skysight-inc/HackerNews huggingface dataset:
I originally wanted to do a PhD because of the feeling smart aspect; but actuall, after I had started it (actually during the middle) I had a realisation that the people doing PhDs weren't necessarily smart; but rather they were either highly passionate about what they were doing or really enjoyed doing research.

As it happens I have probably created more outside of doing my PhD than in it; and whenever I was advising people on whether to do a PhD or not, would strongly suggest that they didn't. (The ones that ignored that advice and pressed on were exactly the type of people who could keep up the slog of doing it.)

Lots of people don't make it to the end and the going gets really tough towards the end, particularly when you are writing up and especially problematic if you have a young family. There's only so much time you can burn the candle at both ends.

So don't worry about not having a PhD; in fact, I'd argue that some of my undergraduate friends went on to much bigger and better things than I primarily because they got into the industry much earlier and therefore worked their way up.

Plus creating a startup now is so much easier than it used to be - if you see a business need that's not being satisfied, go for it. Most startups success is entirely down to chance and not educational background in any case.
California fault lines releasing CO, CO2, SO2
>In Montana, you can't smoke a joint in a cafe, can't sun bathe naked on the beach, can't drink a beer walking in the park and, regarding safety, you'd be unwise to be a gay couple holding hands in town etc.

We don't really have much beachfront property in Montana, though I've seen plenty of naked folks in the rivers.

Montanans are intensely private people and proud of it. I have never heard my gay friends mention being unwelcome, though I'll certainly not speak for them here. I've never been stopped drinking beer in a park, though yes it isn't legal in my town (although not true of all towns in Montana like Butte). Sorry that you can't smoke a joint in a cafe right now, however you can pretty much smoke it anywhere else in public so long as you don't bother others.

I'm guessing Americans that moved to Holland are probably pretty happy there. That says absolutely nothing about the United States.
That was not the state of the art then. You can read the state of the art for yourself in the 2012 ImageNet competition (see the 2nd place team): http://image-net.org/challenges/LSVRC/2012/results.html. Fisher vectors + SIFT + GIST + some other hand-crafted features.
It looks like it cut off your email at the end.
The following is a link to the tool he is using in the video. I've adjusted things so that it is displaying CO right before the emission event. Advance the time by 3 hrs to see the difference.

http://earth.nullschool.net/#2016/02/26/0000Z/chem/surface/l...

Does anyone have a good explanation for this?
There really needs to be an HN rule against commenting before reading (at least part of) the article...
I know. That's the point, someone has "pip(ed) it out of a tube" under pressure. Hence making mashed potato no long mashed potato after coming out of a tube. QED.
Do you really believe that Facebook/WhatsApp don't have the data ? Please we are in 2016, data is everything! Don't you think they sell or use our data for an infinite kind of applications like send ads ? Analysing our personal data like WhatsApp and Facebook they can have so minimum details about us and classify in really minimum groups of "publicity". The mankind never in history had so mach data and ways(powerful computers) to compute it like today. it is not a stupid conspiracy theory, Google does read our email to sell ads and it is in the ToS. The question is, just because it isn't in the ToS it doesn't exist ? And nobody can investigate it ?
I still don't see how it could be confusing.

"faster than" != "as fast as"

A is 50% faster than B == A is 150% as fast as B
> My favorite sentence: "He also wrote a book on the internet in 1992 that was never published, based on the belief that the online phenomenon would be over by 1993."

I think that sentence is incorrect. Rushkoff's first book Cyberia was apparently completed in 1992 but not published until 1994 because the publisher initially believed that that the Internet, email, etc. was a fad that would pass.
Okay, what's the point? Can you use your towel to badge into the conference now? Is that interesting?
Sure, good tip.

Though the pedantic butt-head in me wants to point out that out of all of our paying customers, they're all using that level of service. :) So technically...
That may have been an autocorrect or may have been my mind not functioning correctly, but yes.
PSA: Writing desktop apps in node.js and bundling a portable instance of Chromium to view them is not a sane thing to do.
> The bottom 46% of income earners already pay zero tax

No, that's not true.

