skysight-inc/HackerNews huggingface dataset:
Yahoo shouldn't be doing the attribution, it's a conflict of interest[0].

At the moment the standard for incident disclosure is "eventually disclose the leak to users", which some companies, like Yahoo in this case, really stretch.

I'd like to see the standard become engaging an outside firm and have them release as much information as possible so that the techniques used, information stolen, potential attribution etc. can be reviewed and benefit everybody.

The statement so far from Yahoo benefit only Yahoo (specifically Yahoo management)

The stolen Yahoo accounts were listed on a DNM market a few months ago. That is how we found out about it (I suspect that is also how Yahoo found out about it). That is one of the only data points we have on the outside and it points away from the attack being state-sponsored.

[0] Some would argue that the research / attribution firms are only a little less conflicted since they sell products that aim to prevent the same state-sponsored attack.
Quake 1 did that too
How do you figure every Machine Learning job will be senior-level?
Facebook and Its Lawyers Slammed by Judge in Terrorism Suits
We name different projects after Greek Gods + acronyms. The names can be pretty fun.
Horsepower ftw
Amtrak Adopts New Security Practices
Passion may change with the wind and obligations may override passion. IMHO, it's our purpose that keeps most of us going. To me, passion sounds more theoretical than practical :)
And in some countries, Facebook and "the Internet" are essentially synonyms.
Babel has a plugin architecture. MS could implement the TS extensions as a Babel plugin, and it would integrate with any other Babel plugin. That's what facebook did.
One wonders whether this was an intentional filter to avoid scans of the video that shouldn't count as watching, or just a bug – some deeply nested, vestigial filter that everybody forgot about until some random engineer stumbled across it...
Facebook and Intel built killer AIs that dominated “Doom” video game competition
Yeah the police heard that people were planning to incite a riot and decided to stop it in its tracks by..... inciting an actual riot.

Great police work validated.
I don't think they were proposing using J per time as a unit for power, just for power instead of using W * time.
It's called affine swim, and is present in some PC games too. I first noticed it in Half Life when I was messing around with the software renderer.
There is the occasional ship stranded in Charleston SC and there are local church groups who will put together a food & supply boat to go out there for the crews. They can't leave the ship as they don't have visas. USCIS doesn't really want them to anyway, as there's no guarantee they'll return to the ship or their home country.
You can meet those people if you move out to the coasts after college. It's a long freakin' way from Kansas to California and if your goal is to have as little tuition and/or debt as possible to begin with, you're pretty much forced to go into whatever state you grew up in the U.S.

I'm from the same state, and I chose the four year traditional route and it worked for me since I had lots of scholarships. If I didn't have as many, I may have started at the Community College instead.

Additionally, your point about 1st tier versus 2nd tier is kind of off when most of the time people go to community college to get their general ed. requirements out of the way and then transfer to the larger Uni for the specialized classes. If you're majoring in C.S. and you want to take Physics I,II, Intro level English, and programming I/II that's going to be nearly the same no matter which Uni you're at.
Also relevant, this free and very accessible book from O'Reilly http://www.oreilly.com/openbook/osfreesoft/book that explains the history and caveats of most open source licenses.
That would be the traditional embargo. This article concerns conditional embargoes.
This is applied deep learning. There's a ton of jobs available for taking someone's library on GitHub and applying it to a bunch of data. But other than DeepMind, FAIR, Google Brain, Open AI, Vicarious, and Microsoft Research, who is hiring for theoretical machine learning? That's what I'm interested in — developing better algorithms that eventually approach AGI.
I feel like you're talking over me rather than trying to understand what I say.

