skysight-inc/HackerNews huggingface dataset:
I think they have some bugs: it also claims it's faster to drive from Milwaukee, WI to Lansing, MI than the adjacent Madison, WI. Furthermore, there is a section of I90, a Madison ring road, which Google Maps claims is 15 minutes from Madison city center and 5+ hours from Lansing, while this map claims it's closer to Lansing. There are similar tendrils of I196 through Holland, MI and I to Grand Rapids, MI that go to Madison (5+ hours) instead of Lansing (1-2 hours).

Or maybe we're reading the map wrong? You can get to each capital any number of potentially shorter ways, but almost any location in Michigan routed to Madison will take 196, while only a few from that spot going Lansing will take that road...
Hold on there cowboy, the Cray 2 did 1.9 GFLops [1] but todays phones peak at 0.3 GFlops[2].

[1] https://en.m.wikipedia.org/wiki/Cray-2
[2] http://www.greenecomputing.com/apps/linpack/linpack-top-10/
Go GC: Prioritizing Low Latency and Simplicity
> And VW suspended nine middle managers. I think it's less about blaming the engineers and more about deflecting blame away from senior management.

Well, they also had two CEOs resign over this, one even refusing to take any golden parachute he might have gotten otherwise.

It’s more the board that’s scared right now...
> The real reason findstr is not improved is because Bob left the company and probably took the source code with him.

No that's not true. That would mean they were doing a special binary drop into Windows just for that one tool. That would be a major no-no, because it wouldn't be serviceable if there was, say, a security bug in it, or you had to localize it to a new language.

The real reason it hasn't been updated is that if anyone ever suggested it, and it made it into milestone planning for that team, nobody felt passionate enough to argue it above the cut line. Besides, PowerShell was on the horizon, and it was going to fix everything.
Very few people really think of themselves as evil.

But in my worldview most people (including engineers) cheat a little bit and then rationalize it so they don't have to feel bad about themselves. Big corporations and complex economical systems lend themselves very well for rationalizing your part in something evil away, especially for upper management.

Watch this video. It changed my view on the world:
https://www.youtube.com/watch?v=XBmJay_qdNc

p.s. It has been shown that the psychological profile of top-criminals and CEO's are remarkably alike.
[Hack] Enrich its prospect list thanks to Excel (French or English)
> loads of new restaurants

Who is going to staff those restaurants (and other low-wage services) when the housing prices are so high that it isn't realistically possible to find a rent (forget a mortgage) low enough to be affordable for someone making those low wages?

This is made worse in places like south-bay/SF area where the private busing and 2nd/"weekend" apartments further distort local taxing/etc and drive prices up even further.

> I don't know how many people have been forced out due to the gentrification.

That depends on a lot, but when money is involved, there are lots of creative ways people can be forced out. Zoning laws and other "fees" are common. If renting is involved, buying out the landlord and raising the rates on the tenants (sometimes to unreasonable levels designed to not be paid) is a popular move.

> Generally, this seems to me like a great example of gentrification.

From your description, that sounds like an example of how a town or city should be maintained. There is a difference between rising housing prices from normal inflation and gentrification.
It clearly says "Julia the gorilla," not "Julia the programming language," or "Julia programming." :-P
Sounds like BRAC is doing very promising work indeed. I wonder why I never heard of them before.
Your golf was a non-turbo petrol right? The Tiguan is a TSI which means a turbocharger and a supercharger :)
Is there a reasonable hosted option for Perforce? A quick search turned up Assembla[1]; I haven't heard of them, so I don't know how reputable they are.

GitHub has just become so ubiquitous, you start to forget other source control systems are out there. If I wasn't still using SVN at work, I'd be in git all the time.

[1] https://www.assembla.com/repositories/perforce
Thanks for the link!

I will question the relevance of the first half of the talk (about CAs and SSL) in 2015, with TLS and the CA/B Forum.

But his main thesis about trust agility is quite spot on. I'd never considered it before, and am going to look into Convergence and TACK. He raises a fantastic question - the duration of trust is a real concern.
I would blame an engineer, but those who designed and ran emission tests.