Not even if you are just referring to federal taxes.

And not even if you are just referring to federal taxes on income (which include both the "income tax" on the "payroll tax".)
The pedestrians here terrify me. Cyclists get a lot of stick because there are a few bad apples that ignore red lights, but I'd say the vast majority of pedestrians don't give a second thought about walking into the road on a red light.
The worst time for me is when I'm cycling past a stationary queue of cars and people assume that because the cars aren't moving, that nothing else could possibly be travelling along the road!
Are the "dips" in the chart[0] where corporate customers are on vacation?

[0]: https://tctechcrunch2011.files.wordpress.com/2016/03/slack-g...
U.S. oil production at 43-year high
It's also worth noting that more and more American students are moving to Europe for free university and staying for the jobs. It wouldn't surprise me at all if this demographic begins to explain the increase in the US exodus, at least partially. Student debt can be a scary thing.

http://www.nbcnews.com/news/world/why-american-students-are-...
Express pass to scoring your dream job with no previous experience
Zee.Aero | http://zee.aero | Mountain View, CA | full-time & part-time | ONSITE

Zee.Aero is developing revolutionary aircraft concepts, working at the intersection of aerodynamics, advanced manufacturing, and electric propulsion. We are actively building a team of world-class engineers who have experience in fields ranging from power electronics to aerodynamics.

We are currently seeking software test engineers with embedded software testing experience to join our software and avionics group.

Required:

- 3 or more years of applicable experience
- Developed C/C++ code or tests for embedded systems
- Significant experience with Unix/Linux environment
- Experience with Git version control system
- Comfortable working in a fast-paced, dynamic environment
- Ability to analyze, understand and test requirements

Desired:

- Scripting experience, preferably python
- Experience in the aviation industry
- Experience with requirements management tools
- Experience with code coverage tools and decision coverage tools
- Experience with electromechanical systems and sensors (servos, motors, shaft encoders)

Apply: http://hire.jobvite.com/CompanyJobs/Careers.aspx?c=qZu9Vfwh&...

--------------------------------------------------------------------------------------

Zee.Aero also is looking for a part-time, temporary IT Helpdesk Associate to assist in supporting a world class team. This position is available immediately as a three-month engagement, 25-30 hours per week. Pay is commensurate with experience, but Zee.Aero pays at the top of the market.

Qualifications:

- Basic Windows + OSX troubleshooting experience.
- Experience with supporting executive staff is a big
- Previous non-temp / non-contract IT experience of any stripe would also be a big plus.
- Strong interpersonal skills.
- Strong communication skills.
- Ability to lift 50 lbs.

Email resumes to jason [at] zee [dot] aero for consideration. Cover letters are strongly encouraged.
> but half of recipients don't pay taxes

Wrong. (Even though, actually, in a redistributive scheme, this wouldn't necessarily be a bad thing, as you don't actually need the net recipients paying in anything at all, since that just means more shuffling for the same effect.)
The collective insanity of the publishing industry
i started using it for one of my project. using react as a view works well without having to change backend
Not yet, but it will probably be open sourced sometime soon.
Bolt | San Francisco, CA | Full-Time | ONSITE

- We're bringing together the best of the best: https://bolt.com/team

- Job descriptions here: https://bolt.com/jobs

- Backend, frontend, infrastructure, and security engineers

- We're a Golang and React shop

Work with a stellar team, solve large technical challenges, and create immense value for consumers and companies all over the world. No vanity involved - we're just here to solve problems and push the world forward.

I'm cofounder/ceo, so you can email me directly: rb ~at~ bolt.com
I recommend going with a deep architecture like React with GraphQL/Relay. Nothing like the React/Relay combo in the Angular word.

Here is why Relay matters:

https://gist.github.com/idibidiart/49a095b6bc528638f34f
THE FAST TRACK CASH::THE FAST TRACK CASH REVIEW PROS AND THE CONS
Yahoo may write down goodwill value of Tumblr
Yes, but the O(N) is generally only for pathological inputs.

