skysight-inc/HackerNews huggingface dataset:
Can you give me an example of a real-world worm that has scanned every port on every system on the internet? I haven't seen one, but if it exists, I'd be curious to see it. I'm speaking based on the actual exploits I've seen in the wild over the past 15-20 years, not what is hypothetically possible.
> the fact that us humans change means that we're likely to be better served by something that can change with us.

Sure, and even people that oppose change on one axis (like density) often support other changes in their city.

People, of course, disagree on what changes are desired and which are disliked, but that's the nature of subjective preferences.
And when you copy source code that has an API in it, you violate the copyright for that source code. This is not hard.
Best board games for young kids (that are fun for adults as well)
Ask HN: CMGR vs. straightforward percent growth
I have a question about growth as typically quoted for startup metrics.

Many guides I've seen quote a number called CMGR. An example is here:

http://a16z.com/2015/08/21/16-metrics/

CMGR is apparently a bit of a standard, but it provides a number that's in some cases significantly smaller than what you get if you do a straightforward percent growth calculation.

I understand the idea of dampening out variation but what if the variation is small? Why should the results be so hugely different? We're talking 2X here.

I guess I'm looking for someone to go into the math behind the difference. Been a while since I've studied probability and stats, and the origin of the CMGR formula seems murky vs. other ways of computing this. I'm wondering if the CMGR formula carries assumptions that are not explained in any of the text I've found on it.
The sci-fi I'm most interested is a lot more distant than 1 AU.
The Austin City council members that promoted the ban had received campaign contributions from the Texas Taxi Lobby. It was never about having verified names, it was about making money for Taxis.
In its current incarnation, it's not going to be replacing the supermarket anytime soon. I'm not trying to suggest that it will. But I do think it has the potential to disrupt.

I own a small farm myself. If the price point were low enough, I could easily set up acres of this technology and map out my crops using my computer. It could keep track of when crops needed to be harvested, when I needed to weed, how much I need to plant of one thing for a season. And then eventually could do those things for me.
I heard this the other day on the Radio Motherboard podcast. You can listen to it here: https://soundcloud.com/motherboard/when-uber-left-austin
There's a simple solution:

The city puts on the lien on the home for the value of the accumulated rise in property taxes. Once the owner dies, family members sell the house, and pay off the lien.

I have no idea why Prop 13 was created when the aforementioned solution allows grandma to stay in her house without destroying the housing market in the process.
Things I'm Thinking About: China
On average yes. There's massive corruption.

Source - I live here
> I'm saying that once you are used to a language that's more powerful you feel constrained.

I did misunderstand your point, though I don't find this one more compelling. While Java has more features than Go, the only one I would consider to be "more powerful" would be generics.

> The concurrency supposed to be the killer feature, but it is limited to specific cases.

How do you figure? To which specific cases is it limited? How is Java better?

> BTW: The Go is not subset of Java if anything it's very similar to Algol-68

My argument wasn't that Go is most similar to Java; only that Go's featureset is almost a strict subset of Java's. Go gives you tighter control over memory and a better concurrency story, but most of the rest of it looks the same.
Designing in the Material Style Without Just Copying Google (2015)
Not entirely. Mint only used Yodlee at the beginning, before Intuit acquired them, and that was a while ago. Even before the acquisition, they had a secret project to create a backup scraping platform because they worried that Yodlee would cut them off when the acquisition was announced.

Mint now uses an internal service (called FICDS, IIRC, but I'm no longer at Intuit) that still scrapes. That service also handles bank interactions for Quickbooks, TurboTax and Quicken, though the latter was sold off, so may be moving to something else. Additionally, that service allows the use of tokenization, which greatly reduces the chances that account credentials would leak based on a vulnerability in Mint or a rogue employee, since that team is pretty locked down and Mint, TurboTax and Quickbooks never store banking credentials.

