skysight-inc/HackerNews huggingface dataset:
What happens in a preemption? An OS would have to manage this on a per-process level to ensure that a lock doesn't stick around on a preemption. Now the OS has to remember locking info per-process. Also, on resumption of a process, an OS would need a way of locking, but bypassing the lock to set the registers that have been manipulated, without other CPUs interfering.

Your idea is nifty, but it would be a nightmare to implement.
I believe this is what OP is referring to https://imgur.com/a/YMi6K#97
That's a reason to turn on autocomplete in your signup form, not to force it on in the browser.
None of this is responsive to the comment I just wrote. I'm pretty happy to leave this part of the thread where it is, though.
They should support Web playback like Google Music. I feel this is a huge issue for me when switching between computers.
LNKD closed at $131 per share on Friday and opened at $191 on Monday. That's a $60 move. The news happening outside of trading hours means that all the bid/offers didn't get executed, just that the valuation changed of currently held stock. If it happened during market hours, that move would 1) be more exaggerated due to human psychology, and 2) you'd actually be able to trade the news. If you managed to catch 1,000 shares at 131 before it jumped, you'd be making $60k on an investment of $131k. If you managed to catch only half of the move on 10,000 shares, that's $300k in profit on a $1.3m investment. To put it in perspective, day 1 on my job I was given $1m to "play with and get to know my keyboard shortcuts".

http://f.ptcdn.info/713/028/000/1424666722-5-o.png

In the image above, the stock price is 3.85. The green columns are bid/ask. It shows that there are 40,000 shares people are trying to buy at 3.84, 33,100 shares to buy at 3.82, etc. On the other side, there are 5 million shares someone is trying to sell at 3.86. If this imaginary stock suddenly was bought for $5.00 per share, You'd be able to buy 5 million shares at 3.86, (for about a $20m investment) and sell all of that for $5, for a profit of $5.7m (this is obviously the ideal case. More likely, those people selling at 3.86 would try to pull their offers before people could buy it, and other people would be trying to buy those 5m shares as well).

In that context and in regards to LNKD, it didn't really trade all that much volume prior to this, so you wouldn't be able to buy all that much stock. But a $60 change is pretty massive. Even catching a fraction of the move is pretty much "free money" just for having your hands on the keyboard.
I see.

So if my data consists of time series I use column stores?

Is this the only use case? The page talks about games.
> As an example, if you have an address input field in your CRM tool that you don't want Chrome to Autofill, you can give it semantic meaning that makes sense relative to what you're asking for: e.g. autocomplete="new-user-street-address". If Chrome encounters that, it won't try and autofill the field.

Reminds me of the good old days of making things work with IE6.

> Again, thanks to everyone for your comments. We look forward to continuing the conversation.

Sure you do. Then why is commenting closed?[1]

[1]: See the "Restricted- Only users with EditIssue permission may comment." box on the left pane.
Nikola Motor gets $2.3B worth of preorders for 2,000HP, hybrid semi-trailer
Let me clarify a bit then: My criticisms of RSA stem from studying how people implement it in cryptography libraries.

More people implement PKCS1v1.5 padding than implement RSAES-OAEP in their application-layer crypto, and that's a problem.

Conversely, most of the applications I've analyzed that wanted ECDSA/ECDH used OpenSSL or libsodium.

Guess which ones were broken with chosen-ciphertext attacks.

If you want a theoretical concern: Index calculus attacks.

If you want a practical concern: Look at the traps that cause implementations to be comically insecure.
That's a straw man and I assume you know it. Conversations on the internet can be just as nuanced as IRL conversations.
Is it, though? In my experience YouTube (or is it the copyright owners?) are quite aggressive about scanning for unauthorised music and removing it - to the point where you actually have to be careful about things like having the radio on in the background during a video.

