skysight-inc/HackerNews huggingface dataset:
> Really? Because NPM is the only dependency system I know of that doesn't verify packages in any way.

npm verifies the SSL cert on its connection to the registry. pip does the same thing. Neither verifies signatures on the packages, or anything else.

Both of which are better than C build scripts that involve downloading tarballs from SourceForge and running `make install`.

> This hasn't been my experience.

Then you're not running C in production, sorry. Or you're ignoring the friendly build engineers and distro packagers (like myself) who spend their days solving these issues so you don't have to notice. Which is great, we solve these problems so you don't have to, but you really need to defer to the people with expertise.

> Can you point me to an example of a mature library in Python breaking like Babel did when left-pad happened?

Sure. Babel didn't break when left-pad happened. A certain way of installing Babel did. I have no idea how you keep conflating a method of installing packages (that isn't even what serious production users use) with code. So, "all of them."

I can give you countless examples of mature libraries and software packages in C, Python, or many other languages where `./build.sh` or equivalent, that wgets some crap from SourceForge, stopped working in the same way. But if you're doing `./build.sh` as part of your regular production workflow, you know that it's going to break and that you have better options.
For others, I found this, explaining the process: http://alp-notes.blogspot.com/2011/09/adding-vdev-to-raidz-p...

Downside is, you lose a significant chunk of storage (the author measured > 20%), but you can add new storage to a pool online.
Is Allo using the same code, or a different implementation?

(And it's not so obvious to me. The thing I linked is licensed under GPLv3 + MPL if used on the App Store. You can totally ship an Android app that runs a separate GPLv3 subprocess, and an iOS app that uses it under the terms of the MPL. The GPLv3-subprocess thing is what JuiceSSH does for running Mosh.)
Interesting; thanks. F# and Scala are pretty high on my to-learn list.
> So having all the transaction prices out in the open is a nightmare for them, as it will allow customers to get an idea of what the actual "fair" price for a car would be. Truecar has been doing this for a while, I guess Amazon finally want to have a share of this market too (and the data associated with it).

As far as I can tell Amazon Vehicles is overcharging for the cars by at least 5-10% ( the car I currently drive, they are charging 25%!! more than I paid).

This isn't a nightmare for Car Dealers. This is a nightmare for consumers because they will take the prices Amazon quote seriously.
> I think theres a big difference between speakers you disagree with and the former.

There is zero difference. "Hate speech" is a phrase invented by modern progressives to describe disagreeable views. It has zero meaning outside of pop liberal circles.
where's the lease offer?
The rule of thumb I've always used for when to use OO is "will there be more than one extant object at once or not?" If yes, and especially if these objects need real behavior, then use OO.

If you're essentially going through one object at a time, then discarding them, you're may just be doing conduit data processing, and so there's little advantage to using objects. I think what's missing in this (well-written) analysis is this distinction; if you're slurping data from one place, making a few changes (or especially if you're not making any), then sticking into a DB or vice versa, OO may be the wrong choice.

Ask yourself while writing the code: "are these active, behavior-driven objects that need encapsulation and relatively sophisticated behaviors, or is this just data I'm doing some relatively simple processing on?"
Ask HN: Optimal strategy to sell startup shares?
The recent a16z post about "How Startup Options (and Ownership) Works" made me wonder this. Suppose you own N shares of a startup you work for, and that is doing really well, i.e. its valuation is increasing, but it may also fail at any time. What's the optimal strategy to maximize profit and minimize regret?

An example of what I mean. Suppose N represents 1% of the startup, which is currently valued at $100M. You sell your N shares and get $1M. Yay! Except a year later it's valued at $10B, so your N shares would be worth $100M. Conversely, if you don't sell at $100M and a year later the startup folds, and you end up with $0.

A better strategy may be selling N/2 shares at $100M valuation (getting you $0.5M), and then either your remaining N/2 share are worth either $50M or $0, so you end up with either $50.5M or $0.5M, which is neither $100M nor $0.

This makes me think there may be more complex models based on risk tolerance (reward vs regret), probabilities of success, etc. But I can't be the first person to think about this, so before throwing math at the problem... is there a standard, reasonable way to do this?
Not sure how they would pull off new vehicles though. I'm pretty sure existing dealers would take the manufacturers to court if they made amazon a dealer who could sell cars in their exclusivity region. Tesla on the other hand is the manufacturer so they can do it (where legal).
Self-driving car market research under the cover?
Do you have a link to NodeJS sharing mutexes between different containers? I'd be interested to learn more about that.
Question - do you rip your vinyl to digital format? Or do you keep listening to the physical media?
its "safe" to say that, like its also "safe" to say that <article> will be used to denote articles in HTML

Yes, decorators can do whatever they want, but, in practical usage I'd say a majority of decorator usages do not mutate the class/function significantly from its original typed-out intent (like, they don't often add 8+ methods to a class for example, but of course they can)

not literally "safe" to say.
What about https://www.facebook.com/robots.txt

..and medium-sized/small sites are even worse.

