skysight-inc/HackerNews huggingface dataset:
Let's do a little calculation to see if the payout is worthwhile.

Using something illegally means you run the risk of going to prison. Let's say there's a 1% chance you get caught, the prison sentence is 10 years, and the evil hackers will pay you $20,000 for your bug. Let's also say that you're a mid-career software engineer in the US, and over the next 10 years you expect to make $2M (after taxes).

This means your expected outcome over 10 years is $20,000 + (0.99 * $2M) = $1.98M. With Lastpass's bounty you end up with $2.001M.

With these assumptions, you should be paying Lastpass to find bugs in their software! Of course, if you're not in the US, you probably make a more reasonable salary (read: less), taxes are higher, and the risk of getting caught is lower.
XPS 13?
I doubt Google will open source Firebase since the latest version is tied deeper into other Google Cloud stacks. I evaluated Firebase as a backend for an iOS/Android app but has to drop them due to the app needs China market. Firebase Android SDK has dependency on Google Play Store services, and majority of Android phones in China do not have Google Play services installed. There are even report that some sites under Firebase Hosting (basic static site hosting) can not be accessed in China.
I think the thing with Lenovo is, their hardware is sometimes excellent for the price. It's like they are Intel with a tick-tock cadence except the ticks are all complete duds. Just make sure to wait for a new model to accumulate at least 6 months of solid reviews before pulling the trigger.

I've been getting ThinkPads on corporate refresh cycles for 15 years and after they sold to Lenovo, I never know if a new machine will turn out to be a flaky piece of junk or totally solid and well built. Seems like it's always one or the other.
Gradient Boosting Explained in 3D
Anything that increases our dependency on C++ is much, much worse.

You can easily call into something with a C ABI (er, OS ABI designed around C, or whatever is the correct technical name) from any language. Try that with C++ :D
Which license is the most free?
The search term is reasonml.
> a centralized queue that actually does the mail sending, and retries in case of failure.

A bit like SMTP?
For me the important aspect of an "Air laptop" would be that it is lightweight.

And Carbon Fibre is certainly more lightweight than aluminium, and may be stronger as well. As such, the Carbon X1 certainly qualifies.
Could someone explain me better the posted code that was vulnerable? I don't understand it. What's the returned value?, what is URL and url?, why the extension is expecting there must be a @ inside the url?

Thanks! :-)
Uber Mostly Likely Using OpenStreetMap Data
Dangeous indeed, remember when the US decided North Korea hacked Sony ? [1]

President Obama used an executive order to impose more sanctions

[1] https://en.wikipedia.org/wiki/Sony_Pictures_Entertainment_ha...
I'm not very literate in economics.

On this wikipedia article https://en.wikipedia.org/wiki/Nixon_shock Krugman is quoted

> The current world monetary system assigns no special role to gold; indeed, the Federal Reserve is not obliged to tie the dollar to anything. It can print as much or as little money as it deems appropriate. There are powerful advantages to such an unconstrained system. Above all, the Fed is free to respond to actual or threatened recessions by pumping in money. To take only one example, that flexibility is the reason the stock market crash of 1987—which started out every bit as frightening as that of 1929—did not cause a slump in the real economy.

> While a freely floating national money has advantages, however, it also has risks. For one thing, it can create uncertainties for international traders and investors. Over the past five years, the dollar has been worth as much as 120 yen and as little as 80. The costs of this volatility are hard to measure (partly because sophisticated financial markets allow businesses to hedge much of that risk), but they must be significant. Furthermore, a system that leaves monetary managers free to do good also leaves them free to be irresponsible—and, in some countries, they have been quick to take the opportunity.[18]

I'm still trying to understand why some people argue FOR the gold standard, and if they're right, does that mean the Fed must avoid financial crashes due to floating currency?
I was just presenting other situations where an employer might give someone hiring preference.

