skysight-inc/HackerNews huggingface dataset:
The @anl.gov is probably this: https://www.alcf.anl.gov/bgclang-compiler
See: https://en.wikipedia.org/wiki/Blue_Gene#Blue_Gene.2FQ
"The Blue Gene/Q Compute chip is an 18 core chip. The 64-bit PowerPC A2 processor cores are 4-way simultaneously multithreaded, and run at 1.6 GHz."
Waking up every minute is fine. Spending 1.5 s of CPU time doing nothing... I think I could improve on that. That's enough CPU time to drag down overall performance slightly when the machine is not idle.
The argument "the cops planted the evidence" usually does not go well by the judges, unless you have very very strong evidence that tamper DID occur.
I hope it will happen. But I guess only when competition will be strong enough. I doubt MS will suddenly decide to play nice.
My anecdotal experience is that my wife and various other females seem to loose more weight with additional meals earlier in the day. My next observation is that perhaps post fast my wife and others seem binge more often (again just an observation).

For me after I fast its almost impossible for me to pack 2k calories in 4 hours IF I eat healthy. I feel disgustingly full but my wife doesn't.

The other thing is my wife also prefers to eat before working out which I do not like at all.

I read an article like this recently that might be the reason why: http://www.dailymail.co.uk/health/article-3388628/Men-exerci...
Show them the world is watching. Stop DRM in HTML
Ask HN: Re-learn JavaScript today, where to start?
I knew JavaScript well 10-12 years ago, then I stopped using it.

I know that things have evolved in the last decade.

I want to learn it again, but I'm a bit confused by all the variations around it... ES6, Node.js, etc.

What's the best way to clear up confusion, so that I know where to focus my efforts?
Go's networking library actually does call epoll/kqueue/etc on the backend, so it is using nonblocking io. Using nonblocking IO will provide better performance because it will increase the number of concurrent requests it can serve. It's not a silver bullet, and can be very difficult to implement at the application layer to avoid blocking, but it will give markedly better performance.
I hope that you are correct. That was also my assumption but I have not validated it.
Right, but it's still discouraging to be forever branded a "2nd tier engineer/human/etc" because of where I went to school (unless I get into a good grad school).
Larger Lemma: every number ending in '0' (besides '10') is not prime in any base. (The primeness of '10' obviously depends on the primeness of the base.)
>I always look for the "Flask" of that language.

I always look for the "Sinatra" of that language.
There's this neat trick that can get you access into all of your bank accounts and credit cards. You can even get access if you forget your username and password.
You realise Wikipedia isn't a source, right? Every news article about this incident (including the one you linked to) states that the tested bicycle was in the pits. The rider in question was out on course, riding a different bike.

That doesn't make it right of course. The whole incident stinks. But the UCI did not, and to date has not, caught someone racing with a motor.
Usually the only way to circumvent the technical phone screens at a company are if you're coming in through a strong referral. That's great if you already have a strong network, not so much if you either don't have personal connections or a resume with the credentials recruiters are trained to look for.

Just focusing on interviewing time, if you're talking to 3 or more companies that's approximately 3 hours of technical phone screens (usually repeating similar problems). With Triplebyte, you interview for 2.5 hours and save 3 (or more as you talk with more companies).
No on the weekends I sort of do a refeed to regain leptin and what not so I eat 2 calorie dense meals and follow the 8 hour regimen.

During the week I just find I need to start shutting it down earlier or tapering down.. or else. So I do a casein protein shake (just casein) and a beer (usually the beer is prior) as my second meal.

I don't think there is any magic except that I'm doing something that I can maintain (the beer being my treat to help maintain follow through).

Oh I forgot. Sometimes on Friday I will wait till 8:00pm to eat (24 hour fast). A guy on reddit does this and he/she calls it "Fast Fridays". The idea being Fridays and the weekends are usually a calorie fest. I like it for it practicality and for the catchy name.
Robinhood: Zero commision stockbroker
Awesome! Thanks for the link. It looks like they have a limited free forever version as well, gonna have to play with this.
> Claiming this reality amounts to "sabotage" is somewhat absurd.

