skysight-inc/HackerNews huggingface dataset:
He's done a lot of good work over the years, but I wasn't too impressed by this lecture. ymmv
Commodore 64 ‘ReM’ – The lost art of source code archeology
Yes. And it's always humorous (sad) when people use ideological reasoning to defend their right to x (e.g. guns). But then are blind to how it applies to y (e.g drugs).
Researchers make groundbreaking discovery, use skin cells to kill cancer
Teplr – The World's Social Calendar – Events App
I have an 89 Ford. It has been parked outside in rainy Seattle for 20 some years. Other than the exhaust system, it is free of corrosion. I find this rather incredible. Ford has done a truly amazing job with corrosion protection, unlike my older car which rusts when a cloud passes by.

I also have to compliment Ford on building a low maintenance vehicle that is also cheap and simple to repair when it does go wrong.
Thanks. Fixed it. I only copy/pasted originally though :)
Interestingly, in Colorado it's legal for a company to fire an employee who has (legally) smoked marijuana. So even with legalization drug tests may remain a thing.
A Better Sorting Approach for (Amazon) Alexa Reviews
The actual headline would be better expressed as "legal marijuana undoing what the drug war caused"
Huh. The language there seems to be from 2013.

I seem to remember downloading whonix from their site over HTTP around a year ago.

Do you see a tails HTTPS mirror?
Feynman also lived in a time when fields like psychology were just terrible. Take that back, they're terrible now, they were even worse then.
Tesla's 36 month resale value guarantee [pdf]
If you are building a new app, I'd really suggest checking out gRPC:

http://www.grpc.io/

The combination of an HTTP/2 stack w/ protocol buffers and libraries in everything you'd write a mobile app in is a powerful combo, and its a pretty high development velocity environment.
And the HVAC system. I don't know but wouldn't be surprised if the HVAC system on Teslas, in addition to the cabin environment, had some responsibility for the battery and motor thermal management too.
> Maybe, though in a bytecode-compiled, dynamically typed language, my hunch is that using doubles for everything is actually faster. If I had separate integer and float types, all of the arithmetic operators would have do runtime type tests to handle the different combinations and conversions.

Perhaps. I suppose this dovetails with my preference for static types with optional dynamic behaviour, and not the contrary default which seems to be your position.

> I'm interested in trying to layer an optional type system on top of it, and I tried to design most of the language and core library such that it's amenable to that.

Cool. I think Wren is simple enough that basic type inference should be straightforward and complete, and anything more difficult just infers a top/'dynamic' type. A trivially correct type inference algorithm then just infers type 'dynamic' everywhere, which recovers Wren's current semantics. Then you incrementally add more specific rules where you can, ie. simple data flow from constants will generate more efficient string, floating point and integer code.

That would be enough for a decent speedup on most programs. If you want to type check arbitrary objects (or at least avoid method-not-understood), you can use something like "Type Inference for First-Class Messages with Match-Functions" [1] or the even more general first-class labels [2]. I believe first-class labels are more general than Wren's semantics.

[1] http://lambda-the-ultimate.org/node/4808
[2] http://lambda-the-ultimate.org/node/174
Mestizo means mixed Amerind European ancestry, exactly like mulatto means mixed African European ancestry. They're both from colonial Spanish racial categories.

https://en.wikipedia.org/wiki/Mestizo
Thanks for the info, appreciate it!
Exciting micro service and deployment platform for the JVM
Your Guide to the US Presidential Elections 2016 – Top Ten Things to Understand
I'm sure at least one developer of the Tor project reads hacker news.

EDIT:

Far more interesting is the author's most recent article.... wtf

http://jcarlosnorte.com/security/2016/03/06/hacking-tachogra...
Its nice to have some data to confirm what many predicted. That said, the DEA is acutely aware that it is much easier to move drugs around once they are already in the country and so their mission my require installing border crossing checkpoints on states that have legalized those drugs.

