skysight-inc/HackerNews huggingface dataset:
The current best guess is a 55kWh pack in the base Model 3. The Model S 60kWh has a 210 miles range, and the Model 3 will be smaller and should be somewhat more efficient.

And yes, there is no way that the Model 3's battery pack will cost anything close to $20,000. That's more like what the Model S's pack cost originally, years ago. The Model 3's entire existence is based on the Gigafactory cutting costs by a decent multiple from that level.
It appears to be disabled by default, though it's not very difficult to enable. I bet this would confuse a huge number of non-technical users.

http://www.howtogeek.com/219651/windows-10-allows-you-to-sid...
Thank the person. It wouldn't hurt to ask their suggestion. Enlist an expert on your team. Not every software developer is a system administrator and not every manager is an expert developer. YouTube videos doesn't make one an expert after a few hours.

I am certain you will receive very good advice here in the comments.

Technically speaking - you should give a little more data on your setup. A high level view would suffice. That way folks here can narrow their suggestions down.
Owning a home can create real returns even if the home only appreciates at the long-term inflation rate, because of leverage. With a 20% down payment and 2.5% appreciation, you're going to see a return of 12.5% on that down payment.

Of course there are monthly payments and maintenance too, but you'd have to live somewhere even if you didn't own a house. To account for those properly in calculating the real return, you really should diff them against the rent on an equivalent property. And don't forget the interest tax deduction.

Finally there is the wonderful fact that capital gains on your primary residence can be kept tax-free up to $250,000 ($500,000 if you're married).
Typo! I meant non-recourse.
If your company got compromised, and your next step is to ask HN for advice, maybe your company should not be in business.
Though somewhat ironically, Zuck probably isn't high income because his Facebook salary is $1 and the vast majority of his wealth is in FB shares that pay no dividend.
I'm not a fan of that option because it's causes an inconvenience for legitimate usage without offering any real security benefits. If you've hardened sshd then the biggest benefit you get from changing the port number is reducing the size of your log files. If you've not hardened sshd then you're just one nmap (et al) scan away from being in the same boat as you were previously.

If you really want to hide SSH from script kiddies then you're better off setting up firewall rules to whitelist trusted IPs. Heck, even port knocking[1] would be a better option than changing the port number.

[1] https://en.wikipedia.org/wiki/Port_knocking
Legal and encouraged in CA.
I don't know what employers you interact with that believe a prospective employee should take a sub-market pay in exchange for the privilege to work at their company, but it's terrible.

There have been many good articles on HN about salary negotiation, setting freelance rate, and seeing through the "one day you'll be a billionaire because of these options if you work for almost-free" and the kind of nonsense your touting does nothing but set the conversation back.
That's always easy for us to say in hindsight.
I have yet to find the time to do this myself, but my research concluded that Michael Halls-Moore's @mhallsmoore blog project qsforex[0] is the best place to start. I have used Oanda as a broker and found their service to be great. Plus, As far as I know Oanda is the first to the retail market with an open API. Although, I haven't yet used Oanda's API[1] as mentioned in the setup.
Check out quantstart's write ups[2] for the best info on getting started with algo trading.

[0] https://github.com/mhallsmoore/qsforex
[1] https://www.quantstart.com/articles/Forex-Trading-Diary-1-Au...
[2] https://www.quantstart.com/articles#algorithmic-trading
I agree there are lots of positives. But with increased transparency, what we won't likely see is someone saying "Joe is a better employee than me and I unfairly make more than him. Please reduce my salary." The adjustment requests are only going to go in one direction, and be requested by those who feel (wrongly or not) that they are contributing more than others.

I wasn't referring to the inability to compare price value of contribution as related to public salary data, but rather for internal comparisons. Not market rate across the entire market, but value compared directly with a co-worker. These should be related, but transparency within one organization is easier to assess.

