skysight-inc/HackerNews huggingface dataset:
The NYT has a very schizophrenic view of marijuana. On one hand, the editorial board stands behind legalization. Yet they will employ language like this and try to reinforce seedy optics in readers. They also still drug test their employees, one of the few media companies in NYC still doing so to my knowledge.
Any sources or references on that? That would imply the vast majority of malware does not target devices set to Russian. Why wouldn't malware targeting non-English, non-Simplified Chinese, or even non-Farsi or non-Arabic be common as well?
Heh Heh Heh

It's kind of sad you sound surprised. :(

If you were in their shoes, how would you have handled someone doing that? :)
https://developer.github.com/v3/issues/#create-an-issue gives a bit of list of things that can be set, when using it as a link title isn't required. I can't for the life of me remember where I first saw it so I am pretty sure someone else deserves credit!
I am not currently practicing BJJ (did years ago) but I would agree. Constantly tapping to veterans is very humbling and the mental strength it takes to maneuver another human being as they attempt to maneuver you, while you're completely gassed, makes a lot of other tasks seem trivial.
Would you seriously rather have it unversioned and untracked and managed with some random webpage on github?
The Rise of Renting in the U.S
If this is your main reasons to choose a OS you clearly should use Linux then ;)
Nice to see that the WSJ has confirmed us to subscription service just to read what I can get on Ruetz
Consumer-driven contracts with Pact
Peachpy.io is a work-in-progress...
I wonder about the relevance of the case styled "United States v. Hubbell" (530 U.S. 27)†

Specifically (emphasis mine):

> ...the Self-Incrimination Clause ... may be asserted only to resist compelled explicit or implicit disclosures of incriminating information. Historically, the privilege was intended to prevent the use of legal compulsion to extract from the accused a sworn communication of facts which would incriminate him.

-and-

> ...the act of producing documents in response to a subpoena may have a compelled testimonial aspect. We have held that “the act of production” itself may implicitly communicate “statements of fact.” By “producing documents in compliance with a subpoena, the witness would admit that the papers existed, were in his possession or control, and were authentic.”

-and-

> Compelled testimony that communicates information that may “lead to incriminating evidence” is privileged even if the information itself is not inculpatory.

† https://www.law.cornell.edu/supct/html/99-166.ZO.html

EDIT: Wikipedia summary of the case here: https://en.wikipedia.org/wiki/United_States_v._Hubbell
Correct, but it sure does stop your entire single-threaded process from blocking to the detriment of all other requests.
It does mean other tasks (e.g. serving pages to visitors) can still be run at the same time as the CPU-intensive task though, like most languages do when it comes to hashing passwords and logging people in
Thanks for the feedback. We're definitely thinking about OAuth for Paypal. Unfortunately, banks and credit cards don't usually have modern APIs :) so we're forced to do old-school authentication. That said, we use Plaid for that, so we don't deal with any passwords ourselves.
> While some hashing libraries do insist on you supplying a salt, it is still ultimately up to the application developer to generate and store the salt for later usage.

If your password storage mechanism requires you, the programmer, to generate a salt, you may well be using the wrong password storage mechanism, or using it in the wrong way.
My understanding is that NT is more of a hybrid kernel than a true microkernel. Is that still true or has it moved more towards a micro kernel in recent years? I remember reading an interesting article about the influence of Mach on NT, but that they ended up having to put a lot of stuff (including the Executive) into kernel space for performance.
That's interesting, but I wasn't making any insinuation about why she became French. I was simply giving reasons why "French" wasn't an unreasonable guess for people to make.
Or, on HN, clicking the "web" link, and then clicking one of the results.
Interview with James Wise, Partner at VC Firm Balderton Capital
> 3DES is a block cipher. MD5 is a crytographic hash.

3DES is both a block cipher and a cryptographic hash. At least UNIX thought so in the 1990s as many MANY people were storing UNIX passwords in 3DES, DES, MD5, and similar.

> Neither of them are password hashes.

25 years of computing history would disagree with you. MD5 was the defacto standard for password hashing for almost fifteen years.

