skysight-inc/HackerNews huggingface dataset:
I'm curious what led you to leave industry for a postdoc. AMPLab is a great place with lots of smart people, but I'm guessing you've taken a > 4x pay cut with dim chances for career development, unless you're shooting for a faculty position.
I started education for the first time in too long. This involves leaving the house and talking to people, so it's challenging, but in a good way.

EDIT: Congrats on the marriage!
SummarAI – Summarization and Sentiment Analysis
Facebook has an idea to take on Uber, and it actually makes a ton of sense
This looks very very similar to http://blocsapp.com (as in the UI being almost an exact copy).
I understand your point. It's a dynamic, lifelong occupation that demands your whole and its demands change with its stages.
However, I was not really over-generalizing. I wrote "Most parents..."
Linux Networking from the Ground Up, Part 4
Of course! pacman is one of the best package managers out there (and the best I've personally used). But its developers sadly don't share in the vision of using pacman outside Arch Linux. It's a wonder it works on msys2.

It's a point I tried to raise in the past but without much success. If you want to start a project to fix this, email me (especially if it's centered around pacman - I'm an arch TU).
Instagram Engineering
Python Asyncio Let It Go? David Beazley at PyconBrazil
He's talking about TAO and nation state attackers. He knows what both use. His recommendations ignore entire categories of risk and assurance activities TAO relies upon per their catalog. That's misleading.
IRC is kind of an IETF standard. That is, there are RFCs for the IRC protocol that are a useful introduction, but they don't cover basic user-visible things like `/me` or formatting codes (colour/bold/etc), and even the non-IETF specs that cover those things aren't necessarily reliable (the CTCP spec has a whole thing about how to encode metacharacters in payloads that in practice everybody ignores).

At least these IRCv3 guys are writing down what they're doing.
Having only a half a dozen subdomains, with maybe another half a dozen being added per year (well below the limits), are there any advantages to using a wildcard cert VS individual certs for the subdomains? In other words, any way to justify the extra $30/year for a wildcard cert?
If everyone makes X, doesn't X inherently become nearly value-less?

How does this not create some form of inflationary influence?
National Strategy for Trusted Identities in Cyberspace
Cool. May I ask, which printers did you test? Makerbot, lulzbot, ultimaker, zortrax, prusa?
Don't use Google Apps for Education for anything except for taking advantage of it by uploading your encrypted data to the nice "unlimited" Google drive space

Is this really abusable in this fashion?
What a brilliant article.
think it that way:

on a clear day you can read font X 10 words in under a second. font Y can be read 12 words in under a second. both are awesome, and a change would not improve anything.

on a night rainy day with little illumination, font X can be read at 7 words per second and font Y can be read at most on 3 words per second. Making font X clearly superior to font Y.
I get the feeling that Perl qualifies as "unfashionable". To be fair, I haven't stepped up to Perl 6 just yet, so I arrive at that conclusion from a Perl 5 perspective.

Why do I still use it? That's broken into two parts. I started using it because it was the language of choice for web apps circa 1999. I kept using it until recent years because of a large code base I was maintaining.

I continue to use it today because Perl Dancer 2 is a kick-ass framework. It has an extendable DSL, and it really makes short work out of writing web apps.
That's what I was thinking as I read the first half of the article, regarding the basketball team. Sure, it's all well and good that you have a team that gels and excels and is successful. But you have to be ready to adapt. People will come and go. Retire. Die. As the leader of said team, a big part is being able to fill holes over time. That's how you create a dynasty.
Rust's errors handling and memory safety are important differences too.
> I had to be a little careful not to try and apply my standards to how hard [others at the company] worked.

That's completely OK as long as bonuses are paid and >1% stock is given.
"Why disadvantaged kids get left behind, and a simple policy solution:" ~ http://m.bbs.sagepub.com/content/early/2015/12/16/2372732215... [0]

[0] https://twitter.com/JonathanLWai/status/693892639880548352
One possible answer is that the most talented guy on the team shouldn't take on too large a share of the work.

