skysight-inc/HackerNews huggingface dataset:
Network effect and focus.

Black Hat has become the premiere vulnerability research conference, and, like the top science journals, there's a prestige effect to being accepted. Also, unlike Defcon, Black Hat isn't an entertainment event; if your talk is accepted at BH, there's no uncertainty about whether it's there because it's "fun" or there because it (supposedly) makes contributions.

Black Hat's talks are, as vuln research, generally much better than Defcon's. And Bsides is literally a conference defined by talks that are perceived as not strong enough to make it into Black Hat. That's why it's called "B-Sides". As with music, there are some B-sides that are better than their A-side. Some.

I don't know that many people in my field who take RSA all that seriously. I don't, and I'm continually annoyed by credible people in my industry twerping about submitting or attending RSA talks. RSA is a marketing conference.

Finally, with regards to price: I recommend against paying for your own Black Hat ticket. I have no insider information here, but I've been in the industry for a long time, some substantial amount of which was spent doing marketing professionally, and my insight about BH tickets is this: the two most important vectors acting on BH ticket prices are:

* The maximum price that companies will pay for a professional development event for their employees (this was the original goal of Black Hat: to come up with a way to get companies to expense Defcon)

* The sweet spot between attendance and ticket price that maximizes what sponsors will pay for sponsorships. Too high and attendance drops so much that impressions don't justify Gold sponsorship. Too low and the median attendee is no longer a prospect for most potential sponsors.

Neither of these two forces are about you, the conference-goer.

So my practical recommendations are:

* If your employer is footing the bill, get them to pay for Black Hat. Chances are it makes not a whole lot of difference at the margin whether they pay for Black Hat or Defcon; what they'll remember is "paying for you to go to an event", not how much the event cost. Black Hat is expensive, but it's not expensive relative to other professional development events in other spaces.

* Otherwise, pay for B-sides and (depending on utilikilt tolerances) maybe Defcon, but arrive in Vegas on Tuesday night and lobby-conf Black Hat. For the past several years BH has been at Mandalay Bay, and there's a big, terrible bar right at the food of the conference center that everyone hangs out in. Just treat that bar like the conference and tag along with people to events. Go to B-Sides for any talks you're particularly interested in.

* Don't ever go to RSA.

Other cheaper, credible, non-BH vuln research events include Infiltrate, Recon, and CanSecWest. They differ sharply in size w/ Black Hat, but not quality.
Steve,

TRPL has proven a fantastic resource for learning Rust. I'm wondering if you have a plan for how it will track the advancement of the Rust language itself - do you intend to maintain a version of the book for major point releases of Rust, minor point releases, etc?

I wish I could cite some specific examples but I didn't keep notes, but I think I've come across a a few instances where, say, something behaved differently in Rust 1.10 versus Rust 1.12. Will the book attempt to tackle this?
Thank you so much. :)
The crux of the matter:

large programs written in assembler in the 1960s included exactly this sort of documentation convention: huge front-matter comments in English prose.

That is the current state of the container ecosystem. We are at the “late ’60s assembly language” stage of orchestration development. It would be a huge technological leap forward to be able to communicate our intent structurally.

Upon reading this, my first thought is: Please don't say XML!
Do you mind elaborating on that point? I'm interested in hearing more
That a "good startup requires extraordinary thought and work".

I know several people who had started and sold companies (admittedly to the tune of a few million dollars, not billions), without devoting "extraordinary thought and work" to them.

For some it was just a side project where university was their main work.
I guess you are talking about database normalization. And it is part of schema design. https://en.wikipedia.org/wiki/Database_normalization
General Assembly’s Jake Schwartz on education, his ambitions, boot camps
Author here, happy to answer any questions about how ALB could fit into our cloud architectures.

Aside from growing pains for any AWS service -- figuring out how to use it and seeing how reliability it is in practice -- this seems like the new path forward for more of the services we're running on AWS.
Thanks, I'll check it out. Dunno what's up. Gah!
I too moved from a roboadvisor (Betterment) to Vanguard. The knowledge you need to make effective decisions on your own in Vanguard only takes 2-3 hours to acquire (at the Bogleheads link you provided). Highly recommend people take the time to learn instead of having your assets charging quarter after quarter by a roboadvisor.

