skysight-inc/HackerNews huggingface dataset:
Very cool.

If the author of this page turns up can I suggest one thing - image optimisation. You could save a chunk of bandwidth cost for yourself and others browsing on metered services, and improve your page load times by not having ~seventeen 3-5 MB (~5300x3000px ) images being loaded, especially when none of the 720x146 px images can be clicked to show a larger version.

This page is 72MB big and took 100 seconds to load, even on a non-congested 8MB DSL service.
> Thing is, in the world of design patents even trivial changes are sufficient to avoid infringement.

The Samsung case showed us that even a trivial match like rounded corners was enough to establish infringement, though.
Ansible is probably the best bet - once you have SSH it'll pretty much work with anything and it also has support for creation of servers on several cloud providers and stuff.

We use it for automatic configuration of everything from colocated hardware to $5/mo VMs on DigitalOcean and other low-cost virtual server providers and it works great.
For GPL-licensed software, yes. http://programmers.stackexchange.com/questions/185729/is-it-...

I'm not trying to sell licenses directly on the site anymore (and had forgotten to change the README), but I'm still going to require copyright assignment, for many of the reasons stated in that SO thread.
although looking at the Slack app (which is built on Electron) it's only 18mb, so maybe I just need to look into slimming down the build.
Blah blah Orwellian peabrains! Look, I'm doing it, too!
Postico – A Modern PostgreSQL Client for OS X
You could use something like Terraform to help automate this. It's like CloudFormation but also supports GCE, Azure, DigitalOcean, etc.

0 - https://terraform.io/
Ethereum will move to proof-of-stake, as described in a blog post yesterday [1].

I agree with the author that blockchain-based tech is more appropriate for small networks at present, yet the tech (e.g. Lightning network) will only get better and enable bigger and bigger networks.

BTW, what the hell is up with capitalizing 'blockchain' as the article does? It's like capitalizing 'database'.

[1] https://blog.ethereum.org/2015/12/28/understanding-serenity-...
Thanks! I will take a peek at it.
Yeah. Somehow the URL was lost, I must not have set the autorenew properly :( but we turned the app into a successful card game at PlayTheLoveGame.com
On a related note, I have not seen anyone talk about compensating the AI. Presuming it learns the idea of survival, couldn't it also learn the idea of being compensated for its work? It could tell we are benefitting from it's work and require some incentive. But what would it want? More computing power?
Man, and here I thought social Darwinism was dead
The patent was on the design as a whole, but when they tried to filter out which elements of the design were both protected and similar, rounded corners were held to be enough to establish infringement.

So it doesn't lose its silliness when you understand it better.
Depending of how much of Satoshi's fingerprint is left and how early they started to version control the code.
That seems excessive. Do you have any enemies you're particularly worried about attacking you? If not, then this is important but not THAT imminent of a threat to you.
Similarly I wrote a tool that uses Faker to generate api fixtures :) Why go stright to the DB when you can test your api at the same time?

https://github.com/MusicMapIo/Mokr
Previous discussion from about 5 months ago: https://news.ycombinator.com/item?id=9838040

It has reached version 1.0 since the last discussion.
As an artist, you should be so lucky that people want to copy your art. It is the best way to ensure your relevance.

Think of a band like U2 - probably the most copied "art" in the world. From memory, their last tour grossed over 1 Billion.
Indeed. The JS community flirted with the idea of a monolithic do-everything framework for a bit longer than I expected, but thank god the madness has passed.
To put this in perspective: the US emits 6,673 million metric tons of CO2e* each year [1]. That's 18.2 million per day.

EDIT - I also had some numbers wrong! I was using the total leakage as the daily leakage.

This leak is 110,000 lbs CH4/hr, 50 metric tons CH4/hour, 1200 metric tons CH4 per day, 30,000 metric tons per day of CO2e.

That's .16% of our nation-wide emissions. Or, about as much as a half-million people.

