skysight-inc/HackerNews huggingface dataset:
"The reason I objected is that when people take a gift and are immediately critical that the gift was not larger, it discourages the giving of gifts. If we want more whistleblowers, we must make sure their experience of whistleblowing is a positive one. If all they hear is, "Y U NO GIVE MOAR", that is not a positive experience.
I think it's particularly important here because this instant entitlement is a perennial problem for open source project maintainers."

So basically you have a bunch of reasons why you're upset about this but none have even a remote relationship to the topic at hand? Because you feel open source software maintainers have a certain problem, by logical extension we must be facing the exact same thing in this totally different situation.
You don't have a point.

You tried to use one expert as a refutation of my claim that there was a general consensus with how long it would take for computers to beat a human in Go.

A simple search on google will provide you with plenty of writing backing that sentiment up.

Asking any of your friends who took AI classes back then would confirm the same.
Oh you must have left awhile ago then. I agree they ruined the best music discovery service on the web, but even without it the site was dated but functional.. until last year.

Last year CBS decided the whippersnappers needed a redesign and took out around 80% of the features and put the site into a perpetual beta state.
Who wants to be helping every relative set them up and adding to the unpaid support load? So they get mentioned in passing and then people think "Yes, I should do that" and never bother.

Same thing happens with backups.
Thanks for the suggestions. I want to try a human-powered summary first, and see results.

I agree that credits might work better, but I love transparency and therefore I'll also stick with money :)
I wish I could mod you up.

As I do lots of hobby projects, I like your advice and will definitely try some of the pricing approaches.

Keep up the good work!
2012 TVs probably stopped getting patches in 2013.
Makes sense to me, if you don't press excessively hard, it's easy to leave most of that carbon layer.
LA was built on trains http://www.tiki-toki.com/timeline/entry/49819/Metro-Transpor...!
So then, presumably, even with this solution the attacker has birthday attack advantage for:

a) attacking multiple targets all using independent random IPs for their services

b) Users running multiple services, each on a separate random loopback IP

And if I'm correct there, then this would presumably extend to generic DNS rebinding attacks; the greater the number of IPs in a subnet, the greater the birthday attack advantage the attacker gains. (right?)
Most like the same things the rest of them do like SMBus, temperature sensors, fan control and voltage monitoring.
They also do the GPIO for various other features like resetting the bios or switching between different BIOS flash chips, more recently the LED controls on the newer motherboards and the error code segment display that is now used instead of the POST beeping sounds so you can actually know wtf is going on :)
I definitely had trouble taking the analogy serious, maybe it wasn't meant to be serious.
Apple, Congress and the Missing Taxes
The landing page took quite some time to load for me and I was wondering why it loads so much JavaScript. I think Angular is only needed for the actual application, not the static content pages, isn't it? Would load faster that way.

Btw: Your German translation is so bad, I would rather keep it English. "Premium" is translated as the German word for "bonus" or "bounty", while "Premium" itself is a perfectly fine German word. This probably hurts the conversion rate more than it helps.
Super I/O is not dead. It has the PS/2 keyboard and mouse ports for example.
I appreciate the sentiment of your comment, but, what part of a neural net isn't interpretable? Indeed, they do require more careful examination compared to traditional learning techniques. You can examine the receptive field of each node to infer what it detects for.
Well, an update is needed: the Windows testing team was huge. Now, if they remark at all a program has a problem, it will just be silently uninstalled during the next major Windows upgrade.
What about Hyper-V / Microsoft Azure? Anyone know if they de-dup memory like this?
I bought a HiSense Smart TV because it was a good price for the picture quality. And I thought the Smart bit would be a nice plus.

But it's quite annoying. Takes a loong time to turn on and the UI is glacial and inconsistent. I use Netflix through the Xbox, and use Chromecast for other things.
I used JSONB to keep the Tags on an object. Used to be EAV. Works way better here
Nokia did remain independent. They just sold the mobile division to Microsoft, along with a time-limited license for their brand.

