skysight-inc/HackerNews huggingface dataset:
"State-sponsored actors" sounds like over-specification. If Yahoo detects a "sophisticated attack" from a lone jerk with a computer, do they not notify affected users of defensive actions to take?

It's no doubt interesting to know that your account is being targeted by your own or some other government, but identification seems secondary to detection and response.
The article does.
Search up to 10K addresses with free holiday batch geocoding service
What makes a PM a great PM?
Sure, take a look at the syllabus here:
https://crypto.stanford.edu/cs251/syllabus.html

(all are hyperlinked)
Well, both are pretty great languages (not without issues, but what is?), and there are a lot of similarities -- "more than one way to do it" of course, and CRAN and CPAN have much in common (I do wish CRAN took a few lessons from CPAN though).
“We are left with no choice but to shut down Flytenow”
How many drug overdoses are caused because of bad quality control that would be eliminated (or mostly eliminated) by legalization and regulation.

IOW, how many people overdose because they get a batch of 90% pure heroin when they are used to 25% pure? This probably would be solved if they were not getting the drugs illegally.
Absolutely. Actually, the startup scene adopting the latest technology du jour (J2EE, Rails, Clojure, Node, etc) aside, there's no sign of it stopping down.
AKA the "Darwin Award"
This gives me so much hope that we might begin to grow better mobile user-agents.

I know FF has had extensions ongoingly, but this really feels like it can challenge mobile Chrome's unmoving rejection of extensions.
I want one of these companies to define state-sponsored actors?

It's great if one is a dissenter in Egypt and the authorities there go after their Yahoo! account but what about a US citizen's account being attacked by the FBI or NSA?
It's funny that you mention Atlassian. We tried to get Jira for a team I was working on a few years back and were told no by the IT department. They said we should use an internal system that someone had hacked together in a satellite office. Then they tried to charge us $100k for that.

Deals at big companies always have more moving parts than just plopping down a credit card. There's some manager who wants to put people under him to manage the system. Someone else who wants to boost their status by pumping up their budget, etc...
No Operating System can be that compelling to prompt such a dramatic shift in four years. People aren't really compelled by such things.
Road to Growth 4 – Keen IO's Kyle Wild on selling into your dev community
Why December Has the Longest Days [video]
Interactive Storytelling – Codrops
Bezos proves he doesn't get rockets
That was pretty much the Yammer sales strategy, as I observed it. Infiltrate the customer by making it free and easy to sign up an organization, build a user base organically, without having to involve those controlling the purse-strings. Eventually, there's enough people using it that compliance and security becomes an issue, and the business sort of has to pay for the enterprise support to CYA.
Say what you will about China and its pollution, it's an interesting attempt at a solution.[1] Could you imagine something like that implemented easily in the US before caught within lawyer-string nets of liability?

China has many problems, but many HN readers bashing China have probably never set foot there and are formulating their understanding based off of western media and the socioeconomic + cultural dynamics of Chinese diaspora communities in the west (working in low-paying jobs, less seen as literary/communicative thanks to language barriers).

I'm not Chinese nor do I have a particular stake, but I was there for three weeks this summer and was overwhelmed by a kind of social optimism - the shared assumption that services are getting better, progress will happen, and a relentless cycle of innovation (in China's own way; see 'Shanzai').

All this is to say that - pollution sucks. China needs to get its shit together and pass clean air laws. But these devices are emblematic of a very Chinese mode of progress and innovation that I'm not quite describing properly.

[1] Yes, I know the technology is not completely new, and controlling particulates by deploying other media is common - when polishing/concrete, for example.
I rarely work with cstrings directly, and even then I don't tend to use them (`strcat`/`strncat`) myself; I tend to use `memcpy`/`memmove` instead. However, I'm curious why do you say they shouldn't be used? Is there any other reason, other than the performance overhead?
Thanks!

This began with my desire to create a simple, responsive, nicely designed résumé for myself that is completely focused on projects, skills, and searchability. I started by looking at templates and other pre-built options, but they all seemed too busy, too noisy, or somehow not quite right.

