skysight-inc/HackerNews huggingface dataset:
This is interesting because the UK lottery made a very similar change, with the same effect - higher odds of winning any prize, lower odds of winning. They also doubled the entry price to £2.

They changed the numbers to choose from 1-49 to 1-59, and added a prize for matching any 2 (apparently 1 in 10.3 odds) of a free lucky dip (ie another play).

It'd be interesting to know the distribution of people's picks now - I know that my parents use the same numbers they always have, all in the 1-49 range. Obviously lucky dips are more fair, I'm not sure which is more common though.
Any progress in talks with Node.JS to make an implementation independent JS engine API for node?
I totally agree. When a company is pursuing dysfunctional negative goals there's very little chance to drive change. When you're outside the company you can ask politicians if this company is being regulated effectively; if you're inside the company you can ask if you're operating in compliance with what little regulation the company has. Either way there's not much anyone can do, and so boycotting such companies is a valid thing to do.
2010 (improved in 2013) according to this blog post. https://blogs.msdn.microsoft.com/mvpawardprogram/2013/10/22/...
Citation, please?

I'd imagine it'd be killable via group policy in those cases, wouldn't it?
OK for inbox on firefox the icon pic does not show - so you are on to something. It still works (click where the icon is - you can see a faint outline)
Air France 447 is another example of when an unexpected transition to manual controls caused a crash. There's a good story on autopilot and automation more generally at: http://www.npr.org/sections/money/2015/07/29/427467598/episo...

There are pros to automation - even if the transition to manual causes problems, overall autopilot can be safer than manual.
That's the thing - until 1989. The current leadership may not be, but that doesn't mean they weren't in the past.
It's also so much more biased and cranky, to the point where I would've kept the original. C'mon, did Marty Peretz shoot the author's dog?
Hi, the shell script is an implementation of our API. You can implement your own client against our API endpoints. This gives you complete control of what package data you send to us. If you only care about OpenSSL, you can create a machine with only OpenSSL and we will notify you when that is out of date.

https://patchworksecurity.com/docs/

The current infrastructure segregates the user and machine data. A compromise of both machines would allow an attacker to recreate the mappings between users and their machines. We're hoping that this service will reduce the time your infrastructure is vulnerable because you know immediately when something goes out of date.

Lastly, we wanted to make it really simple for a user to get setup on our service which resulted in the curl | sh idiom. The source code for the script is on GitHub

https://github.com/PatchworkSecurity/cleansweep/blob/master/...
I'd prefer Apache with its patent clause but what can you do?
>Urine itself is sterile

This is a misconception that particularly annoys me, probably because it was the (incorrect) excuse a nurse once gave me when he accidentally spilled a urinal filled with liquid all over me while I was bed-ridden in an ICU. [0] [1]

[0]: http://www.smithsonianmag.com/smart-news/turns-out-urine-isn...

[1]: http://www.stritch.luc.edu/newswire/news/study-debunks-commo...
Actually, in the US when they put up the aljazeera/america site they started automatically routing me away from aljazeera/english. I pointed this out via email, and said I preferred the English version (Europe slant vs American) and they put a link at the bottom of the page to allow people to choose the English site. So try them- they are (were? it was a while back) very responsive.
You don't need AD to set the local security policy.

Just type "gpedit.msc" into run. Then follow this[0].

[0] https://support.office.com/en-US/article/Turn-off-or-uninsta...
Sure they can... If those policies and rules are arbitrary, illogical, and backwards. Nobody follows all the rules all the time, and those that do are generally seen by the rest of society as stodgy and inflexible.

Also less effective. Example: Shadow IT exists for a reason, and that reason is not some variation of sticking it to the man.
Do you think you'd be able to detect every possible bias?
This has nothing to do with operating systems, and everything to do with hardware makers. If you design hardware for a particular OS, it will work very well with that OS and poorly with anything else.

So for instance: Every Chromebook out there is running a Linux kernel, and they all have exemplary hardware support -- power management is great, trackpads are phenomenal, there are no issues with sound or wifi or GPU. BUT if you try to install Windows on them, it's super-awkward and hacky if you can get it to work at all.

