skysight-inc/HackerNews huggingface dataset:
> the average java/python/ruby/node.js programmer will never need this information

That's what every kid in school ever says about a subject they don't care about. They're usually proven wrong.

Just in the first few pages you'll find this gem:

This leakage is why a DRAM cell must be constantly refreshed. For
most DRAM chips these days this refresh must happen every 64ms. During
the refresh cycle no access to the memory is possible. For some workloads
this overhead might stall up to 50% of the memory accesses (see [highperfdram]).

You don't think a Java, Python, Ruby, or Node programmer might need to know this at some juncture?

Having a deep understanding of how things work helps you visualize everything going on and see potential problems before they happen. This kind of deep thinking is helpful in all kinds of activities.
The concept of what a CMS is still pretty vague for many in the journalism industry...Nieman Lab recently published a piece [1] about the New York Times first blog (which is now shutting down)...reading it gives you a good sense of how just having a WordPress blog changed the top-down hierarchy of how they did stories and published on the web. Even today, when you read the retrospective, it seems that many of the editors and reporters still don't really know what a blog or CMS is...there's even a couple quotes by an editor who says now that they've moved off of WordPress, they're able to create more "beautiful" articles than ever before.

[1] http://www.niemanlab.org/2015/11/how-one-blog-helped-spark-t...
I'm not sure I'd place much faith in ASLR these days. Bittau's Blind Return Oriented Programming (BROP) http://www.scs.stanford.edu/brop/ makes that only a speedbump, not a real obstacle, for any server that suffers from a stack overflow vulnerability and respawns after a crash. Basically, you can read the return address off the stack a byte at a time by detecting the difference between a crash (you got the overflowed byte wrong) and no-crash (you got the overflowed byte correct). Doesn't take long to recover the return address, and hence find the text location. Their paper is a really fun read!
I've read about the FreeBSD Linux emulation layer, but don't know that much about it. What exactly does it provide besides emulation of Linux system calls? How reliable is it in practice?
> I think we have been arguing at cross-purposes.

It seems that way.

> It seems now that you are arguing that "ISIS's interpretation isn't necessarily invalid just because moderate Muslims say it is".

Essentially, yes. It's hard to say that someone is right in their religious interpretation, based just on how much disagreement there is, but that's not the same as saying all interpretations are equally valid.

If someone claims that Jesus commanded his followers to kill nonbelievers, that's a pretty problematic interpretation of the Bible. On the other hand, if one person says Jesus established the system of popes and another person disagrees, it's really difficult to that one of these interpretations is objectively better, even though the difference in interpretation is pretty significant.

> If that is your point, then I agree with you and I apologize for the misunderstanding.

No apologies necessary. You made a civil response to my comment and (we thought) we disagreed. If only all discussions online were like this. :)
//TODO: fix this thing below here

Been mulling around making a vim plugin like vim-flake to put the todos into the quickfix window on :w
I'm having some difficulty thinking of a scenario where, given the choice, I'd trade off authentication for speed. The information would have to be of so little value that it doesn't matter if the remote party gets what I send or if I get what the remote party sends.
How so? It means you need access to the online account, to the 2FA device, and to both letters to abuse the card.

If the attacker already has access to the online banking account, then he/she can do much worse things anyway.
Is there really much demand for that? If you want an EV cert you're going to be a big business with a lot of employees just to handle that kind of stuff. 2 days really isn't that long - getting internal signoff on the idea of using an EV cert probably takes longer than 2 days.
If you wanna learn about Big Data, you should definitely read this
The enemy of my enemy is apparently my enemy now a days.
"I love the access it gives me to all sorts of information, and how it connects me with people I would have never been able to hear from before. I hate how it also contains spaces for people to easily gather to abuse and harass people." -- ie. the good thing for him is that people he likes are able to find each other, the bad thing is that people he doesn't like are able to find each other. Sounds rather hypocritical to me.
> But there are people (like myself) who can look at the numbers, realize that you are MANY times more likely to die by slipping and falling in your own bathroom

That's another example of a wrong argument often used. All animals (and yes, humans are animals) pay more attention to predators than to random accidents, and there is an evolutionary reason for that.
> That is not the consensus.

