skysight-inc/HackerNews huggingface dataset:
It's generally good to be understanding of other cultures, but that doesn't require you to be polite about history's greatest monsters. Stalin and Hitler each directly and personally ordered the deaths of millions, and did so within living memory. That does stand out even from the horrific history of American colonization.
Flying on Mars (2001)
It's possible under ideal circumstances, but it's an uphill battle in the real world. The examples you gave are small potatoes compared to how frequently a master key for criminal cases would be needed and dramatically lower risk. If the NSA leaked their hard drive encryption keys hundreds of people would probably die. Bad yes, but if the master key to (virtually) all encryption schemes in the country is leaked many people would end up getting killed and it would be an economic disaster. Not to mention the potential for limitless privacy abuse, whether in the name of a righteous cause or not.

I'm sure they could work out some sort of subkey scheme and key splitting (via e.g. Shamir's scheme) to lower the possibility of compromise and reduce damage if a subkey was leaked, but the possibility won't be zero. And with that big of a target the number of people trying to acquire the keys means the chance of the keys eventually being leaked is pretty good.
Between 12pm and 1pm, or after 6pm haha :P
I guess I'm a traditionalist, but since no one has suggested it yet, I'll suggest an alternative: rally to enforce the law. I'd assert that societies that accept theft as the norm, blaming the victim for failing to properly secure their goods, are on a downward slope from which they will never escape.

Instead of accepting that "property crime gets no attention", increase the risk to those would would steal packages by making it more likely that those who do so are caught and punished. Put a tracking device in a bait package, record the theft with a video camera, and report the final location to the police.

If the police fail to react to such a credible tip (especially if you can do this multiple times), turn the video and police report over to some local reporters. I think (hope?) that the reporters would have a field day, and make enough noise that those particular thieves will not be in business much longer.
High-end video servers used in the entertainment industry typically use RAID 0. My last project, for example, used 10 250GB SSDs in RAID 0.
I'm not necessarily an Asana fanboy, it just works for me and so I haven't made an effort to research other platforms. But, since you asked, this is a basic overview of how I use it:

-It's just me (Asana is meant to be used with a team. That's not how I use it.)

-I don't split up projects in to Asana 'Projects.' I make one Asana Project for each client that I work for and a separate one for 'Personal'. I split up real life projects in to Headings with subtasks in the same Asana project. (All projects for Client A go in the Client A project.) This way I'm never trying to move tasks between projects.

-As tasks come up that I want to remember, I forward them to the email address for the correct Project (client). I usually change the subject line to be more descriptive of the task. This puts them at the top of the list for that client.

-In between tasks (usually every few hours while I'm working) I read over the list and categorize anything new that I've emailed in under the right heading. I also set the due-date to be the next time I want to work on that particular task.

-As I get started for the day on a certain client, I'll look at the list for that client sorted by due date and try to cross off or reschedule everything for that day.

-Sometimes I'll tag tasks with a name of the person I need to talk to or the location that something needs to be done. That way the next time I run in to JohnDoe I just say 'oh hang on I had a few things to talk to you about' then tap tap tap to the JohnDoe tag in Asana.
It's interesting now no book in the section about AI is an actually technical book (something like Russel and Norvig). They're all about philosophical conjectures about AI. Doesn't inspire confidence in other lists on that site tbh. :/
Neural Networks and Deep Learning
If anybody happens to be looking for an RSS aggregator, I'd like to recommend GoRead.

Obviously I wouldn't pay for it, but self-hosting is pretty straightforward and it has a companion Android app.

Never cared for Feedly and I don't really fancy making my own.

It's the best Google Reader clone I've found.

https://www.goread.io
I can spend a whole Sunday afternoon here if I really dig into 10+ articles on the front page, read the top comments, and contribute to the discussion.

On an average workday though, I look at 3-5 posts and skim the articles. I often find more value in HN's discussion than the article itself.
If you use Bootstrap CSS it looks pretty generic, but it's also nearly impossible to make it look bad.

Sounds like a cool project.
Robin Harris has been advocating for the abolishment of block abstraction layer for a couple of years now and this piece is consistent with his usual rhetoric
"The rap on NYC and LA is that they have competitive, take-down cultures (NYC more so than LA)."

That's why they're better in the arts. In NYC, they tell you if you suck. In LA, they don't call you back if you suck. In SF nobody says anything and you can suck forever. Go to little theater or art openings and this is quite obvious.
Swift available for Beaglebone/RasPi
How do you think should it look to be more in line with everything else on Windows? Like VBScript? Batch files? C#?