It's not. MS is not new to sabotaging portability. Learn from history.
How San Francisco ruined itself (1999)
Another freely available book on Neural Networks is here:

http://hagan.okstate.edu/nnd.html

I've started skimming over this and it looks pretty useful so far.
Between this and the Trump campaign's success I'm increasingly certain we are living in a Hunger Games prequel.
Timing is everything. To me, this is just Dynamic Networds from the mid-1990's. :)
Are there some pointers to the startup scene there? Every time I have checked recently its been off-shoring the IT in a lot of those public companies.
Learn ES5, and the affordances that HTML5 give to it. Then, learn a bit about underscore/lodash for functional work, and node.js streams. Learn about promises.

Later, you can learn more modern stuff (ES2015), but getting that solid foundation back under your feet will be useful. You will also skip a lot of mucking around with custom build systems.
Google and their famous customer support, yes. Worried they might be, but more than you? For them, the cloud is one of many revenue streams, and nowhere near their most profitable. For you-cloud-customer, a website outage might mean you don't have a revenue stream anymore. It could make the difference between making payroll and shutting down next week. I bet you'll be much more worried than Google will ever be.

Googlers might be more skilled than your ops team, yeah, but I would never bet on huge companies to worry about the fate of something that is not their main revenue generator.
> I'm pretty sure they're well paid for the efforts.

And that cost is passed along the way reaching those who use it including end users ;) Someone will feel the tax.
2FA is nice unless you lose your cell phone or it gets stolen. If you ever lose your job or go homeless and can't afford a cell phone then you are locked out of your accounts.

I am disabled and struggling if I miss payments I go homeless or can't pay my bills and things get shut off. For me 2FA might not work if I am down on my luck.
This still exists, and it's used by lots of extensions.

But you can only inject DLLs (this is how it's called) if your process already has some admin rights and if the other process is not of a higher integrity.
This counterintel program wouldn't work very well if there were a published citation of it. b^)
Hey thanks for the critique. I agree that this is a status report, but I think (virtual) stand-up is also appropriate, because the questions are more or less what's asked of you at an in-person standup.

By having stand-up conducted by a bot, it's less invasive and easier for remote workers to give updates on their own time. But I do agree that nothing beats in-person meetings :-)
Combating the cybersecurity job crunch
You'd have to exclude 1 if you were to do "prime" vs "composite" since 1 is neither of those.
Haha, nice idea :-)
I totally agree with this. Companies should give (constructive) feedback when they say no. They do not partially out of a fear of being sued, but also because they often don't know really why the reject people. The default state at most companies is rejection. If no one really liked you during the interviews, at most companies this will result in a rejection.

We're doing this differently at Triplebyte. We give everyone we don't work with (who does our final interview) a several hundred word personal email, with an explanation and advice on how we think they can improve.
This has been discussed many, many times on HN before. This bug would not cause Facebook much damage; in fact, Facebook and Google tend to overpay rewards for bugs for the purposes of goodwill and recruiting.

Let's examine the facts:

1. A Facebook vulnerability is dangerous to Facebook. A WordPress vulnerability is dangerous to a quarter of the internet. Facebook is not a high value target, relatively speaking.

2. A Facebook vulnerability will be patched once it is widely used. Facebook's security team is one of the strongest and most sophisticated of any company, and their processes would quickly catch this once it was used. The total impact of the bug would be negligible. You'd lose the ability to compromise accounts as soon as you tried to do it in any meaningful or lucrative way.

3. A vulnerability in Facebook might last a week before being patched, but a vulnerability in PHP will persist on the internet for years. No matter how many individual sites patch their servers, you'll still be able to pop a lonely server with social security numbers chugging along in a closet somewhere.

There really isn't much more to say about this. People claim bounties awarded by Facebook/Google/et al are undervalued every single time a bug bounty hits the front page of HN. Every single time, someone who is in the security industry patiently explains why it's not that valuable.

