skysight-inc/HackerNews huggingface dataset:
The author of this software (Philip Guo) has written a book called "The Ph.D. Grind" (available at http://www.pgbovine.net/PhD-memoir.htm) where, in one of the chapters, he describes how he ended up making this piece of software as part of his Ph.D.

The book is a nice read.
Encrypted Data for Efficient Markets – An MNIST for the Stock Markett
Founders Fund Leads a Financing Round for Nubank, a Brazilian Startup
Why be a market facilitator if you aren't going to make sure that buyers and sellers are being honest and fair with each other? That is what irritates me about this.
> Given how little we know about digestion and the interaction between us and our gut flora I'd rather not limit the variety of my food based on the latest fad.

Some folks are saying that what we eat these days in western countries is indeed "the latest fad" - compared to at least what mankind ate 100'000-20'000 years ago. So, don't eat the latest fad - go back what your genome is used to. High protein?
I have that all the time with my Gmail. Not much you can do unfortunately.
There is already a X server for android (albeit buggy as hell) but yeah, it's possible
What is the ELK Stack?
Being able to decrypt and modify TLS sessions pales in comparison to being able to access your domain controller, or dump all your databases.
This was likely an issue of machine learning. The machine learning picked up on patterns people were using.

Note, I have no inside knowledge. But, the usefulness of machine learning for things like this.
If you want a fictional account of an American obtaining crypto material from a sinking U-boat I'd recommend the one included in Cryptonomicon....
Fight Club and Mr. Robot = Mr. Durden
They have a policy not to say anything or make any promises. That said, using history as a guide, it seems to take them about 2.5 months after a major release to add support.
While it's nice and handy I'd be cautious to let that run anywhere else than localhost.

To sanitize/whitelist this kind of input as in json -> go -> shell.. I'm giving up, I'm too paranoid to even think about making this safe :)
_Unless_ you are a perpetual motion machine!
An iPhone Charging in Midair Is the Coolest CES Demo I’ve Ever Seen
A read Mein Kampf in two different language, also I'm studying the works of Julius Evola. I have never read principles there like the death of head of the state would mean the death of the nation. There's lots of talk about hierarchy and of course, absolute power (but it means absolute responsibility too).

North Korea is rather an extremist bolshevik state, rather than fascist and also a very dangerous one, but making a parallel with Japan is not so smart. It's very far away from Yukio Mishima and so.
When you're working at a company, using a company computer, you're not an "end user", though. If the machine you're using is infected with malware, the company needs to know about it, and what the malware did. To ensure full visibility, you need TLS interception.
What do you think of my project (a DB of resources for developers)?
I liked this site, it asks some good questions you should think about before picking a language to start studying, and offers some easy to understand explanations on why you'd want to pick them.

Design and UI was solid. The only thing I'm on the fence about is that each selection takes you to a new page. It would have been nice to have it be a SPA so you wouldn't have to open it in a new tab or click back a bunch of times to get back to Hacker News, though I understand it's easier to build it the way you did : )
But you can simply bicycle out (as the stream of Syrian refugees entering Norway from Russia illustrates). Ergo, you cannot simply walk out of Russia (to Norway) either.
INNOVATIVE TECHNOLOGIES and GADGETS #38: realityeditor is AMAZING
At the most unidea circumstances, you can scan the whole space of "{16 alphanumeric characters}.onion" at a space of 36^16 or around 7x10^24 addresses. That's not feasible.

The other attack I've seen is turning on HSDir flag in /etc/tor/torrc and then logging all hidden service descriptors you receive. This method is obviously passive, but it does get the job done according to : http://donncha.is/2013/05/trawling-tor-hidden-services/

Admittedly, I'm relying on my hash.onion for a security via obscurity. And I'm OK with that. Because behind that obscurity is key based ssh and a Node-red configured with https and authentication. Obscurity can be an effective part of overall security, as it lowers the surface area of attack.
Something similar was reported about FitBit yesterday, and they explicitly pointed to the culprit being third-party dumps.

