skysight-inc/HackerNews huggingface dataset:
It isn't that the process is so simple. It's that it allows fraudsters to convert their "fullz", previously used best online, to in-store Apple Pay cards.

You could theoretically call into the victim's bank, and with their SSN + address + etc. add the card to Apple Pay. This would allow you to use the card in-store. Contrast this with previous use, where you the potential damage might range from taking over the account and performing online transactions.

Being able to go from online transactions to in-store transactions is huge. But it's not so simple as just "type in the cc #, zip, and cvv". You need their entire details and to be very methodical. The issue is... people are easily convinced to part with all their identity information.
I do not see why there is such a strong desire to install secular democracies willy-nilly all over the world. Yes, we know that it is the best form of government, but the people living in these countries on the ground do not. I just do not think the majority of people there are ready for it.

A secular democracy requires some kind of enlightenment on the part of the people, and usually this enlightenment happens after a great sacrifice has been made (something on the level of a war of independence) or through the slow and steady movement towards universal suffrage by way of representation.

All that ends up happening when you give democracy to a population that is not ready for it are strongmen who vote themselves additional executive power through legislative hook or crook leading all the problems that a secular democracy is supposed to prevent.

Whether or not the West gets involved, one side will win or lose guaranteed. Trying to pick the least evil from the outside is an exercise in gambler's ruin.
Forget adding speed bumps, frequent batch auctions are the way to go. Group orders every second and match trades (and maybe give priority based on volume). There is no reason any company or trader cannot commit to price for 1s and it completely eliminates high frequency shenanigans.
"Like this" refers to the proposal that there were large numbers of iron chemotrophic organisms in the Precambrian.

Some elements (like Carbon) are known to be essential elements in the metabolism of biological organisms. This is why we would expect elements like Al and U to never show isotopic ratios associated with biological activity. Fe is used in living things, but only rarely. (The human body is 0.0006% Fe by weight.) To propose a biological origin for massive iron deposits is so far outside of what we know about biochemistry that it is not a legitimate proposal as is. The outlandishness of these proposed organisms equates to a very poor hypothesis that is not rigorous enough to be legitimately considered yet.
The code samples were weird. Why injected property has to be optional, we can inject it using the constructor.
https://www.youtube.com/watch?v=yxx3Bkmv3ck

Computerphile recently showed how this was done.
Russ Cox wrote a great comment[1] on HN about why using the Plan9 toolchain rather LLVM or even GCC was a competitive advantage for them in terms of speed to delivery, control, and iteration.

"Most importantly, it has been something we understand completely and is quite easy to adapt as needed. The standard ABIs and toolchains are for C, and the decisions made there may be completely inappropriate for languages with actual runtimes.

For example, no standard ABIs and toolchains supported segmented stacks; we had to build that, so it was going to be incompatible from day one. If step one had been "learn the GCC or LLVM toolchains well enough to add segmented stacks", I'm not sure we'd have gotten to step two."

"... the custom toolchain is one of the key reasons we've accomplished so much in so little time. I think the author doesn't fully appreciate all the reasons that C tools don't work well for languages that do so much more than C. Most other managed languages are doing JIT compilation and don't go through standard linkers either."

[1] https://news.ycombinator.com/item?id=8817990
Does anyone know if it has been unlocked and if Cyanogen Mod is running on one of these? If those both happen, I will definitely buy this as a backup phone. Hell, even using this as cellular modem in a log cabin would be cool.
DreamHost is removing sudo access from existing VPS instances on Nov 30th
Here's the email I received today:

Dear DreamHost VPS Aficionado,

Change is good! I'm not just talking about the kind that jingles in your pocket like sleigh bells, but that's nice too. I'm talking about HOSTING!

You may have noticed over the past year or two that we've totally amped up our VPS game. We've increased memory. We've installed super-fast slick new SSDs for lightning-fast data access. AND we've lowered prices.

Now we're about to roll out another change to our VPS services that may affect you!

