skysight-inc/HackerNews huggingface dataset:
>It is a fact that both interest rates and the price level were exceptionally stable during the international gold standard, which lasted roughly from 1870 to 1900.

A fact?

Here's a sample of inflation from that period:

1878: -15%
1879: -10%
1880: 20%
1881: -5%
1882: 8%
1883: -2%

And on and on...what exactly was "stable" about that period? Compare that to, say, the 30 years from 1986 to today.

http://www.multpl.com/inflation/table
"Cost in terms of lifestyle" compared to what?
there're studies (e.g. this report from citybank[0]) that shows that inaction is actually more expensive, taking into account the cost of the climate change disasters...

Seems to me that people believe that doing nothing we will keep living in the same way. Sorry to have to wake you up. Doing nothing will screw up the planet and your (and mine) "lifestyle".

The article referenced in this discussion[1] have other nice data/information about this topic.

I have kids and this is not the future I want for them.

[0] https://ir.citi.com/hsq32Jl1m4aIzicMqH8sBkPnbsqfnwy4Jgb1J2kI...

[1] https://news.ycombinator.com/item?id=10622615
Quite reliable with Optimus? I'd bet your experience is based on desktop GPUs, but Optimus is painful with Linux.
While very idealistic and beautiful in a way as all manifests tend to be, we (along the author) tend to forget certain truths - the middle of the gaussian curve is fattest; all natural distributions follow that curve, and developers are no exception. Most of us, by definition, are mediocre. There's nothing that can be done about it. We should not shun, but rather embrace that. Not by deluding ourselves that if we follow some idealistic manifesto we somehow rise above our limited skills and minds. We will not. We will suck. Our tech will suck. Other peoples' tech will suck. There is no ideal that can be attained. This is not the profession of saints and Buddhas. But by knowing this, by accepting this, we can start working on raising the standard for mediocracy...
Both parts of a project need estimates. If you are not estimating for the known parts how can you project how long the project will take? Its the unknown parts that can have a lot more variability to them.
Right now an Android Coder is needed with experience in sensor fusion. A CAD Designer and a PR/Marketing Manager.
? you expect them to GPL a triple A game engine?
Until you realize you want to connect a monitor or projector: https://github.com/Bumblebee-Project/Bumblebee/wiki/Multi-mo...
Nazi Germany was Christian, very much so (There were also fringe pagan elements, yes). Atheists were persecuted under Hitler. Soviet Russia didn't kill anyone in the name of atheism. Atheism isn't an ideology, only the lack of a certain kind of ideology. There isn't much that unites atheists. It doesn't mean atheists don't subscribe to any ideologies, of course. In the case of Soviet Russia, the ideology responsible for the atrocities commited would be communism. Of course, these ideologies are not the sole reason people turn into savages. But Nazi Germany and Christianity for example were compatible because they shared a lot of hatred against jews. Christianity made a lot more people susceptible to Nazi propaganda (together with economic problems) than would have been possible.
Adekunle Gold to Sue Bloggers for Uploading His Album
InfoQ Podcast: Caitie McCaffrey Verifying Distributed Systems and More
Industry, government. The end consumer is something like 10% if that.
Why not? I've been using it for about a year now (switched from LastPass) and haven't had any issues. Kind of miss the in-browser features of LastPass, but seeing as how those are what's being exploited, maybe not so much!
Hackintosh, please.
I'm surprised they didn't mention Cloud Foundry, which runs on OpenStack, vSphere, AWS, Azure and ... GCP. It's owned and managed by an independent foundation and is the most mature of the open PaaSes, having a head start of several years.

I guess they see it as a competitor to Kubernetes. Or, plausibly, Google is very large and the engineers who are working on Cloud Foundry integration with GCP are not known to Miles Ward, Head of Global Solutions.

I work for Pivotal, we donate the majority of engineering to Cloud Foundry. We make our money selling a distribution, Pivotal CF.

Cloud Foundry's ability to switch cloud providers, or to take a cloud inhouse, and in future to do so seamlessly, is very attractive to our customers. IaaS providers remind them the bad old days of RDBMS and middleware lockin and they do not want to go back.