In fact, they even provide tools to help you fix videos that have audio copyright claims against them...

https://support.google.com/youtube/answer/2902117?hl=en
Some years ago we had trouble with autocomplete. Browsers would fill in credit card details and customers would call us where we've got their credit card details from. Or they we're completed into a different website and people called us why we gave the other website the CC details.
Yes, it's almost an exactly analogous situation. The difficulty is that you're going against the second law of thermodynamics in both cases.
I prefer the “Securing Debian Manual” – it’s an official manual from the Debian project.

https://www.debian.org/doc/manuals/securing-debian-howto/
I agree.

And nothing prevents us from dropping, on ~/.js

setTimeout(() => {
Array.from(
document.querySelectorAll('[autocomplete]')
).forEach(
el => el.removeAttribute('autocomplete')
);
}, 250);
My biggest concern with being on a VPS like Linode, once you're all done securing yourself and binding services to the local LAN IP, is an attack from within the network. The VPS you own is also accessible by others on the same subnet, contrary to what you might assume.

I'd love to see a ufw guide for whitelisting only your own internal IPs to be allowed access to any services for ultimate security.
I wrote "no straightforward way" in anticipation of someone coming up with some bizarre way to adapt AES to a small key size. If we all just stipulate that we understand how block ciphers work, we don't have to waste time in blind alleys like this.
Container Usage Survey – June 2016 by Kubernetes.io
That's an open problem right now. Lots of proposals, insufficient evidence to resolve the question.
Yes, that is what I'm saying.
Feedback is broken
Feedback is broken.

It comes through in a variety of channels - your mom, your first user, the users who never come back.

You can't control where feedback comes from. The only thing you can control is what you do with feedback.

Here's what most people do:
They collect feedback, read it, and say thank you. If they keep hearing the same feedback, they put it into a spreadsheet. Maybe they synthesize the feedback in a 'power hour' and write up a few user stories. The team rallies behind these stories, and they make changes to improve the product.

But a user story lacks the authenticity of the actual feedback. A user story is a manifestation of feedback.

It's not scalable to talk to users face-to-face. In 30 minutes, users drop product-shaping quotes or highlight inconsistencies sparingly. Product people rarely have the ability to consistently talk to users. Developers definitely don't.

So what do you do? You collect feedback and funnel it into spreadsheets.

There is one alternative. Get users to record videos, and force them to be short. A short video does two things:

1. Short videos force users to make their feedback concise.
2. Short videos are easy to share, watch, and digest.

dscout is building a product that gives you short user feedback videos––videos that are similar to a user talking face-to-face, and that are short enough that you can watch, analyze, and send the feedback among your team.

The product is called Sprint, designed to be fast enough for a team that doesn't have time to collect, organize, process, and disperse feedback. In fact, Sprint does virtually all of that for you.
There is a page detailing the rationale for the permissions located here: https://gizmote.ca/permissions.html
Here's the link: http://dscout.com/research/sprint
Archive.org is currently down
How is that different? Neither Scala nor OCaml rank in the top 10 programming languages according to several metrics/organisations [1-5]. Keeping in mind that programming language use is a heavily skewed distribution, OCaml and Scala have almost zero usage relative to the big ones. So, again I must ask, how is this relevant to the masses?

[1] http://www.tiobe.com/tiobe_index

[2] http://pypl.github.io/PYPL.html

[3] http://spectrum.ieee.org/computing/software/the-2015-top-ten...

[4] http://redmonk.com/sogrady/2016/02/19/language-rankings-1-16...

[5] http://www.codingdojo.com/blog/9-most-in-demand-programming-...
She unequivocally told him that she didn't want any romantic or sexual involvement.

>As politely as I could, I explained, “You can have the floor, and I’ll take my bed, or the other way around. If you’re comfortable with it, we can share my bed, as friends. Meaning no physical contact.”

True misunderstandings are easily cleared up. Predatory "misunderstandings" are not.
> Sure you do. Then why is commenting closed?

From the post:

> All this said, we're still learning. So we would like to better understand your use cases for setting autocomplete=off. To have that conversation in a more focused manner, I've created a new bug: crbug.com/587466. We're going to try and keep that conversation focused and productive, so we want to avoid "+1s" and the like. I'll be closing this bug in the meantime.

