skysight-inc/HackerNews huggingface dataset:
Yes, but young girls being forcibly gang raped is a far cry from what is laid out in this article.

Yes, the action is on the abuser. I never once said the blame is on the victim. However, most of what the author has laid out is "He is a jerk, people have said he is a jerk, he takes advantage of people, etc". Not "He forcibly raped me and others." So - as an individual - taking very simple steps, like the ones I outlined in my first comment, are only common sense, and can only work in said individual's favor.

I've read some of this author's other posts, including the one that talks specifically about her relationship with Appelbaum (including consensual sexual acts). Calling her a victim because she was taken advantage of, on the same level the girls in Australia you mentioned who were forcibly gang raped are victims, is absurd.

Edit: Leaving the above alone, but on further inspection, it looks like several people have claimed that he "sexually assaulted" them. Now, if true, they should have reported these things to the police immediately. However, I went ahead and read through the stories on the Appelbaum shame website. In every one of the instances, the victim put themselves in a situation to be taken advantage of by this scumbag - drinking heavily enough to black out with him, sleeping in the same bed as him, etc.

Am I defending him? Hell no. But something has to be said about taking responsibility for one's own safety and well being, and being intelligent about not getting into situations like these.
Is it ok to go around publicly saying "we got into YC" when it's just a fellowship?
Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
Ask HN: Authenticator app with push notifications?
Today, I just saw an announcement by Google that they are releasing a feature for their Google Apps customers which allows users to receive a push notification on their phone for Multi Factor Authentication (MFA) [1].

For a long time now, I have been thinking about creating an app which would allow users to receive a push notification on their phone in order to provide the MFA code directly to their browser (via a browser plugin). It could work with any current site which requires a MFA code that can be generated from an authenticator app on your phone.

Would you use such an app? Would you pay monthly for the push notifications feature and for developers to maintain/add new site integrations? Why or why not?

Also, which authenticator app do you currently use and are you happy with it? Previously, I used the Google Authenticator app [2], but I recently started using Authy [3] and the UX is dramatically better IMO. I'm asking to get a sense of which features are important to developers who use these apps on a daily basis (AWS, GitHub, etc).

Thanks!

[1] https://googleappsupdates.blogspot.co.uk/2016/06/new-settings-for-2-step-verification.html

[2] https://support.google.com/accounts/answer/1066447?hl=en

[3] https://www.authy.com/app/
Joist lays off 60 employees as company relocates to San Francisco
I feel like lots of people here are patting each other on the back about a snipey "innocent until proven guilty" argument they've derived by cutting one of this post's sentences in half. No, this post does not say it's "okay to assume everyone accused is guilty for all intents and purposes".
Pay isn't everything though. Consider the case of immigrants who may need to be continuously employed to remain in the united states, or the more common case of people who depend on their employer for health insurance coverage.
In fact, to go farther, some of the live chat support widgets on sites have a feature where they show the support rep what you've typed as you're typing, before sending.
I do think that it matters how someone is fired on the spot though. I'd say firing someone on the spot is about the same as giving them a few weeks notice if you also give them full pay for those weeks and also officially end the employment after that period. I'd rather take a few days off and get extra time to look for a new job instead of coming into work at a company who is letting me go in a few weeks.
Good point.

>
Success is more about being at the right place at the right time rather then being the right person.
Grew up in the west end and went to elementary school there before the school moved to some countryside and still lived there until highschool before parents split… it was bad, but when I was younger it never seemed that bad as people make it out to be.

I rather gunshots, prostitution, having to stay in after hours sometimes or not being able to go home a couple of nights because some guy is barricaded in some abandon house across the street and the swat team is there than metadata drone strikes… some people don't get a choice where they live, or die… and in twenty years or so when this area becomes a slum, at least the buildings will be newer, up to code or w/e trendy bullshit people are selling these days :P
> I have never had a package break between dev and prod when using versions like ^x.x.x.

I've run into it. Dependencies get bugs sometimes. Easy to pin versions with npm's shrinkwrap though.

>The author advocates copy-pasting code rather than including small modules. To me this is very misguided.

Yeah, I'm surprised how often people suggest this is the obvious solution as if it's not without its own problems. One of the things I dread most about working on a new codebase is finding an ancient version of some library code copy-pasted into the codebase with the inevitable unlabeled (and probably not high-quality) customizations made to it. Trying to figure out whether the library's documentation still applies, whether it still passes its original upstream tests with the customizations, or whether the copy can be safely replaced with a newer upstream version is painful.
Aspects of this island evolution were part of the plot in the marvelously detailed sci-fi book from Kim Stanley Robinson: Aurora.

TLDR: Interstellar multi-generation spaceships are essentially genetic islands.
This wouldn't work without some really bizarre implementation that would make it less of a hash and more of a cipher. The range of potential values is too small and highly structured, generating a rainbow table would be braindead simple.