If someone tried to go to a blackhat group or go to the "black-market" (a shadowy, lucrative place that never seems to be very well-defined in these conversations), he would not even be able to find a seller, let alone one who would pay a lot.

What do you imagine someone would pay for this on the black-market? They'd need to profit from it. How much profit is worth their time?

Say they buy it for $20,000. Do you really think someone will derive $20,000 of profit from this before it's caught and patched by Facebook?

The only vulnerability worth $15,000 or more is one directly impacting a language, a widely used development library/framework or a widely used piece of software.

For further reading on bug bounty valuation:

https://news.ycombinator.com/item?id=7106953

https://news.ycombinator.com/item?id=9302188

https://news.ycombinator.com/item?id=9040855

https://news.ycombinator.com/item?id=9041017

https://news.ycombinator.com/item?id=8563884
You mean besides McAffee? lol
A light wheel with low resistance, like a highly tuned performance bike, can hold energy for a long time. My entry level road bike will spin for well over a minute with a light tug, maybe equivalent to 5-10 mph. He's going well over 30 mph in that video.

I'm not arguing whether this may or may not be an assisted bike, but what you're saying about a wheel is patently wrong.
They weren't saying that in 1993. At least, not as I recall from the time. It took a while for that consensus to build.

I believe that many of not most Python 3.5 users consider it a massive improvement over Python 2.7. My examples come from the core developers, so is highly suspect to bias.
Isn't the FBI's position that the FBI will have physical possession of the device at all times?
See also the "McLaren Snorkel"[1] in Formula 1. Not actually cheating, but it was also a brilliant piee of engineering, and it was banned pretty quickly.

TLDR: in F1 you're not allowed to have a variable rear spoiler (i.e. high downforce in corners but low drag on straights). But the rules only specified hydraulic or mechanical devices were banned. McLaren engineers came up with the idea to stall the rear spoiler on the straights using a flexible tube which led air from the front spoiler to the rear. The driver would use his knee inside the cockpit to block or open the flow in the hose, so no mechanical or hydraulic mechanism was used.

[1] https://scarbsf1.wordpress.com/2010/03/11/235/
Why science isn't faith-based
On the subject of rate limiting, what is the best way to apply it across all endpoints, APIs and resources, external and internal, with minimal effort?

Usually, I see this implemented only as an afterthought, and only on endpoints deemed 'dangerous', waiting for a disaster like this to happen...
There is a nice rule I heard once: "Below 100 (119 really), any number that looks like a prime is a prime. Except 49 and 91".

The remaining composite numbers are all trivially divisible by 2 or 5, or their digit sum is divisible by 3.
I misunderstood you. I think we actually agree about this!
Yes, use the "webroot" method of the official Let's Encrypt client.
I agree. I have a flawed comparison.
Completely incorrect. For exactly the reason you mention, the back side of the moon is indeed not visible from Earth, and was first photographed by a Soviet satellite in 1959. The only humans who have ever seen it in person were Apollo astronauts.

Source: https://en.wikipedia.org/wiki/Far_side_of_the_Moon
Get a shared host that supports Lets Encrypt, there are many.

https://github.com/letsencrypt/letsencrypt/wiki/Web-Hosting-...
Thanks for your interest! Please contact me at hi@standupjack.com to chat further.
You can do it on the same server without downtime by using the "webroot" method of the LE client.
Well, the remote process has to have been launched with the appropriate permissions to allow remote threads. Also the remote thread can only run code which already exists in the remote process, though one common trick is to call LoadLibrary to inject a custom DLL.
Swift Queue fun
Trump: The rise of American Authoritarianism
If you think EV certs are over-priced, then there's a big market opportunity waiting for you: just make a CA that sells them cheaper!

In practice, you probably won't do that, because if you look into the various costs EV CAs have, you'll find that the cost of what they're doing is actually non-trivial and it's not exactly a license to print money. Add up the costs of the company, the audits, the hardware to protect the keys, the humans to perform the manual verifications of the cert requests, the OCSP servers, the software dev costs etc ... it's not zero.