Is it just the idea that someone was getting hiring preference that isn't 100% tied to skills that is the issue? Or is it specifically because it was women that were getting hiring preference?
Jesus christ - this is a sect, not a business. I will forever cherish counterculture and dissent as the only way to make sure I don't wind up in sects.

Jesus man I just want to give that poor woman a hug.
Things shake up all the time. Take the example of Microsoft announcing the ML based Editor feature yesterday, a number of people in my office were genuinely excited to use Word after that. Bottom line is things come from left field from time to time and it is foolish to predict things.
<name> here is the family name, which in a language without idiomatic spoken pronouns, is how you talk about people.
Is it still illegal when Lastpass actually stimulates you financially to pry into their systems?
I suspect that they may be using their GPS trace database. It would be hard to prove.

Traditionally, as some may know, mapping companies added "trap streets" - intentional mistakes. With OpenStreetMap they should have to look at unintentional mistakes. Mistakes where the map is wrong compared with aerial imagery and with GPS traces.
That's a very bad recommendation. Very few people are capable of remembering unique 10-character passwords for each site. I have like 100 passwords and accounts for various systems and I'm certainly not able to remember each of them. So either I start reusing passwords or I use a password manager.
LexVec, a word embedding model written in Go that outperforms word2vec
Doing Email Right (Part 1: SMTP)
It was not simply asserted. It was supported with an example of a security problem that would be experienced by everyone using a framework. We've seen it in reality, with the left-pad fiasco.
nah, storage is not a problem with gaming these days!

Wait for the Vega cards with 8GB of HBM2 — that will kick ass.
You are right. Most smartphone users are not happy with their cameras and battery life. Innovation has kind of stopped in these areas for both iPhone and Android.
In the comments there's an interesting take on the Wintel era desktop wars, apparently Apple wins that decisively, as long as you don't count Microsoft.

I wonder if that will be the long term view on Android vs iOS, that Apple won it as long as you focus on Lenovo and HTC and Samsung and other manufacturers and ignore Google.

Though as Google seems a little bit less focussed on capturing all the profits, possibly everyone will benefit from the competition.
Silent Auction Apps – Mobile Events
These lines sound like a recipe for scope/feature creep and never ending development process.

>Never do requirement analysis. Never write technical requirements or functional ones. If you do, you have already failed.

In that case, how do you know when the software is finished and your contract has been fulfilled?

>Creative solutions are often holistic in nature, driven by first-hand experience, discussion, interaction and... thinking. If you want a developer to write a great piece of code, let him or her scratch the itch you're trying to scratch.

So, you do all your thinking, without capturing anything, and then the software is finished when the developer is bored?
Chronic pain is very easily treatable.

In the US you only got the problem that the usually subscribed extended-release pain killer only works 2/3 of the period, but everywhere else this is a solved problem with its 4-6 hours cycle.
Nuovo selfie di Emma in bikini – Divas e Knockouts zone
How about incorporating more battery life into your design?
With most of these, if you notice something going wrong, you have the option of not continuing. Biotech is significantly different in that respect.
> same 'sharp wedge' shape

Really? Here's one [0] from approximately when the Air came out and looks not even remotely similar to me in shape.

[0] https://commons.m.wikimedia.org/wiki/File:ASUS_Eee_PC_PIC_09...
There is also the reputation boost that the researcher receives for discovering this exploit and disclosing it in a responsible manner. The value of that is incalculable.
Isn't this the OOPSLA '89 paper? (it says 1987 in the title)

DNS weirdness on this side of the pond. This link works for me:
http://131.84.179.51/dtic/tr/fulltext/u2/a228507.pdf
> 1. I can go to any computer with chrome and get access to all my passwords, so don't have to carry my passwords with me everywhere.

Maybe a computer you can trust but I wouldn't say any computer. I consider the shared PC you'd find in a hotel business center to be the digital equivalent of a diseased hooker. I'd be impressed if it didn't have a key logger installed.

> 2. Don't have to worry about storing passwords properly since lastpass is a good company and they know their stuff about protecting the customers' data.

