skysight-inc/HackerNews huggingface dataset:
Atom is essentially the same class of editor as emacs. Both have designs that can accomodate IDE features (so does vim, but it's more of an afterthought in that case), but normal usage is not IDE-like. Atom is essentially emacs built atop javascript+web rather than lisp+unix.
That article is more than a little hyberbolic. If you're talking about your home machine (which you probably are if you're doing some thing dumb like this), then the sudden lack of security isn't as big of a deal as the answer suggests. Theoretically you shouldn't have any malicious users around to make a mess of your suddenly compromised system.

In fact going down the list:

1. Irrelevant on a typical end user system
2. Certainly a problem, but not a showstopping one. Remote SSH logins will be broken for instance, but this won't prevent your machine from booting.
3. Blowing away the SUID/SGID bits would prevent the programs from running normally, but since you've opened up the rest of your permissions they might still work.
4. I've never personally seen that behavior, but I can believe it might happen. It would be pretty broken IMHO. What happens when root runs your script by hand for some reason?
5. This seems mostly irrelevant on an end user system.
6. Mostly irrelevant on end user systems.
7. Mostly irrelevant on end user systems. The dot in your path is also a bit of an overblown danger, as long as you have it at the end of your path. With the dot at the end a malicious user needs to basically typosquat in a directory they think an admin is going to be in. In terms of attack vectors it is a weak and fairly obvious one.
8. Destroying the ACLs seems like the least of your problems at this point. Restoring the permissions is going to require a full reinstall anyway.

So yeah, don't screw up the permissions on your system, but if you do it's not the end of the world. You should be able to save any data that wasn't already backed up and maybe toss out a few "I'm going to be offline for a bit while I reinstall" emails assuming you aren't on a multiuser system.

If you are on a multiuser system then it's far more of a catastrophe, as totally open permissions make the machine a candyland for an attacker. At this point the only thing you can do is pull the power and grab the OS install disks.
Wouldn't it be possible by using a global switch (ie: see "use strict" as an example). You could just switch to the default character encoding without breaking existings js websites/apps?
Just to clarify, I'm not suggesting that everyone should do this. But, if you work at Microsoft, and you think that your choice of browsers is unfairly judged whether or not you use Chrome or Edge, then I'd do the following: Show the first screenshot in two browsers (Chrome and Edge), and then show the remaining screenshots in my browser of choice. Or, show the first screenshot in Edge (or Chrome), and then show the remaining screenshots in the other browser.
That's pretty nice but the lack of plugins means I can't have LastPass/1Password, uBlock, etc, which kills it for me.
I had a similar experience with an immigration lawyer. Our lawyer didn't help much besides giving very broad directions, she gave us the wrong paperwork to fill out, which my wife and I had to redo from scratch upon discovering the problem. Then, on the day of the interview with USCIS (the "Are you really married? Show me the proof" interview and evidence dump), our lawyer failed to show up.

My wife and I did the interview on our own and thankfully got through it okay. On our way out of the building, we ran into our lawyer, who claimed that she got stuck in traffic and was very sorry. Needless to say, we fired her and we have filed all of our paperwork ourselves since this incident.

For my naturalization process, I will consider any other option other than a lawyer.
I actually have exactly zero skin in this game. I'm no fan of current copyright law, with it's ridiculously long terms. I'm posting from a throwaway because trashing Google, one of the biggest employers in the US, is a career-limiting move.
And this is exactly why "smart" people are counterproductive. Their "smart" solutions are not reproducible.
> I've always thought that being "smart" has everything to do with having a wealth of information and being able to draw connections between various facts and ideas.

Yes. My pet theory is that the brain is just a huge pattern matching engine. Formal education is mostly about training the pattern recognizer with new patterns.

Whenever you talk to people that are "uneducated" (or whatever word you may want to choose for that) that struggle with basic concepts, try to probe deeper. You'll find that, in many cases, they are being overwhelmed with new concepts being presented simultaneously.

