skysight-inc/HackerNews huggingface dataset:
The fundamental problem is how cripplingly little we understand about neurobiology. "Depression" is a label given for a common cluster of symptoms, not a single disease originating from a few well-understood causes. We aren't able to objectively test for or treat it the way we can X-ray a broken bone and set it or swab a throat for strep and prescribe antibiotics. There are no methods that are guaranteed to help the vast majority of sufferers and no clear understood root causes. All we can do is ask for the patient to report their subjective experiences and try to tick some boxes in the DSM, find a label that describes at least N/N+M of their symptoms, and then work through an associated checklist of wildly different methods of "treatment" that reduce symptoms in some, but not all (or even a majority, AFAIK) of patients.

I personally think that many (if not most) of the mental illnesses listed in the DSM will eventually be understood to be multiple completely unrelated root conditions that all manifest similar symptoms, each with different methods of treatment. Unfortunately research initiatives tend to be shackled to the DSM's set of superficial symptom groupings in order to get funding, so a deeper understanding of them is probably a long time coming.

(Related read: http://www.theatlantic.com/health/archive/2015/08/why-depres...)
'The classes at ITT Greentree were laughable. I learned more just tinkering on my own. They were so easy to pass and you could tell the instructors were used to underachievers.'

I was at Moon. I worked there as a lab assistant and became friends with the instructors. I approached a few about this, and was told in confidence they are not allowed to fail students without approval from the director. Really, the only grounds for not passing were never (literally) showing up for class. If a student came just once they had to find a way to pass them. Usually this meant I had to tutor them.
Free Course on Programming with Bubble
An Exhibition of Japanese Portable Record Players
Right, I use several of the controller apps myself and send OSC or MIDI. It is a complex, less intuitive, more fragile, and less useful setup than having one machine that can do everything with touch. In the studio, where nothing changes, this is less of a problem.
Yeah, I never understood why they did it, it was obvious a single unresponsive tab would block the whole browser, but I guess fresh blood at Firefox needed to gain experience...
Funniest thing is that FF memory usage didn't go down that much. For me it is even higher.
No idea why you're getting downvoted. The same rules should apply across the board.
Is that second discussion just a performance thing, or are there filesystem implications for one or the other?
Although I agree remote work is nothing new, what is new is the increasing amount of people that can do it, and that's a good thing. It is true that in SV (and elsewhere) lots of companies do not allow remote, and that's what I think the article is trying to address, and I can only agree. Precisely because remote work has been going on in some places for a while, it is sad that SV does not seem all that open to adopting it. We need more articles like this IMO to push for it.

> No, remote work is not for everyone, you need to know what you are doing at both ends or it'll not match your expectations

The article is clearly indicating what they mean is that it is not just for software engineers. There's no need to take the "for everyone" literally twisting their meaning.

> No, it does not (necessarily) bring the best global talent, specially not if your motivation for remote is bringing down costs

At least you added "necessarily" this time, but again, you're taking things literally rather than in context. The article clearly indicates this means that by allowing remote workers you open yourself to a much larger pool of talent. In my experience this is quite true and one of the fundamental reasons I've managed to convince my managers of of allowing me to hire remote people in very disparate time zones/regions. We're in Canada, and have hired engineers in Philippines, South America and Africa (even at Canadian market rates, so is not a cost cutting measure). For someone considering allowing remote work, this is an important point to make and the article articulates it well. I think it's implied you can't guarantee just with one measure to get the top talent, all they are saying is that you increase your odds significantly by allowing remote workers.

> And no, you don't need to use any of the tools listed. Remote work has been done, and well, with nothing more than a VCS and email (both conspicuously absent from her list) for decades. Add to it any kind of real-time communication client and you're in business.

Same thing again. You take a suggestion like if it were a must. Nothing in the article is a must, but sure helps a lot to onboard more people in remote work to have different tools and create a culture where using those tools is part of the work flow so people that is remote is not left out, and that's a good thing IMO.
> I haven't claimed that equational reasoning is limited to pure languages

Sorry, I may have read that into your comment.

