skysight-inc/HackerNews huggingface dataset:
No, not just testing. Most languages have a variety of control flow tools, standard abstractions, and idioms that enable the creation of instantly-familiar interfaces.
>Article 50 will likely never be triggered. //

There's hope at least. But we've pulled the trigger, saying the bullet might not hit home isn't going to help, if we miss then the people we were shooting at aren't going to want to be friends anymore.

Sorry if that's twisting an analogy too far.

We dun goofed.

That's why we have a parliament, to stop us making these bad decisions, only PM May has said she's not going to let parliament operate (which sounds like it should be unlawful, certainly as Treason) just in case they decide not to follow the marginal vote in to the void. Presumably all to save face as backing down would be awkward for her now.

And that's, my grandchildren, is how one politicians pride killed Europe and destabilised World economies for decades ...
It's somewhat related to the number of data drives, but as you point out it's a bit more complicated in practice - it's not just the number of drives. For example due to parallelism built into SSDs (each SSD is actually a stack of smaller drives). For rotational devices it's complicated by TCQ/NCQ, optimizations that require a queue of commands for each device to actually work.

On modern SSD, values 5-8 per device are definitely on the low side. See for example this thread from 2014, on (then released S3500 SSD from Intel):

https://www.postgresql.org/message-id/CAHyXU0yiVvfQAnR9cyH%3...

That shows the performance increases up to effective_io_concurrency=256 (of course, in reality there may be multiple queries running on the system, sharing the I/O paths).
Who is going to start a company to supply 200 people with Internet?
Extremely dependent on hardware (and queries, as it only affects Bitmap Index Scans).
Could it still get one in anyway if it didn't have other reasons for getting rid of it? Probably Yes.
Follow your gut, you won't regret it.
Yes. Aim high.
You can read about the ongoing suits that followed Hepting v. AT&T, on EFF's case page: https://eff.org/nsa/ . The timeline is also worth a look: https://www.eff.org/nsa-spying/timeline

(Disclosure: I work at EFF)
Yes. To fix this generally, we'd have to stop hashing passwords for storage so we could use a ZK proof to verify.

There is a hacky middleground whereby a ssh client could hash what you think is your password with the server's identity to derive your actual password. But there's the issue of coming up with a canonical identity for a server, and if we merely trust the server to provide it then the scheme fails to a malicious one. Nevermind it would require special setup on the server, and the utility of password auth is for before you've setup public key auth.
Isn't that basically what you'd expect with a progressive tax system? Paying taxes is not the only way to contribute to society -- almost all the money people earn do to some extent, through taxes, and consumption, and investments, etc. Which contributes more I don't know. That's why I was hoping for a citation.

To your second point, there is evidence that CEO performance is negatively related to their pay: http://papers.ssrn.com/sol3/papers.cfm?abstract_id=1572085. Measuring competence is difficult, wealth is a appealing proxy but maybe not that reliable.
I think in some countries they measure grades with percentages.
"Wilson decided not to appeal the court decision and voted to terminate the service agreement with the town of Pinetops, Wilson's city spokesperson, Rebecca Agner, told Ars today."

The agreement looks like it was between the two towns. I wonder how it's fundamentally different than electricity.
GPA/grade I assume?
China just sent the most accurate clock to space
It also opens itself up to peddling tripe for talentless hacks that have no business reporting the news much less writing tacky blog posts.

Some of Vice is ambitious and credible, I was a huge fan of their Ukrainian Conflict investigative coverage and watched it regularly, but like I said Vice does peddle tripe.
1: You can actually see the galactic core easily with the unaided eye if you get far enough away from the city. An app will help if there is too much light pollution, but light pollution will also put a cap on your exposure time.

2: Not a bad idea at all. Mirrorless cameras shine here as well.

3: Sounds about right. Nothing wrong with experimenting also. Different cameras introduce different amounts of noise at various ISO settings, so the ideal ISO / shutter speed will vary. Again, if trailing doesn't get you, you need to worry about light pollution eventually washing out the photo.

Those are some beautiful shots! Here are my horribly processed contributions:

http://i.imgur.com/IO5A43p.jpg - M13 through a 5" Maksutov Cassegrain

http://i.imgur.com/jYBHJul.jpg - Northern sky in Maine. Milky Way was overpowered by Augusta's light polution.

The processing is a lot more difficult than the shooting IMO... lots of fun though.
start doing stuff, stop going to school. don't "believe you'd like to be in the industry." BE in it to find out.
I generally agree. I've been using RR for a while, and I'm not the biggest fan of their APIs. Nothing wrong with it, it just doesn't do what I want it to do; or rather... It does too much stuff, most of which I don't use. Just my opinion.

