skysight-inc/HackerNews huggingface dataset:
There are other service providers. Sorry I didn't read the comments in the StackExchange post.

There are other vendors. I think that'd be my next step -- go to my legal team or C-team, explain that answering these questions would put the company in danger, and suggest we consult with another vendor from the approved PCI list.

(Sorry I don't know if this is actually the list to go off of -- scans vs. audits, just my point is that there are public lists of approved companies to choose from.)

* https://www.pcisecuritystandards.org/assessors_and_solutions...

I had a client who just had some random dude telling them he could certify them as PCI Compliant... he was in no way authorized to do that. Was fairly hilarious how it played out; he'd been "certifying them" for years and even went so far as to give them a graphic they could display on their website. There are people who pray on ignorant businesses, but with a little research it's not terribly hard to educate yourself on what's real and what's BS.

EDIT: Just read the StackExchange post... Yeah, run. Guy is a nut job, like the random dude who had been advising one of my old clients. That call with him -- around how he wasn't really someone who could certify PCI Compliance -- was one of my favorite calls ever. He basically melted into a rant about, "I know good security, I have never had any of my servers hacked... well only like 2 but those weren't my fault!" Then said he'd get off the phone to do some research... and never called again, didn't even bother sending my client a bill for his services. Wish I had recorded it.

BUT... just because there are nut jobs out there, doesn't mean this is something companies should ignore. PCI Compliance is important.
But those incremental changes are moving outside the design space of currently viable products.
I'm personally still trying to figure out where the hordes of new users that just install Apache are. In these times, if you can install Apache 2 on a computer permanently connected to the internet you can probably also install Caddy or Certbot.
> The article isn't about functional programming.

functional programming =/= functional purity. You're talking about functional purity,not functional programming.
> currency

OK, it's an altcoin scam.

Sounds like they don't even have any interesting cryptographic primitives for privacy, but they just have a mixer built into the app or something. Why would I use this over using Bitcoin with a mixer? Plus, if/when Bitcoin starts integrating ZKP/privacy cryptography like Ring signatures, it's going to be a very hard sell to use any of the miscellaneous altcoins that have some privacy-related cryptographic advancement as their only feature.
Ah, but what if the fact that we are individually poorer mostly derives from supply and demand - in other words, if labor is more abundant, then the price paid by an employer for labor goes down? In that case it is plausible that the entry of women into the workplace could be part of what's causing the drop in wages as well. And in that case it's a self reinforcing feedback loop, since if everyone else has two people working then you have to do that too, just to maintain stable wages.
Also, some sort of "parsing" (normalizing) is always required even for binary messages. Endianness, alignment conventions, etc. — just mapping the network bytes onto memory is inviting trouble.

(btw, network byte order is big-endian).
Thanks, I took a look, and that's great information for any current student, or students with outstanding loans. However, I was mostly joking; I've actually already paid them off completely, years ago, which wouldn't have been possible without my lovely wife. So the word "refund" was used purposefully, and getting one is likely improbable, haha.

For years it was always a struggle of bashing ITT with my colleagues/the internet, but talking them up with potential employers. The only thing $40k of debt got me was the perceived prestige an employer likely already had of ITT. Now that they're defunct there's definitely no up-selling them.
Yeah, as an American this sucks. My aunt had this issue and was similarly told to buy another iphone because the "1 year limited warranty doesn't cover this". Took less than 5 minutes on the phone for her to get her money back through amex. Chargebacks are a godsend to us unprotected American consumers. I doubt the chargeback hurt apple much, but any little extra expense to them makes me happy.
PARC is heavily DARPA-funded today. In the 70s, PARC hoovered up a lot of Stanford grads who had been working on government funded projects at SRI. It's unlikely PARC would have been as successful without them.

Bell Labs was independent, but there are similar indirect links - lots of freshly minted PhDs cutting their teeth on government funded research, then moving into industry.