Commenting is open at https://crbug.com/587466.
Nice work but again the same issue with all the permissions that are absolutely not necessary! I wish someone could explain this!
Did you consider reading the helpful FAQ on their website http://jacobappelbaum.net/? They explain in detail why they aren't seeking prosecution.
Introduction to Osquery for Threat Detection and DFIR
I agree with this 100%. Since I started using Steam several years ago I haven't pirated any game. It's actually more of a hassle to torrent a game, unpack it, mount the iso, get it installed, and hope that it runs normally. Steam already has my credit card info saved and within four clicks I can have a game downloading.
Gosh, wake me up in 50 years, I can't wait to learn what is the nature of dark energy and what lays beyond standard model.
That's relatively recent. The early popularity of Youtube was built on offering streaming access to other peoples' content for free.
You don't notice when things go well. If you have a good experience with the Fire Department, you aren't going to say "wow, I wish we could take down that institution". It just disappears from your mind.

I'm sure there's a term for this, but I don't know what it is.
It's hard not to question the character of adults who put themselves in positions like this, repeatedly, and then whine about the (frankly not-so-injurious) outcome on the Internet.

And yes, to some extent you can say this of both Appelbaum and Lovecruft. I can't say if Appelbaum is being targeted for social termination, or whatever the three-letter agencies call it these days... but I will say that if he were, I think the story would read much like this, where a lot of his acquaintances are encouraged to pile on with specific yet non-actionable accusations.

See the Julian Assange 'rape' case for another example where his supposed crime was actionable, but only in a jurisdiction with laws that 99% of the world finds unnecessary. It's absurd to think that Assange would have found himself facing rape accusations if he hadn't already painted a target on his back, and that seems likely to be true for Appelbaum as well.
You have a good point.

Perhaps one could say they are "trying" to pay content providers, but are just not doing as good a job as iTunes.

Apple has far better control over iTunes, than Google has over Youtube. Youtube is just a different animal.
Silly Microsoft.

Nigerian Scammers say they are from Nigeria because that's what makes then "Nigerian Scammers".

Scammers who say they are from Cameroon or Botswana are "Cameroonian Scammers" and "Botswanian Scammers", respectively and not, "Nigerian Scammers".

We might ask why Nigeria is a popular choice among scammers, as the country to which to claim a connection or origin. But that is a different question. The article seems to be trying to answer that question, but mostly fails. Yes, the point is well understood that scammers have to pitch their proposal in such a way that only the gullible will bite, who are likely to follow through. However, it doesn't answer, "why specifically Nigeria?" Because to someone of reasonable intellect, a scam letter claiming connections to Cameroon is just as "comical" as one claiming connections to Nigeria.

Let me offer a hypothesis.

The choice of Nigeria may simply be some sort of unquestioned tradition among scammers.

Perhaps it like the proverbial "onion in the varnish" (written about by our dearly beloved Paul Graham himself: http://paulgraham.com/arcll1.html).

Maybe scammers learn scamming from other scammers via some hand-me-down "Scamming HOWTO" documents, and those documents claim that using Nigeria works (so just use it and don't question it). If the scammer newbies tried Cameroon instead, they might find that it also works just as well, but they don't; they stick with the shibboleth of using the "tried and true" Nigeria.

Perhaps at some time in history, the name Nigeria did actually invoke images of financial corruption and could specifically appeal to some gullible person's sense of greed. (Just like the onion in the varnish did once help to identify temperature by how fast it caramelizes.) Today, Nigeria isn't any sort of "poster country" for corruption in the popular imagination.

Interestingly, Nigeria is even used in scams that don't have to do with financial corruption. Years ago, some woman claiming to be from Nigeria sent me links to her profile: a dating scam! Just for fun, I started to send "her" some conversations, discussing all sorts of Nigerian matters that I could google up: current events in Nigeria and such. Then the story turned that "she" is actually in Portland Oregon, but originally from Nigeria. LOL ...