For historical reasons, most people who try to install BSD or Linux are doing so on hardware that was designed for Windows, with components that were selected on the basis of how well they work with Windows, and driver work that is done for Windows. This does not lead to great outcomes, any more than buying a Chromebook and using it as a Windows machine would.

So in a sense "hardware makers aren't making hardware designed for Linux (other than Chromebooks) or BSD" is a problem for adoption of Linux/BSD, but it's a problem that can only be fixed by hardware makers.
that's the thing--the account icon is no longer clickable for me. In fact there is no icon displayed any more, just the account name and that's not clickable either...
"Udacity will help you find you a job (as defined in the program Terms and Conditions) at a partner company, land you a paying internship, or secure for you the opportunity to make money through Udacity’s global mentorship or freelancing programs. We will achieve this within six months of your graduation date, or refund your full tuition."

Paying Iinternship or "freelancing programs" is a bit slippery. You freelanced once that is a job! This being said Udacity should be commended for taking a step forward and putting money up in a way to back up their service.
This article sums it up better than i can do. http://www.seancassidy.me/dont-pipe-to-your-shell.html
A package is downloaded completely from the net, then checked for it's signature.
A network transmission is by orders of magnitude less safe with regards to corruption of the payload.
No offense, but clearly no good deed goes unpunished on Hacker News =)

Notwithstanding opinions on the merits or lack thereof of abstracting and visualizing concepts that may or may not help your syntactical understanding of algebra, I want to point out that this is A) a brilliant idea and B) a really cool implementation.

Kudos to the developer who spent the time to implement this, and to Brett for putting the idea forward. I hope this gets traction and is continued to be built upon.
Ditching LastPass for Zoho Vault
> I think PaaS demand is going to die down in the near future. The simple reason is that before, it used to be quite annoying to get a server set up, replicate it and scale it, but now with all the awesome automation tools coming out, I doubt that is going to be a problem anymore.

No matter what the tools are, I think people realized that the simplicity PaaS tried to offer doesn't exist (regarding availability, scaling etc). Even Heroku isn't able to accomplish it, and they're what I would've considered the leader in the space.
The software has to be distributed somehow, right? Probably over https? What makes curl more susceptible to MITM than apt-get/pip/gem/etc?

I don't particularly like curl | sh either, but without sudo, I'm not sure how much it /really/ differs, security wise, from other options.

Edit: real package managers have improved features compared to curl, as outlined in another branch of the comments.
As a western Canadian, it's fun (?) to joke about Quebec separation. (Indifference/irrelevance, right or wrong, is a common western view on it, I think.)

I had to look this up but it seems the last big poll of Quebecois on this was in 2011: 41% voted in favour of sovereignty. http://www.ledevoir.com/politique/quebec/323376/sondage-lege...

That's actually way higher than I thought. But if support for the Bloc Quebecois is any indication, the sovereignty movement was dealt a big blow in our fall 2015 election. They lost a lot of federal seats and smaller polls suggest popular support for sovereignty might be around 31% now. https://ca.news.yahoo.com/blogs/canada-politics/quebec-indep...

Still, it's fun/interesting to talk about. As a westerner. ;-)
Whenever people talk about the money in college football right now, I generally tell them to blame Tivo (and subsequently Netflix). Tivo started it with the ability to record and watch later while fast forwarding through commercials. Netflix with it's mountains of commercial free content followed next.

That put a huge advertising premium on content that people NEED to watch live like sports or hit shows like Walking Dead that have community reactions as episodes air.

The reality for cord cutters and cable companies alike is that, if it weren't for ESPN I'd have no reason to have cable. It's the only reason I have a pay TV package.

When you break down the technology, that won't change anytime soon either.

With Netflix or other streaming services 50,000 TVs is 50,000 individual streaming sessions. With a broadcast 50,000 people watching the same thing is 1 broadcast. It's just a question of scalability that gets complicated if millions of people all want to watch the same thing at the exact same time.
There is trust in only one thing, as per the rules of the game: that the current proposed split (and only the current one), if accepted by all pirates, will be carried out.

