skysight-inc/HackerNews huggingface dataset:
> What doesn't work is a specification language that's also a programming language.

Absolutely, and thus types and specification via TLA+ are not in opposition. In fact they can work in harmony.

> someone who's familiar with programming languages may view specification languages as groundbreaking

That's not what I find groundbreaking. What I find groundbreaking is that TLA+ is (supposedly) so composable despite being so simple. I remain skeptical. Indeed, even the fundamental TLA+ notion of "priming" variables seems that it would immediately be an impediment to composability.

> There's a result (mentioned in my Curry On talk/post) that simply put states that correctness doesn't compose.

Yes, I recall that. I believe the theoretical result, of course, but I am yet to be convinced of its practical relevence. Correctness does compose in my experience as a mathematician and as a software developer. In fact, I can't see any way that correctness can be achieved except through compositionality.

> A TM with 6 control states can have 10^35,000 states or so

Please explain your terminology. Surely it can have infinitely many states? Indeed a Turing machine with 1 control state can have infinitely many states.

> states in sub components simply cannot be hidden

I find this a very puzzling statement. States in subcomponents can be easily hidden in every common-or-garden programming language.

> You write your assumptions, and hope to get verification for your claims.

Sure, but as we've observed, it doesn't actually tell you anything about the final implementation you come to write.

> The problem here may still be that you're thinking of composability in terms of functional languages instead of composability of abstract programs.

I'm thinking of composability in terms of building things out of smaller things and being able to deduce properties of the things based on the properties of the smaller things. That notion precisely captures "composability" (even "compositionality", if we want to get formal) as far as I am concerned. What does it mean to you?

> The book won't tell you that what you know as parameterization is just another form of many of nondeterminism

OK, but you could. What exactly does that mean?
Wow, I'm feeling pretty paranoid now.
> That way only locally running programs can access your service

A web browser is a locally running program. You mean, of course, that access to the socket can be limited to programs running under a user account sufficiently privileged to read and/or write to the socket file. Can all services be made to communicate only through domain sockets?

I agree that choosing randomly from the available loopback addresses and/or ports isn't providing any real security; it surely wouldn't take the web browser very long to make a connection to every port in the 127/8 address range.
This sounds interesting, do you have sources (about emission levels by country, Russian ecological standards and how are they enforced, etc.)?
https://play.google.com/store/apps/details?id=com.oneappsear...
You could instead just make phones be cheap enough that you don't mind dropping them.
>To fill them, anyone purchasing these vessels will likely take advantage of the lower purchase price and offer even lower freight rates. I don't expect the supply and demand to change quickly.

The supply of shipping hasn't changed (still the same number of ships, just different owners), and the demand of shipping hasn't changed, so wouldn't the cost of shipping stay the same?

There's no incentive for the new owners to lower their prices just because they got their hands on some cheap ships. They would probably rather just make a higher profit instead.
I thought everyone interested in a FOSS office suite was using libreoffice.
Rowhammer is largely random. You don't get to target specific bits of physical ram. You find scarce weak bits and work to get the data located there. In this case that means you can only pick a couple bits per 4KB to attack. That won't let you fake out a CRC.
Cheers! I liked gnome 2, I can't stand unity, gnome 3 or the latest KDE. LXDE was too minimalist.
XFCE was just right.
I agree that a lot of features are generally pretty useless... however I love that I can download the Netflix app to my TV directly. It saves me having to use a second device and I can update to another VOD provider if my TV outlives Netflix...
Beyond split testing, it's a good idea to collect usage metrics for everything your users do on the site. At a bare minimum, you can send event data to something like Google Analytics and sift through it by hand to look for patterns.

Ideally though, you should be associating that data back to userids and bucketing it by whether or not that particular user converted to paid or let his trial expire. That way you can collect statistics on what things make your users happy so that you can know what sort of features to add in the future, and so that you can gently steer wayward users toward doing things that you know will tend to bump their chances of converting.