As I started designing what I thought the ideal résumé would be for me, I decided that a lot of others might be in a similar position and would possibly find a tool like this useful. So what started as a résumé for myself turned into a full-fledged side project: a résumé optimized for all digital makers.

I've also been doing research on the hiring process, and the overarching importance of results and execution is a theme that comes up again and again from people who make those decisions. So why not give them exactly what they're looking for?

It's still very much an MVP, but I have a lot of ideas for interesting directions to go in if it catches on. I'd love to get feedback from anyone who wants to give it a try.
It's pretty creepy that I can randomly enter email adresses and get first and last names... !
https://en.wikipedia.org/wiki/Cybersecurity_Information_Shar...

This passed along with the budget bill at the end of last week. It establishes a system whereby the US defense department shares with corporations their signals for detecting state-sponsored attacks, and companies are allowed to opt in to sharing anonymized attack information with the DoD
Vagrant is a way of setting up virtual machines. For example I am not using docker (yet, it's in progress) but I use Vagrant on my Mac to run an Ubuntu vm for my dev environment. I even use it on my Ubuntu desktop which is running a different version of Ubuntu. I don't have to pollute my mac by installing a bunch of stuff and I get to work in an environment that is more or less identical to my deployment server. You don't use Vagrant for deployment, its just a tool for making sure that everyone on the team is using the same environment. Vagrant just makes it very easy to set up because you have a "Vagrant file" that gets checked into the repo which will automatically set up the vm using shell scripts, Puppet, Chef, etc.

Docker on the other hand is a tool that assists in isolating Linux processes. You might have many VMs running in a private cloud and process isolation makes it simpler and easier to more efficiently utilize computing resources.
Very cool none the less. At night, when the water is black it does look a bit like it is floating.
NFL reportedly pulls funding for Boston University concussion study
Doesn't India have a generally warmer climate than China, as in no need to burn fossil fuels to keep warm?
> Hi pcwalton, I just wish Servo had clearer goals.

What is not clear about "parallelize all parts of the pipeline", "get rendering GPU bound", and "write a memory safe browser"?

> Flexbox is a great example. We were told the problems with DOM updates was caused by the old layouts and things like floats.

Nobody said that.

> So Flexbox was supposed to fix those problems.

No, it wasn't.

> I find myself frustrated that now 8 years after the iPhone the web is still incapable of so many things.

Me too.

> Here's a very simple goal: A swipeable sidebar.

You can do it already at 60 FPS. Make an overflow:scroll div and allow the user to scroll it into view. Or even just do it manually with the DOM. It will easily be 60 FPS in existing engines if you animate transforms.

> That's it. Make that happen. Do whatever it takes. Create another new layout if necessary. Create a new touch spec that's faster, if necessary. Whatever. it. takes. And then when the work is done you can point to this new widget and say that the initiative paid off.

There's nothing to do here, as you've described it.

But your comment is actually illustrative of the real problem (at least, what I think it is). We have a ton of ways to do things on the Web. Some of them are fast, and some of them are not. Web developers don't realize what the fast paths are (which is not entirely their fault). I think that all of the paths should be fast, and I think that many of Servo's technologies (such as WebRender) go a long way toward making that happen.

What's frustrating is comments like yours that describe things that the Web can clearly already do and blame browsers for supposedly being unable to do simple things. I used to think the way you did—that the Web is incapable of rendering a 60 FPS scrollable view—and then quickly discovered that, if optimized properly, there is actually no problem. What I think the problem with Web slowness is that Web authors don't know what the fast paths are, and they use things like jQuery.animate() that hit all the slow paths. That is a problem that I think we are well equipped to solve in Servo due to things like parallel style recalculation, off main thread layout, and WebRender, but it's a lot more nuanced than what you describe.
The link appears dead with an access denied error, does anyone have a mirror?
I mostly run my laptop on the power grid and many other people, too. So your argument only makes sense for people that run their laptop mostly on battery

The much worse problem is that many laptops have non-decent cooling - so if you really put them under hard workload for a longer time, you will at least hear that by the loud annoying fan or the processor will reduce its clock frequency making the laptop slower.
I'm guessing you mean this in jest, but I believe it is literally true.