Government seed funding was directly responsible for the Whirlwind and TX series projects, for IBM's SAGE system, for the work of important consultancies like Bolt, Beranek, and Newman, and the various ACs (Illiac, Multivac, etc) all of which laid the foundations of modern computing.

IBM, DEC, and eventually Apple and MS productised that work, but it simply wouldn't have happened without government support.
Considering the correspondence between CEOs and shareholders as a literary genre
Yup. It was just "Brown" at the time. Brooklyn Center campus. I went for Application Development.
A brilliant troll / piece of entertainment. The author basically reveals it here in Update #3:

> Our software has now moved onto PayPal so we know it's safe.
I agree. I've been working remote for the last year and a half. First of all, I wasn't very good at it. It took many months to get disciplined enough to do it. Secondly, like you said, there are so many hallway conversations that happen, you end up missing out on.

I was recently in the office for a week. I heard so many personal discussions about things, I was able to weigh in on.

I walked away realizing I really am not contributing as much as I could, not being there in person.
Yes, very arguable :). Komet has keyboard shortcuts. I don't mention them on GitHub because they're shown and I believe natural to figure out after opening the app.

I spend a lot of time on my computer not having at least one of my hands on the keyboard. Say I'm about done writing a commit message but I get a message on my phone I want to quickly check. It may be more convenient for me to use the mouse to hit commit later and then do some browsing tasks, or so. The other day I was doing some refactoring work while eating food in my other hand..

Nonetheless I believe having the option to use the mouse is better than not being able to.
Much like the other replies to your comment, it's a whole company issue.

Many companies have had issues where 'customers' (read people committing fraud) come into a retail location and replace equipment with hacked readers. Your company needs to have measures to prevent things like this from occurring. It's not just 'credit card' security any more, it's protection against a number of human and computer equipment attacks.
Nearly 800,000 Brazzers users’ credentials exposed
I just want to point out that TLS verification is extremely fast in HTTP2 to the point where speed is arguably a non-issue.
Personalized channel recommendations in Slack
To be honest, I don't really know why this hasn't picked up yet. Maybe the scientific community is not very easy to get organized, as researchers are pretty busy with research, teaching, writing grant proposals, serving on committees, acting as reviewers, etc. There have been some attempts in CS with various success, though.

Another factor may be that most research (at least in CS) gets presented at conferences, gets published in conference proceedings first, and then journal publications are mostly an afterthought, and in many cases are skipped entirely. Organizing a conference with open-access proceedings may not be as cheap and easy as setting up a web-site and getting a few well-known names to serve as reviewers...
A Node.js file format identifier
I'm not disagreeing with your encouragement towards the skilled trades, but please do be realistic with your information. Median salary is $40K.

http://www.payscale.com/research/US/Job=Welder/Hourly_Rate
>The reason we have seen tuition rates go up at public schools is precisely because their share of taxpayer funding has been cut

I think it's a bit much to claim this as the sole or even main reason. Tuition has gone up because it can. People are willing to pay it because, who cares, it's just a loan. Not money out of pocket.

Look at the financials from University of Texas for FY 2014-2015: https://utexas.app.box.com/v/annual-financial-reports/1/8167...

Federally sponsored programs UP $20 million from previous year. Local programs up more than $2 million. These more than offset state-level funding being down $6 million, and that $6 million is a drop in the bucket of $1.6 BILLION in operating revenues. Over $200 million increase in net worth in that year alone, and over $1 BILLION in net increase the year before.

Schools are not hurting for money. Tuition students pay is less than half of the money they make. Tuition does not go up because it needs to, it goes up because they want it to and because it can.

UT could make tuition and fees literally $0 for everyone and they'd still be profitable over the past two years.
The Future of Storage
Anyone live in a country where the military is the police? I think it's a really bad idea, and Allende probably agrees.
Repeatibility is hard. I'm in the same mountain town, two summers in a row, and it's a completely different experience. Many things are identical, in fact I'm surrounded by it. But the experience I'm having is very different. I think sometimes there's too much attachment to replicating things of the past.
The OpenPGP card
Short interview with Michel Friedman in english about the incident

https://twitter.com/dw_conflictzone/status/77318158971931852...
Hack Day: Eat, Drink and Code with Verizon, DreamFactory and MapQuest
All the alternatives are more expensive.