US suddenly discovers that a few million imported cars do not meet their requirements, despite passing all tests and paperwork. Good way to collect a few billions on fines and damage competition.

If EU would enforce their laws on US products similar way, there would be an economical war.
You're correct. Insurance companies have several metrics called loss ratios. One of these is called the combined ratio and is defined as the sum of incurred losses and operating expenses measured as a percentage of earned premium.

A combined ratio of 100 means you've paid out $1.00 in claims and expenses for every $1.00 brought in as premium. Sounds bad but due to investments made an insurance company can still be profitable with a combined ratio of 100 or over.
That doesn't make the question less [or more] intellectually interesting. It doesn't excuse anyone's behavior beyond flags, downvotes, and the range of constructive behavior bounded by HN guidelines.
According to the official description of MTProto the padding length is between 0 and 120 bits, which means that in the best case scenario the above attack succeeds with probability 2⁻⁸. However experimental validation shows
that this is not the case and the length of the padding is in fact between 0 and 96 bits (this is due to the way the objects are serialized in Java). So we conclude that in the best case this attack succeeds with probability 2⁻³²...

With a bit more knowledge about Java object serialization, could one be a bit more clever about picking the random block?
Well yes, I live in Venezuela.

Thank socialism for that.
You're operating under the presumption that rhaps0dy is not an AI.
> You make a compelling argument based on your presuppositions.

You are confusing presupposition with lack thereof.

> But my argument still holds up due to my personal presupposition [...]

Yes, of course your argument holds up if you presuppose that it holds up, big deal. Except that just claiming something is true and then deducing from that that it is true isn't really an argument, it's still just an unsubstantiated claim.

I, for example, presuppose that at the center of the sun, there is a big oven with lots of bread in it. Therefore, there is a big oven with lots of bread in it at the center of the sun. You might have different presuppositions, but this argument still holds up due to my personal presupposition that there is a big oven with lots of bread in it at the center of the sun.

Also, that you are not convinced of the claim that there is a big oven with lots of bread in it at the center of the sun (I suppose you are not?) is just because of your presuppositions. If you didn't presuppose that you weren't convinced, you would now have been convinced by my argument.
FossaMail is an Open Source, Mozilla Thunderbird-based mail, news and chat client for Windows and Linux, brought to you by the Pale Moon developers (and therefore not affiliated with the Mozilla Corporation). It is an alternative version of the Mozilla Thunderbird mail&news client, and based on the Pale Moon browser core.

http://www.fossamail.org/
I thought it might be a clever analogy or something like that :)
Eh, one of those was a bonus in the mandatory Missouri concealed carry training class I took (taught by current duty local police officers in the local college's police training academy), and that you will have to use lethal force at some point is vastly outweighed by all the times you might but cannot legally and morally use it.

In none of the scenarios was it clear at the beginning that you'd need to fire your weapon at some point, and, hmmm, all that I recall were in defense of a 3rd party on the scene. Although I'm sure there are ones where you personally are in simulated danger.
>I'd fear what that guy would be like after 40 years

Curious, what you imply by that. I have read about the skin (mostly the face) of runners not so great, because of exposure to so much weather. Did you imply something along these lines or something else?
My strange, unexpected love affair with delivering food for DoorDash
Okay, go write a strongly worded letter to twitter explaining that they're not a business. There's a difference between no product and imperfect product / market fit.
LinkedIn for Lead Generation
If a founder works 10k-15k/hrs on a unicorn over 5 years its like 15k/hr for every hour they spend on it.
"Then Mr. Burris’s lawyer asked — twice — whether “someone at JPMorgan” had written them. Ms. Kazmi testified, “absolutely not.”"

...

"And, with respect to Ms. Kazmi’s testimony that no one at JPMorgan had drafted the letters, she “answered truthfully based on what she knew — she did not realize that anyone had provided the customer with the courtesy of typing up a verbal complaint or issue,” Ms. Wexler said."