Sure, he can do any task better and faster than anyone else, but in doing so he's robbing the less talented team members of tasks that they could worked on. The overall team productivity might be higher if he sits back and pays close attention to what his teammates are getting stuck on and only spends his time filling in those little gaps that nobody else can fill.
Deploying on the jvm isn't what i would call a sane environment, i'm looking for something more go like (aka build copy, done).

Plus kotlin doesn't seem to have a very stable web framework for now, and clojure isn't enough strongly typed for my taste.

All those things i'm looking for makes me really hope in swift on the server...

But thank you a lot anyway for making suggestions.
Congratulation on getting married,

I have started a 3 days book challenge where i finish a book every 3 days, it's going great so far, also I am refreshing my skills with online education (although I am still following MS degree in Robotics and AI), but still the world is broader than only this, and I programmed few robots and made few contributions to the OSS (talking about ROS here).
I fixed my car the other day by changing a tire - well, technically, I fixed a problem in the car/going-on-the-highway package. But no one on earth would talk or write like that.
I found a couple of great guys to build the Android version of my app and have attracted interest from a VC in Silicon Valley.
That article is hugely exaggerating the claims in the Congressional EMP Commission reports it is referring to.

http://www.empcommission.org/
Your analysis is obviously spot on. Psychiatry is subjective at best and quackery at worst.

When you write "needs improvement" I think "need a complete overhaul" would be better.

Other people in this thread have already mentioned the drugging of children but I'd like to stress something else.

You compare psychiatrists to chiropractors as far as legitimacy is concerned, but there is a very big difference.

No one can force someone to see a chiropractor and that chiropractor can't strip you of every civil right without an accusation or a trial based on his assessment.

A psychiatrist can and does that on a regular basis.

This is a huge difference.
Your systems have to be seriously fucked up if freenode netsplitting causes "heavy load" this is super easy to parse text data we're talking about.

Edit: 4 downvotes but nobody interested in explaining why it makes sense for freenode netsplits to break the entirety of irccloud (which they do, regularly).
Or the still see the difference between documents on the web and the web applications. There is zero need for JS to be mandatory in the first case.
So much for a "free country".

I was going to type a response, then remembered the guideline against introducing classic flamewar topics. I'll just say this is myopic at best.

If you want to protect yourself, then protect yourself. You live in a country where this is even possible.
Flashforge creator pros and ultimakers.
Why Code in Node.js Often Gets Rejected by SoundCloud
> Is there anything we can do to protect ourselves from, say, posting something into a HN forum? Or any chat program? Or FB chat, etc...?

Tor.
I'm guessing it's the inclusion of iconv:

> size totals for glibc include the size of iconv modules, roughly 5M, in the “Complete .so set” figure. These are essential to providing certain functionality, and should be installed whether static or dynamic linking is being used.
Off topic but: It's also done for security reasons. It's difficult to hide doing something bad if you're not there all the time. (Sorry just read your parentheses. I'll leave this here anyway)
Commission to Assess the Threat to the United States from EMP Attack
I Analyzed USA Presidential Candidates Tweets
It's $25. How much time would it take someone starting from scratch to gather those snippets, choose a text editor, get it installed and configured, and set it up to use the snippets, watch files, etc.? If their time is worth anything at all I can understand the attraction of paying $25 to skip straight to the part where they're doing the actual work people pay them to do.
"The day after she left active service, the helicopter she had flown in for the previous three years crashed in severe weather into the side of a mountain, killing six of her former crewmates. Devastated by the loss and overcome with guilt"

Yep, that'll do it. "People die, you feel quilt.
" That's a Hal Moore quote. [0],[1]

[0] https://en.wikipedia.org/wiki/Hal_Moore

[1] 1st Air Cav, la Drang, '65 ~ https://www.youtube.com/watch?v=FxPeHqH4XxI
That's very much a secondary effect at household voltage levels with typical equipment, though. A NEMA 6-15 outlet has no more separation between the blades than a 5-15, for example.
Not based on standards-compliant code though.
Some of those people also may have had a disability they recovered from, but no real opportunity to return to the workforce (or no incentive to work towards their recovery). I believe the Social Security office even includes the criteria "could this person get a job?" based on age, skill, and location, and you could remain on disability even though in some theoretical sense you are physically able to work. Such as, you might consider a miner who has some physical reason he is unable to continue in mining; theoretically he might be physically capable of working in some other job, but those jobs don't exist in the community, or he doesn't have the skills and doesn't have enough time left in the workforce to justify retraining.