I saw a sign on the Kansas side of a highway leaving Colorado that said "If you bought pot, leave it behind." Clearly someone had seen an uptick in drugs coming in that way.
What constitutes a novel invention is a matter of open dispute. I strongly recommend W. Brian Arthur's The Nature of Technology, which addresses this, and other questions on, well, the nature of technology.
Came expecting a pun regarding old files / applications that failed to work after a forced system OS upgrade.

Was disappointed.

Not that Apple is distinctly notable for ransoming your one-time files and applications; on the contrary I've heard more often about people having issues when their Windows / Other OS reaches the end of its support.

edit: It was sarcasm and I know your downvote policies, etc, etc. I just know you guys sometimes roll with the funny punnies, and I was seeing if I had what it took this once. Maybe next time I'll nail a good one though, with a little more creativity and a little more funny to it. Contentless statements can exist here, and I want to learn to make them.
> In the case where the attacked has direct control over the website then you're right, it doesn't help at all.

I was pretty sure that's the threat model we were discussing: Software authenticity.

The only way to automatically know if a piece of software is legitimate is to have a trusted public key that can verify a signature.

Also, HTTPS is implied these days. If you're not using HTTPS, you are either malicious, negligent, incompetent, or working for someone who is some or all of the above.
For anybody stumbling upon this, installation via homebrew-cask was _always_ safe[1] thanks to checksum verification. The caskfile has been updated to https[2] and version 2.92[3].

1: https://github.com/caskroom/homebrew-cask/issues/19504#issue...

2: https://github.com/caskroom/homebrew-cask/pull/19506

3: https://github.com/caskroom/homebrew-cask/pull/19508
What I find more shocking than the incident is its background:

According to Justice Department figures, 42 percent of the more than 20,000 unaccompanied children involved in deportation proceedings completed between July 2014 and late December had no attorney [...]

Susan J. Terrio, a Georgetown University anthropology professor, said she observed hundreds of children in various immigration court proceedings, many of whom couldn’t speak English, [...]

Some were as young as 10. They “were incredibly passive,” she said. And “they responded with monosyllabic answers.

So, if I read this correctly, it's already common practice in the US to have children put in court, without any aid or counsel and expect them to have a conversation with judges and attorneys about immigration law? Is this actually true?
Much will depend on exactly what batteries cost in 10-15 years, or whenever the current batteries start to fail.

If they still cost $25,000, then yeah, that's probably going to be a poor value proposition.

If they cost, say, $5,000, then no problem!

If Tesla and others start selling ~$35,000 cars with 200+ mile ranges in the next couple of years, then I think it's going to be closer to the latter scenario. But it's hard to know for sure.
Oops, the quote was from the article, not Feynman (I've edited my post now); note that the author is Gelman from 'the statistical crisis in science'.

But it throws back to Feynman's speeches on Cargo cult science, what is science and what isn't.
The idea is basically the same, we can describe what good science is by the rigor put in the experimental process, but this is not something that can be captured simply by the p-value.
CEO of Gusto (formerly ZenPayroll) warns other startups: There are no shortcuts
Or, as is the case here, the malicious party was simply issued a key by Apple (for apps that are downloaded from places other than the Mac App Store, developers can get a unique Developer ID from Apple (for free) and use it to digitally sign their apps, the purpose being that Apple can revoke it after the fact if it turns out to be malware):

“The two KeRanger infected Transmission installers were signed with a legitimate certificate issued by Apple. The developer ID in this certificate is “POLISAN BOYA SANAYI VE TICARET ANONIM SIRKETI (Z7276PX673)”, which was different from the developer ID used to sign previous versions of the Transmission installer. In the code signing information, we found that these installers were generated and signed on the morning of March 4.”

From: http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-...
Just an anecdatum: I got infected by this yesterday when I installed Transmission to download a Debian install CD. When I read about this at MacRumors I checked and had the kernel_service process running and the two hidden files hiding in Library.

I've unplugged and archived the TimeMachine backup disk and done the prescribed cleanup actions to remove he malware. I guess time will tell if it had any other tricks up its sleeve.
Do not redraw the whole display. Use termcap and ncurses to send terminal escapes. It's unplayable for me, probably because of latency.