> the code itself needs to be pure

But that's also incorrect. Just because you can't replace an effectful computation with a value doesn't mean you can't reason equationally. You can also have benign effects that are unobservable, for example, memoization.

> Not sure how to parse that

I meant that functions with effects are just functions with computation type at the meta level. I.e. there's nothing more "mathematical" about only allowing nontermination in your language. It's just the simplest case.
8.4%, my portion, NYC, for my wife and I.
For what it's worth, my impression is that CAA will be mandated by the CA/Browser forum at some point. But, indeed, that's the main weakness of CAA—it requires that substantially all CAs support it.
Nevertheless, I prefer Chrome's approach. I can just open the process explorer and kill a few of the most memory hungry tabs/tab groups; with Firefox, there's no other solution than killing the whole browser.

Can't wait for this fix!
> but I was trying to reduce my Google dependencies.

Get Chromium.

http://chromium.woolyss.com/
Aren't AGM batteries essentially lead-acid (car batteries)?
HPKP is ignored by browsers when the certificate chain presented by the website includes a user-installed root CA. This is so enterprises can continue to MITM their employees' connections on their work machines.
We are working on it, will fix soon!
I tried googling the A.S. in Computer Information Sciences job placement rates and couldn't find anything. Do you have a link?
This is super surprising to me, because irccloud is exactly what we use at Mozilla. Everyone seems happy with it's performance, and obviously most people are using FF.
http://www.nytimes.com/2015/08/16/technology/inside-amazon-w...
The problem is, even most apps from Google's competitors now won't run without Google Play Services. Android is becoming increasingly useless as an open source OS.
You don't need to look far to find women who've had bad experiences in tech culture. Of course it's not all bad. It's natural for groups to value their common qualities and tend to devalue those of people outside their group. Techies aren't monsters. But we surely can still do better.
I have, not in Peru but at home. I've tried DMT roughly 300 times, pharmahuasca (N,N-DMT in an enteric capsule, inside a larger capsule of synthetic monoamine oxidase inhibitor) and ayahuasca, and the usual others (I've tried everything I could find from Pihkal and Tihkal). I eventually became too afraid of DMT (I had mistakenly bought 5-MeO-DMT and was using the same dosage and that wasn't pleasant, and now I'm too anxious to "blast-off" because of the pace) and wanted something slower, so I turned to Ayahuasca.

It's a difficult feeling to describe (three Ayahuasca sessions at home so far.) – it's similar to N,N-DMT but whilst DMT feels like chapter-skipping, Ayahuasca feels like things are being played at 1x – If you have specific questions I will try to answer them.
Haven't worked remote, but I homeschooled myself through highschool; the easiest way to deal is that work time is for work and make sure everyone knows this.

Doctor appointments and such may be worth breaking this rule, but picking up prescriptions or even your kids from school (assuming they have a way home) are unnecessary interruptions.
> I've indoctrinated them into our values, and only on rare occasions has that not worked out.

What do you mean by "indoctrinated"?
No, it is not; locally-installed CAs (roots) bypass HPKP.
Microsoft Wants Autistic Coders. Can It Find Them and Keep Them?
I missed your () entry, apologies. And yes, I 'got it', there is no need to be condescending.

Regardless of the stats, I'm still uncomfortable around amateurs with guns. Comfort and rationality are not always aligned.
Maybe I'm misreading things but it looks like it's been constantly getting worse since 2012?
I used to be lonely\empty before deciding to follow Christ. I tried and did just about anything and everything to fill this void and nothing lasted. Giving my life over to Him literally changed my life. I'm convinced that we are all created to be in a relationship with Him and until we are we will constantly search for other ways to fill that void.
> The only whitepaper I could find for the whole system was for ShadowChat, which says they use AES-256-CBC to encrypt the chat.

Okay.

> AES is a symmetric encryption algorithm, and a strange choice for a chat protocol.

No, it's the standard choice.

Signal uses AES-256-CBC + HMAC-SHA-256, for example.