EDIT: I'd still love for Vanguard to create Betterment's version of RetireGuide, which takes into account your income and various other financial parameters, and tells you how much to save in which accounts (tax deferred, 401k, etc). I'm a sucker for sexy UX.

https://www.betterment.com/retirement/

https://youtu.be/W6zk2Ki83Ug?t=23
British Millennials Are ‘Collateral Damage’ from Pension Gap
How  to Make Your Labor Day Marketing Festive and Effective
So what are the cases where "noisy and scrolly" bothers you in a way that makes it reasonable to apply blessed?
CX Is Critical to Building Customer Loyalty, but Many Brands Miss the Point
If you use a product and never caught a bug there then it might be that you don't need new version of the product?
In other case you'll be looking to fix that bug / contact product owner and you will eventually know if its abandoned / needs maintainer.
How much of this is the architect giving a well thought out design and the client simply saying, "No, I want it to look this way." and the architect simply gives in and does it the way the client wants because of the amount of money involved. Usually as a web developer, I can use the old adage, "Well, if we do it your way, it's going to cost X times more time and money." but when the client has unlimited resources, I would think it would be hard to simply dismiss them with this approach.

When I was in school for architecture, I only had one professor who gave us a reality check on this scenario and it was pretty humbling for a few of my fellow students to imagine a client would think they knew better than you with all your schooling and deep knowledge.
MapD is doing some fascinating stuff, but I'm really skeptical about the business need for speed.

I was working on a similar concept (GPU-accelerated Hadoop MapReduce) at the time, and everyone I talked to in the Valley (and believe me, I knocked on a lot of doors) was perfectly happy with their Hadoop jobs running overnight or in an hour instead of instantaneously. It also amazed me how many people were using Hadoop only for the distributed storage.

Maybe data scientists love taking coffee breaks...

In the end, I scrapped the project because nobody wanted it -- everybody said they were only doing I/O bound work, which my solution didn't really accelerate.

Interestingly enough, I talked to people from Fusion.io (data center PCI-E SSDs) who mentioned that everybody told them that they didn't need Fusion because they were only doing compute bound work.

A YC company, BigCalc, was trying to do a similar thing with accelerating R (by rewriting library routines in highly-optimized pure C), targeting hedge funds, but suffered a similar fate as my map reduce project.

Shockingly, people just don't need speed.
but you'll learn more...from finding and debugging all the edge cases the library authors may have already dealt with. And there goes the time you "saved" up front.

That’s a common argument when you have a build-or-import decision, but that doesn’t necessarily make it correct.

If you’re talking about importing a well-established library that has substantial functionality and a large user base with a lot of collective experience then yes, if the functionality is a good fit for your project then it could be a big time-saver. Likewise if you’re talking about importing libraries from a carefully curated repository with good review, testing and maintenance practices.

However, in the modern JS world, many of the libraries that get pulled from GitHub/NPM and incorporated into projects are neither large and well-established in their own right nor part of a well-curated repository. In fact, many of them are written and (maybe) maintained primarily by a single developer, and in turn depend on other libraries also written and (maybe) maintained primarily by single developers.

In that case, it seems optimistic to assume that everything you’re bringing in will necessarily have higher quality than anything you’d write yourself. Certainly it might, but on the other hand, you could just be trading debugging someone else’s code for your own, and with someone else’s code you’re working with one hand tied behind your back. It might still be a good trade, depending on how much functionality the imported code offers and how much time it will save you, and depending on how much overhead you’ll incur finding and importing that code and adapting and maintaining your own code to match. Or it might not.
> Nash's theorem is a mathematical theorem, and the proof is sound. It can't become less true over time.

Nash proved the existence of the solution concept he defined. It is true that at least one Nash Equilibrium exists for all games (with every information structure). It is more subjective as to whether 'Nash Equilibria' are particularly useful or interesting to specific classes of games.

