skysight-inc/HackerNews huggingface dataset:
The threat is long proven and it's wise you consider it. The high assurance sector & CompSci demonstrated it repeatedly in pentests and evaluations going back to the 70's. Here's some stuff for you or anyone interested in the subversion threat.

Landmark work by Myer in 1980 fleshing it out
http://csrc.nist.gov/publications/history/myer80.pdf

Demonstration of simplicity of it against NFS by Anderson
http://www.dtic.mil/dtic/tr/fulltext/u2/a401762.pdf

Lack's use of one against Windows XP
https://calhoun.nps.edu/bitstream/handle/10945/962/03Jun_Lac...

All the same group, Navy Postgraduate School, with some of the professors being founders of information security field. They never forget the old stuff that works. Always mention the old strategy, high-assurance, as a solution as it was only thing proven to work. People never learn, though. Hence, endless opportunities in new projects for 0-days and subversion. ;)
Some of it's also that the large-scale buildout of automotive infrastructure happened at a time when governments at all levels in the US had pretty wide latitude to "make things so." While there are some pretty bad examples of urban planning from that era, there are other things that are pretty much net positives. This includes much of the interstate highway system but also includes other projects like Lincoln Center in New York. Today, for better or worse, outside of extreme urban blight it would be incredibly difficult for a city government to just bulldoze an entire neighborhood.
Sam's teach yourself Latin in 30 days
I see it more as an attempt to offer better quality to people with crappy ISPs as they expand to more countries. Previously, they would have seen a low-res Bojack, but now that Netflix can decide that a full HD encode of Bojack can fit in a smaller bitrate, those people will see a high-res Bojack. It might even be related to the T-Mobile announcement that allows people to watch Netflix without eating into their data caps as long as the bitrate is capped.
Death, Redesigned
No, this is how I program all the time. Usually when I start typing I have only a rough idea of what I want to do.

But in practice this is not a problem. So what if I don't know exactly what type a particular thing will be in the end -- I know generally if it is a number, or an array/list, or a hash/index... that is all I need to know. I use one of those basic types. If I need to change it later I change it later, and the fact that I am in a statically-typed language is great for changes like this because it helps me make them with high confidence.

This is why I don't believe that anyone who makes this argument in favor of dynamic languages really has that much experience in static languages. The actual outcome in real life is the opposite of what is described.
Looks awesome. Looking forward to it!
The Assistant Economy
I use a lot of web apps on my iphone. They don't have access to all the phone's apis, but they do everything I need, without any hindrance from apple oversight.

This is probably the most native looking one of the bunch: https://forecast.io/
> which has been thoroughly discredited.

No it hasn't.

> When making actual apples-to-apples comparisons

Which is how sexists justify paying women less for doing similar work, whilst ignoring the fact that they're also preventing women from getting the higher paying work.
Price discrimination in no way implies a conspiracy nor any ill-intent on the part of the company. It simply implies that there are different customer segments with different willingness to pay and not perfect competition.

Seniors and military discounts aren't BC companies objectively care more about those populations. It's because those groups tend to have slightly less disposable income, so the company uses price discrimination to segment their market. The same is true here for women -- their price elasticity is different than men on average
Revolution in Investor Relations
Aight. Thanks for the link anyway.
This post is so good I think you should expand it into a longer blog post and submit it to HN for further discussion. "How to evaluate a startup job" or some such.
It's Boredom Sensitivity, Not AD/HD
I'll skip some mentioned already by others. Books I really enjoyed this year:

The Wright Brothers, David McCullough - wonderful book on the Wright Brothers, easy to read, shows that persistence and logic thinking pays out. 5/5

The autobiography of Malcom X, Malcolm X - Nice bio, a bit repetitive sometimes. 3/5

Atlas Shrugged, Ayn Rand - Although the book has more than 1200 pages it really kept me going. I read this book to get a better understanding of the ideology of some republicans. Fun read. 4.5/5

