skysight-inc/HackerNews huggingface dataset:
> FBI investigation indicated the Tor user logged into ____'s email account and browsed email folders and attachments. When asked during her interview, _____ stated to the FBI she is not familiar with nor has she ever used Tor software. FBI investigation to date was unable to identify the actor(s) responsible for this login or how _____'s login credentials were compromised.

Was this info already public? This seems to me that not only did Secretary Clinton use a private email server to mask her activities from public records law but in taking it under her/her staff's responsibility, she effectively leaked state secrets. How in the world does that not make her criminally culpable?

EDIT: Sorry for the tangent -- I'm really curious: is this part new or had the press already reported it (or discovered it and decided not to report it?)
I agree with your synopsis on Pastebin. It's pretty close to what I have been trying to practice. As an interesting aside, I worked with a few researchers about a decade ago on tracking SMM vulnerabilities in various Intel chipsets. They were the experts though. I was just a hired hand. Still, I learned a lot about the very real threat of hardware vulnerabilities.

The Liquid Types approach used in CSolve -- if memory serves correctly -- makes use of an SMT solver to attempt to find counter-examples given a particular set of constraints. This is similar to the approach that Frama-C uses. SMT solvers are interesting and can do quite a bit, but they are still incomplete. Many linters have started incorporating SMT solvers. It's better than much of what is out there, but there are still significant limitations. Furthermore, the markup languages provided are often limited in the amount of customization that can be performed.

My tool is designed as a framework that can be used to build much more comprehensive proofs. Similar to what you posted in Pastebin, the security of a system is intimately tied to the architecture of a system as a whole. I want to formally verify the architecture, then demonstrate that the implementation is operating under the constraints of the architecture using a combination of equivalency and bounding proofs. This, in conjunction with a strong understanding and integration with the sorts of runtime features available in a system (i.e. MMU protections) can be used to build a compelling verified proof of security similar to what was done with seL4.

But, ultimately, even this is not enough. Few systems today are contained within a single machine. IoT has demonstrated just how complex the current software ecosystem is becoming. Security proofs must extend beyond individual applications and systems and cover heterogenous and widely distributed systems with many different potential attack vectors. This can be formally verified, but as far as I'm concerned, such a verification is an architecture-first approach. I don't think that in this sort of environment, a correctness tool is enough. It's a great addition to the toolbox, and it is a damned useful tool at that, but correct software can still violate policy unless this policy is part of the constraint of "correct".
Best programming tutorials
L-phenyalanine apparently "inhibits NMDAR current in hippocampal neurons by competing for the glycine-binding site" [1] and is also an essential amino acid. Oops.

[1] http://www.nature.com/mp/journal/v7/n4/full/4000976a.html
> why is this news on site like Hacker News?

Why not? I'd much rather read and interact with the opinions of the fine people that make up this community on this topic than anywhere else on the interwebs.
Is there a way to add bitcoins to Brave, without having to scan my ID on Coinbase?
They'd also need (to become compelling) to prove why one should care that they tweeted a P/E prediction a year ago that turned out to be right.
That depends on what you mean by "antiseptic".

No bacteria, ever, is going to develop a resistance to 99% EtOH, or 10:1 dilute NaClO. Ever.

Many, many bacteria develop resistance to triclosan.

The FDA just banned the one that sucks.
Because I submitted it.
IARPA Multi-View Stereo 3D Challenge
Reddit's greatest strength (the subreddit architecture) is also its greatest weakness. Subs attract groups of likeminded individuals usually with a particular interest, and as such a default tone and set of opinions are preset within a sub before you arrive.

If you fail to understand what the preset rules of engagement and opinions are you're going to have a bad time. Worse still, if you happen to disagree with the general consensus of a sub your opinion will simply be downvoted and your voice will not be heard. You're very unlikely to be educated by existing sub members as to why your opinion is wrong with any real sense of perspective because the hive mind has kicked in and you're not aligned with it.

