skysight-inc/HackerNews huggingface dataset:
> What's the best practice here?

Defense in depth.

Remove the unneeded code so it never executes. If it's needed, block features you don't need. For the rest go one level higher and block operations you don't need. (php.ini controls, file permissions, LSM, etc.) For operations that are allowed, ensure data/code separation to prevent persistence. When that fails, have a very restrictive firewall so that data extraction and attacking other systems is difficult. Have network restrictions again one level higher. (switches / cloud network) If everything fails, have detailed logs to know what failed and when. If even that fails, have backups. If that fails, have company insurance prepared.

> Should we pre-emptively have our servers rebuild daily just in case a 0-day backdoored them?

Depends on your threat model and available money. Are you trying to stop automated malware or state actors? In the first case a good configuration should be enough. In the second you may want to start thinking about how you're going to verify the firmware your harddrives are running. And there's a whole spectrum in between.

I mean, to block majority of php blog/cms malware it's enough to make sure your code is owned by user A, php server runs as user B, and B cannot write to A's files. 0-day or not, lots of stupid automated malware stopped.

> It's not possible for me to track all the 0 days for every piece of software and library that my servers run.

That's why it's nice to run unmodified distro software. Because these guys can track it for you: http://www.ubuntu.com/usn/ (for example, any reasonable distro has similar announcements)
While I agree with your statement for the most part, I also understand that there is some context to it. That specific context is Marissa Mayer and other early Google employees. I find it hard to convince myself that those people and especially Mayer, were not or are not compensated in some way that takes those huge swathes of time into consideration.

She was paid $36MM in 2015 and raised the market cap of Yahoo! by 151% in four years. Some of that compensation is based on success at Google, some of it may be based on her success at Yahoo!, but some of it is absolutely based on her brand. Her brand, in my own mind, is highly associated with her dedication to working long hours.

I work long hours but I'm conscious of a few things: I don't celebrate it. I don't plan to proselytize it like Mayer does. Part of those long hours are dedicated to operationalizing time-sinks so that I don't have to do it forever. I don't expect others around me, especially non-founders, to do the same and like you I believe that for them to do so would likely be a net-negative.
Not really. Usually you get to learn all that stuff, and you get to learn programming doing the assignments, and projects. But there are some places out there that teach a very theoretical course, so unless students seek out programming experience they won´t get it.

Programming is hard, and for some people it´s hard bordering on impossible. A surprising number of the latter still manage to get CS degrees.
All of the OS X interfaces to Git are, to be honest, quite terrible. Sourcetree is awful. GitHub Desktop is even worse. I've tried a couple of others, the names of which elude me at the moment. I think most of it is less of a complaint against the software itself, and more of a problem with trying to present the complexities of Git in a simplistic UI. The simple fact is: Git as a whole is really, really freaking complex. Making the basic operations idiot proof is difficult enough, and then you have to try to offer a frontend for things like rebasing. Seriously though, fuck the products that pre-select all unstaged files to be added to the index on every commit. If I wanted the file staged, I would add it. Stop harassing me to add my development files - and no, I shouldn't have to gitignore them to prevent being constantly forced to deselect them. By all means, show checkboxes for me to add the files, but do not pre-check them.

I haven't seen a single interface that gets it right. JetBrains' integration in their IDEs is the closest to "mostly usable" I've seen, where branch creation, pulls, merges, conflict resolution, and pushes are fairly straightforward. It's still far from perfect - I do the lower-level Git > Pull rather than using the Update Project window because I have no idea what operations that window performs; and some rare operations still require dropping to command-line. I'd rate their implementation a 7/10 compared to the 3/10 other tools like Sourcetree provide.

A huge reason JetBrains has an insurmountable lead is its diff and merge editor. It is the best on the market, and the only usable side-by-side merge tool I can work with. Their 3-way diff is a dream to use. The last time I had to assist a co-worker merge a conflict using WinMerge on Windows, I gave up after 30 minutes. I flat out could not understand what the differences were, let alone figure out how to resolve the conflicts. Went back to my desk, checked out the branch in JetBrains' PhpStorm, performed the same merge, and had the conflicts resolved in a couple of minutes. It's no surprise to me that people using WinMerge erase work done by other people far too often.