Which is to say, there are situations where no one is really defrauding the system, but because the rules don't offer any soft landing people have to stay inside a system and can't explore the marginal contributions they are capable of making.

(Still this wouldn't remove the purpose and need for disability insurance, just remove some of the strange structures in it that have developed.)

EconTalk had a really good podcast on disability insurance: http://www.econtalk.org/archives/2012/04/autor_on_disabi.htm...
Using www puts the customer first.

Being able to serve your website from a CDN helps the customer: it means the website is up when they want to visit it, and it usually means it's faster for them.

Having static content not get cookies helps the customer: it keeps HTTP traffic down, which means that pages load faster.

Separating cookies between different websites helps the customer: it means that when, inevitably, blog.example.com gets broken into, the customer's account info at www.example.com is not compromised. (Of course, this assumes that you're doing least-privilege between your various websites, but you're already doing that because you care about your customer and don't want to send them a letter about how you lost their personal information.)

Not using a separate top-level domain for static content helps the customer: they know that www.example.com and static.example.com are from the same company they trust, Example Industries, Inc. If you caused their browser to show that it's loading files from "static.excdn.com" or something, they might worry.

The customer isn't personally following the redirect; their browser does, so I'm not sure I understand how the redirect deprioritizes the user. As far as visual clutter goes, get an EV cert, which either supplants or replaces the address bar with something much more useful than a URL:

https://www.expeditedssl.com/assets/browser-ssl/extended-val...
How can the host be trusted? Are we sure the NSA doesn’t just do the very same thing to the network the host is connected to?
is this the background on this:

http://nymag.com/following/2016/01/youtubers-at-war-over-tho...

http://variety.com/2016/digital/news/fine-bros-react-world-y...
The problem wasn't that he is talented. It's that he's an asshole. Unfortunately the two often go hand-in-hand. I saw a top engineer once literally say to a colleague in ops: "Well my job is harder than yours so..." as rationale in a debate about something trivial. That kind of attitude is the hallmark of assholedom.
I tried HipChat for a project last year. It was an improvement over email because all the attachments were right there in the thread. The downside, after several thousand lines of chat, it got difficult to find things. The fact that chat message appear at one size, then expand when the content is downloaded doesn't help. It's hard to read when everything is bouncing around like that. Easier than email, but I still hate it about as much as email.

I've started using Trello and you know what, it's task-oriented paradigm of segmenting chats by breaking them into cards really works. It cuts the noise because each card is a topic. The topics can be rearranged in any logical form you choose. And when a task is done, well you might archive the card but it is essentially discarded from the collective thought stream. Maybe I'll end up hating it just as much as email. I haven't gotten there yet.
What are the ramifications of this exactly?
I keep proposing "<a href="..." hash="sha256:abcdefg..."> as the quick, easy 80% solution to this. Works across sites and lets you authenticate resources you don't own.
If that's the biggest mistake he's ever made, he leads a charmed life.
Thanks a lot for such a thorough comment!

You are right, asking people to run the binary on their servers is not a good idea.

I guess I have no other choice but to provide the source code to the clients, just like Atlassian does.

I just did some research, and it looks like GitHub are protecting their source code:

http://stackoverflow.com/questions/13185814/how-github-enter...

How do they get away with this?
Serfs up with California's new feudalism
I think you're the first person in this thread to explain why this problem is still allowed to exist.
>So I hope Napolitano steps up and explains what's happening now.

given Napolitano's pedigree, in AZ and DHS, i think the best explanation you can expect, if any, that it is either to protect children and/or national security without any details.