They are getting back into the tablet and phone market now:
http://gadgets.ndtv.com/mobiles/news/nokia-branded-android-s...
I started using LastPass just the other day because the recent news made me nervous.

It's NOT easy. The interfaces are clunky. I have to pay to get some basic features like browser plugin. There's a lot of false positives (it suggests me sometimes to save a password even if the field is not for passwords.) Generating secure passwords is hard because some sites validate length and charset only serverside and the poor manager has the invalid password already saved. Some sites play tricks to discourage pasting passwords. More than once I was unable to log in LastPass's online vault because of an "temporary error".

All in all, it was horrible, ergonomy-wise. I don't wonder at all why people aren't using them.
None of those are 24/7, and only a few of the lines are automated.
BloomReach (http://bloomreach.com/) — Dallas, TX — Full Time — On Site

I'm an engineer on BloomReach's Platform team in downtown Dallas (hq is in MV). This month we have three new roles:

* Senior Product Designer (http://bloomreach.com/jobs/269444/)

* Solutions and Support Enginer (http://bloomreach.com/jobs/273100)

* Sales Development Rep (http://bloomreach.com/jobs/73214/)

As one of the early hires in the Dallas office, you'll be instrumental in defining the Texas strain of BloomReach's vibrant startup culture.

We're consistently voted one of the best Bay Area companies to work for, and I can safely say we'll be the best in Dallas.

If the above roles don't fit you, but you're in Dallas/DFW area looking to do something new on a small team with bay area culture, I'd still encourage you to reach out and start a conversation.

( stormy at bloomreach )
Technology is part of nature in my view. I don't distinguish. If you mean in biology then I guess cell division is an example?
I tried to read the documentation, but I didn't quite get it.

What would I use Eve for?
Cash is king. Interim metrics are a necessary evil.

I find the OPM method interesting. Has anyone here used this? Is it always more conservative? Is it a better predictor of realized value?
Thank you!

Yeah, these aren't a secret if you live and work in products. For most people creating a side project, though, marketing and product management is some sort of dark voodoo magic.

I like lifting the veil on that.
Very interesting article. We are also working on a small side project, called https://www.MetaGrader.com

We are aware of the aesthetics of the site, and working on that, but we have some discussions on how to monetise it; should we go for a credit system (with weekly reports about your site, historic information, automated improvement tips), should we go for selling expert advice, or should we focus on other things, like advertising, reselling services like pingdom/gtmetrix, etc?

We would value your opinion in this!
not quite yet... running on kubernetes (Google Container Engine) so it's been pretty low maintenance so far.
What mattashii said: newspaper ink has (or at least used to have) lots of lead. I'm not sure how bad it is, but I'd imagine that long-term you might want to avoid it. Specially when something as easy to find as a potato or a bunch of leaves will do the same job without the risk :)
I disagree. If you never reveal a lack of knowledge, than you'll never learn anything from the conversation: some of my best experiences on HN were times I was totally wrong.
The first time I launched a game that played less beeppy sounds than usual on my PC without a soundcard, actually almost understandable words, I nearly had an heart attack because I knew very well this was impossible. I needed a few minutes to recover.
Hand-picked JavaScript News
Sony to boost smartphone batteries because people aren’t replacing phones
I move on that often because the companies already have tonnes of technical debt.
Is it true that most Americans work in "non public" salary environments? All government employees, most union employees & many big company employees in the USA work with public salaries.
What I got out of this was that our intellectual state is more variable than we think.

This is why I wholeheartedly embrace procrastinating your way to success. Given that you are procrastinating with something in the top ten priorities.
Is it actually discrimination if its women's own actions that cause them to get paid less? i.e. not coming back with competing offers. I think we are losing sight of what the word discrimination means.
News in Building Modern JavaScript Applications

with Medium-like commenting, Google search, and organized by tags.
>I would like to see websites make password changing a simple and standardized API call. That way integration with things like 1password will allow it to automatically change the password with each login.

There isn't really a need for a standardized API it would make things easier but if 1password wanted it's not a very hard thing to do without it.

