skysight-inc/HackerNews huggingface dataset:
A state sponsored attacker has some (easy) possibilities that are normally out of the league of a normal attacker.

Like showing up on the doorstep of a CA and asking them to issue forged SSL certificates.

This was relevant for the pinning bug that was just fixed in Firefox 49: normal users shouldn't care about it, but it's very dangerous for Tor users.
by that rationale, Apache httpd would have stayed Apache httpd, and we wouldn't have gotten nginx.
I use github every day for professional and personal projects, and typically like what they've done, but Sourceforge.net was the github of the early 2000's, where almost every developer had an account and where you could get free development and distribution tools for your project. Look at what it is now (or was before it was re-opened a few months ago.) People's open source projects were being leveraged to push malware on unsuspecting users. We might not think it's so great to have all this centralized code storage in a few more years when the new hotness replaces github and everyone's zombie products are being used maliciously again.
Very interesting point. This suggests to me that Yahoo has been sitting on this for quite some time and only revealed it when their hand was forced...
Originally posted as part of discussion of [0].

[0]: https://medium.com/@Fr0z3n/vr-game-development-is-not-a-groc...
Limited Edition T-shirt only online sell for U.S.A
It's fascinating watching the carnage on mls now, with the 15% tax in place. No one can sell their houses now. And everyone seems to have a story about holding an open house that no one attends. The money is just gone.

It's just like the market collapse back in the late 80's when interest rates climbed into the double-digits; no discretionary seller wants to lower their price from $1.3 million when that was a feasible offer 2 months ago, but no one wants (or rather no one is left) to offer that price. The market just seizes and eventually non-discretionary sellers are left to define the market.
> I like JavaScript as it is, without types on every line of code.

Types are inferred for the most part. Typically, you have to annotate less than a quarter to make your project fully typed. I have about 7-10 types per 100 lines in my current project and I do use "noImplicitAny" and "strictNullChecks".

Most of those types are for fields and function/method signatures. You probably might want to document those types either way. Type annotations are a lot nicer for this than JSDoc comments.
You might want to try Hexo (https://hexo.io/) or Wintersmith (http://wintersmith.io/). I use Hexo for my personal website and have really enjoyed it.

I tried Jekyll before, but between Ruby, some bugs and template choice overload I dropped it. Moved to Hexo a few months ago and built a couple projects with it. It's worked great for writing but also building a reviews website.
The world's largest matrilineal society, where women rule
Just to say something eye witness reports for race and any other characteristics are horribly inaccurate.

There are more than enough documented cases of rape, assault and other crime in which the victim could not identify the perpetrator with any degree of certainty.

Profiling is an important tool in law enforcement but it works when it's built on proper evidence and statistical models not sketchy witness reports.
So covering up a known in-progress security breach is standard procedure? Instead of telling your users to change their passwords and so on?

Personally, I demand criminal investigation and at least a $1000 fine per account breached.
I've worked on a lot of big projects with both dynamic and static languages. I think what a lot of people that are used to static languages don't realize is that dynamic langauge users typically live inside of some kind of repl. The repl gives you immediate access to the thing returned and lets you inspect it and play with it. This serves the same purpose, albeit in a different way, as the IDE for a langauge like java or c#.
Learning this is like when I learned that the Sony PSP couldn't clip triangles that were larger than the view frustum when rendering. I was making a hack-and-slash dungeon game for a homebrew contest when I figured that out and had to find software clipping code fast, so that big pieces of the walls and floor wouldn't disappear when you got too close. It ended up slowing my game down, and if I knew about that limitation I would have engineered around it from the start. I ended up breaking up large triangles and keeping everything stored in an octree.

After that, I started noticing subtle clipping issues in a few games including Daxter.

I would have never guessed that any 3D video game console didn't have a Z-Buffer, including a relic like the PSX.
This is what I am missing from Karabiner Elements. Did you find a workaround?
Years ago I worked at Demon Internet and we tried to give every dial up user a piece of webspace - just a disk always connected. Almost no one ever used them.

I did. That was one of the best features of Demon at the time, when 10MB of Web space could cost you £100+ per year :-) Thanks for your part in making it work!
> I don't think many blacks care of being a "small minority" on a posh white neighborhood...