That's fair as far as I guess there is no consensus. You posted alot of links that don't really point to any definitive conclusion.

Look at your data. It doesn't correlate with the Index in any way.
The Index had a very pronounce peak in 2008.

This link
> https://research.stlouisfed.org/fred2/series/TCU/

was on a huge downward trend staring in 2007

I agree there is alot of room for interpretation, but I'm very happy to stand behind and put my money behind my assertion that the Baltic Index isn't a useful indicator anymore.

But I do appreciate the opposing view point!
9 Reasons You Should Be Using PyCharm
I use Things for my todo list. Been using it for years and once you get the flow down it's amazing.
You could try being a Yelp for CAs. The exemption for letting other people write their opinions on the internet is pretty ironclad [as long as you honor DMCA notices].
No knowledgeable sources are advising to "just do more cardio" anymore. Science has long marched on past that advice.
Makes sense. Life is thermodynamics, and thermodynamics is statistical physics, and statistical physics is information theory.
Introduction to High Output Management
For anyone who is interested in Linux development, I decided to build this GUI app with `Python gobject` that fetches process-wise bandwidth consumed for each period (such as firefox 10GB, ssh 1GB, etc.) as they show in android. I know nethogs exists for this, but it doesn't save historical data, nor does it have a GUI.

So, I went about building this app with the standard way: of reading into `/proc/net/dev` for overall bandwidth and `/proc/<pid>/net/dev` for process-wise bandwidth.

It was a nasty little surprise for me when I came to know that `/proc/<pid>/net/dev` actually doesn't give me process wise bandwidth, it does the same as the overall `/proc/net/dev` :-(.

As a result, my [project](https://github.com/prahladyeri/netpatrol) is stuck in limbo until I figure out how `nethogs` gets the process-wise bandwidth by going through its overwhelming source-code. I presently don't have the time to do that, but one day, I'll get it!! If anyone can help me with this, they are most welcome!
> a bunch of waffling and trying to dodge the question

Gonna go out on a limb here and assume that, yes, you did a bunch of illegal shit.
Tesla Recalls All 90,000 Model S Cars to Check Seat Belts
Blind Return Oriented Programming (BROP)
Thank you.

I was going to counseling - until I couldn't afford her any longer.

I have children - so they keep me aware, and here.
I use a TODO.md doc in the project root as long as it's <50 lines of todos and issues. You can use `- [ ]` to create checkbox lists in markdown.

For a larger project I use GitHub issues with tags.
I would recommend Jira - get the GreenHopper plugin to make it less "old-fashioned", but it's the right tool for the job. You can customize it if you want to go down that rabbit hole, but the built-in workflows should get you started. Projects, epics and tags should solve the problem of finding issues. Set each client as a project, or more likely as an epic so you can have one view for your developers / designers that splits by client.

Currently using Pivotal Tracker after coming from a Jira shop, and it's awful. Others seem to like it, but it's too simplistic for my taste. Even something as simple as "A blocks B" isn't possible, and seems to be by design.
Loading a TensorFlow graph with the C++ API
We've been using Phabricator[1], a spin-out of Facebook, and love it. It's perfect for technical teams, and usable enough for the rest of the company.

[1] http://phabricator.org/
Has anyone answered the basic question of why anyone would actually use Bitcoin as a medium of exchange when the value of Bitcoin, despite fluctuations, is designed to increase over time?
Definitely start off with a huge preamble about the olden days and document structure and how to report problems. Sheesh
http://doger.io has links to a lot of simple Linux container runners!

I'm working on a simple FreeBSD jail runner: https://github.com/myfreeweb/sandblast The main idea is machine-friendly configuration: your higher level software (PaaS, CI, etc.) produces a JSON config and pipes it to sandblast, which runs a script in the container.
This is 100% not effective anymore. This is just a slightly more malicious version of the the spam bots that post back links in wordpress comments, except in this case they were adding entire html pages to the sites. This is a violation of Google's duplicate content rules and if anything would be viewed negatively by Google.