> ...tamperproof keystore that exploded...

So not one way hashes then?
I viewed classes from all three mentioned above and found Prof Sedwick's classes to be very structured and to my style/liking. Prof. Roughgarden is "free flowing" and may require fast thinking to follow him. Prof Demaine's classes gets very mathematical and I found myself sometimes lost in Greek symbols. But Prof. Demaine is very thorough in building the theory.

[1] Prof Sedwick: https://www.coursera.org/course/algs4partI

As @carise said, the content may be gone after June 30th and if you want to download, you can do so using coursera-dl tool

https://github.com/coursera-dl/coursera-dl

[2] Prof Roughgarden: https://www.coursera.org/learn/algorithm-design-analysis

[3] Prof Erik Demaine (MIT OpenCourseware): https://www.youtube.com/playlist?list=PLUl4u3cNGP61Oq3tWYp6V...

There are videos of MIT's Prof Erik Demaine's Intro to Algo's from various semesters. I think any one should do.
>but we all remember the left-pad incident, right? It proved that having lots of dependencies might actually not be the best thing.

npm no longer allows dependencies to be unpublished after they've been up for 24 hours. The issue that happened with left-pad was solved.

It's possible for someone to instead publish a new non-functional version of a package, but I don't think that's unique to npm, and that won't affect people who have pinned to a specific version of the package.
That makes complete sense, as when it was available it wasn't in competition with DOS, and once they started doing more multi-user stuff, it was (mostly) abandoned.
Without actually comparing the spec to the Sakura paper [1]: are these instantiations of the Sakura scheme?

[1] http://keccak.noekeon.org/Sakura.pdf
> No more black people, and no more gunfire.

Hey! I think you're on to something here! If we get rid of a race that predominately commits a crime then that crime's rate will decrease.

Now seeing that most white-collar crime is committed by white people, most school shooters are white people, and most serial killers are white people, we could cleanse our cities of these crimes if we cleansed our cities of white people.

You don't support embezzlement, school shootings, and serial killers, do you?
You have no idea how often "genuinely baseless" accusations happen. Nobody does. We know they happen, but we're only sure when the accuser is a really terrible liar, as in the Rolling Stone UVA article's "Jackie" or Mattress Girl, or the accused (the actual victims) were able to produce a video as in this case:

http://articles.latimes.com/2006/jul/25/local/me-false25

Nobody knows how many guys are rotting in jail because they ran across a vindictive (or just plain crazy) woman who can keep her story straight.
But it isn't "new" in the sense that tumors are starting to do it recently. It's "new" in the sense that we are only now discovering it. That's why it is a bad title, a bit click-baity.
These slides from 2015 [1] detail some of the rationale that went into designing these functions.

Specifically, slide 13 says these 'Domain Separated' functions are "completely unrelated", ie. they can't be computed from each other. According to them "this should make it a little harder to shoot yourself in the foot with these functions".

It appears the designers are realizing that assembling crypto building blocks in ways that remain secure and make sense is difficult, so they're providing ready-made versions made for specific uses.

[1] http://csrc.nist.gov/news_events/cif_2015/research/day1_rese...
Reflections on Jury Duty – by Juror #10, aka Ethan Kurzweil
why should I (or the rest of the tech community) put up with assholes?

You shouldn't. But you also shouldn't let people appropriate the political capital of a topic as serious as sexually predatory behavior to argue points about assholes. Not only because the magnitude of the negatives they introduce into the world are so widely disproportionate, but also because "asshole" is a suspiciously flexible term. "Asshole" doesn't even describe behavior, it describes an assessment of behavior. From a mild but harmless annoyance, all the way to fireable and beyond.
Concrete AI Safety Problems
Yes, but if the company is treating you badly, you don't owe it to your coworkers to continue enduring that for their sake. If they really value their professional relationship with you and if they respect you, they will certainly understand that you can't be expected to subject yourself to two additional weeks of poor treatment just for their sake -- and neither should you expect that from them if they determine that the company is treating them badly and they need to quit.

It is not you who has made the coworkers pick up extra slack via your choice to quit without notice. It is the company that has given them that extra burden by placing you in a situation where the only healthy option was to quit without notice. Thoughtful colleagues will understand that the company is to blame for this kind of thing, not the worker who did not give notice.

In cases when someone was treated well and simply did not give notice for some extrinsic, selfish reason (like being offered a sign-on bonus to start immediately at a new firm or something), it will be pretty obvious to everyone that actually the company had treated them well.
If you can quit your job for any reason in an at-will state, then it seem logical you can quit before actually starting.
You need peer-to-peer, fully encrypted applications.
Sites are coordinated with a "publish-subscribe" mechanism.
You put up a service on your local machine (chat, webserver, etc)
You "publish" the IP address and public key your site.
You "subscribe" to a site using the IP address and public key.