We do. Besides what a sibling has already mentioned regarding some small cultural difficulties, there's the whole "police killing us all the time" thing which is much less likely to happen if you're in an area where being black doesn't make you stand out
a) Big US enterprises are under attack from state-sponsored actors on a daily basis, so it's not that weird. It's not like the NSA weren't caught with their hands in the cookie jar either.

b) If you name the state you think is behind it, you better be ready for the diplomatic repercussions between the US government and the rogue state, as well as potentially stopping doing business in that state (see Google and China)
Those people probably have static content sites with lots of js on their mind when they say that, no? Ads, tracking code, etc....
Typescript sucks, but luckily Javascript is so flexible that we can keep butt badgers like you around :)
Myth and Reason on the Mexican Border
hmm 14.5 billion, 270 million in fees. Math isn't hard here.
Tons of people still use it and it's being very actively developed. Check out the GitHub: https://github.com/textmate/textmate

It's constantly being updated.
If we're talking startups, then the securities law you're thinking about doesn't apply. These are private companies.
The Economist – Tibet: The plateau, unpacified
Anyone happen to know if this was the largest hack in history?
This Bluetooth Dongle Gives Screens the Smarts to Know You're There
> Yahoo has zero value as a web property

What!? Surely you're being flippant. Alexa currently ranks Yahoo.com as #5 worldwide and in the United States. NUMBER 5! How anyone could think that has zero value makes no sense to me.
A few more examples of botched attempts at IP-based raids:

http://arstechnica.com/tech-policy/2011/04/fbi-child-porn-ra...

The one I'm familiar with is the Sarasota, FL incident, where a married couple was raided in the middle of the night in response to alleged child pornography. Their unit was in a condominium, practically on the edge of Sarasota bay, where various boats moor and dock. After further investigation, it was discovered that the traffic had originated from some guy in a boat using a high gain antenna. If I remember correctly, he had cracked their WEP key and illegally accessed their network to obtain nasty images, lots of them. The insecurity of WEP has been known about for a long time, presumably by LE too.

It is conjecture on my part, but a few things come to mind regarding alternative methods of investigation that may have avoided this. 1. Contact the ISP first (in this case I think it may have been Verizon). I remember Verizon having the ability to remotely reset router passwords, which possibly suggests the ability to remotely view associated client data, e.g. MAC addresses and hostnames and maybe even OS. This may have provided valuable clues. 2. Note the protocol used by the wireless router. 3. Wardrive a bit. 4. Maybe check for logs of any accounts the boat guy logged into while on their network.

Regardless, the raid was botched and pretty traumatic for the couple, considering they were operating a legal AP probably secured with what they thought was adequate encryption. At the time of this event, WEP was standard default, straight from the ISP. They'd done nothing wrong.

More info: http://www.heraldtribune.com/news/20110131/wireless-router-h...
would love to hear more about your experiences and how your diet influences 'good' and 'bad' choices to stay in remission or go into in the first place.
That is good to know. Thx.
I went through both of those busts, and had (a small amount) of stock during the first one. That's when I learned never to buy individual stocks, to do dollar-cost averaging (with a fixed amount every paycheck), and to not pay attention to short-term returns.

Another way to look at those two busts: "hey, the market's on sale right now, the fixed amount I put in buys more shares right now".
Google just pumped a bunch of money into Airbnb at a $30B valuation
There is nothing inherently discriminatory in questioning, the discrimination can creep when you build the profile not when apply it.

By definition every investigation technique is designed to be discriminatory in the proper sense of the word since you discriminate using the evidence you have so far.
This is apologism. I expect an expensive organization, that I pay for, to make their the case to the public without dirty tricks and intimidation. And I expect the news sources that I am intelligent enough to pick to investigate and report with integrity. I see plenty of fair, loud, and clear venues the FDA could have used.
I don't get this. Most of the known refactorings can't be easily implemented by IDEs so you're left with the trivial ones like renaming or moving things.

Static types won't help you refactor a monster class into a structure of arrays. It won't refactor your callback hell into coroutines. It won't refactor your "one-at-a-time" algorithm into batches. Yet these all yield more agility and performance.

The thing is, I usually have so much less code when throwing static types out the window that refactorings become a non-issue. I get away with basic Emacs macros and unix tools.
You should take a look at Kaggle.com.

There are lots of interesting problems, but what really was enlightening to me, was to look at the solved contests, and see what the winning solution implemented.

http://blog.kaggle.com/category/winners-interviews/
Can anyone answer what DevOps actually is? Like in practice? Every single definition I saw is just buzzwords, and inconsistent at that.
Maybe you are NSA and you say "All your data are belong to US", as discovered by Snowden.
Ten tips for working with Angular
Yahoo currently is clocking around 900M - 1B monthly uniques.

Consider that third-party tracking still places Yahoo as one of the top trafficked websites in the world, with only Google, Baidu, and Facebook higher.

Full disclosure: I work for Yahoo.
How to Get a Job in Deep Learning
A great many things have changed in recent decades that create a situation that never before existed. We have an unprecedented level of human population. For the first time in the history of the human race, more people live in cities than in rural settings, which means increased density and increased exposure. We use antibiotics on livestock and most humans take them fairly routinely.

When antibiotics were introduced, it was heralded as the end of disease. Now, not that many decades later, we are dealing with super bugs.