Anything else cannot be trusted. Because the pirates are completely rational (think robots), they not only don't trust each other, they also know the rest don't trust them either. So no pirate will attempt any kind of deal.
> You can simply choose not to use Cortana or to disable it entirely. Google Now & Siri support the same functionality but ironically don't give you the settings to disable it, so nobody bats an eyelid.

Siri can be disabled. Location tracking to improve contextual understanding can be disabled separately if you don't want to disable Siri completely. If you disable Siri, all data is deleted. You're also informed of exactly what data is uploaded.

> Beyond that you only really have so called "basic telemetry." Which tells them when you launch a Windows 10 "app" and some basic computer information. But even without that setting/ability the apps themselves could conduct the same reporting (via direct HTTP requests), the only reason it is even a setting is because Microsoft unified it to make developers lives easier and to better aggregate the information their side.

Does Microsoft let you disable this? Apple offers you a prompt like this one http://imgur.com/aBzTNsV on every major (x.y) update, and shows you what data is being uploaded (as well as letting you disable it) in settings.
Here are the four Nanodegrees that are eligible for the Nanodegree+ program: Android Developer, iOS Developer, Machine Learning Engineer, and Senior Web Developer.

The name scheme is interesting because it tells you what you will become rather than what you will learn. The ML and Web Developer Nanodgrees are pretty new, but we already have reviews for the first two:

https://www.class-central.com/certificate/ios-developer-nano...

https://www.class-central.com/certificate/android-developer-...
Very cool! Thanks for sharing!
The title is subtly misleading. This ruling applies not only in the EU countries but also in in member countries of Council of Europe. That is EU, EEA, Balkans, Russia, Turkey and a few more.
Thanks, I'll try to add it in.
Since it's on Github, PRs and contributions most welcome on those topics :)
Thanks, this makes sense!
> the female anchors are veiled

Were all those anchors veiled women? Some? Few?

Because drawing from my experience with AJE, they usually hire non conservative dressed women to present the news and they only featured veiled women for their Arabic-speaking channels but to be honest not all of them wear the veil. They still pretend not to discriminate against non-Muslims or non conservative Muslims.
UK Snooper's charter: cafes and libraries face having to store Wi-Fi users' data
Frankly, it's funny that there's been such a backlash against this comment. People seem outraged that I should suggest such a thing, yet find it perfectly acceptable that five pirates would be satisfied with a booty divide that has 98% of the money going to one guy. As if these pirates, so ready to kill each other, wouldn't have the four remaining pirates toss the first overboard.

If ANY of the respondedants and downvoters to my comment actually wanted a touch of realism, they'd understand that I was pointing out the ridiculousness of 'perfectly rational actors' in these games.
'Just one example - giving employees open access to company materials affects the privacy rights of other people, not just the company. So in order to protect the privacy rights you do have vs the company, they will have to restrict other people's access to your information."

I'm not sure this is a good example. Bear in mind that 'the company' is just other employees. I am not aware of any particular set of 'rights' limiting which employees have access to your information - just policy which is entirely decided by the power hierarchy.
I agree, but the solution isn't to throw out the protocols we have. The solution is to use wired interfaces where appropriate. A light socket doesn't move. It's harder to replace the socket than the bulb, but the best long term solution is to replace the socket with a socket with an Ethernet port as well as a power connection.

I recently started a job at a company that produced Bluetooth chips. I'm currently about a quarter of the way through reading the entire Bluetooth spec. It's 3000 pages long, incredibly complex, and most of the complexity goes to ensuring reliable secure communication. It's not easy to just come up with a new wireless protocol that "just works".
Before Node was popular, I tried a command-line JS engine called Narwhal. It was built by 280 North, and as I recall, it had pluggable engines. I remember being surprised at how much faster JSCore (Safari's) felt than the others.