BLE:

* Nordic nRF51/nRF52 - Very good option. Completely documented. You can do custom radio protocols. Very popular.
* TI CC2650 - Looks good. Apparently fully documented. Unlike the Nordic chip it has a separate processor for the BLE stacks so your code doesn't get interrupted during connection events. Also supports IEEE 802.15.4. CC2640 is BLE only.
* Samsung Artik 1 - BLE only; looks expensive
* Intel Curie - I don't know much about this but apparently it isn't well documented.

Wifi and BLE:

* Intel Edison - Powerful but very expensive
* Artik 5 - Again, powerful but expensive

I'm not really aware of any other solutions that have:

* Wifi
* BLE
* Readily available cheap modules
Report: Snapchat ad revenues to reach almost $1B in 2017
Vidpresso (YC W14) is hiring entry / mid-level JavaScript developers
We're looking for someone who likes to take ownership of a project, and see it through to completion, with or without supervision. Our stack is like 2 months old, and is frontend heavy… React + Observables + redux-like-stores + angular in an iframe for legacy support + native app that renders webpages as video and delivers them to Facebook (and other video services).

The right candidate would be excited about being our first dev hire. There’s currently only 4 full-time founders (+ 2 part-time employee). Our product helps big brands like NBC, BuzzFeed, the New York Times, Reuters, Nasdaq, TED talks, and more broadcast high quality video to Facebook Live. We've grown really fast and can continue to do so with the right technical talent.

We’re previously funded by Y Combinator, and some angel investors. At this time, we do not expect to raise further funding. We’re currently profitable, and expect this to be our only company we work at for the next 50 years. We will not be selling the company unless some insane whatsapp like thing happened. We're building a forever biz, not a flip.

We value diverse applicant pools, so if you're part of an under-represented population in tech, we hope you'll apply. Specifically we'd love to see more women and people of color apply.

We value people’s home lives. We work hard but some of the founders work 4-day weeks. Other coworkers are encouraged to do this schedule if it works for them. We also value remote work, and have cofounders in Finland and Pakistan, which should emphasize our preference for results over face time for the sake of face time.

Head over to Stack Overflow jobs to apply.

https://stackoverflow.com/jobs/124337/entry-or-mid-level-front-end-web-developer-vidpresso?offset=0
I love this idea. A bruiser truck that is meant to be easily repaired
Wow, sounds like being a cyclist in Japan is hell. I've had a bike stolen, and it sucks, but not nearly as much as it would suck to be stopped by police all the time and expected to prove ownership of my bike.
maybe it would be better to link to the original source instead: http://dx.doi.org/10.1126/science.aag0577
Brown dwarfs hiding in plain sight in our solar neighborhood
My CI server is inside an amazon VPC, accessible via an ssh tunnel. Only certain people can access the production VPC and everyone's keys have a strong passphrase ... why trust your CI tool's security when you can rely on much more robust things like SSH?
She's crazy, but like a fox. What is the reason for any of these smaller coins to exist? To get on the ground floor and let speculation drive your investment up massively. Imagine if you had 10,000 bitcoins during the early days, you'd be sitting on $6m right now. In fact, there are early miners and investors who had that many coins and are quietly cashing out. So she followed their lead, and used the cheapest darknet-sourced coder out there.

She just wanted some of the action. She probably paid next to nothing for some kid in Ukraine to whip up a garbage blockchain and client and knows full well this thing would come crashing down. The question that matters is did it crash before she cashed out or not? Also, the Ukranian kid isn't stupid either. He's probably sitting on a treasure chest of these coins and is double-dipping by recommending a lengthy C re-write.