The larger the sub, the more this problem is exacerbated as there are more people ready and waiting to hit the downvote button. This means that you're very unlikely to encounter a balanced and sensible (aka civil) discussion on Reddit.
The ribbon is probably the best example of "people are resistant to change". In retrospect, because I was grumpy about it too at the time. But once you get used to it, it's vastly superior in every conceivable way to the old UI.
> The problem that Bitcoin solves and private blockchains do not is called the Byzantine generals problem which did not have a known solution until Bitcoin came along.

I'm not an expert in any way, but the Wikipedia page for Byzantine Fault Tolerance suggests a solution to this problem was known as early as 2001, used in the Boeing 777 avionics software. See abstract of the paper below. That significantly predates Bitcoin. Or am I misunderstanding something?

http://ieeexplore.ieee.org/document/963311/?arnumber=963311
Some AOO developers appear to have a superiority complex. It is visible in the discussion.
debate/discussion
Ah, so it is 100% maintained by new ants falling through every year. I had no idea individual ants could live for over a year!
The name on the certificate is not Cloudflare’s. It’s origin’s. There’s no legitimate mechanism for reverse proxies to operate HTTPs sites, other than to act as a dumb pipe. Calling it MITM is therefore entirely appropriate. Whether this protocol abuse is sanctioned by origin or not is entirely beside the point.
Those people would just use an AdBlocker, in their existing browser and on their mobile device.
> The paper's conclusion reads like a dystopian science fiction scene from the 1970s:

> > The wood-ant ‘colony’ described here – although superficially looking like a functioning colony with workers teeming on the surface of the mound – is rather an example of survival of a large amount of workers trapped within a hostile environment in total darkness, with constantly low temperatures and no ample supply of food. The continued survival of the ‘colony’ through the years is dependent on new workers falling in through the ventilation pipe. The supplement of workers more than compensates for the mortality rate of workers such that through the years the bunker workforce has grown to the level of big, mature natural colonies.
well yes, derived to a large extent from altering the body chemistry.
Even the Rich Are Being Priced Out of Central London
What? The Byzantine generals problems most certainly did have solutions before Block chain came along.
You're wrong about Gradle: it has good incremental build support. Not only it does not run a task if its inputs are not changed, it even makes it possible for a task to process inputs incrementally (e.g. so copy task can only copy/remove changed files). It does not support distributed build though.

I'm not sure if SBT supports an incremental tasks execution, but it does support incremental compilation of Scala which can be more than enough for many devs.
Disclaimer: Observing your election from europe, I have no skin in the game.

It seems to me that your current election is a bit of a special entity, so this data might be a bit skewed. I don't know a single conservative/right/center minded person who would support the current repuplican nominee if she/he could. I think this comes from the fact that he is a very unique candidate. Saying that anti Trump is anti right doesn't acknoledge this.

There are also more general issues. Most public political discussions are not so much political but mostly ideological aka not meaningful. People who follow ideologies are self imposing an anti discussion barrier. Your two party system enforces this.

If I want political discussion and/or information then I talk to friends or read/share interesting long form articles. Democracy is complex and full of kompromises aka hard, so "quick and dirty" just doesn't cut it.
I don't know if it's possible to avoid impartiality these days, if it was ever possible. The Merrick Garland nomination speaks to this.

Recall votes would be just as motivated by politics; they'd just be more favorable to incumbents.
Exacerbated.
It also makes shortcuts discoverable! Just hit the alt-key and virtually every thing pops up with it hot key. Hitting alt in a standard windows app only tells me what menus are available, not which actions are available.
It will be interesting to see how this might change in the decades to come. Will they find a way to evolve into a "real" colony? Will they find a way to sustain without reliance on "new arrivals"?