But no doubt you'd playing silly word games, and are going with your own definition of "password hash" that includes or excludes different hashing algorithms as it is convenient for you. I won't get drawn into that.

> What you're describing is closer to a "pepper".

What you're doing is called being "condescending." You know full well from my posts above that I am familiar with salt/peppering/hashing, and the different technologies involved. So linking to 101 tutorials and definitions of basic terms is only intended to aggravate.
Whether or not it's called big data is non-sequitur. Employers have had access to claims data before the tools were available to process it en mass.
even i had that question - especially when people are talking about using SFrame as the underlying structure for Julia. but then I saw this:

"Arrow's cross platform and cross system strengths will enable Python and R to become first-class languages across the entire Big Data stack," said Wes McKinney, creator of Pandas.

Code committers to Apache Arrow include developers from Apache Big Data projects Calcite, Cassandra, Drill, Hadoop, HBase, Impala, Kudu (incubating), Parquet, Phoenix, Spark, and Storm as well as established and emerging Open Source projects such as Pandas and Ibis.

this is pretty much nuke-from-orbit.
repost:
https://news.ycombinator.com/item?id=11113169
I'm referring to people who explicitly subscribe to a given issue. It's true that this would not allow people watching a repository to explicitly register their interest but I think the percentage of interested parties who are watching a repository is quite low. (GH could estimate this by checking +1 comments on issues for watchers.)

I think the advantage of using subscribers is simplicity. Adding another feature that is arguably similar to the existing subscribe complicates things.
> What is more valuable to an attacker?

Generally: Being able to deploy malware through a site users trust so you can attack them directly, en masse.

But the password hashes are a good runner-up.
I once had to call my bank a few years ago to disable my debit card. The reason was that I inserted it in an ATM and the ATM had chosen that exact moment to malfunction and shut down!

The operator on the line asked me a ton of questions starting from my user-id (but not password), date of birth, full name, father's name, place of birth, type of account and many others that I don't remember now. Only after I correctly answered all these questions, did he start acting on my instructions.
This version of the article wasn't paywalled for me: http://www.nasdaq.com/article/bosses-harness-big-data-to-pre...

It is great to think that my employer is paying for this but just got rid of our gym membership reimbursement.
> has hitched its wagon to the declining western Europe.

We are declining? I wish someone had told me.
"These results were presented at a meeting. The final results will be eventually published in a peer-reviewed journal."

They could put the information on their own webpage for all I care, as long as they are willing to stake their reputations on it.

The point is that we, the audience, do not have access to the requisite information (methods, data, background refs they trust) to even start attempting to judge the claims. Even if a conference talk/poster/abstract is available somewhere, that is an extremely limited format of communication.
I would imagine that the precedent the US would set with not honoring is defense agreement would have enormous repercussions for its relationship and bargaining power with both South Korea and Japan.

That would tip the balance towards US intervention.
Research papers in medicine are written for specialists, who already have access to them by means of employment. I don't know how access to that literature can save lives otherwise. Even if that was the case, it is a very far fetched way to prove that you need generalized civil disobedience with regard to copyright law.
I may be confused but how do you validate the password using the token if you've lost it?
An Open Letter from Past CEA Chairs to Senator Sanders
Northwestern is a communication / journalism school. Unfortunately for their students they will be entering a climate where they will have skills that are marketable but only for low pay. And their lack of a balanced point of view means they will be overlooked by a lot of well-paying organizations.

What a waste of tuition / donation money on something that's inherently harmful and not at all a good use of time or brain power. That's ok, a few years from now, universities will lose enough enrollment they will be forced to change from competition with education opportunities that help people with applicable skills.
Bad idea to use bcrypt.hashSync in Node.js. I hate that so many tutorials use that one instead of the correct bcrypt.hash with a callback. This is Node.js for that 200 ms where you are hashing that password nothing else runs, no requests, everything stops. Here is the correct way to use bcrypt in Node.js:

bcrypt.genSalt(10, function(err, salt) {

if (err) return; //handle error

bcrypt.hash(clearPassword, salt, function(err, hash) {

if (err) return; //handle error

// Store hash in your password DB.