If we have two programmers working on the same code base building the same product, how easy or difficult is it to determine who is contributing more and therefore worth more to the company? There are several factors at play, not to mention intangibles (catalysts, morale, leadership), and it's incredibly complex to say EMPLOYEE1 is 'more valuable' than EMPLOYEE2.
Note that chart appears to not work on iOS, as Plot.ly is erroneously snowing a "Webgl not supported" message (which is an error on their end, as the official website for the library shows the same issue. Issue on GitHub: https://github.com/plotly/plotly.js/issues/280)

That's a shame, as their API is pretty good, as this demo illustrates.
In principle, sure, in practice, each liquid fueling station has multiple pumps each with a throughput of 1 vehicle every 3 or so minutes. Charging stations on the other hand usually just have one or two plugs with a throughput of 30 minutes/vehicle best case and 8 hours/vehicle worst case. It isn't even close in practice.
Elasticsearch Cheatsheet for developers
I'm confused. The title says "Silicon Valley Elites" but the article says "tech workers", then goes on to list Mark Zuckerberg and some Apple guy who's salary is apparently 50%(!) stock, as examples.

So who are these banks "courting" again? Elites or tech workers? Or just these two guys? It's hard to tell. Interesting news would be "Banks giving kickbacks to CEOs and VCs who throw them corporate business." This article seems to just be "Look! Some people are getting sweet deals on their mortgages."
The reversing beep-beep ain't going to go any time soon -- it's a audio warning to prevent workers being crushed under reversing trucks.

(It might go if and when reversing cameras, which are now standard on automobiles, become standard on trucks ... but there are headaches implicit in adding them to articulated lorries: what about side blind-spots? What about the trailer, as opposed to the tractor? What if a trailer-camera isn't hooked up -- should it be impossible to reverse an electric tractor if it has a trailer hook-up but no signal from the camera on the trailer?)
Swarm mode is great, but I haven't found a good resource yet on how it alters firewall rules. I've been trying to deploy it to a DO droplet using Ansible and whenever I start throwing in ufw rules it overrules those. Ports that should be closed are suddenly open.
And when I use iptables I cannot even start a new swarm when I block some traffic on an Ethernet device that shouldn't even be used by docker..
Anyone have more experience with this?
I'm almost tempted to go to AWS so I don't have to deal with the firewall on the machine itself.
Glide isn't ideal either. It gets confused about vendored dependencies by 3rd party libraries and tries to download them separately.
Also, it's invented it's own format for the deps and lock files instead of trying to standardise on the ones already out there.
For the case where stock is not being pledged: I would be amazed if the lenders were taking on 100% of the risk of default. Usually there's some assumption of asset recovery. That probably means the no-money-down loan is being structured so that there is some additional liability on the part of the borrower. (The mortgage itself would be "nonconforming", so it wouldn't be backed by FNM/FRE.)

Or maybe we're just back to 2006 standards for mortgages and I'm slow to realize it.
Here's some context: I am a former LastPass user for many years and current (concerned) 1Password user wondering if I should be changing all of my passwords again.

My goal was to settle concern for myself and other 1Password users. That's why I wrote whether a similar vulnerability "does not affect 1Password" instead of "does". My apologies if this was unclear.
Graph Databases: Dataflow vs. Traditional Models
I do pretty much the same thing (but I keep pwsafe in version control). Great tool.
You should not take any financial risks if you don't have 6 months of savings
A long time ago, I was a software engineer at Boeing. The local SPEEA rep had a chart posted outside his cubicle with the salary (grouped by years of experience) for all the DS-9s in the office.

There were enough people that you couldn't identify your peers exactly, but it gave you a very good sense of what everyone else was getting.

I would love it if more employers would do this.
> premium UI interface that is definitely measurably better

Samsung has tried that to death. It has had the opposite effect, instead of people seeing the additional functionality as a benefit, it is criticised as clutter (and in fairness some of it does slow the device).

Worse still Samsung turns around and blames their "premium features" for why their phones lose software updates sooner. And then people see more benefit in a cheap phone with virgin Android then a premium phone with supposed premium features, since updates last longer and the phones are borderline disposable.
> and it should come out of the salary of whoever caused it by indulging their own laziness and convenience by abusing regular expressions so carelessly and casually.

