skysight-inc/HackerNews huggingface dataset:
So interesting. Seems like we now have two ways for the public to buy shares in companies. On the stock exchanges, we've made it so difficult and expensive (Sarbox and other requirements) - that many companies have chosen to delay or avoid going public. So the government passed more laws to make it easier for companies to go "public" (in a different way), and we now have another system that seems to be a real wild west.

Oh government... solving unintended consequences with more unintended consequences.
Walmart to cut 7,000 jobs due to cash automation
Is there a formal requirement for an emergency request?
"Built to Last", by James Collins and Jerry Porras. Great book that goes into the principles of how to build enduring businesses.
Andrey, why did you title this different than your blog post?

I like that one.

"Bugs found in GCC with the help of PVS-Studio"
Not at all a morning person either, but I think I could adapt: since I know that I can nap in the early afternoon, most of the stress of waking up without having slept enough is gone (one might take it as a split sleep in some case), that's already a major thing.

The stress of having to do never-ending hours too.

Also the stress of wasting a full long day if I am not in condition, and having little chance to recover for the next one because their is little available time to do so. I would know that I have a much greater chance to recover, that I have wasted only a short day of work, and that I can easily make up for it on the next day because there is a lot of available time to make extra hours and yet not arrive at home at late night.

Then there are more opportunities to practice a bit of sport or any outdoor lighter activity every day or every other day (you don't have to put everything on the only available day(s) of the week and hope that you are in a shape, that you have time, and that the weather is OK, and then cancel...), and that's often good for the sleep, the morale and such.

I was living (and working) much better when I had a 8-4 job (7:55--16:05 home departure--arrival) then when I had a 9:30/10-6/7 job (8:45/9:00--19:30/20:00 home departure--arrival). I could have a life after work, especially an outdoor life, and that more than compensated the often tough wake-up (I mean 'tough' for me, I know it is nowhere close to 'tough' in absolute value :-) ). Pair this with an even earlier ending, and I should be OK.

But yeah, I could take the 1PM-6PM shift too :-)
The price tag on the final construction is defined by three things - cost of land, cost of labor, and cost or building materials (which includes things such as equipment rentals). Where would a government construction company experience massive price advantage that cannot be replicated by a private entity? Their cost of equipment is same as everybody else's, their labor costs are probably higher due to extra layers of bureaucracy and stronger union contracts.
Would be interested in your feedback on Verifiable Maps as implemented at https://www.continusec.com/ which can give verifiable answers to specific questions such as what is the current balance as well as a full history log of all mutations to the map.
No, Google Drive pulled this functionality a month or two ago.
Yeah, of course. But it's something like using a Dvorak keyboard layout -- every time you use another computer or help someone else you hit friction. Customizing system level key binding is something I've intentionally avoided.
WW3 US PRESIDENT OBAMA FURY AS JUDGE JEANINE ACUSES HIM OF BEING TERRORIST -
> There's a massive difference between "anyone can MitM this connection" and "a small number of nation-state actors might be able to MitM this connection if you do not implement HPKP."

I agree completely. But the parent poster said "not-MitMable", which was false. It's more difficult, but the CA system has quite a lot of flaws. Even HPKP isn't a total solution: there's still the initial connection. I don't think there's an HPKP browser built-in solution like with HSTS yet. DANE would be the better option here -- we could reduce the number of trusted authorities from 2,000+ down to ~5 or so. At least enough that we don't have to have CNNIC when we reside in the US.

Further, HPKP scares me. It requires you to keep a secondary key, but if something happens like a fire, you could lose both keys. Not everyone is going to make duplicate backups of certificate keys and store them in bank vaults or doubly encrypted cloud storage locations or something. Especially not for small-time personal websites. Combine it with HSTS and really long max-age values and someone can get themselves into a world of pain quite easily.

> AFAIK all browsers except Safari support name constraints.

