skysight-inc/HackerNews huggingface dataset:
Just a thought: have you ever considered that by publishing such red flags for fraud, fraudsters will adopt these "organic" behaviors in order to appear more legitimate? I understand that the idea is to make illicit transactions more difficult and that adopting these "organic" behaviors is more difficult, but automated fraud tools (ie - what most 'script-kiddies' use) also become more sophisticated over time.
Regardless, I bet you don't publish ~all~ your fraud detection vectors for that exact reason.
An actual crime, but they knew they had no good guesses about who committed the crime.
Just make a pull request with the law you want to implement or amend
I got hit by the batman one back in the day. I still don't know how they figured it out. I have a modified xbox with a k3y (hardware dvd drive emulator that is fixed inline behind the real dvd drive) and while I've never been banned from xbox live I was never able to complete that level.
For that the person has already paid his taxes and he has paid for nonsensical wars elsewhere too.
Safeway is open near 24/7, some close at ~midnight, but that's pretty good. There are also tons of little convenience stores/bodegas that stay open relatively late.

That said, nightlife closing at 2AM is a plus and a minus. I kind of like there being a defined end to the evening, I'd rather not stay out too too late and this way I don't have to be the party pooper :)
Blocking Tor: A Case for Better Detection
Dangers of Flakka are related largely to the prohibition of substances such as MDMA creates a black market where the desired drug is in fact adulterated or substituted with drugs such as alpha-PVP (flakka) or other cathinones, piperazines, etc...
I don't think CUDA vs OpenCL is the real issue. It's the libraries that come with them. It matters little in which language they were written, since they are closed source for the most part.

AMD's Boltzmann initiative won't solve the lack of libraries.
> Device ID

It's incredibly easy to dupe and manipulate. If someone is determined enough, they can just edit the packet before it hits your server, or install another app/font/package/etc to change the fingerprint. "Well what about IMEI?" see reference to intercepting packets.
Deep Learning and the Future of AI – Yann LeCun
The community centered around pirating apps (let's be honest) has an entitlement problem? Huh.
No, if you're not paying more than you would if you weren't a US citizen, you're not being double taxed.
Marketplace for In-person Services
The LoC DMCA rules explicitly exempt security research. It's possible the EFF needs to update this page.
I was going to buy a nest, but now I'll just rig myself something up with a Raspberry Pi. Lower cost and I know it will still work in a few years.
While I think that Linus is relying too much on SHA1[1], he makes several good points. His primary concern is the difference between adding signed content as part of the commit vs using "git tag -s"[2] which also signs the commit with GPG. The difference is that "git tag -s" includes the DAG metadata so the git history itself is verified.

This isn't about using GPG siged vs nothing, it's "GPG signed in the commit" vs "GPG signed commit and metadata".

The bit about revoking keys is also interesting. He's pointing out that if you keep the signature in the commit, you have permanently bound that particular signature with the commit data. It's mixing two different types of data into one storage location.

The alternative is using tags, which shadow the main branch. This way you have the option of using those tags, or you can create new tags (with new signatures) with a new key. This gives flexibility for the future.

> insults

I don't see Linus insulting anyone in that post. Explaining the problems with a method is not an insult.

> therefore we shouldn't

Is that post really that hard to read? I find it obvious that he is saying you should use the builtin signing with "git tag -s".

[1] It's worth observing that this is a comment from 2009; I'm curious if he has changed his opinion on SHA1 in over the last 6 years.

[2] -s, --sign Make a GPG-signed tag, using the default e-mail address’s key
Stripe's fraud protection is HILARIOUSLY bad. I'm convinced they don't care about chargebacks; in fact, to get their fee for a chargeback, they need a $500 order.

They don't eat the loss; the card network does.
Sometimes life compels you to do things that are necessary, but not optimal. I know people that feed their family on tips.

Workers being paid substantially less than their labor is worth by their employer is wrong.
A 980 Ti doesn't have FP16 hardware. The only Maxwell based component with such support is their Tegra part.
if you include space, power, HVAC, and networking?
> > It also doesn't add any real value, since the way the git DAG-chain of SHA1's work, you only ever need _one_ signature to make all the commits reachable from that one be effectively covered by that one.

> He completely misses the point: who's going to check after pulling that the whole history of dozen/hundreds of commits is legit? That might be the case for the Linux kernel gatekeeper, but not for one of the several small contributors to any project.

Git does that automatically for you. Git self-verifies the DAG (which is why it takes a while to warm up on the kernel repo because of the insane number of commits). So he's not missing the point.
I have not heard of Shiny, will take a look. I'm wary of trusting people when they say "X is dying", so good to hear that's not true. I'll check more of the R visualization frameworks/tools.

Looking for free/FOSS.