With that being said, they claim you'll be able to migrate slowly to v4, so hopefully it's not so bad. If they just broke backwards compatibility without a migration strategy, I'd certainly feel much more frustrated. I went with RR largely because it's widely used. I also don't think it's an unreasonable expectation for a widely used library to provide a migration strategy. Not that they're under any obligation to do so, of course.

My personal bar for adding dependencies is asking myself: would I feel comfortable debugging and fixing this? I recognize that it's not a free ride.
Space Toads Mayhem Dev Update: Mega Death Sun Power-Up :)
Do not have an MBA, but many friends who have gone to the top 3-5 schools, as well as some who did eMBA/part-time MBA programs.

There are a few worthwhile reasons to get an MBA, but one really trumps the rest.

As some others have said, the overwhelming value of an MBA is to build strong relationships with future business leaders. End of story. If you don't want to spend 2 years doing that and pay for it, don't do an MBA.

Those I've talked with that did an eMBA mostly regretted it because they were incredibly busy, and barely had time to meet anyone in the program, let alone build strong relationships with them.

If you don't have much background in management or business (most of which you can get from reading books) the course material will be helpful, but you could just as easily learn it on the job - if you can get the job. That is the other reason to get an MBA; to get into a company who requires it, though these are increasingly become less mandatory.

There are many answers to the question of how to get to executive management, but I think a very common one, which is likely to work for most people is the following: work at a service provider which gives you some strong functional/business skills (e.g., consulting, investment banking, equity research, marketing strategy, etc.). Do well there, but don't stay too long. From there, take a middle-management role (e.g, director, VP) at a corporation that is growing fairly quickly. Make your way up, and probably switch to another firm if you're not advancing quickly where you are.

Be careful of the trap of not having operating responsibility - you won't have this as a consultant or investment banker. If you don't have experience owning a P&L, you can't be trusted to do so even if you smart and capable. You could be in corporate strategy, corporate development, etc. but those are not true executive management roles.

Wow that went longer than I intended so I'm going to stop rambling.
> Does anyone else feel that the "we're paying 4 gold coins but are receiving only 2 platinum bracelets" style arguments are _extremely_ petty?

Send me four gold coins; I'll give you two platinum bracelets. Deal?
UK to extradite hacker with autism to US to face trial
This seems like an odd vulnerability. I use SSH keys instead, but I always imagined that if I used a password instead then my password would be used (on both the server and the client) to help derive private keys. If I have the wrong password, the encrypted messages we send to each other would just be garbled nonsense.
Well, that's why Unreal is starting to get back into it. It's also why id should be licensing their engines, and open sourcing them.

Bethesda/id/Zenimax, are you just afraid of money, success, graditude, and forming long-lived communities around your games that can mod and hack them, to keep the games feeling fresh, and thus people buying them, decades into the future?
PBR for Audio Software Interfaces
According to Vanguard, my annual rate of return is 10.7%. This is actually since 2008, sorry. I forgot when I opened the account.

It is actually a bit higher than that, since I rolled over some funds from another account and those gains are not included in the investment return calculation. Vanguard is showing the entire roll-over amount as a "purchase", despite the true cost-basis actually being lower.
As someone who goes against the tide, they have to be careful regardless. You certainly don't see the same restraint from string theorists.
It's cheaper everywhere in the US
SSH is like a candy store for advanced attackers.

Password auth discloses your password to the server. Clearly this is unfortunate if you connect to the wrong server, but it also means that a compromised server can intercept the passwords of anyone logging in.

The same extends to anyone using password auth with LDAP. In practice this means that if an organization uses LDAP with passwords for SSH authentication, the ability to execute arbitrary code on one server (combined with a routine privilege escalation) implies complete access to any infrastructure accessible with the same password. Most MFA schemes simply force the attacker to act quickly to utilize an intercepted token on a higher value target. Probably this means trying to find a copy of the private key that the devops team is using to run Ansible without having to MFA to every single server.

For small scale use private keys are a simple way to combat this, but at scale they're difficult to manage, and tend to result in high value static credentials lying around on laptops.

A lot of companies are combatting this using SSH certificates. Certificates can be short-lived (as low as minutes given the right tooling), and the CA that issues them can be heavily audited and linked to an existing identity system.

Netflix has open-sourced BLESS: https://github.com/Netflix/bless

Lyft has adapted BLESS for use without a bastion, start at slide 28: http://www.slideshare.net/aspyker/netflix-open-source-meetup...

Facebook has their own certificate scheme: https://code.facebook.com/posts/365787980419535/scalable-and...

Google has something they don't talk about that seems to be along the same lines.

Quick plug:

At ScaleFT we're building a commercial solution that uses very short lived certificates: https://www.scaleft.com/

We're hiring if anyone is interested, my email is in my profile.
A Two-Mile Beer Pipeline Carries Belgium’s Lifeblood to Be Bottled
SSH predates PAKE as a widely accepted practice
A large margin of safety / margin for error / margin for refactoring is the correct way to deal with uncertainty of any kind.

