skysight-inc/HackerNews huggingface dataset:
> I did upvote you, i thought you contributed thoughtful responses :)

More importantly, that unexpected upvote was what made me look for possible late replies ;-)

> But I sometimes like to think of high school as sampling things that you might be interested in pursuing further.

Yeah, sure, but then, there is so much that you potentially could cover, and only so much time to fit it in, you have to somehow select those few that do get offered.

> Also, it is still a job, projected job growth 2014-2024 is 6%, which is average. [1]

Well, I would argue that woodworking class is much closer to what cabinetmakers (used to) do than to a modern-day carpenter's job, and that really isn't much of a job anymore. I mean, people don't only need to build their own chairs anymore, they don't need to build any chairs anymore, except for some for artistic reasons maybe.

> Perhaps we are experiencing a filter bubble like effect where we have lost touch with people who are not into software, and how they do not just grasp things like we do?

Well, it's difficult to say, but I suspect that the way it tends to be taught is part of the problem. If you aren't ever shown the map, it's kinda hard to figure out the overall structure from being led through the maze. And from my experience, those people teaching this stuff often haven't ever seen the map either.
Oh, I didn't enjoy using the buttons to swap watchfaces. I typically used a single one throughout the day and occasionally would switch to an app, like the MLB app/watchface, as needed (very rarely).

I enjoyed the simplistic interface where I could see current time/day/temp/weather and get notifications as they came up. It was nearly perfect for my usecase except that for iOS they never implemented app filtering (for deciding which of my phone apps' notifications would come through the watch).
There's no math to determine the quantity of active ingredient in illicit substances. That requires analysis. Including the carrier keeps it simple. It's also self-aggrandizing, as it's much more impressive for the DEA to announce they've seized 10g of "LSD" than 10mg. Again, this is coming from an agency that is known to weight the root ball when calculating the yield of seized marijuana grows.
The fraud part is still only an accusation so far untried by law, but the EU report mentions that:

> The two tax rulings issued by Ireland concerned the internal allocation of these profits within Apple Sales International (rather than the wider set-up of Apple's sales operations in Europe). Specifically, they endorsed a split of the profits for tax purposes in Ireland: Under the agreed method, most profits were internally allocated away from Ireland to a "head office" within Apple Sales International. This "head office" was not based in any country and did not have any employees or own premises. Its activities consisted solely of occasional board meetings. Only a fraction of the profits of Apple Sales International were allocated to its Irish branch and subject to tax in Ireland. The remaining vast majority of profits were allocated to the "head office", where they remained untaxed.
...

Inforgraphic from same link, notice the text to the left in the red box.

http://ec.europa.eu/competition/publications/infographics/20...
There's no mathematical reason why the two winning parties in FPTP have to be the same two parties forever. It is the media coverage that makes it so, and concerted voting for a single third party could make that party part of a new duopoly.
What's the shady website that has the dump?

I'll go check it for you.
True. I interviewed a guy once who found a bug in my example code so I hired him on the spot.
There are plenty of technical solutions to this problem.

None that will not dissuade potential paying customers, though.
>Very true. It is a constant battle between debuggability and not leaking credentials.

And there are so many ways of getting bitten.

Another anecdote for you:

I recently found out that an API wasn't logging errors anywhere.

Easy enough to fix, plug in a library and bam, everything is nicely logged to the database.

Including the HTTP headers.

Headers that include API auth tokens.

