skysight-inc/HackerNews huggingface dataset:
What if you can achieve such high learning rate only because (in ML) you process a really narrow view of the data which cannot lead even close to how a human perceives things? I mean in terms of conceptualizing and connecting things/thoughts.
We had all the technology and intelligence we needed 2,000 years ago to make the world a better place. Yet our ancestors did not.

For many 1000's of years different religions, some on opposite sides of the world from each other, have been saying the same thing. We have the ability to be better people, but all of us squander it with pettiness, jealousy, greed etc.
I'm struggling to comprehend those in support of the researcher? As a security researcher myself, this is just something you do not do. There was nothing more to be gained after he had those API keys - for any other researcher its game over, you won.
As far as I'm concerned anything that happens to you after that point is of your own making
Couldn't the Whitehouse just find some 200 year old law that sounds like it applies to encryption, and issue an executive order?

From the sound of it, they want to keep any sort of draconian measures as quiet as possible, and that'd probably be the quietest way to do it - especially now. The Obama administration said they'd clarify their stance on encryption "by the holidays".
The idea that the history of a phrase or word dictates its meaning is patently absurd. If that were the case, you would be equally appalled by a man calling himself an "ordinary guy"… which comes from Guy Fawkes, a failed 17th century religious terrorist.
SIMD isn’t the “end all”, but upcoming Intel chips have instructions for handling 8 doubles or 16 floats per instruction, and if you’re trying to implement a video codec or large-scale physics simulation, an order of magnitude of speed difference can make or break your app.

To take an example where timeliness is crucial, think of the difference between, say, 10 frames per second vs. 60 frames per second in a first-person shooter game.
> This is well known to be a huge no-no in the security industry. I see a lot of rage here from software engineers - look at the responses from actual security folks in this thread, and ask your infosec friends...

The problem is that on the one side you have security professionals who do this full time. They build up a background of implicit knowledge through extensive interaction with other security professionals, via training, mentoring, team activities, etc.

On the other side you have folks like the guy who found this vulnerability -- don't specialize in security, basically moonlighting / hobby, not necessarily connected to other security professionals or even other hobbyists. They won't have the same kind of implicit knowledge.

When someone from the first category communicates with someone from the second category, the communication can break down. That's what happened here.

Offering a million dollar bounty makes this kind of communication problem more likely -- a potential million-dollar payout catches the interest of people who have spare time and encourage them to pick this as the thing they do on the side. And further, encourages them to try anything and everything you don't explicitly forbid in by giving them hope that if they just try hard enough, they'll be able to turn what initially looks like a ho-hum two-year-old Ruby exploit into a million-dollar payday.
I think most people didn't really understand the meaning of your comment. They seem to all equate intelligence and processing speed.

I think it's legitimately an interesting question. As in, it could be something like Turing completeness. All Turing complete languages are capable of computing the same things, some are just faster. Maybe there's nothing beyond our level of understanding, just a more accelerated and accurate version of it. An AI will think on the same level as us, just faster. In that case, in that hypothetical, an AI 100x faster than a person is not much better than 100 people. It won't forget things (that's an assumption, actually), it's neuron firing or equivalent would be faster, but maybe it won't really be capable of anything fundamentally different than people.

This is not the same as the difference between chimps and humans. We are fundamentally on another level. A chimp, or even a million chimps, can never accomplish what a person can. They will not discover abstract math, write a book, speak a language.

Mind you, I suspect this is not the case. I suspect that a super intelligent AI will be able to think of things we can never hope to accomplish.

But it is an interesting question that I think is worth thinking about, rather than inanely down voting the idea.
No Voice Given to Those Who Break Silence
In your experience, are there other, more careful organizations who would have taken the host offline but saved a disk dump for later investigation?
We already have a world awash in superhuman AI; it's just that this AI is at perhaps the same level of maturity as computers were in the 17th Century. This AI is of course the corporation: Corporations are effectively human-powered, superhuman AIs.[1] By crowdsourcing intelligence, they optimize for a wide variety of goals, their superhuman decision-making running at the pace of Pascal's mechanical calculator. Yet even the nimblest companies can only move so fast.

This is to say, even in a hard-takeoff scenario, we would be looking at something that is still hard-limited by its environment, even if it can compete with a 1000-person organization's worth of intelligence. The danger isn't that it somehow takes over the world by itself; the danger is that we gradually connect it to the same outputs that the decision-making structures of corporate entities are and it ultimately remakes our world with the very tools we give it.

Open-sourcing AGI is no more inherently dangerous than open-sourcing any of the software used to run an enterprise business. It is the choice of what we ultimately give it responsibility for that should draw our caution.

