skysight-inc/HackerNews huggingface dataset:
>btw, having the mailware deliverable ia that auto-exec flash exe is really old school, no? I keep seeing this in plots of procedural crime shows where digital savvy techie or detective shoves a newly discovered victim usb into their working computers. Who does that?

This is still a very real exposure and is used by penetration testers all the time. There are several ways to disable USB autorun across a domain, but there are definitely still a lot of big companies that don't prevent it.
Your logic is faulty, because the pool of engineering employees is (roughly) limited to engineering majors. Nobody is complaining that teachers and nurses are underrepresented in the tech industry.

Regardless, the true number is around 7-8%, as is helpfully noted elsewhere.
> the law, I feel, will have to change

What is a reasonable law that won't, say, make services like Snapchat illegal (which many people seem to find useful)?
Everyone is closer to Silicon Valley than they used to be: interview with mnubo
I really feel like a cowboy when I am debugging C with `gdb`
Hello HN! I created this. This is just a simple ticketing web app that uses the blockchain as its world ledger. It allows artists to create and distribute there own tickets. You can purchase tickets directly from the artist or trade tickets with each other. Most importantly you can see where a ticket was issued, when it was issued and who issued it. I think using blockchains is the future of how we distribute value in the world. This is for fun, but I'm open to ideas on building it out. Thanks!
To me Chip cards are a much bigger issue for debit cards. I have fraud protection on my bank account, but it can still take the bank up to a month or more if they want before putting stolen money back in my account. Once everyone rolls out EMV-enabled ATM's and POS terminals someone can steal my magstripe data all they want, they won't be able to draw money from my checking account. Of course, this is why I use credit cards for 99% of my purchases, and I typically go into a branch if I need to withdraw money (assuming they are open), but it's a really annoying threat to have to be on the lookout for.
I gave the RSA example because it's better known and easier to understand than a molecular modeling example.

But I question the meaning of your phrase "independent verification".

If the author has to provide the program used for verification, how is that "independent"? At the very least, isn't there a range of dependencies, from "running the same code in an identical environment produced the same answer" to "running a different code in a different environment produced the same answer"?

Which verification do you trust more? What level of independence do you need before you can trust the results?

Let me give you a few other examples. "We docked 500,000 small molecule structures from CHEMBL against the target using 6,000 GPU days. We took the 1,000 best fits and measured binding affinity. The top 10 structures are shown in table 1. The third is our lead candidate, which reduces the chance of infection in rats from 80% to 10%."

Do you need to be able to validate the docking results in order to accept this paper as science?

"We used ProteinFitter 4.5 in simulated annealing mode to generate the best protein fold to the given constraints. The resulting structure has a R-factor of 2.3Å against the Hodgkin electron density, which is better than any other published model."

Do you need access to ProteinFitter 4.5 to verify this paper? Since all crystallography tools will generate an R-factor for you, why is it critical for the model provider to also supply an environment which contains a tool which does that?

Both are examples where it doesn't matter what's in the magic box, or if the magic box is buggy. It could as well be "I had a dream about a snake tying itself into a knot and eating its own tail. I woke up and realized the structure might be a trefoil. It fits all of the known data and makes intuitive sense and hasn't been considered before, so I'm publishing in the hopes that others can explore it more rigorously."

Is that science? I say "yes".

Now, replace "dream" with "computer program" - is it still science? I still say "yes".
Beyond explaining the curiosity of a turtle's shell, I really liked this article for introducing me to exaptation:

The turtle’s shell, then, is a wonderful example of exaptation
—the evolutionary process where a trait evolves for one function
and is then co-opted to serve another. They began as digging
platforms and then became suits of armor. Feathers are another
example. They now help birds to fly, but they probably originated
as ways of keeping warm or signaling to mates and rivals.
Hardly. Apple clearly has the most condescending attitude towards users. It's built into their brand.

And of course there is no owner for Linux, but have you ever dealt with any of the popular open source project developers that make Linux what it is? (e.g. Gnome? Qt? etc?) Condescending attitudes abound! I've been insulted many, many, many times by the people who run these shit shows just for asking an honest question on IRC/mailing lists/issue boards/forums/etc.

