skysight-inc/HackerNews huggingface dataset:
I don't think that's true in the real world. It's more complicated. First of all, I get that for a certain minority of users, it is very much seen as a "medicine" but for the majority it is tongue in cheek game and the dispensaries use all sorts of medical language but at the same time treating it as some sort of fine wine. Normally pharmacists don't ask "Would you like the OG Azithromycin or the Sour Diesel version?"

It is very much a recreational users "drug," whatever you want call it, first and therefore engenders many characteristics of its sales.

A normal pharmacist is not going to walk the consumer through all the different kinds of "highs" the "patient" can get from different variations of Vicodin the way a dispensary worker would with canabis.

As well, I doubt CVS will start hanging "420" and Bob Marley posters all over the place or provide the kind "canabis experience" that consumers will want, for various, which will continue to be served by the dispensaries.

There are many strains that are cultivated for improving recreational experiences, I don't see Walgreens catering to this. So, I think the dispensaries will continue to exist in a significant way, but sure some of their business will be taken away but perhaps because of other effects the market for dispensaries will be expanded.
HID Prox keys don't use any kind of challenge-response crypto and so can readily be duplicated. I would say there are two meaningful mitigations here though:

1) HID Prox is quite old, and while still in common use it shouldn't be used in any new installations for a number of years now.

2) The situation was the same for other digital lock systems of the period, such as the now largely forgotten Marlok and the Secur-a-key. HID Prox basically just predates a challenge-response scheme being technologically feasible. Unfortunately, the intersection of Prox with later RFID technology makes it easier to duplicate Prox keys than these other types (the other types would just require specialized jigs to duplicate)

Today, HID sells a number of systems using different protocols. However, they have both DESFire and SIA compliant products - in fact, as you hint at, HID was one of the original developers of the OSDP protocol and (along with their collaborators) assigned it to SIA.

I'm not necessarily defending HID, as the company has made a huge number of missteps over the years and it looks like that's not stopping now. However, most of the old complaints about HID products are no longer true and they sometimes get an unfairly hard rap - for example, HID's decision not to change the physical case design of their keys over the years (which is useful to their customers who have invested in tooling) has lead a lot of people to believe that all HID systems are Prox systems, which is not true. Of course, I would argue that selling new Prox systems at all at this point is a huge mistake - and you can still buy new Prox systems from HID, although I'm sure they'll try to upsell you to their OSDP-compliant iCLASS system.

EDIT: As a further note in HID's defense, one of the big problems with HID products is that their catalog line-up is really, really confusing to interact with from a security perspective. If you buy an iCLASS system, for example, there's still a half-dozen different actual protocols that could be used to do the card authentication. It can get very frustrating very quickly. There are two big reasons for this, though. The first is that HID tries very hard, perhaps too hard, to allow customers to upgrade without having to replace all of their equipment at once, so most HID systems are designed to interoperate with many older systems. The bigger reason though is that many HID systems are designed to very specific requirements from the federal government and other parties, and these requirements are often confusing and contradictory. That's a problem you'll see a lot in the enterprise security space: systems that are really confusing because they are exactly FISMA, FICAM, F-whatever compliant.
neural blending side-by-side on p6 of the first paper is really cool
Ugh. I see the point in general, but the eye closing is a really broken analogy, and there is a difference between a bias and a preconception.
And in case you hate digging for deleted comments, here's the text, in a paste: http://pastebin.com/raw/nNvyqpp9
"Cache coherence doesn't scale."

This is a controversial statement, and an opinion that is not shared by many respected computer science researchers: http://research.cs.wisc.edu/multifacet/papers/tr2011-1_coher...
That's not what Wikipedia says at all.

> In 1998 Ericsson announced the AXD301 switch, containing over a million lines of Erlang[...].[8] Shortly thereafter, Ericsson Radio Systems banned the in-house use of Erlang for new products, citing a preference for non-proprietary languages. The ban caused Armstrong and others to leave Ericsson.[9] The implementation was open-sourced at the end of the year.[5] Ericsson eventually lifted the ban; it re-hired Armstrong in 2004.[9][...]

> Erlang has now been adopted by companies worldwide, including Nortel and T-Mobile. Erlang is used in Ericsson’s support nodes, and in GPRS, 3G and LTE mobile networks worldwide.[10]

https://en.wikipedia.org/wiki/Erlang_%28programming_language...
Destructors – 2 use cases
Even inserting new subtrees should be significantly faster via appendChild() versus innerHTML. The browser has to do a whole heck of a lot more when you don't build the nodes first.