I have read research on how to effectively reverse antibiotic resistance. I think this is a problem we can find solutions for in terms of societal level changes to reduce this issue. But, for the time being, you are screwed if you get one of these and my big concern is that this may be solved by having enough billions of people die so as to serve as a natural means to reduce population densities and interrupt the path we are on currently. This would majorly suck, even if you are one of the lucky survivors, because it would destroy a lot of things we currently take for granted, among other things.
You wouldn't steal the model per se, but you could uses this technique to generate some nice training data.

Of course, model providers could just as easily have some sort of protection against this, similar to what's done with "trap streets" on maps.
The computer industry is the only industry that is more fashion-driven than women's fashion. -- Larry Ellison

These cycles come and go. Sometimes static typing is hot, sometimes dynamic typing is hot. Best bet for pragmatic people is to figure out what works for you and run with it.
Hanjin doesn't own the goods; they're just transporting them. The owners of the goods are also by now creditors of the bankrupt company (for late fees if nothing else). That's why it's a snarl.
Hey! That's our company's flagship laptop in the wild! https://system76.com/laptops/bonobo
To add to this, the "walking in place" animation happens when Mario's position + velocity would end up out of bounds, which the game doesn't generally permit. When the player turns and allows the speed to drop, the motion will take Mario to a valid position, and he will zoom until he gets stuck again.
These kind of issues would be a lot simpler if people were able to use Bayes' law to actually estimate how likely someone is guilty.

There have been way to many discussions with one side claiming using certain kinds of evidence is unethical, and another side claiming the evidence does have some statistical power.

As far as I'm concerned most of those issues would be resolved if people actually cared to check they had a probable cause before doing anything, most objectionably evidence fails that test, and if it doesn't it shouldn't be ignored.
By 'Object-Oriented', I'm assuming you mean with classes? Since most (if not all?) variable instances in Python are object, then you will always be at some level working with 'Object-Oriented' code. However, you don't necessarily have to write in an 'object-oriented' style.

Some of the typical arguments for classes are:

* Inheritance
* Polymorphism
* Encapsulation of state with methods
* Information hiding
* Namespace

With python you can't have information hiding easily (no "private" members).

Also with python, since it uses duck-typing, you don't necessarily need classes to have polymorphic-like behavior.

Python doesn't have a this variable, like C++, and all class methods require the beginning variable to be an instance of the object. So you could implement the same functions as simply a set of module functions that expect their first argument to have certain attributes.

You do have inheritance, which when designing a "framework" can result in less code for your end users. However, you can do similar things with function decorators, and composition.

Classes do provide a way to have a namespace, but so do modules, and functions.

So at the end of the day, you don't really need classes (AFAIK), but if you like that style, it is available to you. TIMTOWTDI!

A compelling reason to write code with classes is if you are integrating with another project that also uses this style.
The problem with doing it like this is that I was an inch away from replying to the very top comment that still calls the title clickbait. I had to reach the very bottom of the page to realize that was talking about a different title.
Huh. For some reason I thought cargoes had bonds that would allow them to make port and unload.

OTOH, some enterprising sailors could make some money relieving stranded ships of their contents.
Open source does not entail any responsibility to work or not work together with any pre-existing project. What you describe is more cathedral than bazaar. There are thousands of possible reasons, from architectural choices to personalities, that someone may have not chosen to work with an existing project. I will not fault them for giving me a superior result, for free (in both senses). To compare this with Microsoft in the nineties is sheer madness.
As a JS developer I see these all the time with respect to frameworks/libraries. Relay and GraphQL were both announced with high-level overviews long before being open-sourced. Angular 2 is another. It seems to be the case that such announcements are more to generate interest in the subject which then helps suss out requirements that may not have been considered by the developing team.
This seems like a really good sign. We can only hope global shipping continues to shrink until we can get down to a level of consumer purchasing that is sustainable for the ecology of the planet.
Sure, but usually the problem is the thing you're trying to sterilize won't survive either :)

There's also flaws in procedure -- was it at the required temperature long enough -- and, of course, the real world that your target is going to be exposed to when it leaves the tungsten bath -- clean rooms aren't all that clean.
Wow! Great catch! I hope resharper gets this soon
Hi HN,

this is Jakub - Founder of Estimote (YC S13).
FastCo Design did a great piece of our new product.
It's essentialy a Bluetooth beacon powered by USB.
Thanks to HDMI port it can be connected to any TV or digital display and it scans for BLE signals.

People with mobile apps broadcast these signals and can influence content of screens around.

You can read more how it works here: http://blog.estimote.com/post/150398268230/launching-estimot...