Indeed, VN-M had already proposed a different solution concept that they proved existed in a narrower range of games (best response equilibria in 2 player 0 sum games).

In games with asymmetric information structures, stricter equilibrium concepts than Nash Equilibrium are often used, because there are typically a large number of Nash Equilibria for any game.

For example, Bayesian Nash Equilibrium and Perfect Bayesian Equilibrium restrict agents to forming beliefs in a 'Bayesian' manner, whilst the latter also restricts their actions to also be BNE in subgames off the equilibrium path of sequential games.
I don't know about Siri, but you can disable Google Now (actually, you have to enable it, if you want it).

There seems to be news, that since Anniversary Edition you cannot disable Cortana anymore.

Plus, I have to agree with hughw above, that there is a difference between phone and computer, what kind of data you have loaded on each. Windows 10, as it is currently, is simply unacceptable.
I guess this will happen right around the time that startups actually give people 'unlimited vacation time', which generally means 'don't take it or you'll be fired/left out.'
I was thinking it was odd to submit a stock quote myself, but then I thought this is totally relevant to HN because Twilio's one of the few "startups" (realize it hasn't been a startup for a long while now) that's actually made it public vs the new world order where companies stay private forever. I thought it'd be interesting to get folks' take on how crazy its public valuation is though. Full disclosure: I did buy the stock and I fully expect this to pull back significantly sooner than later, but I can't bring myself to sell it either, which is even more maddening because I think the valuation is crazy and if I was some pundit I'd say "stay the hell away from this thing at this price" (full disclosure part 2: I'm not a pundit of any sort).
Hey -- I wrote that BuzzFeed article in May. I'm always looking to learn new things. If anyone on here wants to chat and compare notes, off the record, please don't hesitate to reach out: will.alden@buzzfeed.com
It can still be a scam if you don't receive the goods.
I'm well aware. I'm also aware that the nice models are both few and far between and (the few that exist) cost the same (or more) than a Mac laptop.

Here's what Linus (or a certain OS fame) wrote about the situation:

"I’m have to admit being a bit baffled by how nobody else seems to have done what Apple did with the Macbook Air – even several years after the first release, the other notebook vendors continue to push those ugly and clunky things. Yes, there are vendors that have tried to emulate it, but usually pretty badly. I don’t think I’m unusual in preferring my laptop to be thin and light".

That was back 3 years ago. Since then he also adopted the Chromebook, but the general complaint still stands.
> I should point out that the index isn't really _just_ the largest 500 companies; they try to keep it properly weighted by sector and some other considerations as well.

Which leads to my question--is that extra work relatively minimal or significant and hard to produce?
What exactly is useful about it, I dont really feel like it would add anything to my experience.
Best Analytics Tools for Saas Companies [Case Study]
Wasn't this the idea behind Java "Servlets" back in the day? Also, I'd say that it was process-as-an-object in Smalltalk.
Last fall's "November Update" was the first post-release change to Windows 10 that was dramatic enough to fit the description of a Service Pack. The "Anniversary Update" should be looked at as Windows 10 SP2.
most people dont follow strict formulas
It's not entirely clear from that site, but it looks like they just let you batch up a bunch of separate orders in a single spreadsheet, and execute each one of them.

The grandparent post seems to be calling for a service that lets me say, "I'd like to start my own custom-ETF, consisting of A% Facebook, B% AT&T, C% Walmart, D% McDonalds, etc." and then let me invest money that "fund" every so often. I agree this would be a neat service. Currently, if you want a portfolio of specific diversified stocks, you have to either 1. Find a fund that is similar enough to the basket of stocks that you would like or 2. Purchase each stock individually (getting eaten up in commission fees). Both are less than ideal.
Okay just noticed it :) Thanks!
> I used to have terrible (social) anxiety when I was younger. I was extremely shy and would never initiate conversations with people I didn't know very well - I was always worried about what other people would think.

Not trying to minimize what you've gone through, but by your description alone, this could even be something completely normal (i.e. not a mental illness). Most people go through a social anxiety phase at some point. And they usually overcome on their own.