Anti-disclaimer: not affiliated in any way with JetBrains. Their IDEs are mostly amazing, though it's frustrating that they focus 95%+ of their efforts on new features without going back and fixing what is wrong with their existing features. Their diff/merge editor, at least, is unmatched by any other product I have seen to date (other than the fact that CMD+F / CTRL+F to find in the diff editor is broken... again, JetBrains has some serious bugs that never get fixed).
The actual dietary guidelines would fill the need worry leafy green vegetables. Milk is only a decent source because it is fortified.
Horsepuckey. Hosting your own data services is not dangerous, if you do your homework. Email is not that complex (compared to something like a federated Kerberos environment), and there are several good, concise, HOWTOs, books, etc on the subject. Running your own stack makes you a first-class citizen of the 'net, and more people should do it.
looks fine for me
For reference, the 4-input AND gate from the third example in Verilog:

module ForInpAndGate(a,b,c,d,o);
input wire a,b,c,d;
output reg o;
always @(*) begin
o <= a & b & c & d;
end;
endmodule;
Judging by the other people in my CS program, no, it is not. I don't know whether they just didn't put any time in actually programming, compared to the more theoretical CS stuff that was explicitly in the curriculum, but they were largely still flailing away at null pointers and seg-faults in the upper-level courses when it came to the final projects that had to have actual, working code produced. These were smart, smart people, too.

I dropped out of the CS department after I screwed up my math pre-reqs, studied history, and spent what time I wasn't drinking beer or playing basketball, fooling with game programming. That actually left me in good stead when I managed to leverage the few programming-centric courses in the CS department into a minor - I still can't do proofs, but I can sling code and I read enough Joel on Software and Coding Horror to pick up some software engineering and architecture by osmosis.
I designed a similar but terser language in 2012:

The examples give the gist:
http://chubot.org/annex/cre-examples.html

More justification: http://chubot.org/annex/intro.html

doc index: http://chubot.org/annex/ (incomplete)

I showed it to some coworkers in 2013 and got some pretty good feedback. Then I got distracted by other things. One of the issues is that I learned Perl regex syntax so well by designing this language that I never needed to use it again :)

I plan on coming back to it since I'm writing a shell now, and I can't remember grep -E / sed -r syntax in addition to Perl/Python syntax.

SRL is the same idea, but I think it is way too verbose, which it appears a lot of others agree with.

If anyone is interested in the source code let me know! It was also bootstrapped with a parsing system, which worked well but perhaps wasn't "production quality". So I think I will reimplement CRE with a more traditional parsing implementation (probably write it by hand).
ITT seems like an easy first place to go because of their shady rep, but I think the risk here is that well entrenched interests in will ultimately give bootcamps and other online training courses the same treatment if they start eating into the educational establishment's pie too much. We have to be careful of a slippery slope.
sure there are no browser exploits at all ...

Top 50 Products By Total Number Of "Distinct" Vulnerabilities
http://www.cvedetails.com/top-50-products.php

#3 Firefox

#4 Chrome

#7 Internet Explorer
graceful degradation is a good thing. beautiful path can still be used by a lot of people.
...those who can't, comment on HN
Maybe, but Uber is not known for being a company that cares about what the law says.
> not the least of which is the lack of support for anything that is not ARM.

This might be true with regards to embedded architectures, but isn't in general; MIPS and PowerPC are in tree, and we can fundamentally support anything LLVM can, there's just the initial work to get it going.

Which platforms are most important to you?
Off-topic, whatever happened to DECA? Link is dead.
It calls for making unorthodox decisions, and trying something different. I live in the rice fields of East Java on about $3 per day with my 1.5 year old baby girl and wife. I grew up in Brooklyn, NYC and spent most of my time in urban areas.

I also have two older children whom I raised during their youth with my ex-wife in rural NJ when we decided to leave Manhattan. They grew up with a fresh water lake, no motorboats, with bears, deer and raccoons among other wildlife.