As for the services, it's good that Google are pointing to open alternatives.
Don't use anything that runs in the DMZ (browser), if you care about your secrets.

I use keepassx, which requires manual search, copy, paste but it can store its vault on a cloud drive, mobile etc. and can have a key file or password.
And no one is obligated not to take that into consideration when deciding whether to use the product.
Thanks for sharing! It sounds like you have a great system going there.

My wife and I both work full time (me from home with flexible hours, her with a ~1hr commute) and we have two young kids. We have a nanny who looks after the kids during weekdays.

What makes it hard is that one of the kids is almost always up multiple times during the night. My wife and I take turns doing the night shift, so every other night has me up at least 3 times (last night was a 'good' night, I was up at 11pm, 1am, 4am). Like you, I don't function well at all if I don't get enough sleep - I can crank out boilerplate code OK but if I have to think then even 4 productive hours is a battle. Combine that with the fact that, working from home, I'm the default person to handle any number of work-time shenanigans and I almost never make it to 40 hours of work.

The biggest factor here is the lack of sleep due to kids, so hopefully it'll be a whole different situation in a few years' time.
>If so, I am a little taken back by LastPass only offering $1,000 to the researcher that found and reported it for fixing.

I am a lot taken back by it. This wasn't a minor bug. I don't care if $1,000 was the published maximum payout under their bug bounty program - for something like this, the payout needs to be representative of the damage that would have been done to their reputation had this bug been discovered and exploited by bad actors. Given that reputation is everything in this space, any well-publicized incident using this would have effectively rendered the company dead within days.

Here's hoping they reconsider the award amount (though I'm certain they won't).
Did you see the reply from a 'former Lastpass engineer'?

> @taviso Are you looking at their binary? (I'm a former lastpass engineer)

> @ejcx_ Yes.

> @taviso Ahhh. I never touched it. Very neglected. There's a lot of stuff between message passing between extension and binary that is scary

https://twitter.com/ejcx_/status/758080992724738048
If the Blockchain Is the Next Internet Then We Should Answer These Questions
Exhaustion might have become a status symbol for workers, but according to https://news.ycombinator.com/item?id=11821629 (http://www.theguardian.com/lifeandstyle/2016/jun/01/sleep-ha... ) getting a good night's sleep is apparently the new status symbol for the elite.
21 Awesome Websites That Teach You to Code for Free
No mention of "Pigs in Blankets" - celebrating the recent murders of police [1]

Of course there won't be much done about that because Dorsey is friends with BLM leader Deray Mckesson. They shared a stage to talk about free speech on Twitter back in June, this is what they came up with :

> “I believe we need to build a platform that respects and amplifies every voice in a way that the world needs to hear it. I trust that the world will amplify and retweet and have conversations where appropriate.” [2]

Twitter seems to claim that they control the narrative, setting themselves up as the arbitrators of what the world needs to here and what is and isn't appropriate. I think that is a dangerous position business wise, no common carrier defence.

[1] http://www.breitbart.com/tech/2016/07/08/black-lives-matter-...

[2] http://www.breitbart.com/tech/2016/06/02/jack-dorsey-blms-de...
it never had any relevance to lose & pokemon go is just the latest in ~5 years worth of fads to have passed windows phone over
I once came across a bug in a codebase I inherited that parsed URI-references from HTML documents. That bug was caused by using that very same regular expression.

The string "foo" correctly gets parsed as a path (group 5). However the string "foo;key:value" gets parsed as a "foo;key" scheme (group 1,2) and a "bar" path (group 5) by the regular expression, but as a path if you follow the grammar.

scheme = ALPHA *( ALPHA / DIGIT / "+" / "-" / "." )

vs.

^(([^:\/?#]+):)?

:; are reserved characters, but they do not need to be encoded when they are a part of the path.

So yeah, don't use regular expressions for parsing.
A few clarifications:

The paper is about searching for bugs in ARM's designs - not designs by ARM's architecture licensees.
(ARM has two types of partner: those who use ARM designed processors exactly as provided by ARM and those who create their own processors implementing ARM's architecture.)

