skysight-inc/HackerNews huggingface dataset:
I think Feynman was maybe a bit too harsh, possibly because he was so used to the relatively pristine world that physicists get to live in that he outright balked at the noise psychologists and social scientists have to live with.

You do get noisy measurements. That's why you need to pay a lot of attention to your confidence intervals and standard errors - they give you a sense of your signal to noise ratio. Not all psychologists and social scientists are good at that, and that's a problem, but IMO it's really not _that_ difficult to distinguish babies and bathwater here.

And I think Feynman's comment about between-subject designs is outright dangerous. You do not necessarily reduce your noise by switching to within-subject designs. You just move your noise to a place where it's much more difficult to measure, and possibly create a lot of endogeneity that you can't deal with except by throwing out a bunch of assumptions and hoping you're right. Sure the numbers that spit out of your equations start looking more tidy, but that doesn't mean your results are more trustworthy.
I don't think Tesla will be treated any differently than any of the other automobile companies when it concerns liability.

I imagine Tesla's ahead of the liability game right now. Meaning, I imagine they know exactly where, and when someone accesses their vechicles computers? I'm already calling them their computers? We are buying the cars? We own the vechicle? Right? I'll accept full liability after the warranty expires? Like always?

I don't like this trend towards, "Only the factory can work on the device." It's not fair. It's seems like it violates antitrust laws.

It's not just Tesla who doesn't want you to touch their products. It's a lot of companies. It's that Rolex, Patek, Audermars Piguet, any fancy watch you happen to have on your wrist.

I included luxury watches because people don't realize when the warranty runs out on that Rolex; good luck finding an independent Watch Repairer to fix it with Rolex parts.

See Rolex will only sell to authorized dealers. Guys like me, who refuse to pay some sham organization thousands of dollars to be become wotep certified, can't buy watch parts. Rolex wants you to send the watch to the factory, at factory prices. That boutique you bought it from, just sends the watch back, and adds charges to the final factory repair price. Which equals a lot of money for a simple service.

So, in all reality, if you can't bring/authorize repair of an item to whomever you want, including the owner; you are leasing said item? What am I missing?

I forget the name of the Act, but in the U.S. you are allowed to make minor modifications to automobiles, without affecting warranty. For example, you can change the exhaust, and car companies can't disavow you. I sound like The Donald?

I don't think Tesla is even under this Act, which makes there secrecy of product more troublesome.

If companies require us to bring product only back to the factory for repair, guys like me will never buy their product.
The Specious Present
I am not following your comment here. Most Jenkins setup use global credentials or use the server-side config file like .ssh/config, .gitconfig link.
For every starry-eyed and future creating technologist, who really does see the best-case scenario for what current and near-future technologies can accomplish, they need to always be shadowed by a team of altruistic business/PR/advertising-savvy advocates who can remind them how the worst among us are going to screw it all up so that our hero-geniuses can bake safeguards into the systems they create from the onset.
Your computer power supply has a ~400 volt rail in it. Are you unwilling to ever open a desktop computer?

The Tesla battery has contactors inside of it, so you'll only have 400V live when the car is on. Additionally, assuming the HV is floating relative to the chassis, you need to touch two spots at different potentials to actually get shocked.

That said, it looks like this is an attempt to prevent service of a lot of non-powertrain components, considering that the Tesla owner in the article got a letter for connecting just to the ethernet port.
Why not to use binary protocol? 20kb for just links and captions?
Interesting article. What makes me laugh is that people thought $12,000 was a reasonable daily profit for an app that draws black boxes on a photo.
I am the OP. I run a website that uses webpass.io. I am not posting a link to the site to avoid self-promotion but it should be easy enough to find.

With that said, here is MY implementation. Other publishers may do it differently.

Our site is a discussion forum. People can browse at will but only logged in users can post and reply to topics.

We run advertising with Google DFP. A few years back we started offering a subscription where users pay us a recurring fee and they have the option to turn ads on/off in their profile.

I myself thought of using a micro-payment service but I wanted something easy.