We will be removing admin (sudo) access from all DreamHost VPS instances.

All of our Virtual Private Servers are managed. That is to say that we provide you with a specific software environment and we work hard to keep it up to date with security patches and all the latest updates. When users take server management into their own hands with the "sudo" command, this can limit our own ability to provide a safe and reliable managed hosting environment.

The good news, for users looking to have more control over their hosting environment, is that our cloud computing service, DreamCompute, is completely unmanaged. Install whatever software you like! Don't need a web server? No problem! We'll provide you with a base OS install (or you can even upload your own!) and that's it. Use sudo, or heck, just login as root if you want!

DreamCompute provides the full and complete remote server control that so many of our VPS users have been craving for years.

Timing!

Sudo access will be disabled on Monday, November 30, 2015.

Please be sure to check out DreamCompute if you're looking for virtual computing resources but want full control of everything! We think you'll find it's a great complement to traditional, managed VPS services.

As always, our brilliant tech support team is on standby if you've got any questions about this change. You can contact them from the Support section of your account control panel at any time.
I agree and would pose the question whether one neuron with thousands of synapses is better/different from thousands of neurons with few synapses.
OS X El Capitan breaks python package manager pip
I didn't know buzzfeed put out articles of substance.
Well there's egypt. They went their own road didn't they? With "democratic unelections" and all that. I lost count of the coup there, but seems more stable now, even if less free.
So, I had my 10 minutes of fame on HN. Thanks to the 25 visitors I had. My website is still very small and I am not advertising it except for HN, so it still feels crazy to have so many visitors at once check it.

If you have any valuable tips on how to add more value to my posts, feel free to answer here.
Why My Wife and I Choose to Live in Group Housing
I already agreed with another commenter that I should've exempted the first click. The rest of your arguments seems to go like this.

1. You know that most of the web's content is paid for with ads.

2. You've installed an ad-blocker to prevent them from loading.

3. You didn't see them when you do so it doesn't count.

That's a funny argument, right there. You could just as easily cover your eyes as you're driving through traffic and make the same argument. However, you knew what would be ahead of you, the significance, and made the decision anyway for selfish reasons. Fine if you do as I run an adblocker, too.

Strange that so many pretend like they aren't ripping off sites giving them content or a huge uptake of this wouldn't damage those same sites. Why do you keep pretending?

"In fact, my browser is muted by default, and I always mute TV commercials (used to have a mythtv plugin for it, even). Are you now going to accuse me of stealing for protecting the silence of my own home?"

Did you blank the content that the ads paid for, as well? Or just your end of the arrangement? I'm accusing you of talking content while blocking what pays of it. If it's not stealing, it's something very similar.

Many ads are visual or textual, though, so I'm not sure why you're bringing up the silence of your home as a counter to all ads except as a reframing of the discussion to make your ad-avoidance seem more sensible. Realistically, you don't care if they loose money and go out of business so long as you get the content with little to nothing in return. That's your actual position.
If you never define something concretely, no one can say whether the thing exists or not. "Google+" was never any specific service or technology or product, so the term is just a label that Google management can apply to whatever they want.

Google Reader was alive. It's now dead.

Google+? Impossible to say.
It's mostly because the Go compiler was developed out of the plan9 compiler code base, which is unrelated to llvm.

The other aspect is that the Go compiler is intended to be very fast. That's not an explicit design goal of llvm - using llvm would slow the compiler down although it would have other advantages.
In case anyone initially overlooks it, as I did: The proposed delay is 350 micro-seconds, or millionths of a second, not the milli-seconds that ping measures for me.

If the question is whether a 350 microsecond delay is acceptable and whether it's fair to small investors, we're asking the wrong questions. For example, should HN introduce a 350 microsecond delay to posting comments? Would that be fair?

