skysight-inc/HackerNews huggingface dataset:
This is pretty much what the Raspberry Pi does, so we should all switch to that :-)

There is ROM (as far as we know) in the GPU which instructs it to read the CPU firmware from the SD card, and then boots up the machine. Unfortunately neither firmware is open source or well documented, so you still can't really trust it.
AMT is not capital losses. You can apply your AMT credits to their full amount every year until the difference is leveled off.

While the AMT amount may be so high that a lifetime never hits equilibrium, people citing the $3000 capital loss deduction are talking about a completely different thing.
How have they defined "personally identifiable information?"
I broadly oppose security theater in all its forms, especially when it does nothing to improve actual security - and none of the naked scanners used by the TSA have been shown to be effective.

The only real argument in their favor is that it's so easy to use that there is no reason not to use them - but even that isn't true. It's trivial to show that even if they were nearly foolproof that they still wouldn't be worth using. There are so many airline passengers that the prior probability that an individual traveler has malicious intent means that virtually all alerts will be false positives. It is pointless to violate the privacy of everyone when the benefits are so minimal.
Security checkpoints don't combine identifying information with the order you go through security. If you had to scan your boarding pass before entering the scanner, that would be different, but... you don't.

So, unless they are using face recognition to scan you when you get your boarding pass checked then re-compare it at the rapiscan, there's no PII gathering happening.

(Now, they could always make a policy change and say "now you must tag your boarding pass on the scanner before entering" but we're not there yet.)
I'd rather submit to a retinal scan then be xrayed.
Reading between the lines? A massive data center in Utah?
http://www.nydailynews.com/news/national/feds-admit-stored-b...
Yeah, "Extreme Weightlifting" doesn't necessarily mean you need to get big. When I was training for hockey when I was younger, at 18 I could bench 285, and easily leg press 990 pounds (that was the max the leg press machine could handle - 10 45's on each side and 2 on top, so I'd do sets of 20). The max I weighted that summer was 182 pounds(82.5 kg).
Yeah the website definitely needs some work. It looks like a side project with a few articles, and then you realize agentzh is the owner of like all the commits to make openresty useful. It's like that rundown restaurant that you keep going back to because the food is so good.
I think this headline is misleading. Per discussion from yesterday (there's another thread), TSA published a document which says that they may decline opt-outs but that passengers can "generally" still opt out (they didn't publicly state who won't be permitted to opt out or when or why). While this is a very disturbing change, it's not quite the same as eliminating opt-outs entirely.
Is the ad hoc distinction between compilation and "transpilation" really worth it? Can't we just call them compilers? I get that the difference between compilation and transpilation is that the target language of the latter is not a lower lever language, which would be in the case of C and Assembler, but that it targets a language that's more or less of a similar level. Is this really worthy of another term? I'm not sure.
Probably worth checking out https://www.youtube.com/watch?v=Mq785nJ0FXQ

The relevant point being that not everybody believes they're a "game of skill" in the "skill vs. chance" slider which is relevant to the law. While there's no question that like every game, user actions (skill) can impact the outcome, how much it can impact the outcome is what determines whether something is classified as a game of skill or chance. Perhaps it's more clear if we say "a game of primarily skill" or "primarily chance".

If daily fantasy sports is primarily skill-based, they can do it. If it's primarily chance-based, it's illegal in the US. Which is why they're pushing for it to be referred to as "skill-based".
I'm almost glad I didn't pay more attention in chemistry class because I'm sure I'd do some of these blunders.
"that cycling a lot will wear out your knees and hips prematurely."

Can you define what you mean by "a lot" in both number of years and typical time spent? Typical routine?
Disclaimer: I work for Mozilla, I maintain django-browserid (and StravosK is a valued contributor <3), and I have implemented Persona on many sites. This is all just my own personal opinion.

I was very bullish on Persona early on, but the fact of the matter is, we failed. And not just because (as I feel is being implied) some higher up suddenly came over and asked for an unreasonable amount of adoption for a revolutionary product.