The way webpass works is by their add-on sending a unique token on every page request. If there's a token my code checks with their server if it's a valid token. If yes we then have two options:

- if you are not logged in then we completely remove the ad scripts BEFORE sending the page to the browser client.

- if you are logged in we treat your session as a subscriber session and will send or not the ad scripts based on your profile preferences. This means you can go to your profile page and turn ads on/off.

Using webpass made the experience better for our users because even those people who don't want to create another web profile and pay another subscription can still get to our site ad free.

Does it make sense now?
Here's to hoping people realize that the whole concept of "gateway drug" is horseshit. Human beings exhibit a wide range of behaviors following the use of any substance, that usually have much more to do with the humans and with their environment than with the substance.
I asked for a citation about why this specifically is undefined, not a condescending lecture about what "undefined behavior" means.
Your blog has great content. Found some useful tools in there.
I posted this reply to another question, but will repost here for your benefit:

I am the OP. I run a website that uses webpass.io. I am not posting a link to the site to avoid self-promotion but it should be easy enough to find.

With that said, here is MY implementation. Other publishers may do it differently.

Our site is a discussion forum. People can browse at will but only logged in users can post and reply to topics.

We run advertising with Google DFP. A few years back we started offering a subscription where users pay us a recurring fee and they have the option to turn ads on/off in their profile.

I myself thought of using a micro-payment service but I wanted something easy.

The way webpass works is by their add-on sending a unique token on every page request. If there's a token my code checks with their server if it's a valid token. If yes we then have two options:

- if you are not logged in then we completely remove the ad scripts BEFORE sending the page to the browser client.

- if you are logged in we treat your session as a subscriber session and will send or not the ad scripts based on your profile preferences. This means you can go to your profile page and turn ads on/off.

Using webpass made the experience better for our users because even those people who don't want to create another web profile and pay another subscription can still get to our site ad free.
I don't really see anything horribly misleading here. The linked article mentions this as well.

Luke-JR seems to have --- special --- views of the world. Not sure if I would trust him with anything at all.
> we might actually see more peaceful world in the fashion of Kant(1).

I think we would just have nutters bombing us from the skies.
Clause 6.2.4 of C11, paragraph 2:

> The lifetime of an object is the portion of program execution during which storage is guaranteed to be reserved for it. An object exists, has a constant address,33) and retains its last-stored value throughout its lifetime.34) If an object is referred to outside of its lifetime, the behavior is undefined. The value of a pointer becomes indeterminate when the object it points to (or just past) reaches the end of its lifetime.

Like you it seems a bit odd to me - perhaps to make the standard prepared for architectures, existing or otherwise, where pointer values have to be loaded in specific registers, and then trap if they contain values pointing to unallocated pages? (Without being dereferenced).
The Fantasy of Accountability – how “Stop and Frisk” Happened in NYC
A 1300% performance gain in Ruby using Date
> which was different from the developer ID used to sign previous versions of the Transmission installer

and that didn't ring any alarm bells?
I don't see that in the federal data. Can you cite something to back up the claims? Border & Customs is still employing most of those people to work _somewhere_.
https://news.ycombinator.com/item?id=11234589
The current model for alternative revenue sources is... "content". Mainly "sponsored content" where publishers post reviews and whitepapers, some times not disclosing their relationship with the advertisers. I think this is worst than ads.
> Cartography may well have been leap frogged by one forgotten expedition but things like the Antekythera mechanism keep pointing to unsung genius and strong civilisation that we just assume did not exist - what if we were judged not by Feynmann but by Trump in 1000 years time?