Temporary code is usually poorly documented, poorly designed, deeply coupled, ugly code. Those are all the exact qualities that make it harder to change than high quality code.

Unless you work very hard, the natural tendency is for all good code (which is correspondingly easy to change) to eventually be replaced with worse code that is harder to replace.

Natural selection applies to code too and, unfortunately, the qualities that lead to longevity are often exactly opposite of the ones that lead to good code.
You can, but that's a different thing - creating a new shell as a child of the command, rather than talking to the parent shell of the command.
If someone doesn't want to be captured, too bad, they shouldn't be throwing photons at you (read: if they want privacy, they shouldn't be in a public location).

That would be a perfectly reasonable position if there weren't laws against blocking photons. (Mask bans)
http://kolos.math.uni.lodz.pl/~d33tah/privacy-tsa-pia-32-d-a...
Thats such a misguided way to look at things. There are plenty of dyslexic people who become successful entrepreneurs exactly because they are developing a different perspective on things than everyone else who can read. They learn to compensate. Just like a blind person learns to compensate for the lack of vision.

Sure there are many areas where reading is good, but it's not as simply as you want to present it here. Not by a longshot.
Try again, link worked for me.
Rob Landley (former Busybox developer) begs to differ.

See http://landley.net/notes-2011.html#13-11-2011 http://landley.net/notes-2011.html#15-08-2011
http://landley.net/notes-2009.html#15-12-2009
> What is not clear about "parallelize layout" and "make better use of hardware"?

The lack of a before/after demo.

> No, it wasn't.

What, specifically, were the performance goals then?

> This is already done.

Link?
Pidgin has officially abandoned support for Facebook XMPP
I'm pretty sure the evaluation bugs have been fixed for a while (subject to some caveats). Unfortunately it's impossible to fix fully in ggplot2 without a massive rewrite, but ggvis doesn't suffer from the same problems. Now I actually know how to do non-standard evaluation correctly :)
In Minnesota, Winter is November to May.
Goonies - https://www.youtube.com/watch?v=v5_3XaaeRXI

If the organ's secret tune is the same as the puzzle in Goonies that would take it over the top!
Or is it the other way around? http://developers.slashdot.org/story/15/07/16/131254/faceboo...
Which is why ggvis has a different architecture which will make working with large datasets easier. Not to mention the pipe as a unifying interface across ggvis and dplyr which makes it easier to do efficient data manipulation within the visualisation.
2015 in Review: The Year of the Unicorn
Or the Gestapo?
No! Use a proper key-derivation function (bcrypt, scrypt, pbkdf2), not a hash function.

SHA family, including the rather unrelated but exceptionally nifty SHA-3 (Keccak), are still hash functions and are still really fast to compute (good if you need to verify the contents of something, bad if you need to store secure information). A decent GPU can still crack SHA hashes effortlessly, and a dedicated attacker will have some good FPGAs (in which case you'll be cracked in hours). Use a function that is meant for storing passwords.
The PDF does not define what TSA Advanced Imaging Technologies are. It implies rather than defines that it is a x-Ray even though the image is a generic drawing of a person with a superimposed an icon what area should be searched.

Not okay.
They already do this in some airports in Germany, rather then the classic metal detector crap.
Unfortunately for them, Yahoo may have stopped acquiring companies, but otherwise I would imagine HRH Marissa Mayer would have brought flipboard for $2B+. I know they try buying everything shitty.
If it does break stuff that you think it shouldn't please let me know. Goal is to do a patch release in a month or two to fix anything I broke accidentally.
The Biggest Decision Your Self-Service SaaS Needs to Make
Leonardo Dicaprio Dances to Bollywood Song EPIC
I have to get back to work so I just skimmed over this quickly, but I didn't see anything that supports the claim in the title. Anyone who has read the whole thing mind pointing it out?

