skysight-inc/HackerNews huggingface dataset:
I agree, AMD is working on making it easy to port CUDA[1], which still doesn't provide a strict alternative, but it's something

http://wccftech.com/amd-cuda-compilercompatibility-layer-ann...
... because if you don't and someone malicious also discovers this vulnerability they can use it to do bad things? If I can get a vulnerability patched before it can be exploited, I can potentially prevent a hacker from stealing people's identity, credit card numbers, private data, etc. To have that opportunity and not act seems irresponsible.

I must be misunderstanding. Would you mind expanding on this more?
F# with all the .NET libraries.
> Uber is no more than an app with little network effect.
> If they start making money in a given city, a competitor can sweep in and take the city from them.

Odd. I see their network effect as rather strong. Why would a driver use a new competitor app if the customers aren't there? Why would a customer download another app they haven't used before or heard of, especially if the rides aren't there?
I wish they had a range that was affordable for a hobbyist.
You can buy a cheap Nvidia card to "get your feet wet".

I would like to play with these things.
I guess it's OK to throttle for going over data if they speed throttle all internet traffic equally?
It'd also be nice if there was a way to specify an HTML page that is served for every path on the domain. That way, you could use an SPA architecture (a container HTML file and a JS bundle that manages the URL) without breaking deep links or needing to generate redundant pages to match every path in your SPA.
> This is just another reason why the US has a healthier startup culture.

I think we would heavily disagree on the "healthier" status.
It would be great if the core devs used their PGP keys, many of which are very highly trusted in the PGP strong set, to sign this key so that it is obviously the real deal. Right now it's only signed by two keys, Wladimir J. van der Laan's and some unknown one. Stick a bunch of other core devs on it and re-post it!
Building an alternative olympic medal table
The article says NPR was using Disqus. Looks like it didn't work for them, even with outsourced moderation.
I heard a lot about Mr. Robot so decided to check out the hype. Started watching with interest - the first episode really blew my mind when they started discussing GNOME and KDE, I was like wow I love this show already. Like you said the mental illness took over and I'm like this is going into la la land now - there's less hacking and more of a human angle, which is great and all, until you realize the human angle is superseding the hacking and computers, which is what drew me in in the first place. There's some real "holes in this firewall" if you get my meaning, and not in a good way. I guess part of me wanted it to be this really geeky show, but I suppose they might have gone too far already for the (comparatively) 'technologically challenged' populace already. I guess I will save my dime and wait to spend on Season 2 until after reviews are out. I hope they fix it.
Tumblr is a black hole of awful UI design. You can't even use god damn tabs with the default theme.
I've never made any bones about this. Of course, I'm an evangelist.
> Contact your Microsoft account representative or email mpcsales@microsoft.com.

If you have to ask...

--

Unrelated question:

> Work access. Anyone in your organization can remotely connect to the corporate network through a virtual private network on a HoloLens. HoloLens can also access Wi-Fi networks that require credentials.

Does this imply that the standard devkit can't access RADIUS'd Wi-Fi?
It's nothing special about this release, it's just that this is a release. There's normally a trickle of downloads, which wouldn't be worth attacking because you'd be discovered quickly and most of your targets would be newbie users who don't have much coin worth stealing. Attack right at the moment that a new version is released, however, and you end up with your compromised binary distributed to way more people before it's discovered.
I disagree with his valuation, but yes, he is brilliant. People should definitely check out his work.
A lot also has to do with the Hardware Support as well. I know our company just buys Applecare for the Laptop, and if something goes wrong with it, employee just brings it in to the Apple Store and gets it fixed, so 3 years is pretty much the outside limit. If your company has internal support mechanisms, they might be able to stretch it out further.

Personally, I consider myself showing self restraint if I don't upgrade my phone on an annual basis, and don't think I've ever gone more than 2 years - but I realize I probably fall into a niche.
Too bad the tooling (e.g. restore, build, package) and (I think) the project files format is still preview.

