skysight-inc/HackerNews huggingface dataset:
So if I get this right, they want to (1) disable the delete feature after x retries (therefore enabling unlimited retries) and (2) enable to submit tries via a connector/wifi, bluetooth (therefore enabling a bruteforce approach). What good is an encrypted filesystem in that scenario?
Yes - this is precisely what I want to do
Which should be expected when buying in bulk.
Correct. What went wrong at Zenefits and other places was failure to correctly execute the kind of submarine approach to compliance exemplified by PayPal. Lots of startups skate near the edge and sometimes get dinged by regulators. The question is whether you do it to excess and/or make yourself a target. Failure to navigate this can make you an ex-unicorn, but it says nothing about unicorns in general.
Some company has to be first.

Imagine you're an entrepreneur, and you've identified a heavily regulated industry full of sclerotic companies with connections to the regulators that serve large numbers of customers extremely poorly. You believe that you can't break into the market without violating some regulations that have a strongly negative effect on product quality.

What should you do? Go to VCs and ask them to fund a decade-long lobbying campaign with a very high probability of failure in which you pour your heart and soul into getting some obscure regulation in some obscure area that nobody cares about changed, and then afterwards start a company to better serve the customer (along with everyone else who is rushing in to benefit from the lightened regulatory load)? Or try to start a company, show everyone that they regulations are dumb, make customers happy, and then force the regulators to change out of sheer embarrassment?

If we don't occasionally reward people who took the second option (and were right!), I don't think we would get safer, more ethical change, we would just get less and everyone would be worse for it. I'm obviously fine with people who break regulations and end up hurting others being punished to the full extent that the law allows, but there needs to be an escape valve for when the government has it wrong.
At least partially because you don't have to reproduce the whole spectrum of sunlight, but just those portions that are used by the plants for photosynthesis. Even after solar cell efficiency and other losses, you might still be able to deliver more of the light you want to the plants, in addition to being able to control the day/night cycle.
I'd like Mac OS X but on a Lenovo T or X. That would just be perfect (assuming it ran as well as it does on a MacBook).
Remember, this is an iPhone 5C, which doesn't have Touch ID or the Secure Enclave; the security model for this phone is significantly different from that of more recent iPhones.

On phones with a Secure Enclave, the wipe-on-failures state is managed in the coprocessor (which runs L4), and is not straightforwardly backdoor-able.

If you're worried about the police brute-forcing your phone, enable Touch ID and set a passcode that is approximately as complex as the one on your computer.
I am not denigrating Tackle, in fact, I support it in Fisherman! ;)

⁣⁣

When was the last time you improved the documentation or added a new plugin, or answered to issues...?

⁣⁣

Now, on to the facts.

⁣⁣

2-year old issue proof:

• https://github.com/justinmayer/tackle/issues/3

Tackle support for "modules" and "function" snippets in Fisherman proof:

• https://github.com/fisherman/fisherman/blob/master/functions...

⁣⁣

Also
⁣⁣

PRs are ignored for months:

• https://github.com/justinmayer/tackle/pull/16

Issues are left unanswered for months:

• https://github.com/justinmayer/tackle/issues/14

⁣

All I am saying is, if you need first-class support for your fisheries, Fisherman is the man for the job, not Tackle.
Run iOS tests in multiple simulators in parallel at the same time
Thanks for the archive.is link: impressively, it's not yet blocked here in China.
Ringing Bells Android 5.1 Smartphone for ₹251 ($3.6)
If Lenovo has unintentional binaries slipping in the production image, the problems are way more serious than sloppy QA.

How can I trust their peripheral chips and firmware? Or BIOS and SMM for that matter?

Maybe some nasty things unintentionally slipped in their SMM code as well?

https://en.wikipedia.org/wiki/System_Management_Mode

There's no way I could verify all the firmware code contained in the laptop. Heck, not even one chip.

Lenovo has had things not intended happening with their BIOS [1] as well. It's fixed now, but what else there might be lurking under covers?