Good idea :-)
homebrew-cask updated with version 2.92 and https
> Rust's development tools are also somewhat of a monoculture, at the moment.

Care to elaborate? I'm curious
The right keyword here is "dead" - project had not been updated since late 2014. Although a fork exists with some improvements, but it is just adding new features and there goes the "simple" part.
I guess the opposite of that (Without introducing editors) would be Cocos2d-x. You could still stay in C++ code-land but get everything out of the box (ECS, Memory management, scenes, etc)
Inded, see my comment here: https://github.com/caskroom/homebrew-cask/pull/19508 Installation via brew cask was never at risk thanks to checksum verification, and at anyrate is now updated.
Imagine the following possible architecture: every pointer contains a valid bit (V), which is initially set to 1. The V bit is checked on every pointer dereference, and dereferencing a pointer with V=0 traps. free(p) as well as freeing the memory pointed to by p, also sets p.V=0. Now, if you copied p earlier, the copy would still have V=1, and hence would now != the original pointer, even though the actual address stored inside the pointer is the same. So your sample code would end up doing a double free on p when foo is false.

We can question whether the design choices of such a CPU architecture are sensible or not, but I can certainly imagine such a design decision being made at some point in the last few decades. Indeed, if you look at the history of tagged memory architectures (e.g. Burroughs large systems, IBM System/38, Intel iAPX 432) - their tagged pointers are in the same spirit as what I've described here, except they used multiple bits instead of just one, and the tag bits were often stored in a distinct memory area from the actual pointer addresses (I don't know how C implementations on those platforms - if they existed - actually handled free() or pointer comparison though.) I guess, the possibility of such a design decision motivates making this undefined behaviour in the C standard.
I think it's a poor illustration. You could install and run this app as a regular user (and never escalate to administrator) and the app's bundled malware would still absolutely destroy anything of value on your computer.

It's the stuff inside $HOME (and $HOME/Documents) that's valuable. Not system binaries in {/bin,/sbin,/Applications} that can be re-downloaded in a second.

The problem is that any non-sandboxed app runs with the same uid and full read/write permissions to all of $HOME as well as all the other running processes, even if it only needs read/write access to $HOME/Documents/Appname/ and none of the other pids.
But ideally there are no credentials because Jenkins doesn't need to push code to the repo (and can clone the pubically available code).
Of the handful of people I know that have bought Tesla's, they are very much not of the hacking mindset. I'm not saying this is forever true, but I think the type of person that can actually afford one usually has the "premium" and "executive" mindsets (if I can makeup some terms). That is, they'd rather pay extra for 98% of everything they want and not have the worry of needing to get their hands dirty (the premium mindset). And if there is a problem? They replace/trade-in/buy more premium services to get what they want. They have "their people" take care of it. These aren't intended to be negative descriptions, but more of an informal observation of how people in executive positions with resources available tend to prioritize their time and effort. But of course you'll eventually get more hackers drawn to the car in time.
I know the last time I played with Whonix it was http, so I think you're right that it's a recent change.

For tails: https://tails.thecthulhu.com/. It appears to be the same server behind http://dl.amnesia.boum.org/ based on the TLS cert.

The situation is messy to actually use https for all of these projects, but I think the issue now is organization rather than overhead.
The only way I could see that statement as making some kind of sense is that the children were rote-learning the correct answers to the judge's questions. But then you could ask who is supposed to teach the child the answers and why that person couldn't simply act as its defense attorney in the first place.

Even if you accept the insanity, I don't see how some persons being able to defend themselves (the children who miraculously learned immigration law) implies that all persons are able to, and therefore aid is never needed. This seems like a basic logical fallacy to me.
sorry for being late to this, please send me that email if you can.
in many places I've visited the graffiti seen almost everywhere is aligned with local political movements and parties (Mexico City, for example). I observe that 'terrorism' is a slight for opposition politics in many contexts.
These days it's hard to get a handful of Vicodin to get you through a few days of pain after hurting your back.