By contrast, the poster would vomit before going to soccer camp, every day! This may not be something treatable by "just" creating a long term goal.

Anxiety disorder is something more widespread. It's constant worry about every little thing that might possibly go wrong. Or even right. In many aspects of life, not just social interactions.
"you would if you had kids you cared about."

With that statement, you just lost any credibility your point had.
> When it’s working as your virtual assistant it’s collecting your every keystroke and spoken syllable.

So is a Google Search.

Whenever you type into the Google Search Box it is "collecting your every keystroke" or when you use voice search it is listening to your every "spoken syllable."

You can word stuff that way to make anything sound like a keylogger. Heck even Hacker News is "collecting my every keystroke!"

> But Cortana doesn’t stop there. With the recently released Windows 10 Anniversary Update, hereafter Windows 10 SP1, you can’t shut Cortana off.

Misleading.

You can turn off all the web integration functionality of Cortana and turn it into glorified Windows Search. What Microsoft removed was a specific slider that never really did anything, all the other privacy controls (including disabling web search entire) still exist either in the Privacy Settings panel or in Cortana's own settings.

> Maybe you don’t mind Microsoft listening to your every word so it can catch when you say, “Hey, Cortana.” I do. Yes, I want the coolness factor of being able to talk to my computer. But I want the reassurance that it’s not listening when I don’t need it to be. I want a simple on/off switch. Windows 10 SP1 doesn’t have one. This is interesting, though: Windows 10 Education does.

This is just outright untrue. "Hey, Cortana" can be disabled in Cortana's settings on all versions of Windows 10 with or without the anniversary update installed.
Why "forget technical debt?" A better title is probably simple, "How to Build Technical Wealth," the fact that a large part of this article is actually re-hashing the problems of technical debt notwithstanding.
USN-3061-1: OpenSSH vulnerabilities
...But it hasn't happened in the last 100 years--it also hasn't happened over the last 5-10 years. The Nissan Leaf, for example, is over 5 years old.

There are good reasons why EVs haven't dominated yet--cost, range, flexibility, etc. Battery technology hasn't changed all that much either: http://www.cnet.com/news/why-batteries-arent-getting-better/

Someday EVs may dominate, but it's doubtful that will happen in the next 5-10 years unless there is a large technological leap.
The Accidental Origin of the Hit Song ‘American Woman’
Regarding media/macro keys, I use an autohotkey script to map Win+[,],\ for volume down,up,mute... don't really miss the play/pause (spacebar usually works for that). Which covers my own 98% use case.

I prefer the buckling spring click/feel over most of the keyswitch keyboards I've tried... if I went that way, would lean towards cherry browns, but that's just me.
Taken to its logical extreme, you get Algebraic Effect Handlers: http://math.andrej.com/2012/03/08/programming-with-algebraic...

The idea is a generalization of try/catch in which all effects are accomplished through handler blocks that receive a continuation. Just like when you make a kernel call, your program is a continuation given to the kernel. Usually the kernel calls you back once, but some syscalls return twice (fork) or not at all (abort) by manipulating processes.

Coupled with reusable handler block bundles, you can wrap a "container" around any expression in your entire program.
Help me out SF progmr drops everything, moves 2 ethnic homeland,2 build up tech
I don't know anything about IPOs, but isn't that bad for Twilio? They could've potentially made double or triple what they did originally, right?
Fun fact: Save 70% of your income and use it to buy ticker VOO (Vanguard's S&P 500 fund) and you can retire in under 10 years

http://www.mrmoneymustache.com/2012/01/13/the-shockingly-sim...
> the bundler has more structural information about the code it's working with

For CommonJS modules this is only true to a very limited extent as the export binding process can run arbitrary code which can't be analysed (it's Turing complete).

ES6 modules on the other hand are static and can be extensively analysed without difficulty. This makes, for example tree-shaking pretty easy. Rollup is an ES6 module builder which is doing this already. The future's bright.
The awesome `tig` gives you a lot of that in a standalone tool.