Freakonomics, Steven D. Levitt - Levitt studies all kind of different everyday questions using economics. 4/5, short, easy to read

Guantanamo Diary, Mohamedou Ould Slahi - Diary of a Guantanamo prisoner who has been imprisoned since 2002. The US has never charged him with a crime. Profound and disturbing. 5/5

No place to hide, Glenn Greenwald - Story on Edward Snowden, probably read by most of HN. Enjoyed it, that's it. 4/5

How to lie with statistics, Darrel Huff - Short book on statistics, easy to read and fun. 4/5
tqdm looks super promising. progressbar and progressbar2 end up being complicated and weird enough to use that my company ended up making wrappers. Why maintain that when you can just use a library that works out of the box.

It would be great if it had ipython notebook support. I often end up doing long operations that scrape services for data but have no idea what their progress is.

For me 2015 has been the year of tox. It is a great tool and worth using for just about any python project.
Bah! Can't go past create account page on Android.
I have, actually this year too (missed it in the list because it didn't come from Amazon). I read the collection Nine Hundred Grandmothers. I thought it was pretty uneven, but the highs were very high. There were 4 or 5 stories in that collection that were just amazing, of the "how the hell does he DO that" kind. Some others were kind of preachy, or little more than sketches.

Going to read more Lafferty next year, I'm pretty sure.
Apple's contemplating building a server farm not terribly far from where I live, so no, I don't think they're using Amazon. I think that comment is supposed to mean that they all have access to big clusters, not that it's the same clusters.
If you want a more detailed description, go to Wikipedia and read up on the difference between public and private key cryptography. What politicians are arguing for isn't just adding another private key to private key cryptosystems; a backdoor eliminates the biggest advantage of public key systems by adding a private key that could crack any of them. Once you add that, it's just a matter of time before someone cracks it.

Really, it's inevitable. Someone doesn't even need to crack it, you just need a single careless or corrupt government employee to compromise the whole system for everyone for all time. People are proposing adding a single point of failure to systems whose usefulness is currently defined by their lack of such a single point of failure. Put that in there and we may as well all go back to using DES for everything.
To be fair, it's probably not "many eyes make all bugs shallow" which is necessarily false, but the implication that open source guarantees enough eyes to begin with.

Whether or not an open source project is popular, whether contributing looks good on a resume, the number of competent programmers in the relevant fields with time to spare, and even the aesthetic quality of the code probably have influence on how much attention it gets. A hip framework is bound to get much more attention than an old, horrifying to look at mess of C, even if the latter happens to be mission critical to the internet.

All bugs might be shallow, if the number of eyes scaled in proportion with the amount of code, and the number of languages remained constant. The problem might be that people simply assumed Linus' law to be axiomatic, which results in kind of a Someone Else's Problem field permeating the community, as well as an implicit trust in the security of FOSS code which might not necessarily be warranted.
This.

Any time someone trots out the '79 cent for every dollar' canard, their credibility goes to zero. Ie they are either too stupid to properly research the issue or actually intend to obfuscate it.

The real wage gap is about 3% (http://time.com/money/4009768/wage-gap-men-women-equal-pay/). But most of that comes down to choices made by the individuals - hours they work per week, career interruptions, etc.
What is your opinion on The Guns of August? I'm still looking for a good book on World War I.
Hmm I thought you were implying that was everything. Oops.
And for counter examples, I refer to the CERT emails I get regarding the latest software vulnerabilities and patches.

Software security is unfortunately, a goal, not an absolute. The process is both fluid and dynamic, and the improvements iterative.

To directly address the tenor of your comments, perhaps it would be better to say, "More eyes make bugs more shallow."
Not mad ... not sad ... not misunderstanding. Just weirded out by the use of non sequiturs to crap on a thought you didn't like.
It's a bit confusing. For instance around page 80:

Table 5: Male suicide deaths and those aged 45-54 in the general population, by UK country vs Table 7: Patient suicide: male suicide deaths and those aged 45-54, by UK country.