And what bothers you about the interactive command line?
A random Systembolaget matches a speciality store in essentially any major city of the world in terms of selection and price, not to talk of the less major ones. I'll take that fairy tale over being able to buy the local cheap lager at the corner store any day.
>But I'm game. Give me a problem with 1,000,000 lines of C. But don't expect me to read the C, I couldn't. And don't think I'll have to write 10,000 lines of Forth. Just give me the specs of the problem, and documentation of the interface.

I could be wrong, but I'd wager that a lot of projects that are 1,000,000 lines of C don't have well defined interfaces or documentation.

However, if the author wants to give it a shot, they could try replacing v8 with pure forth. That's a fairly well defined problem, they just have to maintain compatibility with the exposed v8 api.
> ...set of ideas that are in practice no more than JSON-RPC with a http header.

I'd argue that JSON-RPC (as well as XML-RPC) is more useful than REST, as it has a simple specification that any client/server could follow. If you write a JSON-RPC server, you can expect that any JSON-RPC client would be able to use it.
Point taken. And agreed -- this thread is way off from Norway handing Finland a mountain...

Have an upvote form me :-)
If you can tolerate the ironically ugly website, there's some great 'pure CSS' examples collected here:

http://www.cssdesignawards.com/articles/best-pure-css-pens-o...
Permalink: https://news.ycombinator.com/item?id=10766834
Flexible Revenue Model vs. MVP and the Two Kinds of Entrepreneurs
I first became convinced that Silicon Valley or Boston would be better for my career and opportunities to secure funding for new applications of technology back in 2000. And, yet precisely because of family roots and a rich social network and schools we never moved.

I worked for Boston firms for several years without moving there. I negotiated the remote work option and while it preserved my family goals ... when the recession of 2008 hit hard and jobs got eliminated mine was one of the first on the chopping block even though I was sitting on a consistent set of promotions and raises. I am convinced that distance and diminished face time with key executives meant that it was easier to choose my job as one to eliminate.

I made these decisions to stay where I was geographically for family reasons and my wife's career at the time wasn't particularly germane because she had already quit work to spend some years FT focused on raising our children. If she had been more actively building her own career and had a really great job that would have just reinforced the decision to stay-put.

I don't have any experience with Amazon as a workplace but I am sure you have read online discussions, news articles about their culture and asked around your circle. My own impression of Amazon would be that it would be a very risky thing to uproot your family to follow that job. At the very least I endorse your thought of spending 6 months to a full year to see whether it is a good fit prior to moving your family.

You and your wife also need a really honest heart-to-heart about her feelings about potentially giving up a "great gig" and the likelihood that she can find something comparable in Seattle.

Decision making under uncertainty is a hallmark of human life. Without knowing a lot more about your situation I can't really offer more than empathy.
Dream Standing-Desk Setup
Parallella Kickstarter Supercomputing Project Celebrates 3 Year Anniversary
You write bloated code for job security? Shame on you.

Typically bloated code comes from legacy and years of organic growth. I'd imagine almost any 30k LOC project in any language that has been developed more than just a few years could be rewritten in a small fraction of the original size, now that you actually know what the end result must do, a luxury you don't have on the first go.
Zero to 140 Paying Customers in 10 Months (pivot story)
I don't know about that - I mean book burnings and censorship definitely impact the freedom of the user. Arguably more than the ability to lend/resell the book.
If productivity is defined as capital going to where it can generate the most new additional capital, then both statements you made are identical. The rules distort reality so that some activities are productive in excess of their marginal utility instead of productive proportional to their marginal utility.

Housing rents in pretty much all markets are productive in excess of the real life utility from the housing that earns that rent due to the myriad restrictions that prevent supply from growing proportionally to demand.

Lawmakers should as a general rule try manage both supply and demand curves so that the intersection between the two moves towards the origin or stays relatively the same.
Take a look at how much stricter the temperature and airflow requirements are for Intel's 2.5" U.2 drives compared to their add-in card counterparts. (And note that the U.2 drives are twice as thick as most SATA drives.)

M.2 has almost no place in the server market. U.2 does and will for the foreseeable future, but I'm not sure that it can serve the high-performance segment for long. It's not clear whether it will reach the limits on capacity, heat, or link speed first, but all of those limits are clearly much closer than for add-in cards.
I've been practicing something like this myself.

When I have an idea that seems like something people want, I force myself to describe it in a 250-500 word blog post. Most of them I never ship, but it's really about the exercise of conveying your ideas in a way other people can digest quickly and easily.
I think you can replace "they" by "he", since, as far as I know, it's a one-man shop !
> Star Wars is for children and always have been.

That's objectively false, though. Star Wars marketing quite clearly targets both children and adults; much more so than, say, Pixar films, which are marketed solely at children despite arguably being more mature (in the "thoughtful and intelligent" sense, not the "sex and violence" sense) than Star Wars.