I've been writing a bit about this lately. Here's a better thought out explanation of the above:

http://www.expatsoftware.com/Articles/maximizing-saas-trial-...
Recommending a closed source cloud service to send all your passwords to in a thread on HN about a closed source cloud service that lost all passwords is a great way to demonstrate deep and fundamental knowledge about the principles of software security!
Got mine 5min after @Samsung told me they stop delivery.

Now unopened package on my desk.

Very angry at Samsung, their ecommerce shop (3 tries until ordering worked), delivery notification (10 hours late for every update), delivery (wrong delivery address from their system to DHL) has been very bad already. For an 850 EUR premium device. I will never buy from them again.

And now this.

Probably returning and getting an iPhone7.
> If you set your DNS TTL to a relatively-low 1 minute (as in the POC), that's 31.9 years for an exhaustive search.

Right, but that assumes a new DNS record is created each time. An attacker might simply have records for the entire 127.0.0.0/8 range and would iterate over them.

It would still take a long time to make an exhaustive search, but it will be faster than waiting for a 1 minute TTL between each try.
Thanks so much for taking the time to write this up!

Could you tell me what tools or services you use to automate the emails, and detect which ones to send based on if users are using the service?

Thanks
How to Implement Growth Hacking in Ecommerce
Coalescing down to a smaller partition number does decrease the number of output files. But it also decreases parallelism, which isn't expected when processing so large a dataset.

Coalescing makes more sense when some stage of the pipeline dramatically shrinks the amount of data (e.g. grep-ing error logs from all log files) so that successive stages can easily handle the rest of the data with much fewer executors.

(disc.: Spark committer)
It should be a lot easier for everyone to collectively sue Facebook and other social networks for violation of privacy.

This is just one of the economic asymmetries where small annoyances to everyone, but not enough to individually do anything about it, aggregate to billions for a few in power.

The only social network we need is a collective legal one.
but when people say "that non-programmers can use" they don't mean "that people whose job title isn't 'programmer' can use." They mean "that people who can't program can use." it's a bit confusing and I suppose I could be wrong. (They could mean "people whose job title isn't 'programmer.'")
"bild" means "image" in Swedish.
Being extremely annoying to lots of people most likely converts for them.

This sort of marketing is pretty sociopathic.
I would assume that a unique pixel is generated by Mailchimp for every recipient to prevent this form of caching.
Time4vps really cheap European VPS servers
There will be plenty of additional dilution if Tesla is successful, and not just for Model 3. Tesla's manufacturing ambitions and capital requirements are huge; the company will not be satisfied until they are selling millions of cars per year and selling much more battery storage per year than most casual observers would think reasonable. In a low interest-rate climate, this is a great situation to be in.

With that in mind, the best-case possible market cap ceiling is much greater than 5x the current. Tesla is not limited to car manufacturing only. And even then, the best-case scenario leaves a hole in car manufacturing capacity as some of the existing car manufacturers are unable to adapt to a future where electric vehicles will be obviously better than fossil-powered for most use cases.
In this case I'd almost certainly guess that it is through the phone number. LinkedIn is particularly creepy for this.
There's a great interview from a few years back that explores this well: https://www.youtube.com/watch?v=BI23U7U2aUY
With all the talk about a16z money, important to remember that partners give half their earnings to charity: http://fortune.com/2012/04/25/andreessen-horowitz-to-give-ha...
Cool, thanks. I wasn't aware that pumped hydroelectric had this great installed capacity. Those are very big numbers. Of course, it isn't an either/or proposition, since pumped hydroelectric is limited by geography. Battery-supported grid levelling can also be installed locally at each residential solar project, which makes adoption less of a political case.
> I'm honestly confused that Gmail would proxy their images to anonymize them, but wouldn't just make that proxy a caching proxy,

They do that, but images in mail have unique URIs per recipient to enable this sort of tracking. Before Google enabled caching, it was possible for sender to figure out the exact number of times an email was read, now you can only know the first time it is read.
I guess the question is whether this thing that follows 2005's style is timeless... I suppose from the reaction of people that it doesn't?