Table 5 shows the rate. Table 7 shows the actual numbers. Why? Even the first key finding speculates about patient suicide increase due to higher numbers of patients. Do they not have this seemingly important statistic? A quick search says "a quarter" of the population will have a mental illness during the year. If true, then we'd expect around 25% of suicides to be from patients, right?

Why separate the APAP/opiod combination in light of suicide if the APAP wasn't a relevant cause? It seems like respiratory depression and liver poisoning aren't that synergistic are they? An opiate naive user with 10/325 oxy/apap would almost certainly hit opiate overdose before liver damage was a life-threatening issue.

The study recommends "safe prescribing" but then shows the majority of opiate suicide isn't with a prescription, and prescription overdose is skews heavily to older females with a "major physical illness". And no comparison on how rx abuse compares with non-mentally-ill patients. Edit: And rx rates, too. I'm guessing older patients generally get way more opiates prescribed than younger ones.

Interesting read though, thanks.
Actually 9KM from the launchpad I believe.
Elaine Levey, Thomas Rothvoss - A Lasserre-based (1+ε)-approximation for Pm∣pj=1,prec∣Cmax http://arxiv.org/abs/1509.07808

People are very excited about graph isomorphism being solvable in quasipolynomial time, but there are a few more problems from the seminal Garey, Johnson book that are still unknown to be in either P or NP-c or neither. One of them is computing the optimal schedule for three machines processing some tasks (jobs), when the tasks have all the same size, but there are dependencies among some of them and you have to do them in order.

This paper proves that there is a (1+ε)-approximation of this problem in "slightly more than quasipolynomial time" (I love this phrasing).

The technique they use is a Lasserre hierarchy which is a very exciting tool in theoretical computer science, although there still exist only a couple results where this hierarchy approach brings more to the table than other methods for designing efficient algorithms. This is one more to the list!
I've started keeping a file on my GitHub account where I'm listing every book I have read (or at least remember reading). Most of those listed there I have read in 2015 (there's also a score next to each one): https://github.com/aleksandar-todorovic/notes/blob/master/00...

Unfortunately I am quite a bit behind the goal I gave to myself (14/25 at the moment).
You are absolutely right that controlling for time worked, experience, education, etc makes virtually all of the wage gap disappear.

Nonetheless, that is totally irrelevant to this topic. Regardless of the reasons, women do earn less than men on average. Since the topic here is about spending money (i.e. consumption side), then the amount of income available to a person to spend is absolutely relevant (regardless of the origin of the disparity in income). The reality is that most women are making less than men and yet goods tailored towards them do cost more.
In modern economic terms, subsistence living in small communities barely registers as existence at all. However it is the way most of humanity lived for most of history. And generally it seemed to be a satisfying way of life. We evolved to live in this way.

We think of people living in situations of subsistence as being unbearably impoverished and disadvantaged now. We have no evidence that we are really any happier or more fulfilled than them. We have longer life expectancy, and we spend much of it isolated and lonely and sick.
Thats interesting. Can you please share how you invested in startups via Roth-IRAs? I am exploring ways to do something similar.
But beagle3's point is that the lock-up period means you still take on risk even if you wait until the liquidity event. Perhaps this is less risk in many cases, but it still isn't zero.
Leaked screenshots suggest WhatsApp could add video calling
Books I'm glad I've read:

The Inner Game of Tennis

Impro by Keith Johnstone

Seeing Like a State

The Timeless Way of Building

Linear and Geometric Algebra by Alan Macdonald

Meditations by Marcus Aurelius (read this one thrice)

The Tao of Pooh

Science, Strategy and War: The Strategic Theory of John Boyd

The Drama of the Gifted Child

Interaction Ritual

What Do You Say After You Say Hello?