So far, my experience has been that small isolated project seem to work fine, but as soon as I try to break a more complex solution out into separate nuget dependencies things start to get hairy.

Nuget dependency versions don't support npm-like syntax, so you can forget about the "^1.0.0.0" notation.
Syntax like "[1.0.0.0-2.0.0.0)" might be supported, but honestly I've been fighting with other issues enough that I can't recall for sure if making the version syntax ugly makes it happy.

Another surprise to those from javascript/npm land is multiple versions of the same library in your dependency tree isn't supported. So you basically need to support redirecting to a commonly supported version (which, without examples showing version ranges, you're back at the version range syntax pains).

If anyone's tackled these pain points I'd love to hear.
As Wikipedia points out neuroplasticity is "an umbrella term that describes lasting change to the brain throughout an individual's life course. "

This is about changing active neurons in matter of hours/days, without necessarily being lasting, just induced ones.
If you're issuing lots of internal certificates, you may be interested in using Anchor [1] instead. It's designed for that use case and with own service you don't need to worry about rate limits, name limits of similar issues.

While it's designed to cycle all your certificates every day, you can still configure it for weeks/months. It's also based on credentials rather than domain verification (shameless plug, I'm Anchor developer)

[1] https://github.com/openstack/anchor
Have you done the rest of the verification necessary to say this is legitimate?

* Wayback to some months ago for the download page [1]

* Confirm that the content presented matches the existing download content for the 0.12.1 release (or prior)

* Confirm that the content for the "0.11+ key" is the same [2]

* Confirm that the signed release for the 0.12.1 content is correct and valid

* Request that (full-length) key from a public GPG server

If you've done all of those things, it might be a good idea for you to sign that key and push it back up to a public GPG server - that help with web-of-trust, and somewhat legitimizes the key versus some arbitrary untrusted impostor. (I have done all of these steps, and signed with my key 9BB5251DE08569D4DEEA894C85D221C11DD01DF6)

[1] http://web.archive.org/web/20160109193420/https://bitcoin.or...
[2] http://web.archive.org/web/20160109193420/https://bitcoin.or...
> Then since Dreamweaver was garbage people decided that any WYSIWYG HTML-editor is guaranteed to be terrible and nobody ever tried again.

Dreamweaver is still the best WYSIWYG HTML editor, and it's still garbage at it.
If you don't subsidize another country will. Where will that get you in a couple generations.
A bigger problem is the difference between Hermitian and self adjoint, a lot of physics professors don't understand that.

Or for example, this famous dialogue between Geoffrey Chew and Arthur Wightman from the 1960s bootstrap fad:

Wightman asked Chew: why assume from the start that the S-matrix was analytic? Why not try to derive it from simpler principles? Chew replied that "everything in physics is smooth". Wightman asked about smooth functions that aren't analytic. Chew thought a moment and replied that there weren't any.
Google recruiting would agree with you. They've de-emphasized school. :-)

My (limited) observation is it's one signal of many that is real, in a very noisy world. And 2-3 years post-graduation it's much weaker than other work related signals.
You are not misunderstanding. I do not in the general case have a duty to correct other people's mistakes. The people deploying broken software have a duty to do whatever they can not to allow its flaws to compromise their users and customers. Merely learning something new about the software they use does not transfer that obligation onto me.

I would personally in almost every case report vulnerabilities I discovered. But not in every case (for instance: I refused to report the last CryptoCat flaw I discovered, though I did publicly and repeatedly warn that I'd found something grave). More importantly: my own inclination to report doesn't bind on every other vulnerability researcher.
The Black Market Lie
Disagree. Most surveillance planes used by military are big/fat/slow. Most are either prop driven and/or Boeing 737 in size.
Intel was selling the Xeon Phi 31S1P for under 200$ (it's back to 500$ now) for a limited time.
They will likely to have cheap version and promotions this time around too.
You'll be receiving the invoice for my next refill of blood-pressure medication.

I swear to fucking god Linux has lost the beat.
Isn't that an entirely appropriate use case to say "So you'll be wanting to spend a hundred or two dollars on a wildcard cert from a vendor who sells those then"?

