skysight-inc/HackerNews huggingface dataset:
This looks pretty interesting. It does require the structure of the HTML to be very similar to the object, though. And I'm not thrilled that is uses the class name for a DOM node in the key/value pair. Why not define some "data-" attribute to read from?

EDIT: Looks like I posted without reading all of the comments in regards to the class name thing. I see some other people have mentioned it as well. It also looks like the author states that this isn't a hard requirement. I guess that would solve that problem at least.
yes, absolutely. 2 freaked me out the most. I managed to get enterprise github installed, taught people how to use it, set up the client on their computers, pointed them at tutorials, and pestered them regularly. For all that effort, over the 6 months the adoption rate was pretty much just 1 developer in one department - me.

It's just so damn hard to get people to change.
You use a random user agent.

I use this one for example:

https://github.com/dillbyrne/random-agent-spoofer
right now if you dump a VM you own any secrets it holds

Unrelated to OpenBSD but related to VM security from administrators - https://4sysops.com/archives/shielded-vms-in-windows-server-...
Another thing to do is to run bogus Google searches to obfuscate your own and have plausible deniability about what you were actually doing. Bogus searches could even be selected from topics related to your interests so as not to be easily identified by Google.

Another protection would be to automatically screen what information goes out and stop all leaks of sensitive data, like your name, email, card, ad-related cookies etc on untrusted sites. Dangerous searches could be routed to a different search engine automatically (say, for example, searches related to political activism). Making it easier for people to protect their information goes a long way to achieving privacy.
I dunno how many sites I visit each month, maybe a couple thousand? And what's the CPM these days, maybe 2$? So 10$ per month doesn't seem unreasonable at least for ad supported websites.

For paywalled websites, I'd say that the cost is set very high because the number of paying customers compared to the total number of readers is small.
Things are not insecure or secure. Things are secure to varying degrees; nothing is perfectly so and few things are totally not. (... and anyone who claims anything is totally secure is delusional.)

Making it hard buys you some resistance to less skilled attackers. Since skill tends to obey a power law distribution, this is most attackers. Make it as hard as possible and you get more and more protection from more and more attackers, and so on.

Your average attacker doesn't know enough to bust out x86 assembly language to inject root code into the kernel and dump a VM's RAM. So make it so you have to do this, and you've ruled out your average attacker. The average attacker will only 'dd' the VMs' disks, which if they've encrypted data at rest will not get them the crown jewels. But make it easy to dump VM RAM and you've exponentially increased the damage from the average attacker (due to power law distribution of skill).
Transgender children and gender dysphoria
I think eventually farming will be completely robotic and we'll have farm on our roofs. Household waste will be processed and used for it. Robots will harvest crops for us and even get them to market if we aren't around to eat them, probably selling to people in the neighborhood.
We're reaching a point where all these are coming back, but only ironically for now and in small secluded pockets of the city. Haven't spotted any legit uses in the field as of yet.
Not serious, or maybe ha-ha-only-serious. See:

http://philip.greenspun.com/humor/ai.text

The AI field has been a prolific source of hokey new
terminology
...
AI is about the same age as the rest of computing.
...
If DOD spending on AI drops far enough, universities
like Stanford, MIT and CMU may even find the integrity
to rid themselves of scientifically embarassing, but
formerly profitable, AI programs. The quality of CS
faculties and budgets at universities across the
country will continue to be diluted by the presence of
large numbers of AI meatballs.
-- Gary Martins (former RAND manager)
clang-tidy will fix (some?) problems it detects, if you pass it the -fix flag.

http://clang.llvm.org/extra/clang-tidy/
Of course not, but United knows this too. It is possible that United is better at dealing with fraud than at dealing with software issues. It probably costs less to fix the infrequent fallout from exploits than to fix the actual software. The threat of public disclosure changes that calculation (infrequent -> frequent), and then the software fix becomes cheaper.
Should a startup worry about technical debt before reaching product-market fit?
Should a startup spend resources refactoring code before p/m fit is achieved? Or should it spend its resources turning out features to win prospective customers?
Argentina elections: Mauricio Macri poised to be next President
> I eventually left because slackbuilds.org was not being run very well and I couldn't get the packages I needed

I'd be interested to hear more about that if you're willing to share. Let's see if we can do something positive to fix it, even if it's too late to help you personally.
I have same problem with one of the Salesforce's subdomains. Report accepted and assigned status low. 7 months later XSS is still there.