We failed for a thousand reasons. It should've been supported directly within the Firefox chrome ASAP. It had branding different than the site you logged in to and was in a popup[1]. It took the name of another Firefox feature that users already knew about. Because the team was experimenting fast, the code quality of the service was such that outside contribution to it (or even cross-team contribution internally) was hard to impossible. There was no (or very limited) metadata available for things like a shared avatar or display name.

We had enough time to do these things, but we didn't. The team accomplished something really amazing, but it wasn't enough, and most importantly, putting more effort into what already existed was not going to work. This idea that Mozilla can just turn around and throw effort at Persona and make it win now is, IMO, wrong.

Identity needs more experimentation, that much is certain. But harping bringing back Persona in particular is beating a dead horse. We need a successor or a new project.

[1] Not only did this make Persona look incredibly sketchy without a lot of priming users, it had a major privacy issue of leaking your identity provider and relying party to Mozilla via a centralized iframe we host. A mailing list thread among the Persona devs and community failed to find a solution to this.
I thought that advice was entirely tongue in cheek...
it's going to be a bummer to finally be forced through one.

Earlier this year, Terminal 5 at Heathrow wouldn't let me opt out of the scanner. Kinda felt like a personal violation, but the duty guards just said I was uneducated for having any concerns outside of their training.
Probably the better comparison would be how likely an amateur is to win against the world backgammon champion. Backgammon has some luck in it with dice rolls, but if the skill difference is big enough luck has a much tougher time making any difference.
Google and startups are two extreme ends of the spectrum, and neither is that great in terms of risk-reward balance. Personally, I'd recommend joining an established, but still growing, medium-sized company. That means shortly before, or a year or two after IPO, somewhere between 100-500 employees. That kind of a place still has momentum and is still relatively generous with equity. You won't get as rich as your pre-IPO coworkers, but you'll do OK and with less sacrifice. If the company is still growing, there will be opportunities for promotion and for learning and doing a lot of cool things. Think of joining Google or Facebook when they had 500 employees. In hindsight, it seems obvious that that was a good time to join, but I'm sure that lot's of people passed on the opportunity, thinking that it was too late. So recognizing that a company still has momentum can be a bit tricky. If you are coming out of college, one easy way to test if an established company is still a good place or if it has stagnated is to do an internship there.
The problem with this theory, as I see it, is identity. When you go through the body scan, they don't ask for your identification. Yes, they ask for ID before going to the security line, but there's a very difficult combinatorial problem with lining up IDs with bodyscans.

Also, I'm inclined to believe that the TSA is incompetent all the way up.
Fast-http-server: Super fast, zero configuration command line HTTP Server
This is nonsensical. From the time that a person looks at your identification to the time that you go through the scanners, there is no tracking of individuals to associate the body type and DNA information with the ID provided.

Depending upon the airport, people can go from the ID checks to up to a dozen different lines with no ordering of people as they go through the scanners. Then on the swabbing side, there's no checking of ID once again.

If their intent was as nefarious as you claimed, the TSA would have changed the way you move through security in order to properly correlate the collected biometric information with ID.
This isn't as strong a statement as it seems. It doesn't say that the machines themselves don't store PII, or that "AIT screening does not result in any permanent record of PII". There have been cases of body scans leaking (if I recall, the vendor was recording the scans within machines used by the US Marshals).
very true.
> They're still unique to you.