People with extensive formal education will have been exposed to innumerable problems and concepts by the time they reach adulthood. There's a wealth of information the brain can use to speed up comprehension.

This is a pet theory though, being reinforced over the years by my own cognitive biases :)
Ethereum is Doomed
>It says it's wrong to be sexually attracted to children even without causing any harm.

The act of having sex with children at all causes them harm. Any sex with children is considered rape, because children can NEVER consent to any form of sexual activity. That's the actual "modern value" we hold, not the one you've misunderstood it to be.

That's why

>It's hard to make an argument against pedophilia (as a sexuality) which doesn't also argue against homosexuality.

Is an invalid statement. Homosexuality doesn't have to include raping other men, but pedophilia always involves raping (harming) children. Pedophilia "Just as a sexuality" can be considered immoral because the only way to express that desire is by harming children. That doesn't mean people should be punished just for being pedophiles, but obviously they need some form of counseling and to stay away from children.
The TechCrunch headline is "Peter Thiel was not kicked off Facebook’s board" which is actually worse than Gizmodo's headline.

https://techcrunch.com/2016/06/20/peter-thiel-was-not-kicked...
I've never sold on Amazon, so pardon the ignorance: does Amazon have some sort of 'escrow' service to hedge this risk for parties making transactions?
I think that the "training" of "System 1" is a key factor in allowing "System 2" to be powerful. This is beyond the scope of this AMA (or at least beyond my scope to try to put together a decent comment on this today).
Neural Network Trained on Donald Trump Transcripts (Twitter Acct)
Ask HN: Does anyone ever have any Slack Conversation Battles?
http://imgur.com/6HJY3Vd

So this conversation happened earlier and it made me start wondering:

Does anyone ever realize (I assume in hindsight?) that you end up going on 20+ line Slack replies/messages in a span of like a minute while trying to convey a thought or idea to the other side of the conversation?

It becomes a super fun activity when the other person starts "battling" with you, in the sense that you start breaking down any topic/subject(s) to their first principles and reason up from there.

The thing(s) to avoid is/are to try to keep all personal opinions out of it, as it could lead to a very heated discussion when it gets off-topic. lol.

This is a new thought to me today, and I/we also started using a "safe word" to move from topic to topic with different members of the team without hurting anyone's feelings. It then becomes super fun when talking about different things as we could figure out how to lead them into and tell them a story but then randomly drop the "safe word" on them to be able to switch to the next task.

The word of the day is "strawberries".

Are these actual things or do I/we (members of my team) only do it with friends who also type relatively fast?

What are some records of Slack totals/lengths of replies/messages before a reply? (from an active human!)
Or maybe - Prime members?

It's less likely a scammer will pay for prime - it certainly reduces the profit margins for them.

IMHO Amazon could use this to their advantage - reduce fraud risk for sellers when selling to Prime members and encourage a 2% discount for them or something similar...
Right, which is why training specificity is a thing. You can train different than you play/compete, but you have to target very carefully, especially as you progress.
There is evidence to support the claim. The judge released information that he wasn't supposed to (judge reversed the release later), and he set the first court day on the day of the GOP convention. There's a few other things too.

How is that no evidence? That is evidence to support the claim. Is it proof? Is it enough to condemn the judge? I don't know, but it is false to say that Trump came out of nowhere with this and has no evidence.
Wow I love this. Yes we had forgotten, bring on that interactivity!
As part of a presentation I did at a local OWASP chapter, here are some numbers based on just using CPython's Hashlib processing of 14,000,000 someodd passwords:

Intel Xeon E5-1620 3.6 GHz:
SHA: 8.16 seconds,
SHA256: 11.01 seconds,
MD5: 8.7 seconds

AMD FX-8320 3.5 GHz:
SHA: 10.63 seconds,
SHA256: 13.49 seconds,
MD5: 10.06 second

