skysight-inc/HackerNews huggingface dataset:
Many comments say "find & hire an expert" which is kind of vague and would take a few days probably. This comment is actually really good I think, way too low in the thread. An incident response team (of which there are plenty, and kudos for naming one, that makes it even quicker and more concrete) will know what step number one is to do right now (e.g. "make an image and bring it down"), before even officially hiring them to do further incident response and analysis.
3 ideas to add to your data science toolkit
Spark Release 2.0.0
Why SVN over Mercurial?
IRONSCALES,Launches Global Network to Share Phishing Intelligence in Real-Time
No, the regex was an actual trim. And they have indeed switched to that. The edge case that caused the slow performance was a lot of whitespace that did not appear at the start or end of the string. The regex would not remove that, nor would trim, but trim is much more efficient in doing the exact same thing. The regex may have been correct, but I doubt the expectations of the developer were met and it most definitely was the wrong tool for the job.
She also actively encouraged her followers to harass back to the people she was harassed by. Which he was accused of inciting although he never actually said it while she openly told they to do it and boasted about it.

But yeah one is a flavour of the month celeb and the other is a loudmouth who doesn't meld well with Twitter employees political leanings. But both violated TOS and both should have been banned.
It may just be the local reflection of the major conflict of our times: liberal democracies vs. authoritarian capitalism.

We actually got lucky during the cold war in that the other side was fundamentally quite stupid and bound to lose their power from a lack of economic performance.

Now there's a new crop of autocrats freed from the constraints of ideology. It appears that democracy isn't actually necessary for economic development and they're raising a crop of apolitical hedonists – well-fed, entertained an thoroughly harmless for their grip on power. When a bit more loyalty is needed, a little round of in-group -> out-group hatred usually fixes it.

China, Russia, Turkey, Victor Orban, and now Donald Trump: they're betting that people prefer "democracy on rails" to the sometimes scary or frustrating life in actual freedom.

(Oh, and the EU is obviously perfectly democratic, that just doesn't depend on your or anybody's (populous does not recognize...) opinion)
Migrating Uber from MySQL to PostgreSQL (2013)
Yes, occasionally sites don't allow it, but I've found if you use at least one of: uppercase, lowercase, numbers and symbols, and have a length of around 10, then it will go through virtually all sites.

I keep meaning to collate idiotic password rules so you can see for sure which patterns work in all of them, but I've never got around to it.
Build a chatbot in 10 min
I don't think it needs to be Facebook to not be fucked, but I agree with OP that it could change it's user metrics to better affect behavior. Maybe similar to rep here on ycombinator.com where you get downvoted by the community if you are an ass or not adding productively to the conversation. Combining rep with privileges like stackoverflow.com where a user can't DM until they hit a certain rep, or can't cause a notification on other's devices when they tweet would curtail sock-puppeting and other trollish behavior that plagues Twitter.

As for up to date news, I follow Google's top 10 searches in Feedly (where I follow hundreds of sites) and it works as a pretty decent up-to-date top news trend that gets updated every hour or so. I can appreciate if every hour or so is too slow for some folks though. I'm not in media, and don't really care if Rihanna fell of the stage a few minutes ago during her concert, but I totally get it if others do.
That's not the actual system I use obviously.
Supercapacitors are coming. It's going to be a rout.
http://www.nature.com/articles/srep01718

Nudging into lipo energy density territory in the lab.
It's not helped by organizations such as the BBC who report on what happens on Twitter as if it is actually news.
Tesla /might/ make a valuable product with good margins from the factory. I would rate that chance as greater than 90% personally, but it still isn't certain. Just like it isn't certain that Yahoo is a failed acquisition for Verizon, although you and I might rate the chance of that as quite high.

The profit of the acquirer is relevant in so far as it relates to the ability to finance massive acquisition projects such as these, and the market's willingness to do so. I'd say in both instances the market's willingness has been high, but people have good reasons to be skeptical both ways.
Some people don't even get the choice.
In the late nineties/early aughts, I worked for a company that hired a pair of guys after those guys showed up holding basically all the data from one of the company's services. The company started using these guys' custom software instead.

The server running this software was in our main server room although it was technically not our department. So one day, when a fairly serious bug was found, I had to chaperone the non-technical person into the service room. She was on the phone with these guys. For political reasons within the company, all I could do was watch. They instructed her, over the phone, symbol-and-letter by symbol-and-letter to add to live production code. What they added? A giant "if false" block around the buggy code.
While i don't believe a word Sweeney says until he sources his claims, your post has a few self delusions as well.

> Microsoft introduced many platforms since Vista - WPF, Silverlight, XNA, Win8 Apps (Windows XAML and WinJS), and UWP. I'm sure there are more :) Even with all of those new platforms in the mix, Win32 is still alive and well.