I'm curious though. I'll have to check out the source to see how it works in React now. You know, when I find some free time :)
Keep looking and don't think that "running like this" is a bad thing. If you don't like something then move on. I am also from India and I know how shitty the culture (engineering or other) in most companies is. In fact in most of the companies there is no culture at all. It would be best if you can figure out these kind of problems before saying YES to a company and you can ask about these things in the interview. Interview should not be a one sided affair, try to make it like a two way conversation and if that doesn't work then right away you would know that this particular interview is not worth it.
Your brakes are many times more powerful than your engine too.
> So... who cares, really.

People who see an annoying xScreensaver popup each time they boot their machine or when their machine wakes up from screensaver...

Worth noticing that the popup mentions xScreensaver's author's email address, which probably doesn't help him getting less bug reports....
It's the value of certainty that people are buying. Think of it more like 'Shipping Insurance', delivery fees are an unfortunate unavoidable thing, like car accidents.

However, by purchasing 'shipping insurance' one can normalize the cost of shipping similar to the way one normalizes the cost of car accidents through car insurance.

There is a virtuous circle too that is the opposite of moral hazard typically incurred by insurance companies as having certainty of cost makes risk taking less costly. Similarly, if shipping is free, then people order more things, creating economies of scale that reduce shipping costs, enabling amazon to make more profit, or price prime cheaper.
Well, what is really needed is a tax on international transactions... the moving of anything in, and currency out of the country. That would make evasion and funds shifting far less attractive. Beyond that would be what would be for some a very high base tax rate, universally... something close to 50%. I just have a problem with more than half of what you make going to taxes.

From there, funds should be dispersed into accounts... A portion would go to every tax paying citizen (filing income tax required for prior year) as a UBI. Everyone would get the same amount, every week.

Of the rest part would be distributed to states based on land size. Part would go to states based on population. The rest would be towards any federal spending...

In that, the budget would have to fit the means based on a percent of tax collected first... that would shift incentives a bit.

A UBI would also allow for many state and federal welfare programs and subsidies to be nuked. A larger portion multiplier could be applied to citizens over 65, then again at 70... To put those going into retirement years in a better position, displacing Social Security.
I feel like it's possible to be wrong about your definition of stable software though. Software is not like wine. It doesn't become better just from leaving it alone for a few years. In fact, all software has bugs and developers are constantly struggling to fix them. In the case of a screen-locker like XScreenSaver, it's also security-critical software, so the developer(s) are constantly in a race against people who want to exploit the bugs. Using a version from 2014 instead of the latest stable version is not just a opinion/preference, it's a bad idea, and I think jwz is totally right in saying that it's better Debian don't package it at all than package an old version.
This was just my second interview and given that they have a great app (atleast from outside) I didnt expect any of these. I'll be more careful in the future.
Any and all of them that would be two levels of stairways - the stairs from the street to the turntsile/kiosk and the second set of stairs from the turnstile/kiosk to the platform. The clocks are only on visible once you are standing on the platform.

Unless you are on the rare above ground station this is the general layout.
Awesome, thanks you two for the tips! :)
> that's how we ration every other limited resource; it goes to the highest bidder, not the first mover

This is the opposite of the truth. The core of property rights is that just because someone will offer you a "good" price for your trinket, doesn't mean you have to sell it to them. (That would be a chaotic world!) Limited resources are held by their owners, who had them first.

You can argue that housing is fundamentally different from every other kind of property, which justifies forcing people to give theirs up if somebody else wants it more -- but there is no room to argue that that's how we handle other limited resources.
Tiger Global Hedge Fund Plunges on Amazon, Netflix, Other Bets
BATMAN SAY
Some of the main things I've noticed:

- Lazily using "full-stack development" for every position as a means of avoiding the hard work of actually managing people, providing meaningful job descriptions, and respecting specialties. A company with a huge army of undifferentiated full-stack positions is a major red flag.

- Unwillingness to negotiate regarding private offices or remote / work from home options for people who are not compatible with the noise & productivity loss caused by open-plan offices.

- Hyper focus on your salary expectations early in the process without reciprocal willingness to share the budgeted salary range. This extends to hyper focus on relocation costs or other compensation items too.

- Jobs that don't provide relocation. Sometimes there are good reasons, but many times it's because of cliquish culture and/or extreme cheapness.

- Paternalism: does the management act like your vacation time, your pay, other forms of compensation, or other perks are "generous gifts" doled out by the company? Do they act like the company "is a family" and have weird workplace cultural norms about key management "principles"?

- Are all of the recent Glassdoor reviews 5-stars with unrealistically glowing reviews that sound like they were written by a PR firm, and all of the bad reviews are buried at the end and sound like what an actual human would write?