> Furthermore, CBC is not great at hiding patterns, and chat will often have a lot of patterns.

That's not true. CBC mode isn't great at hiding patterns with IV reuse. Solution: Don't reuse IVs.

The problem with CBC mode is that it's unauthenticated, and as a result is often susceptible to padding oracle attacks that allow messages to be decrypted byte-at-a-time.

https://paragonie.com/blog/2015/05/using-encryption-and-auth...

A better mode would be GCM, or maybe GCM-SIV, or scrap AES entirely in favor of ChaCha20-Poly1305.
I know this is not about ad blockers, but does anybody have any experience of using something like https://github.com/StevenBlack/hosts/blob/master/hosts instead of uBlock Origin? Or even use it in the hosts file of our dd-wrt/openwrt routers?
This happens, see Superfish and friends. HPKP does not protect against this, it's an entirely different set of problem.

HPKP's only purpose is to protect against malicious or compromised CAs.
I don't understand this. You say you want more battery in exchange for a larger device. Isn't that exactly what this case is providing? You call it "monstrous" but it's precisely what you're asking for -- more width in exchange for more battery.
Regarding that 50% discount, do you also charge for travel expenses, in addition to the normal labor rate? If you had to fly to Los Angeles and stay for a week - who pays the travel and lodging?
Ask HN: Company Doing 6 Month Crunch
Last week during the company update our CEO told everyone that we need to work early, stay late, and tell our families to support us while we work overtime to make the company look strong enough to raise another round of funding or we'll be forced to sell the company.

I work at a well known startup company in the valley that needs to raise a series c round in the next year.

I've been working here for several years and have a good amount of equity as an early engineer, so I don't want to leave necessarily, but at the same time I'm 100% put off by being forced into working crazy hours for half a year with no real end in sight.

Does it sound like I should start looking for a new job at this point based on your past experiences? My gut is telling me yes, but I don't want to trust it =/
This is the catalog referenced in the article:
https://assets.documentcloud.org/documents/3038285/2014-Cobh...
The last two in my experience are handled by treating the remote employees as effectively contractors. They'll incorporate as an independent company, and then bill themselves out for whatever salary they're on, taking on responsibility for their own taxes and other requirements.
> The whole enterprise seems very poorly thought out.

That depends on which circle you sit with. Some of them are straight up dangerous (meaning, whoever is running it has not been through the proper training), while others are incredibly well-organized and safe.

And "freak-outs" are oftentimes the point, not meant to be suppressed or dealt with, but guided through by a competent shaman / group. You get to a certain level of understanding when pushed a bit beyond your comfort zone, and that can be difficult sometimes.
Closure Compiler also has pluggability, however the plugins must be written in Java, which is a downside for the JS ecosystem. For example, asset packaging wise, there's stuff like GSS Compiler integration, where goog.getCssName('foo') is translated into an obfuscated short className, while the GSS compiler optimized, prunes, and combines GSS.

GWT was the same way, asset packaging was a core feature even in 2009. For example, it would automatically compile CSS, UI templates, and images, auto-optimizing them, and auto-sprite-sheeting everything, while packaging things into as few HTTP requests as possible.

The real issue is that to do this in a safe way for JS requires coding conventions be adhered to, or the adoption of TypeScript and annotations. Closure's advanced mode will break JS that tries to get too fancy with dynamism.
> It's certainly an effective defense-in-depth mechanism.

1) We've seen time and again that complexity is the enemy of security. Generally, the more moving parts, the more likely for another flaw. This is less defense-in-depth than it is added complexity. The attackers have time on their side to figure out where the next hole is.

2) The OP suggests that HPKP failed because of practical reasons (domain admins are scared to death of getting it wrong and bricking their site) - things like CAA only add to the complexity.
What typing ^D does on Unix (2009)
Anyone have any idea on bulk costs. If buying 5-10K of the esp8266 modules, its chhheeeapp. Would love to consider switching over but curious on costs.
Mastering the Art of Data Preperation
My knowledge is not enough. But I knew people (now very very old) that were able to pull this off.