Intel Celeron N2840 2.2 GHz:
SHA: 32.4 seconds,
SHA256: 39.75 seconds,
MD5: 28.95 seconds

Intel Pentium M 1.7 GHz:
SHA: 37.98 seconds,
SHA256: 48.12 seconds,
MD5: 34.49 seconds

SHA512 isn't going to make it much better.
> I would love to see equivalent for Docker Toolkit, Docker for Mac, and Docker for Windows

Take a gander at https://www.openshift.org/vm/ ? Kubernetes based.
possible takeaway: even Alan Kay knows not to wade into the religious war that is vi-or-emacs ;-)
Has any thought been put into the dangers of literally millions of pounds of carbon nanotubes floating around with nothing to do? CO2 is evil, but some people suspect carbon nanotubes could be the next asbestos if they become widespread.

Wouldn't a substantial pile of such tubes be a serious fire hazard? Aren't they essentially the carbon version of steel wool, ie much more flammable than solid carbon?
We don't show leading/trailing whitespace diffs unless the diff consists only of leading/trailing whitespace changes.

This is sort of what we do when diffing:

* when we need to compare two buffers, we represent them as two arrays of lines

* we then proceed to trim() each line in both arrays

* we then use a greedy optimization where the first N and the last M lines that are equal (post trimming) in both arrays are dropped from further computation

* we then run a LCS algorithm over the remaining lines to find the diffs

It is important to note that the same two arrays of lines can have multiple equal longest common substrings. This method [1] could get some love and could try to recover in some of these cases.

[1] https://github.com/Microsoft/vscode/blob/5b9ec15ce526decc5dd...
I think you should either come up with a way to put your argument across that doesn't come across as contemptuous and dismissive of anyone who doesn't agree with you, or give up imagining that by continuing to speak in this fashion you're actually helping bring about the outcome you prefer.
Exploiting Recursion in the Linux Kernel
Weak passwords are still weak, but things like bcrypt buy you time. A bcrypt configuration might have hashing take 250ms on a server's Xeon CPU (as opposed to nanoseconds with a sha-based hash). You can try the password 'password' on say 50k hashes that were dumped, but it will take about 3.5 hours. You can get this time down by parallelizing or with better hardware like GPUs / FPGAs / ASICs, but you're still looking at a base time of 3.5 hours per attempt to go through each account. Or if you're only targeting one account, 3.5 hours to try 50k words.

If the server had bcrypt configured to take a second per password, multiple everything by 4. And so on. What I think is needed as a supplement to "use bcrypt / scrypt" is a "and use it this way so you don't accidentally open your server to DoSing or give a poor experience", because a 10 seconds-to-compute-on-a-Xeon hash is great from a security standpoint if your hashes get leaked, it sucks from a user experience to have to wait at least 10 seconds to login, and if you have to service multiple logins at once your server's not going to be able to do anything else if you just use bcrypt/scrypt synchronously.
ponzi's are illegal, and not for being misleading, for having the financial structure of a "pyramid scheme". "disclosing" the structure makes it easier to prove that they fit what has been made illegal.
I found this YouTube presentation very informative about how an HF firm uses Java for live trading...

Just one awesome fact...they structured their code such that they only have one GC event a day (and it's tuned to happen at night). Watch it, pretty cool compared to anyone doing plain vanilla java dev at an enterprise.

https://www.youtube.com/watch?v=iINk7x44MmM
Among other things, Monaco is a web page component, while Notepad++ is a program you download.