Geo data is generally nicely distributed. R-tree (or similar) is the correct solution here.
Yes they are - I've seen another version of that chart and it was annotated with those dips being holidays.
1. Where do freight trains go 75 mph?

https://en.m.wikipedia.org/wiki/Rail_speed_limits_in_the_Uni...

2. Freight trains aren't going to eventually pull off the highway and drive themselves to the drop off in the towns and cities across the country.

3. Do you understand the huge cost difference between laying rail and creating a highway?

4. Why does everything need to be explained? Can't you put a little thought into it before posting. That urge to fire off snark is going to get you into trouble.
You should balance the classes. That's an enormous flaw right there.

(the original Crepe paper, not to mention every other machine learning paper in general, balances the classes).
we open-sourced www.fromlatest.io as a way to share docker best practices in a really easy to use way
Right. Well, you're not going to get the exploit from a simple description of the attack. DROWN is built on some well-known attacks on RSA, most notably Bleichenbacher's 1998 padding oracle attack, but the specifics of how to manipulate an RSA ciphertext to make TLS records intelligible to SSLv2 are hairy even if you've implemented BB98 before --- I'm going to call this "stunt Bleichenbachering".

So it's not very important that you understand exactly how to go from "errors/exceptions generated by the target" to "recovery of plaintext". Even if you understand the specifics of those kinds of attacks, they're even more complicated (and fun) here.

The interesting nut of the attack is: there's a well-known error oracle in both TLS and SSLv2, but it's long since been mitigated in both protocols. However, details of the crappy crypto in SSLv2 conspire to make the mitigation for padding oracles in SSLv2 ineffective, and you can use the SSLv2 oracle to attack TLS ciphertexts if TLS and SSLv2 ever share keys.
The Single Most Catastrophic Mistake That WordPress Freelancers Make
Are they? A decent rifle is not difficult to obtain or use. There are many places you can practice. You don't need to be that accurate to be extremely dangerous and pull off an attack like that.

Meanwhile lidar spoofing attacks are likely going to be far harder. You need to obtain expensive (and probably illegal) equipment, and have the technical knowledge to use it. I don't know what the range of such an attack would be, but I don't think it would be better than a rifle.
Do not forget that what is bad for defense attorney is good for prosecutor.
Is there anyone developing an exploit for this attack? You'll need a vulnerable openssl version to test. After major Linux distros releasing the path, it'll be difficult to obtain the vulnerable openssl.

Timemachine (debian) is a tool that constructs a Docker image of a Debian base system. You can choose a Debian distribution and a date in the past. Then install any (vulnerable) package of your choice for experiment. https://github.com/CSLDepend/timemachine

This tool is a part of a security testbed that we are developing. We have created container images of recent attacks in our repo, e.g., https://github.com/CSLDepend/itestbed/tree/master/repo/mitm/...

If anyone is interested in developing such testbed for reproducible security experiments, let me know @pmcao
Modern Application Architecture for the Enterprise
I was using SM in 2008 and it was fantastic. Ironically I use SM in the same exact way today as I did in 2008... except apparently 700 more employees on the other end.
Move from IT Management to DevOps Engineer
Hi Everyone,

I have an opportunity to move from IT Management (Helpdesk / Datacenter Management) to more of a DevOps Systems Engineer role in a large(r) VC startup.

Salary is one of the major motivating factors (20% increase) otherwise I like my position as an IT Manager. I manage a small datacenter environment and Helpdesk team. I play a major part in purchasing and project decisions.

Has anybody made the change back to a Systems Engineer role after being in management? Care to share your experience?
Apple firmware updates are signed on a per-install basis.
$100,000+ on Codeable: How I Reached the Six Figure Milestone
I completely agree.

At what point do we get completely fed up with the increasing lack of technical competence in the government?
Ruby string interpolation in clojure
I picked up Design for hackers[0] a few years ago. It goes over color/fonts and other design patterns. It's been pretty useful for projects I've done. It goes over when to use certain colors (ie, target uses red because you'll buy more.) and some color pallets that work well together. I got it because I didn't want to learn full color theory and whatnot, just the basics.