As an aside, I wonder why Wells picked Xero to trial their API. It could have been a lot more impactful by doing a trial with Intuit, especially if they could have had it ready by tax season.

Also, here's a fun fact: For a number of years, Mint employees at Intuit could not see their own employee stock plans in Mint. Morgan Stanley's site was a Flash monstrosity that couldn't be scraped correctly. Asking them about it earned you a well-practiced eye roll.
They've sold well over 100,000 cars. The current total is around 140,000. They project 80,000 or 90,000 this year, with a slow start, so I think their current rate is 100,000 if not higher.
Progressive Web Apps Isn’t a Google-Only Thing
This wasn't just lawmakers, there was a chance at the polls.
I have moved from Mongo to Cassandra in a financial time series context, and it's what I should have done straight from the getgo. I don't see Cassandra as that much more difficult to setup than Mongo, certainly no harder than Postgres IMHO, even in a cluster, and what you get leaves everything else in the dust if you can wrap your mind around its key-key-value store engine. It brings enormous benefits to a huge class of queries that are common in timeseries, logs, chats etc, and with it, no-single-point-of-failure robustness, and real-deal scalability. I literally saw a 20x performance improvement on range queries. Cannot recommend it more (and no, I have no affiliation to Datastax).
No, Docker can run Windows containers natively, although this has not been officially released quite yet it is a preview.
This article is the biggest bunch of rubbish that I have read in months. It takes bias to whole new levels. People are starting to realize that "studies" are almost always biased in the first place and should not be trusted. Secondly, look at some of the examples used:

A comparison is made between:

> 25% of black kids had parents who grew up in the bottom two levels* and moved up at least one.

and

> 59% of white kids moved up

Notice any difference here? The whole article is like this. Comparing completely separate things. This is laughable. I feel embarrassed by the bias and sorry for those who read this article with a straight face.
UPS Worldship. Dog slow, (you sit there and watch it redraw each form multiple times) confirms on exit, and will refuse to exit if it's talking to the server, since its programmers had never heard of background tasks.

Stamps.com is equally bad. SCAN form reprint doesn't work, crashes randomly on return from sleep, sets the Windows default printer to whatever thermal printer it's using at the time, has the most braindead address correction algorithm I've ever seen. (For one, it doesn't like state names that are two words!) Also they haven't updated the 13oz -> 16oz cutoff for first class mail on return labels yet.

Madcap Flare is also some pretty miserable enterprise-ware.

Magento is also bad, of course, but that's universally hated, no surprise there.
This single issue would make me not want to use MongoDB. I'm sure there are design considerations around it but I rather use something that has sane semantics around these edge cases.
I'll say that Java doesn't do currency worse than Go, that's for sure. It has all of the primitives in whatever arrangement you want to put them (Javaflow and now Coroutines if you want go-I'm-sorry-coroutines, native threads if you want those, and Go channels can be implemented in maybe two dozen lines), more flexible, battle-tested abstractions (such as Akka offering you an asynchronous, message-passing actor model, which could be written in Go but seems in practice to be passed up in favor of channels), and tooling around these that I find to be head-and-shoulders better than anything Go has (like multi-threaded debugging).