We used to run bulletin board systems (BBS) in this fashion.
It worked rather well.

Peer-to-peer cuts out the big server guys (Google, Facebook, etc.)
They can no longer gather your data.
Encryption end-to-end makes it impossible to insert ads.
It makes it hard to gather data.

We need more peer-to-peer, fully end-to-end encrypted publish/subscribe software.
> "if solar is so great, why isn't my utility doing it..."

Depends on your utility, some are: http://www.pge.com/en/myhome/saveenergymoney/solar/choice/in...
No, you can't, because most jerks do not have fandoms, and most jerks don't generate fawning media coverage. The social power abusive rock stars accumulate is what makes them so problematic.
I don't think the paper is arguing whether it is a reasonable exponent or not. They are just saying IF the exponent is -24 or smaller, then there is more than one technologically advanced species. It makes no claim about how close to reality that exponent is.
You can represent a table using JSON arrays, and I doubt CJS is "way faster" or smaller than gzipped JSON.

There is nothing inherently preventing you from writing an almost identically performing streaming JSON parser or serializer.
In the mid-90s it was a place for upper middle class kids to go party. The riots wiped that out.

In the late-00s it became a place for upper middle class kids to live. Largely do to the efforts of 3CDC. Lot of money being spent to renovate those older buildings.
Assuming that the type of people who they want to block are psychos or people with bad social skills, they will find themselves in 100 times more serious situation when the other party finds out. Even as a normal guy I would feel extremely pissed if I find out that a girl has been playing me with a bot.
inb4: https://xkcd.com/927/

the reason json is popular is because it's widely used and is easily parsed (without having to call any extra libraries).

standardizing this would mean accepting upon a complete working alternate that'd work everywhere just akin to json (plus the added perks), which will take a lot of (dis)agreement, especially given that there are already a dozen other standards trying to replace json.
The Real Impact of Britain Leaving the European Union
Couldn't you just call Lua "Table Oriented Programming?" Everything is a table, from which you can construct things like an object system.
Please read the posting guidelines and contribute constructively or not at all.
> when it casually calls for things like tossing due process and burden of proof out the window

This is so important.

Preface: I am not defending Jacob Appelbaum at all here---the evidence of wrongdoing in his case looks solid.

Encouraging internet pitchfork mobs is wrong. Morally wrong. Due process can be frustratingly slow, but the principle of innocent until proven guilty is vital.

Preemptively labelling people "oppressors" or "abusers" is wrong.

--

Story time. The scene is my high school sophomore English class, ~9 years ago. There was a huge news story about some men on Duke lacrosse team hiring a stripper and then raping her. It was the perfect storm of outrage: multiple white men from a privileged background, a single black woman, a rape accusation.

In English class, we debated the ethics of the case, rape culture, and so on.

I pointed out that with no witnesses and no rape kit, the only incriminating evidence was the accuser's word. I said that the accusation might well be true, but that we should reserve judgement until the court case ran its course.

I got a lot of flak for saying that. A few classmates said I was being misogynistic and that I was part of the problem. The teacher lectured me somberly about how much courage it takes to report abuse and how important it is to believe such reports.

--

A few months later, the men were acquitted fully and the accuser admitted she had fabricated the whole story.

To this day, if you Google any of the mens' names, the first page is full of national news stories about how they raped someone.

--

Here's a picture from a few days ago. Spoiler alert, the arrows point to the wrong apartment.

https://twitter.com/bcrypt/status/741339303356178433
How One San Francisco Neighborhood Became “Immune” to Gentrification (2015)
> “Well, good for you,” Mr. Tremblay says he thought at the time. He could understand wanting a vacation, but felt “you’re also screwing our business,” leaving the company short-staffed at a busy time.

Turned around that becomes "You're laying me off, in exchange for higher corporate profits, when I have bills due".
Newline-delimited JSON? I've used it informally, but I've never had the nerve to suggest it as an actual documented interchange format. It makes a lot of sense for things which CSV is often used for - dumping out big tables of data into files for shipping over FTP or similar - or even for logfiles with structured data entries. The tricky thing is having to restrict the JSON on each line to not contain any newline characters. Even though all legitimate JSON can be minified into a form which has the same semantics but contains no newlines, "JSON with no newlines in it" isn't a well defined standard.
started from here, now we're at the bottom?
Fortunately, according to the article, there are drugs that can prevent vasculogenic mimicry:

> Yi-Wen Chu, TaiRx’s senior vice president, sent the drug to Hendrix, her former Ph.D. superviser, to determine whether it would halt vasculogenic mimicry. It did, curbing the activity of Nodal, a gene that drives vasculogenic mimicry by making cancer cells more like stem cells.
Feedback wanted, please!
I believe you can explain some common cases in Postmark's weekly digest like this (but would really appreciate confirmation from an actual specialist in the field):

1. "Trusted sources" (DMARC fully/partially aligned), DKIM pass, but SPF fail: a recipient has forwarded your fully-aligned email.