Not "Even with". More like "thanks to this chaos and the uselessness of those platforms".

> I believe UWP is a huge win for developers.

Without specifying which developers, that is meaningless. Last i heard a game dev can't even control vsync.

> The developer community needs to speak up if they want something. Microsoft will listen.

This is the worst part. Speak up WHERE? Speak up HOW?

"Listening" is not "reacting when a blogpost gets reposted everywhere". Listening is taking the time and place out of your day to make sure that the person has your undivided attention.
The point isn't that most poor people work 2 jobs or whatever, the point is that there are plenty of poor people that work very hard but don't get ahead. Someone born into wealth who even puts in half the effort of a single mother working two jobs is still going to be wealthy. Furthermore, if you are born into a family where you have to work hourly jobs to support the family at the expense of your own educational advancement, chances are you are not going to advance as much economically as someone who doesn't have to make that compromise.

As far as poor people and substance abuse, several states implemented drug testing regimes for people on welfare and what they found in all cases is that the drug use rate for welfare recipients was less than that of the general public, in most cases, about an order of magnitude less.

http://time.com/3117361/welfare-recipients-drug-testing/

The problem with the just world hypothesis is that it goes backwards from the successful outcome, then asserts that this outcome is proof that the world is fair. Person A is rich and successful because they worked hard and people who aren't rich and successful must've failed because they were lazy or irresponsible. But the truth is that circumstances are a large part of success and failure.

Sure, when you equalize circumstances someone's personal effort, ability, and choices are what determines outcomes, but circumstances are rarely equal. When you're talking about groups of people born into massively unequal circumstances, the whole 'just world' thing falls apart. Someone born into a poor area, with bad schools, poor economic opportunities, and crime problems is simply not playing with the same deck of cards. Similarly, someone in the professional world who doesn't have the same connections as others or is not willing to bend the rules like others may be, is at a disadvantage.

It doesn't mean that working hard and being skilled won't get you forward in life, most times it does. What it means is that success and achievement are not always fair and they are almost never independent of the situation someone is born and raised in.
True. I should add "and use copious blocklists and never look at your mentions" to that list.

Basically, you'd get the same experience by having an email list of your friends.
First DoD STIG Supports Agencies with Open Source-Based Postgres
Fingernagel kauen stoppen
So do you believe that a patient shouldn't be able to sue their doctor who took a shortcut that caused them harm?

Some people work in fields where there's an extremely high cost to making mistakes, and whose customers trust them to be careful and meticulous. Those people are paid to be more careful than your average code monkey who churns out regular expressions to save time instead of carefully researching the problem, performing code reviews, and using standard well tested libraries to parse complex but precisely documented standards like html and urls. Developing a browser plug-in to manage passwords is one of them.

Some people, when confronted with a problem, think "I know, I'll use regular expressions." Now they have two problems. -JWZ
Every platform that is public and anonmyous runs afoul of this, this isn't just twitter. You can look at Youtube comments, reddit, pretty much any forum.

What's missing is that other platforms, like Facebook, took a very hard stance on this and forced people to signup as their real identities.

Twitter, can easily follow suit. That won't fix all of the problems, but it will go towards improving things and it won't require massive product updates and changes to the UX.

Given that their MAU growth numbers are low, and no longer the number that they want the public market to focus on, actually instating this now wouldn't even be that damaging from a reporting perspective, and if they bled out a few users that weren't really contributing it could go a long way to improving things.

Technically there is a privacy setting that twitter doesn't play up that can be used for people that want to use twitter as a consumption platform and limit the interactivity from other people.

Twitter is still fundamentally different and more open than facebook and with requesting non-anonymous users they can still keep that open platform and potentially clean up some of the outlier conversations that seem to be a focus for so many people of what's wrong with twitter.
>One nice thing about being transparent and consistent with salaries is that you can have an objective conversation with someone about the reasons that they're making less, versus having to rely on vague, irrelevant, or harmful explanations...

Those objective conversations are a great benefit to salary transparency in theory, and I can't imagine you can open up your numbers without being at least somewhat prepared for those conversations to take place. I would be curious if companies that provide salary transparency wouldn't be scurrying to make some salary adjustments in the days before the data becomes public.

The issue lies in the fact that developer contribution is more than just commits and LOC stats, and it's tough to measure objectively. You're likely to get into some rather vague explanations, even if they aren't as nefarious as negotiating ability or salary history.

It's a step in the right direction, though until we have clear and widely accepted methods of measuring contribution we'll still have disagreements on individual employee value.
I have never understood the password manager market honestly. To me it's very obvious that the CONCEPT of a "single point of failure" is a terrible idea. Putting faith in one or the other is just like humans backing politicians, they think they are backing something when really they just got manipulated into an opinion which they slowly defend more and more.