No. People make mistakes. Honest, unintentional, well-meaning mistakes. Don't punish individuals for being human. Help them learn from them.

Don't make individuals afraid to do their job.

Should the _organization_ be punished? Should they pay more than $1000? That's well worth discussing.
Front end Developer Job – flow.ci team needs you
I also interviewed there. They had me fill out a feedback form following the interview to tell them how to improve
However: plug-in hybrids would be an option. (Diesel pack and fuel tank for off-grid use, electric motor and battery good for ~20-50km as well for use on short trips about town/daily commutes.)
Not just thin, but also curving edges etc to amplify the appearance of thinness. These two combine to leave little internal space for actual hardware.
I wonder why they don't mention https://en.wikipedia.org/wiki/Leonid_Rogozov It seems like in that case, it was a good idea.
Does anyone use Racket in the wild? For real projects, not counting the Racket team.
We should write a library for that with webgl + GLSL backend for faster computation (It would be quite a hack: textures would be used to store data and communicate with JS, but everything would be much faster). We could also use WebCL but this thing does not seem to work with many browsers.
Disclosure: At the last minute I escaped a terrorist attack in Israel when I purchased a candy bar at a local store.
(https://en.wikipedia.org/wiki/2008_Jerusalem_vehicular_attac...)

Dr. Paul Ekman is a worthy researcher, who studied facial expressions and has worked with the Dali Lama. The TV series, Lie to Me (now on Netflix) is wonderful and fun.

I was at Columbia University when the World Trade Center was struck. I used to work in a building across the street from the WTC. I could see the smoke down Broadway (Ave) from the WTC. Now there is a memorial (and an Apple Store will soon be on the site).

So, if torture would have prevented 9/11 should we have done the torture or should we have let 9/11 happen?

To me it is simple. Every single life is important. Ekman argues that while torture may prevent some terrorism it is not perfect. But, no intervention is perfect. Because surgery is not 100% in saving a life from a traffic accident, does that mean we don't do the surgery?

Instead of writing a blog post about torturing to save lives from terrorism, Dr. Ekman should visit with loved ones of victims of 9/11, and of terrorist attacks in Israel, France, .....
After speaking with 9/11 loved ones of victims, he could visit the loved ones of about a dozen teenage girls that were killed waiting in line to go dancing.
https://en.wikipedia.org/wiki/Dolphinarium_discotheque_massa...

Empathy is really important. I'm surprised at this blog post.
Google Chrome? Although the market effects are very debatable in web browsers.
I'm no truck expert but that shouldn't be that big of a problem. There are already power cables between trucks and trailers [1]. Thing is to just make a thicker one.

Weight is also no problem as 500kg of batteries is nothing compared to 20 tones of a trailer.

1. https://en.wikipedia.org/wiki/ISO_standards_for_trailer_conn...
Wal-Mart Proves Open Source Is Big Business
I'm sorry, but I don't see how asking an employee of the company that makes the product that I use every day is "discouraging devs to participate by taking their presence as an opportunity for drive-by pot shots".

I think an official word holds more clout and is more valuable than any one person confirming for themselves in one version of one browser on one version of one OS.
"Let it Go...."

To expand a bit on my comment: One of the main problems I hit, with anything not 'rational' is the fact that I endeavour to do things 'correctly'. If I don't get it 'right', then I'm obviously not trying hard enough or doing it properly - it's hard to settle down with something subjective and not worry.

Having said that, poetry is one thing I can do. Or at least, something I enjoy writing and for some reason don't worry about whether it's 'right'.
This is an excellent assessment with more depth and nuance than its title suggests. It also isn't the same old Twitter-bashing.

I hate Twitter, but I don't necessarily agree that it's too broken to fix. There's a place for a Twitter-like product in the world, and Twitter is already entrenched.