2. "Untrusted sources" (DMARC not aligned), DKIM fail, SPF fail: genuine spam, or email forwarding that also rewrites headers in way that breaks DKIM (like the recent Hotmail/Outlook.com forwarding problem).

3. "Untrusted sources", DKIM pass, SPF pass: properly signed and SPF'd, but your envelope-from domain doesn't match the header-From domain. If your DMARC policy is reject or quarantine, these messages won't get delivered.

One way to get case 3 is with a vendor sending on your behalf, where you've included their SPF in your own record (so SPF pass), but they sign DKIM and set envelope-from using their domain. The DKIM is valid for your vendor, so passes, but doesn't match the From, so DMARC is not aligned and fails.

For example, UserVoice has this problem if you're using a custom From address in your domain. And Gmail shows this type of message as "From <you> via <vendor>".
The closest thing I can think of that's still in use is Visual FoxPro.
> The bleeding heart (pun intended) in me cares about the sustainability of meat and the sheer cost of ethical farming. Fact of the matter is though, I won't give up eating meat. I love it, so so much.

This is exactly why plant-based substitutes for meat are so important. I'm a vegan, but I don't think the majority of human beings will ever be convinced to adopt a plant-based diet on ethical grounds. That's a completely hopeless cause. The only way is for plant-based versions of the foods meat eaters love to be 1) indistinguishable or better tasting 2) as cheap or cheaper. In the end, most people value convenience and their own experience over ethics and the experience of others (and I'm not saying I'm better than you or anyone else—I'm the same, just not on this particular issue), so I think the right approach is to make plant-based foods the most convenient and enjoyable experience. It may be far away, but it will happen eventually.
So this is something that looks quite a lot like CSV, in some cases produces identical output to CSV, but which isn't compatible with CSV.
Sorry to hear about your experiences.

One reflection I have: I wouldn't worry so much about "negative" performance reviews from former colleagues. After all, you did give notice on that job, so that in itself is a a kind of a negative review of their "performance."

Also, you're more than within your rights to ask the HR contact to "confirm dates of service, and my reason for leaving", only. Most anyone would be more than happy to comply with such a request, even if they didn't exactly see eye-to-eye with you while stuck in the same boat with you, job-wise (since hardly anyone particularly likes saying negative things about other people unless they really have to).

Or if you do feel compelled to let them continue to give their negative review -- you can either preface it ("We had a difference of viewpoints about certain things, which is why I left"), -or- provide another colleague from the same shop who viewed you more positively (or whom you can at least trust to not outright badmouth you).

I once had a "negative" review backfire against me once, many years ago. Someone said some stuff about me in a reference call that they never said to me in person while I was there -- so I brought in another co-worker who quit shortly after I did, as a counter-reference. I ended up getting the job, and it was one of my more pleasant working experiences actually.
Some people are so sensitive, dontchaknow ;)
Almost every B2B venture eventually recreates Excel so I'm inclined to agree with you. A popular (and good) common methodology would go a long way.
is there necessarily a need to repeat key values over lines?

why not have all possible object definitions in the header and data as a single huge array?
It's also usually in the company's best interest to not have you continue coming in for two weeks. Too much risk of sabotage.
1) superdelegates are not the DNC.

2) The Democratic party's official position is not that superdelegates are a complement to a 100% democratic process but instead that they exist _solely_ to ensure that party leaders are properly seated at the convention and do not have to compete with grassroots activists for participation at the national convention.

I don't personally believe that (2) is a good-faith defense of what superdelegates are, but that is the DNC's position. And it's worth mentioning that there are valid reasons for superdelegates: how do you deal with a potential nominee like John Edwards, what if the convention is truly contested (with 3+ candidates and no 1st-ballot victory?).

The Republican primary went largely as it should have been, and arguably Trump should have received an even larger share of the final delegates. Voters expressed their preference and that person became the nominee (whatever I think of their preference is irrelevant).
> But you also shouldn't let people appropriate the political capital of a topic as serious as sexually predatory behavior to argue points about assholes.

I'm not. But I've seen FAR TOO MANY statements here and elsewhere that provable death threats or sending porn pics is wrong but anything no matter how jackassy up to that is fair perfectly acceptable. I'm VERY tired of that attitude.

And I don't believe in the slippery-slope of assholeness. Everyone knows their definition, I don't think it will slip to anything trivial. Asshole will not equal annoying any time soon.
I don't have many issues to manage, nor do I use Mac to know how awesome this is, but it seems to be a lot.
There's GNU, which is by definition not UNIX. ;)
From https://news.ycombinator.com/item?id=8861244

https://github.com/benpence/keepintouch ?