Not sure what to do by now.
Yes. Any change from the norm can be pointed to add a reason for failure/delay/cost overrun. There needs to be management buy-in and possibly even requirements for projects to reverse this inertia.

Which is why there needs to be pressure on management.
yeah.. I started with bullets as a draft, intending to expand into prose, but it seemed borderline readable, so I thought Id leave it as an exercise in blogging.

awesome, thanks Thomas - Ill check out your blog too.
IMHO: "A little, but not too much. The more product-market fit you achieve, the more you should worry about technical debt."
If your sanity is so easily upset by advertising, I suggest you get off the internet, and avoid TV, radio and print altogether.
A Big Move in Building “The Web of Apps”
That's funny because I run almost everything smoothly (Vagrant, Node (grunt, bower, ...), Python, Chocolatey and now Meteor), on my Intel Atom NETBOOK. It's not perfect. Can get laggy, but works just fine must log the time.
That said, I think I'll jump on the Linux bandwagon very soon.
Also relevant is this great interview:

http://matrixmasters.net/salon/index.php/2006/06/27/podcast-...
If it can't be butchered is it really an animal for the purposes of these religions, or a new & novel organism that happens to use the genetic material from some animal?

I.e. isn't there a case to be made that these things should be treated more like mushrooms than chickens or pigs?
homomorphic encryption exists. It's just slow, though it depends on what you consider slow: https://github.com/shaih/HElib
Aust. Federal Police whistleblower claims mass murder, rape, corruption
True but actually unimportant, they didn't observe any background neutrinos but the effect of them on the structure of the cosmic microwave background. Besides that neutrinos have a mass and are therefore expected to travel at subluminal speed and should arrive after photons from the same event however a deviation from the speed of light has not yet been measured (except in Italy but there in the wrong direction).
It's mostly blotters and liquid drops here. How would one go about volumetric dosing with a blotter? if it's in liquid form, I'm guessing it's already in some volumetric dosing (I keep using it but not sure what it means - guessing its diluted dosing) - so i just need to check it's in the right amount?

I actually have Fadiman's book but didn't get to the part of micro dosing - was more interested in the full trips guidance, but I remember being very intrigued by micro dosing.

Lab tested you say... not convenient as in I can't just go to a lab and tell them "hey I need to be trippin so can you check these blotters"?
The mentality is: typing in code = assembling the widget, while setting up source control and an issue tracker = decorating the assembly line.
A New Age in Cluster Interconnects Is Dawning
I assume this means that there are no options with your current employer?

Don't want to assume but a number of years ago with my current employer I started out doing work that was seemed interesting but a year or so in it started to get old real fast (also lots of education). I too started to get somewhat depressed and felt like I was 'rotting'.

So I started doing some projects on the side that started to have some real impacts over the next year. This eventually started to get some attention (the good kind) which lead to other things which eventually led to what I do now which I really enjoy doing. I'm at my same employer, same boss but through letting her know what I wanted and my side-projects I was able to parlay that into something more interesting.

(I realize that this may not work for all employers.)
TL;DR: We don't know.
Spotify is also covering IVF and gender reassignment surgeries.
Asynchronous VLSI Chips at Caltech
What are some examples of bullshit out-of-scope judgements? Some scope issues are more bullshit than others.
Whatever stupid barriers you put up will just be automated away in common tools. Then all you have is something more complex than it needs to be that probably has bugs and vulnerabilities because you made it convoluted.
> one can be employed to hack on some of the most used languages and compilers without having a PhD, and these examples strengthen it.