I've basically (willingly or unwillingly) turned into a Ruby person over the last few years, as neither Go nor the JVM really have a ton to offer me right now, but I don't think a fair comparison of concurrency-related stuff, either in terms of tooling, libraries, or the language itself (I'd give Go this, except that you can't build an unbounded buffered channel and at that point the use of channels for what I write rapidly approaches zero), is nearly as clear as you assert.
Perfect! More bifurcation in the industry due to regulatory overreach. What a great time to be alive!
Asa non-infant, I actually appreciated the graphics.
I think metaphysics is the more common technical term.
It's a valid disagreement, but compensation is arranged so the employee is getting the least amount possible the company can get away with paying. Exceptions exist, but generally, if somebody needs more money and you're already paying them the least amount you can, it's time to look at losing him / her vs paying more to keep somebody reliable. It's expensive to rehire, more expensive in almost every case plus risky.
How much do you think the industry has grown since 2013? How much do you think it will grow by 2018? Even if each one is a doubling, Tesla's part is pretty significant.
no, i'm not attached to my car, i just want some privacy and a quite area. i used to leave in 3 countries, changed a number of cities (from 50K to 10M) lived in all types of appartments and i finally have had enough of noisy neigbours in the middle of night.
Oh, that does sound good. I was expecting file sharing. Too bad it is Mac only. Not really fitting for a work tool.
My wife's mother used very traditional textbooks and schedules. Even with that constraint, my wife probably spent far more time outdoors than most kids.
Tell HN: Uber incentives for drivers is off-the-roof in India
In India, the incentive structure is like this:

INR 6,500 bonus for earning INR 1,500 in a day,

INR 6,000 for earning INR 1,100

and so on..

What is Uber expecting out of these huge incentives is out of my understanding. A driver now earns more than most of the software engineers in India (avg. salary being less than INR 2000 per day). Does Uber expect a behaviour change in the drivers that they will keep on behaving nicely to passengers even after taking away the incentives?

What effect will it have on the drivers after they take away the 6x incentive is what bothers me. How unhappy will that make them, earning INR 1,50,000 per month and then suddenly one day start earning INR 30,000 per month. I am sure they will no longer care about rating or passengers as much as they do now.

Why does it have to be this way? inevitably incentives are going to go away then why to show such dreams to drivers only to later crush them?
WW3 CAM MORON TOLD TO RESIGN
A Typescript JSON Mapper to keep us sane
Of course I assume that other people are concious, but I am nonetheless capable of imagining a person who is not.

And the point isn't whether such a thing is physically possible in our universe, merely that being able to conceive of such a thing identifies the distinction we're drawing. There is a notion of experience separate from the physical process that may cause it, because for any such process, we can imagine a world where it does not actually experience anything.
The title seem to suggest this has something to do with browser histories, but as far as I can tell from reading the article it's much worse: they want your ISP to keep a log of the web sites/other services you are using, and they want to get this log by simple request to your ISP (no VSL, subpoena, or warrant).

So restoring this option wouldn't help, maybe only using TOR or some VPN proxy would.
This theory has been examined. It is unlikely. First and foremost strength does not correlate with power, neither does violence. The most powerful people throughout history are not those that are strong or violent, but those that are well connected. Obama, Warren Buffet and Donald Trump are not known for their physical strength. Additionally, power correlates with age. Those that are older and weaker tend to be more powerful then younger people while younger people tend to be physically stronger but less powerful.

When the most powerful people throughout history are not simple minded violent brutes, it becomes unlikely for men to be in power due to physical strength or violence.

Personally, I do not believe that the reason is biological. Other than that I'm as befuddled as the rest of the anthropological field, I don't know why men have consistently been in power throughout the majority of human history, but the correlation cannot be denied.
Get a good book on OS X development in ObjC or Swift and download Xcode. Couple of weeks hacking on a toy project and away you go.
I mean the alternative that would exist today, absent coal.
This sounds like an excellent step in the right direction. I guess that's why the article implied that not all of the pages that saw greater CTR increased revenue.
I liked the presentation the most out of every aspect of the article. I don't think it's infantile.

If anything, I see the author's tone, bias, and perspective as problematic, but I suppose this is also just as subjective, and isn't a reason to not share an article.
Great post, fascinating and practical. Which is not something that happens a lot.
You're assuming everything is properly configured. A bug-free setup is essentially impossible.

The claim is that obfuscation makes it less likely that a mistake will be spotted by an attacker.

To be clear, I agree with you to the extent that a properly configured SSH server with good keys and no 0-day exploit is more effective than what I'm proposing. My point is rather that such a setup makes a lot of assumptions (key exchange, configuration, secure updates, etc...) and that obfuscation is a complementary security layer for when those things occasionally fail.
Thanks for a balanced perspective.