ETA: I did see the part that everyone is quoting, but the title makes this sound like this will apply to everyone all the time and I don't think this document backs up that claim.
Surprisingly often, it also comes down to departments that have budget surpluses at the end of their fiscal year. A lot of companies still seem to be locked into that use-it-or-lose-it approach to budgeting, so I've repeatedly seen software purchased, and then never even downloaded, much less installed.
I think the title is misleading. The woman became obese after fecal transplant from her daughter, not because she took antibiotics. She became obese because her daughter was obese. The message is very important: If you want to lose weight change your microbiome.
So? I remember watching weather reporters as a kid, and even teachers telling us about seasons in primary school, they always had a clear differentiation between "meteorological seasons" and "calendar seasons". Meteorological winter started on December 1st, and ended with the first blooming flowers in early March. November is a bit more confusing, because you traditionally start wearing a winter coat on November 1st, but only in the morning as days are still warm-ish.

I assume different countries will have different meteorological seasons. Just like most countries within a timezone don't exactly sync up with the idea that the sun is at the highest point at noon.
tl;dr - "i don't like that words have meanings, i'm more interested in feelings"
> Also note that SIZE_MAX is an unreasonable input, one would even say it violates preconditions.

Annex K adds rsize_t, RSIZE_MAX, and friends, which restrict inputs to reasonable values. Unfortunately, it doesn't retcon the old functions like strncpy, and worse, no one actually implements it.
If only body scanners were proven to be effective.
This is actually a huge strength for the R community, who by and large are not programmers and just want stuff to work. The fact that the latest version of all CRAN packages actually work together makes life much easier. And for experts there are tools like packrat and checkpoint that give you more control.
In the present discussion, the increase in usage of arbitration is not necessarily motivated by libertarian philosophy. It would seem simpler to assume that the companies that include binding arbitration in their contracts are simply making what they believe to be a good move. Further, unless the corporate executives or lawyers come out as libertarians, then I think it is putting thoughts into their heads to treat this issue as anything other than an apolitical, pragmatic move.
When you move into a New (New Lease/New Construction) building for the organization. Two for Two so far in my career.
Apple didn't just follow the existing law, they wrote their own addendum.
Opining about twitter isn't the same as commenting on AIDS in Africa. It's a stretch to call the former "political".
As someone who always opts out, this makes me sad.
Page 4:
"While passengers may generally decline AIT screening in favor of physical screening, TSA may direct mandatory AIT screening for some passengers as warranted by security considerations in order to safeguard transportation security"
Guh, until CF/FB can provide some data that shows users with no upgrade path are genuinely going to be effected by this, and not connections MITM'd by some crappy AV or other random middlebox the LV proposal seems like a pretty silly idea...

https://www.cabforum.org/pipermail/public/2015-December/0064...
It's right in the abstract:

"TSA is updating the AIT PIA to reflect a change to the
operating protocol regarding the ability of individuals to opt opt-out of AIT screening in favor of
physical screening. While passengers may generally decline AIT screening in favor of physical
screening, TSA may direct mandatory AIT screening for some passengers."
Corruption != capitalism.

With the right connections you can get away with ridiculous crap, but rules as written are not that friendly. Which creates lots of problems for small companies.
The requirement may be a step backward, but at least the idea of not storing the images is a step forward.
TSA Pre is also no guarantee. With Pre, you normally proceed through a metal dectector. However, the metal detectors randomly alarm to force some passengers through the image scanner. You could previously opt-out at that point and receive a manual screening. With this policy change, you might additonally be compelled to go through the scanner.
lol the amount of bias you have towards your own culture is astounding.

Taste and smell is a HUGELY sensitive skill. I don't doubt that changing the "tiniest detail in a paint" could "totally change the emotions", but for someone who doesn't really appreciate visual art nearly as much as food or music, I could be as easily dismissive towards it as you were towards food.