Will be more than happy to answer any questions here.
Part 2 was never finished but supposed to be text around this http://nbviewer.jupyter.org/github/syhw/DL4H/blob/master/DNN...
From USD docs: ( http://graphics.pixar.com/usd/docs/api/_usd__overview_and_pu... )

USD: What's the Point, and Why Isn't it Alembic ?

The outward-facing goal of Universal Scene Description is to take the next step in DCC application data interchange beyond what is encodable in the ground-breaking Alembic interchange package. The chief component of that step is the ability to encode, interchange, and edit entire scenes with the ability to share variation and repeated/instanced scene data across shots and sequences, by providing robust asset-level (but not restricted to asset-level) file-referencing with sparse override capabilities. Additionally, USD provides a handful of other "composition operators" and concepts that target:

Encoding asset variation and preserving the ability to switch variants late in the pipeline
Scale to scenes of unlimited complexity by deferring reading of heavy property data until it is needed (as in Alembic), and also by providing composition semantics that allow deferred (and reversible) loading and composition of arbitrary amounts of scene description without sacrificing the ability to perform robust dependency analysis between prims in a scene. (See the discussion of payloads for more information).
The USD project also developed under a high priority inward-facing mandate to simplify and unify Pixar's binary cache-based geometry package (TidScene) with its ASCII, animation and rigging scene description and composition system (Presto core). This mandate required that the advanced rigging concepts and datatypes of Presto be layerable on top of a reduced-featureset, shared (with USD) core. Given the time and resource constraints, and necessity to not massively disrupt our in-use codebase, we chose to largely retain our existing data model, while looking to Alembic as a guide for many schema decisions along the way. While it is unlikely Pixar will attempt to expand the Alembic API and core to encompass USD composition, asset resolution, and necessary plugin mechanisms, we are committed to providing a USD "file format" plugin that allows the USD core and toolset to consume and author Alembic files as if they were native USD files (obviously writing cannot always produce an equally meaningful Alembic file because composition operators cannot be represented in Alembic).
So does a renderer such as RenderMan use a baked format like Alembic or a format like USD?
No. It's just that startups often don't do it well, and most PR firms don't either, but they still take your money. YC's advice is: don't waste your money or time, and if you're going to do it, try to do it right.
Making personal attacks from throwaway accounts is not what this site is for. We detached this subthread from https://news.ycombinator.com/item?id=12557164 and marked it off-topic.
The price of the stock has little to do with how the company does it's business or what it does.

It is as much about other investors as it is about the company itself.

The motivation there is pure profit, not some higher moral purpose or justice or "make the world better" idealism.

The stock price indirectly affects the company performance, just as the company performance affects the stock price, so it's a feedback loop (or conflict?) created between the investors and the company.

Apparently, investors think that this hack won't affect yahoo's performance or stock price.

These is just my interpretation of it of course, I guess very few people (if any) actually understand all the forces at play here.
Newfoundland is mostly cliffs around the ocean.
Man - I wish I could be in here answering questions about the post but I'm on the YC World Tour and currently meeting startups in Lagos - I'm glad you all liked the post
Ehn, we're pretty segregated too. You notice a big difference in racial distributions going to different malls and bus stations, especially outside of the downtown core (at least in the nation's capital where I live). Not to mention the white/indigenous divide that is particularly prominent in our prairie provinces. Winnipeg has a literal wrong side of the tracks.
Do you have a source? Has it been mentioned that these accounts are afor sale?
It's important to not conflate static typing with OOP. If you think about static typing only in terms of OOP, of course you're not going to like it - classes are not the right abstraction for many problems.

The TypeScript compiler (which is written in TS) itself uses zero classes. There's no need to use classes to get static typing. If you're writing TS the "right way", you write the JavaScript you would have written anyway, and add type annotations to create contracts and descriptions of behavior.
It's interesting that TypeScript often gets lumped into "OOP" when a few functional projects like RxJS and Cycle use it. Are their codebases also OOP?
My understanding of how this works, mostly from reading commit messages and poking around the repo, is to add a wayland compositor/server to the aura component of chromium. Aura is the window manager, compositor, and render of ui items such as the task bar and status icons of ChromeOS. It looks like the Android portion is largely based on the same fork as ARC, with the rendering performed through Wayland. It also looks like a large number of Android APIs had to be reimplemented which may excacerbate the fragmentation problem.
I think that both schools of thought are wrong in this case and would like to propose alternatives. Number 1, it doesn't matter whether you want to call it following your passion or not, hard work and applying yourself are the most important things here.
Secondly, as it pertains to what you refer to as the bootstrap fallacy, this is beyond important for wealth creation. You have to have a low time preference in order to accumulate the capital needed to invest in whatever business you're in. You have got to be 'froogle' so to speak.
All in all, all these debates are borderline useless unless hard work and frugality are employed.
"may have" = "is likely to have", "may not have" = "is not likely to have".