[1]: http://arstechnica.com/information-technology/2015/08/lenovo...
Disturbing Suicide Cluster Prompts CDC to Start Investigation in Palo Alto
Which is not a bad market to serve when that 10% owns 75% of all wealth in the US.

Source: Credit Suisse: https://publications.credit-suisse.com/tasks/render/file/?fi...
R is a fine tool, but (like Java or C) not the best window for a beginner into the joy that programming can be. The syntax is pretty weird and its semantics don't align that neatly with broadly-useful ideas for reasoning about programs.

We run 3 different intro sequences in Python (for non-majors), Scheme (for most majors), and Haskell (for those who are already strong imperative programmers). They're all great.
The book was published (in English, at least) just this month, according to most sources I could find.
I agree with everything here, including the praise for Matloff's book; it should be the very first book any serious R user picks up.

But Matloff is no longer alone: Hadley Wickham's Advanced R is now also a must-read for R programmers.

http://www.amazon.com/Advanced-Chapman-Hall-CRC-Series/dp/14...
You might want to try CEPL and Varjo for an interesting take on this in the OpenGL/CL world. Programming in CL often feels like having a powerful compiler under the hood and an amazing debugger to start with.

I'm not suggesting you cannot write a Vulkan API library in CL -- work has already begun in that direction: join in on #lispgames if you're interested.

It's just not going to be the ideal API to learn if you're new to graphics programming when OpenGL is already here, is rather well understood, and has plenty of supporting libraries and extensions for most needs.
Plenty of good if you have a reasonable passphrase and the vendor hasn't been compelled to assist.

"Can only try 10 times" isn't anything guaranteed by encryption. My laptop has an encrypted partition, but an attacker can brute-force it at will. Even if I had software to say "only let it happen 10 times, then erase the partition" the whole drive could just be cloned. That's why I have a 20+ character passphrase.
>> first class function/method's owe a lot to JS for leading the way

Javascript's lambdas were inspired by Scheme which has been around since the 70s.

"Remember, I was recruited to 'do Scheme', which felt like bait and switch in light of the Java deal brewing by the time I joined Netscape. My interest in languages such as Self informed a subversive agenda re: the dumbed down mission to make 'Java's kid brother', to have objects without classes. Likewise with first-class functions, which were inspired by Scheme but quite different in JS, especially JS 1.0." - Eich (on HN)
I have no idea of the Portland specifics, but a lot of law, especially administrative law in an hoc process. City hall could say "we think you are operating a cab service in violation of our regulation don't operate." But the reality is nobody is sure whether Uber is actually violating the law. You either let city hall sue/make an admin finding or you preemptively sue them and wait for a court to decide.

Plus sometimes you know how bad the worst case legal scenario is and it's the best option. With stuff like taxi regulations the fines probably aren't too bad.
Looks like it's an excerpt from a book
Call for study on whale-dolphin deaths in Malaysia
Wouldn't Apple (or the manufacturer) know the key of the security enclave?
Government makes no money, all the money the government distributes as benefits is taken from the productive slice of society in the form of taxes. There is no magic way you can raise benefits for an aging population without also raising taxes (specially when you are already operating in deficit).

OK, the government can print more money, but this causes inflation, the worst taxation of all.
No, the point I'm trying to make is that seemingly one of the only ways to get stupid laws changed is for them to be broken, and for people to see that the law is pointless (or not pointless!). Why exactly the law is or was in place doesn't matter too much.

Another example would be the woman who has the gall to braid hair without a license - if she hadn't broken the law, nobody would talk about it, there would never be any chance for reform, and we would all be incrementally poorer for it.