At this rate, smart users won't re-use passwords, and 2FA should be mandatory everywhere.
Sometimes "scanning the content of your email or your files" is a desirable feature, for example in an antivirus program.
> Wouldn't we be better off making sure we can reliably find them first?

People are already are working on that. For example, there's the NEOWISE project[0], which used the Wide-field Infrared Survey Explorer to look for potentially dangerous astroids. And there is a ongoing effort for a new space mission, NEOCAM[1], specifically designed to do this same thing and find more objects.

[0] http://neo.jpl.nasa.gov/programs/neowise.html

[1] https://en.wikipedia.org/wiki/Near-Earth_Object_Camera
I will suggest to use other icon for "Help Indicators", that "Blue circle" looks confusing besides the other color circles on card. And I think the blue color is the same. Just my idea.
I think they may need to clean up or edit their Wikipedia page. For example, in the See Also section "Slacktivism" is one of the links and in general reading the page gives a pretty bad impression. I totally believe what you're saying but when someone (like me) who doesn't know anything about Avaaz and tries to get a third-party independent view of them it doesn't look pretty.
Hey Steve, great product and as a fellow bootstrapper and somebody who wants to learn a language (Spanish) you've got my attention.

I was looking around your site and checking some bits and couldn't help but notice that there's not a lot of SEO specific marketing activity on the site. I couldn't help but feel that there must surely be some very common phrases in various languages that people naturally tend to search for online when they have an interest in a language. If your site could provide this information, you might rank well and people would naturally progress to try your app?

I also thought there there must be LOTS of content on your site that people have curated for their own learning that you might (without breaking privacy of course) be able to capitalise on for search engine ranking. I'm thinking something along the lines of the music lyric websites where people tend to submit their content and it's publicly visible? You would need to curate it, but it just seems like madness that there's so much well organised translated content that is currently locked away from Google's view.

Tell me to shut up if this isn't an area of marketing you're interested in, but maybe something in the above will spark an idea. Regardless, all the best with this, it's lovely to see another semi-UK based bootstrapper on he HN homepage :)
Normal views aren't designed for security. There are a number of ways that they can "leak" information that is supposed to be hidden.

The reason is that the optimizer reorders operations. So, a tricky person can write the query in a way that, for example, throws a divide-by-zero error if someone's account balance is within a certain range, even if they don't have permission to see the balance. Then they can run a few queries to determine the exact balance.

RLS builds on top of something called a "security barrier view" which prevents certain kinds of optimizations that could cause this problem.

It also offers a nicer interface that's easier to manage.
Awesome product!

10 years ago when I moved to Germany I had a similar learning system. I read books, I highlited the words I wanted to learn and once or twice a week I wrote them up in a small book. After a while a wrote a small VBA flashcard app for tracking my progress and randomizing the words. And that took a hell lot of time. With an app like yours I could have saved 30-60 minutes every week (2-4 hours every month) which is worth of 20-40€ a month (on minimum wage). That´s why a recommend you to spend way much more time marketing your app and finding the right customers, which means:

- already learning languages (don´t get fooled by "If I had enough time, I would use it")

- learning languages because they have to (living abroad or working international)

- saving 2-4 (or more) hours a month is worth them at least 10€ (no students spending more money on boose than on books)

IMHO you can find a lot of young professionals on forums like the "new in wahetever city" groups or expat groups in facebook.