Currently working off a Linux Ubuntu AWS server. Fine with Java/JS (D3 seems to be the leader for us right now in our selection). We're working off the free tier of AWS while prototyping but are planning to scale up our cloud memory as needed. The summarized data set itself is small at this point (less than 2GB) so we are thinking that we won't run into a memory issue.

Thanks for the info!
This seems like an example of how things are broken. Women are penalized[1] as employees because, unlike men, they might take maternity leave someday. One solution is to give everyone parental leave — and some countries do.

[1]: https://en.wikipedia.org/wiki/Motherhood_penalty
No, quite the opposite. A 500k house becomes 12 $250k 1000sqft condos is the actual math in SFH -> highrise conversion.
This may seem insignificant and if so let me know, but the wording of this led me to believe SF was going to PAY for 6 weeks of maternity leave for everybody rather than making it mandatory that employers provide it.
I'll say that I like Sift better than MaxMind, but it still doesn't cover a lot of things that it should. I won't go into details, as I'm in the middle of building a platform to solve this issue myself, but as someone who used to be on the other end of credit card fraud, it's really laughable how many things these companies don't see.
Not all DDoS is volumetric, and even in volumetric attacks it can be complex to differentiate legitimate traffic from the noise being generated by the botnet.

Effective mitigation is about far more than "How big is your pipe?" so this comment reads as somewhat uninformed.

tl;dr - Azure does not have a magic <SOLVE DDOS> button which someone pushes, fixes all kinds of attacks, and just charges you for this at $1175/hr whilst you sleep peacefully.
Or maybe the 9-year-old is good.
LF, of course. That's what POSIX systems use.
Is there any plan to open source this?
You can use OpenWebRTC on iOS to provide support there.
5 Remedios caseros para las manchas del acné
I don't see why not. Any feature that correlates with fraud is useful. Some of these correlate pretty strongly. And then combining multiple weak features can rapidly increase the certainty that a user is or is not fraudulent.
That's worlds better than what is available anywhere else in the US. The federal government allows you to take up to 12 weeks of unpaid family leave without losing your benefits (through FMLA), and while the employer can't replace you they don't have to return you back to your original position.
Just so long as you ignore the colossal waste of water and other resources needed to run a city in the middle of a desert with no real reason to exist.
The Case for Pricing Parity for Desktop and Mobile Apps
> Example: you are openly gay on your social media posts, and want to vacation in a foreign country that bans homosexuality. Maybe you are critical of the current Chinese leadership but still want to see the Great Wall. These are just low-hanging-fruit examples.

It's much more likely that they will use your to arrest their own citizens for being guilty by association... which is shitty, but far less dangerous than if your own government knows your "dirty" secrets.

At worst maybe Malaysia profiles a pot-smoking Washingtonian, but even then that person still has to break the law through possession...
No it's not. Tech industry workers are minority and some of the NIMBYs are tech workers on top of that.
well i guess the idea i had for creating wall to retain elevating water out of the bay is never going to work now.

RIP inland bay area real estate when the water levels raise. :(
Weighing in on equality in tech
I have little direct evidence, but I suspect the problem is a set of programmers that hate the command line and never learned to rely on man pages. When they try gpg, they try --help and see the giant list of options, and immediately panic.

This same attitude may also explain the tendency to reinvent things like rsync and other tools that have accumulated a large set of options over the years.
More than a decade ago, MS used to kind of have that, and mostly consistent at the architecture level, but I think it was only by chance (win 3.1 programs still had all their legacy dialogs, including open file), because they just did not have had the time yet to implement 1000 different graphical frameworks for example, or to evolve dozens of ribbon interfaces from various unrelated teams. Now it is nothing else than an absolute mess: Win32 programs are very different from UWT stuff (and not just the drawing of the control, the whole interaction model is completely different), and you've also got layers of unrefreshed designs inherited from the guidelines (or informal practices) of the day of the version of windows the component was first introduced in, with inspiration flowing from other teams (or even other systems) but with no common technical framework continuously shared between them, so for example Office also has its very own stuff.

This is a big difference, and in the end a classical one, in the way companies typically work compared to open source projects (not just open source code, I'm really talking about the whole project being open): in companies teams or individuals just don't collaborate as much, because projects are often extremely closed even within the companies, with all kind of access rights. And also some app team might want to support really old OS (who uses a Linux distro of 2009 today? Well, OTOH tons of people are using a Windows version from 2009...) for a few more years and that OS certainly won't add any kind of support for the UI the app guys want, and the app guy might not want to use loads of resource to make their app look neatly graphically integrated in old OSes.