The irony of Facebook being a core part of all NSA surveillance programs and their terms of service including their "Automated Data Collection Terms" https://www.facebook.com/apps/site_scraping_tos_terms.php
If you're interested in properties other than logical identity, yes.
Because business isn't generally done in Cantonese. It's a common story that families that historically spoke Cantonese are now teaching their Mandarin alongside or instead of Cantonese because Mandarin is more useful in the professional world.
Doing the dev is the only way, I would recommend though reading the Hinton dropout paper and trying to implement a non full featured Neural Network framework to implement those ideas. Then pick papers to implement in your toy framework. Once you have done this a few times, you will get a really good idea how all this stuff works and ideas to extend things. It also REALLY helps if you have a very strong linear algebra background, so if your weak there do lots of reading and practice getting those skills up to snuff. I may not be the best example, because I worked in computer graphics heavily over my career. My suggestion though is to try and apply DNN's and ML techniques in somewhere you have domain experience. It really will help a lot with the intuition part since you have valuable domain experience to give you ideas to try.

This is a path I took around 4 years ago, and I have built some seriously valuable stuff in that time.

Also I would personally say to not discount the value of backend stuff, doing scalable ML processing is not off the shelf and lots of value can be created by making scalable reusable systems that can run machine learning models. Most of those ML PHd's can't (or don't want to) build scalable distributed systems. If you can train experiments faster, or actually do the work to make an end to end system work outside the lab, you can make real measurable contributions.
> it helps us know what your thought process was on the day that a given line changed

This is not something someone who actually spends his days reading code would say.

Code is hard to read as it is. Presenting it in well packages, readable commits is the very least one can do.
My company (W17 hopeful) is working to help med device vendors ensure basic crypto and security practices. I agree with @teuobk below; these problems are not unique to St. Jude.

BTW we're hiring. If you're reading this comment thread, you're probably a great potential team member. Email in profile.
I don't think you fully follow. The skills can't be regulated: they're pure research. The US research community will continuing doing the fundamental enabling work relied on by exploit developers; it's just the people who do the testing and integration work who'll have to have their paychecks sent to Southeast Asia.

It's a very difficult problem.

There's also some bigtime cognitive availability bias happening here. We read lurid stories centering on "zero-day exploits" and say "something must be done". But no matter what these articles say, it seems cosmically unlikely that an exploit dealer is worth a billion dollars; the entire exploit trade is a rounding error compared to the switching and filtering equipment companies knowingly sell China and Iran for use in putting dissidents to death.
> However, the reason why that credential is valuable in obtaining employment is because it implies that the holder of the credential has developed certain skills as part of their education. One of those skills is the ability to think critically about a variety of topics.

I don't think that's actually the case. In my experience, employers care whether or not a person is generally competent (often using degrees as a type of signalling, even if that's not accurate), if they can justify the hiring purchase to others (IE, do they have a decent defense if you're a terrible employee), and whether or not you would excel in that particular job (hence asking you questions about it and your work style in general).

I can't think of a case where an interviewer was attempting to see if the candidate was able to think critically about a variety of topics (topics not connected to the particular job). I don't know of any example of, say, a programmer getting interviewed and being asked how they would interpret a particular piece of literature, or being particularly interested if they frequented a political debate group. Such things are almost never considered particularly important when resume suggestions are given.

However, if you have examples of something like this I would be interested in hearing them.
How is this "sabotaging" PyPy? Also, even with type declarations, I'm not sure you could get Numpy-esque performance, given that Numpy doesn't have to dereference every element in the array.
Original HN discussion from back then, if anyone is interested:

https://news.ycombinator.com/item?id=337746
Microsoft Excel Is Screwing Up Science
Your grade 1-12 teachers are, in some ways, paid to put up with your bullshit. They remind you about homework, listen you your excuses, etc. They understand that in many ways, you are still a child and that you do need help.

College professors (based on my experience and popular wisdom) are less likely to fill that "parenting" role. You are expected to be responsible and to take the initiative.

When you land a job, you are expected to perform. They expect that you will need help remembering to do your work, or to show up on time, or to be responsible for yourself.