You're actually trying to say that adults who like Star Wars are childish, and you're welcome to your opinion. But if you choose to back up your opinion with facts, you need to pick facts that are true. There are many exclusively kid-targeted properties that attract sneering attention from adult fans (mostly TV cartoons, in my experience), but Star Wars doesn't fit.
The relationship between client and server is not stateless in the majority of the cases. Most of the implementations rely on authentication state (cookie, session secret). Very few actually do the stateless part right.
Oh, it's possible that the commenter had an unusual palate and he got some perfectly fine pairings that didn't work for him and him alone. Or it's possible that the pairings were selected lackadaisically or to reduce some inventory, and he really did get ripped off - which does happen. It's impossible for either of us to tell.

I am curious, though, why you seem so insistent that it's the commenter at fault, to the point of calling out his 'sociopathic tendencies'. Do you really think there's no way for a restaurant to screw up a wine pairing?
This is not web site. It is Hybrid application. I am using push notification and gps so I need a lot of permission. I will try to reduce the permissions
thnks for your feedback
To your first point: There's being skeptical and then there's calling someone a liar without actually calling them a liar because you don't have any justification for doing so. This is far from the first time I've seen this on HN and it's really not okay. There's no point in speculating about the veracity of this person's statements until there's a reason to.

To the second and third: They only require that a researcher "...make a good faith effort to avoid privacy violations..." and I'd say he met that. You can argue that the entire endeavor wasn't in good faith but he certainly made a significant and conscious effort to avoid private data.

I think his biggest lapse in judgement was that he brought security operations issues to light in a bug bounty program run by the people that would be most embarrassed by them. Application security bugs are created by the engineering team and the CSO's application security team fixes them (or advises or whatever). Security operations issues are entirely the responsibility of the CSO's department.

Facebook (as an organization) should be thanking him. While he didn't expose application security bugs he exposed significant operational issues and blind spots. Keys with far too much access, lack of log inspection, lack of security around what IP addresses a key can be used from, etc. Operational issues and lapses in operational security are what got Twitter in hot water with the FTC in 2010. It's not as easy to play cowboy with operations as it used to be.

The CSO hasn't been around for long but by all accounts he poured a lot of effort into hiring an application security team. Perhaps that's his specialty but even one experienced technical manager hired for security operations could have caught these basic issues. They probably wouldn't have addressed the lack of least privilege in that time frame but they could have easily spun up logging to catch some rando on an unknown IP address using their keys.

But like I said, he hasn't been there for long so I don't blame him for the failure. What I do blame him for is calling up the employer to threaten them as leverage to shut up the researcher. I blame him for posting a thinly veiled justification for doing so. He could have addressed this openly, talked to the guy directly and went to the other C-level execs with it as a justification for getting everyone on board with fixing it but he tried to keep it contained to his department.

I understand how he must feel being the new guy who's responsible for the outcome but not for creating it. I know he'll get questions that he might not be able to answer since they probably aren't logging bucket access. Questions like, "Who else got a copy of these keys and what did they access?" Saying "I don't know and we may never know" in response to that, even if you weren't in charge more than three months ago, is rough.
> restaurant in crisis

Then you talk about an example where they forgot to cancel a reservation, and one where the restaurant was closed and a customer didn't call ahead to check before driving for an hour (why is driving for an hour through rush hour something that reflects on the restaurant?). Then one guy who didn't like the food style.

None of those point even remotely to a restaurant being in crisis, so let's look at your last piece of evidence - claims of poor service. Is the service poorly rated on average compared to other similar restaurants? How did you check? Based on how much more poor their service is compared to other similar restaurants, how did you determine that it is a sign of crisis rather than a weakness of the restaurant? (There are many places with good food, but weaker service, which we do not call 'in crisis')
Ask HN: What is the best place to find beta testers?
Your comment would be much better without the first line.
However: even in this setting, all it takes is a single unauthorized call to Dual EC and an exfiltration of 240 bits to obtain the values used in all subsequent re-seeding of the ANSI generator. We already know there is unauthorized code in ScreenOS based on Juniper's admission. So the next step is to determine whether something like this has occurred.
I started finding fungi fascinating after watching this, perhaps you'll like it too:

http://youtu.be/XI5frPV58tY
That's a really great idea. Here's a one-line wget that will grab the provided URL and all of the data necessary to render, to one level of recursion, and dump it to a WARC:

wget -e robots=off \
--user-agent="Mozilla" \
-r 1 -p -E -H -k -K \
--warc-file=/path/to/your/warc/file/without/warc/extension \
'http://www.example.com'

I think I might start capturing these. Shouldn't take up too much additional disk space.

edit: previously it was `-r 2` which is two levels of recursion.
Eh, it listed it as "promises" and talked the same way about Adesto. It's reasonable to say "this is the basic claim of the product; we'll see if they get there" without it being PR.
Webdav predates REST but it essentially ticks all of the boxes that make up REST. Plenty of providers offer Webdav cloud storage (basically all of the smaller ones since they can't really afford to maintain their own API).
Having the article text and comments on one page is a great feature.