The tests are performed on the Verilog. There are very good and thorough techniques such as Logical Equivalence Checking (LEC) for verifying that what gets taped out actually matches the Verilog.

We used the v8-A architecture spec that provides Virtual Memory and other features you need to support Linux, Android, etc. This is the architecture that applies to phones, tablets, servers, etc.

And we used the v8-M architecture spec that applies to micro-controllers.

Also, it is worth saying that this is only one of many verification techniques used. This one focuses on the processor pipeline rather than the memory system, instruction fetch, etc.
You need to cut down on the noise. You mention so many things that it's hard to figure out "who you are". Would be nice to have something tangible you worked on that would give you instant credibility.

Wouldn't mention that you're homeless. As long as you can seem similar and likable to the founders you can talk your way into most startup jobs (if that's what you're after). So I'd mostly focus on the image you're projecting.
> Economic estimates of the cost of effective measures vary, but typical estimate is 0.5 - 1% reduction into world GDP. This is something we don't have political will to do and mentioning negatives is a taboo. Rational people just flatly refuse to acknowledge that it's possible that reducing carbon emissions might be net negative for economy next 20-40 years.

I think it is genuinely difficult to say that with any certainty. The economy as well as the climate is highly non linear, with all sorts of unforeseen cost gradients off in undiscovered territory, of low slopes and mountain ridges, and local minima.

The purpose of a carbon tax would be to lower the barriers in favour of low carbon technologies, but we can't say in advance what the result will be, until we are on that path, and seeing the outcome of our capital investments.

It's perfectly possible that we could collectively direct our capital investments solely in solar, batteries, fuel cells etc, and within a short period of time they drive below the local minima accessible through fossil and combustion technologies. You would see a great disruption of existing investments, but disruption is not inherently a bad thing.

You could see 40 years of extraordinary technological and economic progress, but even so you'd still have no way to compare what the outcome might have been of 40 years of energy investment going solely to fossil fuels, relative to the same time and money going to the alternatives. It is undiscovered until you are there.

I think ultimately we just have to do our best to price in the externalized costs and to a certain extent to set the hard limits of the amount of damage we are willing to inflict, and let the economy adjust to the reality of the situation.
The Carbon X1 is probably positioned as a competitor to some non-existent Macbook Air/Pro hybrid, and it does have a pricing thereafter. It will certainly have to be more expensive than a plain Air, with its weak CPU and otherwise lackluster specs.

That said, I still find complaints about the X1's price from an Apple-user funny. Whenever people in the past people was critical towards the pricing of Apple products, the response was always "Real quality costs money" and "It's worth it".

Is that no longer so? And is a quality higher than that provided by Apple unimaginable?
How much stuff do we in the west consume that originates in China, where they don't seem to give a damn about environmental controls?

And exactly how much CO2 and other chemicals are belched out by these giant container ships we use to get it all to us?

We can buy all the solar panels, wind turbines, electric cars and energy efficient washing machines we want, but until China (and probably others) starts playing ball AND we find a way to move vast quantities of stuff around without container ships we're probably fighting a losing battle.

Would it be possible to manufacture goods in the regions they're to be sold in?

edit: wordings.
Nvidia drivers do fail quite regularly, especially on laptops. Brightness control randomly stops working, suspend/resume is extremely unreliable, there are login issues on systems with both Intel and Nvidia graphics (supposedly solved with Mesa 12, which can only be found on Arch and Gentoo right now.) It's certainly not a panacea.

In my experience, the open-source radeon drivers are significantly more stable. Fglrx was a stinking pile of crap that has officially been abandoned - the whole driver team has switched to the open-source drivers, now.
I don't quite follow. The author says that by entering the URL "http://avlidienbrunn.se/@twitter.com/@hehe.php", the extension is fooled into autofilling as if the browser was on twitter.com.

What's the difference with simply going to "http://twitter.com"?