My new baby girl is growing up with fresh bananas, mangoes, papaya, and of course, rice right outside our door, and beautiful sunsets and sunrises over the rice fields. There are chickens, goats, geckos, cobras, beetles that look like gold, and colorful birds, and we live in the shadow of a dormant volcano. We live very minimal. Most of the floors in the village are just packed dirt with a bamboo mat pulled out to use. My home is tiled - had to have that!

Funny thing is my internet is spotty at times, but much cheaper, and it goes with me and my phone wherever I am. I get 500 KB/s at times, with an average of 175 KB/s. This allows me to Skype my Dad and older children several times a week with video and share my world. I love my freedom, health and the world of wonder I am learning about. I have been in SE Asia for over 7 years, and in the village for almost a full year now. I might grow tired of it, and move on, but it will be to the next different thing, like a sail boat with short jaunts to other islands. Am I rich? No! You'd be amazed at how much you can accomplish if you set your mind to it, and have some passion about it.

People live in fear. Not the terrifying type of fear you might experience in an immediate life or death situation, but in a sort of self-imposed fear of change or anything different. I like to imagine our world takes place in an imaginery little bubble around us, and if we don't kick and push its walls, stretch them, exercise them, they close in, and we become imprisoned in this gnawing, subtle fear.
It goes hand in hand with the quote attributed to Einstein. Insanity: doing the same thing over and over again and expecting different results.
People know why they're unhappy; they just don't listen well to themselves, or are paralyzed by this subtle fear that drives their whole life.
Instead of using metime, I actually use rescuetime which is a fairly similar application if you also track your offline time.
You were claiming "they could just as well package into, say, an install CD image" which is likely not going to happen, so he was just giving an example.

The perfect spam filter Gmail has its probably based on data and ML analysis, not a simple software you can put on a CD and install on some little server; so even if someone who works there wanted to help you they probably can't do it.
The quote doesn't say that whatever is legal is moral. It makes a specific judgement that arranging your affairs to keep taxes as low as possible is not immoral, and it points out that everybody does this, rich and poor, corporations and people alike, and that demanding others pay more than their required amount is hypocritical and sanctimonious.
No, only that their security is better than anything you'll manage alone.
Simple for various definitions of simple. Readable not included.
Seriously, I have a very nice house on nearly a quarter of an acre for about 200k and a nice 6 figure programming job in Portland, OR. I can't imagine ever moving to Silicon Valley and dealing with the taxes, high housing prices, traffic, etc.
Plus there's a train now! (Though I've heard they haven't quite gotten the kinks knocked out of it yet.)
I find that most of the problems are resolved with interstitial comments a la perl /x or coffeescript heregex. Merely splitting the regular expression into smaller blocks with a short description of what to match makes it easy for people to verify the regular expression.
Have you considered Jhipster (https://jhipster.github.io/). JHipster is a Yeoman generator, used to create a Spring Boot + AngularJS project.

Lot of the boiler plate code generation across the stack is done for you.

Its using Spring so will need to use Java. Definitely work checking out.
Bing Translates “Daesh” as “Saudi Arabia”, Angers Entire Kingdom
Hehe, silicon valley people usually forget about the east/north bay and pretty much anything north of the bay bridge or hayward bridge.
Cool!

So we can implement a descriptive component doing something similar on the same lines.

But I kind of thought of pushing more for a `functional behaviour`. Hence I used the existing AND-Gate to build the Four Input AND-Gate.

I should probably put the descriptive component on the README as well
I hear you. I avoided Squad Leader and ASL when I first learned of them, partly because I was led to believe they were very complex, unnecessarily so. However later as an adult I took a closer look, especially after MMP won the license and produced the Starter Kit series. And I was amazed at how simple the rules were, the core of them, the main spine. So many common patterns and elements that made it easier to understand and make predictions.