I'd also love to see the community move towards in-text annotations directly on the article page, but it's hard to ease into that.
I'm guessing I got downvoted for linking to the product on Amazon. What's the appropriate way to link to something like that so that it doesn't get downvoted?
Your post said "What if we ditched CSS?" with zero other context.

The links do use CSS, and there are non css options available in most rendering engines for such things, e.g. canvas/svg.

Personally I see no advantage to using things like lay.js in the top linked example over SVG, and further feel that a lot of the hate driven towards CSS stems from misunderstanding or misuse. Not that it is perfect, far from it, but to proxy it behind another language can only ever add limitations.

Compass/SASS solve most of my shallow verbosity based gripes tbh.
How to get pregnant
They were trying to build the entire OS using a 100% memory-safe language. At one point they could elide process boundaries and protected memory (and the associated context switch overhead) because the loader could statically verify your program didn't do anything unsafe.

The ultimate answer to Singularity/Midori/etc is yes, you can have an OS (including drivers and interrupt handlers) that is 100% provably memory safe and thread safe and is performance-competitive with existing systems.

Unfortunately Microsoft basically sheleved most of the work and it doesn't look like anyone else is going to pick up the slack. I predict more heartbleeds and zero-day RCEs in our future. At least we'll all get 0wned with fast C code.
You can edit in 9.4 by replacing the job content with the updated one.
There's a difference between claiming someone is intentionally ripping you off, and saying that something is not to your taste.
Why would you call ahead? It's a reservation! By definition, you have already called ahead! I have never in my life heard of anyone calling ahead to check on their reservation.
Sugar + yeast + heat source = vodka. Problem solved.
yada, yada...
Good Lord. Yeah, that's messed up.
"So no, it's not a buzzword, it's just a concept."

I think REST is quite clearly a buzzword. That doesn't mean it's not also a well defined concept; just that it's fashionable to use the term even when that concept doesn't apply very well.
Computers Get Busy for National Novel-Generating Month
> Because it is not a well defined protocol, you cannot use the same client library to access random REST APIs.

You misunderstand what REST is. It's not a protocol, it's an architectural style. Of course you can't build one client library to access arbitrary REST APIs – that's like complaining that you can't build an object-oriented library that can be used by any object-oriented language.

REST does, in fact, have a precise definition that is possible to understand and agree on. It's here:

https://www.ics.uci.edu/~fielding/pubs/dissertation/rest_arc...
If anything, C is frustratingly weakly-typed. The integer conversion rules and the signed/unsigned mess are its biggest mistakes.
This article, and the majority of the comments here, are about using SSDs in server environments, where permanently high load and zero downtime is the norm.
And it doesn't even seem to be about SSDs vs HDDs, it is about SSDs vs future technologies.

For personal use, SSDs outperform HDDs in just about every aspect, if you can afford the cost, an SSD is the better choice.
And there is nothing mentioned here about downsides of leaving a drive plugged in and powered on at all times.
I'm not sure the stats on this one, but it seems to be that something with 1,000,000 loc would have to have decent documentation, or it would be totally unmaintainable and wouldn't grow to that size without dying a horrible death.
7 or 8 years ago I had to take over a Java project on the order of ~10k lines. I reduced the code size by 77% by rewriting it in, wait for it...Java.
Toshiba Likely to Post $4B Net Loss in Current Fiscal Year
Why Is So Much Reported Science Wrong, and What Can Fix That?
Physicists and Philosophers Debate the Boundaries of Science
> can you cite a RESTful cloud storage API that's consistently implemented between providers?

It's been a while since I've worked with it, but IIRC, WebDAV is one example.

> Dropbox's old API was REST

That's not REST. It's that weird anti-REST where people define URI patterns instead of media types. I don't know why it became trendy to label things like that REST, but they aren't.
>>You write bloated code for job security? Shame on you.

Try to give him the benefit of the doubt. There's no indication that that's what he meant. Instead, he probably meant that one possible reason people write bloated code -- or at the very least, do not attempt to refactor it after writing it -- is that it provides them with job security. Which is a fair point.
FWIW I bricked a very cheap consumer SSD by using it as write log for my ZFS array. This was my experiment machine, not a production server.

Fortunately I had followed accepted practice of mirroring the write cache. (I'd also used dedicated, separate host controllers for each of these write-cache SSDs, but for this cheap experiment that probably didn't help.)

So yes this really happens.