Not being OSS I don't think that can be proven. It boils down to "Trust us, we're smart".

> I'd like to hear the thoughts of anyone else who uses lastpass and what they think.

Trust noone and put your faith in OSS (KeepassX, pass, etc).
>Would you prefer..

Until we have evidence of an optimal money growth rate, I want the system to be flexible.

>keep the velocity stable.

Velocity is, basically, a fudge factor in the PQ = MV equation (as in, it makes the formula work). Is there any research that points to stable velocity being optimal? I think it changes drastically over time.

I think you're on the right track, and "the system" could definitely use more transparency and objectivity. But I don't think there's any algorithm near ready for prime time. The economy is too complex.
Might be and in that case it was wrong from me to post, I always assume that most aren't aware how constrained the NDK actually is.
I found that this makes rebasing a feature branch really difficult. The alternative is not much better.
There are many people capable of finding this specific bug and reporting it who might be motivated to take a look by a bug bounty, but who would never even consider trying to sell an exploit on the black market. I agree there is one cohort where you are trying to offer them an alternative to illegally monetizing their exploits. Then there is another cohort who you are just trying to encourage them to spend some time with your code versus someone else's. I could only guess at the relative sizes of the two groups, but the optimist in me thinks bug bounties are less about the former than the latter.

As we can see from avlidienbrunn2's response [1] sometimes it's not about the money. It's just fulfilling a natural curiosity about a product, maybe getting your killer write-up of a shocking bug to hit the top of the HN frontpage, etc. So in this case perhaps the bounty program is as much about establishing a legal structure for a whitehat to operate under than to fairly compensate ad hoc pen-testers. I wish they paid 10x or more for this bug. But I'm glad at least pen-testers can report these bugs without [as much] fear of reprisal.

[1] - https://news.ycombinator.com/item?id=12171753
Title needs an edit: User → Uber.
Ah yes, climate scientists just forgot to account for summer. I'm sure that's it.
> many people, many engineers are really great at designing a product but absolutely terrified to actually tell anyone about it or to promote themselves or to say it’s good. So marketing and sales are complete anathema to them. But you’re going to have to step up to the plate and do some of it.

I agree. There's always a lot of talk about how engineers neglect sales and its utmost importance to a startup's success. But I haven't seen lots of literature on encouraging engineers to come out of the shell to (rationally) "brag" about your product. Not all engineers have the confidence to do it or are just plain humble - Woz comes to mind.

A search for "marketing for engineers" only turns up content that explains marketing concepts and strategies to the uninitiated (inbound, organic, SEO...), but I'd like to see more on how to effectively step outside of your code editor, take pride and broadcast your technical creation to the world - for either economic or nonprofit motivations.
Hey man, could you elaborate on that a bit or point to a tutorial? I am running Kubuntu 16 on a Skylake+950M laptop, and I can either use Intel or Nvidia but not both at the same time. There is Bumblebee, but my machine freezes on startup....
The one thing I wish I'd known before my first client 13 years ago
People find and disclose bugs regularly even where there isn't a bounty. Most (at least 99.99%) developers don't want to see a useful, successful product fail even if they can personally gain from it. The likelihood that an exploit for Lastpass will be discovered by an attacker and sold to a nefarious actor is very small.

Further to that though, we now know that this problem is fixed in LastPass. We don't know about other password managers. To that end, LastPass is now a better option than it's rivals.
Adults Have Become Shorter in Many Countries
Thanks, have edited it.
I've already seen that 3-4hrs/day is much more productive than 8. For me. I guess it seems impossible to management people. Sadly it's hard to find employer with this dose of trust. But relax. You go to work, do your job, put 8 in time sheet, quit and enjoy your free afternoon. It works for me (probably for any skilled engineer). Just think about it, who's gonna fire you for good results? I wouldn't like to work with this kind of fools, so who cares?
> It was certainly a giant blunder, but like all of these issues they are Windows only, and usually only if you use the factory OS image.