Today, it seems, that the "college experience" is being overthrown by the PC police. This is what some colleges are teaching those entering the workforce:

Saying "Where are you from" is racist

Saying "America is a melting pot" is racist

Saying "Hey, can you guys help me look at this problem" is sexist\misogynist

Telling a woman in leadership “I love your shoes!” is bad

Referring to your co-worker’s girlfriend as “girlfriend” instead of “partner” is homophobic

And on and on and on.

And then these kids enter the workforce with an older generation who thinks the above list is absurd. There is going to be conflict and they older generation will wonder what happened to the youngins. They are incapable of living without finding ways to point to their victim hood or oppression.

They will be at your job soon. Publicly shaming you or reporting you to HR for using the wrong word or asking "Did you and your girlfriend do anything fun this weekend?"

Sources:

http://www.thecollegefix.com/post/27028/

http://www.thecollegefix.com/post/27984/

http://www.theatlantic.com/magazine/archive/2015/09/the-codd...

http://www.theatlantic.com/politics/archive/2015/09/the-rise...

note to readers: victimhood and oppression do exist and I am not trying to belittle the very real experiences of many people in our society.
This matches my understanding too. According to Sen. Warren's book 'A Fighting Chance', the dealers lobby was able to get significant exemptions added for themselves when financial regulations were being discussed in 2013 [1]. One of these was the ability to change the rate of a loan after the sale is done.
By definition identity checking is the finest-grained distinction you can make between things. If two things are identical, they can't possibly be different in any way. This is what philosophers call the “indiscernibility of identicals”, and, if it sounds like a tautology, it's because it is!
I've heard that rather than deleting your FB account, it's better to turn it into a piece of obviously-fictitious performance art. Don't try to remove your data from the Internet (which is futile; you know Facebook still has it on some archive somewhere anyway). Instead, replace it with nonsense. Set your interests to your competitors so that you get notifications everytime they release a new feature, and full information about their advertising campaigns. De-friend your actual friends, and friend random celebrities. Make your political views insane. Post status updates generated by Markov-chain or recursive neural net; if you're feeling particularly bold, you could try to reverse-engineer the weights on Facebook's classifiers by generating data and seeing what sort of ads you get.

Chances are, doing this will get you kicked off Facebook and deleted pretty quickly. And if it doesn't, you've just fucked with not just Facebook, but all their advertisers. GIGO.
St. Jude stock shorted on heart device hacking fears; shares drop
Facebook Automated Data Collection Terms
It's ethical because it's a public internet. The same way you can't use the force of law to stop a homeless guy from asking you for change as you walk along a public street, you can't [shouldn't be able to] use force of law to stop a client from asking your server for data as it sits connected to a public network.

It's not unethical for a beggar to continue asking for change. It's up to the passerbys to choose whether or not they'll honor his request, but he is free to make it as long as he doesn't get out of control. Many people see the client-server relationship that exists online similarly. As the beggar can't receive anything that the giver doesn't willingly give, neither can the client receive anything the server doesn't willingly give.

It wouldn't make any sense if a guy could give the beggar change and then sue him and say that he shouldn't have gotten change because he actually wanted to use it for his lunch. The judge would say, "Well, why did you give it away? You can't just change your mind and then sue someone over it." This is also what judges should ask servers who dispense information to clients and then try to take it back.

tl;dr there's no harm in asking for data, even after someone has told you no, as long as you do so reasonably.
Is it intended that the last two have nothing after the equal sign? If yes, what does that do?

There is also --pids-limit=<some number> against fork bombs.

EDIT - this git repo has more links to security related articles etc. https://github.com/wsargent/docker-cheat-sheet#security
How to make your first $1000 as a freelancer
You glossed over the first sentence:

> Avoidance in the form of 'trigger warnings' may actually worsen the underlying problem for people with PTSD because avoidance can strengthen the underlying fear.

The argument is that active avoidance is bad because it makes the ensuing panic attacks worse when they do happen and makes it harder for exposure therapy to work. Your post is addressing a strawman.
Google now lets you play solitaire and tic-tac-toe in search
Sell enough to bump your life up to the next step - keep the rest. With your given example, sell $500k and pay off your house (or buy a house somewhere reasonable for cash). Keep $500k and roll the dice for whatever it turns out to be.
If the compiler knows a Python array is uniformly of type float, it can, and should, use a dense array of floats to represent it.
Here is the city's info: http://www.ci.berkeley.ca.us/bicycleboulevards/

The boulevards do not actually block out a section of the road for bicyclists. They are entire roads that optimize for low-speed neighborhood traffic where cars don't need to blast past cyclists.