The efficacy of this hack is nil as the "money domains" that were profiting from these backlinks had little domain authority or relevant traffic according to the author's article.

The only only way that linking strategies are viable anymore are gaining links from domains with authority or huge numbers of links.

Maybe if the hacker would have created tens of thousands of back links from vulnerable fashion blogs (same category of site as the money sites) they would've gotten some SEO juice.
This was ten years ago, I have no idea what it's like in 2015. It's a syscall emulator and a pile of libs from Red Hat. It was reasonably reliable. X font rendering was awful. But then, Linux at the time wasn't much better; Ubuntu had only just started on the process of making the Linux desktop less annoying.
If you wanna prevent brain rot -- in yourself as well as in others -- you gotta stop using inane teaser headlines.
It's one of the most common formats for American university students to live in, especially during first or second year, where a study/tv room, sometimes a kitchen, and typically bathrooms are shared amongst multiple rooms of students. Also the rooms often come pre-furnished with basic furunture: bed, desk, and a dresser.
Which "good people" do they trust?

They trust the idea of a paternalistic authority. They trust the government they want, not the government they have. It's wishful thinking.
Imho Jira is one of the best tools voor large projects.
From brainstorming to development to support.
But maybe it feels too old because it can be difficult to setup?
Yup, seconding this. You can't implement a solution without thoroughly understanding what the problem is. Also, be sure you're looping in everyone who would be working with the new system at some point to get their thoughts and feedback- after all, if they have to use the system every day you want to make sure it actually helps instead of hinders them!
Ah okay, sorry. Now I think its clear that I wasn't talking about white people doing it, yeah?
lucky guy! :) You should buy it no matter what ;)
Is python3 meta programming features supported?
Foundation the most advanced responsive front-end frameworks in the world
That would be a clever workaround. I'll consider that. :)
You're assuming that the probability of interception is 100% In reality, the probability of interception is miniscule, but the probability of speed is 100%.
Weren't speed differences shown to be negligible?

Unless someone care about a single extra round-trip timing, e.g. extra 10-300ms with 300 being quite a stretch? I'm sure it doesn't matter if a blog page opens in 40ms or 55ms - a reader won't tell the difference.
>Criminals do much more actual harm to society, and yet no is calling for local police to have access to everyone's email and phone records.

They are calling for mass video surveillance of everyone's encounters with police.
It is unique because his parents over-stayed a visa and not jump a fence. It is unique because the author actively tried to rectify his situation instead of just expecting to be handed a citizenship.
Also, AFAIK, a lot more people are opposed to giving citizenship to every illegal immigrant than to giving it to people who qualify for the DREAMer act.
Apple granted patent for fall-proof iPhone's
Different axis aka not security. The security is much better. But it's slow and inconvenient.
> I really doubt there's any reason to use zmodem over SSH other than convenience if you happen to know it better than the alternatives.

You might not have encountered it.

Here's the use case: the ssh session terminates at a bastion host running a restricted sshd that drops port forwards and punts the connection to an internal landing host which is not permitted to ssh out.

Using an in-band file transfer protocol is incredibly useful.
This is all good and well, but if we take a step back it pretty much means that anybody can get a DV certificate without any verification, which means CAs are useless, which means that DV certificate offer no more guarantees about anything than self-signed certificates.

Which is an excellent thing: maybe we'll finally be able to just use self-signed certificates ? And ask CAs for something where they actually can provide value, ie EV certificates, for as long as we're okay to stay with this model ?

This should be a call to browser vendors: when this is more widespread, accept self-signed certificates as if they were DV certificates !
The decision and messaging both seem like the right way to deal with an issue with this, with respect to the consumer, the market, and the public at large.
We hear you.