The question of a Twitter revamp is this: will it alienate existing heavy users? Will that effect be counterbalanced by new users?
> You can't really expect "bring your cat to work day"

Suddenly I want to find a place where I can actually bring my cat to work..
I assume he suggested Bitcoin because it's still a good way to handle money anonymously. If the person that breached the server wants to remain anonymous but get paid, that's pretty much the only way to go.
Developing Internet of Things Building Blocks
ClojureScript is better than that, except for the type system.
That sounds fantastic! I've always wanted to go there. I have to be upfront, neither me nor my girlfriend know Malay but we could probably pick up some Chavacano or creole quickly.

I looked on your website-- I like it! Operations intern sounds good. I'm applying, thanks for letting me know!
Is someone going to lose their job over this?
Ask HN: Security vulnerability in deployment – what to do?
Around 1.5 months ago, I found a security vulnerability in a web page I developed, which was deployed by another person: A GET to an easily-guessable URL gives away a file containing a password with which one can login and modify content.

I reported that vulnerability immediately to the person deploying it and he answered he would look into it and reply. He did not. I sent two followup emails regarding the issue and did not get any reply.

What should I do to get the issue fixed? My first idea would be to notify the customer, but I am certain the customer can not fix it.
>if the argument is that employees “value” is shown by salary and Jane is unhappy based on her perception of contribution, isn’t that a fault with management for not recognizing that and fixing accordingly?

I think we're assuming Jane to be a rational actor with perfect information. Jane makes less than Joe and feels she does more than Joe. Management feels Joe does more. Theoretically, management can tell Jane that Joe is paid more because his contribution is valued more, but Jane's unhappiness only exists because she disagrees with this valuation.

Either Jane convinces management that her self-evaluation is accurate, management convinces Jane she is being paid what she's worth, or Jane updates her resume.
Universal apps can be sideloaded. [1] There may be a market for a service that skins the process in an end user friendly way. That market is probably larger than just games. An analog might be Github over Git.

Whether Valve should invest in developing technologies to keep Steam relevant is a business decision. This appears to be announcement of Valve's intent. I would not be surprised if paying off the technical debt incurred by Steam does not meet the investment model of Valve's controlling interests. The Windows ecosystem is littered with technically obsolescent cash-cows: e.g. Laplink.

[1]:https://msdn.microsoft.com/en-us/windows/uwp/packaging/packa...
Does anyone else experience mild anxiety reading stories about Bay Area real estate? Long ago I decided it can't be wise to buy instead of rent. Logic and math argue this must end and yet it seems there is always another "sucker". We seem to have entered a new phase in which Chinese are moving money offshore and into the local market. Lots of Chinese, lots of money, could go on and on but for how long? Ultimately a home is only worth what someone can rent it for, right? right? please????
Let's assume that there is a spectrum of honesty (say, from 1-10) and the pool of people capable of discovering vulnerabilities in your product includes people from the entire range.

If you're a 10 you will disclose responsibly regardless of a bounty, and if you're a 1 you will disclose to the highest bidder. The rest will weight profit, ethics, and risk in some ratio depending on where they fall on the scale and decide to act based on that calculation.

The company has to price their bounty on a few factors: how much they can afford to pay, how much a bug is worth to them (eg damage to their reputation, fines in the event of a vulnerability), and how important it is and to have researchers looking at their product instead of another product.

I agree with you that companies should not be required to pay people to prevent them from launching criminal conspiracies. But this is not a perfect world and people are not so black and white in their actions and motivations. There is no point trying to optimize your bounty program for the 1's or the 10's. Therefore, when optimizing for the rest it makes sense to pay as much as possible within the constraints I mentioned (in the previous paragraph) in order to tip the scales in your favor for the largest part of the spectrum possible. Right now the tech community knows about this problem with LastPass. If this exploit had made it to the wild things would've been much worse for them from a PR perspective.

I am hoping that the $1000 cap on the bounty program came from careful consideration of these factors, but my gut tells me it was a number handed down from management.
Yeah, good point, ships are pretty automated. But ships really do need crews for constant maintenance and supervision. You can put the helm on autopilot but that's about all it can do.