Not being permanently coupled to a particular platform is probably a good thing for Node, and provides a healthy incentive for V8 to stay on-top of its game.
Man this stinks. Al Jazeera America is reliable and has done some solid reporting over the years. It wasn't afraid to call a spade a spade. Next to BloombergTV it's the only news channel worth watching.

On a tin-foil hat aside, but the timing on this; coming a few weeks after they ran the story about performance enhancing drug use by some big name athletes...I can't help but think the two are somehow related.
I guess you only watched the video. If you scroll down a bit further it reads:

> I thought it'd be fun to pretend that SMB3's legendary lead developer, Shigeru Miyamoto, had left an intentional "back door" hidden in the game which we had only just now discovered.
Isolation was the biggest problem for me switching to remote work. Even if I'm working on something that requires me to be head-down on it, I'm pretty extroverted and like at least having people around me. I started going to a coffee shop with noise cancelling headphones from 9a-12p just to have a structured (and humanized) start to my day. Slack helps with keeping up your visibility among the team.
I find social media a generally negative experience, I have 23 friends on facebook (people I'm actually friends with), my twitter profile is private and I only follow people who have interesting positive things to say and company stuff (product releases and the like).

I've reduced reddit usage to once a day and certain sub-reddits.

Ironically the most negative community I still use a lot is HN.
Not off hand, but there's been articles that hit the front page of HN about it.
Why?

Its a deal that ends the legal proceeding permanently.
It's not so much that the news is a government mouthpiece, more that each network tends to report the news in a fashion that supports its political views: CNN, MSNBC, and the traditional alphabet networks on the left, Fox News on the right. (And, of course, these are American definitions of left and right, so feel free to map them to your nation of origin however you please.) If the network is simpatico to the party in power, they'll sound like government propagandists. If not, RT or Al-Jazeera will have nothing on how venomous they get.

To put it another way, imagine the Guardian vs. the Daily Mail, but on television instead. No one, I hope, would pick up a copy of those newspapers expecting the unbiased facts; same deal here.
Realtime translation preview in app UI
Show HN: Interactive Comparison of NFL MVP Candidates
The State of the Union, Ignoring the Elephant in the Room
This is a reasonably tempting price tag - I'm interested in the machine learning nano-degree.
It got pretty famous after 9/11. I even have their app. But I mentioned to some Christian conservative family members that if they really wanted to understand what was happening in the Middle East (this was when the Egyptian general, who was voted out of power, overthrew the elected government and took leadership again) they should try Al Jazeera.

Their response suggested that in their circles it was considered a very bad source of information. So at least among some groups it has a strong reputation.
> As experiment shows, this is not the optimal strategy, so I don't see why you would call it the "rational" one.

It's rational because if Bob accepts an offer for a positive value of money, even if it's a cent, he gains value from it. Rejecting it just throws that cent away, which he could have had in his pocket, it's irrational to throw away this value.

There's a difference between rational and optimal for a reason though, but you need to feel like you're getting ripped off for that to come into play, you need to feel like you'd rather someone else lose $0.99 than you gain $0.01.
> We recognize this, and want you to know we support you every step of the way, from enrollment to getting hired. Enroll in Nanodegree Plus, and we guarantee you’ll get hired within 6 months of graduating, or we’ll refund 100% of your tuition. That’s the kind of confidence we have in you.

Just fyi, he is correct and that is the relevant text.
Yeah, and while you're doing that, why not have a chat to the pirates so bloodthirsty to kill each other, but with such a code of honour that they're satisfied with the booty split which has 98% of the money going to only 20% of the crew.

Why are you so disturbed about the ridiculousness of my comment, yet quite happy to take the ridiculousness of the situation's premise?
If you want to be extra cautious you can verify that the script hasn't changed with our release key

https://patchworksecurity.com/releases.txt

The latest release (2.0.0) has been signed by my key 0x85C64E20
They do trust A (the first proposal). If all of them accept A's proposal, they are all committed to honoring it. What they cannot trust is any hypothetical proposals made by a pirate whose turn is not to make the current proposal.

"I have the turn and I propose we split this way": trusted.