Absolutely is a definitive. It means you DO know.
Cryptocurrency Frauds Or: How I Learned to Stop Worrying and Invest Smarter
40x the amounts permitted, so 4000%.
In a similar vein, I highly recommend Discussion of the Method by Billy Vaughn Koen. It's a philosophy of engineering that resolves many of the unanswered questions you'll have after reading Feyerabend, and also gives an overview of the field of philosophy of science along the way.
Deep Neural Network that learns algorithms
youtube: https://www.youtube.com/watch?v=GVe6kfJnRAw

paper: http://arxiv.org/abs/1511.07275

code: https://github.com/wojzaremba/algorithm-learning
Drove through Allentown a few times. Not sure where the "nice part of town" is, but Allentown needs some gentrification. Rows and rows of abandoned houses.
What would it take for you to leave your job and cofound a start up?
Rust and Servo are easily the most important things they're working on IMHO. And WebAssembly, which combined with Servo I hope will have a big impact on web UI development and performance.
> Does society prefer Snapchat or a cure for cancer?

I generally share your concerns, but oncology and the market for donations to cancer-focused charities are surely bigger than Snapchat.

I'm not sure counting unicorns is a good heuristic for importance.
That would push spreads apart a bit (increasing the costs of trading for everyone) but it's still clear that someone would be need to making markets. And it would still be cheaper to have computers do this instead of humans.
' I think a significant amount of money is going into advertising, pointless startups, entertainment and social media.'
My suspicion is that a lot of it is going into housing, driving up the costs for home buyers with no productive benefit for the economy.
I don't understand what these people are complaining about. I walk across Waterloo Bridge twice a day, and it's the highlight of my commute. The view east down the river is stunning, and there are always people admiring it. I don't think London has ever looked better.
Also keep in mind that the ships are effectively in use and engines running 100% of the time. While car engines spend most of their lives turned off
It's not a theoretical attack.

https://news.ycombinator.com/item?id=10713064
Don't forget brainpickings' best-of: https://www.brainpickings.org/tag/best-of/
Using jemalloc to get to the bottom of a memory leak
Please point me towards the Terms of Service that state I cannot ask someone their gender.

I'm tired of you following me around, you obviously want me banned, just do it already.
Репортаж с репетиций четвертифинала шоу ГОЛОС 4 » 4 –  Voice 1TV.RU
32 points, 35 minutes ago? Is this a voting ring?

Edit: As mentioned below, also with 0 comments at the time (this was the first comment)
Online discount brokers like Etrade, Schwab, Ameritrade, etc are about as DIY as it gets. Load up funds from your bank account and pick your stocks!

Notably, Robinhood is a new startup that doesn't charge any fees and has nice mobile apps: https://robinhood.com/
You got something here
I can't find any official statements by WA/FB that WhatsApp uses ETE.

Do you have further sources aside from [1]?

[1] http://www.wired.com/2014/11/whatsapp-encrypted-messaging/
I would recommend BetterExplained, there you can find many concepts explained in layman's terms: http://betterexplained.com/
perhaps you'd care to explain it then? I see nothing wrong with an honest question.
RAILS and DOCKER and VAGRANT and TRAVISCI IN DEVELOPMENT
I already print the address and get a mail envelope
Not common to see the top story on HN have 0 comments, as it did when I loaded the page ...
I know several local bankers who are retiring early because its too hard to make loans. They are sitting on tons of cash, but there are too many regulatory hurdles to lend the money. Loans which would have made total sense 20 years ago are no longer feasible. Many of our small businesses in this country are dying on the vine.
> But in my worldview most people (including engineers) cheat a little bit and then rationalize it so they don't have to feel bad about themselves.

So, if we assume that is 100% accurate then maybe a company the size of VW should have a department that checks up on these sneaky cheating engineers to make sure they don't expose the company to liability.

The whole idea is that the company avoids - given the size of the penalties involved - to be caught cheating, especially not at this scale.

Then there is the matter that the ethical rules for engineers specifically state that an engineer will never assist or cause a company they work for to break the law. (For some this sort of an oath may hold more strength than for others, but it must have been very clear to the people involved they were doing this to break the law and they would have definitely wanted at a minimum indemnification from higher ups about the possible consequences of this if they didn't actually blew the whistle internally.)

