skysight-inc/HackerNews huggingface dataset:
> I recall HN saying gold market manipulation was conspiracy theory (...)

This is a pretty good example actually. ZH covered the gold/silver/libor market manipulation in pretty good detail. They also explained a lot about the insides of these deals, I frankly had no clue about. They did a pretty good job on thios one. However, this is not a conradiction to what [parent] said. Consipiracy theories do attract an authoritarian leaning mindset, he is right.

Also, on a sidenote: There are conspiracy theories that have some credibility, some of them even became true in the past (NSA, P2, at some point even the existence of the Mafia was one). Conspiracy theories become problematic, when they become an ideology. When you explain everyone and everything in the context of a conspiracy, you run in a one-way filter-bubble, because everything supports the theory, especially facts, that contradict them.
The Economy’s Crisis Ended Under Obama, but Its Long-Term Problems Didn’t
Fellow enterprise developer here.

Startup culture freaks me the fuck out. I just want to write clean code, then go home and do something other than writing code. I'm not at all interested in giving my life to a project.
I don't see how your friend being a social service worker validates his opinion, plausible as it may sound.
Unfortunately automated builds on Docker Hub don't yet support GitLab.com, that is why we use a manual build.
Jerks are everywhere.

Quick read of article like, "Rise of the Cypherpunk" is a reminder of how many awesome people are in cyber security:
https://news.ycombinator.com/item?id=11465203
funny how this opposite spectrum leads to https://upload.wikimedia.org/wikipedia/commons/7/7c/Vector_A...

risc / cisc gathered around each other, clang / gcc...

progress by antagonism
>one in 42 boys...38 in S.Korea

Are we calling every socially awkward kid autistic or did we, as humanity, finally "done did" the genepool?
Most people did not believe, pre-Snowden, that intercepting everyone's communications was something that was routinely done (though they might have believed it was possible).
Definitely.

I use it for some game development projects and its able to compile and run code on all Windows/Mac/Linux/iOS/Android (all native code) and even Javascript+WebGL.

Obviously the framework I use is targeted to games but there are other frameworks that target webdev (can target Node.js/PHP and lots of other things).
He really shouldn't have included the FB rant. Up to that point, all you had to go on was his side of things. After it, you have to reevaluate all of his seemingly reasonable comments about his behavior and theirs.
I carve up this problem differently. To me, the field can be divided into two basic categories of people:

1. People who are into security to prosecute some immortal struggle between good and evil.

2. People who are into security because of the engineering challenge.

It's the people in group (1) that I tend to have a problem with. Often, for the "good guys" security professionals, engineering facts are just a means to the end of winning the war on the "bad guys". These are the people who tell you your Scala serverside application is insecure because of some recently-released Java applet bug; they're the people who fought against DNS query randomization for a decade because we need to finally release DNSSEC; they're the ones shipping grievously broken cryptography to try to "stop the NSA".

There are jerks in both categories, and competition is a dimension orthogonal to this one, but I find I can handle jerkiness and competition between when I know it's from someone who truly cares about understanding what they're talking about.
This is probably a false positive with merlin, that should not affect your code itself.
You said it's misconduct which misleads others that they are good.
most developers would love to have the time to make sure their code is secure and well tested

This is certainly true. But competitive pressures will always force quick hacks over software robustness. The only real solution is a sort of developers' guild -- whose membership includes over 90% of all worldwide professional developers -- wherein an oath is sworn to always include security robustness as a required feature during the software estimation cycle. Or perhaps an analogue to the Hippocratic oath.

Which of course will never happen.
Nowhere in your quote does the FBI say it will "have no effect." It says that "it would not permit searches or seizures that are not already legal." All the rule changes is which court the FBI has to go to for the warrant, and even then only under specific circumstances.
> Sure, a backchannel reference check might still happen, but if and when you find out about it: good night.

Pardon me for being dense, but can you unpack that figure of speech at the end?
Randy Pausch Last Lecture: Achieving Your Childhood Dreams
I have a love hate relationship with Zerohedge.