Oh, that's encouraging! When I read up on it, I found "The Name Constraints extension is mostly unsupported by existing implementations of SSL. They are likely to ignore the extension." And I know it tends to take browsers several years to support anything related to security (see Firefox's open bug for Curve25519 for the past three years; how many years it took us to get AES256-GCM cipher support [still not in Firefox 48 but will be in 50]; etc.)

So then, perhaps we can petition browser makers to allow self-signed certificate installations to be less terrifying/complicated when they are name constrained to just the domain in question? Yeah, didn't think so.

> This argument doesn't make any sense - if someone is capable of installing a trusted root certificate on your device, it's over and any enforcement by the browser could easily be bypassed.

You're right that once someone has administrator access, it's game over. But you could at least make their lives more difficult: force their hand into compiling a hacked up version of your browser that bypasses HPKP. That would discourage a lot of casual workplace snooping (you'd have to block users from installing browers/browser updates, too.)

The real objection I have is that right now, browsers say, "yes this connection is totally safe and secure!", even though it's actually not. You're being MiTM'ed by your employer/school/etc. If the fear of self-signed certificates is a false sense of security, then surely this is much worse since you even see the green lock.

There are plenty of stories about employers snooping on SSL traffic, and their employees being stunned/unaware their employers are doing it.
TCP had to be revisited when Wifi became popular. Space is that x 10000.
It'd be pretty hard to enforce for apps that are normally web-based but also have an app (they might just redevelop their website to be mobile friendly instead of needing an app) or apps that aren't just for iOS (it's easier to maintain one subscription service instead of two)
That doesn't even make any sense. The average actual life of a VC fund is, according to numbers I got from NVCA a couple years back, over 16 years (despite being originally targeted at 8-10 years). If you wait until a fund is "closed," you are going to be waiting a long, long time.

The industry already has standard measures for talking about performance of a fund from different perspectives. I fear that HN is reinventing several wheels here.

For example, TVPI, Total Value to Paid-In, includes "marks" (which the VCs strongly influence, but ultimately have to be signed off on by auditors). But every savvy industry person would also look at DPI, Distributed to Paid-In, which includes only actual cash (and marketable securities) distributed to investors, and as such is much less susceptible to gaming.

It would be the scalar fallacy to believe that you can reliably compare any two funds' mid-life performance with a single metric. A high DPI fund is much more certainly a performer, but might have less residual value in the portfolio; likewise, a very high TVPI fund (but with low DPI) might have a ton of realizable value or it might just have unrealistic marks. (Finally, neither of those measures accounts for time value of money.)
I love the opportunity this model provides. But for an existing app (that would greatly benefit from subscriptions and offers continuous new content daily) how to message this kind of switch w/o simply starting over seems, well, difficult to say the least. Unless you put one app "to bed" and start anew, how do others imagine taking advantage of this model? Or does it apply better to only new apps? Hard to say.
How would trials work with one-time purchases?
But what if they post snarky comments as you on HN?
Jack Ma Shares Vision for Electronic World Trade Platform
This is actually a really amazing talk about parallelizing game engines.

http://www.gdcvault.com/play/1022186/Parallelizing-the-Naugh...
Stay-at-home by choice and stay-at-home due to inability to find gainful employment are very different demographics, though.

http://www.npr.org/2014/06/05/319214546/stay-at-home-dads-on...
Malware Command and Control Using Google Drive
Because newspapers have to show the content to GoogleBot so people can find it; and Google has a policy that they shouldn't show you something different, so the pay wall is missing on this side of the house.
I think it's interesting that this occasional architectural trope was invented by a psychotic emperor.

Never mind a meal - it's more fun to imagine the initial design meeting with the engineers:

"An outdoor dining terrace that rotates, oh shining light of the world? Yes, I think we can do that. Oh - and gold toilets too? Yes. Of course."
True, though a key difference is retailers (Walmart especially) aggressively negotiate against manufacturers to lower prices. For high end manufactured brands sold in retail, like soap, trash bags, etc., store brands are created by competing manufacturers in part to add negotiating leverage against a P&G or other major manufacturer. And there are few CPG categories without significant competition.

