skysight-inc/HackerNews huggingface dataset:
Does RKHunter scan userspace for mtimes? I haven't used it in years, so I'm honestly curious. Back when I did, it was customary to install it side-by-side with Tripwire, which essentially does only that; scan userspace and categorically log changed files based on a configurable severity depending on location (eg, /root/ is high, /var/log/messages is low)
Preview of Visual Studio Code's Time Travel Debugging
It seemed to me that some Xeons had those since 2014. See https://software.intel.com/en-us/isa-extensions/intel-sha

Should something be understood instead?
Box-js – a tool for studying JavaScript malware
I don't know about best practise but it integrates closely with Git. I store the encrypted passwords in a remote git repository. That means if someone else had the same GPG key and the password for that key, they could simply clone the repo and obtain the passwords. Equally they could add passwords and push them to the repo.

So that seems like a reasonable way for people to share them. However, I only use it for myself so I may not have thought of all the gotchas.
Those 5 lines probably had 100s if not thousands of lines backing them. Maybe best to say 'fewer lines of code executed' as it doesn't really matter whether those lines are in a library or in your project, they still have a chance for bugs.
OAuth 2 Simplified (2012)
Slightly off-topic, but I thought this would be a good place to ask.

Are there any word embedding tools which take a Lucene/Solr/ES index as input and output a synonyms file which can be used to improve search recall?
Reduceron is written in York Lava and is not a tiny project. Lava predates Chisel, Clash, and MyHDL and in my personal opinion is superiour. There are room for more improvement though and Real Soon Now I'll start work on that.
+ add google dictionary extension on chrome - double click any word will tell meaning of it.
To be fair, IBM and Microsoft are very different companies now. Maybe Facebook becomes the VR company and not the social media company?
From your post here, you clearly have only rudimentary security knowledge at absolute best.

You need to bring an expert and/or firm on-site.
That's wishful thinking. GCC isn't able to do that with C language, a 20 years old compiler with a 40 years language. How would a compiler know that you can use a SHA2 instruction? Yes, there are intrinsics but then what about specialized vectorized instructions which don't match any primitive types or operations in the language (like, you can't express "add with carry" in C or Go)? And how can you explain a compiler that there is no data dependency in memory access between different buffers? Yes it might be able to prove it by itself in some cases, but history has shown that things like autovectorization are too fragile and can't be relied upon.

Optimized C libraries like compressors or security have assembly implementations as well. I'm not sure why using assembler should be considered a signal of a defect rather than a proof of optimization. There's really nothing wrong in using assembly to write a bytes.Index version optimized for AVX2.
> Samsung Edge by itself is out selling Applier iphone ... does better than Apple

Cmon, that's highly misleading when one model is six months older than the other. Samsung flagships are blown out of the water in any sort of 12 month comparison with the iPhone.
Oh, it was more along the lines of "Okay, and we're slowly getting to the Trump bit...?" before I myself realized that the article was of legal drinking age in the US. So closer to your and ChuckMcM's thinking, though it didn't come across in my comment requesting the year be added.
Last I checked, Scotland was still part of the UK, yet this data for the 'whole country' doesn't even reach as far North as Newcastle.
My guess is some kind of request to Amazon customer service will do it, but don't have first-hand knowledge that that will work.
Six Months of Backpacking (Thoughts of a Digital Nomad)
They still count, because they buy homes here. They are consumers in the market, and they make the market sustainable.
> Everyone's on Facebook after all

I know of several people who choose to not waste their time with Facebook. Seriously, why? Any time I need to nudge somebody, that I don't care enough to bother with in the real world, there is Linked In. Everybody else either has my phone number, email address, or they are people I don't know.
Intro to Conic Sections
I a change in algorithm does not necessarily lead to change in results. Two algorithms that produce the same results may be disparate, but I suppose it's up to your definition of disparate
Maybe you mark the order as a gift? I've ordered some bigger things from Amazon like desktop PC cases that have arrived in boxes that have the name on them.
All of those are international actions. While the people in other countries impacted by these actions had no direct method to prevent the US government actions, the people making these choices do not have unchecked power.

All of these actions were subject to all the constitutional checks and balances of the US system. Obama's drone strikes is an election issue. Albright's actions were overseen directly and indirectly by Congress. Same with Clinton (or did you not notice the amount of time Congress spent on Benghazi). There's also been judicial review of many of these elements.

There is no real method of international check on power other than a threat of power in return. The UN, NATO, and international diplomacy tries to forge a method to ensure that war is less commonly used, but ultimately, as the invasion in Iraq showed, if the US wants to do something it can do it. Same with Russia choosing to take a chunk of the Ukraine.
>Did you just randomly make this stuff up? It is completely false information.