On the one hand, they can produce some really amazing and compelling content, whether its their own analysis or an analysis of an article from somewhere else on the web. A recent article of memory: http://www.zerohedge.com/news/2016-01-17/what-just-happened-....

But over the years the site's tone has changed. While they are still dedicated to financial news and insights, they post a lot of survivalist non-sense and it feels more like a far Right wing blog now, advocating you to buy gold in one article that sits below another highlighting proof that the gold market is fixed. I can support a position of reporting on everything and anything, but these inconsistencies and the fact that there is a dearth of articles with viewpoints and analysis from the Left has led me to question their true motives now. They'll also censor you for trying to bring this up in their comments section. A few years ago my account was banned after I called them out for putting up an article stating how some Goldman report was BS, while simultaneously they had up a blog post that used stats from a different Goldman report.

I still visit the site everyday. They still occasionally break some headline stories and you still find some really great articles. But generally it's become an insufferable website.
ITT: People not getting the joke
>wreaks

The word you wanted there is "reeks."
You get downvoted, but IMO you make a good point. There's a lot of things on ZH that are far-fetched, many articles by guest writers that are clearly in the 'conspiracy theory' corner, but if you use your brain to filter out the noise, there's a lot of truth to be found on ZH that most other media outlets don't want to report on (for whatever reason).

It's not just HN commenters who are typically poorly educated about finance, almost nobody thinks any more about these things than what they get from the mainstream media.

Years later, after things have crashed and burned and many of the 'conspiracy theories' that had been on ZH years before they turned out to be (at least partially) true, those same people flock to movies like 'The Big Short' in large numbers, and the talk of town is 'how nobody could have seen this coming'... :-/
When I interviewed at Rackspace 3 years ago I had 8 interviews. Things have changed since then but I remember the process really being comprehensive for both culture fit, technical, and overall just who you are. I used to do interviews when I was in Support and this article is indeed accurate.
That seems a bit absurd. How can I control the actions of someone if they mis-understand my speech?
Well, that's how it's 'supposed' to work. According to 18th century agrarian economics. Before the telegraph (let alone the internet) enabled businesses to get that large.

But due to collusion, sometime-insufficient regulation (e.g., ad networks that can and do deliver malware), sometime-overbearing regulation (e.g., software patents), and ... well ... the rest of the real world, Adam Smith market economics is exceedingly reductionist. It works in the microcosm. Until you take into account that no economic entity or system is fully enclosed.

For example: has Blackboard yet been toppled, or are they still suing and/or acquiring any potential competitor via its vast patent portfolio, all the while being the absolute worst solution to its problem possible?
Is there some doc describing the difference?
The history of ‘this website is well-crafted’ hints
It's usually found when looking within mammals and is only a first approximation at best, but it seems to be a useful one at least:

https://en.wikipedia.org/wiki/Encephalization_quotient
Procedural Generation: Pros and Cons
Dutch software agency specialised in testing, employing autists only: http://specialisterren.nl/socialenterprise/introductie.html [dutch]
There are a lot of possible lessons here, but after reading the whole thing the only point I can come up with is "Problem exists between chair and keyboard."
The context was Walgreens. Some companies are smart enough to hire high functioning autists to hammer down hard to nail bugs. Most aren't.
A fascinating tour of the history of web development and What "well crafted" means over the years.
I didn't mean to imply that in each city, a software developer makes more than half of the price of a home in a year. What I am asserting is that, in contrast to the previous post, software developers can afford homes in these (very expensive) cities and they can do so at a much higher rate than the average resident.

An average software developer earns about $85,000 in Sydney, so you're right, they're priced out of the central city's market. Senior software engineers make $100-150k, so even they make only up to 15% of a median downtown home.

I lived in Macquarie Park, a suburb of Sydney (which is ~20 minutes by public transit from the center of the city). The median price for a house there is $619k. That's well within reach for a senior engineer, although admittedly more of a stretch for an average developer.