It's being "dealt with" for sure. I'm not sure the amount of inconvenience and needless suffering imposed is an improvement on anything. I've never abused drugs. Opiates after back pain, minor surgery or a root canal aren't a "gateway" to anything for the vast vast majority of people.

I don't know about recreational heroin, cocaine or meth. I'm going to err on the side of caution and suggest that they're probably something I don't want to see legalized.

OTOH it'd be nice if marijuana advocates would stop treating alcohol as if it's the worst substance known to man. Current DWI laws are not justified with science. Legalizing marijuana and criminalizing responsible consumption of alcohol is not progress. If everyone you know would probably be in jail were it not for the fact they haven't been caught, it's probably not a good law.

Sane pain management should be between you and your Dr. Ethical patient treatment should not be disincentivized because someone has a political agenda.
That makes sense in a simple, back-of-the-envelope F=ma sort of way. I hadn't really thought about it from a safety perspective, though; it just suits my needs well. In general I'm happier to economize by buying really nice stuff that's cheaper because it's used, than by buying something newer that's just cheaper. It becomes an aesthetic thing - a feeling of shabby luxury suits me.
Which is the entire premise behind Qubes: https://www.qubes-os.org
I was thinking more about the users on Macs and Windows who use open source software..

The risk is not in the sources, but in the server which hosts the installers.
A hacker could just build the software from sources (adding his backdoor) and replace the original installers with his own.
If you are a Linux user I've found redshift (gtk-redshift under ubuntu if you want the desktop integration) to be very reliable and does the same job as f.lux very well (it was also the only one that would work properly with fglrx back when I used it).
I don't care to own the car.
From my point of view, it's a service I want access to, to get me from point A to point B.
Tesla makes that process enjoyable.

Because Tesla leveraged software, like an app, I want Tesla to handle the updates for life of the car.
I agree that the cutoff by year is somewhat arbitrary, though SUVs have never been popular around here, with gas being so expensive; right now, it's at ~1.36€/liter (aprox $5.67/gallon), while our median salary is less than $1600/month.
It's interesting, but taken through some lenses, maybe that's still OK?

I've never smoked, but I wonder if I'd like my doctor to be high when he operates on me, or for an armorer to reassemble my rifle while high. Does marijuana influence attention to detail? Is there a way to ensure that people don't get high while at work, that they stay sober on the job? Anecdotally, from watching high people while I was in university, I don't think I'd trust their giggling selves with my life.
For further reading on cryonics, bear in mind that a number of advances in vitrification and proof of maintained function / structure in tissue have occurred in the past few years, while tissue vitrification development is gaining much more attention and support with an eye to turning it into a tool for the organ transplant industry. A lot of the really good articles on cryonics predate all of that. There were sensible and detailed things written on cryonics in the 80s and 90s in connection with the developing ideas on molecular nanotechnology and molecular biology of memory, for example.

Scientists' Cryonics FAQ - http://www.alcor.org/sciencefaq.htm

Scientists' Open Letter on Cryonics - http://www.evidencebasedcryonics.org/scientists-open-letter-...

Persistence of Long-Term Memory in Vitrified and Revived Caenorhabditis elegans - http://dx.doi.org/10.1089/rej.2014.1636

Physical and biological aspects of renal vitrification - http://www.ncbi.nlm.nih.gov/pmc/articles/PMC2781097/

Newly invented Aldehyde-Stabilized Cryopreservation procedure wins Brain Preservation Prize -http://www.brainpreservation.org/small-mammal-announcement/

Alcor Position Statement on Brain Preservation Foundation Prize - http://www.alcor.org/blog/alcor-position-statement-on-brain-...