});

});
I just want to say that your product looks great and the presentation is excellent. I knew what it was in under 10 seconds. I feel like I already know how to use it, in a weird way.

Definitely trying it out tonight! I'm a single dev, but still could be useful to manage projects!
Microsoft Brings Red Hat Enterprise Linux to Azure
People who have an affinity for puzzles or interested in a challenge won't necessarily have any interest in YOUR challenge.
I understand this, and if I thought it were possible, I would agree.

However...

The law is essentially trying to codify a moral code, one that changes with time. We've seen how the law struggles with changes to technology, lifestyle and shifting attitudes. But sometimes the very axioms change (see slavery, suffrage, common law). Because the law cannot keep up with changes, we're stuck with messy human interpretation to smooth over some of those rough edges. Something like Brown v. Board of Education, which seems obvious in retrospect, may not have occurred in an axiomatic system (perhaps Plessy v. Ferguson may not have occurred either, though considering the primary axiom that American law is based on once said that blacks were 3/5 of a human, I find that unlikely).

I would argue that we ought to try to introduce algorithms into the enforcement of the law (policing, traffic enforcement, jury selection, public defenders, etc) rather than the interpretation of it. Of course, one could argue mass surveillance is exactly that, so I don't know.
Let's not forget two other possibilities: a mix of static analysis with concurrent GC to automatically collect known-safe frees; HW support for concurrent GC a la Azul's Vega 3 that makes it free. I hot the former idea from CompSci work doing that to reduce safety checks in compilers that auto-transform code. Not sure if it's been applied to GC's. The latter was proven several times over and could supplement the former. The latter is more feasible now that semi-custom CPU's are a big business.
It's because "latitude lines" aren't really lines in this context (except the one at the equator).

If you took two points from one of those latitude "lines", you'd always be able to find a shorter path between them than the path along the latitude. If you take the shortest path between the two points and extend it all the way around the sphere, you'll end up with a great circle. That great circle is an actual "line" in this geometry.

https://en.wikipedia.org/wiki/Spherical_geometry
Let's get behind Google, Facebook, and Amazon in their desire to not to hand over our data to the government.

Even with as much data as each of them has, it's still better that the data isn't given to yet another party (the government, or each other).
Intel also released experimental driver for Linux: https://01.org/linuxgraphics/blogs/jekstrand/2016/open-sourc...
As far as I can tell, Mozilla doesn't provide official Firefox builds for any ARM Linux device.

The official Linux x86_64 build for version 44.0.2 is here:

https://ftp.mozilla.org/pub/firefox/releases/44.0.2/linux-x8...

I don't know who uses those builds, though. We can be sure that the year of Linux on the desktop will never arrive if we expect end-users to unpack tarballs.

Edit: To make that last part a little more constructive, perhaps this will help with distro-agnostic packaging of official Linux builds of Firefox and other applications: https://wiki.gnome.org/Projects/SandboxedApps
> The World Health Organization has recently suggested cutting the recommended sugar intake for adults in half, to about 25 grams, around 6 teaspoons, of sugar for a normal weight adult a day.

The interesting thing about this sort of guideline is how quickly you exceed it with fruit. The most popular fruits are all packed with sugar: an apple has ~10 grams; a banana, ~12 grams; an orange, ~9 grams.
Encryption Backdoors Come in All Guises – Reacting to Apple's Customer Letter
The costs of building and launching small satellites has dropped significantly since the 90s. People are also traveling more and demanding more connectivity, so it seems that Iridium may have just been a bit to early to the game.
Make sure you set high enough LUKS master key iteration counts, and/or very complex password, so that they can't image the LUKS header and brute-force your passphrase off-device.
Open Letter to SF Mayor Ed Lee and Greg Suhr
Subscribing to an issue to see how it plays out and supporting the contents of the issue are two majorly different things.
Java / Scala can get dicy on $5 host.