Most of the apparent complexity only comes from the fact that there are lots of exceptional situations, edge cases, special predicaments, where ASL does have some rule that lets it be handled and reflected within the mechanics in a way that makes sense in terms of strategic impact. So many things turn into simple D6 or 2D6 roll +/- modifiers, or table column shifts. And when you roll you always want to roll low, the lower the better. And even then the gameplay might seem highly ordered and turn-based, at first glance, it's truly all about trying to simulate the messy real-time, interleaved, fog-of-war nature of real battle. Many rules and elements are about injecting the chrome of war, of history, the superficial feel, but in reality it very often chooses to bias on the side of making it a more fun game, a simple game.

I think the Starter Kit series was a brilliant move because it helped to introduce players to that stripped down, central core, the heart of the full rules set. Buy and try SK1, and play a scenario and you won't be disappointed, likely hooked instead. Then you can incrementally widen your rules set and play elements by trying SK2, SK3, etc. and then the full rules binder and modules.

I've never seen a WW2 era game with as much modularity and infinite replayability as modern ASL. It's a bit like the LEGO of WW2 games. No gamer should miss getting a taste.

I hear you about Magic Realm too!
Distfs: Mount a directory of ES6 code as FUSE directory of babel-compiled output
Refreshed the page and it worked.
You must be talking about either a wimpy laptop CPU, a cellphone or a tablet.

Old desktop Sandy Bridge does 4k 60 FPS decoding with no problems, as long as output can sustain it. And integrated GPU does not. You need quite a lot of bandwidth to sustain that much image data.
Let alone experience licking one.
Astaxanthin can be obtained naturally as well. Wild salmon. Emphasis on wild, not farmed. One of the reasons wild salmon have a bright red pigment is because of the astaxanthin.

While we're on subject, wild salmon has one of the highest VitaminD counts of all food. One 3oz serving = 500IU. Probably in the top-three healthiest foods on Planet Earth (if you can even make such a criteria)
I'm not sure why the output is passed in at the start (I'm guessing it's like an out parameter in C#) and I don't understand what @(*) is, but that's surprisingly readable.
> near blue-ray output

I have those B5 DVDs as well and that's confusing - the source video quality is just not that great.
I remember reading of someone else doing something like this. They went to huge amounts of effort with a custom timber interior, fan, lighting, cooktop, water pump, etc. In the end, they said it probably would've been better to just have a blank-slate truck with portable cooking and water.
Yeah, I haven't had the opportunity to use Verilog but it does seem very readable!

I want to kind of give this library a similar direction. It's in its infancy at the moment :P
That was my original thought as well, though I can see the other reading now, too.

So while the title could perhaps have been better worded, I can believe no conscious bias was intended.
I hope DeVry is next.
How is it possible to put the malicious code in the correct memory spaces? Unless the attacker had a full image of the memory, I don't see how this can be accomplished.
Hey, remember that time we gave up regular expressions and went back to writing grammars? Right tool for the job..
Companies need very few PhDs in math, science and engineering -- bachelors and masters do fine.
A 9-volt is the boxy one you put on your tongue to get a little tingle!
I'd still keep the {2,} instead of repeating the [a-z] twice, but otherwise, I completely agree.
I'd really love to track down a copy of Advanced Civilizations. I played the computer version many times.
I hate when sites do this. Also when they ask you to share the text you're highlighting (looking at you with a shaking fist, Medium!). No, I just didn't want to lose my place when I get interrupted in a few minutes, but now I have to figure out how to click out to make the giant share modal go away, thanks.
ITT Stops Enrolling New Students
How can we legitimately know whether an ITT grad is sufficiently equivalent to one from a traditional university? The complaints from the state focus default rates, but if there's a hiring bias against hiring for-profit graduates, then default rates are measuring the strength of that bias.
Russian false stories are weapon . what is the censorship of us election stories then ?

http://www.zerohedge.com/news/2016-08-29/huffingon-post-revo...
Heh - it's quite a struggle for me to get 20megabits at my place. I've got reasonably affordable 12-14mbits of ADSL2 (with unimited traffic) for $70/month, but I can't get NBN where I live, there's no Telstra or Optus cable (our local shared 100mbit down HFC option which tops out a maybe 3mbits up) in my building complex, so the only "high speed" options are LTE (a several dollars per Gigabyte) or _maybe_ NBN fixed wireless (tops out at 50mbit).