Good Luck!
Link Between Squirrel Stress, Unhealthy Microbiomes Found
They fell into the big rewrite trap ... possibly driven by developers hoping to clear out some cruft

http://www.joelonsoftware.com/articles/fog0000000069.html
Because money. HN will likely play devils advocate but I agree with you. If you enter an arena, I believe you are partly responsible for what happens in that arena.
Lets Encrypt certificates are already being used to distribute malware
My wife tracks how many times I don't put the lid down.
It's not really "stealing" but you could theoretically fork it and gain enough market share on your fork that your version becomes what people think of when you say Android.
Lorem Ipsum is a passage quoted from a Latin book "De finibus bonorum et malorum" and has been used by typesetters for seventy or eighty years. So the fact it can be translated shouldn't be a surprise.
While you wait, check out http://stackoverflow.com/a/23500670/229006

My plan is to rely on these functions for now, and switch to the native implementations once 9.5 is production ready on RDS.
I assume it's because the bird will be flying very far below the focal point.

Not that much people would care anyway; solar-thermal power plants routinely vaporize birds that happen to fly in the path of the beams that are being focused.
Hum, I think a free swivel wheel would only work for very cheap designs. If you're not convinced, you can search for 3 wheels vehicles on google image [1]: none of the vehicles there have the 2 wheels + 1 free rotating wheel design that you recommend.

https://www.google.com/search?q=3wheels&biw=1673&bih=1124&so...

Edit: actually, some baby carts have it .. alright

http://www.aliexpress.com/store/product/EMS-Free-shipping-Go...
Arguably, it deserves a page because it provides more features.
> assuming the patent is valid, Monstanto had morally won the case.

That was my point. The process is designed so that any case where that is not the predictable outcome will be settled and put under NDA so nobody can know about it. The process that results in that consequence is the despicable act, and is what causes the intimidation, because it allows them to claim having won every case etc.
Anyone have ever built an application utilising row level security?

In old-school systems you normally have one database user and a connection pool set up in the app with that user. Row level access is handeld with join tables to sort out what data is accessible for the specific users (sent as parameter to most queries).

With row-level security you would crate a db-user for each application user and also its own connection pool?
I think people did assume that because from what little experience Americans have with NK, much of the customs we would consider voluntary (bowing before statues, etc) are compulsory even for western visitors. It's not much of a leap to imagine that if you're a NK and a camera is on you, not behaving the right way could be dangerous.
Regarding the eternal conflict, it's inevitable but I think it's important to be clear on the value we're delivering and upfront as much as possible on the time commitment. Perhaps things can be broken down in an agile manner - might be less efficient but we could also charge more. I think it's about balancing risk on both sides and understanding what's comfortable on both sides. I'm not a fan of doing free work to win bids.

Would love to see if we can do fixed price if we know most of the variables. Otherwise, I'd stick to time and materials.

I'm not a big fan of target utilization rates and am open to exploring alternative ways of measurement.

I'd like to explore a model where maybe employees are also part of the profit-sharing pool, where by everyone has a share. My view is that benched employees should be given an opportunity to explore other parts of the business. Perhaps they can get involved in the sales/business development part of things. If it's clear that contracts aren't coming in, then unfortunately, people may have to look elsewhere. But hopefully, they could be incentivized to help generate sales and projects.

To keep the lights running, we might sell products to supplement income. Unsure what that could be but perhaps productized service, managed services, industry reports.
But consider an attacker who pivots onto your entire infrastructure to serve any content they desire. Presumably your DNS provider passwords are stored in a password manager outside of that infrastructure. The attacker would still need to use social engineering to trick the CTO into revealing those passwords. It seems that would have prevented the abuse in the OP, right?
It's funny, I used to use my first and middle initials followed by my last name at gmail. An uncommon combination.

But still, I used to get notifications from schools in Texas and Denver about student's progress and their grades. Occasionally I'd get receipts and order confirmations.

I'd initially respond telling the sender that they got the wrong person, but it never solved anything. Just filter the mail intended for the other person.
Referendums don't really solve anything. Here are some of the questionable ones that have passed:

1.Minarets can no longer be built in Switzerland. https://en.wikipedia.org/wiki/Swiss_minaret_referendum,_2009
2. Immigration quotas. https://en.wikipedia.org/wiki/Swiss_immigration_referendum,_...