All you need is to do an HTTP request to change the password most sites allow that to be done in a single request, CSRF might be an issue but non single action forms are usually not protected or there is no need for that and there are ways to bypass CSRF also.

For a company like 1password it wouldn't be hard to build a request profile for say Alexa 500/1000 and automatically change the passwords once a breach hits, I have a similar setup of several scripts that update the password for various services I have by generating a random password in Keepass getting the old password sending the password request post and updating the Keepass entry.
http://www.worldreader.org | Full stack node.js developer | San Francisco | Onsite | Full-time

Worldreader is a non-profit on a mission to bring digital books to every child and her family, so that they can improve their lives. Every month over half a million people use Worldreader’s library of 40,000 e-books to read in 40 languages in countries such as Ethiopia, Nigeria, India and Philippines.

You will join our small technical team in San Francisco in an office that is fun but very serious about our mission. We are located a short distance from the Civic Center BART station.

We are looking for a senior node.js developer to help design our next generation architecture, migrate to a more unified architecture as well as develop some of the new critical pieces.

http://www.worldreader.org/about-us/jointheteam/careers-unit...

Hiring Process

* Submit email a resume with a cover letter

* Short introductory phone call with HR

* Complete a take-home assignment. You can convince us to look at a Github project you created instead.

* Conduct a 30-60 minutes phone interview covering your project.

* Conduct a 2-3 hours in person interview in S.F. and a Skype call with our team in Barcelona

* We check your references.

* We make you an offer.
Anybody who actually recommends Notpad as a programming tool in a serious conversations deserves unbearable agony for the subsequent week. Because that's what they just set up somebody else for.

I'm not even kidding: Notepad should die in a fire.
Keepass is free albit there is no sync unless you set it up yourself, and paying for feature is the nature of commercial products.

The majority of open source products tend to have pretty shitty UI/UX =)
Well, now I'm thoroughly terrified of BBQ.
Raygun | Seattle, US & Wellington, NZ | Engineering & Sales | Permanent Full time | Onsite

----------------------------
----------------------------
----------------------------
-------------------

Raygun gives developers the power to create perfect software experiences on a global scale.

----------------------------
----------------------------
----------------------------
-------------------

Https://raygun.com/careers

Sales Roles | Seattle, US

Sales Development Rep
Account Executive
VP of Sales
Customer Success Manager

Get in on the ground floor of an already successful SaaS business! How? Raygun (https://raygun.com) is setting up a sales office in Seattle – it’s first sales office globally. The Raygun Platform is already in use with thousands of customers in more than 100 countries. We’re a high growth, but profitable, business. We achieved this with a great product coupled with great marketing. Simply put, you’ll be helping find new leads for a product that has proven value to software development teams in a rapidly growing market.

Engineering Roles | Wellington, NZ

Software Engineer - We are always on the look out for awesome software engineers

You love coding to the brink of obsession! The code you write is clear, easy to maintain and unit test. You care about the user and you get a kick out of building features they love using. You will excel in a collaborative and agile environment where we deploy continuously, measure everything and take responsibility to diagnose and fix what breaks.

You'll get a good idea of our mentality here.
https://raygun.com/blog/2016/08/the-best-software-engineerin...
Could look at HARPEX http://www.harperpetersen.com/harpex/harpexRH.do?timePeriod=... which tracks container freight. It does not have as much historical data though
How do you compare null, true, false, '', 'Y', 'True' in such a case, all are values that might wind up in a boolean field... though if you're using json-schema for your schemas, that's less of an issue in the common case.

IMHO anything that is to be queried against regularly should be normalized into an actual column.
Adopted Unicode Characters
> The passwords were stored using unsalted MD5 hashing

Ouch.

I guess on the bright side it won't be long before researchers have a new dataset of plaintext passwords.
Thanks! If you have any questions you can post them here or if you want to talk directly, you can twitter at me (is that the saying?) @jeremyboyd
You're totally right. I use 1password, love it, couldn't live without it, but forgot how unintuitive and tricky it is, until I helped my wife get setup on it.