Of course. You can most anything without a degree, with very few exceptions (see: the article).

But the degreed : undegreed and phd : nonphd ratios in language design/compiler implementation are much higher than in software development more generally. The same is true of other technically challenging things. If you agree with that observation, then I think we're violently agreeing or you're reacting to the tone rather than the substance of my post.

> Would you care to provide them?

Anecdata, and bearing in mind that "originator of a language" is a very, very small subset of all people working on compilers / language design (and that even there, I think my observation holds -- especially for degreed : undegreed, and probably even for phd : nonphd). And that compiler/language design is only one very small segment of what a reasonable person would consider to be core infrastructure.

I don't have the time or the interest to run this study. Feel free to do so.
For as long as I live where a lawn does not require a sprinkler. Think outside the box.
GPS depends on satellites to stay in the right place, intact, and powered, as well as the ability to receive authentic RF signals from those satellites.

Celestial navigation requires (the computational equivalent of) a graphing calculator.
I do this as well, but there's still plenty of data points available. Have a look here https://panopticlick.eff.org/
Why are you looking for off-site vulnerabilities? Would this be something you did even if they weren't running a bounty?

You should be careful testing sites out of scope. The bounty gives you implied permission to test for vulnerabilities on sites in-scope, but "I was just security testing" is demonstrably not sufficient to insulate you from civil litigation or even criminal charges --- you would probably win in court, but it would be ruinously expensive.
Does the company not have any legal recourse against people going public (or threatening to go public) with a bug like this before it's fixed? If not, how is it that United can just mark unfixed bugs "as duplicates" and refuse to pay out for them? Shouldn't all those devs immediately go public with them?
Caltech Potato Chips (1996)
Tails – Privacy for anyone anywhere
Blizzard defends itself against cheating bot-maker’s claim of IP infringement
"So" indicates a change in direction in a conversation. It's mostly used to start a summarization or a change of subject. It prompts the listener to stop thinking about the old subject and pay attention to the new.
Design and Prototype for Virtual Reality with Framer
I get 'so' in conversation, but I despise it in internet posts. On reddit it indicates that there is a 99% likelihood that what you are about to read is a repost.
Yeah let's compare Perl with AWK lol
"So" is quicker than "Therefore" or "In conclusion" or "Because of that" and so on. In conversation, people want you to get to the point quickly. One syllable "so" gets the job done. Yes, it's overused. Grammatically, there's nothing wrong with it.
1) I don't care if my datapoint is prominent, if it's bogus.

2) I've never once thought about the quality of the ads I see. I can't imagine being disappointed that the ads "are worse". They're ads, they're bad to begin with.

3) Again, not concerned with the quality of ads others get.

4) If lots of people use this, then it will be impossible for advertisers to distinguish between click fraud by the site and click fraud by the end-users. The goal is to make click-tracking futile.

The point of AdNauseam is to make tracking useless. So your points are all endorsements of its effectiveness.
It's not that simple in the United States, because of the 4th Amendment. A major factor in determining what would be an "unreasonable" search and seizure absent a warrant is what people reasonably expect when it comes to privacy.

If enough people put in listening devices that report to third parties in their homes, that can shift what is a reasonably expectation of privacy to where the government can put listening devices in homes without a warrant.

There was a good essay on this a while back by Alex Kozinski, the chief judge of the 9th Circuit Court of Appeals: http://www.stanfordlawreview.org/online/privacy-paradox/dead...

Spoiler warning: that contains a major spoiler for the terrific Isaac Asimov short story "The Dead Past".
The Persistent Relevance of the Local OS to Global Applications (1996) [pdf]
Is it only in the US in which Scouts are called Boy Scouts? It's just been called "Scouts" here in Australia for as long as I can remember, I was a member about 20 years ago and we had quite a few girls in our group back then.
If I'm running a guest on a hosting service, I'd like it if I didn't have to trust the host. Technically, that's maybe not possible right now, but it's not like it's a goal we should just shrug off.
Replacing long phrases with fewer words is not "simpler" in any measure of language simplicity I've ever heard. In fact, "simple" usually means fewer words and variety, and thus, longer sentences for covering more complex concepts.