But stay safe and have a good life anyway, traveler.
It is within the power of a province to credit 100% of provincial taxes back, although I wouldn't want to try that if I was governing a "have not" province, especially if part of the deal was cutting essential services subsidized by transfer payments.
The problem is less commercial growing and breeding and more that US consumers have no notion of seasonality, and will happily buy asparagus in September and tomatoes in March. It doesn't help that Italy has a longer tomato growing season than most of the US.
It was a little high for a while when I wasn't exercising. But then it went normal again fast with the return of healthy habits. I would like to order some of the nfc glucose monitors from Germany that stay on the arm a week at a time and map my blood sugar to get a better view. I really hate the needle for the regular kind.
Can you help me understand how it replaces the password entirely? What if I lost my phone, or just deleted their app? Does it basically fall back to letting you click a link in your email to approve logging in? Or, SMS, or...?
I've been skeptical of it.

Fortunately iCloud Keychain means my current Y! password is random as hell and not reused anywhere, but I'm slightly nervous wondering what the hell password I had in 2014 or 2012 or whenever this stupid leak happened. :/
>"But the problem creep comes in the many, many cases when police don't have a threshold for how long and wide that demographic descriptor should be used. Within 1000 feet of the reported attack? A mile? Why not 2 miles? And why not 2 days or even 2 weeks after the incident, just to be safe?"

The big difference being the cumulative nature of peoples' experiences. If the same police are repeatedly exposed to a disproportionate amount of crimes being performed-by(or accused) by a specific group, then it would only be logical for them to naturally stop/search that specific group more often. It's a game of numbers, and I see no reason for it to be demonized as much as it has been as some "systemic oppression". As long as the police don't falsify reports that exaggerate those numbers, and behave in a civil manner towards complying citizens, then it should be "okay".

Personally, I would say that profiling by race and gender alone is way to wide of a search-criterion. For all we know, the police are actually using other side-properties of the individuals in order to profile them more specifically, yet on the surface to others it appears crass and simply based off crude properties such as race/gender. I.e. it may even be a layered approach where they "back-off" when they hit a dead-end in their search through the "good indicators for being a criminal or have just committed a crime".

E.g.: Broken tail-light -> hiding face behind hoodie -> oh, well spoken individual that just lost a family-member, must be fine.

Or: Broken tail-light -> hiding face behind hoodie -> hmm's and haw's when asked to leave vehicle for DUI test -> acting aggressive -> etc.
Show HN: Ng-seed – Simple Angular 2 seed project
> The fruit and veg tend to be larger

The natural size of the fruit/vegetables here are exaggerated when you go to a normal supermarket. Chain supermarkets only sell visually appealing fruits and vegetables. Throwbacks go into juices, restaurants, and B-grade supermarkets, where you can buy a 5 kilo bag of "misshaped" carrots for a few hundred yen.

The taste also seems to be standardized. For example, I prefer the carrots you can buy in the US to those you find in Japan. Japanese supermarket variety carrots have a much milder flavor than those I've had in other countries.

Standardization is a key word in Japanese society ensuring a certain type of quality at a cost.
Why don't we just regulate any Internet-connected device? When you purchase one, you register your name and address and are given the IP address in return.

Then, we can simply look up the physical address of the IP address holder.
The reason they are not profitable is because generally antibiotics are only taken for short time periods. Additionally, it is almost certain that new antibiotics will be obsoleted by the emergence of resistance. Spending hundreds of millions of dollars on bringing a drug to market is already a risky proposition, even more so when your drug will be consumed in low quantities and may be useless before the patent even expires.
The important part to mention is that the expected completion time of your project is 1-2 months. I have extensive ML experience (no deep learning though), and I think this project would take me at least 2 months to do well. This is a long time, especially for a beginner side-project. It is good to tell people to do side-projects, but suggesting projects like this is de-motivating for beginners. If someone on your team (who is presumably an expert already) does this side-project I'd be very interested in the results, and on how long it took them - it would make a good blog post. Your proposed beginner side-project should be less complicated than a published paper with 200 citations (the paper didn't use a nn).
Good point about github pull requests, I've made that argument as well recently. It's somewhat akin to Pieter's point about MPL. Github gets criticized for the phenomenon of 'POSS' (post-open-source software, https://en.wikipedia.org/wiki/Post_Open_Source), but there's a sense in which the Github workflow has provided greater clarity around licensing of diverse-contributor projects that are sufficiently explicit about outbound licensing.
Ask HN: How to convert free users to paid users?
I built a side project (a chrome extension targeting a specific group) and in the first week have about 140 users signed up. Awesome right?