This is the sort of thing that Germans tend to be big on and it is one of the reasons 'made in Germany' was seen as a source of trust and quality.

VW management is throwing all these values under the bus as if 60 years of brand creation are utterly worthless.
The rules say you can't use a defeat device and operate differently during the test.
You print the address and then an envelope arrives? Sorry, I'm not following how this relates to the voting ring
Honestly not sure. I've never had a post rise this quickly, though it's definitely fun to watch! Here's a screenshot of where people are visiting from: https://i.imgur.com/Of5xKOk.png
> If you don't like that, then use a regular bank and get a regular couple of percent interest.

It's not that simple when you have retail banks and investment banks all tangled up.
I agree, especially with the tremendous amount of votes... Usually for the first 30 minutes or so you'll be lucky to get a handful of votes, which rapidly accelerates your post.
Other manufacturers don't have 400% better engineers, the difference is other manufacturers didn't globally bet on diesel.

The US has very, very stringent NOx regulations, much more so than Europe (VW's cheating was in fact discovered through european clean diesel advocates pushing for tighter US-style regulations): EPA Tier 2 / Bin 5 has a 0.043g/km limit whereas EURO5 is 0.18g/km and the new (2014) EURO6 standard lowers that to 0.08g/km (still twice EPA)[0].

Diesel has plenty of advantages but is a big producer of NOx (compared to gasoline) because NOx is formed at high pressures and temperatures, and gasoline engines have much, much lower pressure and temperatures than diesel[1]. Also importantly, increasing diesel engine efficiency runs them hotter, which increases NOx production.

VW bet on a all-diesel strategy worldwide, and that included a "clean diesel" push in the US.

[0] for what it's worth, VW engines don't pass EURO5 either (in fact they don't even pass EURO3, the first EURO standard including NOx) which is why they're also in the shit EU-side, just to a way lower extent than in the US (their engines exceed EURO5 limits by a single-digit factor versus double-digit for EPA limits)

[1] EURO standards reflect this (though whether they should is debatable), EURO5 has a 0.18g/km NOx limit on diesel engines but 0.060 on gasoline
Theoretical attacks have a way of turning into weaponized exploits.

For example, check out https://www.openssl.org/~bodo/tls-cbc.txt. This is a document published by Bodo Moeller in the early 2000s that details multiple theoretical weaknesses in the CBC mode used in TLS. Read it top to bottom and see how many practical attacks on TLS you can count.
Really enjoying the graphics on this page!
This is awesome in every way. Talk about a fantastic project
The submitting account has other stories which didn't earn many points, FWIW. But I agree that this is.. silly and IMHO not deserving of #1 spot on HN, there are some serious topics being discussed!
Great. It's 20 years since I opened an Amiga magazine. Hopefully there's a new version of AMOS.
If I want to just buy a load of different startup/saas/tech stickers, is there a place I can do that?
I don't buy this from VW for a second. I am not sure what the work environment is in Europe but in all the corporate places I have written code for in US if I pulled a stunt like this with no backing from managers the best I could hope for is getting yelled at. Most places would have fired me on the spot. The possibility of this being a rogue engineer is extremely remote. This screams management cover-up.
It's not about 5 year return, it's about the fact that the potential cancer cure simply has low returns and huge risks. People are absolutely willing to make long term bets (e.g. snapchat, which has negligible revenue right now, and is entirely just hope for the future), they just need to be good bets.

Molecular targets are getting harder to find. Getting a drug through the FDA is insanely difficult, costs huge amounts of money, and often fails. Further, there is significant political risk once you get it through - very few countries will pay full price for your drug (mostly just the US), and who knows where the US is going?

Pharma is both a scientific and a regulatory challenge - making money involves the stars aligning.

If you want more cancer cures, make it easier to become very rich by selling them.
Right, but consider the impact if there was a crowd sourced summary on Facebook (for example)

"this jaw dropping thing that happened will make you weep for humanity" `baby drops ice cream, dog eats it`

"Carrie Fisher destroys good morning America" `she throws out a few lighthearted quips, has a one-liner about jabba`

I think it really becomes effective on video content with extreme linkbait.