*(CO2-equivalent, abbreviated CO2e, is used to normalize emissions of different gases. They are weighted based on their Global Warming Potential (GWP), which is a measure of how effective they are as a greenhouse gas. CO2 has a GWP of 1; Methane has a GWP of 25.)

[1] http://www3.epa.gov/climatechange/ghgemissions/usinventoryre...
Don't Stop Sharing This Until Everyone Knows the Truth About the West Bank
> When the government creates the same amount of money and directly spends it on infrastructure as opposed to loaning it to infrastructure providers what changes?

It's massively less efficient. It's important to note that this is true by definition, not by assumption.

For starters, the provider absolutely does still "pay back" the loan either way. Infrastructure investment isn't free, and if the aggregate value produced by the investment adds up to less than what it cost in the first place, then we would have been better off not doing anything at all.

Secondly, the government isn't able to spend on all types of infrastructure, and when it does, it's almost always less efficient. Public works are only one type of infrastructure spending, and they're pretty much the only one that remains exclusively in the domain of government projects these days.

To give you an example of what "infrastructure" can look like, look at the website we're on. Silicon Valley has a robust network of companies and organizations that both provide capital as intermediaries[0] and increase the ROI of that capital[1]. This wouldn't be possible if there weren't sufficient liquidity

When money is created by the banks, it's created in response to market forces. Banks have to turn an economic profit of zero on the aggregate of all loans they extend, which means that they price them accordingly, and therefore the price of capital converges (in the long run) to the value added by that investment. This makes it difficult (though not impossible) to secure capital for projects that have an inferior risk-adjusted payoff.

By contrast, the government does not create capital in response to market forces. Keynesians would argue that this is the entire point of government economic policy - to smooth out short-term cyclical trends. The problem with "spending" all newly-created money on smoothing short-term cyclical trends is that it leaves zero liquidity allocated to long-term economic growth.

[0] most startups are still funded by banks, at the end of the day, with VCs serving as intermediaries - venture capitalists get their money from LPs, which tend to be institutional investors like banks (or substitutes for institutional investors).

[1] even aside from the money that YC provides a company, YC makes companies more successful (or at least more likely to succeed) through the other, intangible assets it provides.
I hesitate to respond since this seems like an obvious troll.

Your solution is to somehow perfectly protect all CC and SSN info?

How do you propose to do that?
> Actually, it's exactly the cash from the depositor, loaned out.

It's not, because it doesn't show on the depositor's ledger. The bank will not tell you that you have $10,000 left in your checking account because the remaining $90,000 have been loaned. It will tell you that you have the full $100,000 available to you at any time, relying on the fact that on average more than 90% of their depositors' money is extremely likely to remain unsolicited by them.
Can't edit my original comment above anymore, but the video element listens for events play and pause; so, after adding jQuery to the page, you can do

$("video").trigger("play")

and

$("video").trigger("pause")

to play and pause the video.

Don't know about seek, but it's probably in there somewhere (minified: http://secure.netflix.com/en_us/ffe/player/html/cadmium-play...).
I would like to correlate the comments in this thread with past comments on every single article about AWS or GCE of the form "this is so expensive / complicated I run my boxes on Linode for half the price". DDoS protection is one of the things you pay for on the big clouds.
I use Aqua Data Studio - http://www.aquafold.com It has gotten pricier over the years but I spend so much time in databases that it is worth sticking with a familiar tool that does a lot across all the different databases my clients use.
This may be a dumb question as I haven't read the bill, but isn't this what CISA is supposed to help guard against in the future? If Linode has an easier way of sharing info with the USG, can that help pinpoint and mitigate this attack from happening in the future?

Edit: how about a response instead of downvotes?
For the few that I looked at, clicking the "Description" tab tells you almost nothing. Clicking the word "Help" in the upper right gives a much more detailed description.
> I guess to make things awesome on the outside, those on the inside have to suffer...