Now, let's talk about this again when someone makes a decent R2 unit.
Fwiw, Daimler is an investor in Tesla
Am I mistaken or did the article not answer the question at all? It just describes some processes, risks and examples. Most of them common knowledge of the practical man in the 21st century.
Farewell Philae: Earth severs link with silent probe on comet
Webix 3.4 released
It's not quite that simple. Every person has a charging station at their house, almost nobody has a liquid fuel station at home. Every liquid fuel station customer is not necessarily someone that will need remote charging much of the time.
Show HN: Designing a nice embedded UI for a personal security device
Out of curiosity, does this apply only to Chrome's extension framework, or to Firefox's and Safari's as well?

Context: I'm a new 1Password user who is contemplating use of the extensions for those latter two browsers, and while it seems probable their extension frameworks offer the level of security you describe, I'd like to be certain before pulling the trigger. Thanks!
More likely that he was borrowing a great deal and preferred not to be forced into an unplanned stock sale. As the article hints, the odds are good it was a short term loan, which could be one reason for the unnatural rate.
one problem with Docker swarm articles at the moment is that the syntax really isn't finalized.

For example in RC5 they move towards join tokens and away from secret...
Perhaps the reporter, Aoife White, should call the Facebook Board for comment, since they are ultimately responsible for the managers they hire.
They can. So can Humble Bundle and Steam and GOG.

Since November UWP sideloading has been allowed in Windows by default.
This story was flagged by users, no doubt because politics are mostly off-topic here and flamewars, which inflammatory topics predictably produce, are the worst.

However, more than one user emailed to plead the case for the article, arguing that it is substantive and pointing out that the discussion has so far mostly remained civil (a small miracle in relative terms), so we'll try turning the flags off on this one.

If the thread gets nasty we'll have to turn them back on, so if you add a comment here, please ensure that it is extra civil and substantive.
I ended up turning off autocorrect- too many problems

Searching for no-resource state brought up a huge number of programming links - sometime I worry about user customization in search and other UI elements
That's a good source, but last time that link was posted on HN, someone pointed out that there's a downward bias in that data, because on top of the costs of sponsorship, companies may still end up paying the employee more than what they state in the initial application.
I didn't say anything about options. I also didn't say anything about taking sub-market pay in exchange for a privilege.

I said that most employers would love to have employees where the salary is not the first (or even top 3) factors in their decision to take a job.

In other words, employees who actually want to be there are far more valuable than those just looking for a high paycheck.
LabSharegroup – exclusive deals – advance purchase
When you get a mortgage, three things happen:

1. You acquire a large debt to the bank,

2. The bank gives you a bunch of money,

3. You give that money to someone else.

Steps 2 and 3 usually happen at the same time, AIUI you don't actually have the money in your bank account.

Now, in the general case the "someone else" belongs to another bank. When "you" give them the money, your bank has to fork over a chunk of cash. They actually have to get that cash from somewhere. Either that have loads of spare money, or they have deposits, or they get loans themselves. If they get a loan they pay the loan rate (say the Fed funds rate), if they have deposits they presumably pay less.

On the other hand, if the "someone else" belongs to the same bank, the bank actually still needs to have some (though not as much) cash to support this -- that's the "fractional" in "fractional reserve lending". The loan to you is an asset, the other guy's balance is a liability, but the bank is legally required to have cash to support deposits, not just promises and collateral.
I'd be very cautious before moving SSH to a non-privileged port (over 1024). Any user on the server might start their own SSH server on the port assuming the real SSH server is dead. While this is hard to exploit (needs access to normal user, needs to kill real SSH server, need to get around SSH server key checking), it still is at least a theoretical reduction in security.
It has been enabled by default since November's update to Windows 10.
The Sunnyvale Shuttle: Lockheed's STAR Clipper
How odd. I just re-checked two freshly installed Windows 10 Pro systems I have next to me and that setting is configured to allow sideloading by default. Perhaps it's a recent change?