Meanwhile, Microsoft actually listens to users and developers and gives them what they want.

I'll take Microsoft any day over Google, Apple or the crowd of angry Linux devs.
How a blog is ridiculously over-engineered – and why that is awesome
What's missing from Edwin or Emacs with SLIME? Support for Python, obviously, but—that's solvable. Is there a more fluid execution environment in Jupyter?
Premium Messaging General Availability
No, it's not a strong indicator that the process is random or worthless. That makes the assumption that the people rejected by the process would have scored just as well. It could be very good at determining who has the technical skills to work there. It might be that their performance scoring of hires is measuring something else- like how much their manager likes them.
Imagine how much better the world would be if a majority of people took the time to think about these issues as you have AND were also willing to simply boycott facebook until the ToS were changed.

This level of personal responsibility would be much better, IMO, than falling back on the government to coerce facebook into better behavior.
You mention a target as compliance or certification, but I don't think this is a direct concern for the WSL. They want to support specific use-cases, at least at first.

---

"Moving forward we will be investigating new areas of interest while continuing to support the following scenarios:

+ GNU command line tools such as grep, sed, and awk

+ File system and symlink support within the WSL environment

+ Ability to run apt / apt-get for installs, updates, and package testing

+ Basic functionality for languages such as NodeJS/npm, Python, Perl

+ Command line tools such as Vim, Emacs, Git, and SSH"

https://blogs.msdn.microsoft.com/wsl/2016/07/08/bash-on-ubun...
Are you a Markov chain?

Edit: For those curious, this is what the parent comment said:

This kind of reminds me when I would be writing a nodejs application, and I have to jump into C to get down and dirty with the optimizations. The kernel can only do so much when it's under panic, so I believe I made the correct choice.
Quicken Loans Finds Appraisers View Home Values Nearly 2% Lower Than Owners Est
IP addresses are meant to be addresses; if you move your address around everyone else has to update their routing tables. To do what you want you probably want to get your own AS Number and actually participate in routing (BGP etc). I've heard of quite small businesses doing that, but not individuals.
As far as gmail goes, I don't know if it is now widespread, but one day my gmail suddenly had different tabs for primary, social media, promotions, updates, and forums, and it changed my life. I hate using other mail apps that don't do that. Can't ever find anything.
UnsupportedOSVersionAlert: Alert iOS beta users about potential bugs in your app
The problem is already a legislative one. Copyright law is being abused to deny ownership of physical objects. The problem is already directly caused by law.
This is my least favorite thing. I realize that often when you pay for software you don't truly own it in the legal sense, but I still want to feel like it's mine and ads don't let me do that. For this reason, even though I think it's an interesting idea, I am deeply repulsed by Amazon's discounted "with special offers" Kindles. Somehow, just the fact that those exist erodes my sense of ownership of my "without special offers" Kindle.
> LLVM-based version of gdb

you mean lldb?
Because the Cult of Torvalds is convinced using a debugger makes you a bad programmer.
Zika can be passed from woman to man
I have a domain, serviced by a registrar. When I change email providers, I go to the registrar's site and point my email address at my new provider. That might take a little time (way less than a day, by observation) to propagate. I then go to my new provider and set things up to "send mail as me@mydomain." If you run a local client like Thunderbird (rather than run exclusively through your provider's web interface), then you'll need to do similar there (like point it at your provider's smtp and imap/pop3 servers).

Problems arise when you run your own server, because of fairly detailed authentication settings. If you pay a provider to run their servers, they take care of that.
Show HN: Which Pokemon is it?
What you are looking for is GNU DDD.

https://www.gnu.org/software/ddd/
Given how much of the job is based on resourcefulness and 'sticktoitiveness' which wind up being completely unmeasured by the typical big-o-whiteboard-olympics.. I wonder if it wouldn't be an edge in hiring to fast-track anybody from a disadvantaged background. They've proven that they can break the mold and overcome adversity, kids from the suburbs->stanford route haven't, necessarily.
Without question, Windows has the best debugging facilities. windbg is the best debugger, and when you have source code, visual studio's debugger is super nice. But guess what, windbg has so many commands that it's kind of hard to use for newbies and there's some great commands that even experts don't know about unless you go digging. This is many ways is like the bad UI in gdb. Over time, you learn.