Let me see if I'm understanding the criticism: when creating a consumer, the sync point of a new consumer really should start from the very beginning of the topic, at a predictable explicit start point, rather than at the current end of the topic. This makes a lot of sense, and yes, there is a disconnect between the models. We think the capabilities you are talking about are great and those use cases are important. All I can say is keep your eyes open.

We went with defaults from Google's internal use of Pub/Sub, which is older than the public release of Kinesis and Kafka. Internal use involves an approach where topics and consumers are very long-lived. Topics are high throughput, in terms of bytes published per unit time. Retaining all messages and starting consumers from the very beginning wasn't a sensible default; our focus was more centered on making sure that, once topics and consumers were set up, consumers could keep up over time.

One example use case to help illustrate this thinking is doing real-time sentiment analysis on tweets: https://www.youtube.com/watch?v=O3mfuc-syTI

In the work described by that video, they were essentially publishing tweets in real time into a Cloud Pub/Sub topic, thus making an "all tweets on Twitter in realtime" topic. This is a great example of a topic where producers and consumers are completely decoupled from each other. It doesn't necessarily make sense to retain all tweets forever by default (although there certainly are use cases for that). There are plenty of use cases where a consumer might want to say "ok, please start retaining all tweets made from here on out" rather than starting from a specific tweet.
There are all kinds of ideologies on the internet; the outrage cycle is annoying but I'm not sure it's consequential -- after all, it only matters for those who care about the opinion of the currently outraged or are otherwise affected by it. Feeling of not fitting in your environment is nothing new; and the most effective solution to that -- changing your environment to one that suits you more -- is much easier online than offline. So if anything, internet has improved things in this regard.
Ah that makes sense. Still, I stand by my shock. Going to kale before spinach is just nuts (barring pressure from a doctor who doesn't care about your culinary experiences).
Error Message: Google Research Director Peter Norvig on Being Wrong
Ruby 3x3: Ruby 3 will be 3 times faster
"Would benefit, eventually, at some point when butting up against resource limitations if they're advanced and do this for a while and no one's around to point this out of them on code review" != "everyone needs to know"
marketing ploy
I have a few blog posts, although they are obviously more terse than textbooks in some respects. In order:

http://jeremykun.wordpress.com/2012/08/26/metric-spaces-a-pr...

http://jeremykun.wordpress.com/2012/11/04/topological-spaces...

http://jeremykun.wordpress.com/2012/11/11/constructing-topol...

http://jeremykun.com/2013/01/12/the-fundamental-group-a-prim...
Think you know sports? Prove it Pick winning teams, Win REAL cash
It is not that 500 steps is too low that concerns me, it is not showing the posteriors for the parameters used (which it sounds like may simply be the custom in this area). I would think if people had such trouble using mcmc that common practice would be publishing diagnostic charts to reassure each other.
Your comment might be a little bit too subtle for most people, but quite amusing.
Things is the perfect midpoint between a simple todo list and a complex, overwhelming GTD-like system. You can easily use it however you want, and the iPhone syncing is great.
Humanity and morality aside, maybe politicians are also respoding rationally when encouraging punitive millitary interventions. Looking "tough" does more for re-election than trying to brew long term solutions. It's an unfortunate coincidence of inventives.
> She worked directly for Amazon? That's the only situation I'm referencing.

No, I was referring to a similar but different situation. The point was that the odds of getting any script picked up was near zero unless you were in the industry. A friend of my daughter's got one picked up but he's been working in the industry in various capacities for ten years.
In other news, gmail sees sudden uptick in number of users.
Less cynical than those things (you're taking about CMU here, right?)

They're not, like, supervillains.
So

* you lose the psuedo-anonymity of Bitcoin (the card has your name on it).
* It's a "debit" card, so it also has none of the protection of a normal credit card (eg: if someone steals my card or over-charges or whatever, my actual money is not touched).
* It's not even real Bitcoin, it requires a Coinbase account (where, from what I understand, they manage your private key, so really own your bitcoins)

What exactly is the target market for this? The people who have no credit cards, the bulk of their cash in bitcoin, and also don't care about privacy?