Nope. Most free email providers out there (including gmail) have policies for username expiration, some even quite aggressively (like one month without login). "Me" on one of these services might not be "me" in three months' time, but you-website won't know that and will happily send a password reset link to my old email.
Swabbing someone's hands is a pretty poor way to get a DNA sample. Plus, they'd need to prep the sample in short order in order to correctly analyze it.
Hey Michael! <3

Aw :( Do you think these problems can be solved with an extension or a different protocol? How close were you to a solution for this?
I'd love to hear more about this - any chance you have an example bike?
Building a Blog with Webpack and React
How does the Cybersecurity Act of 2015 change the Internet surveillance laws?
The NSA uses RHEL so that means pretty much everybody in the world ("directly or indirectly") uses RHEL.
My guess is that this demographic would tend to categorize traditional Chinese medicine as being pseudoscience – if you agree, here's an example from within that system:

The 2015 Nobel Prize in Medicine was awarded to a Youyou Tu, a Chinese pharmacologist who identified powerful antimalarial compounds in a traditional Chinese medical formula that has been used for centuries to treat Malaria:

> Youyou Tu in China turned to traditional herbal medicine to tackle the challenge of developing novel Malaria therapies. From a large-scale screen of herbal remedies in Malaria-infected animals, an extract from the plant Artemisia annua emerged as an interesting candidate. However, the results were inconsistent, so Tu revisited the ancient literature and discovered clues that guided her in her quest to successfully extract the active component from Artemisia annua. Tu was the first to show that this component, later called Artemisinin, was highly effective against the Malaria parasite, both in infected animals and in humans (http://www.nobelprize.org/nobel_prizes/medicine/laureates/20...).

There are plenty of other examples if you are curious and inclined to do the research.

As an aside, I would argue that the type of empiricism within this system of medicine is indeed a type of science (cataloguing pharmacological agents for thousands of years and recording their effects in the treatment of myriad medical conditions), but it probably has little to no examples of the modern day notion of randomized clinical trials.
This could just mean that all PII is handed off to another agency before it is stored. The NSA pulled similar shenanigans with public statements about their bulk data collection.
You can't give both teams a 15 yard penalty. How do you set up a rule so you don't incentivize teams to 'draw the foul'?
Maybe the transpiler is just a spackled polyfill enabling splats because dunders are unreliable?
So it's probably more likely that opting out is now a courtesy and that if they want to make you go through the peep-show machine, they can.
All gym-goers and runners gang up and downvote me... but this won't change what I said. Read up, educate yourself, research other species, and you'll find the truth.

And let me be even more direct: you're endorphins junkies!
Forgot about Dancing Naked in the Mindfield -- similiar to Surely You Must Be Joking. the author is the inventor of PCR and has some pretty outlandish stories fueled by hallucinogens

Also going to read Infinite Jest while I'm traveling the next few weeks.
Adding onto this, a skin swab for a DNA sample is pretty useless. You have contamination from everything from skin flora to skin cells from other people you've had physical contact with. Given the very public nature of airports, contamination by others is not far fetched.
So you got rich?
Just a usual all-inclusive war plan. Both sides were producing them prolifically.
People who don't want risk can go to Google and make tons of money.

Where's this meme that Google just hires everybody who wants to work there coming from? Google has known-broken interviewing processes for hiring capable people (he says, bitterly, after never having had passed a phone screen with them).
A Spellchecker Used to Be a Major Feat of Software Engineering (2008)
formatting on code sample was wonky, just fixed them , refresh and enjoy!
I'm with you. A transpiler is exactly a compiler.
While as you point out there's not necessarily an academic difference, the notion that your target language will itself require a compiler and/or runtime is useful to know up front. Transpilers also usually attempt close to 1-to-1 translation. Functions become functions, constants become constants, etc.

As someone who has written many compilers before, I'd almost feel it would be a slight disservice to call a transpiler a compiler, mostly because their architecture and goals are often different.
I thought so too. But then people started forgetting their passwords, so i made email mandatory. People will rarely write down/take note of their password to a website that they "just want to check out".
Great article! Really accessible for a newbie. I'd love to see a comparison between using a manual lexer/parser like the one seen here and using OMeta/JS, which seems like a real time saver for people playing around with languages. https://github.com/alexwarth/ometa-js
Well then the joke is on them, as I can assure you that a scan they made of me 5 years ago no longer matches my body shape so they are going to have a hard time tracking me.