[1] http://omniorthogonal.blogspot.com/2013/02/hostile-ai-youre-...
In infosec keychains are about as sensitive as private as it gets. They should probably change it to "do not pull or retain any data from any server except that which is explicitly needed to identify the vulnerability" for those who might not understand.
I agree. We'll buy into car share networks. There will be super primo services where you can ride in a limo, business class networks that allow you to ride in privacy and maybe even economy class networks where busses and vans carpool like uber's new hop feature. Crucially, this allows the number of overall cars to slashed. 1 auto-auto can do the work of 10 non-auto-autos, and the cost will be spread out among subscribers and expensive electric cars will finally be cheap enough for everyone.
Such a disapointing article. As far as mass shootings are concerned, anti-psychotic medications are a greater predictor than 'mental illness'. I wish we could discuss this connection without the drug companies panicing.
I can't work out how to not make this sound almost infinitely cynical, but their ssl key expires in 13 days - they only had to shut him up for another few weeks and they could have pretended they weren't currently MITM-able:

https://www.instagram.com

Not Valid After: Thursday, 31 December 2015 11:00:00 pm Australian Eastern Daylight Time

Maybe they'll upgrade it to something better than:
Signature algorithm	SHA1withRSA WEAK
Some of the pictures are ridiculous:

The Pantelligent picture just shows a picture of a box with “Pantelligent” written on it, not the actual product.

The uBiome one is straight-up meaningless clip-art (of a robot holding a wrapped present) with the company logo badly pasted on. Sure, the nature of the product makes it hard to get a picture of it, but the clip-art could most certainly have been chosen better.

The Craft Coffee one only shows pictures of text-only ads for the product, not what you would get when you actually subscribe.
Compared to your ancestors 100, 1000, 10,000, and 100,000 years ago, you're hopelessly dependent on machines and technology to survive. Fortunately you can harness the surplus energy and attention you aren't dedicating to just getting by in everyday life to do more productive and amazing things.
Unless I'm missing something, this this article did not give a single reason why it "will not be easy", aside from quoting the director of marijuana enforcement in Colorado saying: "It’s going to be a lot harder to implement than you think". Otherwise, the article is just a description of the current landscape in the marijuana industry of Canada before legalization.
Amazon building its own overnight airfreight operation, sources say
I've done it one of two ways - via VBA and via VSTO Add-ins. My VBA version has been carefully crafted to emulate a pseudo-ORM based off INFORMATION_SCHEMA and all, making it pretty portable. It works fairly well because what usually ends up happening is say Partner Foo will have his read-write to his schema and it will all be segmented up via catalog views and other rules. There are the standard concurrency issues (you have to discuss with your client whether you want him to take a mutex on the result set, or potentially allow stale data) so it's fairly naive in that regard. The upside of it it's all self-contained (i.e., not a pile) and portable because you effectively get "reflection" with any sufficiently decent RDBMS impl. Maybe 10-15% of that VBA has to be tweaked based on their business requirements (defining behavior like if pri_row gets deleted in table foo by user bar, do you offer a prompt to cascade delete[1]?)

In some situations [such as a cascade delete], the business requirements need the Stakeholder or PM or TL or whomever to authorize certain events due to internal corporate governance policies. At that point, the VSTO add-in route is taken because usually there has to be integration with other governance/workflow software (one of the subsidiaries for Blue Cross/Blue Shield I worked with was notoriously bad re: pushing the buck and over-complicating workflows). Anyways, the MSVS sln I use with that is pretty much the opposite of a VBA pile.

[1] There's almost never any destructive DELETE's taken, rather a boolean active flag is toggled, and a new row is inserted with a more recent timestamp so you can '...order by timestamp desc limit 1'. That way if auditors come in, not only do they have the full audit log but we can reconstruct state at any given time.

Either way, a naive VBA implementation that doesn't appeal to system tables for all the schema info can easily be written (in a maintainable fashion, as maintainable as VBA goes at least) in under a week.
> I don't think developers should even cater for non-javascript users anymore.

What do you mean by 'cater to'? If you mean 'develop primarily for,' sure. If you mean 'tolerate,' then you're part of what's wrong with today's Internet.
Agreed. It's a fad. This too shall pass.
Show HN: Scaling Meteor to 2 Million Concurrent Users
Yes...and...no

One of the biggest costs is getting a drug approved and then sold

The FDA will prioritize Orphan drugs and other high priority drugs, and the US government will help pay for drugs that haven't even gotten full clearance through the FDA if they are considered high priority.

Sovaldi (the Hep C drug that cures 90% of cases at over $1000/dose) and Harvoni (94%) you can apply your argument to. And there is a reason why the FDA and US government supports the pricing even over patients screams.

Meanwhile, while the FDA did approve Zaltrap, it was not considered a priority drug, and they did not say a thing when Memorial Sloan Ketterring publicly announced they would refuse to perscribe because the clinical data made Zaltrap out to be as effective as many other off patent drugs, and at $11000/month, Zaltrap would bankrupt patients. In the end, Zaltrap's maker, Regeneron Pharmaceuticals, Inc., brought down the price.