The problem is, that all of the users signed up for the free plan of my service (I have a free tier with limitations and a paid plans without limitations)

I've gotten great feedback from users on the app itself, and all the metrics I record from the app indicate that people are using it, but I guess I am struggling how to convince them to pay for the upgraded version.

Have any if you encountered this issue and overcome? Are there any strategies that HN users could recommend? I've tried offering coupons, email users directly (the Hi I'm blah, founder of blah... Type emails) but with limited success.
Ask HN: Alternatives for gvpr
I've found Graphviz gvpr to be very useful for programmatically generating graph visualizations. For example if I'm creating a visualization for a graph algorithm, and want to show each step of the algorithm as an iteration of the graph mutated from the previous state, gvpr makes it pretty easy to. This makes it very nice to make changes earlier in the algorithm (such as visual style) and have them propagated through all the steps. However, the language is ancient and it's easy to imagine a lot of additional features in a tool like this. Are there any alternatives in this space?
No, it's not. Passion is the only thing that gives us real purpose. Without purpose, you might as well be dead.
But you can still be nagged if someone finds your phone number.
The support point is well made, but IBM isn't doing that for free: you're paying them enough that they're eager and able to do so. I'd wager that EnterpriseDB would do the same if you threw sufficient money at them to fix a PostgreSQL installation.
QVCtv
This is not necessarily that surprising. Hinton's 'dark knowledge' (not cited in the paper) already showed that a remarkable amount of information is hidden in the classification probabilities emitted by a model, and that one neural net can learn a lot from and reverse-engineer another neural net given just its precise predictions.
"Where's Dionysus' Project Manager?"

"In a bar, somewhere.."
HAProxy is exceptionally good in this regard.
Pinch2Zoom is an ugly hack for an issue that remains unaddressed
Google open sources image captioning model in TensorFlow
Entirely likely it's not 500m, for sure, but i would not be surprised if it's still in the hundred million active email accounts. Lot of elderly folks who got hooked on a yahoo email account, and just won't give it up. I can say based on consumers emails I've seen in some of the systems I've managed, yahoo still clocks in as a pretty solid 15-20% of email addresses of active users, which isn't a small figure (gmail is of course higher, and major isp's round the bases).
Idk ive been assuming the payouts were bad given what I read online, but I talk to some lyft drivers and they tell me about their 80-100% cut and it seems like a decent gig
So you are saying that the FDA is never wrong and that its activities need no public oversight? I can see no other reason for allowing them uncontested access to spin their "signals".

If they were interested in "refusing to play the game of yellow journalism" they would not pre-announce their activities at all.

And are you really saying that Scientific American is "an organization hell bent on bashing largely agreed upon scientific information"?
YC will invest in your company, and part of that money you should be able to use to reasonably live in the area.
This would be the end of any hope of privacy on the internet.
This is exactly what they were trying to do in the San Bernadino case with the iPhone. They were trying to set a precedent using an 'indefensible' case. He was a terrorist! We should stop terrorism! It was never about that specific iPhone. Same thing here. If they get to use this technology here what's to stop them doing it in other cases?
Absolutely. It's a great sign.
>Problem citing a 1978 paper on coal power plant emissions is the emissions controls that have been added over the last 40 years. And of course the ancient plants that have been closed down.

The transuranic elements in coal will either by emitted through the stack or kept in unmonitored piles of waste which might leach not water supplies. The reason there likely isn't much research into doses from radiation from coal plants is that it is the very least of the problems with using coal as an energy source. The deaths from air pollution alone will be orders of magnitude greater than any possible deaths from radiation exposure.

>... Bonus, coal is going away and soon[1].