Unfortunately, we're stuck with gdb, and improving it or making a new debugger requires massive effort and likely backing by one or more organizations (e.g. lldb has apple).

The ugliness of gdb won't change, but this presentation isn't about gdb's shortcomings -- it's about a "version" of gdb that supports reverse-debugging, which is really awesome.

I use undodb-gdb all the time and it's amazing. Consequently, I use gdb all the time. The result is that over time I've learned to deal with gdb's ugliness and so I get used to it. It's similar to complicated or hard-to-discover user interfaces in GUI programs.
Breaking Android’s Full Disk Encryption
If someone has access to your webcam and microphone inout, then would that data not be transmitted over the internet? In that case, would it not be possible to see if that data is being transmitted using tools like Wireshark?
The numbers are specifically in appendix 2-19(http://www.nsf.gov/statistics/seind12/append/c2/at02-19.xls)

2009 data:

(numbers are CS/All, CS% from all CS, CS% from all graduates in category)

Total graduating with a CS degree: 38,496/1,619,028(100%, ~2.37%)

Total White: 23,021/1,069,016(~60%, ~2.15%)

Total Black: 3,868/145,988(~10%, ~2.64%)

Total Asian/Pacific Islander: 2,894/105,246(7.5%, ~2.75%)

Total Hispanic: 2,999/137,746(7.80%, ~2.17%)

Interestingly, both Black and Asian/PI are significantly above the number of CS graduates per capita, and White/Hispanic are below.
So glad my landlord is awesome, she banks with Chase, I bank with Wells Fargo - since both banks support clearXchange under their own brand (Chase QuickPay, Wells Fargo SurePay) I can just send my rent payment to her email address through online banking and it is in her account within 2 days, makes life easy for me and she loves not needing to wait for a check in the mail or having to cash it.
VC's loose money all the time, in fact the majority of VC funds loose money or have very poor returns.

Problem with your analysis is that vast majority of fund raising rounds go to salaries, and converting operating spending into equity value is very challenging and not a "efficient" transformation.

Also the ecosystem out here is quite large, with each fund being just a small fraction of companies being funded.

That being said, it is a widely held belief that something like what you described inflated the dot com bubble
> Why don't they have the right to make a non-repairable product, and let the market decide whether or not it succeeds

They cannot if the DCMA denies repairs. The market no longer decides, the courts decide you lack the right to use the market.
Well, of course, your separation of concerns is only as useful as the boundary is well thought.

Modularity is not a magic wand (Brooks' "silver bullets" aren't an strong enough concept for what you are debunking) that makes all the problems of software developing go away.
Oh, I agree that the $1300 tablet has great specs. It needs them to run Qubes (which I run on my desktop machine)

I was just saying that if your primary goal is adding a bit of tinfoil to your desire for security and privacy, it's easy to just get an old tablet and modify it to remove some of the most common attack vectors and environmental observation capabilities.
I misphrased the last line slightly. I don't mean to imply that people think something is art, but say it isn't because they don't like it. I'm saying they think it's not art because they don't like it.

And in terms of conveying that, saying that they don't like it might lead to a discussion of aesthetics. Whereas, saying they think it's "not art" almost invariably leads to a semantic argument, in which people state their own personal definition of "art" and then getting annoyed when people don't agree. Which is no where near as interesting or satisfying.
That sounds pretty terrible. In terms to auth speed we get that occasionally in very small stores (newsagents) but when you have to type in your PIN most stores handle it all in a few seconds now. The 15 second auth time was common here until about 5 years ago. In the last year I've also seen massive improvements, largely due to stores upgrading terminals to support contactless payments which I use almost everywhere now. I regularly leave home without my wallet as I can be quite certain I'll be able to use Apple Pay via the contactless terminal.
Tech consultants are listed here:

https://mobile.twitter.com/KorAdana/status/75348166244558028...