You are the one who is misinformed. Railroad operators are required to give access to Amtrak as part of a deal that allowed them to cancel long-distance passenger service. They would much rather not give access to Amtrak in the first place. Furthermore Amtrak is supposed to have priority over freight trains, however Amtrak is at the mercy of the dispatchers of the railroad whose lines they are travelling over.

The Northeast corridor is completely owned by Amtrak. Outside of that area, there are no electrified long distance passenger services in the United States. Outside of the Northeast corridor, flying is a much greener option than taking a train.
CReMa: base project to develop web and cordova applications all together
That's not really true. For example, the poor engage in risky sexual practices - resulting in 7x the unintended pregnancy rate of people with >2x poverty line income.

http://www.theatlantic.com/business/archive/2015/03/unplanne...

A quick google search turns up images like this, suggesting poverty is correlated with violent crime: https://i.imgur.com/gAmHXQw.jpg

Why not spend a few minutes googling before spreading false stereotypes about minority groups?
Depending on the industry you can find jobs in different places.

You have medical and defense that is far from solely represented in the Valley and New York areas.
Community Management: What Is It?
An example I like to give for why 1Password Families has helped me is this:

I work remotely for my job. I do travel several times a year as a result and when I'm gone I have other family members watch my house. Before 1Password Families I had to find a way to easily get my wifi password, my garage door code, and various other instructions and information to whoever was watching my house.

With 1Password Families I simply create a vault in my Family, add my items to it and invite the person who will be watching my house as a guest (or in my most recent case, granted my brother access to the vault).

In the first case, the person simply signed up, installed 1Password and they had access to the data. In the second case, my brother simply unlocked 1Password and the vault was there.

When I get back home, I simply remove access and those things disappear from their devices. None of these are so important that I have to change them, but, that's another step as well if necessary.

But that is how easy it is to share and use vaults in 1Password Families (and Teams).

I also love that using this I can add family members, like my parents, and it handles all the syncing for them so I don't have to micro manage it with backups and other stuff. It's a far more seamless experience. And since I hold the keys to the family kingdom, I can also reset their master password for them if they forget it.

Now, you might think you have no use for this, and that's fine, but it's an example of how someone who doesn't have an immediate family (I'm single, and childless) was able to use 1Password Families in a way that wasn't obvious when I first set out to use it for myself.

In terms of features that differentiate us from Keepass, I have never used Keepass so I am not able to speak to what we do differently. I'm sure there are things each of us do better though.

There is a trial version of 1Password, so, you could use it and see how it stacks up for yourself. I'd be very curious what you find better or worse so I can pass that feedback along to our team. Completely optional of course.

Kyle

AgileBits
Gotcha. It has an active enough community of developers to keep going?
"I think the point is 1) it encourages more people to go the black hat way".

How many times have people had to pay you not to commit felonies that are a) immoral, and b) could land you in jail?

I think most people don't need monetary encouragement not to turn black hat.
How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People
The Unexpected Dangers of Recreational Counting
Yep, the saddest thing about this whole thread is that yours is the only comment to even hint at what's unique about this particular golden parachute. CEOs have been reaping outsize rewards for failure since forever. Some have destroyed bigger companies than Yahoo, and reaped bigger rewards than Mayer. Yes, even some in tech. Even in search. Before Yahoo there was Excite. There's plenty of reason to be outraged, but put a slight pink edge on that golden parachute and suddenly the sleepers awake.
The issue mentioned in the blog post was fixed over a year ago [1]. However, the issue reported by Tavis Ormandy [2] is new.

[1]: https://blog.lastpass.com/2016/07/lastpass-security-updates....

[2]: https://bugs.chromium.org/p/project-zero/issues/detail?id=88...
From my original post:

> "I think there's a possibility that the arbitrary enforcement is partially because Twitter knows that if it were consistent in enforcing its own rules, so much of its population of users would disappear that it would be hobbling itself.
> "The only "safe" way to use Twitter now is as an echo chamber - only follow people you like, only talk to people who think the same way you do. That's a waste."

These are points. The content above them is evidence leading to the points. The points can be made on their own without the evidence, but a good way to construct an argument is to state the evidence before the points. I could have posted them on their own without the stuff about Milo and they would have stood just fine. That's what I'm referring to in my second comment. Length by percentage in this case has nothing to do with semantic or rhetorical value.

But I think you probably know that, since you ended this comment by insulting me again instead of responding to my content. It seems to me that it's easier for you to insult me than to engage with what I'm saying. I'm done with this conversation now. If you need to think me a liar in order to protect whatever your narrative is about all this, okay. If you just prefer to assume bad faith when someone makes a mistake, rather than give people the benefit of the doubt at no cost to yourself, okay. The rest of HN can (and has, judging by the flags and downvotes) decide for themselves.
It sounds like you know almost nothing about Howard Stern. Listen to some of his interviews and you will have a different comment to make.
VmWare’s virtualized 3D accelerated GPU is IMO very good.