They actually trained under Masutatsu Oyama with can be seen in some ways as precursor of MMA.

I have also seen Boxers pulling this off to be fair. But any ground martial arts like is not suited to this.
I think this was more honorary than anything. It sounds like he didn't necessarily have the skills necessary to be a true executive, but putting him on a team where he's managed by someone else would seem like a slap in the face. This was a decent way to keep him compensated fairly for his past contributions.

I've seen at other companies where people like this are moved into "R&D" so they can keep working on cool projects while the company can do what's needed to grow.

Edit: fixed typo
Well, we can use the income result as a proxy. 18% of lowest-income adults were depressed, 3.7% of highest-income adults. That doesn't preclude 'medical' depression, but it implies that it's at least mediated by circumstances, which is an interesting place to start.
I certainly do. I found even punch cards preferable. The awkwardness of the input method meant that I stayed away from tech for almost 15 years after the first quarter of my freshman year in college.
A Short Guide for Students Interested in a Statistics PhD Program
I was in the same situation as you and found that in the end Safari fit that bill for me (not sure if it is an option on your platform). Responsiveness is probably somewhere between Chrome and FF, but memory usage has been much better.
Project Management vs. Work Management: What You Need to Know
Copying from phire's reddit post

> I had a quick look at the BAT mappings it was setting up.
The data BATs were set up in a regular manner, with a 1:1 mapping from virtual memory to physical memory. But the instruction BATs was a weird 1:1 mapping with a bunch of holes. It mapped 128KB, followed by a 1.85MB gap, then 512KB followed by at 1.5MB gap. Then 1MB followed by a 11MB gap and a final 2MB.

> My guess, is the important code that would run multiple times a frame was positioned into areas backed by BATs (with linker scripts), as BAT mappings are nice and fast. Then they would use page tables to fill in the gaps with more uncommon code.

> Most of the uncommon code would be backed by invalid memory, until something jumped to it. Then a pagefault handler would decompress and/or copy that code from auxiliary ram into a cache backed by real memory, and set up page tables to map the code into place.

> Complicated, but would allow them to squash a large executable into the limited ram of the gamecube.

https://www.reddit.com/r/programming/comments/51f1yz/booting...
How is that the Peter Principle? It sounds like he was shunted into a ceremonial position rather than any incompetence on his part in the position.
Not only that, but also add current_* and original_* variations for those fields. Sometimes you have channels that are good at bringing awareness but others that are better at converting. They are not always the same.
Russia's Pokémon Gulag
See WebAssembly, WebAsm, and probably another dozen similarly named projects.
> "Ass heard"

Yes, I giggled. Yes, I'm a child.
No more tl;dr
I know. I'm not disagreeing with him. I was commenting on why doctors, at least my doctor who I generally consider good, go to drugs first. People will take them regularly, which gets them half-way to actually being healthy. But they won't do the things that will get them all the way to healthy.
>CAA requires the CA to perform additional operation (retrieve and check that DNS record) - not all of the 300-600+ CA's will do this - all it takes is 1 CA and the attacker will get his fraudulent cert from that CA.

CAA seems like another good step that the browsers can demand after a CA fucks up - like google has mandated that some CAs publish Certificate Transparency logs after they've mis-issued a cert, they should also be requiring CAA on threat of being revoked from the browser's trust lists.
Locally trusted CA certificates circumvent HPKP protection, because many organisations use TLS MITM attack to spy on their staff and browsers must support it in order to work properly in those environments. But it makes sense for browser. If you are making your own application, you can implement it in any way. Simplest way would be to embed public key in the application and check it without HPKP. Though, probably, if your app is popular, you'll face that in some networks your connections are MITMed and you (or user) can't do anything about it, so it's choice about dropping security or not to work at all.
Hey man, I have a quick question. You may know the answer, you may not, it's a shot in the dark but I'll try anyway.