Though the only interface that I can qualify as timeless is maybe the PS2/3/4 interface XMB (10+ years and still basically the same).
I never use them. I have a heavy gauge spatula that I use to scrape the top, then hold it at a 45 degree angle to scrape in between the wires that form the rack. The bottom doesn't get clean. Nobody has ever gotten sick nor required surgery.

As a result of reading this article and thread though I will never use one and proactively warn friends and family about them.
No reasonable person would think that, no.
Phone or Server?
Coming from Windows, seeing graphics in the cmd window is shocking.
Alibaba’s biggest rival unveils cute drone delivery bots
10 Interactive wedding tips for assuring that your wedding is fun
That's not easier at all. Not for the moderately-technical small-business owner that the parent comment discusses, or indeed many other (mostly shared hosting) scenarios?
Not at all. (Both the concept and the next level)
Did you use network shares or default shared filesystem?
Also a shame OSFree is not actively developed.
I actually think it won't work in China, but would this work in the US?
That's the American spirit!
WordPress, because simple websites tend to not stay simple.

Yes, WordPress is bloated and quirky in some ways but it gets the job done, works with every hosting service under the sun and you get plugins for any use case you can imagine.

For my own websites that I know will definitely stay simple I use plain HTML templates and GitHub Pages.
Given that this is a Tor article, let's talk about it. Tor exit nodes are a super easy place to perform snooping and injection on non-encrypted requests passing through that boundary. This has been used for simple snooping as well as demonstrated cache poisoning attacks that let the snooper inject JS into later https site requests like banks to exfiltrate passwords.
New passwords must:

Be at least six characters long
Contain one or more numbers
Include at least one of the following special characters: !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~, or a space

There's no way I'll remember a last.fm password like that! :(
At my daughter's school, they had that project week, too. Easily the most important experience in grade school IMO. They put the liquid inside a tube with a non-return valve. Also, all-time adult supervision, clear instructions upfront and kids did not get the tubes until they needed it. Kids were 8/9 years old. Yes, you have a significant risk and I am very glad they took it to help the kids grow up to be responsible people who can take limited risks.
Nordic Bourses That Have Dethroned London Pile on Post-Brexit
We perhaps only disagree on what is "server-grade" vs what is sold for servers.

Google, for example, are famous for making big data centres out of cheap commodity boxes, and I double Amazon are any different. I certainly know the rackspace blades I've played with didn't make my grade of either! :)
Aaaaagh!

:-)
Another attack would be to flip bits in code pages...

That the attackers illustrated it by changing public keys so they could push updates or ssh into a box doesn't mean that's all the ways they could have compromised. You can't say "I don't use SSH so I'm safe!" or anything like that.
Somebody who makes a spreadsheet is telling a computer what to do. Are advanced users of Excel programmers?

Businesses occasionally express the business rules in the form of spreadsheets to be directly implemented into code.

Spreadsheets even double as unit tests.
You really have no idea how much crap Samsung is doing. Their entire business model is basically copy what the established players are doing, but not obviously enough to get sued and then undercut them on price. They screwed up once with Apple, but otherwise it works fine for them.

Then there's the bizarre sexist ads, refusing to pay the return flight for bloggers if they don't praise Samsung and other stories.

I wouldn't buy anything from them even if their customer support were great.
(New Twitter Scam) Attack of the 75% coupons from literally 1000's of companies
I think that running elastic search on a different port (other than 9200) will go undetected? (just a thought)
For added effect, put the fan on the floor and paint inside the balloon.
Probably wrong numbers because of gmail. Gmail will cache the image automatically, regardless of wether or not you open the mail. This is done specifically to prevent people to know that you open their mail. So you must have a shitload of false positives in there.
Google ends modular phone Project Ara, though licensing may be an option
Perhaps we need more certainty than just "think"?