"I don't have the turn yet, but when it's my turn, I promise I'll propose this / kill him / won't kill you": not trusted.
Doesn't work on my ubuntu machine:

curl -L https://git.io/cleansweep | sh
sh: 94: curl: Argument list too long
Toast Game Developer makes real life game
And you end up with a vehicle with extremely dubious crash safety, no warranty worth speaking of, insurance companies won't touch it, and the resale value will be abysmal. Have at it!
Al-Jazeera just means "The Island" in Arabic. What's off putting about something called "The Island"?
This. It can be hard to get a non-US spin on middle eastern events, which is I regularly look to AJ and BBC. The value is in getting a different perspective, not completely unbiased reporting. Associated Press feeds can also be somewhat helpful: http://hosted2.ap.org/APDEFAULT/APNewsFeeds
Ask HN: Is Knuth's TAOCP worth the time and effort?
I recently purchased a boxed set of Donald Knuth's The Art of Computer Programming on Amazon ( http://www.amazon.com/gp/product/0321751043 ) based on its stellar reputation as one of the indispensible, foundational computer science books that every programmer should read.

I excitedly started delving into it last night but after an hour or two of reading and exercises I started getting the sinking feeling that I'd just wasted $178.08. It seems quite mired in 1960's-era academic minutiae and tedious mathematical formalism that doesn't seem very relevant to a modern practicing programmer.

For all its focus on algorithmic performance I found no mention of pipeline stalls, designing for cache performance, branch prediction, multithreading, etc. which are all very fundamental aspects of good performance on modern hardware.

So for those who are practical programmers and have gone down the Knuth TAOCP rabbit hole I ask - was it worth it? Did it give you knowledge and skills applicable to your programming work or was it mostly academic / intellectual entertainment?
https://mail.google.com/mail/logout?hl=en
(all of this is based on an idea from another poster in a different thread, which I cannot find at the moment)

odds of winning: 1 in 292,200,000 (approx)

miles between LA and NYC: 2,800 (approx)

feet in a mile: 5,280

inches in a foot: 12

US dimes in an inch: 1.4 (approx)

2800 miles * 5280 feet * 12 inches * 1.4 dimes = 248,371,200 "dimes" between LA and NYC

Summary:

Assume that someone drove from LA to NYC at stopped at any point of their choosing along the way and threw a dime onto the ground. Starting from LA you drive the same route, you have better odds of stopping your car at the exact spot that that person dropped their dime than you do of winning this Jackpot.

With all the usual caveats about not being evenly distributed. I find this a little easier to explain to people, such that they can reasonably understand that it's not just "unlikely". Stuff like 10 times as likely to be hit by a meteorite or other super rare events just doesn't seem to get the point across as well. It's also easier to break it down into smaller pieces (throw dimes on the ground and have people try to pick the right one, guess a mile marker just in Colorado, etc)
I'm curious about some of those numbers. In particular, it seems unlikely that one is more likely to become US President than an astronaut given that we have an order of magnitude more astronauts than presidents. Are the populations different?
Open source firmware for toy drones
Pirates aren't hyperrational, so the whole game isn't a real-life scenario. Think robots, all playing with the same ruleset and having perfect knowledge of the game, if it helps.
Hi, can you tell me the version of curl you're running with

curl -V

Also send me an email at david@patchworksecurity.com and I'll get it working for you.
> have you ever seen a report that was critical of Putin on RT?

Yes.

Additionally I didn't say Obama was running anything, I was more thinking the DoD. They likely fund, produce, or have produced specific bottled segments.

Which isn't to say they have direct editorial control, just that propaganda is a common sight on US TVs.

Plus I can back up what I am saying, here's a program from 2002:

https://en.wikipedia.org/wiki/Pentagon_military_analyst_prog...

So from 2002 to 2008 I can prove that this occurred. But since then it has definitely continued, I'm sure they renamed it, and retooled it, and involved more private entities to act as legal buffs, but it definitely still goes on to this day.

> How would this even work. Do they switch stories depending on who is in power?

I don't understand the question.