In summary, for proprietary stuff, this is an hard problem both at the technical and at the organizational level, especially if you like to change your graphic experience so often like MS does. And now everybody is used to seeing widely inconsistent stuff on the same screen anyway, so old on new / new on old / different on different cases will remain, I guess. Plus converging UI from vastly different devices is also a hard problem in itself, and UWP is actually not bad at it -- but the price is obviously that it must be irrecoverably different from old Win32 programs.
You're given a very short amount of time on this earth to live.
It's often the case in parliamentary systems that the Prime Minster / Premier's mandate is derived from the support of the parliament. In this case, that could justify the President not acting on the Prime Minister's advice until it was clear that he did still have the support of the parliament.
If true this to me directly contradicts evolution.

People seem to just be redefining evolution at will, without saying the original theory was wrong.

That said, even the wiki articles says genetic drift is controversial.
Point is that if a group breaks-in and steals all the zero days, backdoor access, etc. - they very might be able to end the world if they wanted to do so. Further, by not focusing on defense, which is assumed by the fact that APT6 was able to get in, there's the remote chance that this might happen; hell Snowden likely could have done this if he wanted, but didn't.
In a system where it's easy to build new housing, you don't need eminent domain. The developer simply buys two-storey homes for much more than they're worth as houses.

You also don't need to limit yourself to the existing local developers with political connections. Construction workers from all over the world could move here, just like software people do.
There is a reason for studying colour theory, and unfortunately sometimes you can make things too simple.

There's nothing wrong in principle with having a bright, highly saturated colour for your brand, but using it as a background for a large area of a web page is risky. It's hard to achieve good contrast for any text you put on top, whether you go light or dark, and on some screens the background alone may become overpowering. It might have been better either to go with a significantly darker shade of blue or to desaturate the main colour for the large background area here.

Using a similarly bright and highly saturated but near-complementary colour as an accent right next to that main colour is another risky move. That sort of combination tends to clash, which is why you're probably getting eye strain looking at the CTA button on the demo page here. I suspect it would be difficult to find an ideal flat button colour based on that red accent once you've chosen the blue background, even if you played with the saturation and brightness. However, putting some sort of separator around the button, such as a border stroke in one of the neutral colours so you don't have the two clashing colours actually touching, would probably limit the damage.

The advice on using slightly colourised neutrals instead of plain greys is good, though.
I'm an Android developer and I'd love to work here, but I'm not an American citizen and I feel like sponsorship would be difficult, considering it's not a business. But I love what you guys are doing :).
Last time I tried on a Firefox videochat with a Chrome machine, it was substantially higher than on Google Hangouts or plain old Google Talk. I tried to tweak Firefox internal options, without much luck.
They've addressed that in the post. To make git work comfortably especially on bigger repositories you need to have fast local access to all blobs.
IIRC with something like libgit2 its relatively easy to implement what you describe but to make that perform while doing git log or diffs is completely different story.
The no referrer and user-agent (non Mac) are certainly signals, but there are some others that are interesting like caps lock on, geo-ip (obvious), and screen-size.
I'm not sure which video you watched, but the first video on the page lists the names of each of the comment authors.
Model of Solar-Triggered Earthquakes [video]
Fossil fuel electricity with no pollution? This company is [] to prove it
Talking with Tom Dale about Ember FastBoot and the Return of Scrappy JavaScript
DIY NAS: 2016 Edition
She is taking a sabbatical and will presumably not be paid. Any man could do the same. I understand you're trying to make a point about the fact that parental leave should be equal, but this was an off-base and unnecessarily acerbic way of making it.
Consider these two statements that I believe to be true.

"Start-ups are these great enterprises where individuals make huge sacrifices in order to take a chance at achieving amazing things."

"Great parents make huge sacrifices in the best interest of their children".

The problem is that you can only make so many sacrifices in life. Maybe one day we'll live in a utopia, but not anytime soon. Sometimes you have to pick one.
You can use Valve's browser fingerprinting library. Its good enough to detect basic guys who are jumping through proxies. Combine that with MaxMind's proxy detection service and its a decent starting block.
The Irish Pub?
There's a Periscope AppleTV app.
Training a Computer to Recognize Your Handwriting
It's worth mentioning: This isn't just causing people to flee. It's actively repelling people from moving there.

(Personally, I've turned down job offers for ~2x what I make now just so I don't have to endure today's rent prices, which I anticipate are only going to increase.)

If you're in SF and you want better access to talent, consider a distributed team instead of expecting everyone to move to SF.
I'm a contrarian voice here, but I strongly value my day-to-day encounters and connections with exceptional individuals who I cross paths with in daily life... moreso than the exorbitant cost-of-living in the area. The access to opportunities, collaborations, and community here is unparalleled (comparisons: Taipei, New York City, Boston, and London, all of which I've spent prolonged periods due to business).