With pharmaceuticals, production capacity is hardly an issue. It will, ironically, cost Mylan more to make the "generic" new brand (pay for new branding, packaging, etc.) than it will to make and package the existing brand.
Sorry to hijack, but what about the best OCR service? I'd much rather farm the OCR work out to another service than trying to do it myself.
Would be amazing if there was some futuristic tracking of the birds, then obscure the relevant part of the mirrors with lcds so they can fly without being cooked.
Clever. I like that this could give the benefits of moderation without hard censorship.
Why are people getting bent out of shape about the word "unique"? It is unique because Jupiter has features that we have not observed on any other planet, some of which are mentioned in the article (different types of storm systems, high altitude clouds casting shadows etc). From context, he is clearly not only talking about Saturn's hexagon. This pedantry is ridiculous.
I love the options for different projections.
> limit what ports a browser can access

After briefly looking into this:-

- there doesn't seem to be a way to configure firefox with a whitelist of ports it may connect to

- AppArmor doesn't appear to yet be capable of constraining network access at the level of IP address or port number

- The good news is that it should be possible to use linux network namespaces along with iptables - I've not attempted it
I don't know quite what this does. Would you be so kind as to offer a brief explanation and perhaps a use-case?
Getting PostgreSQL transactions under control with SQLAlchemy
It sounds like you might be thinking of Title IV of the JOBS Act (Reg A fundraises, more details here: https://www.sec.gov/oiea/investor-alerts-bulletins/ib_regula...), which are akin to "mini IPOs" and are intended for later-stage companies.

Republic operates exclusively under Title III of the JOBS Act, which was enacted in May of this year and is intended for early-stage companies.

On deal terms, generally speaking it would be impractical for a startup to fundraise via equity crowdfunding if the hundreds or thousands of investors, each putting in as little as $10, were to have voting and information rights. The non-transferability component is actually a legal restriction put in place by the SEC, not a term that any companies raising on Republic have put in place.

Each deal page has a discussion section, if you have questions for the founding team of each company, please do ask :)
In my opinion yes. Or rather, Windows users have had decades being trained to find certain functionality under certain menu options to the degree that most will do it by second nature irrespective of the application they're in. The ribbon menu throws all that muscle memory away and leaves you trying to find it again in an interface that no other applications use.

I don't frequently need to use office products but when I do I find them absolutely infuriating.
Intel’s new naming trick makes fast and slow processors look the same
Not quite. If you are given an HTTPS link, you should expect security.

Passive upgrade from HTTP to HTTPS would be a different thing.
Probably because a warrant canary would never hold up in court and they just don't care.
> They tend to be: 1) less educated;

Unless they luck out and find themselves amidst a housing bubble circa 2006 where everyone and their brother is employed in constructing real estate, investing in real estateo, transacting in real estate on commission basis, underwriting mortgages for real estate or pitching dubious mortgages for others to buy real estate, there's not a lot of opportunities for under-educated males nowadays.
Scrum meetings and all those meetings which come before and after - how many of you dislike these ?
HN is an important site I guess.
> Clang can now self-host itself using LLD on AArch64.

So I've been having some "fun" with LLVM targeting AArch64, and was rather, er, disappointed when I discovered the toolchain didn't use GNU ld, but Mach's ld64.

Now in theory, ld64 is a next-gen linker that can link code not at the "module" (one compiled C file) level, but at the individual function and (global) variable level. Cool! More granularity! Except it doesn't support anything equivalent to GNU ld's extremely useful linker scripts, the stuff that says "put this code in SRAM, that data in Flash. etc..." and its command-line is... poorly documented. Also, it only works with Mach-O binaries, which is incompatible with objdump, that swiss-army knife of object code [1].

And anyhow, what does LLVM refer to as LLD? Because there are actually two separate projects under that umbrella: The ELF/COFF one (http://lld.llvm.org/NewLLD.html) and the ATOM-based one (http://lld.llvm.org/AtomLLD.html)

As I understand, the ATOM-based linker is still experimental, so they're referring to the ELF/COFF one?