The fact that someone made a website mobprogramming.org is perhaps the biggest factor that indicts this idea as a silly fad.
If the laws stay in effect long enough, I wouldn't be surprised if a local startup beats U/L to the punch by better servicing Austin. Same like how there's chinese versions of lots of banned internet services.
I can go almost either way... I often find it more natural to include a (s)css file in my component's .js, and have webpack bring it in... then in the component's rendering set the className to a matching container in the scss. With scss, I can start with my variables/mixins include, and keep the more hierarchal stuff straight... It works pretty well, but I see the appeal of things like this library, aphrodite and the like.
Yes, exactly this. And it applies in many things, such as guaranteed basic income (what would that do to the money supply, to the labor supply, etc). Too many times we think of specific scenarios but those are misleading unless you take the big picture and all its moving pieces into account.
To add to this: Go's inexpressivity (hi, generics!) makes common patterns that I see in Kotlin, Java, and Scala (as well as Rust, off-JVM) makes error handling a complete bear, to the point where my eyebrows are really raised at vertex-four being downvoted for this.

The use of please-check-this error conditions instead of something like a Try<T, E> (Result<V, E> in Rust) and an inability to just map over these as 0- or 1-element collections is such a huge pain, and it certainly does matter when you're piling up multiple error-handling cases. Even more when you'd otherwise use Scala's `recover` to get back on a happy path. Go's inexpressivity directly impinges on one's ability to get things done.

(Food for thought: forgetting to handle the error case from Rust's Result<V, E> is a compiler error. Is "if err != nil" really that good an idea in such a universe?)
Drone Lifeguard
Are you on the team that made these new formats?

I'd love to know what sorts of things you do to avoid accidental clicks. I assume click location relative to the frame of the unit is part of it, and possible pausing to wait for swipe activity to confirm a click, but would really be interested in knowing more (I'm a buy-side ad guy).

Unfortunately, Google isn't the only one with this format, and on many pages I've had false clicks when scrolling through this format. To most users, they will have no clue whether this is a Google ad or not, and I'd be shocked if they didn't equate bad experiences with every network, regardless of whose ad was actually misbehaving.
It will never beat it in non relational queries also.
To answer why - it was suggested by someone that said it's new modern db standard, that NOSQL is clear winner then showed me comparison on their site with SQL queries, all looked like it was substitution for RDBMS but it's not.
What about it? Batteries recycle pretty well.
Most knitting machine manufacturers that targeted the prosumer market have gone out of business (or left the business of making knitting machines). However, there are large communities of owners who still keep the flame burning.

One of the most interesting hacks I've seen is from a German hackerspace, who have taken two Passap E6000 machines and merged them into a fully computer-controlled "Frankenpassap" (only one bed on a normal machine is dynamically controlled).

https://www.hackerspace-bamberg.de/Passap_pfaff_e6000

I have a Passap E6000 at home and will soon start working on reverse engineering the firmware in the computer that comes with the device so that we can start the process of migrating to a more modern toolchain.
I live in a townhouse with neighbors on both sides and never hear any of the neighbors (except for when their kids are playing in the back patio). Quality construction can go a long way toward giving you the privacy you desire. no need to separate houses by 30 feet of grass.
I used Perl for years, and it's still my go to language for quick text parsing. I stayed away from the bizzare "object oriented" syntax (They're not classes. They're packages, just called with arrow operators instead of like normal functions. But being Perl, you can just use the package and call the functions yourself because TMTOWTDI! (Blech.)) Also Perl's support (or at least Perl 5 (Does 6 even exist? It's like a unicorn like Duke Nukem Forever or Guns-n-Roses Chinese Democracy, only those eventually got released.)) for complex data structures (including multidimensional arrays) requires explicit reference instanteation and dereferencing, like C pointers. It's the biggest pain point.
If you have done mistake and need to escape yes bribe is relevant or you want something to happen faster again yes otherwise mostly if you are not in hurry or did not do anything wrong mostly need not pay anything. SOme police may still ask you to buy him a coffee or 50 to 500 rupees depending on ur urgency and his tightness
So, to steal a line... capitalism interprets regulations as damage and routes around them?
These packets won't be retransmitted or decoded by anyone for any purpose. They're on the incorrect BSSID. Think of a BSSID like a VLAN on an ethernet segment.