Ouch.
And faster. It seems like we've forgotten that latency is a thing.
dsacco is correct in my mind. I work as a security researcher and penetration tester, and I would only include this in a client report as an informational or low risk vulnerability at best in a vulnerability assessment. In a penetration testing narrative I likely wouldn't even bring it up. Even if we look at the social engineering side of things, this is likely not something I'd bother with. There are so many social engineering attack vectors I would give priority to over this as an attacker. A hardline really does need to be drawn with regards to bug bounty programs, or we would constantly be chasing the proverbial rabbit.
The Dropbox hack is real
For having lived in several Asian and European countries, I can claim on the basis of anecdotal life experience that it has a lot to do with the local culture. When I first came to America I was (and still am) shocked by the way people related to food and the ease with which you could fall in a sedentary lifestyle.
From jail, Pickard recently managed to publish a complex allegorical tale which (likely) includes his side of the story:

http://www.theroseofparacelsus.com

https://www.createspace.com/5377339

I have not yet read it. Here are a couple reviews:

http://psypressuk.com/2016/08/01/the-rose-of-paracelsus-by-w...

http://www.erismag.com/ss-blog/2016/2/22/illuminated-verbiag...
There is no silver bullet, but one very helpful principle: Avoid complexity.

But let me ask you: What are the big security problems that you see with a personal email server that you think are difficult to get right/to avoid?
> while I blacklist certain known-sensitive information

Is there any way you can take the opposite approach and whitelist stuff to include?

That way you don't have to worry about stuff sneaking in in the future.

(not that blacklisting has ever bitten me in the behind before, no siree...)
SSH keys all day. They can be troublesome for even an "expert" to look after, so I guess there's no hope for your average idiot. Still, logging in without using a password is the bomb
Not insulting talented team CF has. The end result though is that viewing a static asset, a policy position, shouldn't be challenging residential users with a captcha. Whatever the cause, this behaviour is wrong. It's particularly noticeable as a ton of other static assets are served. So it's just switching the doc content for a captcha, while still returning all the images and styling.

Jet.com gad the same issue - captcha every time I erased cookies, despite having my own residential IP. Till I brought it to their attention. (Maybe coincidence.)

This mirrors my own experience as a low end user. Devs in Easter Europe would get challenged a lot until we went and whitelisted everyone.
World's Biggest Data Breaches – Visualized
Show HN: Taste the world's authentic food each day
Obviously, the requirements of being a soldier are comparable to the requirements of being a student, so it makes perfect sense if both have mandatory PE. Or not.
تور مشهد در هتل سهند و کوثر ویژه ۱۴ شهریور – تور مشهد شهریور ۹۵
> "it does not appear that the encryption protecting them has been cracked"

Please Techcrunch, you are making it sound like you are talking about actual encryption while you are really talking about hashing. From that sentence people would believe that it takes a single "crack" to get them all.

The magic of bcrypt (and hashing in general) is that probably some low-hanging fruits have been picked already while any non-trivial password remains secure.
Well, this is going to be an unpopular opinion I'm sure, but a lot of Sub-Saharan African countries seem to be shuffling Health and Human Services off to Western countries to handle, while they use economic aid for more "corrupt" purposes.

On the one hand it is always good to help people in need (especially children), but on the other hand, since it is just "given help" and not infrastructure development -- it tends to just kick the can down the road a little further.

Worse, sometimes aid even helps to stimulate corruption and economic imbalance that keeps many of those countries trapped in a borderline desperate cycle.

Here is an older, but still relevant, Wall Street Journal article that discusses the predicament from an economic standpoint[1].

[1] http://www.wsj.com/articles/SB123758895999200083
With regards to smartwatches , the Chinese have done a great job at reducing the prices(as always).

But the software isn't great(unless it's wear). So I'm curious - why does nobody release a decent smartwatch is , that supports apps, and can run well on a cheap($50) watch ?

At that price point, many new users might be interested.
The various IDs of disks, filesystems, software RAID, LVM, et al in Linux
14 terabytes of code: Spaces or Tabs?
Once you're in the country, even if you overstay your visa nobody is going to come to deport you. The problem arises once you leave the US and want to come back again - visa overstays will be a huge black mark then.
Alcohol is probably only legal because it's easy to make and has existed in the culture for ages, nothing to do with any ailments. History defines the laws far more than logic does.
I guess I don't understand. OS 3.0 didn't change that functionality of the watch in any way. You still have a watch face and notifications as they come up. That's primarily how I use it as well. What changed for you?