That AWS don't boast that they are not susceptible to this suggests that perhaps at least some of their setup is?
Great tool, but reddit threads with a lot of comments only fetches the first one. I know it's quite hard with the child comments and the number of them, but I really wish there's a way to take them offline for me to read.
There's a hierarchy of severity that's expected in industrial accidents, as I've recently learned running across a reference to the concept. The work was done a long time ago -- ~1930s - 1950s, and I think the earlier part of that period. It's used fairly heavily in the insurance industry still, from what I understand.

(I'm being a little vague because I can't immediately turn up that reference, I'll take a look for it.)

The upshot is that if you've got a base incident / accident / failure rate, you can predict with a fairly high degree of accuracy the likelihood of major accidents -- fatalities, major injuries, or catastrophic to plant and equipment.

(Now to see if I can find that.)

Here: H. W. Heinrich, Industrial accident prevention: a scientific approach (1959)

The publication date is later than I'd thought, but the data were collected much earlier -- 1931.

https://www.worldcat.org/title/industrial-accident-preventio...

Which I'd originally turned up ... through a NASA accidents presentation:
http://www.hq.nasa.gov/office/codeq/accident/accident.pdf
5 Myths about Embedded Systems Development
Yes, but not when email is actually opened.
Samsung just announced that they will replace all 2.5 million Note 7 sold so far.

http://www.cnbc.com/2016/09/02/reuters-america-brief-samsung...
Emissions: http://climateactiontracker.org/countries/russianfederation.... (note "inadequate" label - this web site rightly says that more could be done in terms of commitments)

OECD report on standards: http://www.oecd.org/env/outreach/38118149.pdf
See "Key findings" section - it summarizes the current progress and remaining issues with environmental policy. No wonder, most of them are deeply rooted in overall political climate and related to corruption, but, still, there's some progress and majority of ordinary people and in the government is really concerned with ecology and climate change.

Ministry of Natural Resources and Environment:
https://www.mnr.gov.ru/english/

There are many more sources in Russian, but it's hard to get a coherent view from them and harsh critics means more that people have very good understanding how it should be and push for more to be done, rather than that government ignores environmental issues like in some countries of South-East Asia, for example.
The On-Demand Economy Is Dead
CRITEO (http://labs.criteo.com/) | Paris | Full-time ONSITE | Mobile Engineer (VISA sponsorship)

• Build mobile SDKs present over a billion mobile devices worldwide already and used by the major games and apps publishers on iOS, Android and Windows Phone platforms.

• Learn and exploit new mobile platforms, adapt to changing requirements and contribute to a product that has grown by a factor of 4 in the last months.

• Find the signal hidden in tens of TB of data, in one hour, using over a thousand nodes on our Hadoop cluster. And constantly keep getting better at it while measuring the impact on our business.

• Get stuff done. A problem partially solved today is better than a perfect solution next year. Have an idea during the night? Code it in the morning, push it at noon, test it in the afternoon and deploy it the next morning.

• High stakes, high rewards: 1% increase in performance may yield millions for the company. But if a single bug goes through, the mobile Internet goes down (we’re only half joking).

Feel free to drop us a line at r&drecruitment[@]criteo.com =)
Such a brilliant guy. It's a shame future generations will remember him as the guy who stole code so that Facebook could build second rate VR goggles.
Less than the typical TV or FM broadcast tower, and remember there's a lot of empty space around the launch sites. Even ham radio operators in the US can run at 1.5kW peak.
I have opened beer bottles with my belt buckle. Apparently this surprised people.

...I have seen someone successfully open a wine bottle with a shoe.
Rabbi, Jesus, Hammurabi doesn't look very universal to me. All three are based on the same tradition of Abrahamic religions and looks mediterianian centric to me.

Universal for me would include people in Asia, Australian Aborigines, South America, Inuit etc.
Another vote from a fellow European to keep Brussel bureaucrats out of internet.

They have no clue or somehow good intentions always turn our horrible.

An old saying about countries that can't get together a government (like ironically Belgium!) - - it's the best for the people for having a country without the government because then they can't make more stupid laws.
Advertiser-friendly content guidelines
"The symptoms being experienced are not a failure of the TV, but are as a result of specification changes made by YouTube that exceed the capability of the TV’s hardware."