I agree with your first point, that we seem to be missing a lot of information and that early civilizations may have been more advanced than we suspect, in some ways. But I've re-read the second part a few times and I still don't know what you're getting at (beyond trying to make an "amirite?" political comment). Being judged by "Trump" means they would think we incredibly advanced because "Trump is stupid and would think we're amazing" or that we'd be judged as stupid because "Trump is stupid and wouldn't see what we had"? Likewise being judged by "Feynman" would cause us to be viewed as stupid because he's so smart or us as smart because he'd figured out how smart we are? Your point might be more effective if you termed it more concretely, instead of trying to relate it via two figures who exist in different spheres of human endeavours.
I was delighted to read that a right to repair law exists in at least one state. I've been working to get one passed here (MN).
Would be more helpful if you specify what these errors are.
JSON is easier (faster) to parse on their client apps.
> The latest data from the U.S. Border Patrol shows that last year, marijuana seizures along the southwest border tumbled to their lowest level in at least a decade.

That does not mean there are less drugs being imported, just that less are being seized. I worked with the Border Patrol years ago and it was astounding how they tracked success:

- When arrests increased, they celebrated that enforcement was working.

- When arrests decreased, they celebrated that deterrence was working.

Heads I win, tails you lose.

While I'm in favor of legalization, you should take these numbers and the process that created them with a grain of salt..
This is a good illustration of why you should not install apps as administrator. Specifically, you should not install Mac OS packages, which allow for arbitrary pre- and post- install scripts to be executed as root.

Same is true for Windows and Linux.

There are privilege escalation bugs in any OS, but it is usually not a given. Throw the application into ~/Applications as a Mac bundle, worst that will happen is your account will be compromised. Much easier to detect and clean. Most trojans won't even succeed.

We are going to have these problems until the developer community realizes that executing a randomly downloaded package installer as a privileged user is giving away the keys to the kingdom.

Application stores is one solution, but really is not an open one. I'd rather see the apps distributed in a form similar to Apple app bundles, where a non-privileged user can just install the app into their home.
To lint your BEM you need a Regexp. Generate your with BemEx
Donate buttons are a joke. They don't work for publishers at all.
Isn't sugar known to be just as addictive and almost as harmful as alcohol these days?
Frosted Flakes though man, not even once
The Secrets of Surveillance Capitalism
Can you add Dvorak keybindings also? ",aoe" instead of "wasd". You see, they do not interfere with qwerty.
I agree. and I'm surprised they made a blog post about this. The details of this seems more embarrassing than it is enlightening.

>Comment bundles are particularly heavy:
They contain the comment text itself as well as its id, timestamp, and author metadata (including profile picture).
...
Generating profile picture URLs is a CPU-inefficient operation because we must dynamically compute the correct CDN URL. The more comments we load, the more profile picture URLs we need to generate.

Is it loading the entire profile picture with each comment? Not just a small thumbnail?
More about Steve’s time at Reed is available in this article: http://www.reed.edu/reed_magazine/december2011/articles/feat...
I'm of the opinion people should be able to do what they want. And certainly drugs being illegal causes more problems than it solves. That being said, here is a case to think about.

When I was in my early 20's (20 years ago) I got a job in Phoenix AZ working on a concrete crew. We were building poured in place buildings (something like big box store size). First we would pour the floor. Then the walls on top of the floor and pull them up into place with a crane. It was extremely demanding work and the company beat the crap out of everyone. Very often we would get to work at 3 AM so we could pour before the sun to prevent the mud drying so fast. Lunch time was around 10 minutes and there weren't breaks. If you didn't run at all times... going to get a shovel...run, go for a drink of water, run you got yelled at. If you still didn't run a second time you were fired just like that.

My first day there were 7 or 8 new people. At the end of the day they had fired all the new people except me and one other guy. This went on for a couple of weeks until they had the crew they wanted. I needed the job and it paid pretty well (at the time) so I ran and busted ass like you wouldn't believe. After a couple of months I got let go as well and was very OK with it. It was completely nuts and I'm sure illegal as hell but no one appeared to complain and I'm not sure the state at the time and place would have listened anyway.

The point being... almost everyone on the job site was doing meth. Except me and maybe a couple of other people. I've never been a fan of meth and find it completely disgusting even though I'm not "anti-drug" and I damn sure wasn't about to do it out there. It was expected. The pace was set by meth. When you finally burnt out, you were thrown away and left with mental/health problems. But the building was up and the company owner made money.