Humans are very poor at reasoning about low probability events that have serious consequences, i.e. large earthquakes with very long return periods.

For this reason, it's difficult to assess the 'risk' of external code because risk management processes don't work very well when high uncertainty is involved.

If you decide to use external code that has a high degree of uncertainty, just make sure to have a generous allowance of time/money/effort for future problems.
It's the mark percentage.

https://en.wikipedia.org/wiki/Academic_grading_in_India
Great news if it works and it's a cost effective replacement!
<raises hand> The ex-classics-major in the audience would like to beg to differ. Would you like to know about the many foibles of graeco-roman politicians, writers and soldiers? Because I can tell you things they would likely LOVE to be forgotten now (e.g. any of Catullus's poems regarding his opinions on plagiarism by his peers, and the involvement of rectally delivered "spiky fruit" remediation.)

I think it's pretty black and white, the "right to be forgotten" is a complete and utter absurd slight against the fundamental concept of a cultural history. Such a right stands against tens of thousands of years of recorded social ephemera, which until this affront was generally seen as "quite an accomplishment." (for humanity)

And to make what should be an obvious point, I do not say this as someone without skeletons in my closet. I don't get to live those down, or assert someone "forget"; they are actions I took and they are now part of me, it's for me to demonstrate that I should no longer be judged by them.

(I never thought of all my posts one defending history as paramount to speech and/or accepting personal responsibility would be the one to get downvoted this hard, if I said something else stupid/illogical please at least let me know, because I'm both curious and entertained)
> The same extends to anyone using password auth with LDAP.

So don't do that. Use kerberos auth with LDAP, and use native kerberos support in apps, don't use kerberos with pam.
I'm convinced there isn't a way to even increase your chances, let alone guarantee satisfaction. According to a spreadsheet for 4 years my average star rating hasn't changed (~3.5) and at different times I tried different strategies which all ended up with the same end result - a (wonky) bell curve.

So now, instead of wasting time chasing reviews and recommendations I just read the damned book - this way I increase the amount of 5 star books I've enjoyed for the low price of more 1 stars I can have a good chuckle about.
Bottle (Python). It's very minimalist and tries very hard to get out of your way, but it usually provides enough for prototyping and quick spur-of-the-moment things.

The latter is also when you might appreciate the fact that its markup language is really just embedded Python (PHP style) - you're trusted to not abuse the power, but you define what "abuse" is.
I find this common "wisdom" or "best practice" questionable. Something to think about:

If I use a password, a suitably designed client can have absolutely no trace of my credential after it has been used.

If I use a key/certificate, that credential must be stored somewhere on the client, and even in encrypted form, it exists in persistent storage.
It's much easier to implement something for your application than something for a library. You have a specific problem in a specific context, but the open source library must solve a general problem in thousands of contexts.
I'm going to assume you know more about this than I do, because I know virtually nothing; I just sort of blindly assumed that you'd build a semi-permanent shelter and do some light farming in the area - but like I said, what I know about survival I learned from a handful of television shows.

I also know that it didn't look particularly fun, either - I think given my options, I'd rather be homeless in a city rather than homeless in the wilderness.
No, we're not doing enough, and even if human nature suddenly and radically changed overnight we'd still be in trouble. The options now range from massive problems, to 'Game Over' for our civilization.

Keep in mind that if we're knocked back to mud huts, we're not coming back from it this time, we've long since used up the relatively accessible resources that made it happen the first time.
It doesn't even have to be recycling. In fact, I have incorrectly pasted a wrong password to my Google account not realizing I had copied from one row underneath.

Personally, I place a lot of faith and trust in Google so I don't think they'd store failed password attempts about me (I've already volunteered them more information about me than I would volunteer to my own elected representatives anyway). If I ever realized I made a mistake the other way round, I'd reset the password to my Google account even though it has 2FA.
What does that even mean?

Every journalist worth their salt uses it, and it's essentially the public front for any media facing company. Sure, every day users may be contributing less, but it still seems to be a pretty meaningful megaphone for brands. I don't exactly see that changing: I don't contribute to Twitter, but I do consume the tweets of brands / companies / significant people that publish them.
If you look on realtor.ca, you can find many many apartments in Toronto for less than half of that.
If you're already making the kind of money an MBA would doesn't seem like it makes a lot of sense. What's the point of paying lots of money and spending all that time to make the same as what you are now? You're salary will go up from real world experience and increased skills from working on the job too. In my experience, only really large companies where you probably don't want to work pay more as you get more degrees.
One thing I very much dislike about many of the roboadivisors inculding Wealthfront, is their subjective take on what risk means.