They do have app filtering on iOS now.
Sorry, I edited. I agree it's not hyperparamter optimisation, more some kind of regularisation thing.

But it isn't the same as what TensorFlow does, and I'd argue it is much closer to my initial characterisation ("can use Spark to coordinate training multiple models in parallel")

Not entirely sure about which question I missed, or what you want to assume. If it is this:

When you "played" with us - I'm assuming you just cloned our examples and ran us on the desktop? Likely more than a year ago before our c++ rewrite? I'd be curious to see if you ran us on spark as well.

Then no. It was around November, and I got the demos working, and attempted to build a custom network.

Edit: Was it the pyspark question? Then yes, but we also use Scala, Java and R (and SQL of course).
If people don't want you smoking by them, they usually don't want you vaping by them either.
The second bit of the exploit chain, CVE-2016-4655, leads to disclosure of kernel memory addresses. Once a single memory address is known, you can calculate the random offset of the kernel, and then exploit the third part to overwrite the return address and return into specific chunks of kernel code ("Return Oriented Programming"), whose addresses you computed from the offset + a fixed code location. These can let you e.g. install your payload.
kratom is usually sold as a powdered leaf. you can't smoke it, you can't snort it. you can make a tea out of it if you're diligent. a spoonful is usually swallowed as a powder with a thick juice.

it is habit-forming. to an addict it can stop withdrawals in it's tracks, to an opiate naive person it can provide a buzz, nothing extreme and the subsequent withdrawals are also nothing too terrible.

to an opiate addict it is, frankly, a life saver. this is something with the potential to free a person of an opiate addiction, provided they want to be free badly enough.

it's quite easy to use kratom to replace your drug of choice, not for getting high, it'd be pointless. you simply use the kratom to keep the withdrawals at bay. then, simply get off the kratom after a few weeks of use. you do this because kratom withdrawal is more forgiving than something like heroin.

this is impossible with methadone and suboxone. once you go on methadone, you better plan on never getting off. the withdrawals can quite literally last months.

people have successfully transitioned from methadone/suboxone to kratom and then quit use of opiates altogether, being free from the prison of withdrawal in a week instead of months.

this ban will only serve to worsen the structure fire that is the opiate epidemic.
> The analogy is also quite poor, the human body is far more complex than even our greatest machines.

For now at least. Progress is slow, but we work on making more complex machines all the time. Also, I have a nagging feeling that we tend to underestimate the quality/complexity of machines and overestimate that of our bodies, probably due to some "we must respect nature/evolution/god/.." beliefs. Human bodies are very lacking in some respects, and it shows.
Why we made our SaaS platform open source
Divorce Attorney Miami
Don't know if this comes from SpaceX or SES.

But Musk is definitely good at coming up with 'interesting' new terms.

See RUD - Rapid Unscheduled Disassembly (aka Crash).
Because all the incentives and subsidies are geared towards big agribusiness.

Small agribusinesses are hardly getting by.
Dont you have to pay for an enterprise licence if you want multi region/datacentre/AZ?
CEPH is a volume service not an object storage service.

SWIFT is indeed analogous to S3.
It was pretty neat to read Troy's line there about sending emails out near the end, raise an eyebrow, tap over to my inbox and hear an immediate and satisfying ding. I highly recommend the HIBP service, hiding your e-mail from showing up in public searches (important for opsec), and donating whatever you can to Troy.

Truly essential service and I'd be happy to pay more. Even with good password discipline it's useful knowledge on your exposure.
Except that you sleeping or not doesn't really change all that much whether you notice the security incident in the first place. It's not like you have some sixth sense for security incidents that just stops working while you are asleep, is it? And neither has Google. Or anyone. Now, if someone has been siphoning off your emails for months, does it matter whether you notice today or tomorrow?

If you are talking about easy to detect abuses, such as participation in a DDoS attack, say: (1) those aren't really that bad for you, and if you fix them within 24 hours, not even for the attacked, and (2) your upstream provider might just notice and shut off your machine until you are awake if it's really bad.