That is my fear about legal drugs. Expectations. End results. Even social expectations like booze is now in many places. I want to do what I want to do... not be expected to do anything.

It's a complex problem. I don't know the answer. Maybe part of the answer is to invent better/less harmful drugs that are less easy to abuse and legalize those.
That's why we should follow the Dana Carvey plan for marijuana: "Legalize it, tax the shit out of it."

(I believe Carvey originally made this statement about prostitution, but I'm not sure.)
A small nit: just plain right click, or hold down control and left click, which is the same as right click.
Honest question: Is somebody using MINIX as a production system? I suppose it is not very popular as a server system, but since its current target is embedded use, are there any products built on/around MINIX?
Interesting, I hadn't realized that NYC gasoline taxes were higher than California. Looking into it, there is some reason to argue that California higher is higher if you apply a broader definition of "tax".

Here's an article showing the breakdown for California: http://watchdog.org/232083/california-gas-taxes/

And here's for New York:
http://legacy.wgrz.com/story/news/2015/01/07/new-york-gas-pr...

But since the articles are using a different base price per gallon, I'm not sure what the actual difference is.
Thanks for doing the math, I didn't take the time.

FWIW 3.25% happens to be exactly what a term deposit will pay here in mexico for 90 days+

I understand that banks in other countries wouldn't do that, however you don't have to take much more risk over a bank to get 3.25% in most of the world I would imagine
There's an exception if you can convince the FTC that the product will only work correctly with branded parts. Take a look at 15 USC 2302(c): https://www.law.cornell.edu/uscode/text/15/2302
Debian, Ubuntu, Qubes, and others are on https://mirrors.kernel.org.

I suspect that wiki page you linked might be out of date. It seems like all of the Whonix download links on their website are over https, like the VirtualBox images https://www.whonix.org/download/12.0.0.3.2/Whonix-Workstatio....

Whonix also runs a tor mirror, which has significantly more overhead than TLS.
Support Vector Machines and Kernels
I recently converted all of the classic Macintosh fonts to modern dataforks, if anyone is interested. Clone to ~/Library/Fonts. Warning: If you don't want your system font to turn into Charcoal, remove the 'Charcoal 10.11' folder.

https://github.com/JohnDDuncanIII/ClassicMacintoshFonts
> We saw app-wide impressions across all mobile platforms increase by 0.7%, and likes increase by 0.4%. This was driven by increases of impressions on all surfaces – for instance, “Explore Photos” impressions increased over 3%, and user profile scrolls increased 2.7%.

I'm curious about this: was it A/B tested? Those figures are so small that they could just be seasonal or organic growth, the side effect of other things (events, weather, etc) that lead to increased engagement in general, and so on.

The technical improvements look great, but attributing them directly to increased user engagement seems a little too fuzzy.
It's less "security through obscurity" than it is "security through not being worth attacking". If that's changed, it's only changed recently.
What's shocking is that 87 downloads makes you the #8 paid app in the MAS.
> and the architecture has been defined such that any use of a stale segment descriptor is an error.

Even trying to imagine such an architecture, it's hard to see that comparing pointers constitutes "use" - it seems more likely that this would just wind up being an integer comparison.
so how do I get around this if most apps I want require this?
> So the people who stand on their ethics are eventually replaced with people who don't, because the people who don't have better numbers and the shareholders only see how much profit was made, not why.