Of niche use:

Mathematics: its Content, Methods and Meaning - mostly useful for figuring out what math you don't know. I recommend reading it at a fairly decent pace, and noting what subjects don't sound like an overview of something you've already learned.
I started drawing on my break. I've always considered myself a pretty terrible drawer and I draw like a 2 year old, but I decided to take a course online and do the exercises and pay attention. My drawing ability has improved so dramatically in just a week. Inability to draw is essentially just a series of psychological hangups people have about the way they see the world. When you become aware of them that in itself can dramatically increase drawing ability. The rest seems to be developed with repetition and focusing on learning to "see" more objectively. As much as HN hates Udemy I really like this course https://www.udemy.com/the-secrets-to-drawing/
Most of this article reads like the summary of "You on a Diet" from Oz and Roizen. I'm glad much of the science hasn't changed. It's not that calories don't count, but that satiety as a signal of sufficient food gets messed by overeating and obesity as a whole.

I'm glad they didn't try to foist the "hormonal" theory of metabolism on us again because calories in vs calories out is still a solid model for weight loss. It's just not enough if you eat the wrong things to fix your satiety signals.
Kid Unwraps His Christmas Gift
So, it only affects bandwidth and not storage space?
It could well be due to things like shared libraries. A larger distro will have more options enabled, causing more shared libraries to be linked into the same running processes, and thus more shared libraries to be fully loaded into memory.

A smaller distro might even statically compile most things - Alpine does. If you dynamically link shared libraries, the whole library is loaded into memory to serve the process. If you statically link, only the actually used part of the library is included in the binary.

Statically linked binaries can't share the library in memory between each other like dynamically linked binaries can, but if all your processes are running in separate containers, they won't share those libraries anyway (unless they're all in a VM and the rarely used "samepage merging" is enabled for the VM).

Finally ... simplicity has knock-on effects. Making things simpler and smaller (not easier), and reducing the number of moving parts in the implementation, makes cleaning up more stuff easier.
I wonder how big of a performance penalty we're talking about here, in any case. Systems are so fast, and text processing is so cheap, I doubt anyone is going to find that tailing the log and grepping out some strings is going to impact their system in any meaningful way. It would require tremendous request rates to be notable, and the bottleneck in such a scenario would be far, far, up the stack (probably database, followed by web app, followed by web server, followed by a hundred other things on the system, with tailing the log somewhere way down at the bottom).

I'm not opposed to other ways of solving it, but I think the belief about how much resources it takes to process a text log file that people are expressing in this thread is at least a few orders of magnitude off.
"German authorities have made clear anyone reprinting an unedited version will be subject to incitement laws."

Nothing has changed. The Strafgesetzbuch § 86a exempts academic study from the ban on Nazi propaganda, and now Mein Kampf is eligible for the same.
Amazon has been selling what appear to be insanely high v0 mp3s for years now. Of course, there's no way to know for sure. This is what they claim "Where possible, we encode our MP3 files using variable bit rates for optimal audio quality and file sizes, aiming at an average of 256 kilobits per second (kbps)" but the bit rates suggest insane v0 to me.
> Why do they deserve to be prioritised over the millions of other species on earth?

Hmm...should save a human or an animal? Wow this sub thread is shocking. Let me throw in my obnoxious hat into the ring; why not get rid of useless/unproductive/racist/bigoted/terrorists/middle management people to save the animals? Even better, why don't I unilaterally decide who is important and who isn't just to save animals? Just....wow.
I think this article is missing a fundamental truth about life, and its conclusions are distorted because of that:

You have to respect risk. And ideally research it, quantify it, and manage it. The one thing you cannot do is ignore it.

Joining a startup is risky. Founding a startup is even more risky. Taking stock options instead of salary shifts more of that risk onto you, as an employee. You need to be aware of this risk, and in that regard, all of these articles about employee equity are performing a very valuable service.