Semi-off-topic, those pictures will haunt my dreams.
Because this is a forum for free and open discussion and not an Orwellian "Safe Space".
That's 16 birds a day. Unless the birds are endangered, that seems like a relatively small number for 390 MW of mostly green power.
Chrome now shows HTTP pages as insecure. Fix HTTPS mixed content issues here
Also in the article, it was also 2012 when VC's were figuring out that the Midwest is cheaper than Silicon Valley. What an epiphany!
Zika spraying kills millions of honeybees
Check out: http://lazyprogrammer.me
[his courses and books are accessible, good, and relatively cheap]
It was a test to see if anybody read to the end. And thanks :)
Being able to select text with shift arrow keys is bloody marvelous.
I've submitted at least one resume in plain .txt, and got the job.

I maintain my resume in .rst (and render it to .pdf via LO for now). Depending on the employer, it's conceivable that I could submit the .rst file.

As for "formatted" docs, I wish we could settle on some common version of .rtf. That's more than good enough for what most people really need to do.

Heck, even most email clients do pretty good formatting. It'd be nice if we could commonly write docs in our email client, and save to .pdf or .rtf or .someformat. (Now someone's going to tell me I can do that.)
You cannot compare SF and Palo Alto. SF is a major metro with a high-density downtown with corresponding infrastructure.

The people who are opposed to greater density in Palo Alto ARE TECHIES. Who do you think lives there?
Sure would be, unfortunately nobody's talking or available to actually do it.

The Razor-Qt merge wasn't an easy project - it took us almost 6 months to complete.
Your alcohol use does not affect me. Your use of antibacterial chemicals does. That's the difference.
Anti-bacterial is marketed as "better", but is actually worse. If cocaine was legal, you still wouldn't be able to advertise its properties falsely.

Homeopathy stuff is actually clearly labeled not evaluated by fda etc. You could probably still sell anti-bacterial soap if it is clearly labeled "not recommended for daily use, may cause harm to consumer and environment", but what market are you going to sell it to, then? Consumers buy it because it advertises anti-bacterial prominently as though it was a plus, my wife buys it because of this (sometimes she doesn't believe me, arguing "hey all these companies sell it, it has to do something!", And she hates I'm usually right on this stuff, heh. )
I can't tell if you're joking or not, so I'll bite: Comey said that they didn't have the elements that normally support a case such as malicious intent or efforts to obstruct the investigation. [his words not mine]

Of course, classified information existed on the servers and it stands to reason that the investigation report itself could contain classified material.
I believe the default setting in brave is to block ads not replace. The user has control over what the browser does.
That's why I said: Just show the page, and use the plain icons (no locks or anything). It should not have any signs of "trust" and it should look like a plaintext page. I could go further and say that it should be treated as HTTP for all other purposes as well, like access to cookies and cross-site requests.

If you really think sites should never be MITM-able, then you should complain just as loudly on a plaintext site as you do on an untrusted root.
ReactJS for Dummies
Tips to Get Your Weight Loss Process Started
That second mail has more interesting stuff in the bottom.

> I would even suggest us considering going further and redirecting AOO traffic to LO
Bishop Fox (https://www.bishopfox.com) | Phoenix, San Francisco, Atlanta, New York City | ONSITE or REMOTE | Full-time |

Bishop Fox is a leading IT security consulting firm serving the Fortune 1000 and high-tech startups. We protect our clients by finding vulnerabilities and building defenses before the attackers can break bad. From critical infrastructure to credit cards; social media to mobile games; flight navigation systems to frozen waffle factories — we’re right there, advising every bit of the way.

We’re looking for talented hackers and security associates to help us secure some of the world’s most complex software and sophisticated technologies.

Interested? We have several openings in both our Assessment and Penetration Testing and Enterprise Security practices.

Penetration Intern - http://grnh.se/v26gcr

Pentester - http://grnh.se/rdhk28

Senior Pentester - http://grnh.se/i6p5cv

Security Compliance Associate - http://grnh.se/retuo6

Security Compliance Analyst - http://grnh.se/dufp6r

If you have any questions, please feel free to email careers@bishopfox.com.
> ...but it wouldn't be comfortable...

