).

- Starting to add non-opt-in analytics/tracking anti-features (Adjust on Android release builds).

I feel that those things are not in favor of end-user personal freedoms, but were introduced just because marketing thought they'd look appealing to the audience - who doesn't care about the mission and other stuff that Mozilla likes to mention - or necessary to keep market share. It's just my personal perception, though. I'm by no means objective here.

</rant>
This is an excellent example that shows the dangers of terminal escape sequences. Just a shameless plug, but here's a more detailed post (of mine) on the subject:

Terminal escape sequences – the new XSS for Linux sysadmins: https://ma.ttias.be/terminal-escape-sequences-the-new-xss-fo...
Similar, but the data structure described here is a different kind of beast. It is more efficient, allows for fuzzy matching, regular expression searches and more.
And on the commercial real estate market. In central Denver, 1 out of every 11 industrial buildings is now being used for growing marijuana. It's gotten to the point that the owner of Mile High Comics is selling its headquarters building, looking to make a tidy profit in the process:

http://www.thedenverchannel.com/news/front-range/denver/mile...
Stasis' logic is along the right lines - you need to think about it in terms of portfolio management strategy. Effectively, the manager is trying to switch as much of the gains of their fund from being taxed at 40% to being taxed at 15%. A decent explanation here: http://www.nicholasfunds.com/dividend_info.html

You're right that it won't be a large drop in the bucket. It's not news because it's a large drop in a bucket, it's news because its a valuation change on companies many here follow. Nonetheless, one could object to poor management if Fidelity didn't take this action, regardless of size.

Note - this only gets at the 'why now' part of the motivation. What it means for 1) their internal company valuations and 2) implications for shareholders without liquidation preferences is more interesting.
You do get dehydrated though, and as a result feel sick.
I'm reasonably sure that you could not buy cabbages in the United States for that price/pound. From what I remember when I still had a garden, you'd be a little pressed to buy seed to grow cabbage that cheaply.
Having a hidden Tor space on the device is one of the cool features of Secure Spaces but there are more things you can do as well. Check out the website for more details.
Rumor: "Pale Moon is just a rebranded rebuild of an old Firefox version"

FALSE

Pale Moon has been on a divergent path with its own code for a long time already. It was a rebuild in 2009, yes. It was a rebuild with minor changes in the Firefox 4.0 era, yes. But we've come a very long way since then with an increasing amount of different code being carried over each time it was re-based on later Firefox code. It's a true fork now and has been employing rapid development (as opposed to rapid release) to solidify this independent direction with its own focus and attempt at keeping the browser sane, lean, and offering users choice and stability.

At the same time, Pale Moon's focus on security and evolving networking standards has added features and kept pace with those developments in other browsers, by e.g. adding TLS 1.1/1.2 support a while back, by offering OCSP-stapling, by keeping a close eye on encryption and the browser's security by continuing to port or re-implement security fixes that apply to Pale Moon as a browser. It is neither old nor outdated, it is not a "rebuild" and it does not use obsolete technologies or have security holes.

https://forum.palemoon.org/viewtopic.php?f=4&t=7818&p=50895
> consistency over a long period

That's the secret to all success!
Lying to a federal official can land you in prison. (Ask Martha Stewart)

Someone programmed these cars to 'lie' to the Feds. This caused damage to the environment and these cars dropped in resale value as a result, erasing millions of dollars of value from personal balance sheets.

Someone (not the shareholders paying a fine) should be held personally responsible and face criminal prosecution.
It's getting worse every day for VW it seems. First a limited range of diesel engines, then a whole bunch more, then the gasoline engines. Now this very transparent ploy at distancing. I hope they do realize that it isn't fooling anybody and that if nobody steps forward it doesn't prove a thing. They're in heap of trouble. It's interesting how those 'workers' had absolutely nothing to gain except continued employment from this whole saga and the VW management and stockholders had lots to gain.

If anything there should be whole slew of emails documenting this feature and its reasons for existence and who authorized this. VW 'asking' is tantamount to them saying they still don't know how this whole thing happened which is fairly incredible.