With respect to phishing, yes, you could get "Bang of America" (possibly), but this comes with two MASSIVE caveats:

• You cannot do so anonymously, or at least it's very difficult to do so.

• You cannot get something like "Bank of America System Network" because the CAs have procedures in place to stop that sort of thing ... like human review.

In practice, phishing sites based on similar looking letters were a thing decades ago but haven't been so for a long time, partly because there's only a tiny number of such combinations and the legit companies normally own them all. My experience of phishing sites from a few years ago was that they either used misleading DNS names like "www.bankofamerica.com.net.cdn.co.cn" which exploit the fact that people stop reading at ".com", or just didn't care at all and used phishing sites hosted on hacked web servers, which exploit the fact that a lot of people don't ever look at the URL bar at all.

EV is a key step towards fixing both problems, by giving people sensible human meaningful identifiers that are read left to right instead of right to left, and by providing a friendly name that could (in a smart browser) replace the junk in the URL bar entirely. If most sites used EV certs there's a chance users would actually start reading the URL bar again, and then they'd know where they are online.

I agree that companies whose primary web identities don't match their legal identities are an issue for EV certs, although arguably that problem will confuse users sooner or later anyway (e.g. if they need to send/receive money from that company). Better to have the names synced.
oops, you're right. thanks for the bug report :-)

thanks for the kind words!
Yet the FBI's official plan is to get Apple to assign a few developers to put together a custom version of iOS that they trust will overcome all risk of erasing the device.

Is there a reason we should have confidence in software engineers rather than electrical engineers?
Surely they're going to have to change the name. https://panic.com/prompt/
Better ask Apple why never could use standard chargers and USB cables ;)
Pretty sure that's the point. If it wasn't used by so many developers, it wouldn't be causing load issues. :)
I instituted take home tests within my group. We're up front that the interviewee should not spend more than 4 hours on the project and that we don't care if it works.

I am more interested in whether or not I can read the person's code, follow their logic, and if they think about logging, unit testing, etc.

Coding skill, while important, is a very small part of whether or not I am interested in a candidate. Soft skills are a much stronger part of the equation IMO. I could care less if a person can write a recursive function or if they don't know the performance difference between different ways of doing things.
I've been eating LCHF for almost 4 years now, I started doing it to lose weight, but I feel so much better when on diet that is hard to stop.
When I'm firm on the diet, I can easily go a full day without any food, and not feel any hunger or mood swings. It's great.
Serverless Slackbots Powered by AWS
There are ways around this for some things but, probably not with services like Facebook. For example with Amazon I use 2FA with a cellphone. As a backup I use a hardware token and an Admin account. If my cellphone gets stolen I pull the 2FA card out of my wallet.
From my anecdotal experience, that's approximately where the mental "hump" is. If you can push past that point, the hunger becomes background noise, and maintaining the fast becomes easier.
The thing about the "standups" in Agile, (and Scrum in particular) is that they're supposed to be about intra-team communication. They're not status reports for management, etc. in particular. The goal is to share with your colleages what you're working on, what you're about to work on, what issues you're having, etc., in order to make sure everybody is on the same page and to eliminate misunderstandings.

If you have a remote team and people can't meet F2F, you can accomplish the same end using something like I mentioned above. You lose a little something if people are in different time-zones because it makes the whole thing more asynchronous, but you do what you have to do to accommodate your circumstances. Remember, one of the tenets of the Agile Manifesto involves not having rigid adherence to strict ceremony for ceremony's sake (I'm paraphrasing a bit).

"Figure out what works for your team, and do that" is kinda how I'd summarize the whole thing.
For what it's worse, both of these characteristics indeed weren't an accident.

At the time, I wrote a script that hammered git commits into a repository using different strategies and looked at what the git repository would look like after 100,000 and a million commits. The "one version per file, nested in a flat structure" had serious issues.