Yes, when I saw the size of the capsule and toys inside, I thought there were many common household items that were far, far easier to ingest, were way more within daily reach than candy, and enforcing the ruling on these toys was arguably a waste of limited taxpayer-funded manpower.
What about all the pain caused by alcohol? From liver damage to its use as a date rape drug to drunk driving. The liver damage is personal, so that might get a pass, but the rest hurts people who don't choose to drink. Is there evidence showing antibacterial soap does more harm than alcoholic drinks?
FDO is a failed project. It got us a few good things, but now it's a joke. Nobody cares about or reads the mailing list, nobody takes the various requests in it seriously, blah... I'm pretty upset about it.
So what is the difference in effectiveness between normal soap and hand sanitizer with ethanol and isopropanol?
Is there a "just the basics" mode for LO? I do a formatted doc so infrequently that I often have to relearn how to do even the most minimal thing.
> No, actually, the one thing the blockchain provides, which was literally unsolved before pre-Nakamoto, was a working implementation of "trustless" consensus.

That's the part banks do not care about so I think it's largely irrelevant in the context of this article.
The Mercatus center at GMU is nothing more but a think tank for right wing shills who will do anything to promote the status quo and supply-side economics. These people have no integrity or value as economists.

It is sponsored by the Koch brothers btw.
Loved it! I learnt something about compiler design today!!
And things like Smart Contracts are relatively new (1994), even though the concepts had been laid out in the 1970s. Smart Contracts are part of what makes blockchain more versatile, enabling transaction ledgers that can support the level of overwhelming (and sometimes unnecessary) complexity BFSIs can produce.

Unfortunately, even at this point, Smart Contracts probably still have many security challenges to overcome before banks can adopt it.
I was going to post exactly this before realizing that someone else undoubtedly posted it before me, and I should upvote them.

I will only clean my charcoal grill with some hotter fire and a good whack from the grill spatula. Excess [0] ashes go into a bucket for later non-cooking uses. The carbonized residues on the grill create an ablative non-stick coating for any foods you put on it. Also, they make your grill marks black, when they might otherwise be red from the rust.

[0] Excess being defined as so much that the charcoal won't light.
Tech Giants Are Devising Real Ethics for Artificial Intelligence
Ask HN: How much of your time is spent in meetings?
If you're a developer for a 'big corp' how much of your time (% or hrs) a week is spent in meetings?

At a new 'big corp' job, and the amount of meetings seems far larger than other employers. To the point of a meeting every other hour, killing productivity. Hoping to get a better understanding of what would be considered normal/average in large organizations.

Aside from an all employees gathering, the biggest meeting yet involved two entire teams (~15ppl not all developers) for a full hour of discussion. For comparison, I had to get approval to order a $40 laptop stand, and estimating the meeting to be worth about $600 of salary time called on a whim.

EDIT (to clarify what counts):
Agile/scrum company, and we don't count first day of sprint (spring planning) or last day (sprint reviews).
Chrome requires Certificate Transparency for the EV indicator to be displayed - see https://news.netcraft.com/archives/2015/08/24/thousands-shor...
Perhaps "High Heid Yin"?

http://www.thedialectdictionary.com/view/letter/General+Scot...
It's a good start, but I think there needs to be a meta tag (as mentioned) to specify a payment address rather than have Brave hold the money.

I hope this comes soon
I am not a lawyer, but criminal culpability has everything to do with state of mind / mens rea. This is why "murder" is a crime but accidental homicide is not, even though in both cases the same actions might have led to the same consequences.

"State secrets" is also one thing, "classified material" is another thing.
It's possible they have figured out how to eat the creatures who feast in their cemeteries, essentially making them cannibals at one remove.

In that case, all living things are cannibals at several removes: animals -> decomposing bacteria -> plants -> animals
Good grief -- cases 4, 2, and 1 all read like something out of Itchy and Scratchy! In fact, I know something like #4 was a story line in South Park...
Humans aren’t as smart as Pokemon, but we might be in 7.7M years
The National Economic Implications of a Taco Truck on Every Corner
Also, the second link forwards to the third, so that makes this a single data point?
That's because science was largely a pastime for indepently wealthy members their societies' elites. Science hasn't changed; middle class people just have access to it now.
I just got out of a genome talk that uses the Mean Shift algorithm to find gene clusters, which speaks to the broad applicability of the algorithm.
> Companies will no longer be able to market antibacterial washes with these ingredients because manufacturers did not demonstrate that the ingredients are both safe for long-term daily use ...