Just because my local pub runs a free shuttle bus to the train station, that doesn't mean they are obligated to transport my bulk freight for them.
NSA.gov goes down
There are more options, but they all involve giving up something somewhere. Perhaps you have a secure, easy-to-use, useful site, but charge more money for it. Perhaps it means that people can't use it today but can in a year. Perhaps it means that you've hired gullible underpaid engineers on promises of future wealth and then work them to the bone, but then do you want to be the person who's underpaying your employees?

The point (of both my comment and the original article) is that there are trade-offs, and you get to choose which trade-off you're going to accept, but anything you do is likely to piss off someone, so choose who you piss off wisely. Do you want your top priority to be accessibility? It can be, and that could be a wise choice if you identify a task that really really sucks for disabled people. But if you're looking at that before you've even got the fundamentals of building a useful product down, you risk building something that does something nobody really wants to do but does it really well.
I'm sure that's true, but that's not responsive to my argument.
One thing I like about various of the alternative, JS-framework demo, front-ends for HN is that they highlight new comments since the last time you viewed a thread. They probably do horrifying things with cookies or localstorage that the main site shouldn't do, but that is a really convenient feature, compared to rereading everything.
Agreed. Most frustrating app I use daily. Wish I could turn off reposts in. My stream. Wish I could sort and refine searches - is sort by upload date too much to ask? Wish I could at least see track information on the iOS app - super important especially for mix tracklists..

At this point I'd say essentially no-one feels loyalty to the soundcloud brand, and few trust the service to listen to its users (both content creators or consumers). A risky place to be as a consumer facing business.
It's probably because doubting things isn't very useful. I can question the long term safety of walking up stairs, but unless I can provide an argument such that rational people are convinced they should also be concerned, I wouldn't be surprised at downvotes.

Not to knock the Anti-GMO argument[0], but it's similar to other conspiracy arguments. I can make so many rational arguments against it, but I know from the outset if I see a comment that says "Well of course the Hyper Loop isn't going to work, it was designed by Lizard people in order to keep us complacent!" I know that I will never convince that person to see what I would consider a rational viewpoint. It's a lost cause. And as I user of HN, I would consider such comments to be noise, and I would downvote them.

Edit: I have the unpopular opinion (at least on HN) of not liking the "right to be forgotten", not to tangent too much, but I think that the ability to substantially change as a person is an important concept of human development, and that by allowing people to willfully scrub their actions from the record, they encourage the myth that people can't change, and that we're always how we currently are. And that, I think, trains people to be less forgiving. It's harder to forgive when you don't think someone can change.

[0]: although I do disagree with it (even beyond the screaming naturalistic fallacies)
Define your right target audiences is always a difficult challenge for startups. Totally agree with "Remember that being good at customer service doesn’t mean serving every potential customer."!
"Tone-deaf"? Or "failing to adhere to PC norms"?

Its a great case because it makes instinctively want to cater for it. Who wouldn't want to help out the developmentally challenged person?

Which makes it all the harder to use our heads rather than our hearts, and make a good business decision.

I suspect the author chose it deliberately for this very reason.
Dupe -- this story has been posted every ~4-6 hours since it was published. Here's the previous discussion: https://news.ycombinator.com/item?id=12294976
Multiply Labs (YC S16) Puts All Your Supplements into One 3D Printed Pill
You can get an e-mail whenever someone replies to your comments with http://hnreplies.com
This comment makes me believe that you've never been exposed to any computer science.
"It's often argued the impedance mismatch with version control is what killed Smalltalk."

Wrong argument. Here's the truth: https://medium.com/smalltalk-talk/why-smalltalk-failed-to-do...

Smalltalk does have version control. It's just not the same version control software that everybody else uses (eg, Git, Subversion, etc.).
So far, none of the others I have pinged about this has any info as to its veracity or background. Unlike most contributions to bitcoin.org, this one was pushed to the master branch without a corresponding pull request (a mechanism used to solicit review and feedback from others). https://github.com/bitcoin-dot-org/bitcoin.org/commit/5e0fd5...