(In the correction at the bottom, you can see the NY Times made the same mistake I did.)
God says...
diluted Zyrtec's insoles uncivilized lanolin's woozy qua brazier piazza's banal Rita fanciers thirteen coxcombs toughened xylem wont's instructions mischievousness's millimeter's dapperest nakedness bimonthly's plays kidders paintbrushes grocery complexion's Burgundy's auction shoehorn's audiophiles estimates daiquiri thy apposition's elaborateness irrational's blotter ionization Salado transcript newly shadiest sullener subtotal Camemberts trestle vociferated Veronese guessable typewriting participant's roundups stampedes frond's percussionist's Langerhans's sadism's weighty rent's accountants carryall's detonators Frost's workweek fawns quartz's styling excludes Mahicans alleviation Kaitlin's methods Britain stows Berkeley indispensable mecca superchargers metered eagerness's blissful subset properly homesteads cowgirl's Walker easiness Marcia's Noah's ecclesiastic's Calais progesterone handset's Antarctic's sidestepped glades package soggiest

https://www.youtube.com/watch?v=vjFG-4Ge668
For a few reasons:

1.) Just by choosing to use a framework, you incur costs: download time, initialization time, complexity & bug surface area, etc. You should make sure that you gain benefits commensurate with those costs. If you start by picking a random framework, then a.) how can you measure what the costs were? and b.) how do you know what sort of benefits would be most useful to you?

2.) Relatedly, starting from a baseline random framework can teach you lessons that are not true, and then you base your product decisions on that. For example, there's a common meme that you cannot have smooth 60fps animations on mobile websites. This is not true; however, getting smooth 60fps animations on the mobile web requires careful attention to which elements will render on the GPU and which won't, and no framework currently in existence will help you with that. Back in 2008 when I did my first startup, it was generally believed that Javascript was too slow for games; not true, JQuery was too slow for games. Doing things that others believe to be impossible is the essence of competitive advantage.

3.) Frameworks make certain tasks easy at the expense of making other tasks hard. If you start with a random framework, you will be incentivized to do things in the same way that everyone else who uses that framework is. That's why almost every web 2.0 startup started from around 2007-2010 looks like a frontend over a database. Looking like everyone else is a recipe for failure in business.

4.) The framework authors are all subject to the constraints of the browser; however, browser vendors (and people who program directly to web APIs) are not subject to the constraints of the framework. The set of programs that you can write efficiently without a framework is a strict superset of the set that you can write efficiently with one.

5.) It's easier to add code than to remove it. If you start with no framework and then decide that you need one, you've written only the code that you actually did need for your problem. If you start with a random framework and then decide it's not appropriate, you need to backtrack and identify what you were actually trying to accomplish before you shoehorned it into the framework.
A Genetic Map Hints at What Makes a Brain Human
I always found the pharmacology and safety sections to be the most informative, especially when trying psychedelics (and, more importantly, MDMA) for the first time. It taught me what to watch out for, what NOT to worry about, the role "set and setting" plays into your experience on almost every drug, etc.
Hive and Hadoop are offline -- it can take ~45 minutes to execute a query on our entire user table (even longer if it involves joins) and certain times of the day its slower (during work hours usually). Not only that, but once the query executes some engineer has to go copy and paste into a script that would likely run on one machine.

Doing this in a distributed async job fashion allowed for a lot more flexibility. Even better, we can even change the geographic area as the algorithm runs and those changes are reflected immediately.
I've always wondered, what's the point of those "FREE EBOOKS!" that require you to give your email? Does the author get a cut because s/he sells your email to advertisers? I always use a disposable email anyway.
The figures are at the very end of the document. This is a common way of preparing and submitting manuscripts to peer reviewed journals.
Grandpa's Scooter folgers Jingle
FWIW, you can change the layout on arstechnica:
- Hover over Main Menu in the navigation
- in the upper right corner of the menu, there is a label "Layout" that has some icons you can click to adjust to a two column layout that is more top-to-bottom friendly.
Sorry, I don't mean to rationalise the killings of innocents. Of course it's disgusting. But the whole "Free country" rhetoric is just as much of a lie here as it was with 9/11. The fact that both Russia and France were recent targets of terrorism is no coincidence.
I presume this also breaks `su root`?
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754910 is quite telling. This does not diminish the importance of Daniel's work on debian-live, but there's always two sides to every story.
Usually this is enforced at the cellphone carrier level. The US has the amber alert protocol which also has a function for the president to dispatch any message (and can only be used by the president iirc), and that level of message can't be turned off via settings.