Then why were they allowed to market them in the first place? If safety was an issue, and it demonstrably is because that's one reason they're being pulled, then why did they not have to prove before marketing?
Yes, it generates an address to send them to.
Most of our queries depend more on the time of the events rather than the user the events belong to. For example, let's say you want to know how many users signed up on Monday and logged in again before Friday. That query would fetch all sign up events and all log in events over the rest of the week, do a group by user_id, and use a custom udf to perform the aggregation. We never actually fetch multiple events from a user at a time. Instead we look for specific types of events in a given time range and group by the user. Clustering by time winds up being a much bigger win (benchmarks showed 10x compared to sorted by user for some uncached queries) here as almost all of our queries are constrained to a given time period.

Currently, maintaining the clustering has only been best-effort. We sort our data whenever we copy it from one location to another and the data comes in sorted by time, so it's fairly easy to maintain a high row correlation with time.
The "exam" gloves that doctors and dentists wear are typically nitrile, but I think most surgical gloves are still latex. I know ours are. The surgical gloves are longer, have cuffs, and come in a lot more sizes.

They are alternatives for allergic patients (and surgeons), but they're a little thicker and a bit more expensive.
Indeed. The people that most need this advice simply won't take it.

The three most dangerous sentences in the world

"That might work great for other companies, but..."

"That's how we've always done it."

"Unfortunately it's not that simple."

Also this storify from patio11 is /very/ relevant.

https://storify.com/dgempesaw/sales-vs-hiring-via-patio11
I don't think that the creation of processes ever got much attention because it really isn't in scope for what most people use java for. If you want to run some program that offloads most of the work to another process you would obviously use some scripting language that is way better for short scripts. You would probably only use java if you needed to do a lot of processing of the results, probably while the other process is still running so streams make sense for the vast majority of Java use cases.
I think this is a false equivalence. Many if not most of the engineers working at SpaceX came from NASA or its constellation of contractors.
I vaguely recognize the name sean, and I think he's actually in (or was in) China for an extended period of time.
> If we forward HTTP requests to HTTPS and use HSTS

Right, I think his point there was, the ecosystem has to make many changes to ensure the links are the "secure version": we create URLs with https, make browser changes to redirect (HSTS), use redirect in server software, etc.

With "just" HTTP, all URLs are uniform, but the protocol is modified upon connection to 'upgrade' the link to something secure, instead. HSTS maybe wouldn't be needed (or would take a slightly different form).
The Simple Solution to Traffic [video 5:14min]
The link is pointing to the comments section of the article.
What YouTube Stars Are Going to Do Now That They Can’t Swear and Get Paid
It depends, right? Prohibition of anti-bacterial usage in soap is unlikely to create black markets and mafias. Therefore prohibition is an effective solution.

Prohibition of alcohol does create black markets and mafias, so an alternate solution is needed.
May be a necessary evil

However then uniqueness of this is the concentrated location of the deaths. Solve it at one place and you prevent thousands.

Cats are everywhere
> Unless your mother knows not to go to a site without an EV certificate

"Make sure it says <company name> in green at the top" is much easier than "ok now check any intermediary certs, and of course make sure they have the right fingerprint"
To clarify, Michael Jordan was a huge net gain to the NFL well beyond his pay. The Bulls flat out made more money with him on the roster than he cost which is all you need to sport his salary. He also made the sport more popular. At the same time while the average NFL team in 2015 would crush the average NFL team from 1970, but that does not mean the 2015 NFL is more interesting.

So, I accept the salaries as a local optimum, but finding a cheaper option is probably very hard. Perhaps retire players after 5-10 years?