Based on your description of your situation, short-distance traffic (people entering and leaving their homes) would use Mimosa along with cyclists. Long-distance car traffic would be free to use the full two lanes of Smith at high speed without dodging cyclists.
This kind of competition is only possible due to federal aid. There is a certain amount of non-educational amenities being provided, but it's trivial to find articles like these

http://www.wsj.com/articles/SB100014241278873233168045781614...

http://www.huffingtonpost.com/2014/02/06/higher-ed-administr...

That document the growth in non-teaching administrative and professional staff at universities. Staff that grow at more than double the rates of enrollment and teaching positions.
Startup Manipulated iPhone to Allow Government Spying, Report Says
> A couple of very slightly uncomfortable conversations seems like a small price to pay for raising your kids in the manner you deem appropriate.

That is what I responded to.

> You know how if you talk to an overprotective parent about how it's really ok to let their kids wander around outside on their own a little they're always at the ready with a link to a news story about something horrible happening? And you know how that news story is always anecdote and not data?

You implied the extent of the risk was a couple uncomfortable conversations based on an anecdote. Hypocrisy much?

Based on personal experience, I don't have much faith in the quality of CPS investigations.

http://www.theatlantic.com/national/archive/2014/07/in-a-yea...

> One statistic that stood out in the report: since 2008, the number of referrals to child protective service agencies (hereafter CPS) has increased by 8.3 percent, even as overall rates of actual child victimization declined by 3.3 percent during the same period. There is no system that can totally avoid putting parents who don't deserve it through investigations, despite the fact that even the best moms and dads would regard the ordeal as nightmarish. Over time, however, the number of undeserving parents so burdened seems to be increasing–and the number is large (note that "screened out" referrals are the ones deemed not even worth investigating):

The numbers are clearly moving in the wrong direction for the rate of reporting.

> He goes on to explain that while taking kids from parents in this fashion is only permitted in emergencies as a matter of law, the way things play out in practice is very different. "According to statistics published by the U.S. Department of Health and Human Services, more than 100,000 children who were removed in 2001–more than one in three–were later found not to have been maltreated at all,"

Given CPS investigates gets ~3.4 million complaints a year and there are ~74 million kids, a substantial number of these complaints are screened out because they are basically random/irrelevant.

I'm not in the habit of ignoring 1 in 20 odds, especially if I've got a 1 in 5 shot at it being something serious.

That is alot higher than the risk of terrorism, for instance, affecting me personally.
> Universities ought to return to what they once were: free and open exchange of ideas.

That's an ideal that was never really true. Historically, a major function of universities has been being places where white male elites could congregate and maintain their power by excluding others: http://www.businessinsider.com/the-ivy-leagues-history-of-di....

I'm not a supporter of the movement to stamp out uncomfortable ideas from universities. But let's not look at things through rose-colored glasses. Even with space spaces, universities today are much closer to the ideal than they were 50-100 years ago.
Someone has to sue them, now. And it costs a huge sum of money, like 10k+€.
a) Selling tools itself doesn't violate the CFAA act. A separate entity uses the tools and assumes that liability, which as we see is mitigated by sovereign immunity.

b) And even if selling tools began to violate CFAA, then NSO itself would be sued. As it is a separate entity than the investors, which is the whole point of limited liability....
I consider myself a travel budget, but when I travel with a carry-on only, it's to skip having to wait for baggage. I don't think I'd go through this for $10, which also implies sourcing the item(s).
Lucky Trader Scam Review
Maybe it's just me, but the original also sounds like someone with a bias against ITT would write
Sharing Is Caring: Multitenancy in Distributed Data Systems
How do you propose to disambiguate between the two reliably?
> They draw you in to watching... nothing

I'm curious why you feel this way, particularly if it's not a conversation you're actively participating in?
Family Camping for the First Time
Where are you seeing amazon is charging for cars--have any links available?

All I could find were Cars that could be added to a virtual garage, presumably to ensure compatibility with any automotive parts purchasing.
Wow, neat. Is `$$` some kind of jQuery-esque service that Chrome provides?
I'd argue that a big part of preparing for the working world is learning to think critically and contend with ideas and concepts that may seem strange, foreign, or downright unsettling to you. Because that's what the real world will throw at you. And because doing so will strengthen your intellectual and emotional abilities.

There's more to any given job, or any given career path, than the hard skills required for it. Arguably much more.

I realize we can quickly slip down the rabbit hole of debating what the primary purpose of a college education is supposed to be. I'd rather not do so. Even if we believe that the primary purpose is job preparation, we should acknowledge that developing critical thinking skills serves that purpose well.