It took a while just to get up and running with the app/browser plugin/her own account, and now it's going to take a while for it to be part of her regular workflow.

The very first login I gave her (online banking) had such a bad interface 1Password couldn't auto-login.

So the next lesson was "how to work around bad website UIs, using a variety of non-intuitive menus and keyboard shortcuts".

We both use Dropbox to sync our vaults, so then I was talking to her about 2FA (pro/cons for text vs. Google Authenticator app), off-line recovery codes, an appropriate 1pass master password, etc.

There's no way she'd happen across a PW manager and love it. She's using it only because I want her to have access to all our online financials, all of which have long randomly-generated passwords.

I wish you luck! FWIW, I've found 1Password to be consistently better than LastPass.
And anyone who points to some of those locations--such as Kuala Lumpur--as examples of low-car public transit cities should really visit them sometime.
Methodone clinics are big business.
An excellent Jekyll theme
It's a shame hate is such a strong form of motivation. The things people like this could do to make the internet a better place...
It seems the HN title and original title are both pretty wrong, at least according to the article content. The attack vector is really the ability to, if you have a known public key and a server using it, perform a pre-calculated bit flip such that the new public key is much easier to factor, and thus obtain a corresponding private key.

So you're not obtaining original private keys, you're altering original public keys so that you can more quickly factor a private key that will be accepted.

If this is an SSH public key, then you can obtain SSH access. If it's a PGP key trusted by the package manager, then you can craft signatures on packages that would be accepted as valid, assuming you can also get the target machine to download said package.

I think SSH is probably the most interesting attack vector assuming you can get network access to the host once you've jumped through the myriad hoops to perform this attack.

It's a serious issue that should be addressed (probably via forced from-disk reads or at minimum integrity checks), but I think the authors are perhaps a little too eager on the practical implications of corrupting in-memory public keys.
I love the idea of Rust. One of the issues holding me back from Rust is the GUI system. Unless I copy Servo or Piston, there isn't much else out there. Sad to say I've been trained to enjoy using pointers and a tree of GUI nodes than playing pass-the-word. That said, I can't help but think each developer who considers using Rust has one or two other key "nice-to-haves" (that Rust lacks) holding them back from adopting it.
I said the same about fish...and I still eat fish.
From the title, I was expecting this story to be about the con-trick use of the work "mark" (sucker, target).
It's interesting many countries such as the US, UK and NZ have banned rare earth magnets due to fear of people swallowing them. The data they used to back the banning included all products ingested, and vice wrote up an article here: http://www.vice.com/read/the-consumer-product-safety-commiss...

If a product is causing similar health risks, isn't it fair to apply the same ban to it too?
Yeah, seems to be this news story:

https://www.yahoo.com/news/fbi-says-foreign-hackers-penetrat...

HN discussion (162 comments):

https://news.ycombinator.com/item?id=12381337
Sure, we build the product. And without that product, the company is a non-starter. And if we screw it up, we can lose existing customers.

But the product by itself does not produce revenue. Only selling the product makes revenue.

So, at best, we can avoid costing the company money, but we can't make money. Even customer service can have a bigger impact on the bottom line than we do.
We really need some laws around this... Prison time for web developers that store passwords insecurely, and substantial fines for anyone whose password can be brute forced from one of these leaks.
Something like Perspectives for Firefox?
Minneapolis Minnesota
A New Economic Vision That Mixes Together Occupy, Amish Culture, and Startups
A programming language that non-programmers can use is like a written language that illiterate people can read: it's an oxymoron. (The minute you can use it, you're a "programmer"; the minute you can read, you're "literate")
In behalf of the Argentinian circus people, I thank you.
Nowadays that's not an actual chip anymore, but part of another (probably the superio that handles tons of legacy pc stuff in one chip). However it nevertheless needs dedicated hardware, in the form on a trace or a wire going to a more proper sound subsystem (or even a dedicated buzzer)
Why not just close the lid?
The Simcity case reminds me of Bryan Cantrill's talk on lx-branded zones: apparently, there was a bug in rpm which didn't touch Linux, because Linux wasn't doing things fast enough to trigger the condition. So there was some code added to check if the running program was rpm, and to pause it briefly if it was. Apparently the comment the people who wrote it left amounted to, "we wrote this, and even we feel dirty about it."