I'm not sure how much overlap there is in functionality, I have not even used all the features.

Here's a good blog article on it: http://blogs.atlassian.com/2013/05/git-tig/
The lectures are well-regarded by many, but it's been argued that they're ineffective for teaching undergraduate students the process of solving physics problems.

Feynman himself was an exceptional mathematician, and used a very mathematical approach to solve problems. But once arriving at the solution, he identified a concise intuitive explanation, which he then presented to others. Everyone was impressed with the brilliant intuition, but it didn't accurately reflect the more laborious and mechanical approach he used to solve the problems [1]. The Lectures of Physics are similar: a series intuitive explanations that would be difficult to discover independently without actually working through the math.

[1] http://www.stephenwolfram.com/publications/short-talk-about-...
I really like Rust. As someone who never had a formal computer science education, the early version of this book helped me understand how programs handled memory in a way that no other resource has been able to.

I started looking at my Ruby programs and would focus on trying to reduce the amount of memory allocations in order to improve performance, and it worked.

Even though I don't think I am going to use Rust in a production environment soon, it taught me to think about my code in a new way. It definitely is a language that everyone should take the time to learn.
I agree with the sentiment.

As a generalist developer I have worked at all levels of the stack on front-end and back-end, depending on the project and never had a backend stack being "a long list of functions that mapped to HTTP requests".

Maybe in the SV world of SPA applications it is like that, but backend is so much richer than that, specially in distributed computing scenarios.
Out of curiosity, which browser are you in? I get 87.9K for the homepage, including all dependencies, lazy loaded JS, the SVG hero, etc. Are you getting WebP images or PNG?
How Millennials Became Spooked by Credit Cards
8 year old company that charges for their service. Definitely some great things for startups to learn here.
So what does this mean?: "In order to encourage folks to use native JavaScript functionality and keep their project as slim as possible, this year we’ve chosen to remove JavaScript libraries from the “free resource” camp."
> Save 70% of your income

Oh, is that all?! ;)
How close to FI are you?
So even the older kindles like the DX?
That's the only thing I really miss with a model-m, though I don't like working in a room that's too dark.
Are you suggesting that RAID-1 and RAID-5 are also examples of denormalized data, sort of?
Content blocked by a "give us your email" overlay.

Click the X.

Click area not large enough, nothing happens.

Click the X again.

"Questions about geofilters?" message blocks content at the bottom of the page.

Click the X.

Result: another, larger, "Questions about geofilters?" message.

Leave.

Write snarky comment on HN.
This is a year old, just in case anyone is thrown by the date claiming the 15th August to be a Saturday.
Quick game vid -> https://www.youtube.com/watch?v=5Bi_c47t-R8

Detailed game vid -> https://www.youtube.com/watch?v=VrwJdDzpb_w
State manipulation vs. Value calculation
There are lots of shops that, for a fee, will give you a replacement Mac for the fixing period.

That said, moving my data and preferences and everything to the replacement box (and having to delete them afterwards, so nobody gets into them) is too much work. I'd rather have a spare laptop/desktop myself ready to go when the need arises.

As professional programmers, spending like $2-4K for 2 laptops every 4 years or so isn't that much to ask (which we can also reduce from taxes AND sell afterwards).

Heck, if we owned a taxi, we'd spend far more on its maintenance and operating expenses for the same period, and make far less.
The GitHub page has a pretty great example:

https://github.com/FormidableLabs/webpack-dashboard

It replaces the endlessly scrolling output of webpack-dev-server with a dashboard, providing at-a-glance info.
Right, I think it's most interesting in the context of the little-engine-big-turbo archetype.
The preview contains old working exploits. They should release some post-snowden compilable source if they want a little more legitimacy. Python files the russian government picked off a compromised server a few years ago are not interesting. Code shared by snowden with someone who had bad opsec is interesting but not as interesting as what they claim this is.
You could easily make it easier and engage younger folks: make it a Tinder style app.
Swipe right on the president you want to match with!
iOS Automation using Appium