All this script will do is broadcast packets that jam the medium forcing folks to back off when they see the medium busy.

There are nastier ways to be nasty.

If you configure yourself to listen promiscuously, keep a list of all BSSIDs, you can send broadcast deauths with source MAC and BSSID on each.

If you see a data frame, you spoof the AP and send a deauth to the client, and spoof the client and send a deauth + disassoc to the AP.

Windows laptops are quite persistent - they'll reassociate and try to continue within about 30-50ms.

Apple OSX clients are pretty easy to kill. They'll get the !))) wifi sign if you're deauthing them every 100ms or so, and then they'll give up.

Depending on how fast your channel change code is, you can keep track of multiple channels and effectively perform 'shoot down' across multiple spectrum channels.

Some people might call this evil, but if an enterprise/retail deployment has someone deploying 'fake guest' wifi to steal user credentials or credit cards it is pretty important to shoot down the rogue access point.
> The question is whether we have justification to believe that it actually exists

I understood this to mean that you were doubting whether subjective experience actually exists, and I responded by arguing that it is not possible to doubt that your own subjective experience exists since you (I, at least) experience it directly, which is different than the class of now-refuted inferences that you were comparing it to in. I was not making any argument about where it comes from or what causes it.
Aesthetics matters a lot. Here is a simple example. Light text on a dark background tends to be more readable, but may depress some people. Dark text on a light background is the opposite.

It sounds stupid, but it matters.
> What that means is the problem is going to be pushed to someplace else, normally to a poorer place.

So then, do you agree that having high-traffic going through residential neighborhoods is a problem then?

The parent post's position, as far as I can tell[0], was that the claim "high traffic residential streets are a problem" is itself NIMBY. The argument being that since all streets are part of the same network and owned by the local government, all streets are the same and it doesn't matter which ones are put to the purpose of maximizing vehicle throughput.

In this thread I have made two arguments to the contrary:

- low-traffic residential streets can help absorb excess traffic when there is an occasional shock to the system (large numbers of visitors for a holiday, a major through-way is blocked, etc.)

- low-traffic residential streets enable more communal living.

In other words, there are goals other than maximizing the throughput of cars.

Experience tells me these benefits can be had by poor residential areas as well as rich ones. With this in mind, I think it is clear that high traffic residential areas are a problem that should be addressed. You and others have suggested a host of alternative options that should definitely be discussed. If someone just wants the problem to "go away" yet doesn't care or actively resists attempts to solve the problem on a larger level, then I agree that such a person is a NIMBY. I'm not arguing against the suggested solutions. I'm arguing why we need them.

[0]apologies to the parent post if I misrepresented.
I don't see how cars will have any impact on battery life. How many cars do we sell each year? Even if we assume 10% of cars are electric it is nothing but a drop in an ocean in terms of number of batteries being sold.

I am unable to see how Tesla car could have any impact on battery industry in terms of economy of scale. Any battery based solution for homes etc. could possibly bring economy of scale into picture.
I have all three browsers open on Mac OS with multiple tabs open in each. I measured the tab plus address bars of each:

- Firefox: 79px
- Chrome: 72px
- Safari: 61px
There is no shortage of people and companies trying. The trouble is that none of them have the operational experience to make it work.
They say that battery tech has been improving at 2% a year.

That would mean we should see a ~37% improvement between 2008 and 2016. Seems about right.