Don't use a password manager, remember your passwords, or reset them all the time. It's a conceptual vulnerability, and if you read hacker news you are better than this.
This has already existed for ages using trusted third parties. A while ago on Facebook there were things were you could say which of your friends you fancy, and if you match it sends you both a message.

The problem is there's no real disincentive just to say 'yes' to everyone, just to see who said yes back. Kind of like always swiping right on Tinder (although I'm sure they punish you for that in some way).
The only thing moderators did to this post is turn off the flags on it so it would go back on the front page (https://news.ycombinator.com/item?id=12173595). We did that in response to emails: polite emails, I might add, making the case for the article and the thread. Had you written a polite email instead of posting a drive-by (and completely bogus) attack, you could have contributed to that outcome yourself.

One good thing came of this. When I read your comment, it occurred to me to add "Presume good faith" to our provisional list of new HN guidelines.
WRT the "Harasser’s Paradise" section: a few months back I uninstalled the Twitter app from my phone and I started using the mobile site. It works great and it kills bullshit notifications.
For that particular circular definition of "successful."

If you follow the naive but socially sanctioned view that making money = success, or "getting what you want from life" = success, then hedge funds can look like very successful places.

If you have a more independent view - the kind of view that someone like Dalio, for all his alleged openness, is likely incapable of understanding - then hedge funds aren't going to be the right place for you.
Yes, a strange article.

If your first thought was that it is probably rarely a good idea, and that there there will probably be complications, your first thought was correct.
Speech is not violence. The author's conflation of the two trivializes actual physical violence.
How exactly does the flagging work?
In addition to the wonderful technical advice already here for how to deal with the server, there is the question for how to deal with the anonymous person. If the proof contained the method of exploit I suggest something along the lines of:

"Thank you for bringing this problem to our attention! We are taking steps to resolve the problem now, but would like to reward you for your work. If you let us know how you would like to receive if, we would be happy to donate $X to your efforts."

Where $X is something you think you can easily part with, $100, $250, $500, $1000? This both primes the sender to be more generous, if they were on the fence as to whether to do something nefarious, and establishes some small trail to them (depending on method) in case of major problems with them later.

If the proof was not included in the email, I think it's much more likely you just received the opening email in a blackmail campaign. It's highly unlikely that server is even the entry point in that case, so cleaning it will not resolve the problem. It's just the sacrificial lamb for them to prove they've got leverage and let you stew, and they can contact you again after you think you've cleaned out the problem to let you know they still have access, and the only way to be rid of them is the pay them.
The success of Tinder demonstrates demand for a faster and less ambiguous protocol. SENPAI is basically Tinder without a trusted third party.
In addition, Twitter lets anyone contact anyone with any kind of content, and will send a notification to the recipient. As a result, any person or bot with a Twitter account has the ability to interrupt your life with an invasive, hateful message at any time.

What? I thought they had to follow you for your Direct Message to reach them. So I can contact potential advisors through twitter if I can't figure out their email address?
You aren't writing checks. Send a Congressman $1000 (that's really all it takes to get their attention) and you'll be amazed how responsive they will come. Senators are a little more expensive, but still reasonably priced at $2-5k. Presidential candidates are in the low five digits.
> I mentioned firewalling sshd to a subset of trusted IPs - which would still secure you against the above attack.

No, it doesn't secure you against the above attack. If they can use an XSS to get full access to the server and get the SSH key, then hardening SSH does pretty much nothing, they just whitelist their IP and continue accessing the server. We don't know that they got SSH access via SSH. Until we understand how they gained access to the server, blocking off other means of access that might have nothing to do with how they gained access does nothing.

> I also love how you can take genuinely helpful posts - after all, it's better to harden SSH regardless of whether this specific attack initially came directly from SSH - and somehow turn those contributions into something negative. God bless internet messageboards.

Sure, hardening SSH is always a good idea, but until we actually understand how the SSH access was obtained, we don't know that it fixes the immediate problem. It absolutely is negative to give people information that persuades them their problem has been solved when it hasn't been solved.

I don't see any reason for you to take my post personally. It's not an attack on you, it's just pointing out that we need more understanding of the problem to actually solve it. Don't shoot the messenger.
2 devalues 1. Don't do it.
I wonder why twitter will not use Machine Learning to remove terrorism propaganda from their social network? I mean you can train neural networks to recognize terrorism spreading accounts and tweets. It's not black magic, NLP to get intent + classification of known/blocked terrorist accounts and just train. Then show message "Sorry but this tweet looks like abusing our rules, please wait until our staff will check it" or something like that. If you do nothing where you can then you are just accomplice to spreading terrorism.
> "I think there's a possibility that the arbitrary enforcement is partially because Twitter knows that if it were consistent in enforcing its own rules, so much of its population of users would disappear that it would be hobbling itself."