Problem 1) SBT cannot run with 512 ram, so you cannot compile locally. If using phat jars, that means you need to upload a 100mb jar every time you want to deploy, vs just a git pull and a build. May or may not matter to you.

Problem 2) Once you start doing some actual work, the JVM itself is taking up a few 100 MB of ram, and the OS takes up a fair bit.. this leaves something like 128MB ram for your app best case.. for a lot of apps this is not enough. I had to go up to at least 1 GB VMs to get my medium complexity Scala app to work in prod, and I have been tuning JVMs for many years.
also unique to Facebook, Yahoo, Amazon, all SEOs...
Personally, I drink Starbucks once in a blue moon as a treat - not for superior coffee flavor, but because I want a giant, sugary dessert beverage. At one time I drank a large cup/week, but then I came to my senses.

My normal morning coffee is brewed at home using fresh, but mass-produced beans (usually one of Trader Joe's varieties).
Ask HN: What steps should I take to have a satisfying career in design?
After trying to break into computer science at my school, unsuccessfully, and after having a go at completing the math prerequisites, I don't think I have the intellectual strength for a full CS program. I'm disappointed, however right now I need to focus on graduation and that means reserving CS for another time, if at all.

My current major is in "design". I put it in quotes because "design" is broadly stated at my school. Essentially my program is a mix of visual arts, UX, and product design, with an emphasis on the commonalities between each. (For the curious: http://www.sfu.ca/siat.html)

I've done well in their courses in the past (and if I end up in the position of product manager or somesuch, then I will be happy). By contrast, I do average-or-worse in CS courses. But that set of subjects is obviously a little bit of grab bag.

Unfortunately it's been awhile since I've investigated the designer scene. And with the advent of AI systems that can construct aesthetically pleasing web pages, I'm sort of fearful for the niche. So: what steps can I take to begin a satisfying career in UX and/or design? What are the core skills that I need to practice, and what sort of jobs are available for someone trained in UX and some web development?
When included in a larger work it would seem that you can argue you are charging for everything else and providing Firefox for free kind of like Microsoft and IE.
Who was this RN working for exactly? Your PCP? Your insurance company? A broker? A third party?

I doubt they are employed at the company you work at, meaning your employer isn't look at your health record.
yeah it happens all the time. nothing new or overly concerning here.
Apple Is Recalling Faulty USB C Cables
Just about every article talks about how hosts are violating the law on a massive scale.

Making them stop is "more regulation", it's pretty simple logic. It doesn't matter which branch of government is doing it.
If you have a landlord like that, move, which is another upside to not owning - it's very easy to move whenever you want.
Even from an artificial game theoretic perspective, cooperation is often not the optimal choice. I'd say that in real life, even more so.
What makes this indicative of a bubble is the combination of:

a. Business centered around an utterly frivolous endeavor

b. Seemingly far more employees than necessary to support (a)

c. Many millions of dollars raised in the pursuit of (a) and (b)

You're absolutely correct that people want to use it. But they sure as hell aren't gonna pay directly for it or put up with ads. This is not a business made to last. I know it, you know it, we all know it. Yet there are people out there willing to toss $55M into this folly.
One big difference: there's been a lot more research on economic matters since America's early tumult. There have been warnings about China's debt issues since the issues started.
>Protect features from users by excluding them from ever seeing them – for example, excluding anyone from TechCrunch from seeing new functionality.

rimshot
A pretty short war? I don't see where China would be too worried about a small time dictator? Or was that your point and I missed it? It could be good for Africa for that to happen, have China step in and assume some order, rather than the Chaos that is keeping many of these countries economically down.
Aside, ticks me off to no end that Ubuntu removed the reverse-scrolling option (at least with a desktop) ... On windows, I use an autohotkey script to reverse the scrolling, and for media shortcuts (non-media kb). Ubuntu is the odd one out there for me now.
Until that person decides they are sick of footing the bills for a company that isn't profitable...
Adding to that paradox, a major theme of the original post is that personal connections are really important to getting a startup job.