Precisely.
#include <stdio.h>

typedef float xform_3d[4][3];

int main() {
xform_3d x = {
{1.f, 0.f, 0.f},
{0.f, 1.f, 0.f},
{0.f, 0.f, 1.f},
{0.f, 0.f, 0.f} };

for(int i=0; i<12; i++) printf("%f\n", x[0][i]);
}

with g++ 4.9 (debian jessie -O3 -Wall):

xf.c: In function ‘int main()’:
xf.c:12:50: warning: iteration 3u invokes undefined
behavior [-Waggressive-loop-optimizations]
for(int i=0; i<12; i++) printf("%f\n", x[0][i]);
^
xf.c:12:5: note: containing loop
for(int i=0; i<12; i++) printf("%f\n", x[0][i]);
^

(yes, this is slightly different than the code I posted first---"laundering" &x[0][0] through an intermediate pointer variable f makes the warning go away in the compiler I tested, but my suspicion is that if one is undefined behavior the other probably is too)

Edited to add: and when built and run, it printed all x[0][i] but x[0][0] as 0.0, so gcc did emit code that doesn't do what the programmer wants.
Relevant to their debate with modern elements:

http://www.cs.vu.nl/~ast/reliable-os/

http://www.coyotos.org/docs/misc/linus-rebuttal.html
Good luck convincing designers to use this.

My parents can't use a few applications because of designers refusal. My dad literally had to change banks because some of the banks used too small fonts. So far none of them use dynamic type, but at least some have larger fonts.
> The number of teenagers with driver's licenses is the lowest in history.

The value of such a statistic is questionable given that the minimum age for a license has increased of late.
I was thinking about this recently, and most of the major inventions of the last 50 years seems to have been state funded - the internet, GPS, the space program.

Free markets bring the products based on these to the masses, and incremental improvements but the technologies behind them are often funded by military needs. Most research seems to be done in publicly funded research labs, while the development side of R&D is done in private companies.
> Throw the application into ~/Applications as a Mac bundle, worst that will happen is your account will be compromised.

On a typical single-user setup, there's not much difference between an account compromise and a machine compromise anyway.
I bought a new (to me) motorcycle last week. It's a 2008 and it has loads of electronics (compared to my old bike). One of them is an immobiliser that deactivates when it detects a transponder inside the key.

The motorcycle comes with three keys: a red one and two black ones. The black ones will turn on the motorcycle but can't be copied. The red one can be copied and is intended as backup in case you lose the black ones. If you lose three the only way to turn the motorcycle on is to get a new ECU from the manufacturer.

I guess most modern cars are the same.
Sounds problematic if your sqlite database gets corrupted.
Kinda doesn't use the whole UNIX philosophy thing.
Segfaulting Python with afl-fuzz
Ban oxygen. Approximately 93% of all people who have ever consumed it, even once, have died.
Has that ever been applied to car parts?
So even at the "worst" pricing of 0.15¢ per page ($3/mo for 2000 pages) and assuming a 100% payout, a big, high traffic publisher like Gawker would have made under $2m in 2014 (on 1.3bn pageviews) versus the $45m they actually netted.

The numbers would be even more awful for niche, high quality publishers (no offense to Gawker, but they're mass media).

This has no chance of replacing anyone's income, and barely a chance at significantly supplementing one, until we're talking cents per page.
Did the author of the article submit his findings to the Tor Project?
It will all make more sense after you read some more BAMcronyms.

http://www.cs.cmu.edu/~bam/acronyms.html
Examples? What causes the increased complexity? Market demand? Government regulation? What prevents competitors from appearing or for exiting vendors to offer different products at different levels of 'complexity'?
Even if stating the obvious is a sin (and I'm not convinced), it seems way less of a sin than starting gigantic unproductive arguments, or asking questions without doing the most basic of research first.

If you want to raise the level of discussion, look at the beam in your own eye first.

Certainly I'm not helping by continuing to grow this gigantic pointless argument, so I think this will be my last post here.
It is given the following attack scenario: attacker is man-in-the-middling, and the SHA (but not the actual binary) is delivered via https.

In the case where the attacked has direct control over the website then you're right, it doesn't help at all.
You don't have to be a car mod enthusiast to have a desire to use a business you trust and have a good relationship with to repair the property you own.
No, I do. Maybe it's just one genre I can think of more than one name in.
Simpson's paradox should give pause to anyone trying to run statistics on data from poorly selected test subjects. Not only can you get results that are a mirage, you can get results that are the opposite of reality.
Funny thing, you get down voted here on HN for facts it is against Tesla.