I suggest skepticism. We should be cautious of anyone skipping peer review processes, even for security incidents. Poor handling of these situations can lead to unintentional panic where panic of any kind is unhelpful to resolving issues. However, everyone should always be encouraged to check the signatures regardless of alerts, of course. Multiple signatures should always be checked, and not just Wladimir's signature. Use the gitian signatures repository to get other signatures, and always verify public key and signature data through multiple independent channels.

gitian signatures repository: https://github.com/bitcoin-core/gitian.sigs

GPG build verification steps: https://github.com/bitcoin/bitcoin/blob/master/doc/release-p...

gitian build steps: https://github.com/bitcoin/bitcoin/blob/master/doc/gitian-bu...

gnupg CVE-2016-6316 from today https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/0003...

Also, don't use gpg short ids. Always verify fingerprints. There are gpg short id matching keys floating around for some Bitcoin developers - for example, http://pgp.surfnet.nl:11371/pks/lookup?op=vindex&fingerprint... check out the revoked key.

( This reply is x-posted from https://www.reddit.com/r/Bitcoin/comments/4y8m76/0130_binary... )
> It would be really nice to see someone figure out a good way to bring forums back in a way that didn't turn into a black hole.

Isn't that what Reddit is trying to do? Creating a subreddit seems to be the default way to stand up a new forum. Whether the platform is up to the task.... jury is still out.
It still might help to hold onto your investment...
It seems to be suffering a bit from the Matrix Effect: The first installment promised far more than the sequels could possible provide.

Stories involving a protagonist with seemingly otherworldly gifts tend to craft a narrative where the possibilities and potentials are limitless. While this form of storytelling is very good at garnishing attention, it’s mainly capitalizing on the mystery surrounding the main character. People tend to fill in those unknown personality traits by projecting themselves onto the character.

The problem arises when the Author attempts to choose a reality for their character to follow. No matter what reality you pick, the story will never live up to the quintessential version everyone has uniquely envisioned. The more we learn about the character, the less we feel a sense of awe and wonderment. This transforms something that once held so much promise into something that seems mundane. It’s not because the story is bad, it’s just that it could never live up to its own open-endedness.
Sound has always been utterly fucked though. Well, more fucked than most shit. (I've actually had suprisingly good experiences with it, though my expectations are also scaled low.)

NetworkMangler joins a long list of other FooMangler tools which are best destroyed with extreme prejudice. I manage WiFi with an /etc/network/interfaces stanza, and it mostly works. Static wired interfaces are, of course, vastly simpler.

I agree that the Linux experience is hugely better than Windows, and the Debian experience hugely better than RPM-based distros. This is why having the mouse, THE FUCKING MOUSE!!!!!! fail is .... I'm beyond words.

That it's been months is the other problem.
HN is/will decline. It's fate according to Peterson's Hellbanned Laws:
http://blog.timrpeterson.com/2016/06/03/hellbanneds-laws.htm...
That's what I'm talking about...?
>There’s also the legitimate concern about what happens if methodologies come out with null results — that is, if the only result a study can produce is to prove the hypothesis incorrect. Such a paper could end up being extraordinarily boring or not answering the essential question at issue. Imagine a headline like: “We don’t know which gene puts you at a greater risk of depression, but we’re pretty sure it’s not the gene we thought it was.”

Isn't that the whole point of correcting for publication bias? The reporter saying that boring results are a problem seems to perfectly capture the actual problem.
That's probably because you're talking about 'virtue' as an abstract quality, rather than good decision making as a practical framework.
Update: only 5.5k employees getting fired.
Explicitly slowing down the conversation is essential.
Google also released GPUCC (http://research.google.com/pubs/pub45226.html), and got CUDA support into upstream clang.

LLVM also has an AMD GPU backend, and says this thing is built on clang/llvm.