I've been wanting to get into the affiliate marketing space for a while now. I was curious if one way to approach is to setup a shopify-type store which contains actual products I'm looking to sell, but the links to the products actually go outbound to amazon affiliate link or something else, or is your approach more blog-related, where you type text about something and then include affiliate links within the body of the blog post? Have you tried both, which is more effective?

The other thing I've researched and read a lot about is how to validate an idea to see if there's interest. The way to do this is to setup a simple 2-page landing/splash page on Strikingly, Unbounce, Instapage, or any other similar site, explaining what your product or website is about, with a direct button to complete the purchase, but then you redirect the user to a "Sorry, we are not yet ready", and see how many "convert" - that is, users who are immediately ready to pay for said product. Do you do any of this validation for your affiliate marketing sites, or do you just open them and start selling through your web store or blog posts (depending on answer from first paragraph)?

Thanks so much for taking a moment to help me get started.
There is a line of thinking I see that I wanted to address. The idea that someone isn't depressed but instead are really unhappy with their lives, work or situation. It's been pointed out already that the difference is difficult to test.

The problem that thought doesn't address is how impossible it can be to change your life, work or situation. People in abusive relationships can feel trapped and even when a door is left open for them to leave they won't take the chance out of fear. A change that would break someone out of a depression who is in an impossible situation could just as easily end up in what could be called a psychotic break. Hurting themselves or someone else, thereby becoming free of the situation by being in jail.

I'd like to add that part of the solution to help those particular cases could be to promote a society of helpfulness. To know if they jump from that life, work or situation that they won't die or have to crawl back to their abusive trap.

There isn't an answer and I think that you should err on the side of caution by not being dismissive of depressed people. There could be something in their life making them unhappy but they probably can't find any healthy way out. Without anti-depressants many people self medicate with alcohol for instance which I would argue is a worse condition to exist in.

Anyway that is a lot of rambling to say there isn't a clear answer so please think twice before dismissing depression. Invisible diseases are incredibly difficult to live with for the very reason they aren't visible in a photo.
No, HPKP is not intended as a mechanism to prevent that. In fact, all user agents I'm aware of do not check pins if the certificate chain leads to a custom CA certificate (one that has been installed manually, as opposed to the default root certificates the user agent ships with). (I believe this is a MAY in the RFC, but all major browsers have implemented it that way).

Mobile apps typically have other key pinning mechanisms that are preloaded (i.e. baked into the binary), but that's typically easy to bypass if you're the owner of a device; it's not really effective as a mechanism against reverse engineering.
But forcing others to pay isn't controlling? I agree they were victims of fraud, but you should still not force others to pay for that at gunpoint. There must be a more peaceful way. And saying "literally watch them die of destitution on the street" is just a cheap, emotional straw man. No one is saying that.
ASUS Broken API Authentication
Worse on this machine, because it doesn't actually work, and crashes my browser tab in Chrome.
"the traumas of early childhood sow the seeds for a lifetime of anxiety and unhappiness." VERY well said!
The higher-ed debt bubble already started, it's just about to pop me thinks:

https://www.google.com/finance?q=NASDAQ%3AAPOL&fstype=ii&ei=...

https://www.google.com/finance?q=NYSE%3ADV&fstype=ii&ei=HvnO...

https://www.google.com/finance?q=OTCMKTS%3ACOCOQ&fstype=ii&e...
"a good amount of equity", apparently worthless without working like a slave. I'd leave.
This is what accreditation is supposed to be for.

http://ope.ed.gov/accreditation/

It does need to be reformed a bit though for what you might call the 'low end' ... that is training programs finely tuned for specific skills.
Yes, like a rogue one installed through any jailbreaking technique, isn't it?
Seems more probable that you have the cause and effect backwards. Being affected by depression prevents people from functioning well enough to work in a high income profession.
Game killer App
clickbait (google search): "(on the Internet) content, especially that of a sensational or provocative nature, whose main purpose is to attract attention and draw visitors to a particular web page."

I think this safely fits under the sensational/provocative attention-grabbing umbrella.