You can find the actual talk at
https://youtube.com/watch?v=TrfD3pC0VSs
In fact, JSONB is probably not a good idea when it comes to analytics.

The storage is almost x2, accessing attributes are expensive than tabular data even though JSONB is indexed, the data can be dirty (the client can send extra attributes or invalid values for existing attributes, since JSONB doesn't have any schema, Postgresql doesn't validate and cast the values) and as the author mentioned, Postgresql statistics and indexes don't play nicely with JSONB.
Oh I'd love an actual R&D job somewhere cheaper if it paid similarly after cost of living adjustment.

But it seems to mostly be line-of-business CRUD plumbing and legacy-wrangling for Fortune 500 IT departments, under constant threat of outsourcing.
Probably also true.
this seems less like side-projects and more like major projects?
No problem, and that is a lot of visits, and that domain is awesome! As for legal things, I'm not a lawyer, so I don't know the law, but if its legal, then go for it, if it isn't, still go for it, then ask for forgiveness ;).
You can use the flat edge of anything with a little leverage to pry a bottle cap off using your fingers as a fulcrum beneath the cap.

https://www.youtube.com/watch?v=rm0ZkABVqjQ
How to Boost Your Website Traffic with an SEO Audit
Due to the extreme girth of some of the HN moderators, you'll be banned soon for "fat hate." That's why I'm shadowbanned.
About the latter part, I've noticed the same thing on my Sony Bravia TV as well. I believe the TV's may have a sort of "inbuilt chromecast": so I can cast youtube and netflix on my TV, and it will play the content via the TV-native app. I found this a LOT more convenient than having to deal with chromecast per-se; since I can't really control the TV much with the remote control once chromecast is in play.
Could have been worse, they could have hired the guy who redid Flickr and Chowhound.
Zoomer (YC S14) - http://www.zoomerdelivery.com - Multiple Roles - REMOTE

Zoomer is focused on helping high volume delivery restaurants wow their customers and grow their business. We've taken a unique approach to changing the food delivery space - a platform to handle an extraordinarily high volume of concurrent deliveries from restaurants that already deliver (i.e. pizza shops with their own delivery drivers). We are backed by some of the best investors in the world, including Y Combinator, Foundation Capital, First Round Capital, SV Angel, and other amazing funds and individuals.

Zoomer connects high volume delivery restaurants with independent delivery drivers. Restaurants leveraging the Zoomer platform are able to provide a better & more consistent delivery experience for their customer, which ultimately leads to a stronger bottom line. Independent drivers on the Zoomer platform have the ability to create their own schedule & increase their earnings. And of course, customers receive their orders dramatically faster.

We’re making key hires to expand our globally distributed core team. You’ll have a ton of impact – lots of freedom to evolve our processes, systems, partners, platform, stack and apps. We follow strong engineering practices, put an emphasis on testing, and deploy rapidly. Our team is distributed across North America and Europe.

Help us build cutting-edge technical solutions to:

- tough logistics problems, quickly routing orders to optimal drivers
- on-demand prediction and forecasting models
- scalable compute and data infrastructure
- multiple mobile apps - for restaurants, drivers, and diners
- range of complex real-time front-end interfaces

Some roles we’re currently hiring for:

- Logistics technology engineers
- Ruby engineers
- DevOps engineer

If this sounds interesting, you can learn more and apply here: http://www.zoomerdelivery.com/careers
Is brass magnetic?
...That's actually worse. If a program has a problem, tell the user. Besides, the idea that things won't change has been firmly ingrained in Windows programmers' heads for years.

Heck, at this rate, we'll need WINE for Windows, so Windows can run apps for earlier versions of itself.