Or, the two things don't necessarily have to be related.
SSN and credit card numbers should not be considered secret. Anything that must be shared with a third party in order to make some kind of transaction cannot be considered secret; compromises happen, and once compromised, there is no way to make them secret again.

Brian Krebs, as a high-profile author on security who actively antagonizes black-market groups on the internet, is a common target. He has had all of his basic personal information posted on the internet publicly for some time. The credit cards that were used for this attack were all old, disabled ones, since he disabled them after the numbers were leaked; but apparently PayPal still has them listed on the account and so you can use knowledge of them to "prove" your identity to PayPal.
What was missing from Postico? Just better SQL editing support?
> Any company that authenticates customers with nothing more than static identifiers — address, SSN, DOB, phone number, credit card number, etc. — is vulnerable to these takeover attempts.

Does having two-factor auth even matter if it can be circumvented with social engineering from static data?

I also submitted the same article last night:

https://news.ycombinator.com/item?id=10805415
> If you don't allow people to copy interfaces - where does that end? Does that mean that APIs should be protected from being copied?

That is what I don't understand about people who argue that APIs should be copyrightable. It's like they don't see where the end is.

The reason competitors want to copy an API is because it's inherently necessary for compatibility. That need has nothing to do with how good the API is. It exists even if the API is terrible.

And APIs all chain together.

General Electric makes steam turbines. Your power company uses them to generate electricity. If GE (by analogy) controls the API then all power plants on the same grid have to use GE turbines. Your house connects to that grid, so you have to use a GE breaker panel in your house. It has its own API, so you also have to use all GE appliances.

If you want to charge your Macbook or iPhone at home then you had better hope that GE has a deal with Apple, and that they don't cancel it when GE enters the computing market. When they do you'll need a GE phone which will need a GE wireless carrier that will only serve GE websites. Now you can't buy anything from Amazon because you can't get there from here, you have to buy it from GE, and they only sell GE products. And so it goes.

Who are the people signing up for that world?
> Of course most of the time media sources don't invent stuff like this - but tell me, without the widespread publicity, would anyone even hear about this guy?

So that's a different claim.

When he first appeared he was credible - he got published in a peer reviewed respectable journal after all, and he was actively trying to con people.

Once his paper had been debunked, well, yes you're right there. There's no excuse to keep pushing his theory once we know he's falsified his data, taken samples illegally from people without their permission, etc.
> However, I like them as a amazon.com customer. I guess to make things awesome on the outside, those on the inside have to suffer...

I've never understood this logic. Amazon is making a ton of money (rightly so, imo), they could afford to trim down quite a bit. Why should those on the inside be forced to suffer?
> free time

What makes you think those people have free time after 12.5 hour days and a commute out to the middle of nowhere?
Hotspot is Oracle's Java VM JIT compiler, not a separate product.

They don't produce different JITs from scratch for each VM implementation.
Thank you for being so understanding!
The DDOS has hit their data centers in Dallas, Fremont, London, Newark, Atlanta, and Singapore since Christmas.
Help Chennai Flood Victims
WinRAR Any Version Crack and Activator Full Free Download
If only PayPal had some truly private non-static information about the customer that's not freely available in hacker databases that they could ask the customer about. Possibly some piece of info that the customer keeps in their wallet.

If only. If only.
> I would also spend my free time learning a skill so I could get a better job at some point in the future.

Depending on your situation, free time that you can actually use to learn a skill -- after you've commuted home, fed yourself, done household chores, assuming you aren't too exhausted to just pass out or do something mindless -- may also be a luxury you don't have.
I think every medieval historian thinks that their subject is the root cause of the renaissance. I have read that modern world exists thanks to

… the Arabs who preserved Roman learning and reintroduced it to the west
… the Mongols who fostered world wide trade routes
… the Turks whose conquests of the Eastern Roman Empire caused wealthy and educated Greeks to flee to the Italian city states and kick start the renaissance
….etc

This time it’s the North Sea Vikings. I don’t think I buy this one. Yes trading was easier by water. But that was true everywhere and not just in the North Sea. Others have already mentioned the problems the currency claims.
I am just saying what the popular explanation for this is.