[0] http://www.amazon.com/Design-Hackers-Reverse-Engineering-Bea...
This is totally backwards. HTML has no good elements for long lists at all, leading to janky techniques like "infinite scroll." But NSTableView was designed from the start with very long lists in mind.

Try opening a large repo and scrolling a list of commits in GitKraken. You'll see large blank areas that get filled in after a few seconds. Now try it in, say, GitUp, which uses NSTableView: it is perfectly smooth.
This ratio is increasing regardless of mean population age. Automation is making even 20 year old prime-of-their-life human labor gradually obsolete.
Yes, but that is not nearly the same burden as actually writing the compromised OS. It's probably as easy to compel them to sign the update as it is to compel them to turn over iCloud data.
Unbelievable One woman and 5 dogs in a camper battling Canadian winter
Integrated Healthcare Association - Oakland, CA - Manager, Data & Analytics - Full Time - On Site

We're a small non-profit healthcare group focused on bringing together disparate healthcare actors to push the needle of healthcare quality and innovation. With 20 years in California's healthcare space, we have the connections, reputation, and expertise to make significant change.

* Do you enjoy creating coherent data models from many disparate data channels?

* Do you enjoy uncovering and conveying insights from organizing data?

* Do you enjoy overseeing a small team of enthusiastic professionals?

We're looking for Data & Analytics Manager to manage all facets of data strategy and organization across our myriad of projects. Due to our company's relatively small size, the role is very broad, and the ideal candidate is well rounded, both technically, and otherwise.

If interested, please contact jobs@iha.org and include "Manager, Data & Analytics" in the subject line.
ShareThis | Palo Alto, CA | Full-Time | ONSITE

ShareThis helps publishers provide a more authentic digital experience. We create widgets that sit on millions of domains and process TB of data for various use cases daily.

http://www.sharethis.com/hiring.html

- Cloud Platform Engineers to work with Docker and Kubernetes

- http://blog.kubernetes.io/2016/02/sharethis-kubernetes-in-pr...

- Awesome Silicon Valley Company Culture
Apple doesn’t have to unlock drug dealer’s iPhone, judge says
One of the dubious Indian journalist (who is above 70 years old) was caught (and on camera) soliciting sex for a minor and luring her into meeting him. It made a big news and I almost assumed the guy would be done for good. Turn out not only the guy got out quietly but continues to write in newspapers preaching morality to others. I tried a lot of figure out how he might have escaped the law but I cant.

I am giving this example only to show that when the British government cant enforce existing laws using available evidence, you cant expect them to dig up anything new with more powers.

It is something Mahatma Gandhi pointed out years ago about the British. In one of this Satyagrahas related to Champaran farmers, Gandhiji's modest and only demand was that the British must only acknowledge that there is a problem which needs to be solved. According to Gandhiji's colonial power's unwillingness to even show empathy to people means they are essentially uninterested in the helping people with their problems.

Law of Karma I guess.

[1] http://timesofindia.indiatimes.com/nri/other-news/Indian-ori...
[2] http://www.tribuneindia.com/news/comment/death-of-liberalism...
Are error oracles why security software nearly always has poor error messages and therefore poor usability? Or is that just tradition?
> Comey dismissed the notion

Seems just for a moment, because, via Reuters:

http://www.reuters.com/article/us-apple-encryption-congress-...

"FBI Director James Comey told a congressional panel on Tuesday that a final court ruling forcing Apple Inc (AAPL.O) to give the FBI data from an iPhone used by one of the San Bernardino shooters would be “potentially precedential” in other cases where the agency might request similar cooperation from technology companies."

"Manhattan District Attorney Cyrus Vance testified in support of the FBI on Tuesday, arguing that default device encryption "severely harms" criminal prosecutions at the state level, including in cases in his district involving at least 175 iPhones."
I'm sure defense counsel would want to be able to verify that it isn't modifying file access times, or deleting data, or planting data, or otherwise disturbing evidence when the update is put in.
Teenage Killings/Teenage Deaths
Awesome! Thanks. I've read the Macaroons research paper now and of course it mentions "prior work going back to the Amoeba OS" and they thank Mark Miller (among others) at the end, so yeah.. I feel a little sheepish. :-)

This is very exciting stuff. Thank you for writing such a great article about it, I'm looking forward to reading more. And I have a copy of your pymacaroons source printed out to peruse. Cheers!
dynos can measure at the engine (in which case they measure brake horse power) or at the wheels. Most individuals are more familiar with the ones that measure at the wheels, as that's how they would measure the effect of after-market modifications.
> That's a sure way to go to jail.