TL;DR: LLVM doesn't hold a candle to binutils

[1] I recommend trying out using objdump to turn your app data into object data you can link directly into your application. This is what modern toolchains call "resources", but it's really interesting to test it out at the C/"bare-metal" level to see how it works. Bonus: you get to really learn the difference between pointers and arrays ;)
Apple Issues Security Update for Macs After Hack Turns Them into Spying Devices
I'm fairly certain that the average IQ has remained constant at 100
Or, I'm sure, its relative slowness. LMAX can do millions of transactions per second. [1] Bitcoin is doing, what, 3 TPS? And I don't mean 3 million, just 3. (I get that from ~1600 transactions per block [2] and 1 block per 10 minutes.)

Back when I was doing trading systems, my traders would have murdered me if my response time graph looks like the Bitcoin one does. [3]

[1] http://martinfowler.com/articles/lmax.html

[2] https://blockchain.info/charts/n-transactions-per-block

[3] https://blockchain.info/charts/avg-confirmation-time?timespa...
http://www.blockshelf.com/
The Bible provides a solid moral background for a very successful career in the long-term.

I'd ask material atheists to go beyond the realms of Genesis and focus on the true revolutions it has brought about. Go ahead and read about Rene Girard.

"Thou shall not covet or kill" is not a self-evident concept for Humanity.
> The general public does not know or care that HTTPS conflates multiple issues.

Not quite. The general public is taught (often in school!) to trust “https://” links.

You can't trust that a self-signed certificate is from the site is claims. You don't even know if you're safe from your WiFi hotspot.
There would be no legal basis for such a prohibition, as there's no plausible national security endangerment were the request to be revealed.
> A lot of these cities have renting laws that basically give the renter more rights over the property than the owner.

Situated as it is, in Britain, London is a long way from being such a city. More's the pity.
> ... I couldn't care less if it existed on my desktop OS.

Then you either don't know about snapshots, don't care about data integrity, or have a backup system in place and don't want to replace it with:

zfs send zroot@snap63 | gzip > /mnt/remotebackup/snap63.gz
Right, because Lockheed won the bid, and Boeing had to shop their design around to Pan Am and civilian freighters.
I personally hold that self-righteous comments like these contribute far less to the discussion than people expressing their opinion with the full richness that language can provide.
TensorLayer: Deep learning and Reinforcement learning library for TensorFlow
They really need it to be an ongoing annual tax increase (ex: vacancy tax).

It's like a capital gains tax versus a wealth tax. The latter has way more impact then the former.
But you are the exception. The problem is not really weak passwords, it's re-used passwords. A lot of people just use one password and they use it everywhere, so as soon as it gets cracked once, their accounts can be compromised all over the place.

The best thing I ever did for my parents was teach them to use different passwords everywhere. Against conventional wisdom, I get them to write them down in a book, because for them, keeping a book secure is much easier than knowing what to do to keep their computers secure. We already know how to keep physical objects reasonably secure, we do it every day with our credit cards, passports, jewelry etc.
I assume %ptr is a generic "variable" name[0] for a pointer reference, i.e. the address of the value being loaded atomically. You can substitute %ptr in your head for any atomic address you might want to load from.

The code itself isn't well-formed because %ptr isn't actually defined anywhere—just pretend that it was. ;)