But with all that said: Neither of those is particularly likely to happen anyhow if you take care of installing updates in time. What gets owned are high-value targets, bad passwords, and machines with ancient software (as in: security update has been available for a few years), the latter two of which are trivial to avoid.
He answered this question before. I think his answer was supersonic jets, or electric jets. Also, Hyperloop.
Machine Learning Verification and Explainable AI
I think an RSS feed would be great too. I use Digg Reader and just headlines, or headlines and key facts (revenue, founders, etc.) would be fine.
I've often wondered if this is possible. I bet there's an academic paper somewhere about zero-knowledge multi-lookups or something.
The Fallacies of Enterprise Computing
Why would this ever be valuable? Never mind it's probably a huge liability risk to Troy, who runs the service for free.
AWS troubleshooting – Lamba deployment package file permissions
Surprised to find out Google even employ a designer at all. They are still doing basic UX mistakes like this from the new G+ settings page:

1. Allow viewers to download my photos and videos shared on Google+

2. Don't feature my publicly shared Google+ photos as background images on Google products and services

Slider 1 is "on" for yes, slider 2 is "off" for yes. Just rephrase the second statement to a positive from a negative and both sliders will be "agree" to the left and "Disagree" to the right.

Then expand one of the expander arrows in the Notifications section. The first line "
Occasional updates about Google+ activity and friend suggestions" isn't a question at all, so I'm not sure if I'm agreeing or not. Most of the other statements start with "Show...", but this one is just a blank statement. No consistency at all. With Posts expanded, the top slider button looks like it will be an 'everything on' or everything off' button, but it isn't. So it seems to not have a relationship to the any of the expandable subcategories below it. The "People" expando/expander has only a single button, so no need to expand it all all, then. And so on.

Google do interaction design like an engineer with an ego.
Ummmm, wat?

You have no way to know the password you set on sites you signed up with, except from pastes of breaches?

I don't think that's a problem Troy needs to fix...

I think he's chosen very smartly to explicitly and publicly _not_ know anything about the passwords, and only store email addresses. If you think 60mil Dropbox passwords sounds like a spectacular fail, imagine the headlines if an attacker got into HIBP and exfiltrated 1.3_billion_ passwords (or password hashes)! It's be the first "Unicorn credential breach" ;-)
I'm pretty sure majani simply meant that your helping people learn is a Good Thing.

So you are doing well by doing good.
If that would be the case, SpaceX wouldn't tweet explosion videos on every failure or have live streams of their launches. They would take the approach of Blue Origin that only publishes carefully edited marketing footage where everything always seems to go perfectly.
>[Shkreli says that for most people,] Daraprim is given for free

That's his PR pitch. Shkreli says he's giving drugs away for free, but really he's not. What's actually happening is his company makes a tax-deductible donation to an org that covers patients' co-pays, and leaves health insurers/Medicaid to cover the other 80% of the cost. Covering the co-pay keeps patients on the drug longer so his company can milk more money from insurers. It's a great moneymaking scheme.

Shkreli didn't think of this himself, many drug companies do the same. Like you mentioned, I don't think he's a villain for doing this, he's just a smart guy who saw how drug companies abuse the system and tried to copy them.

There's a lot more on this topic in this Bloomberg article
http://www.bloomberg.com/news/articles/2016-05-19/the-real-r...
>> There is no objective yardstick because the ethical conditions are subjective.

So the yardsticks measuring differences between dictatorships and dictators are relative..?

THAT is an uncommon claim these days -- it was common before 1989, from communists supporting Soviet.

And then you ignored my examples:

- Human rights
- State control of media
- Personal freedom indexes
- Risks for critical journalists to be murdered

This is just funny.
> Fizzbuzz is one of those problems where there's really no clever hidden golfy solution better than the plain old first-reaction naive approach: an iteration with if/elsif/elsif/else.

There are. With a funky calculation.