After this holiday's eating season is over, my body shape will diverge even more!
I frequently have conversations with the TSA about their machines. They have been trained to discuss the differences between backscatter x-ray & MMW technology to allay concerns about the health risks associated with the former, especially in airports that only use the latter. They're typically very surprised to find that I'm very clear on the differences, and that my objection rides on the privacy implications rather than health concerns. Call me old fashioned, but we shouldn't let it become normal for the government to scan your body as a precondition to travel.
Java in 2015 – Major happenings
Make me think of this and optical illusions.

http://www.ritsumei.ac.jp/~akitaoka/index-e.html
One of the most unintuitive concepts in thinking about Cold War strategy is the assertion that explicitly targeting the opponent's civilian instead of military targets was morally superior: targeting military first (counterforce targets https://en.m.wikipedia.org/wiki/Counterforce) would potentially prevent retaliation and thus allow an aggressive first strike. Targeting civilian (countervalue targets https://en.m.wikipedia.org/wiki/Countervalue) would ensure destruction and thus be inherently defensive.

It makes my head (and heart) hurt to think about it and I'm glad that I didn't have to make those kinds of decisions. I can see how it can (and did) lead to madness and the kind of irrational thinking satirized in Dr Strangelove and other stories.
> Everybody should build code at this level from day 1.

On the project I run, the CI will reject your code in CR if it doesn't compile under two different compilers with all but a handful of warnings turned on as errors, runs and passes tests, and passes various linters, including a check for undocumented types, variables, parameters and return values. IMNSHO, every project should be like this. Once it's setup, it's a breeze and doesn't impede development speed at all.
please remove the tinfoil hat...
Remote Talks – Rust for Rubyist
>> Other people (i.e. investors) are making money off your work

If you are philosophically averse to this, your options seem pretty limited to me.

If you join a startup, it might be investors, as you point out. If you join a big company, it will be that company's shareholders. If you start your own company, it might be your own investors, or if you have none, the government taxing your corporate profits. Also better not start any company doing things like productivity tools, raw materials, etc. Your customers might make money off your work that way...
would you rather have no security and feel good knowing anyone can walk into the airport unhinged and hop on an airplane?
The only thing that has a chance of happening is some external party coming up with a different protocol or extending the existing one, and gaining traction as an identity provider. Then, like we did with Pocket and "Save for Later", it's not unreasonable to think that Firefox would accept a system add-on that is compatible with this protocol to ship an in-browser UI.

"gaining traction as an identity provider" being the hard part, of course.
> If you want to get rich, your best bet on a risk-adjusted basis is to join a profitable and growing public company. Google for short. Make $200-500k all-in a year, work hard and move up a level every 3-5 years, sell options as they vest (in case you joined Enron), and retire at 60, rich. This plan works every time.

I'm pretty sure that is the only part of the advice that wasn't a joke.
17+Indian+Muslim+Entrepreneurs+Whose+Stories+Will+Amuse+You
The problem at that point becomes you start to implement a service, rather than a protocol. I'm not sure there is necessarily a solution for identity with the way email is currently implemented.
It's still feasible without the direct tracking. If you see the same body/DNA at three different times, odds are only one person was flying at all three times, and then you have a match.
These forced MitMs are all very similar, though I don't see how that gets us anywhere. It's not a valid way of enforcing any policy no matter how twisted, because people will root their devices and circumvent the lock-down.

The reason I call it twisted is because I'm wondering why that lock-down is necessary in the first place: you don't want them to "abuse" the device, causing potential damage? This might be a valid concern with company cars due to the life-threatening aspect of driving, but extending this concept to laptops seems abusive. Either way, the risk posed to the school or company's assets can be effectively taken into account by some kind of insurance policy, not by attempting to lock down the device.
I calibrated mine -- there's a little calibration screw on the back labeled with "Gamma, X-ray, UV, Visible, IR, Microwave, UHF, VHF, HF, ELF"

It's only got about 120 degrees of rotation, so it's tricky trying to tune it to emit a particular color.