Basically, scammers seem to be quite stupidly clinging to some formula involving Nigeria, which they possibly pick up from their predecessors, and are even naively applying it in irrelevant ways which have nothing to do with any connection between Nigeria and corruption.
3 Ways to Boost Your Metabolism Every Morning
Is TDD important for Development?
> CiPHPerCoder listed four things he enjoys doing over his weekends. I would love to have a conversation about those things with him because it also adds to the variety of conversations I get to have.

Sorry, would have responded sooner but HN's rate-limits kicked in.

> If you don't like watching movies or playing video games, then it's very difficult to have a fun conversation about those things.

I do enjoy those activities, but I accepted a lot of responsibility (especially with making secure PHP code-- a feat some infosec folks claim is inherently impossible) and intend to finish what I started. That means missing out on a lot of great movies (Warcraft, Zootopia) and video games (OverWatch) that my friends are all able to enjoy.

Ultimately, I believe the work I'm doing today will make a difference tomorrow. Whether I'll be able to capture any of that value for myself remains to be seen.
Vim, that's all i use and i like it, sometimes i use Sublime when i feel turbo-lazy.

But i despise windows for development in any stack that's not part of microsoft's. Maybe going with xterminals would do it for you?
Did you do a double blind test between an uncompressed CD track and same track in 320 kbps (same master — not vinyl, not "mastered for iTunes)? Did you really hear the difference in statistically significant number of trials?
These companies selling Ubuntu machines are still charging more for the hardware than someone else selling the same thing with Windows installed. The reason I want to buy a machine with Ubuntu installed is because I don't want to be forced to pay $99 for a MS license. But that doesn't mean I want to pay someone else $199 to install Ubuntu.

Building a machine from parts from NewEgg gets you a machine without Windows installed, without paying $99 or $199 for OS installation, doesn't take very much time or knowledge, and also helps NewEgg fight patent trolls.
Thanks for posting this, it's easy to forget the distinction between the two. I was just thinking that it's awful inconsiderate to have a stance against piracy given that he himself literally asked people to pirate his music, but there is a difference between people sharing information vs. a platform monetizing it.
"You can prove anything if you pretend wildly improbable freak situations are somehow representative of reality."

That's true, but what is represented in the comic is far from "wildly improbable" and in fact comes across as pretty realistic. That's why many people like it.

It can't be that hard to believe that there are many situations where a person has several small things, often not worth studying, wrong in their lives that compound over time. That's the point.

At the end of the day, I think that we both agree more than not and that you're more taking issue with the fact that I said "impossible to argue" than the larger point, which is totally fine because it was a melodramatic thing to say.

Details the comic got right (btw, comic depicts Australia I believe, but it's equally applicable to US so we'll go with that, it's also hard to attribute the later panels to one given, testable factor, as what's depicted is the result of all the small things in life):

Houses with extended family: "57 million Americans now live in some sort of multigenerational configuration. That number has doubled since 1980," including 36% of young adults [1]

Frequent illness: "The Connecticut Commission on Children reports that children who live in poverty experience more illness than children in more affluent homes." [2]

Parents working 2 jobs: "more than 7 million people in this country were holding 2 or more jobs. That’s 5% of the total workforce" [3] The Bureau of Labor Statistics number doesn't count jobs for cash etc.

low income=shitty schools. not even going to bother to search that one.

working while in school (less time to network, study etc.): "over 78% of undergraduate students work" DOE [4]

Anyways, I'm glad you read the comic.