Software engineer salaries in Seattle average $111k. As you've said, the median home price there is about $500k, which is very much attainable for someone earning six figures. The average income in Seattle is $37k, showing that (just like in Charlotte) software developers make about 3x as much as the average resident, and are in fact one of the few groups not yet priced out of central housing.

https://www.glassdoor.com/Salaries/sydney-software-engineer-...

https://www.glassdoor.com/Salaries/sydney-senior-software-en...

https://www.investsmart.com.au/property/nsw/2113/macquarie-p...

http://www.indeed.com/salary?q1=software+engineer&l1=seattle...

http://www.deptofnumbers.com/income/washington/seattle/
Announcing Support for HTTP2 Server Push
Note exactly, Tahoe only has Tahoe nodes chatting between each other; it can be the decision of a given Tahoe node to actually store content in the cloud rather than on the local file system, but that's a node-specific decision, not something that each Tahoe client has to speak.
Careful; I got my tail ripped off last week here on HN for suggesting that people "be adults", show up for work on-time.
How interesting can a Dev-Ops Engineer positon be?
Another important point-- once you get into the conspiracy theory mindset, it's not so much that a conspiracy or some conspiracies happen. There's a tendency to believe that all conspiracies are true, even the contradictory ones.

Your average conspiracy theorist doesn't just believe the NSA is spying on Americans [they better be spying on non-Americans; we taxpayers are paying them a lot of money to do so] or that Putin has had a few guys killed. Your average conspiracy theorist believes that the Moon landing was faked, JFK was assassinated by a coordinated effort of at least three different groups, there are cures to cancer and all other diseases being kept secret by corporations and/or the gov'ment, Hitler is still alive, aliens have visited the Earth, are living here, and have secret treaties with various states, the UN has real power, various diseases [eg, HIV] are man-made, and various biblical artifacts have been found and kept secret.

You rarely find a conspiracy theorist who believes one crazy thing, it's almost all or nothing. It's this weird credulity veiled as skepticism for the establishment
NodeList object is finally an Iterable
I'll read this later
Oh the irony. I came across this here, while procrastinating, and decided this was too long so I sent it to Instapaper, where I will probably never read it...
I game on my flatscreen TV so GSync is not (yet) an option ;-)
I think the ultimatum here might have had more than two options. "Adapt to the situation and be happy, don't adapt and be miserable but know that complaining about it will be ignored, or leave"

I wonder how different that is from just saying "No" when asked to fix things for the employee. I'd view that as being a terrible manager, but not as a firing.
The ideal age for raising children probably is the 30s. In traditional societies, the grandparents had a large role in child rearing. It makes sense; the young'uns are fertile, strong and energetic; perfect age to bear children. The oldsters are well qualified to teach and provide guidance.

I think we've lost something, a certain quality of life, as a result of the dispersal of families. 100 years ago, it was common in both rural and urban America for extended families to be under the same roof or at least nearby.

Now, kids move away, sometimes very far away, wait until their 30s to have kids, when the grandparents are getting too old and tired to help (except maybe financially) and the kids miss out on the rich multigenerational experience that was how people transmitted their wisdom, experience, and traditions.
The answer could also be to ship an executable and then use IPC instead.
I'd argue the natural scale for thinking about the number of combinations is the log scale - in other words, the entropy. Entropy, like the number of atoms, is an additive property of a system.

From this point of view this article is inappropriately comparing two scales. It's nothing more than saying "e^x >> x for big x".
> Are there any targets that have instructions like integer-add-but-trap-if-overflow?

No "modern" targets. MIPS and Alpha could trap on overflow (on MIPS `add` would trap, `addu` would not, not sure about Alpha) but neither x86_64 nor ARM have hardware support for trapping on overflow.

x86 had INTO, which would INT 4 if the overflow flag was set, it still required additional instructions and the OS needed to convert that to an application trap, but there you are. It was removed in x86_64, likely because it wasn't used much.
IIRC MIPS did. Alpha did as well I think.
wikipedia

volunteer activity

open source software
Survive and Thrive as a Solo Designer
I don't think the problem is specialization, just that the incentives mean that the specialization doesn't always get applied where it's needed.