An explosion of jargon and slang doesn't make a language simple, it adds layers and layers of exclusivity and nuance.
I associate neat with two expressions: "neat and tidy", and "that's (pretty) neat" (positive exclamation about a way of doing something, or a solution to a problem)
The range of foods I eat now has expanded so much and I'm not even sure where to begin on that question. I'll go with most surprising favorite, which is Misr Wat. Can't believe it took me until my late 20s to try Ethiopian food.
Maybe not the source of the name, but the first thing that came to mind was the exploding whale of Florence, Oregon:

https://www.youtube.com/watch?v=1_t44siFyb4

https://en.wikipedia.org/wiki/Exploding_whale
Got it, but this guy was trying to deploy a 15-minute sample app.
In the long run, I think fake meat (both the in vitro stuff and the industrial stuff) has serious disadvantages over foods properly prepared from whole ingredients whose ultimate form happens to be vegan.

If that's true, I figure why not go straight for the endgame and help people get their hands on that stuff. Lots of space for innovation there.
At what resolution does this look like a cliff though?

Let's say we're building Google Mail. This is a project with a life of perhaps 30 years. Throughout the project we obviously need to think and deliver. We can't think for 29 years and then start working.

Let's zoom in to some 2 week cycle in this project. If you don't actually know what you need to get done during those two weeks it's too late to start thinking about it. You want to be in a situation where you've already identified some features you need to deliver and you already have a pretty good idea about how they'll be delivered and how they fit into the architecture etc.

That "how to/thinking" stage is just background processing that happens all the time. It shouldn't be counted in the burndown. That background processing could consume anything between 100% of the time in a project that is just getting kicked off and 20% of the time in a more mature project.

Every now and then a problem might come along that requires more serious thought. But to just have the entire team go and think about it for months is very rarely the right thing to do. You just put it on the back burner. If there's some urgency then you just think quickly and accept the fact that the solution is very unlikely to be perfect.

Regardless of process or how management is trying to drive people you need some mix of stuff that gets done and thinking about what else needs to be done and where to steer the overall project towards. These really have to happen somewhat concurrently since you want to get feedback on your ideas as soon as reasonably possible. Every situation is different in terms of the time scale and what this mix looks like. Whatever the buzzword of the day bad management will find a way to abuse it. Agile was supposed to be a way of avoiding that but the forces it tries to fight are too strong.

EDIT (more thoughts).

If you've thought about architecture and how features work and are implemented than tracking burn-down can indeed give you some insight about the actual progress being made. It's just a visual way of seeing how close you are to where you thought you'd be. There are a lot of things that need to happen though for this to really work. You need to have done the thinking. You need to be reasonably good at estimation. You need to be reasonably good at planning the work out. The team needs to understand what "done" actually means. The process shouldn't be abused by management (which I think is the complaint?).

I've seen this work. I've seen "smooth" work reflected as smooth burn down charts and I've seen "oops, unexpected trouble" show charts where nothing is burnt. That early visibility is supposed to help steer the project. I've seen projects with no such visibility go through 2 years and find out very close to the end that they're really a year late and the project will take 3 years. It's not that something unexpected happened after a year and 11 months. It's just that people weren't paying attention and were being optimistic they would somehow magically catch up.
1. The idea behind the overlays is to "cache" and reuse as much as you can between images. If you have a long list of packages you install before you copy your app source to the container, you don't have to install the packages again and again every time you do a change to the source and rebuild.

2. You can point Docker to a file - use 'docker save' and 'docker load'.
The point is to show off your thinking process. So if you answer with that, how does that show any thinking? It's not like the interviewer really needs the algorithm for Gray codes, so I'm not sure how rattling off an efficient but opaque solution helps anyone. They're not evaluating your memorization abilities.
The comments to the NYT article are worth reading, especially the one under the tab "NYT Picks."