@KorAdana
@ryankaz42
@AndreOnCyber
@MOBLAgentP
@IntelTechniques
@marcwrogers
And what does the validation and rewriting? Code in the sandbox? Code outside the sandbox? Code in a different sandbox?
Right but it's odd that "very few issues" for a game (overwatch in this case) includes multiple hours of outage in like the first week or two. (Though like you point out, it is way less than other popular releases)

There's just a staggering difference between the number of 9s offered by game companies vs more reliable parts of the industry. Shit most online games still don't have login servers that scale easily to meet dynamic load.
Probably not a backup of his email though!
Louis Scarcella will not face prosecution. God, that makes me sick.
Sharia Does Not Mean What Newt Gingrich Thinks It Means
> Assuming everyone who graduated with a CS degree from the US was hired at an equivalent then one would expect something closer to 7%-8%.

When I look at the data, I see that 2.5% of graduates are black. I'm looking at PhD, Master's or Bachelor's in CS in 2015.[1]

The totals exclude those with unknown ethnicity:

15 black CS PhDs out of 1442

110 black CS Master’s out of 8,923

425 black CS Bachelor’s out of 11,974

(15+110+425) / (1442+8923+11974) = ~0.0246

[1] 2015 Taulbee Survey, Computing Research Association

http://cra.org/wp-content/uploads/2016/05/2015-Taulbee-Surve...

EDIT: I believe one big source of the difference between our numbers is whether you count "Information" degrees as a CS degree. My number only looks at "Computer science" degrees, whereas your data looks at "Computer sciences" degrees.
yep. the "..no inclination to disturb" part reminds me of this NPR piece and how admiral mike mullen hired the lead doctor ( http://www.npr.org/sections/health-shots/2016/06/10/48156831... ):

[snip snip]

It was 2008 and Army surgeon Christian Macedonia had been told there was a high-level opening for a doctor who wanted to change the military's approach to battlefield brain injuries. When Macedonia arrived for the interview, he found himself face to face with Adm. Michael Mullen, chairman of the Joint Chiefs of Staff.

"And he looks at me and he goes, 'Who are you and what are you doing in my office?' " Macedonia says.

Macedonia explained he was there about the job. Mullen replied that he had decided he didn't need a doctor on his staff. "And I said, 'Sir, I'm going to disagree with you,' " Macedonia recalls.

Macedonia, a lieutenant colonel, told the admiral that if he really wanted to do something about brain injuries, he did need a doctor. What's more, he needed one with combat experience, strong scientific credentials and a high-level security clearance. "I said, 'Sir, you really only have one person and that's me.' "

Mullen smiled. He had been looking for someone he might have to rein in, but would never have to push. "And Macedonia fit that model for me perfectly," he says. "He's very outspoken, very straightforward. We talk about out-of-the-box thinkers; he just lives outside the box."
Take a look at this [1]:

*SAT-Mathematics

White - 534

Black - 429

Asian - 598

Even if Blacks get CS/Engineering degrees, they can still be less competent than Asians/Whites. Tech companies attract the most talented people (e.g. Google gets millions of job applications per year) and they can pick those who are the most competent/best in class. Those are usually Asians and Whites. For example, if 10% of all CS degree holders are Black, you can't expect that there will be 10% of Blacks at tech companies.

[1] https://nces.ed.gov/fastfacts/display.asp?id=171
Building Design Systems
One of the main problems I'm seeing these days is that a lot of companies think they can solve problems that start from childhood or culture.

Most blacks that are recent African immigrants tend to do very well. http://www.atlnightspots.com/african-immigrants-have-the-hig...

That points to some aspect (not race) of African-Americans that cause them not to excel. Is it broken families or a culture of not "acting white"? (acting white: https://en.wikipedia.org/wiki/Acting_white)

Those things needs to be dealt with on a community level, a band aid and a few initiatives by tech companies won't solve anything properly.
I've always had fond memories of the Burroughs B1700 (https://en.wikipedia.org/wiki/Burroughs_B1700) for such reasons.
Because we already have the worlds greatest debugger. The Print (proper noun) statement.
> He drove smart acquisitions ...