Presume a company with the budget to have a SOC, they're doing all the "regular" security jazz and them some. But are they auditing the network services they themselves run, or just applying patches? Auditing the products the company itself is producing, or just kicking the tyres? But they MITM all the outbound https connections, I'm sure that more than makes up for it.
You end up with an incredible amount of mass divided by 4 or 5, which most likely works out to an incredible amount of mass.

In one of the patents, they work out an example system that can handle 30 megawatts, which might be the output of 10 or 15 turbines. The system absorbing the 30 megawatts for 30 minutes has a working mass of 1200 tons (conveniently, they use a working height of ~600 meters).

So all you need is a system capable of lifting 100 tons a distance of 600 meters (to store 1/2 hour of output). Which is probably something we are capable of building (there are cranes that lift much more significant distances), but it probably isn't something that would be economical.
Everyone Wants to Change Seattle's ST3 Light Rail Plans
Oh shit really? That's awesome!
As a professional Python coder I had to look up Cucumber and Gherkin. I wasn't sure whether it was sarcasm either. And then I learned that Lettuce actually exists as a free alternative to Cucumber.

Who named these things, Javascript devs? (I jest, but Python has pretty clear naming usually)

EDIT: For those of you downvoting - consider the impression this gives to someone who doesn't know what Cucumber is (particularly in a ranty blog): you tell them "Oh no sorry, I was expecting to see Cucumber, but they were using Lettuce which isn't Gherkin compatible". I think it's entirely reasonable to think that those aren't real packages...
I think it's a mistake to assume the general public must have access to the paper for it to advance the public good. A climate change paper does good even if the general public doesn't read it.

Furthermore, most of these papers are available to the public, just not online.

Many libraries have copies of the works.

I do think the pricing for non-institutional clients is absurd. Paying 30 bucks just to get past the abstract is nuts.
If they did it to us that would be state-sponsored cyber-terrorism!
> that's a lot less fun than getting paid to pop boxes. I know, because that's what I do

Wow, this is an interesting claim. You do this work for a living? Are you ever concerned about getting caught? How do you get paid?

I'm assuming that covering your tracks is some sort of ever escalating cat-and-mouse-game. How do you find out about your adversaries' capabilities regarding investigation after the victim detects the problem?

EDIT: oh, oops. Double-misunderstanding. "that's what I do" meaning "harden,test,repeat" and of course some folks are legitimately paid to do pen testing.
First of all, you can just tunnel whatever storage protocol over HTTPS if needed. The point of the quote is that we could be using Operating Systems that abstract away the various kinds of storage available so that you can use whatever combination of options work for you.

It's like if everyone was using Linux and paid for plans from for example a cloud storage provider, but was able to reliably and automatically mount their storage like any other network share.

With open technology and widespread fast internet, it's really not that hard to accomplish. We've already got the former. Now we just need a lot more of the latter.
2 ways to deal with procrastination:

1. Don't worry about it. We all procrastinate and most of the time it works out OK. Our instincts know what they're doing.

2. Break tough tasks down into very, very laughably small tasks. Don't even worry about doing them. Once the first task in the list is small enough you'll think "sod it" and do it right away.

If you try to improve your self control you will fail. Go with the grain -- either stop worrying, or find a chunk of the task so is tiny and easy that it becomes instantly gratifying to do it.
Getting more sites to use Let's Encrypt, or Cloudflare, or to buy a certificate is the intended benefit of the change. Google is gradually restricting these APIs to encrypted origins in order to encourage sites to use encryption, not because they don't want the APIs used.
If your state is running out of water, the switch to rocks might be something you can't avoid.
Who Can Name the Bigger Number?
Exactly what I've been looking for! Does anyone know if I could run this on a couple of Rasberry Pi 3?
That assumes such sites' operators care about HTTPS.
You are referring to a hydraulic accumulator[0], such systems were built in the 19th century. There is a modern effort to use the technology in a massively scaled up fashion by Heindl Energy[1]. Their concept uses pumped water to raise a rock weight 100 meters or more in diameter.