Personally, (and as a card-carrying crochety old man) I don't follow those links on principle. I'm carrying on my own little "boycott of one".

By instituting platform change though, to solve for linkbait inline (not requiring a page load to comments) would change the value proposition of headlines and I think it would be more likely to reward for quality content.

A TL;DR summary is not the same as "top comment" and TC is not always a TLDR ... One line, under the headline, crowd sourced and voted. I think it could fundamentally change behavior, and if the platform doing it was sufficiently large, the composition of the internet.
Still no Postgres :(
> Even the closed source WhatsApp (uses ETE from the Signal guys) and iMessage are arguably less likely to contain cryptographic flaws than Telegram

Even though you used the words "arguably less likely" to soften your statement, there's no way to check what WhatsApp or iMessage are doing because they're not open source. So even if security researchers want to look at the code or build their own clients, it's not possible. Reverse engineering is possible, but is tedious compared to having the source code. At least the Telegram client code is open source to support examining it.

That said, the criticism of Telegram for using home brewed encryption is appropriate and needs to be mentioned often (hopefully Telegram will change the protocol). Even the authors of this paper state:

> The take-home message (once again) is that well-studied, provably secure encryption schemes that achieve strong definitions of security (e.g., authenticated-encryption) are to be preferred to home-brewed encryption schemes.
I wonder if they'd honor the deal if I sent them a letter internationally...with an Australian 50¢ piece
I too wrote a ransomware, Haha XD
By the way, as a reaction to this issue, a german motor magazine has measured real life compliance to the Euro-6 norm for a couple of popular cars: VW Golf, Opel, Audi, Mercedes c-class, Fiat 500 etc.
All, and I mean ALL of them emit 2-8 times as much as allowed by Euro 6. The heavier the car, the worse the result. All SUVs like the Audi Q3 or BMW Xx have terrible measurements. The best - was the VW Golf with the 2 litre engine. The worst was the Audi Q3, which emits 5 times as much as the Euro-5 norm (which it was adapted to) and thus 10 times as much as Euro-6. Shame.
Agreed - what wonderful animations, especially the one travelling down fleet street.
Hardly limited to criminals. "I never agreed to the social contract" is a pretty frequent sentiment on HN, too.
There's "no way" to check what iMessage is doing?
I suspect it is a matter of time now before someone leaks an email to the press indicating that the previous CEO did know about this (they'll be thrown under the bus), and the board will then try to wash their hands of it.

It's a classic fall-back action, first sacrifice some lieutenants, General admits ignorance but admits to no wrongdoing and is pensioned off.

If the bad weather blows over that's where the story ends. But if it doesn't then sooner or later the eyes will focus on the General again, what he knew and when he knew it and then the inquiry will begin in earnest.

There hasn't been anything surprising in this whole affair to date.
Hm, not sure I agree with that second part. HN can find a number of non-serious things interesting, and I think this is at least a little interesting. The issue is, was it really THAT interesting?
> Lie. In my world, this is commonly referred to as an "option".

It seems a bit unfair to call Chen a liar on this point since the very same paragraph you quoted from ends like this: "A change in the regular expression syntax would require a new switch to opt into the new behavior."

(I do think it's pretty weird that he portrays this as a major problem. I suppose the point is that if you care about backwards compatibility your options aren't "crappy old RE syntax" and "nice new RE syntax", they're "crappy old RE syntax" and "crappy old RE syntax as default, and nice new RE syntax with an option" and that's not so appealing because (1) now maybe your program needs two regexp engines in it and (2) even a trivial inconvenience like remembering to add the option is something of a nuisance.)
Saying that people look out for their own interests and are not always competent is one of the most salient and truthful properties of the human world.
This one was turned into a further-weaponized attack, published in the author's masters thesis, which is in the bibliography for the paper.

I don't know why this paper was published independently, as it's a building block for the other attack.
They are advertising for a while to offer a hosted service themselves: https://www.perforce.com/helix-ondemand

I did not try this though.
Addressing climate change is another obvious thing that seems to fare very badly in the current resource allocation regime.