Which changes? YouTube still streams H.264, and I can not believe that those TVs can not run properly the glue-code scripting, e.g. doing a check of "if old TV, then, use less fancy things". So as others comment here, it looks like an excuse.
Why use paper as a moderator? I go with direct ink IV, to cut out the middleman.
I'm sure we have a lot of confirmations about alleged leaks if that happens!

If anything, the whole thing goes under radar.
Kent, I was really exited when I first heard of Bcachefs, so I'm a bit surprised of the lack of public discussion of your work.

I have a few questions for you:

1. Do you have any other active contributors for the project?

2. Are you seeking any help besides donations?

3. What's your estimate for how long (and how active) can you maintain the development at the current level of support?

4. Do you have any roadmap with approximate dates?

Thank you for your work.
Then just buy a case with a nice design. Buy a $20 case instead of a $3 bumper.
The surprising part is that Note product line is supposed to be pretty mature after all these years, but we still observe these childish issues in the final product. If you're copying from Apple or others, at least do it right.
I don't trust 3rd parties but I do evaluate the threat that comes directly from large companies to be lower than the threat that comes from criminal hackers.
Does their ZFS implementation supports dataset level encryption?
dupe https://news.ycombinator.com/item?id=12410451
WoSign's secret purchase of StartCom: WoSign threatened legal actions
Samsung to Recall Galaxy Note 7 Worldwide
Top 3 Programming Languages for Machine Learning
Everybody is using LibreOffice, except a poor few that get misguided by search services to the Apache OpenOffice website. IMHO there is no sane reason why Apache OpenOffice still exists.

Edit: Looks like there are a lot more OpenOffice users out there than I thought, sorry. I really thought the world would have moved on, at least since 2013/14, see

https://upload.wikimedia.org/wikipedia/commons/thumb/f/fb/St...
Stylight | Munich | Germany | Visa & Relocation support

We’re a fashion company but you won’t have to wear the latest Karl Lagerfeld. A hoodie or your favorite Docker shirt will do just fine. You don’t even need to like fashion at all, but a certain admiration for Ken Thompson, Rob Pike or Martin Fowler is always appreciated. You don’t speak German? No big deal, we use English as our main language and we have colleagues from 20+ nations.

-----------------------------------------------------------

We're currently looking for a Really, Really Good Software Engineer (http://jobs.stylight.com/really-really-good-software-enginee...)

-----------------------------------------------------------

Interested? Contact me on sandra.jasarevic@stylight.com. Want to know more about us? Check out our Tech Blog: http://tech.stylight.com/
AddThis for Chrome Installed
> ...operate as a share price optimization algorithm...

That in itself is not so bad, as extremely long-timeframe constraints (say, >50 years) upon such an algorithm could conceivably be consonant with current decision-making behavior that externalizes many input costs (employee overtime, environmental damage, etc.). Running the algorithm to pay out in very short timeframes (a month to a year) due to most CEOs' anticipated short tenure is what seems to cause undesirable optimizations.
Olympic pool may have a design flaw giving higher lanes an advantage, look at this video : http://adf.ly/1ddj03
Home audio/hifi/theater systems
I think that Chromecast supports HDMI CEC so it should work with compatible TV's remotes.
INDIA – Reliance Jio Announce Free Calls Forever and Data for INR 50/GB
Hopefully we'll go back to a early era of free content creation.
> and suggested it may also ban flowers and perfumes as the scents can produce an emotional response

I look forward to someone trying to get things like that tested in court. Tough it'd be tricky, given that the Crown Prosecution Service would presumably not want to push a case like that and end up looking like idiots, and while the UK allows for private prosecutions I'm not sure if there'd be a viable avenue to use this act for that (trying to find a way of giving you standing to e.g. sue a florist sounds like inviting contempt of court).

This is a big problem - the law is so broad that it'll be incredibly easy to abuse if government wants to charge someone, or add additional charges.
http://www.alphaliner.com/top100/index.php
Hanjin represents 2.9% of the world fleet