Ex: Wealthfront's high risk portfolio back in 2013 had significant exposure to commodities -- mainly oil and metals. That sector has done poorly to say the least, and many a retail investor would not have correctly understood what Wealthfront's definition of risk actually meant.
I recently started working seriously with node.js (I've tinkered over the years since it was launched, and we provide some support for it in our products, but never actually built anything with it). I went looking for a library to deal with logins, authentication, password resets, etc. Normal stuff that most web frameworks have some solutions for.

I found a package on npm that sounded like it did everything I wanted (plus a few extra things, but I figured I could ignore those). It took longer than I expected to install...so, I did a little digging. It had installed over 53,000 files, and the resulting directory was 110 MB in size!

I was absolutely flabbergasted. I couldn't believe installing one package, for something seemingly simple, could balloon up that large. I won't name names, as I did a little more poking around, and realized that most npm installations pull in thousands of files via automatic dependency resolution, though this one was a particularly egregious example. I've gotten to where I only install stuff via npm when I'm on a free connection; I normally work on mobile broadband, which is very expensive (and adds up to almost $300/month even before I started playing with npm).

Now, to be fair, it was pulling in a web framework...maybe Express or Hapi, I don't remember which, and all of its dependencies, so it was actually a lot more than just the login module. The kind of annoying bit was I already had a global installation of both of those frameworks from following tutorials, but it still seemed to insist on pulling in its own preferred versions of stuff, and putting them into the project directory.

I come from the Perl world, where if you don't spend at least half your time looking for and evaluating libraries before you start writing code, you're not being very productive. I'm, frankly, overwhelmed by how big and unfiltered the npm ecosystem is. I've found myself relieved to start tinkering with more "all in one" libraries and frameworks, because I don't have the time or knowledge to evaluate libs on my own. I ordinarily prefer a more a la carte approach, where you just pull in what you need, and so big libraries and frameworks don't fit that. But, I can't make sense out of the ecosystem without some guidance. There are over 70,000 npm packages! Curation really has turned out to be one of the big problems in computer science.
AABTime brings time into the hands of the world
I don't understand why I have to be permanently lowering my risk exposure. If Trump wins the election, the market will tank. Everyone knows this so lets say a 20% risk of him winning thus causing a 40% drop is currently priced in - the market right now is ~8% lower because of the risk of a Trump presidency. I am not willing to expose myself to that risk so just yesterday I moved my 401k out of the market. If Trump loses, the market will probably pop up but I am willing to forgo that gain to not expose myself to the downside.

The important point I haven't seen mentioned is that the money you put in the market should not be needed for 10 years. Not money you plan to buy a house in about 5 years, or maybe use to get married about 10 years from now. From 1929 to 1933 the DJIA went down 88% before starting to recover. Ten years is really too short a time horizon, you should have a 20 year perspective or longer. If you had invested the day before the 1929 crash and kept your money in the whole time you would not have broken even, adjusting for inflation, until 1957 - 28 years later.
I think the species has much, much longer, but our civilization?... we're pretty much dooming that. In a few decades the options will be, "scientific miracle" or, "Slow decline".

That assumes we don't blow up as a species form the conflict which arises as the climate shifts... something we're already seeing a bit of in North Africa for example.
If someone is able to steal my private key file, then they have probably compromised my computer and could just as well install a keylogger.
Getting Started with VMware Admiral Container Service on Photon OS
Annual salaries come from our weird convention of defining years as groups of 365 days. A software engineer can earn $100k/year but also $1m/decade. Neither is comparable to a company being worth $xbillion because you're comparing stocks with flows.
The difficulty of managing ssh keys can be partially mitigated by establishing a PKI and handing out certificates to everyone, then deriving an ssh key from those. OpenSSH supports using a crl, so if you have a trusted infrastructure management of that should be fairly straightforward.
Why would you purposefully try to fail at a proficiency test? This is like wondering why a toddler doesn't continue to throw a fit when it doesn't get it's way. You don't do it it because it makes everyone around you think you're an incompetent fool, and they will actively get in your way at every step. It's social suicide.
Which can (and should) be stored in a way that requires a password to access (ssh supports this, as do most other certificate systems).
This is the clever thing about asymmetric encryption.

You can prove that you know a particular secret (your private key) without actually divulging what it is.
Apparently the typo has been fixed now, but I still find it confusing to parse --- I parsed it as "It is too late[something unclear], "(giant people) expected" and wondered what exactly giant people had to do with Twitter.

Perhaps "It is too late for it to become the giant which/that people expected" can break the natural inclination to parse "giant people" as one noun.
You're looking for Lumen[0] (formerly, Chilling Effects)

From Wikipedia[1]:

> The archive got a boost when Google began submitting its notices in 2002. Google began to do so in response to the publicity generated when the Church of Scientology convinced Google to remove references and links to an anti-Scientology web site, Operation Clambake, in April 2002.

[0] https://lumendatabase.org/

[1] https://en.wikipedia.org/wiki/Lumen_(website)