Well I guess that depends on how one defines "soon". Hopefully someday coal will be priced to cover its externalities since stopping the use of coal would literally save millions of lives. Unfortunately that hasn't happened yet - whether the use of coal ends soon enough to stop environmental catastrophe isn't clear yet. Currently coal provides about 40% of world power and it is actually still slowly increasing:

>...With government policies and incentives promoting the use of nonfossil energy sources in many countries, renewable energy is the world’s fastest-growing source of energy, at an average rate of 2.6%/year, while nuclear energy use increases by 2.3%/year, and natural gas use increases by 1.9%/year (Figure 1-5). Coal is the world’s slowest growing form of energy in the Reference case, at an average rate of 0.6%/year (compared with an average increase of 1.4%/year in total world energy demand).

http://www.eia.gov/forecasts/ieo/world.cfm
Merck followed the purchase with firing a large chunk of Cubist's researchers. It's more likely that they purchased Cubist for Dapto, a proven winner and billion dollar drug, and maybe for their pipeline. I wouldn't hold my breath for Merck to follow through on the research beyond trawling through whatever Cubist had in development already.
Does not appear that SSL Labs (https://www.ssllabs.com/ssltest) tests for this exploit (CVE-2016-6304) yet. Anybody have instruction on how to test your server?
Here is my bookmarks folder for corporate hacks:

http://www.rollingstone.com/feature/the-geeks-on-the-frontli...

http://www.vanityfair.com/news/2013/07/new-cyberwar-victims-...

https://www.technologyreview.com/s/507971/welcome-to-the-mal...

http://www.nytimes.com/2013/01/31/technology/chinese-hackers...

http://www.vanityfair.com/news/2011/09/chinese-hacking-20110...

http://www.bloomberg.com/news/articles/2011-07-20/cyber-weap...

http://fortune.com/sony-hack-part-1/

http://fortune.com/sony-hack-part-two/

http://fortune.com/sony-hack-final-part/

http://www.theverge.com/2015/1/21/7861645/finfisher-spyware-...

http://www.bloomberg.com/news/articles/2014-03-13/target-mis...

http://foreignpolicy.com/2013/11/19/stuxnets-secret-twin/

http://www.cbsnews.com/news/60-minutes-great-brain-robbery-c...

http://www.wsj.com/articles/u-s-steel-accuses-china-of-hacki...

http://www.vanityfair.com/news/2011/09/chinese-hacking-20110...

http://www.vanityfair.com/news/2011/09/operation-shady-rat-2...
I don't think average watch time is a particularly useful metric, because no matter how they count views, there's some kind of arbitrary cutoff. If they count a view as soon as the player finishes loading, they'll include a whole bunch of people who didn't intend to watch the video, and in fact only "watched" a few milliseconds of it before bouncing. So that will drag the metric down artificially. I bet if they count views as soon as the video starts playing, they could drag down average watch time by improving player load time, because they'd count more unintentional "views" of very short duration.

I hope/assume this is part of a suite of metrics that they provide to advertisers, so you can understand it in the context of other things like video completion rate or counts of views that reach X% through the video.
Shudder.
You have to realize that 1kWh is a lot of energy. Imagine being hit (in a world without an atmosphere) by a 60 pound suitcase falling out of an airliner flying at 45,000 feet. Same amount of energy as that battery pack. (Alternatively: the most powerful air conditioner you can buy running full blast for 30 minutes. Incidentally, that battery pack has as much energy as 100mL of gasoline, which is why gasoline-powered cars are so popular.)

When you put a lot of energy in a small space and release at all at once, it's called a bomb. Li ion batteries are small bombs that can be used to power electrical devices.

Some chemistries are safer than others, like A123 cells. The market did not care about safety and they went bankrupt. Energy density is king.
I never implied that a system in that network was the origin of the traffic, but if a traceroute ends there then obviously SOMETHING at that location is involved, knowingly or not.