(Disclosure: I'm an Eagle Scout, as are my brother and my son, and I'm a long-time adult leader in what we're pretty sure is the largest Boy Scout troop in the U.S.)
Destruction of cultural heritage by ISIL
I think you might be in dire need of some LSD if you can't imagine cutting up paper into small pieces.
This is not very useful, it is a security policy change. The previous post mentioned homomorphic encryption. This is a method of performing computation on the cipher text. If this were implemented, then you could potentially create VM's where even in the event of a hypervisor compromise, dumping the plaintext memory of guests is not possible.

If you can take a memory dump of the host sytem, you can from that devise the encryption key for the disk encryption with the M$ solution to this issue.
every piece of vm software has a save/snapshot button which will save the state of the ram/cpu to disk.
The point is they don't get sufficient resources to do their job properly because they are seen as a cost center.
automation will eventually be the way just that Letsencrypt client and 3rd party clients need time to evolve and develop to the stage that is acceptable for most folks

there's a list of clients being developed on their forums some already have auto renewal automation done

see

https://community.letsencrypt.org/t/list-of-client-implement...

for plesk https://community.letsencrypt.org/t/plesk-and-letsencrypt/42...

for Centmin Mod LEMP stack http://centminmod.com/letsencrypt-freessl.html

cpanel feature request at https://features.cpanel.net/topic/provide-support-for-lets-e... where cpanel folks are interested too
If they were genuinely behind on patching vulnerabilities, I can sort-of understand.

Then again, how hard is it for a company of their size to hire some 1099's for a brief time...
Yes, but expanding Social Security to cover everyone (huge budget increase) is very different from shutting down Social Security and using the savings to pay part of a basic income (budget neutral). Even if the liberals and the libertarians use the same words, they mean different things by them.
The teapots are a nice easter egg! I took a few screenshots: http://i.imgur.com/PEBxHnTm.png
It sounds like you are talking about MotionX [1]

[1]: https://www.motionx.com/
In 83 years it's the first president who wasn't brought by the two mayor parties in the country the PJ or UCR, the first in Argentinian history to be elected in Ballotage (second ballot).

He is an interesting figure if you ask me.

Also is the second time that a woman is a vice-president, and the fourth time a woman is elected in a presidential ticket (Cristina Fernandez de Kirchner, the current president, had 2 terms). So with Gabriela Michetti, it's the third time, consecutively, that in a presidential ticket a woman is chosen by popular vote.
Basically it is all the result of aa long series of shortsighted "business decisions" based on simply doing whatever costs the least or brings the least short-term risk at the given time.
Why isn't OpenBSD more widely used? I only know what I read about it, but:

* If I was building a system where UI and broad hardware and software compatibility weren't an issue (for example, if I were building an appliance or IoT device), an exceptionally secure, stable, reliable, open, well-maintained and well-documented OS would be wonderful.

* If I was building a Unix server with those specs, why not?

* Why aren't Google's, Amazon's, Yahoo's, etc. server farms running on OpenBSD? How about iOS? (Android needs broad hardware compatibility.) Are there essential power or system features that Linux or FreeBSD has and OpenBSD lacks?

As it's not that widely used, I suspect there are considerations or problems I'm overlooking, or maybe the advantages aren't as large as I think. It's hard to believe it's all politics or personality conflicts.
This is fun. Did I miss a link to the app or source code?
I don't think that will ever be possible, barring some sort of quantum memory where reading clobbers data.
If you enjoyed the landing page, you'll love the Mandela quote at http://www.bitwalking.com/about/
What's wrong with that? Species shouldn't exist at the expense of the individuals it comprises.
No. Your highest priority is to reach the product market fit and get real customers. You can always refactor.
Twitter has updated their tweet and follow buttons