Not sure about compatibility with the recent OSX, though. I used lion and mountain lion, and those worked well. AFAIR I’ve used vmware tools from Fusion.
Benefits of A/B and SEO
Great article (I'm a fan of the show.) If I may turn the discussion toward something a bit more HN-relevant, a few questions:

* The engineer in me is always intrigued by the operations of the show. Does anyone have any details on the equipment / software they use? I tried to gleam some juicy stuff from this shot:

https://static01.nyt.com/images/2016/07/31/arts/31STERNJP1/3...

But the blur effect makes it hard to make anything out.

We get to hear littles glimpses of things in the Gary-to-Howard banter ("Howard check JD Page 3 in Blue").

* Any sense of what Fred uses on his end? He obviously has a library of clips from the ages that he can pull up pretty quickly.

* Does he get real-time feedback / jokes / stuff from his writers / Benjy? Does that work over IM, or are people handing him slips of paper?
> I'm not sure why that doesn't qualify as a sense.

It does given your definition and does not given mine. There is no contradiction here just alternative ways of slicing up reality using abstractions. There is nothing inherently wrong with slicing things up your way as long as your definitions are clear and used consistently. Nevertheless, for my money the mind/body dichotomy is an error but why I think that would be a whole different discussion. ;-)
5 Tips to Reignite Hope in Your Heart When All Seems Hopeless
Also, they can only afford to use so much "funny money" (inflated stock) for the next company they'll have to pay $20 billion to buy.
Ah! thanks for this, I had no idea this existed . I have been reading Steve Squyres' - Roving Mars: Spirit, Opportunity, and the Exploration of the Red Planet for the past few months , and its pretty awesome. He gives a really wholesome perspective of what it took to get a ride to the Red Planet. I 'm going to read these journals kinda .. in parallel to the part of the book which explains post landing incidents.
Ok I'm not familiar with the FB ad platform but how does FB surface conversion costs? Using your example of real estate services there's no way FB can tell whether someone becomes a client after clicking on the ad. And without that information FB cannot calculate conversion costs.
The Facebook Rift is DOA. It's lost the respect and admiration of early VR adopters and that market segment is key for tech.

It lost not only on the technical front (by a lot, the HTC Vive destroys it), but on the ethical front as well by introducing console paradigms in a PC ecosystem.

Good riddance! PC must remain an open platform.
How Maritime Law Works
Wow "really big plans" that most be the reason to why they bought one of the the biggest VR companies on the market.
I mostly agree, but I would say that if the amount of a bounty affects your decision on whether to responsibly disclose it or sell to the highest black-market bidder, then you are at the very least a grey hat.
>waste their time with Facebook
That's a bold statement. People like me use it as a lightweight option to stay abreast with whats going on with friends and family without having to invest in a long call or email. You may think I don't care, but I do- but its hard and time consuming to call 50 people and ask 'Did you go somewhere this summer? How was it? What did you see?'. Instead I just 'like' when I see a cool picture they share and when I call them I can start by saying 'Wow- you had such a good time in Paris- why don't you visit us next year?'
Having depression is like having a broken leg--and then being expected to walk to the doctor's office.

Personally, I think mental illness awareness should be taught more like emergency response first aid or stroke recognition: don't teach it to the mentally ill person, teach proper intervention to the people who are more likely to notice it and do something.

The one mental disorder we actually do this with pretty well is ADHD, where family, friends and especially teachers and employers will generally notice before the person suffering it does. But then we use the fact that laypeople see it first as anecdotal "evidence" that it's not real, ignoring that you're a layperson too when you bring yourself to the doctor.

It's a tough situation all around. I look forward to the day when mental illness is better understood and proper identification and care is better communicated.
Show HN: Learn how to create a blog with HTML and restdb
Too bad Snapchat is also turning into a tabloid
Are you living around SV? Are you also working at one of the top tier companies? From my experience and from some others here the tool is reporting decent salaries. It seems most of those disagreeing are from companies in the valley.
Neat, but confusing. You can apparently pan around, but clicking has no effect.
in the first place. They will eventually sell in the US.
The Howard Stern show because of its longevity has had many great moments so its hard to choose. But I really liked the John Oliver interview https://www.youtube.com/watch?v=cQxyfbd2PzM
It is the situation though: Did I like the interview- because Stern is a great interviewer /or/ because I like john oliver? I am not sure
Less code does mean less possibility of bugs.
downvoting that benign statement is petty.
These helpful, well-written slides help explain where the "gradient" comes into "Gradient Boosting":

http://www.ccs.neu.edu/home/vip/teach/MLcourse/4_boosting/sl...

The gist of it is: when you add a new decision tree that fits to the residual error, this new tree is fitting to the negative gradient of the loss function (ie training error). Thus, adding the new decision tree to your existing ensemble takes a gradient-descent step that seeks to minimize the loss function (ie training error).