Lucky Australia is such a beautiful country, eh?
It's not necessarily bad if you can afford to be irrational.

If you can't, the it's bad for obvious reasons.
Hospitals Try Giving Patients a Dose of VR
It would be interesting to know exactly how one could get owned by running just an email server. It's been forever since there has been any server that could be attacked with just SMTP. IMAP has a login, as does that buggy PHP webmail program.

There just isn't much of an attack surface there.

The real problems are spam and convincing other mail servers to accept your email.
I'd say this falls within "science".
Came here thinking I would learn something. Learned literally nothing reading this article.

Reminded me of this other gem article: http://www.clickhole.com/blogpost/if-black-lives-matter-isnt...

Basically trying to prove a point with very... umm... poor arguments :)
Most people travel at 65mph, traffic allowing. Why wouldn't almost doubling that be desirable? Throw in the ability to fly in a direct path and it's even faster than driving. NYC to Maine, for example, is a painful drive. I wouldn't mind flying my car there for a long weekend.

I haven't looked in becoming a pilot in many years. It seemed expensive, not so convenient, and a bit dangerous. You need to spend some money to get a fast "Dr Killer"

https://aviatorcollege.wordpress.com/2010/06/25/why-is-the-“...
My tech lead was bemoaning a round of applicants for a senior position, where some of the candidates couldn't even conceptually 'get' FizzBuzz, let alone code it.
There is also pain to test web apps for numerous browsers (so much fun on mobile)

in term of security, popular browsers are in the top 10 of most exploited software

so yeah the delivery model is nice, the update model too, but still I'm not convinced that the web model for apps is the "end all, be all" of app development

I could even argue that more and more apps are coming back to native, first instigated by the mobile app stores, which then expanded to the desktop app stores.

There is room for everyone, web apps and native apps, but still I would not want to use something like gmail as a browser app on my mobile.
So basically its a scam to defraud the government, in which students are merely the conduit for the money
Why do private lenders lend to ITT students?
If I recall correctly they've had major issues duplicating studies which got positive results on this.
What about the junk mail in Hitchhiker's Guide to the Galaxy?

Stupid cleaning robots....
I live in LA and the job offerings are ok but the housing market here is out of control. Problem is, the salaries are still a little bit lower. Or a lot lower.

Then again you've got the beach and some might say the dating scene is better. So there's that.
This is just the tip of the iceberg with problems in education, though. Let's not act like higher education in the US is exemplary.
This is a very well-written response that is both thought provoking and elegantly projected.
My gut thinks this sort of training alternative to back propagation has a lot of uses where SVM have no applicability. The article talks a lot about RNNs (neural nets for sequence prediction), but I would guess it would have uses in online learning as well. Learning twice as fast in those situations seems pretty significant to me.
Can highlight with both mouse and ctrl-A here (on FF), no script blockers in play.
Show HN: Visualizing Property Tax in Santa Cruz, CA
Interactive app for visualizing property tax disparities: https://aaronferrucci.shinyapps.io/proptaxchoropleth/

Source code and a snapshot: https://github.com/aaronferrucci/proptaxchoropleth
Because student loans are guaranteed by the federal government. Student can default and the bank will still get their money.
What bias? You can't get a degree in HVAC repair at a traditional university. It's a different labor pool.
Installed. I'm not counting the update files it keeps on disk either.
Mr. Robot’s tech guru: “My job is to outsmart this hive of geniuses”
meh.. his dad is skilled for sure, but the insides looks like the stale interior of a house. Not a fan of the build
> With the election approaching this is one issue on which Trump speaks eloquently.

For those curious.

http://www.bloomberg.com/news/articles/2016-08-24/trump-s-of...
Ask one of those people on here that brags about rejecting 95% of their applicants while using questions ripped straight out of "Cracking the Coding Interview" or something lol.
No. Reason: https://en.wikipedia.org/wiki/Betteridge%27s_law_of_headline...