There may still be scaling limits with the Cargo approach, but if we reach them, we have plans to create a new registry with a new initial commit and let the old registry age out, then rinse/repeat. At the moment, we haven't hit limits yet (with about 1/3 of the packages that Cocoapods has).
The Prop 65 problem[1].

It's impossible to prove that the entire supply chain for any electronic device is 100% free of exploitative labour conditions. Metals are fundamentally untraceable and a modern device contains components from hundreds or even thousands of suppliers, sub-contractors and second sources. All it takes is one manager twenty steps down in the supply chain to lose a piece of paper and your chain of custody is broken for a sizeable batch of devices.

In practice, every electronic device would be required to carry such a warning label simply as a precaution, rendering it meaningless.

[1] http://oehha.ca.gov/prop65/background/p65plain.html
My girlfriend and I are both dancers and whenever we have a hard training session she prefers to eat about 1.5-2 hours beforehand while for me it's more like 2.5-3 to feel the most comfortable. Just an anectode.
Of course this is all a matter of personal preference, but as a former Atlantan, I'm going to disagree.

My main gripes with the metro Atlanta area were:

-The traffic, which was the worst of any major city I've ever spent time in, and yes, I've spent time in L.A., New York, and D.C.

-Bland environment/lack of character. What I mean by this is that you're basically in a landlocked area that is best known for launching Coca-Cola, Chick-fil-a, and CNN. Not much unusual stuff to do in the area, so boredom can come on quickly.

-Full of transplants. For every person I knew who grew up in the area, I knew at least four that were from other states. This made the culture very boring and support for sports teams, etc. non-existent.

To be clear, there are many good things about Atlanta- it's close to Nashville which is awesome, and you're a short flight to a lot of great places. Also, the cost of living is fantastic for a major city. There are a number of beautiful lakes and lots of greenery in the area as well. But all things considered, it can get pretty boring.
Wow! —I can't believe that access to Flickr Uploadr is actually being touted as a benefit of Pro membership. I'd see it more as being a benefit of Standard membership that you no longer get exposed to that dire piece of software.
Not for the 5S. The iPhone TPM (or "Secure Enclave") is available on the A7 processor and above. The 5S includes an A6.
Hacker Paradise
Rumor: HTC Signs Three-Year Nexus Contract – Androidheadlines.com
The share button will appear only if you use your thumb to invoke Siri. Try doing it with your knuckle to start.
Progress for women in Saudi Arabia has gone into reverse
Had exactly the same feeling. I felt bad for the GH employee who responded. He was helpful and thoughtful, made it clear what the problem was, offered advice and promised to make whatever's possible on their end...

...only to have someone come up and act like a paying customer whose expectations weren't being met. He answered suggestions by saying something that comes down to "I don't understand, can you repeat please", and never quite grasped that if he wants a better experience for his users, he also needs to work for it.

The introduction to the response, in typical douche manager style, was the cherry on top.
Great point that Las Vegas has a great road system, and not a lot of traffic (also cheaper gas). It's a major city that can be escaped in 20 or 30 minutes and be in some gorgeous natural areas (Lake Mead, Red Rock Canyon). I found LA (and to a lesser extent SF) almost suffocating in how long it can take to get out of the city.
on "Show HN" 2 days ago: https://news.ycombinator.com/item?id=11234702
I haven't used it, but this supplement to Knuth's classic The Art of Computer Programming is bound to be instructive:

http://www.amazon.com/gp/product/0133992314
Millenials (on average) will have less job security, have to wait longer to own a home, have to work longer hours in general, have less vacation and less leisure time, have a shorter retirement (or no retirement), will have less economic freedom and less personal freedom.

But more technology.

It's up to you whether or not you think that's better.
I don't think he meant perfect code. But I've had candidates claim their main language is Java, but were unable to write a proper for loop or know basic data types like arrays or ArrayLists. I've met such people with PhDs and impressive CVs.

Interview enough people and you'll encounter some that are very convincing until you dig down into details. So you have to dig into details.