Even in our best countries FB usage is never 100%, so cellphone / landlines makes a bit more sense.
They're researching the behaviour of real neurons by making computational models, rather than creating a "neural network" model for AI purposes, so the definition of "single neuron" they're using is meant to reflect the original meaning of the term.
> they are going after the Pinterest crowd, the sort of people who read Cosmopolitan, watch reality shows, and post drunken pics on Facebook.

Inferring a bit much there?
Yeh that's terrible
Did you benchmark performance on QEMU vs bare metal?
I'm guessing they see the integration as an iteration. A lot of people would prefer to have a single sign-on, cross-linking etc. rather than having separate Facebook, Twitter, etc.
'Fails' is a bit harsh. Since when was it decreed that Google should make all of their web pages blazingly fast on mobile? Al Gore didn't pass any laws on that.

If Google make a developer oriented tool then it is no surprise that it works brilliantly on the desktop and slightly sub-optimally on the mobile phone.
I am quite useless at web design yet I can game Pagespeed to get 95% or higher in the score. Of course the javascript will be mashed into some black hole that can't be un-minified and the way things load will not be well suited for the visitor seeing more than one page (using cached things). I can't believe someone at Google could not have done what I do to 'game' Pagespeed. The fact that they haven't is good, you should never let scores from things like Pagespeed or YSlow determine how a web page is delivered, it is like using a 'defeat device'.

I do wish they would do something to Pagespeed as they have changed what it does over the years and the latest iteration didn't excite me, I preferred the previous one, in part because you could run it against 'localhost'.
What about Tunisia? It looks like a success story to me. Please don't comment on Egyptian affairs if you are not well versed. Egypt wasn't in any trouble to be saved by a military coup in the first place. Actually, we're in deeper problems on many fronts whether in the economy, politics or security.

PS: Your supremacist view of our culture & political system is not to dignified with any comment
This headline is misleading. While it is strictly true that these people worked for Apple, they parted ways with the company before Steve Jobs returned in late in 1996. For better or worse, they have nothing to do with Apple incredible rise to success in the 2000s.

Maybe they have important things to say, but readers should not be misled about who Norman and Tognazzini are.
That screenshot is from the previously existing site, not the new version launched today.
A DEC PDP-8 Emulator in Java Running Lisp
> In this round, $75 million is equity investment, and $200 million is debt funding.

Before people read the headline and think "OMG another big one", this line is important. They are raising $75MM for the company and $200MM for the actual financing of the loans.

For anyone not familiar with SoFi (the main competitor), this model makes a ton of sense. Student loan terms do not take into consideration your future earnings based on what school you attend. Which means someone who goes to Harvard could have the same student loan structure as someone who goes to Foo State College. This is simple arbitrage.
I tried the Pomodoro Technique to avoid distractions and to stay more focused when I started freelancing. I was also trying to track my work time, so I built Tomatoes, a simple web app to do both.

The app is open source, you can download the code at http://github.com/potomak/tomatoes, or you can use the version running at http://tomato.es.
I seriously want to ask Linus why he's so into G+.
It seems a recurrent theme for all the "Arab Spring" skeptics to focus only on the failures of the movement like in Libya or Syria and ignore the success stories like Tunisia.