Not in (any of) the United States.
Wouldn't consider that excessive. And I wouldn't hold your breath for a "genuine mission beyond profit"!
Yes, I think you think 'weak' is correct. Now tell a lower-r republican that their political system is weak and not meaningful, and see if the response is a knee-jerk reaction to the term 'weak' or a more thoughtful inquiry on how it might be improved.

"Weak" is also a broad term. Even if you come in with the terms first, you shouldn't use definitions that can easily be transformed to mean the opposite.

Many people do not think that a direct democracy can scale beyond a few thousand people. They may therefore say that direct democracy is "weak", because of that failing, and that it's "meaningless" for a large country like the US.
Specifically, Christmas' of 2014 & 2015.
Now I'm just hearing a loud woosh.
Url Shortener Service
> it brought it to them directly and is indeed strictly following the law

If this is your definition of "strictly following the law" imagine yourself in a scenario where the FBI brings a lawsuit against you: risk going to court, losing, and going to jail, or hiring a lawyer and fighting something with dubious constitution grounding.

There are so many different ways to lose when the FBI plays this game against private companies or individual. They sue you because they want to put you in jail, not clarify the law.

If you're a strongly opinionated CEO of a company with a war chest you fight it and at the very least stay out of jail. If you're the CEO of a small ISP/web hosting company you suck it up, do what they say, and follow the gag order.
And the rotation modulo after that to do a lattice attack \o/
could != needs, which was my point.
> What is truly scary is that the banks and financial institutions have not implemented OAuth. Currently, financial data is provided to third party apps via aggregators, like Plaid and Yodlee.

Hi. I was the CTO of Level Money, that ultimately had a meta-aggregation platform on top of all the major aggregators. We were acquired by Capital One. Disclosures: complete.

Can I just put out there: every major FI has talked about OAuth2. We all know about OAuth2. It's entirely within our technical capabilities to make an API and then allow OAuth2 access. We could even make said access public. The "can they" is answered: yes we could. Yes, we have prototypes.

And yes, there are non-technical obstacles. Pardon me while I Nod Dance & Amble.

But there is a larger question about the aggregation problem. Banks are rightly concerned that if they do open these up, they'll be consumed wholesale by the major tech companies. You could imagine a world where Google partners with your bank to make a pretty amazing experience, but in the process it's almost certain that Google would have a significant upper hand. Most banks (even C1360, which I and many other people are working constantly on modernizing) simply aren't ready to work with giants like Microsoft, Google or Facebook as equals. That, sadly, will take years as these organizations realize they have to do this.

We're all in sort of a slow motion race towards this goal. Slow motion compared to the outside world (as I am all to keenly aware), that is. Internally, the process by which we do this is hugely complicated by US law and regulation. There is this wonderful thing where "regulatory capture" backfires and then you're imprisoned. For every thing that a bank charter enables, it closes off another 2-3 things that never mattered until things started being judged by their slickness in a mobile app context.

As for disconnecting from aggregators, let me tell you as an insider what you can do. Change your password. No really, change your bank password. EVERY major aggregator has a flow that requires they respect this at a technical level. If that fails, it's on your bank and you should shout at them VERY loudly.

But before you do, make sure you are ready to prove yourself as a banker. What will happen with most aggregators is that they'll have to decide, "is this person actually gone or is this stupid web scraper just having a bit of a problem?" They'll try and log in again, at least once in most cases. If you have hooked up multiple services (or the same service multiple times), these will trigger account lockouts just like any failed web login would.
They've discussed moving from Palo Alto to Menlo Park, so the layoff may be related to that.