I'm not into bitcoin, but even so, I am just not seeing the appeal.
That PF code is from OpenBSD 4.5, released in May 2009. I wonder what fixes and improvements are missing.
Except that even with commodities getting cut in half or losing up to like 3/4 of their value, we are still in a slightly inflation positive environment. What does that tell you about the state of the underlying economy?

Furthermore, you're making the classical economic fallacy of reasoning from a price shift. Oftentimes, from experience, commodity shipping volume increases in times of turbulence, as there are more arbitrage opportunities from the more volatile diffs between grades.
Refugee resettlement: long term policy versus immediate rescue
They might really tie together the fixpoint loop if they turn HN into some kind of post-StackOverflow type reputation forum for hackers and businesspeople.

Investors need reputable hunches, companies need insights and clever people, and commenters love to gain social karma status especially if it might land them better jobs or chances to talk with interesting/rich/powerful people.

Discussion is fundamental to the whole ecosystem. HN is a primitive weekend hack yet still pretty valuable.
Neat! I had hoped such might be the case, but wasn't sure -- it's been a while since I played with LT spice. I'll have to take some recordings of my guitars to use in simulations the next time the pedal hacking bug bites.
We all know that exploit mitigations aren't perfect. But to not even bother using them... that's just ridiculous. There are plenty of scenarios where ASLR helps prevent exploitation. And the fact that FreeBSD doesn't even have it is pretty damning.
Unfortunately, both. Because that is how financial laws work.
VMware's Diane Greene will help Google capitalize on a massive cloud opportunity
One reason for restructuring Google into Alphabet was to recruit top managers to run the company's many different businesses. Likewise, Google under Pichai has a broad span of businesses and technologies, impossible for any single person to lead. Greene's appointment and new cloud organization seem to be intended to bring focus to growing the cloud business under a proven leader, in the same way that Alphabet CEO Larry Page intended when he reorganized the company.
Is HN becoming "spammy"? In this case, would it hurt to include the name of the city in the title?
Don't lose the best game ever just because of that :)
There's always been the third kind, those that would take action to change their surroundings -- either directly, or by surrounding themselves with like-minded people. At least the second method seems to have become much easier with the advent of the internet (first probably too, but that's a whole other subject).
I proposed this in a Smalltalk newsgroup over a decade ago. The reaction? I was ridiculed.

Imports naming specific versions would also allow better integration of code/build into a version control system. Actually, the entire OS should be built with version control in mind from the ground up.
The issue was that in the past JDK (offered by Sun and Oracle) had no binaries available for FreeBSD (I believe the source was available but was not the same that Sun JDK was built from). If you wanted to run it, you would have to download the Linux version and run it in compatibility mode.

Later FreeBSD get some kind of deal with Sun to provide native Sun JDK for FreeBSD and made them available through http://www.freebsd.org (you can check web archive to see older versions).

Nowadays starting since JDK 7, OpenJDK supposed to be fully compatible with OracleJDK, so it should no longer be a problem anymore.
Summary : we would like Ruby 3 to be 3 times faster than Ruby 2, but we really don't know if we will be able to do it or if that was just a clickbait.
Samsung gets an official release on the Galaxy J3(6)
If this actually relies on 0-conf transactions and assuming that you have control over your private key in coinbase, I wonder how replace-by-fee can impact this.
This is a similar method to what I use as well.

I even wrote a Vim syntax plugin for the todo files: https://github.com/tomswartz07/vim-todo
Validate your ideas fast and free
I think it is very clear that he means the cited article. The post title should include the year (2007) since technology has changed somewhat in the 8 years since.
It's not unprecedented, the previous time this happened a global crisis was about to get underway. This is what makes (or rather, maybe made) this particular index so interesting, the fact that it doesn't lag but gave a warning ahead of time. Of course once that happens everybody will adjust their models so this won't repeat. But the previous recorded drop in this particular shipping index was a harbinger of some pretty bad news.