Boosting comes in because the model is combining several weak learners/models (individual trees) into a strong learner (ensemble of trees).
Each individual tree breaks up the input space into piecewise-constant regions that best approximate the target function. This representation will incur some error - thus, a new tree is fit to minimize the error over the entire input space, ie by breaking up the input space into piecewise-constant regions, etc.

So, it's boosting not in the traditional Adaboost sense: where the final model is a linear combination of "dumb" classifiers. Instead, I'd liken it more to a cascade method: each tree T_{n} seeks to fix the errors from the previous tree T_{n-1}:
https://en.wikipedia.org/wiki/Cascading_classifiers

There's actually a cool facial landmark detector that uses this same cascading idea to train an extremely fast (and quite accurate) system. In essence, they use a cascade of random forests (in a gradient-boosting framework) to detect landmarks. The dlib library has a great implementation, along with a pretrained model. I've used it in my research, and while not perfect, have been satisfied with its results:
http://blog.dlib.net/2014/08/real-time-face-pose-estimation....

http://www.cv-foundation.org/openaccess/content_cvpr_2014/pa...
It is factually correct, just because there might be some niche apps that perform better on Android does not negate the fact that, overall, the App Store generates far more revenue than the Play Store.

http://9to5mac.com/2016/01/20/app-store-ios-downloads-vs-and...
Speculators make bubbles, not sustainable markets. The problem is too many people are vested in property values, so when 2008 happened, everyone bent over backwards to prevent prices to come down to what their true sustainable value was. Bailouts, properties taken off the market, presidential speeches, all to prop up the status quo. Banks didn't pay the price, and so it continues.
Coinbase: On the Ethereum hard fork
> I was inspected the day I opened for business

Is this the correct way to inspect though? I mean if you've just opened everything is going to hopefully be shiny and new. If you left it a month before inspecting you might get a better picture.
The short list:

1. Use feature branches, no direct commits on master.
2. Test all commits, not only ones on master.
3. Run all the tests on all commits (if your tests run longer than 5 minutes
have them run in parallel).
4. Perform code reviews before merges into master, not afterwards.
5. Deployments are automatic, based on branches or tags.
6. Tags are set by the user, not by CI.
7. Releases are based on tags.
8. Pushed commits are never rebased.
9. Everyone starts from master, and targets master.
10. Fix bugs in master first and release branches second.
11. Commit messages reflect intent.
Its a bird! Its a plane!

No no thats just my bitcoin miner booting up
SoundCloud Is for Sale, but They're Having Trouble Finding a Buyer
map, filter, etc are not 'functional'. 'functional' doesn't mean 'functions'. It is all about side effects, and that the procedures in the language are like mathematical functions: without state or side effects.

Using your definition, virtually every language in use today is 'functional', all the way down to Fortran 77, since really any language you can get a pointer or other handle to a function or callable object would let you implement map, filter, etc.

Really the existence of map, filter, etc are not a clue to a language being 'functional'. Yes, you would need such things, but they are not sufficient. C is not a 'functional language', even though technically you can write C that is completely functional in style.

In fact, almost any modern language can be used in a 100% functional style, avoiding side effects and state completely. Nobody does this.

Even if it is one of your favorite things, virtually no one uses functional languages. This isn't because people are dumb, it's because functional languages are cumbersome and inefficient.
How an obscure mycologist left her mark on fungi
The explanation glosses over a few important details. Gradient boosting works by adding some small weight to the instances the model is incorrectly predicting. The amount of extra weight these instances get is a parameter that is tuned with validation - because this parameter can be 0, if you are doing correct cv gradient boosting trees is usually superior to random forests. You also do need to tune the number of trees you use in gradient boosting or else you will overfit.

Gradient boosting doesn't get nearly enough hype as compared to things like neural nets. The significant majority of winning solutions to Kaggle competitions for a non-image or text-processing dataset will use xgboost to do gradient boosting as part of the ensemble model. Furthermore, it is a really easy method to understand and use while still being state-of-the-art.
Great! Bill Gates started to be a tech mogul that recommends books. Now it looks like everyone that want to become a tech mogul must share reading recommendations. I liked this trend.
سكس هندي اقوي فيلم سكس هندي جديد سكس هنود
What is DR?
All you need is one job. One solid reliable job. Find that job in any city you like and you have found the best city for the programming job you like.

This is my own personal disclaimer, I don't believe in seeking "fun jobs." I believe in bringing fun into my work environment, whatever the hell it is. If I'm writing Cobol, Java, Python, a book, cooking or mowing the lawn. Find a way to make it a joy!

I also believe that you should make the most of the city you live in.

With that said, I'm in Detroit, having a grand time both in the city and with my tech job. :-D So, go find your best city and your best job!