The problem with cryptocurrency is that it attracts a lot of shitty people. Its pretty easy to read between the lines here. It no different than the early days of the App store where regular Joes would spend their entire life savings for a "genius" app idea and there would be no shortage of shady devs ready to milk them dry. Oh, they'd deliver the work, but it would be shoddy and the devs would know going in that the idea was garbage and how to drag out development to drain every penny.

My new cryptocurrency are the new 'my app idea.'
It frustrates me to no end. I (and I assume many others) would instantly upgrade my iPhone if the next iPhone was thicker but had 2x the battery life. That would be a real improvement in my life.

But they'll probably come out with one about the same size, with ~10% more battery life due to software and hardware changes - and call it a great increase.

They even realize the battery thing is a problem, so Apple, the manufacturer of the hardware and the design geniuses, come out with a monstrous, hideous battery case, instead of just improving the underlying hardware. http://www.apple.com/shop/product/MGQL2LL/A/iphone-6s-smart-...
I'll preface this with my lack of any love for ITT, but there's a piece of the story that bothers me:
"Last month, the feds demanded the company produce an additional $153 million in collateral—nearly double its $78 million in cash on hand—to cover possible losses that the government might incur if the company were to suddenly fail."

Here's how that sounds to me: "Well, ITT technically hasn't done anything illegal. But we don't like them. How much cash do they have? Double that amount and tell them we need this much for 'collateral' or we shut them down."

Can anyone fill in the blanks that Bloomberg didn't? What basis does the government have to make such demands (as it appears to me) out of the blue? Why make such demands knowing going into it that it will become a self-fulfilling prophecy? (That last question is kind of rhetorical.)
Yelp's Algorithm Needs More Gravity: Analyzing A Year of Terrible Reviews
Never mind pushy. How do rude salespeople even exist?

I have never even liked the concept of a salesperson, as distinct from a vendor's point-of-sale clerk. I don't like to haggle; I check competitor prices, and use advertised sales or coupons.
The site every conference organizer should have bookmarked
With regards the RNG, to be it showed a lack of understanding of how seeding RNG generators work.

Perhaps Intel's RNG can, in some cases, be persuaded to produce a low-quality, or otherwise broken stream. This seems plausable (there could be a deniable 'bug' which causes this to happen), but there are many low quality data streams fed into the random number generator, it never hurts to add another.

However, for things like VMs, soon after startup the CPU RNG is about the only possible source of random data, so I suspect there are more users who are being hurt by not having a well enough seeded RNG than those being helped by it being disabled (which is none).

If these two points seem contradictory, they are not. It would always be better to have multiple sources of quality input to the RNG, because as long as one of them isn't corrupted / low quality, you will get decent quality random numbers out. Safety in numbers!
Document stores shine in that case. Depending on the exact case something like postgres's HSTORE, couchdb, couchbase, mongodb or similar would work. They're all capable of storing arbitrary json docs under a given key and efficiently retrieve it. Partial indexing is possible as well.
How does that make it a troll? PayPal has a bad reputation in some respects, but not for having weak data security, right? It's mainly for always siding with someone requesting a chargeback.
That isn't a cultural fit question, it's a behavioral interview question.
Giant Swarm has a pretty neat tool called Mayu
Gmane: Reboot v1
MIT astrophysicist explains what we’d see on a trip to Earth-like planet Proxima
Is there a way to mitigate the risk of automated PKP ransom attacks without just pinning yourself before they find you? My impression after reading this is that the mere existence of HPKP (as implemented) forces you to either use it or be ready to go down for 60+ days if you get owned.
Tell HN: Freelancer.com won't give me a refund after I was hacked
unless I upload my drivers, utility and sensitive documents AFTER they tell me my account was compromised while refusing to disclose any further details about the incident which I have the right to no.

I only have a small amount of money in my account but I'm unable to get my money out unless I agree to trust them again after they've already failed me.

I don't know what to do but I'm walking. There's just no way I'm going to trust them again.
Apple think 5-year-old computers are for suckers so why wouldn't they systematically make their phones last shortly.
Ask HN: What goals do you have in work or how do you find meaning in work?
Hi all,

this has entered my head recently and has proved very hard to shake. I'm 28 and work a decent job in Ireland, given my expenses, although I don't have a house I reckon I could be financially independent in 10years.