And the author has "LinkedIn" listed?!?!?!?!

Does anyone - aside from some MS staff and the article author - think LinkedIn was a smart buy for MS?

Everyone I know is welcoming the likely fade out of LinkedIn in not-many-years.
Does anyone recall a Mr. Robot giveaway with American Giant hoodies? I went to the AG retail space two days ago to figure out what hoodie size I needed, and made a Mr. Robot joke. The salesperson said, "hey, we did a promo with Mr. Robot, actually, where there was a website in the show and if you followed a bunch of clues, there was some morse code and eventually you got a free Mr. Robot hoodie from us."

At the time, I marked it up as "awww, too bad I missed it", especially since I tend to binge shows after they're all available at once. But I wasn't able to find any evidence of this promo existing on the web, and now there's this thing with morse code and so on. Soooo maybe there's a nice hoodie at the end of this road.
I think they introduced that 3 or 4 years ago. There are multiple inbox views you can select from in the settings menus. I do like that system but it's not very valuable to me. I get quite a lot of email but I tend to deal with it all as soon as it arrives.
Or it's a definition of luck. Survivorship bias.
Everything you wanted to ask about Ethereum
He was taking existing ads for escorts in the wild and critiquing them as satire.
As far as I know, JSFuck still uses parentheses.
There is definitely a strong case that technological acceleration could result in certain countries pulling so far ahead that others can never catch up. The tools of one generation build the next generation. If business owners and society don't have access to those tools they don't get to participate in creating the new stuff.

I'm not sure the Google issue is the best example of Europe's regulatory issues.

- To some extant at least a little of the aggressiveness, or at least the political will and approval, relates to the US implementing and enforcing US regulations on Europe's banking sector. This was not a small nor inconsequential.

- I personally thought Google was going to get hit by fairly big US regulatory anti-trust actions back in 2008-09 but it never happened. I never bought Google stock specifically because of this and I was completely wrong - so I could be very wrong about other conclusions I am making now.

- Ben Edelman provided convincing evidence that not only was Google hard coding certain results for their own products in their favor but explicitly lying about it publicly. There are a few analogies for this, but it basically involves consumer deception which is as bad or worse than not labelling ads or sponsored content because of the monopoly position Google holds. Kind of like if a company owned a GPS 90% of cars used and redirecting directions to businesses they owned. http://www.benedelman.org/hardcoding/

- No evidence but I am fairly confident that the Alphabet corporate reorganization was a pre-emptive action to losing an EU anti-trust case. Google will split apart a "Google Europe" entity which follows whatever rules the EU tells them. It is plausible it could be 3 or 4 entities depending on what the EU finally decides - Goole Search Europe, Google Ads Europe, Youtube Europe, etc. I don't know anything about the legal aspects of this, but it is similar to re-arranging assets while anticipating a future bankruptcy.

- A good example of everyone being way behind the curb is Google News mobile switching to favoring AMP and basically usurping all previous ad revenue sources news organizations had.

- There is a lot of discussion of price discovery and market discovery, but much of tech's innovation in recent years has involved regulatory discovery. The EU stuff absolutely could have occurred 5 years ago. The amount of money Google made by ignoring potential regulatory action likely far offsets the end punishment thanks to compounding growth. Regulators in all countries should think really hard about the line between really bad stuff and shades of grey because tech entrepreneurs are watching Google, Uber, and AirBNB and are behaving accordingly.
You're right, that was the problem :) In another of Dare's replies I checked just the engineering major numbers and the math checks out. I derped.
Have you tried Inbox?
Oh well, a competitor bashing PostgreSQL without knowing what they are seeing.

PostgreSQL has an excellent planner, the problem (for count(*) and count-distinct queries) is that PostgreSQL keeps it's visibility information in the actual rows not in a memory structure.

The good thing about that is correct transaction semantics (which MSSQL does not always guarantee in the count cases) and never having to fiddle with tuning memory for locking (and having queries cancelled because it runs out!).

The bad thing about that is that count is slow (as it needs to hit every row in the table to see if it is visible) and that locking selects (i.e. for update) suddently costs write i/o....