I had it turned to ELF for a while, but then the Navy called and said my flashlight was disrupting their submarine communications.
But Persona isn’t passwordless, or?
Strange name.

Gusto is a polysemic Spanish word: taste, flavour, pleasure.

I guess they were thinking in "pleasure", but for Spanish speakers, it just sounds weird.
Unity is really user-friendly and easy to use for first-time computer users, doesn't matter what people say. Individual apps, not so much...
This objection seems... naive? Taking an engineering mindset, matching up people and scans doesn't seem like a very hard problem. The checkpoint areas are blanketed in cameras, so face recognition is one possibility. Or, an easier solution would be a computer vision system that tracks movement.
What did Jesus really look like?
Was that talk made available online? Would be curious to see it!
Meet the mop millionairess behind Jennifer Lawrence's Joy
I am! Federated authentication would be a beautiful thing. I'll lend my dev/sysadmin experience to a project like this.
I should probably begin reading author names when starting to read articles - knowing this was written by Julia Evans would have clued me in on how fun a read this was going to be, and motivated me to cut down on the open-tab-procrastination hours!

> So now we’ve seen the network do a correct thing, and we’ve seen it make an adorable mistake by accident (the queen is wearing a shower cap ).

This is such a Julia sentence, including the suddenly appropriate emoji, it should probably have clued me in.

Edit: HN is breaking my heart with its anti-emoji stance, so (re)read the article to see the quote in its full glory.
Ten might be overkill, but I really want to have an html version hosted online as well as a PDF version with the same content and LaTeX-quality typesetting (my current resume is written in LaTeX). There's some hacky tools out there for taking a resume in markdown and making html + pdf, but nothing really satisfactory, so I'm thinking this might be exactly what I've been looking for.
What somehow bothers me is that the new protocol is all-in-one. Instead of building on / integrating with CalDAV / CardDAV and being modular, they are rolling everything in the same protocol. This is possibly convenient for a protocol controlled by one commercial entity, but why not just use Outlook's then?

Piggybacking it over HTTP also looks a bit strange, but probably helps corporate firewall penetration.
Unless you are a not a US citizen of course, then you will have your fingerprints taken regardless.
The thing about startups is that very often, other people are not making money off your work.

I did a lot better at the two startups that I worked at than the either the founders or investors did. At least I got paid; it may've been below market, but I ended up with net-positive income from them.

Probably the most valuable experience you can get out of a startup is learning that most things fail, and when they fail, they take everybody involved with them, and it's your responsibility to dig yourself out and either make them succeed or find something else that will. Only then can you make informed decisions about your career. A lot of people who join the secure, steady thing never learn this, and then they're completely blindsided when it fails too.
That kind of inflexibility seems like a good signal that you might not want to work there anyway.
I think you're acting just the slightest bit rude here, frankly. "Entrepreneurial ambition" != "Silicon Valley/Ponzi scheme/unicorn". Starting a business doesn't mean you have to join the VC/SV/startup treadmill. You can get away with doing the same thing that the vast majority of entrepreneurs have done throughout history: take a skill you know, strike out on your own, and start offering to make things or perform a service in exchange for money. It wasn't until the internet came along that you could become a billionaire in under a decade doing it. That's a distortion that recent history has introduced. The vast majority of entrepreneurs are not SV titans - they're small businesses.

I don't have much respect for folks who denigrate those sorts of ambitions, especially on HN. On top of helping to continue to distort the overall shape of entrepreneurship, it's awfully close to a personal attack, as it's basically saying "Your dreams are stupid".
https://news.ycombinator.com/item?id=10779589
You can actually take things way further in Go: https://blog.codeship.com/building-minimal-docker-containers...
Purism's Librem 13 laptop will come with Qubes OS installed