This looks more like a bug than a vulnerability, what am I missing?
I agree with the cohort theory, but to me it's not so much about the risk of someone selling an exploit on the black market, all though it's still a risk. To me it's more about how it reflects on a company where security is key to their product. Low bounties kinda gives of a vibe of not caring about the security of their product and maintaining it.

Personally I lost a lot of confidence in them when they got acquired and switched to 1Password, paying very low bounties for critical security flaws further hurts my confidence in them.
For those that don't recognise this, it's an ASCII quote based on an animation/scene from a Futurama episode entitled "My Three Suns"

http://www.tv.com/shows/futurama/my-three-suns-1540/

The planet in this episode is surrounded by three Suns, each of which has a different hue, and the play is similar to the astrological signs that exist here on Earth.

(And I for one appreciated the ASCII animation attempt)
You may donate by spreading the word about multi-factor auth :)
I sent the guy a note last night and he changed it. Very easy to read now.
Any good alternatives for LastPass Enterprise-style multi-user sharing?

(Apart from "don't use services that require you to share passwords for a single account". Alas.)
Epic Games founder says Microsoft's patches will make Steam progressively worse
You dont get it do you?
Extremely so.

My current (and only) working solution is to disable the Nvidia GPU on a host and use it PCIe passthrough to assign it to another Linux or Windows VM. That's the only stable solution that doesn't break the world when enabling/disabling the discrete GPU.

We shouldn't have to revert to such extreme measures...
A startup wants to solve India’s farmer problems with data and tech
Not having cron is a deal breaker. Cygwin is still better in that aspect.
An attacker could fool the extension to autofill a form on a domain they control with credentials from another domain and send the credentials to their server.
A bug that tricks the secure password management tool into revealing your Twitter password to a website that is not Twitter! That's a pretty major security vulnerability due to a bug in URL parsing.
Reefer Madness Hits Colorado’s Toddlers
I really appreciate what you are doing. Did you have to coax your wife along this path, or was she already of a similar mind?
I like your thinking. I don't there's much a regular person can do, even if you become an activist. You really have to become a salesman for climate change, you need to build up your voice and try to get CEOs and politicians to listen to you.

I feel the same way about vegetarians and vegans. You're not saving the world by eating salads or sharing the occasional thing on Facebook. You might feel better about yourself and your choices, which is great. But it's only a drop in the ocean, and won't have any effect unless you try to do something bigger. And it's actually going to help with global warming, if the world can start eating less (or no) cows and chickens.

It's certainly too big for one person to solve, but that's why people start organizations. I know it's not much, but you can start by signing this petition: http://www.stopwarming.eu/?petition=signup
Stop or significantly reduce animal consumption.

Stop or significantly reduce driving.

Stop or reduce flying.

That's all there is to it. A quarter of the US does that and we meet all our targets. Stop being a wimp and suck it up and do what's right. It's very obvious and doable.
To that end, LastPass is now a better option than it's rivals.

Only when you believe that all password managers are equally secure from the start.

There are many reasons to believe that this is not the case. Storing passwords in a cloud service is quite a red flag. Then there is a former employee stating on Twitter that part of the codebase is very neglected:

https://twitter.com/ejcx_/status/758081553712820225
Discussion of the article from quanta: https://news.ycombinator.com/item?id=12026022 (34 points, 23 days ago, 16 comments)
Market share can be a misleading metric. There may be many more Android phones sold at any given moment, but a majority of them are very low-end phones that have a short life-span. In contrast, most iPhones get used for a long time. If they don't break, they typically get handed down or resold when their owners upgrade. This means that there are (relatively) more old iPhones in use than old Androids, which means that the usage share is closer than the market share would suggest.
"Any sufficiently advanced satire is indistinguishable from magic" or something.

It's certainly brightened up my Wednesday reading the comments on here.
Show HN: The freshest links about gaming from around the web. A gamer's must
Gentlemen, I would like to interrupt this "google promotes open-source anti lock-in" PR party, and ask for a minute of silence for the recently departed GoogleCode.

Their actions speak louder than their PR blogs.