A lot of that stuff seems really self evident to me, but here are just some sources from random googling.
[1]: http://www.newsweek.com/why-multiple-generations-families-ch...
[2] http://www.livestrong.com/article/229181-effects-of-low-fami...
[3] https://toughnickel.com/finding-job/Working-2-or-More-Jobs (from Bureau of Labor Statistics)
[4] http://nces.ed.gov/fastfacts/display.asp?id=77
They did that first: http://jacobappelbaum.net/ <-- 10 collected accounts from people that Jake has sexually assaulted.
Is there a similar guide for Windows servers out there?
Truly an unbelievably jaunty little sound considering that it represents the entire mass of our solar system being converted into energy. Yow.
This is only true because you have to drive through the wasteland that is the suburbs to get out of the city. In places without such excessive suburban sprawl you can get out of the city much more easily.
For the most part, we concentrate on quantities far away from the sources as these are what we have a chance to measure and can more easily intuit. There are however, extremely precise simulations of GR that can numerically simulate the spacetime around close to mergers which of course includes all of these effects.
I think you have a strong point that I hadn't considered in exactly these terms before. But (for example following your discussion with geofft) I'd suggest that it would best be qualified with "if you don't have backwards-compatibility considerations", since a lot of people continuing to use mechanisms that provide a flexible keylength parameter do have these considerations.
1) I think you're underestimating the number of shops that ARE "in trouble". There's a lot more tech-need in the world than tech-capable people right now, and with the places that have resources and organization gobbling up people, a lot of smaller shops (small startups, govt shops, small non-startup businesses) DO have indispensable people. And often those people will want to stay there. As for becoming indispensable on purpose...I'm sure some people do this, but most don't. This leads me to #2 below.

2) ...All of which is irrelevant since "indispensable" was mild hyperbole for "important/beneficial/worth keeping" in this discussion. I suppose I'll take the hit in the name of accuracy.
Ah! Well that's what I get for skimming through the post.

I stand by the IE6 comment though.
You have to select the airline and buy the ticket before you get that map, don't you? By then it's too late. I'm talking about the initial search process, where you decide which flight you're going to take. The only data present are the price, arrival & departure times, and the airline name.
“fuck your startup” gear discount for HN, use HNMYMUSE
Google's Search input field has autocomplete="off" setting. This is one of the popular use case I think.
You are skipping the whole section where he asked and she said no. Do you not find /consent/ a relevant part of the conversation?
I haven't synced my iPhone with iTunes in around 3 years. The only cost is iTunes Match (£25 per year) which puts all of my music in the cloud and available to my device.
Beyond this, a lot of Steam users are familiar with the paradox that Steam is now the opposite of piracy because Steam sales drive so many users to over-buy games just because they're on sale. This drives sales of back catalog releases and provides additional revenue that traditional box software products oftentimes do not capture.

The end result is many Steam users have vast libraries of games that they have either never even installed let alone played for more than 30 minutes. This was common with many of us that used to practice piracy, but now the excess is captured as some revenue rather than none.
5 Great Legal Research Alternatives to LexisNexis
> Yeah but this musician provides free downloads of his music and high quality garage band files for a low price. That makes it somewhat different..

After making loads of money in the 90s from the very music industry he despises now. It's easy to give stuff for free when you are already rich.
Analytical and Critical Thinking
That encoding requires you to be a type system expert, and write reams of additional code surrounding the actual code. That additional code has to be well thought out and designed; proofs don't just pop out of thin air, all ready to go and represented as type via Curry-Howard!

Ordinary code does not encode very interesting things about itself via its typing. Well typed usually just means "there is no trivial mistake here", on about the same level as a missing semicolon in a C struct declaration.
Redis Production Checklist
* One time password fields.
* Admin pages for dealing with users
* CC virtual terminals
* Any time that the data being collected is about a third party.
Steam does have region-locked keys though. And some games don't have a purchase button from my region.
That would be a negative user experience, given the prevalence of legacy forms on the web. Example: "Why does this autocomplete feature fail most of the time?"
How IoT will change the job market
IEX – the good, the bad, and the ugly
I think he's talking about the server.

The only two servers I'm aware of is the LE server and the LE staging server which both run the same software.

It would be really cool to get another CA giving out certs using the protocol.
Supporting HTTP/2 for Google Chrome Users
Do your tools/platforms work on Windows? I do full-stack dev on Windows using quite a few of the same tools you've listed. Solves the latency problem and hassle of a VM or similar.

GitHub for Windows comes with posh git, which gives you a linux-y shell on PowerShell -- ssh, basic commands like ls, git of course. That's been all I've needed that is sort of "special" to Windows.