This x100. If you have no followers and no one is re-tweeting your vitriolic slime, why should twitter care, they simply want you to stay on the platform. Now if your circle has reach and you are a known public name, they must act as if they care. They play politics to please the masses, without subjecting the masses to the same politicking.
You're not giving the max ($2700 for primary, $2700 for general) each election and gathering up a dozen people who give $1,000+ donations.

This would likely be enough to get one congresscritter to look your way, at least.
we don't know if OP is even in the valley
Low income reduces the value of the deduction. I'm sure there are a gaggle of cpa's optimizing his 1040.
Scientists have found a woman whose eyes have a whole new type of color receptor
'Newer model' was last updated year and a half ago.
Ur-Fascism by Umberto Eco (1995)
Great question. It's the quintessential platform tradeoff. You pay in the short term to utilize their free tools (backtesting, data sets etc). The potential opportunity cost could be pretty steep if you create the next Renaissance and they reap the majority of the gains from licensing your algo.
Surface Book perhaps? If you want similar build quality to Apple in a laptop, I can't think of much else comparable. I bought one a few months ago, been pretty happy with it so far. With two batteries in it (tablet and base) the battery life is outstanding (6 to 8 hours depending on what I'm doing). When connected, both batteries are used to power the laptop.
Getty Hit with $1B Copyright Suit Over Photog's Donations
Total side beef: can we all please stop comparing Pokemon Go DAUs with those of massive social platforms that have been around for years and years? It's just silly.
Doesn't matter, still looks cheap. It's too much of a seam if you see what I'm saying
True - we don't have a lot of choice sadly (other than to live east) but the blight it adds to some stunning areas in London and to the south west is insane. We wouldn't put up with trains being that noisy!
Fuzziness and ambiguity is good for the rational mind. We can't evolve our thinking without mutations.
This is a summary of a paywalled article at http://www.law360.com/articles/821177/getty-hit-with-1b-copy... . [Edit: as
e-sushi submitted before I did.]

The court case is Highsmith v. Getty Images. Nothing is available (yet?) from https://www.unitedstatescourts.org/federal/nysd/460787/ though http://www.open-public-records.com/court/new-york-16850529.h... says that many things have been filed.
It seems like there's a limit of $47k, at which point it doesn't apply. Most developers would probably be making well above that.
Uber's Attempt to Dig Up Dirt on Litigious Customer Blows Up in Its Face
I'd love to reduce my workload and avoid exhaustion and burnout. But the simple fact is, for me, and I would assume most workers, doing so would mean inevitably slipping out of the middle class. My 50-60 hour weeks barely let me afford to live a 2-hour commute away from work. I don't know where I'd even live if I worked/made less.

I know people who aren't working to burnout levels. They're not doing great. Living paycheck to paycheck and in tiny cramped apartments. Not ready for that lifestyle, myself.
Ask HN: Why are recruiters not able to maintain a normal conversation?
I've noticed some strange behaviour in recruiters.

Somehow they aren't able to make a normal conversation. They go all casual, like they want to know more about me, but aren't able to answer sufficiently when asked a question themself.

Often I feel like talking to a mentally challenged person, who simply doesn't understand what I'm saying or someone who simply hasn't the capacity to read my whole mails.

Why is this the case?

Are they simply no real persons talking to me?

Do they think I am mentally challenged and not able to be talked to normally?

Do they do this on purpose to keep something from me?

I really would like to know why I have this feeling and how to talk to such people, because they seem to be the wall between me and a potential customer. In the end they just waste both our time.
I've detached this comment from https://news.ycombinator.com/item?id=12173595 and marked it off-topic so as not to distract from the thread.

The way flagging works is that users click the 'flag' link that appears after the timestamp underneath a story title. A user needs a small amount of karma (31 or more) before such links appear. Flags have a number of effects, one of which is to downweight a story so that it is more likely to fall in rank. If there are enough flags on a story, the software will eventually kill it (close it to new comments and hide it from users except those with 'showdead' set to 'yes' in their profile).

The purpose of flagging is to indicate that a story does not belong on HN. Frivolous flagging—e.g. flagging a story that's clearly on-topic by the site guidelines just because one personally dislikes it—eventually gets an account's flagging privileges taken away. But there's a new 'hide' link for people to click if they'd just like not to see a story.

Flagging of comments is important, too. If you see a comment that breaks the HN guidelines, such as by being uncivil, you should flag it. But there's one extra hoop to jump through in the comment case: you have to click on the comment's timestamp to go to its page, then click 'flag' at the top. That's a speed bump to dampen impulsive flagging.
That said: LexVec gives quite good results on word-relatedness for using only distributional knowledge, and only from Wikipedia at that. Adding ConceptNet might give something that is more likely to be state-of-the-art.
Except when they choose not to be.