To further counter your arguments, if you A/B tested some modern art in a museum vs some art you bought in a walmart, and it was on the same medium (same quality canvas, etc), people would randomly choose one or the other as "better".
"TSA is updating the AIT PIA to reflect a change to the operating protocol regarding the
ability of individuals to opt out of AIT screening in favor of physical screening. While
passengers may generally decline AIT screening in favor of physical screening, TSA may direct
mandatory AIT screening for some passengers as warranted by security considerations in order
to safeguard transportation security."
I've just read the Abstract so far, but from there:

> While passengers may generally decline AIT screening in favor of physical screening, TSA may direct mandatory AIT screening for some passengers.
At the top of page 4:

TSA is updating the AIT PIA to reflect a change to the operating protocol regarding the
ability of individuals to opt out of AIT screening in favor of physical screening. While
passengers may generally decline AIT screening in favor of physical screening, TSA may direct
mandatory AIT screening for some passengers as warranted by security considerations in order
to safeguard transportation security.
I'm not familiar with any, but that doesn't mean they don't exist. If you are willing to pay you could probably buy the data from Acxiom though.
First paragraph:

While passengers may generally decline AIT
screening in favor of physical screening,
TSA may direct mandatory AIT screening for
some passengers. TSA does not store
any personally identifiable information
from AIT screening.
ok, how does that work: did all those people sign up with Magic?
You really really don't know what you're talking about.

The State in China explicitly picks winners and losers from state companies (in particular banks), tightly controls currencies, tries to resist movement of labour, and attempts to hide moral hazard through censorship. All the while guaranteeing full employment.
Former special-ops doctor explains why he'd rather be shot with AK-47 than an M4
I chewed out a screener and his supervisor when that happened to me.

Turns out you can call a TSA agent an idiot and nothing happens.
Additionally (on page 5):

> Individuals undergoing screening using AIT generally will have the option to decline an
AIT screening in favor of physical screening. Given the implementation of ATR and the
mitigation of privacy issues associated with the individual image generated by previous versions
of AIT not using ATR, and the need to respond to potential security threats, TSA will
nonetheless mandate AIT screening for some passengers as warranted by security considerations
in order to safeguard transportation security.
The plain text to outlined code is pretty much what a compiler does. The proposal is akin to the idea of editing code as an AST rather than a textual representation. Until our source control software supports the idea of seeing code files as more than just lines of text, this idea is likely to go nowhere IMO.

It would be neat to see this in a RCS though. Imagine seeing a diff like:

renamed foo() to bar()
bar() changes:
+ if (baz) { ... }
- if (quux) { ...}
Assuming you're in the US, that's not how healthcare works.

You'd still be covered by your current plan as part of the provisions of COBRA. You have 60 days to elect coverage, if you had a medical need at any point during that time, you could seek care immediately and then deal with the paperwork later.

If you get laid off today in the US, you have two full months to either 1) sign up via COBRA to stay on your old plan 2) sign up for a new individual plan or 3) start a new job and move to your new employers plan.
The TSA doesn't use backscatter x-ray machines any more. They were all removed because the company that makes them (Rapiscan) couldn't figure out a way to mask the naked images.

Now they just use millimeter wave machines, which have the body outlines only. I really don't find this objectionable from a privacy standpoint. It it basically a better metal detector in that it detects non-metal objects, too, and shows the scanner exactly where they are on the body.
Legally speaking, it's optional to go through those. I exercise my right to opt out every time I fly, and the variation in response among airports is quite spectacular. CGN has posters telling you how to opt out, and a dedicated optout lane (Terminal 2 at least). DUS wants to see ID and tries to intimidate you into conforming.
Annnnnd now there's no way my pregnant wife is going to travel with me by air. Thanks security theater!

EDIT: I have TSA Pre via DHS/CBP Global Entry, as does my wife. There should be no reason for us to go through a body scanner if the TSA and DHS believe their background check and fingerprinting are effective.