I'm not taking a position on specific laws, just that it's important that some laws occasionally be broken so that as a society we can test whether or not it matters if someone breaks them. If breaking a law doesn't result in negative outcomes, it shouldn't be a law.
Getting Started with Statistics for Data Science
U.S. wants Apple to help unlock iPhone used by San Bernardino shooter
No, we're complaining about baby boomers complaining that we just need to "work harder". The cost of houses (relative to inflation/wages) in their 20-30's was multitudes cheaper. Anyone who thinks the young have it nearly as good as baby boomers hasn't done the maths.
Apple goes way out of their way to avoid scenarios where they can be compelled to subvert iOS security. For instance, see pg44+ of the iOS security white paper:

https://www.apple.com/business/docs/iOS_Security_Guide.pdf

... the HSMs that manage the escrow scheme for credentials stored in iCloud are themselves rigged to blow up on 10 failed tries, and, not only that, but the code that implements that process is burned into the HSMs and the keys Apple would need to change that logic have been destroyed.
I would look into AWS Lambda. Lambda host backend functions written in javascript, python or java. You can then use the AWS javascript sdk in your frontend code to invoke these lambda functions. This will be very low cost and cuts out a lot of boilerplate work. You pay on a per request basis versus an hourly or monthly basis. So if no one is using your website, then you pay nothing.
Note: I manage dedicated-server hosting and all web services on Titanfall @ Respawn.

Surely your calculation doesn't / can't include bandwidth charges? And if you have Windows hosts... cloud screws you too.

You're not wrong that it takes a lot more machines than most shops need, and if you can make your scale elastic, 150 machines probably goes a long way! And to your point, developers undervalue their time a lot, and dealing with colocation and sourcing of hardware and backups can be a real drain to save some on CapEx.
API Manager in ColdFusion 2016 (v12)
Exactly. I wonder how much of this transformation can be emulated in the states; how much people in Congress are paying attention to what's happening across the pond.

>> That month, Deutsche agreed to pay $2.5 billion in penalties to U.S. and U.K. authorities for its role in the Libor rate rigging. (No current or former member of the bank’s management board was implicated.)

It's very hard for me to feel bad for these people.
I had to scroll all the way to the bottom to find you.

I have always heard good things about the ASUS ZenBooks.
If you want to use the sun, you'd farm outdoors traditionally. You're right at the core of it, that's why most farming still happens outside.

Building a specialized building is a compromise putting you into an uneconomical position, you'd only provide additional light to the top-most layer of plants (small operating savings) at the cost of building specialized architecture (large capital expense).

From what I understand, the vertical indoor farms are mostly low-calorie high-moisture crops so far like lettuces. Compared to many crops, energy is not the primary input, it's water, space and time. These vertical indoor farms economize by controlling the environment they grow in to avoid wasting water, accelerating growth cycle with grow lighting to avoid wasting time, and stack plants vertically to avoid wasting space. Supposedly it makes sense to pay the premium for electrical energy to be able to save on the other inputs. For higher-calorie crops I imagine the math works out to be quite far from break-even.

This is also why these vertical farms aren't about to solve social issues that people attach hope to them for, low calorie vertical farm produce isn't going to provide for the dietary needs of enough people to impact the the problem of transporting foods from agricultural areas to metropolitan areas basically at all.
If you learn to sleep on something less than a full bed, as 1/2 the world does, then you should be good to go at any hotel. I personally have never found anything the west would call a mattress that is firm enough for my tastes. The best sleeps I've had have been on a 1" thermarest inside a bivi sack strapped to a cliff. It's not about the bed. It's about what you are doing and how stressed you are while doing it.
The whole bit about "don't worry about morale"... Some engineers are replaceable, not all. If things get bad and you lose early/key people, there is a non-negligible hit. But, I think Ben and Mark at A2Z outlined a strategy harkening back to the last big hit -- build up the reserves in the bunker. If you think things will be bumpy for X-months out and you aren't cash flow positive, get the requisite amount in the bank ASAP.
Well, clearly the kind of low self-esteem psychopath who keeps track of past crushes in the hopes of weaseling his way into an affair/relationship with women who have already proven they are less likely to make suitable partners than baseline, doesn't have much regard for what society has deemed "messed up".
Ask HN: What's it like for software engineers on Wall Street?
I was looking at this quora question[1] in which an individual is 23 and makes 300k on Wall Street as a developer. I've heard many times how miserable the financial sector is, but I'd probably be willing to bite the bullet for a couple years at that rate. Information about the jobs there seems scarce, though. Anyone on HN have experience in the financial sector? What sort of work do you do, what kind of work environment is it, what was the pay like, and was it worth it?