- Any unreasonable demands for access to private data about you, such as statements about past income or addresses, test results for things like IQ or personality tests. I agree with other comments that even asking for test results is a bad sign, but even if the test results were legitimately useful for hiring (they aren't), there's still the issue of distrusting some random company with private data about you, or being skeptical of their network security.

- If anyone tries to talk you out of your financial requirements with lame excuses, it's a red flag. For example, when I've countered lowball offers before, I've had HR reps debate with me exactly which apartment buildings and locations nearby I could live in at the wage they countered with. Anybody prying into your private life like that ("hey I know where you should choose to afford to live") is nuts, and you should run away.
That is a possible outcome.

Like I said though, with courtrooms being adversarial one side is incentivized to use any useful tool against the other. If the defense can't afford it and therefore doesn't use it, it becomes less likely the prosecution will use it then too. Maybe to counteract this I have to subsidize the cost of those using it for defense.

It is far to early to say for certain, but in order to generate better juror recommendations data is needed, I want as many people using it as possible to get data.
Now they know exactly what they are doing wrong?
> but if it's already clinically-approved and has been used, where are the heart attack correlations?

This is what I'd like to know. I'm not a formulation chemist, but we should see differing outcomes related to different formulations. Maybe someone switched to PEG and saw worse outcomes for this reason?

I'd also be interested to see what happens with different substitutions on CD.
True. I personally like Erlang's syntax more. I like single assignment variables, I like the structure and feel of it and so on. But Elixir is great too. I am glad it is there and is taking advantage of the BEAM VM. It definetily appeals to many Ruby-ist or those who used Python and are otherwise scared by a different syntax.
pg discusses some of these things in his essay "do things that don't scale" http://paulgraham.com/ds.html

This is really hard advice to take ..and in my limited experience also hard to convince investors of. But I think he's right ...and it amounts to getting in the game / get out of the building etc.
How do you feel about personality tests? I've never seen an IQ test, but many interviews I've done as well as my family have had personality tests (and were very high quality workplaces), and we generally laugh them off as a kind of a silly thing. All of these were encountered in the finance (trading and banking) industry, so that might have something to do with it—the industry tends to be old fashioned in many ways (especially compared to the tech industry). Are IQ/personality tests an old fashioned thing?
This is way over the line of what we ban people for. I don't want it to seem personal (it isn't), so won't ban you, but if you keep doing this we'll have to.

The rule is "Be civil" and it applies regardless of what you think other people are doing.
The Debian maintainers do backport security fixes to the older version they're shipping, though. Eg. for the package in question here we have:

xscreensaver (5.30-1+deb8u1) jessie-security; urgency=medium

* Add upstream patch for "xscreensaver aborts when unplugging second
monitor" security issue (closes: #802914)
http://www.openwall.com/lists/oss-security/2015/10/24/2

-- Tormod Volden <debian.tormod@gmail.com> Sun, 25 Oct 2015 11:35:52 +0100

Keeping the old version isn't supposed to imply "it has no bugs" - instead, it's based on the idea that "if if works for you now, it will continue to work for you". In other words, you can be reasonably sure distribution point updates won't break anything that you're relying on.
Right just move your kids somewhere new and cheap like Fresno because there happened to be a housing bubble where you lived. Houses provide a stable environment for raising families. Why should you be forced out by taxes?
This is actually the opposite because ETFs and index funds increase stock correlation and the more correlation among stocks the less hedge you can find. If all stocks moved exactly with the S&P500, you would not make any money.
OpenStack Mitaka is released
No idea if the author intended it this way, but on some forums and imageboards it's normal to refer to being obsessive about something as "being autistic about it". It's similar to how most people call themselves "OCD".
Fees have been going down from 1% to 0.05%.
File Blender file formats converter software
Slack App Ideaboard
7 Simple On-Site Changes That’ll Increase Your Social Media Traffic
Enterprise Grade Streaming in under 2 ms on Hadoop using Apache Apex [video]
$50 for the time to write the app... $335k for dealing with the bidding process to actually work on the project.
Yeah, you'd think that it would be a lot faster to avoid serializing and parsing everything, but it turns out to be not much difference. Not sure why.
Yeah? Please provide a citation? Was there an MTA survey that went out to the ridership of the L train? Did ridership experience a decline because it was an automated line? I'm pretty sure that none of that happened.
The link in the original post was about strong vs weak retaliation clauses in an explicit license, but the parent is also talking about implicit patent licenses, which do have some case law and opinions surrounding them in the United States [1].

The theory behind implicit patent licenses is that the licensee (often the buyer) will have some idea about which rights they have to the thing they are licensing, absent any other agreement. For a software license like the 3-clause BSD, this means that if they are licensing the software from the holder of the patent, they can reasonably expect to not subsequently be sued for infringing on the patent while following the terms of the license.