Btw, how she could end up as the head of UC?. Her record is like a mini-Bush in action. You can't make it up https://en.wikipedia.org/wiki/Janet_Napolitano#Walmart.E2.80...

Do you seriously think that choosing between new spectrometer and network snooping device she would choose spectrometer over her DHS security contractors?

I can only suppose that the UC search committee somehow ended up with only Hoover and Napolitano on the short list, and as Hoover hadn't returned multiple phone calls...
The initial batch of Skylake CPUs do not implement SGX: http://www.anandtech.com/show/9687/software-guard-extensions...

Any word on whether there will be a BIOS update (for example, microcode and ME updates) that will enable SGX for the first batch of Skylakes, or are they just forevermore broken?
It is pretty obvious that basic income is simply a wealth redestribution in disguise. As soon as you implement it, the wages start to rise because noone will do a tedious job needed for one of our cities to function unless it is madatory for a significant portion of their livelihood. Prices of goods and services follow suit and also rise. Disabled (SSDI) and unemployable (SSI) start to starve and the populists vote to provide them with "supplemental (above-living-wage) security income" or whatever. Whomever does not qualify finds a "minimal (above-living-wage) wage" job. What have we achieved? In absolute view, nothing. In proportionate view, income redistribution. (if x>y and x/y = k, then a+x/a+y < k. In this equation, 'a' is living wage and if you were paid 'x', you are now subsidising 'y').
What if its not "taxing the rich more" and instead, is "preventing them from capturing all of the productivity gains the economy is realizing"?

Because then we get into this real uncomfortable argument, don't we? About what ownership is? Because when you're taxed, people will say that's theft of what they've "earned". But the wealthy don't earn like everyone else. They earn as rentiers, of either land, capital, or intellectual property.

I'm suggesting the entire ownership model is going to need to be turned on its head. Otherwise, those who own what the rest of the world needs will continue to siphon wealth out of the economy, to the detriment of everyone else.
> passing or failing on codility means nothing. it just means the company trying to interview you through codility has no idea how to interview you.

It's a decent enough way to filter out obviously bad candidates without eating up your time (which is a big deal for small teams). I've used Codility for interviewing and being interviewed before and thought it was fine.

I would only reject a candidate if they got say less than 50% and the problems chosen weren't too difficult. If a company is going to be expecting 90% pass rates for super hard problems the rest of their interview process is probably faulty as well; that's not the fault of Codility.
I have a friend like this. He refuses to help himself and therefore fails to get better. I 100% agree helping yourself is a necessary component for recovery.

What I take offense at is when "seeking medical treatment" is so tightly coupled with "seeking an easy fix". The two concepts are orthogonal.

Anecdotal, but the amount of courage it took to finally seek medical treatment made it the toughest fix I ever sought out. The pressure to try do anything else BUT THAT made it difficult to think critically about the issue. I was also very real concern about embarrassing my parents.

For me, seeing a doctor was ultimate last line of treatment after years of shitty self-help books and introspection; never truly knowing what exactly was wrong. Luckily, it has bee most effective.
> "Neat! It looks like a movie!" - a recently funded security company actually hired a hollywood fx guy to do UI design.
Show HN: A clean mailing list browser, focussed on typography and readability
> No one has such an API, as far as I can tell.

I think he's referring to GR_APPLICATION_INFO, which in Mantle was a struct passed during initialization containing the string names of the game and engine plus their version numbers.