I'm not an european citizen, have a job offer to work in a big tech company in Zurich and will not be able to get a visa even though I've got my Bachelors and Masters degree in Europe. Since the referendum passed, they're now requiring 3 years full-time work experience regardless of which education degree you hold.
I wonder how much time it will take to appear in the Ubuntu apt repo? Should it be already there (I don't see it yet)?

Edit: I meant apt.postgresql.org of course, not the official Ubuntu repo..
Ask HN: How much bigger is Google than other co's Twitter, snapchat, Facebook?
Popular Pages on Wikipedia in 2015
Moving away from HDF5
It depends on what you mean by creating an independent IT consulting network. Informal networks (i.e. talking to other consultants, going to events, generally business networking) certainly do exist and they're as helpful as in any business. Sometimes they help you generate new leads, sometimes you'll learn about interesting new opportunities and in general knowing other people from the industry will help you learn and share useful information about how to run your business.

Then there are sales-orientied networks like Gun.io . Do you have something in mind more along those lines?
SH has no mechanism to ensure delivery of the ticket. The seller holds the ticket, so how can SH compel them to hand it over - short of not releasing the buyer's payment to the seller. Short being the operative word. SH is running a speculative marketplace against n% insurance fee on unfulfilled sales.
One reason is that OpenPGP is already widespread and you may use known OpenPGP key to establish shared secret and switch to OTR then.

Another reason is that OTR is not multi-party. mpOTR [1] was suggested by OTR authors (Ian Goldberg et al.), but I am not sure you can find at least one peer who has it installed, and it is not maintained. So for XMPP conferences you may still want to go with OpenPGP.

[1] https://dx.doi.org/10.1145%2F1653662.1653705
That's separate from the issue of metadata collection, which is only relevant to phone companies.
Veertu – native Mac virtualization available on the AppStore
The very first native Mac virtualization software is released on the App Store.
Veertu uses Apple's hypervisor framework for cpu virtualization. In addition Veertu doesn't require any kernel drivers and runs in a sandbox making it completely secure and reliable.
Check it out: http://veertu.com
I'm curious what kind of losses you've seen since your own data breach. I'm sorry but you have far too many plausible ulterior motives for taking the position that you are taking.

1) As someone else pointed out, you're an ex-employee of Linode. You went out of your way to hide this fact. I'll refrain from listing all of the very obvious reasons why your word on Linode should be taken with a grain of salt at the very least.

2) Being able to blame Linode for your own data breach is a fantastically easy (although lazy) way to pacify customers about the fact that their personal data was just pilfered by someone on your watch.

All that being said, what have you presented that can be proven? All that can be proven is that you're an ex Linode employee. Everything else is hot air that we're all meant to take your word. Tons of appeal to authority in your explanations. You keep invoking some mysterious third party "expert" security group who conveniently agrees with everything your own company "discovered." If you were actually confident in your own abilities and that of your team members, there wouldn't be an immediate appeal following every attempted assertion.

Plus, even if you really did hire someone, what company isn't going to just say "yes" and agree to whatever PR campaign their customer is saying while dumping wheelbarrows of cash into their pockets? Frankly I don't believe you, and I find your consistent drumming against Linode to be highly suspicious in the wake of these attacks. You're not involved, are you?