[0] Technically, LLVM does not have variables (as in, names you can assign to more than once), since it's in SSA form, but I don't know what a better name would be here. :)
That's Letter 49 IIRC.
That's an "interesting" approach. Unfortunately, it is made worst by the fact MS laid off tons of testing engineers a few years ago, and now release clearly buggy versions of Windows. To add insult to the injury, it now does so (adding new bugs and new incompatibilities with perfectly fine programs) every few months...
I'm curious as to how a chain of cars would react to a gap appearing. The ideal balance would be to space the cars out evenly, but would that work on the individual car level when each driver looks at the cars in front and behind?
Made in Japan had a profound impact on me - how two engineers disgruntled by their nation's defeat in world war 2 went on to become leading company in electronics.
D. Crockford removed as speaker at Nodevember for making speakers uncomfortable
Just wait until you go on vacation for two weeks and they change the init system. That was a fun `pacman -Syu`.
Why didn't they name it AirBnB? Would make more sense.
This assumes you already know Block D is genuine. You can only know this if you have already verified all the previous blocks. You can prune them away afterwards, but you still must download and run computation over them once.
I think this is a darn good question.
That would be disastrous.
My issue was that I can't find non-anti-bacterial hand soap at my local grocery store. The only option would be bar soap, and I hate those. They get all slimy on the bottom between uses, and it's gross and inconvenient.

I would buy hand soap without it, if it were for sale. But everyone seems to think it's safer, so all the manufacturers are encouraged to add it, and it's a negative feedback loop.
If it is circumvented by letting people live there that might be ok.
Documents is extremely broad.

What sorts of users have you been listening to? How does it make them more awesome?
How does Last.fm allow "0" to be a password? You'll always have people who will tend to pick poor passwords, but shouldn't the service try to at least have some decent password standards?
Zika: Brazil admits it's not the virus
Watch the first ever movie trailer made by artificial intelligence – Polygon
Bitcoin already has a p2p layer like torrents or IPFS that can quickly download the block chain from many peers. On a sufficiently fast internet connection you get limited by CPU speed verifying signatures.
I do hobby research into password guessing entropy and I'd love to get ahold of these lists of in-the-wild passwords. Is there any good source for such things? I don't need usernames, just "real" passwords (with frequency data if I can get it).
No, I know exactly what I meant to say. I'm not saying that GMOs are unsafe. They probably are safe. I'm just saying that there is always the possibility that some issue could be found with a specific GMO, just like any other product in existence. But there are some out there that for some reason think it is impossible. Those are the ones I labeled as "religious".
Taxation is a great tool for changing behaviour in many places.
The title might be better as "Smalltalk company Cog, adds key developers".
http://academictorrents.com/details/fd62cc1d79f595cbe1de6356...
I feel like this is misleading without the % share of the total. These top 50 represent 2.7% of the total. OK, that sounds bad, but I'm not really sure how to interpret it.

Even if we get better at this, the top passwords will still be these, they'll just be lower as a % of the total. So until we have 100% unique passwords, this story will always be there, which just seems lazy.
We've updated the submission title from “GCC bugs”.
i did, it isnt. or to be more precise it use sse adds and muls but only 1 lane the same as all the oyher 64 bit compilers in the comparison, so it isnt vectorized. you can get rust to vectorize it with unsafe intrinsics if you use the nightly build. im told better support is coming
Download app for free, it works for n days then it displays a 'thanks for trying' screen unless you pay. Desktop "shareware" has worked like this for decades.
LibreOffice exists because Sun wasn't accepting useful contributions to OpenOffice or putting much effort into maintaining it, and then Sun was acquired by Oracle, an open-source-hostile (to say the least; they killed OpenSolaris and sued Google for reimplementing Java!) company. So they had to fork.

Of course, because everyone then ran away to LibreOffice, OpenOffice basically died. And, as expected, Oracle hardly cared for it, stopped work on it entirely and handed it off to the Apache Foundation to die.

Really, they should've transferred the trademark and copyright to the Document Foundation instead, or at least coöperated with them. But that wouldn't have been spiteful enough of the community. In fact:

> Oracle was invited to become a member of The Document Foundation. However, Oracle demanded that all members of the OpenOffice.org Community Council involved with The Document Foundation step down from the OOo Community Council, claiming a conflict of interest.

> It was originally hoped that the LibreOffice name would be provisional, as Oracle was invited to become a member of The Document Foundation. However, Oracle rejected requests to donate the OpenOffice.org brand to the project.

https://en.wikipedia.org/wiki/LibreOffice#The_Document_Found...