Edit: spelling
Yes, this library does not generate random shaped buildings or terrain regions. Instead, it generates them from real geographical data and allows you specify some noise parameters, e.g. :

canvas|z16 {

grid-cell-size: 5%; /* affects triangulation*/

max-area: 0.05%; /* affects triangulation refinement */

color-noise-freq: 100000; /* color of each vertex will use this noise value */

ele-noise-freq: 100000; /* height of each vertex will use this noise value*/

color: gradient(#dcdcdc 0%, #c0c0c0 10%, #a9a9a9 50%, #808080); /* color gradient*/

}

Also, some objects can be randomly generated for specific place, e.g. trees in forest. I found this idea where you have real geodata as input for randomization more interesting than having yet another planet generator with manual setting of various parameters.
There's a third that I'm familiar with, and find compelling: construction. Building a new nuclear power plant costs tens of billions of dollars (usually requiring government funding) and ~10 years from start to finish. The efficiency of wind and solar power is increasing rapidly, and in 10 years will likely be a better investment than a nuclear plant.
Why assume 'disgruntled' insiders when the established forces are the ones profiting from the hack? Or are you saying that they did it because Sanders would never have gotten through national convention anyways, but they could hurt Hillary by blackening her?
well, we could have nuclear container ships, I guess. May not be the best idea ever though.
The amount of heating is what's surprising, not the heating itself.
I'm all for nuclear. Among people who want to mitigate climate change, there's no more dislike of nuclear than among public at large (which is to say, too much, but not an exceptional amount).

The biggest issue with nuclear is that it, by itself, is entirely insufficient to deal with the problem. And the best policy solutions to climate change--namely, a refundable carbon tax--would themselves encourage the proliferation of nuclear to the extent nuclear is actually helpful.
Show HN: Automatron – Autonomous IT systems monitoring and remediation
That's brilliant, thanks a lot!

I never trusted "cloud" (read: not yours) password stores. I have been using KeePass and manual syncing, but I had my doubts about it too.

This looks perfect and simple!
I've been using Pass for several months and I love it. https://www.passwordstore.org/
Yes. Why not?
I'm not sympathetic to regex bugs where they're being used to parse untrusted user input which is then later used to do something important (like, say, pick which URL to submit credentials to). They're way too easy to cock up for anything security-related.
At least when corporations search for a health plan, they are intensely competitive in finding the best plan for the price. Every year when their policies renew is another round of searching, comparing, and analyzing the various options in their local market. Health insurance has got to be the most expensive benefit a company offers by far, and I know even at a small startup we spend a lot of time finding the best plan for the money for our group.

Compare that to the US government, which isn't even legally allowed to negotiate on drug costs, and look where that has brought us [1,2]. So you could argue companies "waste" an enormous amount of resources having to procure health insurance for their employees year after year, but it also at least helps establish at least some competition in the market, which puts at least some pressure on prices. Companies health insurance budgets are not unlimited (unlike the Fed's) so we don't see quite the same run-away pricing as you do when the purchaser is literally printing the money to pay for it.

Obama's famous "you can keep your Doctor" lie is very telling. Different companies will elect for very different levels of coverage. The law requires that whatever level of coverage you chose to offer your employees is offered consistently from management down to your cheapest full-time employee, which is a really smart policy. Large corporations have better negotiating power in almost all respects of their operations, supply chain, and yes, employee benefits. We wouldn't imagine trying to 'level the playing field' in any other aspect of the operation of a company, so I don't think that's a compelling argument for single-payer health insurance?

When small businesses chose to forgo even offering health insurance (which is that even legal now?) that is actually a competitive advantage for them; they avoid a huge operating cost, and implicitly are selecting for the type of worker they are looking for -- single, young, and healthy.

[1] - https://www.cms.gov/Research-Statistics-Data-and-Systems/Sta...

[2] - http://www.nola.com/politics/index.ssf/2016/07/medicare_pric...
> then the language just becomes more ambiguous and opaque than it already is.

It's already completely ambiguous in almost every way imaginable. We still manage to get by.
It is not acceptable because it breaks you workflow, possibly implies closing applications and opening them again.
How do you sync the two?
Japan Announces $265B Stimulus