Omitting any kind of patent mention from your product's license, and later claiming infringement for reasonably expected use, would look subversive and generally be unconvincing.

[1] http://en.swpat.org/wiki/Implicit_patent_licence#USA
GitTorrent
We Need Career Politicians
Stating the obvious here, computers are things on the Internet. Also weather stations, seismographs, road sensors, etc. etc. have been doing this for decades.
Well, if you take it that way sure, but the goal of Eb is to provide a similar solution like GAE and customers should be replacing instance as often as possible.
> As a proxy for developer performance, intelligence is strongly correlated.

I think sampling some code from the applicant could be a better indicator.
This is yet another reason the referrer header shouldn't exist.

(To anyone complaining that they need referrers: Use cases that require the referrer can find another solution. As the jwz.org redirect indicates, referrers leak important information. Do you really want to argue that your use case is so important that it justifies a data leak?)
An above average IQ is usually good, but not too high. 115-120 seems pretty good. Above that, I've found a strong correlation with either a) being a dick, b) having obnoxious social quirks, or c) being dangerously over-confident. YMMV
A variant on UBI that I would like to see explored is to make the payments conditional on doing some kind of community service. Something like cleaning a park or volunteering at a school or something. Maybe a 1-3 hour / week commitment. Not as a way to save money so much as to strengthen communities and give people a way to contribute.
Maybe if that single payer system weren't designed (at every step of the way) to enable competition by private industry.
We changed from the baity title to the typically more accurate subtitle.
Oh yeah let's screw with someone's setup, that'll help. Come on, is it that hard to copy/paste an URL?
This is news to me, and I work there.
So what's an example of a situation where an IQ test would not be a bad sign?
I'm happy to share the code, but realistically I'm unlikely to add features. There are already so many colour pickers that I didn't see the point in adding that functionality.

I created the tool while putting together a couple blog posts on how to use colours effectively in data visualizations. There are a number of links in those posts to other pickers out there:
https://briancort.com/?p=146
https://briancort.com/?p=174
Well, if they leave you at home to do the test (especially timed). They must expect you to use any means at your disposal to solve it. It's likely that some people would still not be able to do it.
YouTube-dl: Open-source YouTube downloader
I always loved Facing Worlds, and still do:)
I am excited for a continued improvement and enhancement to the language.

Erlang 18 brought maps, people complained about that for years. Erlang 18 also brought (via a feature flag) dirty schedulers so can have long running C function embedded in without messing up process scheduling also an often requested features. Probably the best thought-out handling of time in any language I've seen so far ( synchronization, warping, moving backwards: http://erlang.org/doc/apps/erts/time_correction.html )

Erlang 19 is exciting as well -- 10x faster tracing, dirty schedulers turned on by default, a new state machine OTP module, an external plugin (with LevelDB as one example) for Mnesia storage also something people complained, 2x-3x faster spawning external processes + many others.

The impressive part is that these changes are done to a 30 year old language.
Nope. Formula E and Roborace are big money and big spectacle. This is more like club racing. If you are building something and have something to test, bring it.
Read it now, best thing ever.
Beyond that it's actually Thunderhill West, which is the smaller track to the west. In that photo, it doesn't even exist except as a bunch of dirt trails.
Suppose for a minute that it is legitimately impossible to have a secure screensaver older than 6 months. Like, we live in a universe where either we can have secure screensavers, or we can have Debian stable, but not both.

What we have in this situation is an engineer–as far as I can tell, an engineer on the short list of "world experts in lockscreen security"–who earnestly believes that our universe operates in exactly this way.

What is a reasonable thing to do–short of warning end users, which apparently is immature in your mind–to prevent what he believes, as a subject matter expert, to be a major and ongoing security vulnerability waiting to happen?

Should he have released under a non-DFSG license so as to prevent Debian from packaging the software at all? Or should he have politely written to the Debian maintainer asking for its removal from Debian? Should he have gotten into the Debian politics and lobbied for the "special exceptions" that iceweasel etc. enjoy to get frequent updates? Should he have taken it upon himself to backport security fixes to Debian, RHEL, etc?

I sympathize with the OS package maintainers, but I sympathize more with someone who found himself trapped between his commitment to software freedom and his commitment to keeping his users secure.
Sessions and object lifetimes
> When I read stuff like this, it makes hard for objective people like myself to determine where the hype ends the facts start.

You are confusing a political prediction with a scientific prediction. What scientists were saying that there were going to be large sea-level rises between 2005 and 2010?

(Assuming that you are serious, since you don't point to any source, and your text is incorrectly quoted.)