I must admit that the US and allies abandoned Libya after toppling Ghaddafi and not helping Libyans with nation rebuilding after that. Add to that, the intervention by regional players in Libya complicated the situation and made things worse for the ordinary people.
Step 9: Write a comment on HN about the Medium post that you wrote.
I don't honestly see how that is the same question
The way I interpret this is someone, instead of coordinating things with Daniel, who is the upstream of that package and the maintainer of the package, they just went and fixed it using an inferior fix that Daniel was trying to ship in his own conflicting possible future version.

That is pretty ignorant, and I can't blame Daniel.

This is somewhere up there with Debian habitually backporting security patches into an ancient version of Apache to the point its a broken unsecure mess, and adding an unapproved patch to ssh that caused it to generate completely broken and highly unsecure keys.
Sounds like buyers remorse, not that you were swindled.

You wanted "access to a wider range of consumer goods and services" you got that access. Now that you want to save money instead means that you just changed your mind... again.
The Next Generation of Mobile Ad Units
NSA's Guidelines for Implementation of REST [pdf]
http://www.buzzfeed.com/news
New: Python Knowledge Base
#2 on BBC's list of 100 Greatest Britons https://en.wikipedia.org/wiki/100_Greatest_Britons

The only one in the top 10 I had never heard of before.
Dockercraft: Manage Docker containers from Minecraft
Some of us have an idea, if only because a full build and integration test cycle for clusters of virtual machines can take hours depending on how the pipeline is organized!
Thanks for the shout out Jeremy! InstaMatch deserves it's own post. Learned a lot from those early days.
It's your fault if your employees are stepping out on you
This doesn't surprise me. The PageSpeed Insights site has a very atypical use case.

Anyway, the PSI 'score' is only a rough guide to help point you to problems. It can be kind of useful, in that if you get something like 97-100 then you can be pretty sure it's a very fast page... but it's also probably a page that doesn't do much beyond displaying something. With a more serious web app that does more interesting things, the score becomes a less useful indicator – it's often possible to make code changes that improve perceived performance but actually reduce the PSI score.

For example, it's impossible for PSI to really know if inlining a script is going to generally improve or worsen performance, because it doesn't know your site's usage patterns, or which parts of your UI need to render first for a user to feel that the your UI 'is fast', whatever that means. UI performance is a subtler art than, say, algorithmic performance, and much less quantifiable. That's why many people prefer webpagetest.org, which comes with much smarter tools to record and analyse how the page loads, so you can actually improve UI performance.
Credo: A Code Linter for Elixir
I first heard about him from the mini bio in Railroad Tycoon II of all things. Very interesting guy.
lovin the new G+ ...wayyy better than u know who...

also, looks like they've taken some of ello.co 's ideas to heart
Surprisingly, they do.

It's a very weird mix of horrible surface-level junk and in-depth, interesting articles. Gotta be a weird business/cultural mix.
A stunning fact came from a Googler today: https://plus.google.com/+IlyaGrigorik/posts/GzjRiVUED1S

The previous Google+ site took an AVERAGE of 12 seconds to load, and was 22 MB when gzipped. This company, which once wrote a blog called "speed matters", where they announced they'd penalize sites for slow loading, had an average page load of 12 seconds on their social network. (For single-threaded browsers like Firefox, it'd actually freeze up the browser for about ten of those seconds.)

I'm not super fond of the design, but what I am super fond of, is that Google+ no longer crashes my web browser.
> This damage to market quality would be further magnified by the “fast pass” that IEX proposes to give its affiliated routing broker-dealer (the “IEX Router”) and its pegged order types. It is ironic that IEX—a company supposedly founded to protect investors from various types of latency arbitrage—now proposes to offer pegged orders and IEX Router services that can and will be used by sophisticated trading firms to arbitrage the latency that IEX itself would create.

Could you explain this in more general terms? Especially,

1) Does IEX propose to exempt some traders from the delay? Isn't that obviously worse than no delay at all?

2) What are "pegged orders"?

Also, if you don't mind being spokesperson for an entire industry, is there a sense that when we are debating 350 microseconds, things are a bit absurd?