[1] https://www.quora.com/I-just-turned-23-and-make-around-300k-working-on-Wall-Street-Could-I-make-this-in-Silicon-Valley-if-I-was-looking-to-make-the-switch
Can confirm this attitude among some lawyers I know. A certain unspecified family member does contract law (not even IP law) and totally buys into the life + 70 years to "promote innovation" copyright BS without question.
California requires 20 hours of training to get a license for health and accident insurance, 20 hours to get a license for life insurance, and an additional 12 hours on ethics training for people wanting to pass the exam for either. These are tick-box requirements that allow you to take the exam you need to pass to get the relevant license. Several providers have online courses you can take for $50 < N < $100 which fill up the required 52 hours and, importantly for the purpose of box ticking, generate documentation certifying that you put in your 52 hours.

Here's the regulator's description of half of the requirements:

http://www.insurance.ca.gov/0200-industry/0050-renew-license...

There exist many tick-box requirements in the vast, vast field that is compliance in regulated industries. There is a political valence to this observation.

My personal favorite one is the time where I had to threaten to fire myself if I ever misused patient information. I threatened to fire myself if I ever misused patient information. I then documented the fact that I had threatened to fire myself if I ever misused patient information. If I am ever investigated on suspicion of failing to have threatened to fire myself if I ever misused patient information (a crime which is separate from misusing patient information), I will be able to produce adequate documentation attesting to the fact that I threatened to fire myself if I ever misused patient information.
https://news.ycombinator.com/item?id=11114756
No. From Apple's iOS security guide[1]:

> The device’s unique ID (UID) and a device group ID (GID) are AES 256-bit keys fused (UID) or compiled (GID) into the application processor and Secure Enclave during manufacturing. No software or firmware can read them directly; they can see only the results of encryption or decryption operations performed by dedicated AES engines implemented in silicon using the UID or GID as a key. Additionally, the Secure Enclave’s UID and GID can only be used by the AES engine dedicated to the Secure Enclave. The UIDs are unique to each device and are not recorded by Apple or any of its suppliers. ... Integrating these keys into the silicon helps prevent them from being tampered with or bypassed, or accessed outside the AES engine. The UIDs and GIDs are also not available via JTAG or other debugging interfaces.

Even for older devices like the iPhone 5C, if the owner chose a good passphrase, I doubt it can be decrypted with Apple's help.

1. From the section on Encryption and Data Protection. Starts on page 10: https://www.apple.com/business/docs/iOS_Security_Guide.pdf
Swift.PM Registry – An unofficial registry of Swift packages
Nope. The keys are personalized to the device at manufacture and, according to Apple, not retained.
Colo cost varies based on the facility, uplink, power density, and various other factors. So it doesn't quite make sense to talk about the "colo cost" of a specific device, or comparing colo cost of one chip versus another... unless what you're really just comparing is power efficiency.

Let's say you're renting half a rack with 100Mbps unmetered bandwidth and 20amps of 120V for $500 per month. So you have 16 amps / 1920 watts of continuous power you can draw. These Xeon D's are very lower power, although strangely Pat doesn't report the actual idle and full load draw as measured by a Kill-o-Watt meter. With the 10GBE I can't imagine budgeting much less than 150 watts per machine. If you can put let's say a dozen of these in that half rack, in my contrived example, the "colo cost" would be $41.66 / month or just $2.60 / core.
The problem is that they were getting the advantages of being licensed while not actually following proper procedure for licensing. They were effectively lying to everyone. Sure, it's a pretty harmless lie, but I can see how people in the industry would be pissed.

Lyft and Uber skirt similar kinds of regulation but they're completely up front about it. They don't pretend that their drivers are licensed or claim any benefit for having licensed drivers in any way. They're simply offering a different product than what taxis offer - getting a ride with a random unlicensed stranger. They're not trying to get the best of both worlds - the legitimacy of being licensed and the cost saving of not bothering with it.