I'm guessing you glanced at the page and thought the editors were screenshots.
Sam Altman: Trump is evoking memories of Hitler
Wow, talk about a psychological blind spot...the entire time, from reading the submitted title to the article itself, I had read "Twitch" as "Twitter" (while half-wondering, "why are they going after news broadcasters?"). Inflated follower counts are a problem on Twitter, especially when lending credibility to an account, but I don't think Twitter will really go out of its way to fight them. Users like having that followers number be high, no matter the lack of substance, as evidence at how pissed everyone was when Instagram cleaned house...some users even felt they "earned" those spam follows: http://www.businessinsider.com/chaos-ensues-as-instagram-del...
Plus an hour each day of cooking and cleaning up. The median american salary is about 50K, which is about $24 an hour, so lets say it costs $6/7 a day to eat crappy, and $25/30 to eat well.
Does it suck getting old for you? Do you have stamina to make new stuff?

I'm old, very hard to stay on top of all the changes.
Maybe Google doesn't really need to create sales presentations. It's really hard to get good looking stuff out of Docs or Slides.

Importing vectors like .eps is not possible.
Creating a new document to a directory using your business template is impossible.
Copies of documents are created in root directory. Moving requires navigating in a tiny window without search. (Makes template usage even worse.)
There are no small caps.
You can't load custom fonts.
No log axis in Sheets. (There is histogram though so it's better than Excel!)
No backups, no change management, easy to destroy whole google drive by one user dragging wrong. NOBODY SHOULD EVER DRAG ANYTHING.

It feels like an uneven product.
Oh hadn't seen this comment. Here's a BBC article which talks about some of the research: http://www.bbc.com/news/health-18392873

Of course high paternal age also has other risks, but there's a sweet spot sometime between 25 and 30.
This is complete nonsense - save your time, don't bother reading it.

To the author, if you really want to be taken seriously, see my earlier comment here:

https://news.ycombinator.com/item?id=11932311

Flagged.
Edit: sorry for re-stating some of your points. I'm sort of delirious with a head cold right now.

What's pretty interesting is that it could be both.

Sellers get's a return. Upon receiving returned item they check that packaging is still sealed and when it is, they send it back to amazon's fulfillment center to be sold again.

Amazon receives the item. Amazon's system (obviously) doesn't open boxes. They at the very most check the barcode, visually inspect for sealed box, and check weight.

Now the items are co-mingled with other new items

Now a buyer can receive a box of clay when they buy from an entirely different seller.

Co-mingled items allow for a ton of fraud. They also save Amazon a lot of money on logistics. They make prime shipping possible. For Amazon, the acceptable rate of fraud is very high because everyone wants to be on their marketplace (huge sales volume) and the system they use allows them to offer such value at such a low cost.
What is the license for this? What exactly do you mean by open source?
For those wondering why it's used, here's a write-up I found on Eric Raymond's blog comparing Fortran and C:

http://www.ibiblio.org/pub/languages/fortran/ch1-2.html

Some comparisons are dated. However, I think the older variants still have advantages in readability, more clear semantics, semantics closer to algorithm itself (esp mathematical functions), less guessing by compiler for optimizations, and maybe a few others. Those I listed seem to still be advantages over C in general or as it's commonly used.
> The answer is that there are much cheaper ways to obtain the placebo effect here than to give these companies your money.

There might be cheaper ways, but paying money has an impact too. That's why more expensive painkillers often work better than generic ones, despite having identical ingredients [1].

[1] https://www.sciencedaily.com/releases/2008/03/080304173339.h...
I was using osx beta but uninstalled it for now because docker was eating all my space without recovering it after deleting containers.
Anybody using rkt for dev wants to share their experiences, I am thinking about trying it but would not invest time if it is not ready yet.
> Judge Gonzalo Curiel, the judge presiding over the Trump university case, is a member of the San Diego La Raza Lawyers Association. La Raza is a group that advocates for a path to citizenship for all illegal immigrants.

This is completely irrelevant, because most the judge's rulings that Trump is upset about occurred before Trump flip flopped on immigration from his former support for a path to citizenship to his current opposition.
Let me both acknowledge your questions, and also acknowledge that this forum (the media authoring tools) are not in scale with the needed answers ...
Thanks. I was aware of asepsis, not aware of DeathToDSStore, but neither works on El Capitan unless you turn off SIP.