It's quite something to watch an industry giant flail like this, when Mercedes had their A-class debacle they got the story under control relatively quickly, VW seems to go from a certain level of bad to something even worse every time I read the news.
Never said it wasn't sleazy. And it's irrelevant anyways.
Oil prices are responding to supply and demand, not OPEC
ISIS Fan Faces Federal Charge After Reblogging a GIF on Tumblr
There is actually a growing middle class - the Donju - earning money through the black market. They certainly have enough resources to (over)feed themselves - and buy expensive electronics.

As for the larger population, while most of the country still suffers from food shortages, starvation is not the problem it was in the 90s.

See for example: http://uk.reuters.com/article/2015/06/04/uk-northkorea-chang...
99% of gmail users will never know that the feature exists until they see the warning. That can only have the benefit of encouraging the correspondent to get their provider(s) to enable the encryption.

> stymies passive surveillance... presence or absence should never be communicated ... to avoid suckering them into a false sense of security.

I think you're not giving enough weight to the first point. This really does provide an advantage for individuals who receive their password/reset url or some other credentials via email. At least it wouldn't be intercepted on that hop. Seems like the benefits outweigh the drawbacks.
It probably goes something like this:

"We thought it was worth more, and it may well be in the future. But if it's not, that's OK, that's why we have a portfolio of 150 companies; some will lose money. We plan on that happening to x% of our companies, and on average we're still lanning on seeing a #x return on the capital you invested."

In other words, this is absolutely an expected part of VC, even at the late stages.
You have a really interesting argument against the oft-repeated "If you don't pay, you are the product." I think you are right, that there is great power in anonymized data, but ultimately motives matter. From what I saw as a former scientist, the goodwill of patients donating their tissues formed the foundation of great cancer (and neuroscience, and HIV, and...) research. IBut I think there is a social contract for scientists (and open-source programmers, and nonprofits, and...) that gives them credibility. Maybe it's our human nature to trust them, and for them to trust themselves?

But 1)corporations are obliged to care about profit, and 2) anonymized data can be de-anonymized with (to me) astonishing ease. In Data and Goliath Bruce Schneier cites a dozen cases of de-anonymized data, from health records to Netflix history to personal identification.[0] It is possible that I'm just more paranoid than the average GMail user, but this scared the bones out of me.

[0] An example on his website: https://www.schneier.com/blog/archives/2013/05/reidentifying...
Isn't that what probiotics is for?
Very nearly this same technique is used in glibc for representing unicode character classes. Essentially you save a huge amount of space by sharing common leaf nodes of the trie.

I wrote code to construct these quickly during startup for JOE. I also noticed the minimizing you can do while building the trie in order: basically if the last constructed leaf matches the previous one, use it instead. In JOE we also have sets (for character class) or maps (for regex and case conversion tables).
How to Get Freelance Programming Work (With No Experience)
Coverage testing is one of the more maligned techniques out there. It's one of my go-to tools. Once I have a test suite I think is robust, I'll go through the code again with a coverage tool, which will usually identify error paths I didn't exercise and keep me honest. For examples, a code refactor might have introduced new error cases which weren't needed in the old code, and some code - like cleanup handling around ^C handling - is not worth fully automating; code coverage will help spot where manual tests are needed.

But I really wanted to comment about one of the comments described in this essay:

> One respondent seemed to conclude that the team who had 95% coverage [vs. 45%] clearly didn’t understand TDD and therefore they’d look in that program for defects.

The original TDD proponents were very enthusiastic that TDD would lead to high coverage. For example, Beck wrote "TDD followed religiously should result in 100% statement coverage." I think it's safe to say that Beck understands TDD.
While I wish the team all the best - this site always has 501 gateway errors. Their service portal or website is terrible and constantly keeps crashing. While their supply and demand is ok and you get what you pay for.

Still amazed at the crappy technology that backs up this business and the money being raised by a team that has no interest on customer experience.