Amazon's own official explanation is probably something along the lines of "frugality" (hey isn't that a leadership principle..., see I learned something from the interview after all!)
Jack Ma , will be supplier for Amazon, i dont see them having skills to be front end retailer
What's the business case for PayPal not using 2FA? I've never done an integration with them but I wonder if there are SLAs in place that require a maximum amount of steps or an average transaction time or something that verifying via SMS or a physical token would invalidate. Seems to me that PayPal accounts would be a major honeypot for seedy activity and that the customer service impact of dealing with this is high.

Unless this is a very rare thing at PayPal and internally they know it.
ΕΚΤΑΚΤΟΣ+ΔΙΑΓΩΝΙΣΜΟΣ+FREE+FUCK+30+ΔΕΚΕΜΒΡΙΟΥ+2015+-+Golden+Diamond+Escort
I'd keep my long-term savings in a foreign bank, so the authorities could at most get my grocery and rent money (still bad, but not quite as devastating). If foreign bank was not an option, I'd just keep my money in the proverbial matress - in fact, that was a common option for saving in communist Poland (US dollars stored at home).
I don't fully understand your criticism. The thrust of this article is that, thanks to Dr. Aron's technique, it's more or less possible to fall in love with anyone. Therefore, who you fall in love with comes down to a matter of choice rather than chance.

Of course, this is predicated on the validity of the technique.
پکیج تور کیش ورود ۱۰ و۱۱ دی ۹۴ هتل های ۵ ستاره
The only one anyone needs - is the list of fake todos, generated using https://github.com/bahmutov/fake-todos

See demo at http://glebbahmutov.com/fake-todos/
I corrected the analysis, thanks for the clue, this paints a completely different picture. I corrected the analysis
From where would AI get a utility function by which to value things? Seems like it would have to be specified exogenously, unless people are seriously considering some sort of "emergent utility function".
Sorry, you're being too obtuse for me, and I'm legitimately interested to know what you're suggesting. Some sort of one-time code that the user prints out to call into phone support?
Thanks a lot for sharing it!
I think you'll observe an impedance mismatch with this crowd and your thoughts on having control over one's fate. Desire and ambition don't seem to have the same appeal as being a victim of circumstances (in the first world, no less).
They do offer 2FA, but calling customer service circumvents it. I wish he had been a little more explicit here, but I think Krebs' point was to raise the question: Why doesn't customer service use (dynamic) 2FA?
Why stop at implying that some have undeserved fortune? Obviously plenty of people do. A truly meritocratic society would not let the personal circumstances of your biological parents affect (either positively or negatively) your life status, whether by moving to a more expensive part of town with better grade schools, encouraging you to stay in school and helping you with your homework, paying for college, immigrating to a more prosperous country, having money you can borrow when starting your career, etc.
If you are concerned about this (and you should be) there is very little you can do about Paypal. But for your banks, all of them allow you to ask to set a "password" or "security phrase" for customer support.

I strongly recommend you do this. It's actually stronger than the branch security.
The age and avatar are not at all synced. Just a heads up if you're gonna be using this outside of testing.
At the core of operations, Amazon is no different than Walmart.
The idea is to be exchanging them _in_advance_, i.e. exchanging the savings part of your monthly salary to USD every month. Don't wait till the shit hits the fan and everybody wants to get rid of their local money.
I corrected my calculation (using the correct 25 factor for metric tons). Thanks for the hint!
It's easy when you have a fall-back plan though. Obviously I know nothing about him or their family, but I'm guessing he could just quit, and rely on their resources while he looked for a new job.

A lot of people don't have that option
I wonder if the attackers chose Christmas day in order to ensure that there were fewer Linode engineers available to stop the attack.
I experimented with making one for Spotify.

You can control the desktop player with the undocumented WebHelper API.

http://cgbystrom.com/articles/deconstructing-spotifys-builti...