Don't forget that your hardware vendor is also responsible for firmware. Not saying that Lenovo is special in any way here, but delivering terrible software on the factory OS image might have implications for software quality in general.
Some of you seem to be missing the satire here.
Link to the study: https://elifesciences.org/content/5/e13410
Show HN: Redux Fetch – Universal Fetching Bindings for React Router and Redux
Interesting. I also had a Xiaomi battery pack but after a few months of (irregular) use the outer shell started discolouring and the adhesives gradually became weaker, so much so that you can peel off the plastic at the bottom and top.

Yes they are ready to take over large segments of the market but not yet the high end segment.
I sometimes think there are more Trump supporters in the Silicon Valley than our leaders who seem to think they represent the entire SV.

This article talks about the shy trump vote. http://praxis.ink/2016/07/democrats-fear-secret-trump-vote-t...

How much of this shy vote is true in Silicon Valley?
These may make sense in a Utopian existence where profit means nothing. However in the real world, projects are driven by requirements, and the developer that can fill these requirements the fastest is the developer that will prosper the greatest.
Mediocracy or mediocrity?
You could have just linked to http://verbalexpressions.github.io instead of spamming all the repositories. Also, about half of them are out of date by 3 or more years.
Looks very useful. But it's not really procedural world generation, right? I'd call this geographical data visualisation instead. Generation would be creating new worlds with just a seed and an RNG. Was kind of hoping to see that because that was actually an idea I had for my graduation project. I eventually killed that idea because I just couldn't get a good design of how such a library would work (that would be useful in real games). It's a funny coincidence that I also wanted to make the library with a C++ core and a Unity interface.
I think you guys mean 'steganography' rather than 'stenography'.

https://en.wikipedia.org/wiki/Steganography
>Why does the currency need to expand at the same rate?

Because the demand for money and credit ebbs and flows. Why would you curb the supply? It's literally paper and bits.

Do you think there should be the same amount of money in a world of 100 people as there is in a world of 100 million?
Get off my lawn: separating Docker workloads using cgroups
This really was a fiasco.

We went from big frameworks to a bunch of libs.

Many people got into extreme and even used stuff like left-pad.

I try to only include third party software for stuff I don't have the time or skills to implement. This makes my utils directory a bit bigger, but that's it.
This is one of the main reasons we built https://github.com/exceptionless/Foundatio as we didn't want to be locked into azure or aws and have a great dev experience.
I think paying only $1000 for a potentially company-imploding bug like that is incredibly short sighted.

It's far too low to motivate a lot of people to look for bugs, and to me suggests they're not serious about protecting their reputation if someone does find such a company-destroying bug.
> Proper keyboard, 3-physical-button pad/point, not too hot

HP's ZBooks? You can even replace almost any component inside. I got the first generation model (15") and it's very good. Sure, it's not light and slim.
> ... it's not about gobbling together the right tools and do some plumbing to make it work. No, it's using tools to craft a work of art. Anyone not recognizing this is an inferior software developer by definition ...

So — if you don't prioritize your ego and personal sense of artistry over accomplishing the task, you are an inferior developer? I would never want a person like this on my team.
Both graphs for iOS and Android are zig-zagging up and down far more than the overall trend. If you're trying to use this data to say Android has no competition from iOS then that's absurd. Their 'share' might have declined a little but during that time their actual installed base ballooned dramatically and is only a little less than half that of Android. Furthermore most of the sales growth for Android is ultra low-end devices that iOS doesn't even pretend to want to compete with.
Aka a creative subversion of expectations.

There are more than one ways to view this. Also, to me something is not clickbait if the actual content might be different from what I expected, but just as interesting or maybe even more interesting.
Actually, I can. Or perhaps not with no apples. But, I certainly use less apples... er energy... than I used to. By a lot, and I'm much happier.

Warning, past this point you may think I'm a lunatic. I really am trying to see what works and what doesn't work. I've been really surprised at how much stuff I really don't want once I've gotten rid of it.