(http://www.nytimes.com/2012/10/15/opinion/a-hospital-says-no... , https://www.advisory.com/research/oncology-roundtable/oncolo... )

if Tomorrow you were to invent a new antibiotic that would work against drug resistant bacteria (this is considered to be a high priority research area and any drug that is ready for approval will be fasttracked), you could charge whatever you want, no complaints, and the media will not consider you a villian as much as part of the spectacle of medicine.

If you re-invented botox for no reason, or stop others from being a provider in the market, then you get to be a villian
it doesn't work like that. you get into trouble when there is a trade-off to be made between switching off the AI and leaving it on.
It seems this post has now been removed from the front page. I understand your reasons for not wanting to have two similar discussions simultaneously. However, the two posts paint two different sides of the same story. How are people going to read this side of the story if it's been hidden?
This comes with the assumption that the first AI will be able to run at better than human levels on something like a raspbery pi. More realistically, it's going to have to run on an immense super computer, and even if it can marginally improve (marginal because a human level AI is no more likely to improve its own hardware than I am), it won't be able to just spread all over the world. It needs real physical hardware.

That is, unless the reason we don't have AI is because we haven't put the pieces together correctly, and it really could work on minimal hardware.
Why have you not rotated your private keys?

notBefore=Apr 14 00:00:00 2015 GMT
notAfter=Dec 31 12:00:00 2015 GMT

(Feel free to respond here if you want to pay me the bug bounty for this)
The black market may. Having what you need to replace an app installed on pretty much everyone's iPhone with arbitrary code is a pretty big deal.
One way to describe a browser: it is a VM for running untrusted code. That's one thing that truly distinguishes browsers and the web from other platforms, and is a good characteristic to keep in mind.
I agree, and I find myself incapable of doing basic things myself, but not because I only use technology to solve problems. I'm skewing more and more towards old fashioned asking-people-for-help. Where's a good spot for lunch since Chipotle is out of the question? I know, I'll stop in and ask the bank tellers where they recommend! I had a delicious burrito that destroyed Chipotle in taste and quality, and was cheaper to boot!

I don't eschew technology at all, but I'm realizing how little most people appreciate the willingness and capability to help their fellow humans. People will surprise you if you wait long enough!
Then you're not writing JavaScript, which was OP's concern. TypeScript is fine (although Elm, Swift, and Haskell are more interesting, IMO).
Http-decision-diagram
The Lyft page doesn't make it clear if the route is fixed. That's what's new here, otherwise Carpool would be the same as what Uber has already been running with UberPOOL.

In any event, all these services are converging on the same thing, a kind of replacement for public transportation on a fine-grained scale. Car pooling, fixed routes, and eventually self-driving vehicles are all table stakes for any ride-sharing operation that wants to approximate the economics of a local bus service (but with added convenience and service).
I don't see how the CSO's response makes sense for Facebook's security interests. As CSO, it is in your interest to allow a researcher to exploit an RCE to its furthest. Otherwise, you would only ever allow researchers to inoculate your outest layer of protection, while leaving any inner level untested and thus less secure.

If indeed only credentials and technical information were obtained, all aimed at finding more security issues, Facebook should be thankful for finding all the vulnerabilities across all their security layers.
Wow. So many YC companies I had never heard of!
Well taxi drivers are contractors as well and have no healthcare provided.
And still I doubt that AI could talk its way out of a prison.

It could be dangerous though.
Forgot to mention, Chrome works 100%, FF is good up to 16MB, in end January FF will be 100% as well.
If you are using the XHTML syntax, you could send it in a binary XML format such as Efficient XML Interchange (EXI). (Never seen anyone actually do this of course, since browsers don't support it; not sure if it is a good idea either - would it really be much faster than just say GZIP, sufficiently so to justify the extra complexity?)
And to pile on, whose bright idea was it to add items that aren't even available? Cinder, Eight, and Nebia look cool and all, but summer 2016 is a little too late for a holiday gift, n'est-ce pas?
Actually, this article raises a point I'd not considered: Why doesn't Uber just start buying medallions, especially in large / angry markets? In NYC, medallions are down to $600,000: http://www.bloomberg.com/features/2015-taxi-medallion-king. Presumably Uber wouldn't have to buy all the medallions out there, but if it bought enough it could circumvent much of the political opposition from current holders.
UberX legalised in NSW, Australia
The benchmarks I linked to imply that even getting your random numbers straight out of /dev/urandom is fine, even for the "trivial stuff".