Spend one weekend hiking in Yosemite, another working on a digital arts project in Oakland, and you still got plenty of bandwidth to sip your fancy coffees and swing by Stanford for some lectures and run into competent friends to solve some business problems for fun and profit... life is pretty damn good for work and play.

Caveat: Of course, this is coming from a position of privilege: that I spent both undergrad and grad in the area and have built up a strong base of connections here within the profession world and academia, and that the $10k-20k net salary optimization does not meaningfully affect my quality of life.
ON top of that, the originator and/or the media involved, have completely censored out ALL US based individuals from the data leaks (of 11.5 million documents, 215,000 companies).

One might suggest that this "leak" is being used to target foreign leaders that the US does not like - while gaining blackmail material against domestic individuals.
You're assuming that work is fungible, and that success is a monotonic function of amount of work.

There are certain types of work that I don't have the mental energy to do when I get home from a full workday, or at least not to do well. And, honestly, if I try too hard, I risk lowering the quality of my work the next day and burning out completely at some point. And burnout is a fairly large reason that startups fail: "But I think the underlying cause is usually that they've become demoralized" (http://www.paulgraham.com/die.html).

There are other types of work (e.g., practicing piano or voice, two pursuits where the amount of time spent is pretty steadily and monotonically correlated with success) that I can do just fine. It seems more than likely that, if we get it to the point where you can do a successful startup on 5 or 6 hours a day, spending an additional 5 or 6 hours per day on the startup is unlikely to make you more successful, but those same 5 or 6 hours can be productively directed towards music practice, raising children, or whatever else you want to do.

(There's also a line of argument about parenthood being of intrinsic importance, above success at startups, success at music, etc., but I'll let someone else argue that point.)
The first person to hack an iPhone just got funding to make any car drive itself
I would imagine it was what was coming out of the antenna...

Just another one of those fantastic science/technology/journalistic chain phone calls that result in nonsense being communicated to the public.
I was considering upgrading to a nest smart home, but this has shown they don't care about customers. They have lost my trust and gained animosity... I won't give them a penny and I will discourage anyone from buying their products.
Looks this this is Gitlab EE only though, is that right?
thanks but I find none of those unique to SF, you can get the same in other top cities. I don't know about Denver but in Boston/NY you have tons of good job opportunities, excellent engineering and scientific community with top firms/startups and excellent eng, business, and med schools. Close proximity to outdoors (New Hamshire, Maine).

No doubt there are more startups/jobs in SF but at the same time it seems that its very exaggerated.
Come join my wifi network at the coffee shop :-D
I'm not sure why you're using an example I specifically addressed a few comments back in a way that accounts for nothing I said.

A business with multiple employees is not the same as an individual when investigating a crime, depending on whether you think it's likely that they are colluding.

The traffic of the suspect and TOR was mingled, therefor it is not possible to say whether the offending traffic was from TOR or the suspect. If it was from the suspect, there could have been traces on his systems.

A low probability is not the same as no possibility, and there was a possibility he was trading in child pornography. Your threshold for how high that probability should be compared to the investigating officers, or their superiors, may differ. At this point, it's subjective, which is what I was getting at in my prior comment.

In any case, this is irrelevant to my original point, which I already clarified in my prior comment. But to address what may have been your intent, yes, I believe that a package forwarding service may have some problems with the police from time to time. It may not be to the level you describe, but my point clearly does not require that.

To put it plainly, if you in any way enable illegal activity, even unknowingly, it's not entirely unexpected that at times you may face increased scrutiny, or legal misunderstandings. For the suspect in this case to say he "shouldn't have to" is not realistic. That would allow a de-facto smokescreen for real criminals to hide behind.
You can't tell how well these features correlate without knowing what the population of non-fraudsters is that satisfy each feature.
>They got me a great interview at a large, well known company- who didn't end up making an offer, but had a great hiring process.

Unfortunately I thought that this was exactly the problem starfighters was supposed to solve. I.e. qualified engineers getting dropped mysteriously due to various biases of a company's interview process.
Emailed you!
> paying customers

The data readily show that young people are not paying customers [of cable services]. In the long term, professional sports organizations have to go online to maintain relevance to home/casual viewers.
Why we can now declare the end of ‘Christian America’
A car won't help you much in SF. You can get to where you want to go, but not park there. People end up using Uber.
Depends who you are and what you want, like most things in life.

It was great for my first couple years here, when I really wanted to go deep into the field and learn all I could. I had my "become a well-rounded person" phase in college, so by my 20s I was happy to specialize deeply. It was less great for years 3-5, when I ended up meeting and marrying a non-techie. It's been good again for me now, founding a startup, because of the huge number of potential customers everywhere. There's a huge difference between an abundance mentality vs. a scarcity mentality that having a large number of customers/employees/investors nearby creates.