I work as a software engineer in test and have a good reputation, currently working in the healthcare field. I previously worked in finance and technology but changed field to 'do good work.' Disappointingly, the reality has been it's the same sort of crap, just wrapped with a new bow.

I feel like chasing money would be foolish, I certainly don't NEED it. Considering beyond the next 10years I always expected to 'work' in some capacity, though not sure exactly what this will look like, especially given I'm a software engineer in test which doesn't seem like a role required outside huge corporations.

If I don't chase money and changing to a 'feel good' industry didn't work, what else is there? As I alluded to above, I'm not sure chasing mastery in test engineering is a useful endeavor either?

So what is everyone else out there chasing if it isn't money? Perhaps it is money to escape the rat race? After the escape what's the plan?
A better option would have been to use something like sslstrip/sslsplit/mitmproxy to strip/bump the SSL connection. Admittedly the situation is bit unfortunate, but there aren't really many good solutions when dealing with broken crypto.
The Telegraph says "Intel...has made a conditional offer for Movidius, which will result in an estimated total cash return of approximately £27 million for Draper Esprit." Unclear what their % ownership is though.
I think high profile sites are better served by static pinning, which seems simpler to maintain and also comes with the benefit of preloading. Thus, if you have those sites at one end, and lots of small/no-large-risk sites who don't need any pinning on the other end, you're left with no one for HPKP to serve in the middle. But, if HPKP were easier to deploy, perhaps more sites would use it.
Yup. Between irreproducibility and these hype pieces leaving out any downsides that might keep the discovery/invention from succeeding practically, the punchline of the title is "...would be nice."

It's a quixotic idea, but I'd like a project that tracked papers cited as big advances and looked for whether anything ever came of them five and ten years later.
Yes, I think this is the crux of all our education woes currently. I'd be curious to see how the system would evolve if the DOE eliminated the federal student aid program entirely.
It's a problem of recognising context. Current technology is not very good at this. What would be nice to have is automatic disambiguation - taking fdej's example, when searching for "Taylor shift", a search engine could ask "Did you mean Taylor Swift, or do you want to shift polynomials?".

Other possible examples: "bat" (flying animals or sports equipment?), "rock" (stones, music, or maybe both? :P), "minute" (60 seconds, report, or something extremely small?). In all of these cases, the software can't tell the meanings apart very well yet. That's a problem with the software.
I currently work remote for IBM Watson and I love it - I'm more productive, have more time to spend with my family, etc. My team and my direct manager are fantastic. I've worked remote before, and led remote teams with good results, but this has been my best experience yet.

However, my position is in peril due to management changes a few rungs up the ladder. While the previous guy in charge of Watson wanted the best people, the new one wants everyone on-site in about 10 cities. (Previously, folks were spread out across ~50 offices + remote workers like myself.)

I received a "temporary exception", and I don't honestly think they'll actually go through with it when that's up. But it's still a frustrating position to be in, and has caused me to start looking elsewhere. So far, I can't seem to find a combination of:

* Remote

* Comparable pay

* As much fun as my current job

I'm seriously contemplating just starting my own company again.
Actually I misunderstood how the author of that blog read the papers necessary to help his son (I read the story a while back).

Here is another link from his blog:
http://matt.might.net/articles/tenure/

And under the section called "A regret: Not pushing for open-access" he says:

"My hope is that tenure will provide me opportunities to steadily shift computer science and medicine toward high-quality, high-impact open access venues.

The reason I feel especially ashamed over my behavior is that in the course of my research for my son, I have used my privilege as an academic to punch through paywalls with impunity to reach medical papers.

In a damning irony, even this paper is behind a paywall.

I realize that few patients or parents have the ability to do what I did, and they never will, until all of academic medicine goes open access.

In computer science, academic paywalls stifle.

In medicine, academic paywalls kill."

I suppose the main point still stands.