"To Die in Order to Live": The Need for Legislation Governing Post-Mortem Cryonic Suspension - http://papers.ssrn.com/sol3/papers.cfm?abstract_id=1608140

If you want to read around the field and the science (vitrification is the key part of that), you might start with the resources at the Alcor website, and the archived materials at the Institute for Evidence Based Cryonics.
I've been using cocos2d-x for a few months now to create my first game, and I am really impressed with it.
Mission, goals and how to get there
The risk is not in the software itself, but in the server which hosts the installers. A hacker could just build the software from sources (adding his backdoor) and replace the original installers with his own, if the server is not properly secured.
"Your computer power supply has a ~400 volt rail in it. Are you unwilling to ever open a desktop computer?"

Not at 1000 amps, it doesn't ...
Doesn't tor browser use No Script by default?
Rick Rolling parking tickets
With all due respect, I don't see how that argument made sense even before. Yes, court has to follow due process, but that doesn't mean you can throw your brain out. Call an expert witness and have the age determined, if you must.

In murder cases, courts are expected to find out whether a killing was intentional or not and, if it was, whether the reasons were justifiable (self-defense). How can this be no problem, yet disproving the claim of a bulky, bearded man that he is 9 years old is impossible?
I guess my point is, if you think that it's not possible to explain immigration law to children, then appointing a lawyer won't change that. If you think it's not possible to have a fair hearing without an attorney, I may agree with you, but I can imagine ways to a dress that.

To be honest, there are several things in the legal system that I don't think should be resolved through an adversarial process. Immigration hearings are a good example.
Whether people who are bad at programming, or at least inexperienced, write overly complicated code or not has got nothing to do with what I said.

Except that there's word-choice correlation.
For the end user? No, it wouldn’t. As thesimon and jakobegger, respectively, said:

“And according to the analysis, this is exactly what they did. They used a different cert to sign their malware.
I have to admit that Windows' UAC is better in that regard, as it shows the signees name. But of course this is only useful if you know the "right" name.”

“Yeah, I think this is a major issue on OS X. For the average user it is impossible to tell who signed an app, if it is sandboxed, and what permissions it has. Hell, using the codesign command to extract entitlements from all binaries in a package is hard even for advanced users...
(There is third party tool named RB App Checker which does make these tasks a bit easier, though)”

…in this comment thread: https://news.ycombinator.com/item?id=11234966
That's no reason not to pass information about speed and distance travelled over the port. I capture that information as I drive. And Tesla could easily include electric car specific information that enthusiasts would enjoy capturing.
Between the touch screen control screaming "Look! Cool! Future! Oh yeah we had to sacrifice tactile feedback and usability when driving while ignoring fifty years of safety research but Cool!", trying to be a fast car but only really good for 0-60 in a straight line (and literally incapable of doing five laps at Laguna Seca without overheating and going into limp home mode), no OBD-2 port as another poster pointed out meaning you can't even fire up Torque to check an error code before having to go to the garage, bad resale value as this article points out, literally having your head touch the car roof if you're over five foot eight and sitting in the back, etc.: can you please give us a rational reason except zero tailpipe emissions for buying a Model S over, say, a Mercedes S-class or a BMW 7-series?

I completely get that there are irrational reasons for buying things, not least of which is "OMG teh shiny future!!1!", but these aren't really suitable for debate here because they're so hugely subjective.

Edit: having read through entire TFA: Tesla will even refuse to sell you parts, and call you talking about industrial espionage, if you try and tinker with their cars. Seriously, WTF?
Strncpy is not used correctly either.

strncpy(ifr.ifr_name, dev, IFNAMSIZ);

will not necessarily NULL terminate ifr.ifr_name for all values of dev variable. NULL terminated input is assumed later when ifr.ifr_name is used in strcpy.
Three quick Python nuggets for beginner Data Scientists
When it's well intentioned... A friend went to a statistics-focused master degree, and her first internship made her come back with the comment "well, during class we had one prof tell us exactly what we shouldn't do with the data to analyze it honestly. That's the exact list of tasks I was given for these last few months."
Pretty sure that Transmission is not the only application infected. Waiting for more bad news :(
It did actually, but only for in-app updates [0].

[0]: https://forum.transmissionbt.com/viewtopic.php?f=4&t=17835
Also: http://blog.darknedgy.net/technology/2016/01/01/0/