[0] https://en.wikipedia.org/wiki/Hydraulic_accumulator

[1] http://www.heindl-energy.com/hydraulic-rock-storage/overview...
Most journals require that the authors sign an agreement in which the publisher retains the copyright of the paper (e.g. [1]).

Although a few publishers allow the authors to provide a pdf of the paper in their personal home-page, they do allow it to be uploaded to an open access platform.

[1] https://www.elsevier.com/about/company-information/policies/...
The real solution in my opinion is educating people on security. not just developers, but also end users, sales people, and product managers.

When users start choosing the robust and secure product over the quick and insecure product, sales will pick that up, product will follow, and programmers will treat security just like any other feature.
Just remember that five feet is about one millimile.
Have you taken a look at deepdyve.com? $40/month ($30/month if bought as an annual subscription) for unlimited online access to a ton of journals, including a bazillion from IEEE: https://www.deepdyve.com/browse/publishers/ieee

If you create an account but do not subscribe, you can view all the papers but only for 5 minutes each. You can then subscribe to read the ones you need more of, or purchase access to 5 papers for $20.

The above is for online reading. If you need PDFs, you can purchase those but they are not cheap. They are usually what the publisher charges on the publisher's site less a 20% discount.
I was giving this some thought and my initial reaction was to suggest a Gmail account with +aliases, e.g. mythrowaway@gmail.com, and then use mythrowaway+whateveralias@gmail.com combined with a forwarding filter.

I then saw the 'own domain' requirement leading me to think Google Apps will let you do this (for money), and you could use a catch-all alias rather than having to use +subaddressing.

That said, if you want to use your own domain and host it yourself, you could easily do this on something as small as a Raspberry Pi with exim/postfix, and just update /etc/aliases as required.

example /etc/aliases file:

throwaway1: realaddyaliassecret
throwaway2: realaddyaliassecret
throwaway3: realaddyaliassecret
throwaway4: realaddyaliassecret
realaddyaliassecret: myrealaddress@yahoo.com

Note that you don't need to use a 'realaddyaliassecret', it just makes life a bit easier than having to always type in your real email address. And when you're done with a throwaway, just remove the entry from your aliases file, and messages should now bounce.

Shouldn't be particularly difficult to build a nicer front end too, cli or webbased.

EDIT: all of this now has me wondering why I haven't done this for myself already, given how simple it is. Thanks for the idea!
What do you mean it's an interesting claim? It makes perfect sense to me, and I'm just a regular old web developer.
It is counterproductive, as many ad networks are not fully HTTPS-compliant yet. So you'll literally lose money by switching to HTTPS. It's why many big media sites still haven't done it yet.
Learn how to use Lumen and Laravel as your mobile back end
How to choose your video media engine
This.

In addition, there are people who are quite literally "dangerously wrong": They talk with great authority and can influence large numbers of people to follow them, even though what they advocate is non-productive. At best they can waste immense amounts of a community's time as they cause great debates among members. (Tabs versus spaces, for example.) At worst they gain actual authority, do great damage, and then leave the community to deal with the aftermath. (Cure your diabetes through positive thinking!) So while being "nice" and "empathetic" are excellent defaults when dealing with people, it's just as important to understand when ugly ideas need to be squashed and the undecided are urged to do what needs doing.
Penetration testing is legal.
I'm playing a bit the devil's advocate here but there's two side to every stories. I've known employees exploding like this, convinced in their mind that they are right when in fact it is not so. Everyone is the hero of their own stories and some people are very good at rationalizing their action after the facts to convince themselves they are in the right.

It seems weird that he was fired just after putting an all nighter and resting the next day but there must have been some reason for that. It'd be surprising if there were no reason at all...