On my current machine (Chrome 47, new-ish MacBook Pro), it takes me 4 seconds to run `for (var i = 0; i < 1000000; i++) {Math.random()}`. Each call to Math.random() generates an 8-byte floating point number, and it takes 0.6 seconds to `dd if=/dev/urandom bs=8 count=1000000 of=/dev/null`. If you don't want to buffer, and switch it to a million 8-byte reads, it goes up to 1.5 seconds. I don't think the system call overhead is a problem here.
Does this have anything to do with the SHA1 sunset on 31 December?
Tensor Methods in Machine Learning
Why aren't we addressing the safety aspects of Uber rather than making it legal? Can we not ensure that the cars are professionally insured, professionally driven and kept up to standard and safe to be in? That should be our number one priority before allowing the company to continue operating.

Some random examples:

http://www.cnet.com/au/news/sydney-ridesharing-driver-charge...

http://www.heraldsun.com.au/news/law-order/uber-driver-arres...

http://metro.co.uk/2015/09/08/uber-driver-dragged-passenger-...
author here, note 2 million concurrent users is in theory and based off of Phoenix's benchmarks.

My use case calls for a much more modest 20-30k concurrent users which is out of scope for Meteor but well within Erlang's limits
The assumption being that these John Von Neumanns will only require cheap, modest hardware to run on.
Sense8 didn't sound very interesting to me when I read the summary on Netflix, so I didn't look into it any further.

Later I heard someone talking about how good it is, so I gave it a try. I'm glad I did because I enjoyed it very much. I very much look forward to a new season of that show.
Use cases I found this exceptionally useful:

* I wanna send files from my phone to my computer that's under the same network.

* I wanna send pictures from my device to someone else's device that is 2 feet away from me without losing quality via WhatsApp or Facebook Messenger.

* I wanna send files from my computer to my father's computer without uploading it to some cloud service or establishing a shared folder.

* I wanna send personal/confidential files from my computer or device to someone else without it being logged or saved somewhere, in a direct communication manner.
Except that for a company as big as Facebook your security provisions probably shouldn't stop right at the front door.
Ah, that makes more sense, but I'm also used to cryptographically-secure hashes being used as general-purpose hashes. :) https://www.131002.net/siphash/
No. This is more similar to a fixed price shuttle that ends up being an SUV instead of a minibus or regular bus. (Fixed starts/stops, route reverses from morning to evening, etc.)
Building Greener Ships, to Keep the Sea from Rising
Please don't make accounts (or get friends to make accounts) to upvote or comment on your own posts. It's against the rules, and gets accounts and sites banned.

But more importantly, HN readers really hate it when people do that, and their nose for it is supersensitive. So even if you escape HN's software and moderators, the fate that awaits is unenviable.
> If a private business wishes to permit its customers to consume something on its premises, why does the State have to get involved?

Smoking is banned in restaurants because it's harmful to the waitstaff. The State should be involved for the same reason that it's involved in any other labor law.
It's only "difficult" for cranky authoritarians. Seriously. You have to have a twisted mind to spend the energy to imagine the worthless worries involved.
Advantages of working in the US as a foreign developer
Off topic: but why would someone mind using Quora? IMHO it's a great service, but open to hearing opinions on it.
Because buying them would push up the price, especially once the sellers realized the motive. If they could really buy them all for $600,000 / each they probably would.

Nevertheless, having the government compulsorily aquire and compensate previous owners in an orderly fashion, where they all get the same compensation instead of being able to push up the price by holding out is a wonderful solution to this kind of problem.

It would be great to see this happen more in the US, taxi medallions and rent regulation are obvious areas where just compensating the current beneficiaries as a one-off, then opening up the market would do everyone a world of good.
No. Cooperations are not necessarily like artificial intelligences. They are cooperations of human intelligences and these two classes of intelligences have actually very little in common if you look past the similarity that they are potentially very powerful and intelligent. Cooperations are driven by material profit, but in the end there is a reasonably large possibility that they are shaped by human values (because they are run by humans and otherwise people would also refuse to buy their products). The same cannot be said about AIs with high certainty.
Sounds like FB acted pretty unprofessionally both in the infrastructure department and in handling of the situation. You had some embarrassing mistakes and instead of acknowledging them you tried to scare the reporter into shutting up and leaving you alone. That part is pretty clear. Whether he violated your rules and how much you pay him I don't care.
I agree that bureaucracy is the main hurdle. The technology is so close but I'm not sure that the populace or the government is ready.

But malicious agents can disable your car today. A solar flare would fry you current car's electronics just as easily as an auto-auto. And a gun qualifies as a "small device" too, so I'm not sure why that makes in difference.
I can cook, but I can't create a gourmet meal without guidance from someone well experienced in cooking. I can shop and look okay, but I can't look my absolute best without some stylist guidance. I get what you are saying, but I think these services go beyond a "basic understanding" and take it up a notch. And that, in my opinion, is what is worth the money.