For example, taken from Rosetta C version:

for (int i=0;++i<101;puts("")) {
char f[] = "FizzBuzz%d";
f[8-i%5&12]=0;
printf (f+(-i%3&4+f[8]/8), i);
}

You might say the calculations are hidden if/else, but well...
Clan of Dragons Simulator
Lastpass does this. It will warn you when saving a password, and it also warns you when loading data for an already saved password.
It's pretty likely that he broke his NDA/contract. If he was not considered a whistleblower, you can be sure he would be prosecuted.
I recently had a fight with password selection on the Azure portal.
They have some truly awful password rules, and I've ended up using something that isn't completely terrible but is much worse than normal, because I simply couldn't get it to accept anything decent.

Thinking about it, my account was added by a company using Azure, perhaps they are able to set the password restrictions for their sub-accounts...
I'm really not liking this shoehorned type annotation system. It's a significant decrease in readability.

On top of that, the fact that there is no builtin benefit within the language of using type annotations slows down its adoption greatly.

I wish some of the typescript lessons would have been learned. Typescript really got optional typing right. But instead we're left with a system which requires imports, abuses __getitem__ syntax and yields no benefits out of the box. All that because nobody wants to touch the parser -- the same sort of bad decisions which has led to the awful lambda syntax staying there so long.

And the worst part is, from there I see no path to a proper type system that doesn't massively break backwards compatibility. Mishandling such a core feature could kill the language.
Optional only in so much that you will find 'Service is included' on your bill, at least in London it's common practice.
>it is excellent to get a feed of what's what, as long as you are following the right people

social network people discovery shouldn't be work, twitter is. have one but don't really use it anymore for the same reason. it's just exhausting constantly curating your feed
Here are recent LastPass vulnerabilities:
http://www.theregister.co.uk/2016/07/27/zero_day_hole_can_pw...
https://labs.detectify.com/2016/07/27/how-i-made-lastpass-gi...
iOS 9.3.4 and minor versions are vulnerable to the Trident Exploit
Caffe has the model zoo and is pretty damn good at CNNs where you don't need new algorithms. For research, theano may still beat tensorflow in many ways, but it remains to be seen.
Having being fired and then having to leave the country.

The worst part about the thing is how dehumanizing it feels.

"Here you have paid taxes for years ! please leave now, we just valued you for your economical output"

It made me a stronger individual as a result, I know I am not owned anything. But you still develop an emotional link to your environment after being there for a while.
Does the fear result from Monsanto actually suing them or from anti-GMO propaganda?
Russian people were dirt poor because the USSR spent a majority of their economic fruits to subsidize strategic communist allies in order to keep them loyal. A lot of the other communist bloc countries were pretty well off until this subsidy stopped.
If you can't write FizzBuzz in the language of your choice without access to Google, I don't want to hire you. Period. In fact, I will campaign actively against you being hired.

Note that I said Fizzbuzz, not an actual in-depth programming question.

FizzBuzz (and similar) questions tell me nothing whatsoever about your programming ability, but they can tell me everything about your lack of it.
It's crazy to spend that much time in jail for a nonviolent offense, and such a small amount of substance in the US.

The war on drugs is a big waste of many things. But to put it in perspective, I am currently living in SE Asia where you are informed by airline announcements and signs that drug trafficking is punishable by death in several of the countries here!

I'm from Brooklyn, but I live in Indonesia now. I'm currently in Kuala Lumpur, Malaysia. 138 Nigerians are awaiting death penalties in China, Malaysia, Indonesia and Singapore at this time.
I've walked away from signup at sites where I'm mildly curious, and when I go to sign up - I have a 25 char random password-safe generated string rejected as a secure password due to stupidly enforced lowest-common-denominator rules. (Or worse still, rejected as "too long").

If Im feeling "community minded" that day, I might email their contact address and tell them why I didn't complete the signup process - if I'm in a stabby mood I'll more likely just lampoon them as morons on Twitter. doubt either action on my part makes any difference.
BIND 9.11.0rc1 is now available