So, startups are really looking hard outside the founders' circle of friends to find the most qualified applicants?
I once ordered a cappuccino after 11, I got something else instead (I believe an espresso/americano?) and I was really confused as I thought the barista had misheard me. Then someone explained it to me afterwards and I felt kind of silly
I don't think this is true. Coins are multi-use. Obviously the government wants to pay as little as possible in production costs, but there isn't any reason that the production cost has to be strictly less than the unit-cost of the money.
Rails 5 improves searching for routes with advanced options
I don't do BJJ, but am familiar with it and have done some judo.

In contrast to stand-up striking arts, you have limited possibilities of movement when "hugging" your opponent on the ground, so you need to do have a strategy, do some planning, and have to adapt rapidly to changing conditions. Like "what move can I do in the current position?", "what moves could my opponent pull off form this position?", "what moves could I do if I changed to this other position?", etc. etc.

I do believe that you won't find any better than anecdotal evidence for this subject, tho. Expecially if you'd need to compare between arts.
I'm interested to know how you identify the trello cards in the commit message? Are you using your own codes to identify them? I'm thinking of building something similar myself.
Recommending for the World
China has started detaining foreign citizens and making them give forced confessions on national TV:

http://www.theguardian.com/world/2016/jan/20/swedish-activis...

Can you imagine the United States doing this to a Swedish citizen?

Chinese lawyers specializing in human rights risk life in prison:

http://www.theguardian.com/world/2016/jan/14/chinas-pursuit-...

Can you imagine the United States prosecuting ACLU lawyers like this?
Has tech made waiting in line obsolete?
I have an i3-5010U hooked up to a 4k display (spare pc), and it tends to stutter a bit in actual use... is the 5200U much better? been thinking of moving to an i7-6600U brix, but concerned that I'll still have trouble with driving the display.
This was also added into Telegram but it's done differently.
Agreed, and I'll go one further saying that it's still not 100% this way everywhere. I'm from a pretty rural area and at several of the stations there you're still free to pump then pay in cash.

I actually didn't realize pay-first for cash transactions had become the standard until recently as I made the swap shortly after 'pay at the pump' became common and never really looked back. How does it work? You just estimate how much you need, and the pump cuts off at that point? If you can't hold that much you go back for a refund?
Oh, I see! I hadn't twigged.

...shame; living on Pluto would be cool.
There is also Debian testing which is more polished than Sid, but is also semi-rolling.
> installers just have what they need

Have you ever tried writing a Windows installer?
yea, apparently their CTO didn't like anyone without python experience. bizarre.
China Telescope to Displace 9,000 Villagers in Hunt for Extraterrestrials
Nice to see a new columnar data format alternative. Just a quick question though.

The existing columnar data formats such as Parquet and ORC aim to be space-efficient since the data is stored in disk and IO operations are usually the bottleneck. The columnar data formats shine in big-data area so the amount of data will be huge. Given that columnar data formats can be compressed efficiently and that's of the main points of columnar data formats such as Parquet and ORC, I'm not sure that I understand the main point of in-memory columnar data formats.

Once the data is in-memory and we can access any column of a row in constant-time what's the difference between a row-oriented data format and columnar data format?
This is about NIRP, which is fundamentally about the bankruptcy of the current monetary/banking system.

The crime talk is just a distraction.
Want to buy my copy of Domain Driven Design? Only $175 to you, sir ;-)
Under extraordinary circumstances, compelled expert witness testimony has lots of precedents, including situations where experts are required to expend resources to develop that testimony.

People on the Internet tend to believe that technology poses confounding problems for the law, but the law has been dealing with technical challenges for centuries. See, for instance, any case involving a complicated medical issue.
Just signed up, site seems fast and works great. What's the stack like?
I would also like this, sometimes you don't care about a specific thread and scrolling pass it takes 3-4 screen. Very annoying.
Attachments have been around since 2012:
https://help.github.com/articles/file-attachments-on-issues-...

https://github.com/blog/1347-issue-attachments
The Ruby Code of Conduct