Me and a friend could run a custom node.js script locally and control each other's players.

However I never figured out half the polish OP did to get sync really tight, nor packaged and published my solution.
When this "job" is replaced by robots, everyone will be better for it. Of course, these people will need to be provided for, and there are several solutions to discuss, but this job screams for automation.
And the answer is all-too-often:

"We didn't build or train our call center, nor is it actually part of a single central system. We get contracts and then their support staff plugs into our backend and we hope the security constraints written on the contract are real and the training is adhered to."

I'm in the middle of requirement gathering for an unheard-of project: a custom, in-house support console for a new product I'm working on. We're even going to source someone to make training and testing materials, and do auditing independently of the call center (along with their auditing).

Sad part is, while I find it a bit intimidating because I've never undertaken a project like this before, it's not proven very difficult. It's just the miserable state of most enterprise IT and how very bolted-on customer support is to most operations.
Show HN: Linear, ruler app for mac built with electron
> actively antagonizes black-market groups on the internet

Sounds to me like they're both at fault then. It's really nice and idealistic to have this mentality that you're doing it in the name of infosec, but it's a position held from an ivory tower.

If he's in software, what did he expect? This isn't a wise approach. This is the advanced stupid I'm talking about. Someone who thinks it's wise to antagonize, but then cries and writes an article over it when they're attacked. It's a joke. Conventional wisdom here is nonexistent.
If they were not extremely careful about removing all the oxygen, then pumping oxygen into the reservoir would eventually be very exciting once the oxygen percentage rises above a certain limit.

There is also a circular argument that compressing and pumping natgas takes a fair amount of energy. Of course you could burn the gas in a turbine. But then its simpler to just install 2 or 3 times the turbine capacity and just sell power to the grid. Also see above about explosions, no one is going to rent you a natgas turbine or rent you the money to buy one if the likely lifetime before the big explosion is only a week or two.

Also hooking piping up to the reservoir is roughly as difficult as digging the kill well they're already working on, so rather than stopping it in Feb they'd merely be partially recycling by next May or something. So what they're already doing to shut it down, will be done much faster.
12 people whose sole, full-time job is to install the same OS on multiple vendors and make the networks look the same?

I'm having trouble imagining what problems have to be constantly dealt with such that multiple millions of dollars have to go into abstracting the multiple vendors.
Are you serious? I'm paying $1000/mo in the Chicago suburbs and I thought my rent was a little high for the region. I was interviewing for jobs in San Francisco at one point and thought I'd only have to pay double the rent I'm paying here. It's actually closer to 3 to 4 times my rent? Damn. I think I was asking for too little.
I agree completely, I just wouldn't consider disinterest and dissatisfaction as being synonyms for 'principle'.
You seem oblivious to the advantage of organizing your async code in the same manner you organize your sync code. But the bigger reason I gave up on CLJS (besides core.async and its CSP model being a ridiculous over kill for simple async management yet being the primary choice the language gives you out of the box) was that ES6/7 are advancing at a much rapid pace than all of those Compile-to-JS languages and no one I know in the JS world would want to program a web app in a Lisp-like language (it's like using an RPN calculator rather than a normal one to do your taxes) for advantages that are disappearing fast relative to JS.

The Extensible Web Manifesto embraces the Babel inspired iterate-before-you-approve spec development model and that just makes JS evolution go so much faster.

So there is no hope for any niche language to unseat JS, and staying with a healthy and growing mainstream standard is far more appealing to me than writing web apps in Lisp-like language that once was a great choice (compared to ES5) but is no longer in that position.

I hope ClojureScript continues to be a niche strong language but I'm really hapoy with the progress being made with JS as a language and ecosystem. Fatigue (what the article is about) is self inflicted IMO.
How does this compare to Pharo?
Well in Krebs' position, by not sticking your hand in fire. This isn't an issue for an overwhelming majority of people. The sky is not falling.