I find it so surprising that there's no way to disable this.
Alan,
Thank you for doing this AMA!

I would love to hear your thoughts on how to "train" "System 1", in order to make "System 2" more powerful. Not necessarily here, due to the time factor, but if you find some time to think more deeply on this, please let me know and we can think through this together.
I'm overall pretty optimistic about AWS, but if they do end up losing to another platform I would expect it to be due to this general issue of not iterating on their offerings enough. I can't really recall them ever deprecating a service, e.g. forking something to a v2 and killing off v1after a certain amount of time. So with everything they release they only give themselves one chance to get the core of it right.
I'm assuming Magic Pony is something Twitter will ride upon to bring themselves to profitability.
CTO of OpenAI ;)
I think in general if a supplement has a positive result on health/cognition, that means you were deficient. CoQ10, for example, is produced by your body. You would think then, it would produce as much as you need.
Extensions are coming with the anniversary update in a month or so, I'm excited!
http://www.templeos.org/Wb/Doc/Demands.html#l1

http://www.templeos.org/Wb/Doc/StdTempleOSPC.html#l1

http://www.templeos.org/Wb/Home/Web/TAD/SolarPanelCPU.html#l...

God says...
diagnosticians dragonfly safe's nuncios degenerated gulling explain spidery lozenges moose wolfish churls firecracker's raggediest tasseling fanatic's spirituality's Angoras owl dusted vacancies outnumbers gimmickry Cornelia's Nanking's squad conservatory matrix's shipboard terminator pimped woodcut
I forgot root password on my old IRIX / SGI Octane2 and had to "crack" it a few months ago. Turned out it was using full eight characters and was on the tail-end of the alphabet. It took less than a day to guess it on an older two-gpu 680GTX machine with cudaHashcat. Also, how awesome of IRIX guys was to not allow more than 8 characters in a password?
I can't get GPU instances on GCE and high CPU instances max out at 32 vCPU which is a blocker for me.

After further review, they don't seem to have a product similar to SNS, looks like I might be able to do most of the same things with Pub/Sub though.
Last time I seriously tried using it, it seemed unnecessarily CPU-hungry and my battery life suffered as a result. That fact alone was enough to get me to stop using it. I have a weird thing about inefficient software in general, but in this case its inefficiency was actually inconveniencing me. With my good old Vim+tmux workflow, my 12" Macbook claims it'll go for 14-15 hours, though I haven't ever fully tested that claim.
Hot-editing updates behavior while keeping state, causing wildly unpredictable behavior given the way objects are constructed from classes in today's languages. The current approach to OO is to bootstrap fresh state from an external source every time the behavior changes so guarantees can be made about the interaction between behavior and state. It seems to me the equivalent of using a wheelchair because you might stumble while walking, the concern is genuine, but the cure is possibly worse than the affliction.

I don't know what the solution is. Perhaps a language with a fundamentally different view of objects, maybe as an ancestry of deltas of state/behavior pairings, somewhat like prototypes but inheriting by versioning and incrementally changing so that state and behavior always match up but still allowing you to revert to a working version. Likely Alan has some better ideas on what sort of language we need.
Thanks! Created https://github.com/Microsoft/monaco-editor/issues/6
There may be images or volumes you should remove when no longer required.
If you feel like elaborating on this comment, I'd be most curious to read more detail.
VSCode was actually based on a web-based version that was previously launched in Azure and called... Monaco https://dzone.com/articles/first-look-visual-studio
Thanks, that should be a good start. [1] does not demonstrate context-dependent completions, but I guess it should be possible, and maybe [2] helps there. It's also nice that in the playground intellisense for the monaco API is enabled.
It looks pretty much like what it looked like back in 2015?

https://web.archive.org/web/20150818043020/https://www.googl...

https://news.ycombinator.com/item?id=10073724
These songs cost upwards of $14 apiece, and people are actually paying