So i suspect it's based on that support :)
Why not use Google's platform, which runs on their new custom chips (Tensor Processing Unit)?
"An Expert in Valuation"

Ha, the only expert on the value of an asset is the market, because the market alone determines what something is worth. Everything else is hogwash.
Because black customers pay the same prices and do not require additional accommodations. It would apply if the restaurateur was required to maintain separate dining rooms for whites and blacks or additional water fountains.
I'm sure it looks great on an iMac (that's all artists and designers use, right?)
Yeah I don't see why you would want any kind of orm for olap, not just EF.
Just kidding.

But it would work in the browser!
It would apply just as well, hence the "Why not the government?". You probably don't want to be the first/only fancy restaurant to fight racism.
I still fantasize about the Palm Graffiti input method. I've tried Graffiti-like 3rd party keyboards and I just haven't clicked with any of the modern options.
Do not use "the bitcoin PPA". Launchpad compiles this on their own infrastructure outside of the gitian build process. If, for some insane reason, if you must use "the bitcoin PPA", always check hashes, always verify the binaries are correct, and always check signatures regarding those particular hashes.

edit: livejournal -> launchpad
This was the story with heroin, oxymorphone, codeine... Practically every generation was in theory safer and actually turned out to be much worse.
ISTM checkboxes are the only input type for which it's more natural for the label to come after the input.

An input inside a label has had an unambiguous meaning for decades. Why haven't screen readers caught up?
My point was: create an easily bypassed system, and the black hats will come up with ways for people to easily bypass the system.

All the children aren't above average. Your average computer user -- even those who are otherwise intelligent and capable of handling Shit The World Throws Them -- isn't particularly tech savvy.

It's like anti-terrorism defenses. The terrorist has to get lucky once. The defender has to be lucky always. Microsoft here are the defender, and they're trying to keep idiots from fucking up their systems. No slander intended, it's just reality.

Disabling safety systems (which is what we're talking about) is simply one of many ways to make larger-scale compromises of the system far more easy to do.

I'm not saying that it's impossible for Microsoft to offer this, or that they shouldn't. And I'd be hugely frustrated myself if I had to deal with this stuff (I don't run Windows, and won't. Hell these days I barely use computers if I can possibly help it, other than my own. And I hate those increasingly as well.)

But dealing with the public at billion-plus user scale is hard.
Oracle Says Google Didn't Play Fair, Wants Third Trial
What about asking other people to do the legwork to show some proof of their assertions?
" … one of them needs to loosen up."

Or perhaps you need to revisit your decision to require "many subdomains" and consider whether it's a sensible decision if it relies on somebody else providing SSL certs for them inexpensively or for free.

You can buy a wildcard cert for under a hundred bucks these days - how much obligation do you think LetsEncrypt have to change their product to save you $100/year because of your design decisions? If LetsEncrypt (or Namecheap) don't work for you, pay someone who sells a thing that _does_ work for you (or change your requirements).
Consumer Insights Direct from the Auto Show
Further supporting the hypothesis that these are implants (meant to persist access gained through other vectors), not external or pivoting exploits, is the fact that the other firewall exploits from the batch (for Fortinet firewalls, for instance) target web management interfaces that also aren't exposed on external interfaces.
I recently had to install windows 10 on one of my computers. I remember getting to a menu which asked me if I wanted to install the recommended way vs customizing, selected custom and the number of options that could seriously undermine my privacy were insane, a special ID to help 3rd parties (ms certified partners or something they called it) WHAT THE HELL!!

Microsoft seriously sucks. Yes I know, the options to turn these things off are there, but the fact that 90% of the people who use ms windows are not even aware of these options is insane.

And couple that with the soul sucking updates,Jesus Christ windows 10 is just a big no no.

As for the updates, you should seriously consider disabling the windows update service using the admin privileges. Especially if you are using a rate limited internet connection or hate having to wait 10-15 mins for your computer to shutdown or startup.
I should clarify I'm supposing that by opioid they mean morphine based opioids.
Meetup.com Alternative in the Works
Bus1: a new Linux interprocess communication proposal