Lyft and Uber, and Airbnb too, are simply offering a new product that doesn't come with any reassurance for consumers from regulatory compliance. They're betting that reputation systems (ratings, reviews, etc.) will provide assurance for consumers just as well if not better than government regulation. So far the market is showing they just might be right.

I suspect that if Zenefits had offered a platform where anyone can sell insurance to anyone from the beginning then people would be less pissed about it. Of course offering an unlicensed insurance brokerage product would probably be a lot harder to pull off than offering an unlicensed taxi product.
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣ ⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣ ⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣https://news.ycombinator.com/item?id=11102941
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
> Archival paper is interesting but largely unproven tech.

Archival paper is tested by artificially aging it (e.g. exposure to heat and moisture to simulated passage of time.) Some long-term tests are underway to determine whether accelerated aging tests accurately simulate the natural aging process.[1] And there are associated standards, e.g. ISO 5630-3.[2] But you are correct, we really have no proof of how modern archival paper will perform over a multi-century timeline.

[1]https://www.loc.gov/preservation/scientists/projects/100-yr_...
[2]http://www.iso.org/iso/iso_catalogue/catalogue_tc/catalogue_...
The company behind this farm have a nice website with a lot of specification / technical detail for their farm [1].

They claim that this farm will produce 10M lettuces per year on 3500m2. They are also looking for partmers to franchise their technology, inside and outside of japan.

[1] http://spread.co.jp/en/technology/
Yes, I guess the 150 machine is more like a guideline. It depends very much on your workload. If you need 150 beefy machine running at 90%CPU all the time, then yes, running your colo may come out ahead. On the other hand, if you run a system with an online fleet of say 20 web servers, a couple of beefy databases, and some offline analytic workload, then AWS will definitely come out ahead.

And that is not considering other AWS offering. I've come to really like DynamoDB. It takes some time to get used to, but I've found it's solving more and more problems for me, without having to scale OPS engineers. There is a danger of lock-in, but I guess as I am a paying customer, it's not going away anytime soon, and Amazon is probably not jacking up the price either.
The board has 4 ram slots, and 32gb is generally available (64gb is still in 'soon' territory, I think). Xeon e5 v3 has four ram channels instead of two for the processors in the article, and can handle three dimms per channel (or at least the board in the article only haa two slots per channel).

I assume there's some market segmentation happening here, but it's also a way to reduce board size and pin count.
Beating the CAP Theorem Checklist
> Successful startups all, and I mean ALL, have serious compliance issues.

This feels like a very hyperbolic claim. There are definitely high-profile examples of startups that had compliance issues and are struggling to bring them under control or remain in arguably grey areas (Zenefits is an example of the former, Airbnb the latter). But it's hard to imagine that it's a truly universal problem; many startups are in industries without heavy regulatory rules. Can you elaborate on what makes you believe this to be the case?
He said mainframes were equivalent to x86 servers in capabilities. So, I started asking if they've achieved a few mainframe capabilities businesses depended on since the 1970's. Also, I already knew the answers ahead of time. Questions were more for parent to see why x86 servers != mainframes.
Linguistics?

Linguists merely observe what happens in the wild, the way an anthropologist does. And like an anthropologist -- a good anthropologist -- they ought to set aside all notions of better or worse. It's not for an anthropologist to rank putting a bone through one's nose against putting a man on the moon and to judge whether one is better than the other. In the same vein, neither is it right for a linguist to say whether "more unique," etc. is right or wrong. So, you see, regarding usage, linguists are of no help in matters of taste.

I would suggest you consult a quality reference on the English language, such as "Garner's Modern American Usage." There, you would read that these casual uses of unique ought to be avoided. I'm sorry, but you won't find "Garner's" online for free, so I can't link to it. Consult your local library, while there still are some.
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣ ⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣ ⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣
⁣
⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣ ⁣
⁣
⁣
⁣