A search warrant leading to a malware infected machine is acceptable in my eyes. Again, tying traffic to a location is fine, as long as the correlation ends at the computer that originally appears to be the source of the traffic (even if it ultimately isn't) is all that is targeted until evidence can determine the individual behind it.
Yeah, this
Show HN: Income Reporters – Tracking bloggers who post their income reports
What do you mean by system?
The key to batteries is being able to use the stored energy. Bonus points if you can add energy and get it back later.
Hackathons and Why You Should Attend Them
I should probably say that I was being extremely sarcastic, because this sort of thing doesn't come off well on the Internet :)
Keysafe beta release
This is probably the most gorgeous article I've seen from Quartz yet. I am deeply amazed.
In terms of your fast food analogy: the study of molecular gastronomy could be used for making addictive food but can also be used to make breakthroughs in high end cuisine.

There's no reason why GMO can't be used to make good produce even better.
I shipped my stuff from Beijing to LA a month and a half ago, without seeing it on this side yet (takes 1-2 months). Hoping it is not stuck on one of these boats!
> The deal was this: NPR, along with a select group of media outlets, would get a briefing about an upcoming announcement by the U.S. Food and Drug Administration a day before anyone else. But in exchange for the scoop, NPR would have to abandon its reportorial independence. The FDA would dictate whom NPR's reporter could and couldn't interview.

If I was an editor, that deal would have been a much more interesting story than whatever they were explicitly trying to report.
just guessing, it's a standardized way to declare the driven distence, given all the variables.. such as: up hill, down hill, low/high rolling resistance surface?
A somewhat similar end result with my college roommate... he move home to be with family and his world seemed to shrink. We lost touch as well.
Eggs are routinely eaten raw in the US as well, and pose a negligible risk of salmonella.

Japan breeds special chickens for raw consumption; no matter how you raise them, ordinary chickens --- including those eaten cooked in Japan --- are nasty animals that will make you sick if not handled properly.

Even in ordinary chickens, intact whole muscles should be internally sterile (it's the skin that's the problem on a trimmed chicken), so I wonder if part of the deal with getting a license to serve chicken tartare or sashimi in Japan is that there's a scald step or something to clear the surface bacteria.

I don't, like, know, or anything. I just like talking about chicken.
It's an air conditioner in reverse. You run your AC at 2kWh (or so) and you've heated the outside environment by more than 2kWh; otherwise your house wouldn't be cold, energy and heat don't magically appear or disappear.
Airbnb raises another $555M
Me personally? Buying local food supports the local economy, providing some support for a local food supply. It's a little bit crazy, i know, but if something weird happened, at least some food could be sourced locally. Most farmland around me tends to get paved. So supporting local farmers helps a bit with wildlife habitat and gives rain a place to soak back into the aquifer. I can talk with farmers about what they spray on their food. Finally getting stuff right when its in season tastes really good. Sweet corn from the farmers market or the side of the road is just unreal about 1 week of the year. I can never quite catch that in the grocery store.
Thanks for the honest feedback.

> 1. the license

I am pretty convinced that this is a major issue. I am looking for a solution that would allow unrestricted open source use while restricting closed source use. For example, freely combine with a BSD licensed open source project without imposing any restrictions on it (GPL), but disallow combining with a closed source project (unless a commercial license is used).

I am wondering if such a license (or license strategy) already exists.

> 2. windows

Ok, I hear you there :) This will sound weird, but I do not even consider myself a Windows developer anymore (despite being an ex-MSFT and writing Windows kernel mode drivers). I am writing to you from a Macbook Pro and I make a living these days writing Mac and iOS apps!
As person who has used github on totally lousy connections in remote parts of the world, it faired far better than most Isomorphic web apps. People in Nepal can use github to actually get work done. Most current generation web apps won't even load.
The big difference being the cumulative nature of peoples' experiences.

Your post focused on the cumulative nature of the police experience, but completely neglected the cumulative nature of the minority's experience. Therefore I downvoted you.
I've also been addicted to reading bloggers monthly income reports but could never find a central location for me to store any of them. I know last year a fellow Redditor developed a similar website but it seems to be down ... so I thought I'd take a couple weeks to put this together.

What are your thoughts on this project so far?
Or, you know, save millions of people from malnutrition.
Church used to post obsessively on AutoAdmit under the name "pensive" and have lengthy conversations with sockpuppet accounts.

Draw your own conclusions.