The Linode post you're referring to is just saying that they expired everyone's passwords. That's not admitting anything, especially not admitting anything about a separate incident from a year ago. What lawyer would ever take this and say "okay, you can legally publicly blame linode now?" No lawyer worth his salt. In other words, you're full of shit. Your story if full of holes, tells, and I think you should stop posting so much garbage before you're on the receiving end of a lawsuit or are considered a suspect.
It's true, however NumPy, Pandas, and SciPy are external libraries. I think it's a slight disadvantage. In R all these fancy data structures are built into the language and are used everywhere in a natural way. Whereas Numpy feels a little bit like an appendage or like a language inside a language. That said I don't dislike Python/Numpy and I think it definitely has its uses.
Meh not really. If there were real repercussions to fucking up lives because you leaked their private data that would be one thing. Zero sympathy for the company as a whole.
Valve knows how many times you launch a game, how much time you spend in a game, who your friends are, your spending habits...
Yeah, what I always did was keep the logs on an encrypted file system... it's not like you're going to pcap your traffic to store your chat logs.
Unfortunately, it’s a lot easier to sell games than neuroscience. Take an assessment, play games based on that assessment, and take the assessment again --- garbage in, garbage out. The value is in identifying congitive deficits so that proper strategies may be put in place that can be practiced in a variety of contexts such that they are actually transferable to everyday life. There's not a heck of a lot of science in the Lumosity baseline either, since all their data comes from an uncontrolled environment on the web. But there are a number of valid, peer reviewed online neurocognitve batteries available without having to go to a psychologist for a few grand.

NIH Toolbox (for researchers)
http://www.nihtoolbox.org/Pages/default.aspx

Mindprint Learning (which has the Penn CNB for children)
https://mindprintlearning.com/

Brain Resource (which has the Web Neuro for adults)
http://www.brainresource.com/mybrainsolutions/personal
Can someone with more insight into this please explain if this can be considered entrapment? The suspect probably would have done or said nothing if it weren't for the "investigators".
Also the web is not responsive! Today web apps deserve support for mobile devices and multiple screen sizes. This is someting you shoud care for before launch.

some other thinks I noticed:
-Can't se registration, just Login.
-Favicon would by nice.
-Password reset function.
Robinson Crusoe Ve Cuma 2015 Full Film Izle
Was the Japanese occupation of Korea really justified in racial terms?

I'm skeptical of parts of this article when it refers to Japanese imperial ideology as "fascism." It was most certainly extremely right-wing, but I think extreme nationalism + imperialism are more accurate descriptions, especially since Japan didn't join the Axis until decades after Korea was annexed.

I thought the motivation for the colonization of Korea was more resource scarcity in Japan and a desire to compete with Western powers through empire building. To justify their actions I think Korean society was portrayed as "less civilized" which is more a statement about cultural and political norms than race, although those portrayals can probably slip into a racist ideology pretty quickly.

It seems like the "official" policy was different, at least: https://en.wikipedia.org/wiki/Racial_Equality_Proposal

I'm not trying to portray devil's advocate at all, just actually asking whether what the article portrays is accurate. I think the early 20th century actions of imperial Japan were abhorrent, but it's important to at least try to understand the ideology of the time as it was discussed and understood.
I went the other way around. I started with your conclusions and have been migrating to the Apple ecosystem and am tempted to move to Windows. I had become tired of the dearth of issues that crop up to maintain an Arch desktop distribution.

While the privacy collection issues should be addressed and be transparent to end-users I think open source is not the way to go for these devices. I'm tired of each device being an island. I like handing off calls from my phone to my laptop when I'm at work. It began frustrating me years ago when I couldn't just flick a few files off of my e-reader to a friend's phone despite the prevalence of available networks.

Open-source, meanwhile, has struggled to provide a basic desktop environment to rival the best from five years ago. It's simply too much work without a paid, focused, and highly-skilled product team consisting of more than just developers. And they're still fighting the chicken-and-egg problem of user-adoption.

I don't like the spyware "features," but I don't think I'll be going back to Linux any time soon and giving up all the great software I've come to depend on.

I'm hopeful that people will find ways to invest in its development and find a way to introduce a competing product that is both secure, in the control of the user, and a delight to use -- able to integrate with a plethora of devices and, for the most part, just work.
Ways to Manage Multiple Applications You Might Have Not Known About
It would still be a preposterous mischaracterization of what happened.
Morally, yes, they should be responsible. But StubHub only has an obligation to act legally, not morally. There should be laws in place to deal with this situation. Maybe there already are?
Worst case these companies pay some laughable, trivial fine. That's all that will ever happen in the US. Money talks. EVERYTHING else walks.