I don't have a car. I hang my clothes on a line (I even went a year washing my clothes by hand, but my wife drew the line there ;-) ). I wash my dishes by hand. I have a 200W heater that I use for 4 hours a night in the winter (1 degree C). I have a small electric fan that I use for a similar time in the summer (35 degree C). I experience weather* (wow). I have LCD panel lights (which are incredibly awesome). My wife and I average no more than 1.5 kWh a day. Even though we pay about 40 cents per kWh, I can't remember when our bill exceeded the minimum charge (imposed by stupid-power-company-fees). I could go on and on. And the thing is, I really am happier as a result of what I'm doing.

Can everybody be as happy as me with as little as me? I'm not sure. Maybe somebody can do better. I hope so. But I keep seeing what I can do and showing it to others to see what they think. I think it's the only way.

* I use about $20 a year in charcoal in a hibachi in really cold weather. I work from home and don't heat the home. I try to heat me. However, below 5 degrees C is pretty hard on the health, so I really don't advise it. Above that is surprisingly doable. 10 degrees C is even pleasant.
If the full amount is <=1000 it's irrelevant what you're actually awarded for a bug as serious as this.
Hi you :)
> An unavoidable issue with group SENPAI exchanges is
the problem of love triangles [...] The authors’ recom-
mended solution is polyamory [...] We
remark that this situation is just generally shitty, and seri-
ously, what do you expect us to even do here?

I love this
> Anyone not recognizing this is an inferior software developer...

No True Scotsman at its finest.
Whalesong: a Racket to JavaScript compiler
Wouldn't a true white hat hacker report the bug no matter what the bounty? Therefor, the bounty is in place to encourage black-hat hackers to report the bug instead of trying to profit from exploiting it. But I do agree that it is in a security company's best interest to offer high dollar sums for reporting crucial bugs. I am just arguing semantics :-)
And when you sobered up? :)
I use password store to, and it works really well. I'm on MacOS but having it to work under Android and Windows was a breeze.
The point being it's available for a wide range of languages
While true, the economic environment is also geared towards an assumption that you'll provide the vast majority of your work to a company that takes ownership of the results and directly pays you for it. In my country, the majority of the current generation will likely never own a house, let alone be financially comfortable enough to work on a social project full-time.

The result is that the only way for someone who isn't wealthy to do charitable work is to get either Government or companies to pay you to do it. Companies will generally only pay you to do work if they're getting something out of it, and Government has its own interests at heart.

Getting people to pay you to do something is very, very difficult - it's hard enough if you're selling them something directly and right now, significantly harder if you're still working on a project, and harder still if there might not be anything concretely benefiting the person donating at the end of it. Charities largely manage by not paying many of the people who perform work for them, along with begging money from Government and companies, and their volunteers primarily depend on Government welfare.

It's not a perfect system in the slightest - it's incredibly hard work to be able to perform any sort of charitable work, at least as hard as running a business, and is heavily subsidized. A system which ensured that everyone's needs were met by default, rather than requiring you to prove that you deserve to have your needs met, would allow significantly more charitable work - specifically, it would allow for work that rewards the worker in ways other than monetary pay.
I am a developer that has done a few projects on the tradier API. Agreed
The word hippy and the negative connotations associated with it are fascinating to me, it's amazing how western societies have created a negative connotation to describe a person who is probably more caring, conscious and alternate thinking than your average citizen. Basically a hippy is someone guilty of 'thought crime'.

It's an amazing device.
The Nature of Code (2012)
Looking for Co-Founders
i am looking for Co-Founders who are interested in VR/AR Gaming. My goal is to finish the development of the ATOC Gaming Gun. For more information about the product just visit the website.
http://www.atoc-gaming-gun.com
That's true, but why is that a significant problem for Apple? They're already being slammed by some pundits because the iPhone GS 'might' be reducing their average selling price. You others are slamming them for not selling into the ultra low-end. The real question is do they have a viable, long term sustainable business and market presence.