But you also have to view them in the context of the whole other portfolio of risks you are taking in your life. The article, for example, says that the chance of rain on the 1st and 15th is 100%. This is flatly untrue, as any former employee of DEC, Sun, IBM, HP, Yahoo, Tandem, Stratus, Symbolics, or other formerly-highflying tech companies can attest. It is a guarantee that you will get screwed over sometime in your working life, and the best response to that is to learn from it and minimize the chance of it happening in the future, or at least maximize the returns from when you don't get screwed over to buffer your total returns.
Quick free iOS 9.3 ifunbox download
The quickest way to build rapport when meeting new people [video]
Advanced Android Espresso
I think you've hit the nail on the head on the demand/supply issue.

I have two daughters, one likes pretty much everything my sons do, the other likes more traditional girly things (we don't encourage or discourage which toys the kids play with in the house, it just worked out that way). When I saw the two products, I thought, I wouldn't buy that scooter for my one daughter, she'd never use it. My two sons would both love it (thought not in pink). And if my girly-girl wanted a scooter, she would want it in pink if it were available.

It's an anecdote, but I'm around a lot of other parents with girls and boys and it doesn't strike me that they're going to produce the pink scooter in the kinds of quantities that they're going to with the boy-branded one which will likely affect the cost of production resulting in an expected difference in the cost of the product.

On the razors, there are subtle differences. The lady's Gillette product my wife used to use to shave is significantly different, designed to be held differently for shaving the variety of areas that women typically remove hair from. It was also a much larger product. The blades, themselves, were 1/3 larger, with an extra rubbery pad on the top and the bottom of the blade. They cost about 10% more than the men's version and from a basic visual inspection, that seemed like a fair price difference.
We did see that effect! But, it was pretty minor. In fact, we saw all sorts of effects that would have been impossible to observe in a traditional lab experiment.

One other interesting effect we saw was a day-to-day restart effect: just leaving and coming back the next day was enough to raise the amount of cooperation a significant amount. It's not detectable at the individual level, but in aggregate it's as if going everyone going about their life for a day was enough to instill some new optimism about cooperation at the beginning of a new session than at the end of the day before.

Just that last observation returns to the original point that was made: is it even reasonable to draw conclusions about real-life cooperation from these highly clustered, short-term studies in a lab? We're trying to show that the "virtual lab" on the Internet is a way to get around these constraints.

If you're doing research in this area, check out our OSS projects: https://github.com/VirtualLab
Is that title a play on the also failed education policy called "No Child Left Behind"?

Such policies fail for a reason. You're not supposed to cater to the least common denominator. That way you'll slow your progress down much more than you would otherwise.

You can't support broken security for another decade just because 2% of the users will continue to use the tools that are broken. I'm willing to bet there will still be Windows XP users 10 years from now unless everyone just decides to leave them behind and purposely break their apps' support for it. And they'd be doing those guys a favor.

Here, it also teaches OEMs that they can continue to leave their devices on ancient versions of Android, because someone else (hint: like Cloudflare or Facebook) will solve that problem for them down the line. When instead, the people who bought the phones from Huawei or Xiaomi, or whoever sold those Android 2.3 devices last, can see their devices stopped working properly, curse those companies and buy from someone else next time.
If a scheduler change breaks userland apps, that sounds like a scheduler bug to me... Any word on whether there is going to be a rollback/further scheduler changes to make spinlocks useful again?
Consumers don't understand bitrate for videos. They only care if they can watch 1080p on their 1080p TV. It doesn't occur to them that resolution is only a minor player in digital quality.
I liked it a lot, it is really good. I would definitely recommend it to anyone wanting to learn about WW I. Also highly recommended is Dan Carlin's 6 part podcast series Blueprint for Armageddon Here is the link to episode I http://www.dancarlin.com/product/hardcore-history-50-bluepri...
Atlas Shrugged needs to come with a warning label.

"If you are male and between the ages of 13 and 21 this book should be considered harmful and potentially dangerous. If you are high achieving academically but socially awkward you should not read this book as it may exacerbate anti-social personality disorders."
Is there going to be an area onsite for the hackathon?