The intention probably is to make app specific driver paths easier to implement but as you say, driver developers would do that regardless using the name/path/checksum of the EXE if they had to.

https://www.amd.com/Documents/Mantle-Programming-Guide-and-A... (pg. 308)

https://www.khronos.org/assets/uploads/developers/library/20... (pg. 13)
Good luck with your family. I'm glad everything seems to be on track.
I noticed that, but haven't any idea what the purpose is?
My french isn't great, but in the UK you can file with the ICO. You might not be happy with the outcome, but it is the start of the legal process. The reason safe harbour is falling apart today is precisely because a determined EU citizen filed such a complaint against a US corp.

https://www.gov.uk/data-protection/make-a-complaint
While there is a need for traditional journalism, I do believe that grassroots journalism by internet activists has its own value, so this shift in journalism is both positive and negative. For example, "responsible" journalists in Germany failed to report on the nature or extend of attacks by immigrants on German women during New Years Eve celebrations, e.g. in Cologne. It was only viral videos that brought these events to more widespread attention.
They're great for managing parts in a manufacturer's storeroom. A QR code is more information-dense than a barcode.
This paper contains a remarkable amount of irrelevant background.

If you actually want to read this thing, read the very beginning and then skip to at least page 57.

There are some interesting bits that are relevant to OS authors. For example:

At first glance, it may seem elegant to have
EENTER restore the contents of the XCR0, FS, and GS registers in the current SSA, and have EXIT restore them from the current SSA. However, this approach would break the Intel architecture’s guarantees that only system soft-ware can modify XCR0, and application software can only load segment registers using selectors that index
into the GDT or LDT set up by system software (2.7). Specifically, a malicious application could modify these
privileged registers by creating an enclave that writes the
desired values to the current SSA locations backing up
the registers, and then executes EEXIT.

If that's correct (I haven't double-checked thoroughly, but it seems like it's wrong), then it's a problem. But I think the paper is just wrong.

I'd be more worried about RFLAGS in the SSA. Its exact usage is poorly documented, but some bits of RFLAGS are privileged (IF and IOPL).
> Could you explain why this should be necessary when email communication between the servers and clients is already encrypted via SSL/TLS? Can they bypass that? (And if so how?)

RFC2487 Section 5:

A publicly-referenced SMTP server MUST NOT require use of the
STARTTLS extension in order to deliver mail locally. This rule
prevents the STARTTLS extension from damaging the interoperability of
the Internet's SMTP infrastructure. A publicly-referenced SMTP server
is an SMTP server which runs on port 25 of an Internet host listed in
the MX record (or A record if an MX record is not present) for the
domain name on the right hand side of an Internet mail address.

In other words, internet mail servers are required to allow a trivial downgrade to plaintext by a MITM attacker.
LibTLS tells me what was negotiated was 'ECDHE-RSA-CHACHA20-POLY1305'

Edit: some more output:

New, TLSv1/SSLv3, Cipher is ECDHE-RSA-CHACHA20-POLY1305
Server public key is 1024 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-CHACHA20-POLY1305
Is that really a single crowd? It would seem like "PHP/Python/Ruby/Node" are separate from Swift (which is much more strict and is type/null-safe). Not sure where Go and Elixir would be sorted, but they feel less interchangeable than the first four.
Tcl/tk vs. the web
Thanks, I'll make the pricing policy more clear.

I agree with you, running closed source software does not give the company any guarantees.

It looks like GitHub Enterprise is protected:

http://stackoverflow.com/questions/13185814/how-github-enter...

How do they get away with this?
It sounds like SGX is intended as a DRM mechanism and intel wants to get a cut.
> Agreed. Everyone should have a mental health professional.

What about an astrologer, do I need my own astrologer also?

mental health professionals have very little to do with other specialties. None of those diagnosis are objectively based on hard data.

As they stand they're unfounded speculation and you pressing for general testing is very scary and either ignorant or just downright malevolent.
And you want to say "documents" need to send cookies to control authorization?
V8 4.9 91% Es6 support
Here's his point (I think):

"The founder and I made the most classic of mistakes: putting up with someone because we were afraid to lose their ability. I’ve since come to learn over and over again, it’s almost never worth it."

Perhaps just me, but I don't like this style of writing. It takes pages of reading to arrive at a fairly simple point.

Authors, please make your point first. Elaborate all you like with long winded stories afterwards.