skysight-inc/HackerNews huggingface dataset:
Ask HN: What are the must-read books about economics/finance?
Hey HN,

I am pursuing an engineering degree in Statistics, I hope to get into finance so I am interested in knowing what books you consider a must-read for someone who doesn't know almost anything about economics (from a philosophical point of view; positive vs normative economics) and finance in general to help them grow intellectually.

Thanks!
There's no evidence stents prolong life. The real corruption is that stent operations continue to be done in spite of doctors knowing this.
Opening a CSV with 100k rows takes about 10s for me and is pretty workable with an i7 and 16GB RAM. Selecting and editing text is almost instant.
Flickr search for Creative Commons photos will be a HUGE loss for me.

I refuse to use photos I don't have a right to use so I can jump on Flickr and get the right photo license for what I need.
It would instantly be forked and have the payment nag removed within 24 hours of it being open sourced by someone who is not willing to pay for it but still wants that nag removed. And they wouldn't be the only person to use that fork.

I doubt it would be a very good move for the author.
is McLaren public? If so, having a false PR can be slightly illegal in some jurisdictions
No. Never roll your own crypto for production. If you only know one thing about security as a programmer, then it has to be this.

But you are right that crypto algorithms aren't specifically hard to implement compared with, say, computer graphics, image processing, gui programming or whatever.

But! The big difference is that crypto is attacked by other smart people. The bugs and design flaws in your scientific computing library are not hunted down by intelligent agents to purposefully break it. If people attacked your Paint clone to the same extent they attack computer security programs, then it would become just as hard to write them correctly as it is with crypto.

There are so many kinds of ways to get it wrong that beginners don't even know about. It's an "unknown unknowns" situation.
One of the useful things with bucketing is that stuff almost always tries to optimize itself and naturally cluster at certain areas more even though there are some continuity.

That means in nature, where is some normal distribution, there is often several normal distributions that overlay each other making it look like one continuous function with a noise rather than several continuous functions with different parameters. These studies are trying to uncover just that.
These are great! I'm actually diametrically opposed to expert status in this area.

I came across this trying to figure out how these work:
https://www.youtube.com/watch?v=CJvNEzCaNwg

to try to answer some questions:
a) How hard could it be to do a DIY version vs buying one?
b) Why don't they produce larger (blackboard-sized) versions of this tablet i.e. for school settings?
c) Downsides? How much do these really last?
> Everyone speaks the same language, has a shared cultural identity;

Not that this changes your argument significantly, but there are two official languages in Finland: Swedish & Finnish.

There are many immigrants to the country, including myself, who speak neither terribly well, or at all.

While it might be true that native Finns have a shared cultural identity with the rise of immigrants, again including myself, that is not universal.

> Or maybe I should just move to Finland.

I'd recommend it. Though the darkness and brutal cold might be hard the summers do make up for it.
Snapchat is so agressive with permissions, I really wanted to try it but didn't want to install it.
I'd prefer slack, but FB and skype (or XMPP) would also work :)
Interesting to note that much of the traffic was not the standard amplification attack as you would expect.

That is, with the exception of one attack method: Preliminary analysis of the attack traffic suggests that perhaps the biggest chunk of the attack came in the form of traffic designed to look like it was generic routing encapsulation (GRE) data packets, a communication protocol used to establish a direct, point-to-point connection between network nodes. GRE lets two peers share data they wouldn’t be able to share over the public network itself.

“Seeing that much attack coming from GRE is really unusual,” Akamai’s McKeay said. “We’ve only started seeing that recently, but seeing it at this volume is very new.”
First of all, nice job! It reminds me of the only use I had for Ettercap when I was a little cheeky b..oy :) poison other people's IRC conversations. It was great fun!

> do you think it's because of the packets loss % or something else can cause that ?

Potentially, but I think a network capture on both victims would surely explain it. At some point you might be even getting some asymmetric traffic: packets from A to B go through you, but from B to A don't, until the ARP cache is poisoned again.

I'm not a coder (or a shitty one :)), so I can't infer from your code things like how often do you renew your poisoning.
People sometimes make the comparison to 3D TV, but I don't recall anyone actually wanting 3D TV other than gear geeks who buy everything to fill the existential void in their souls. Also, I don't recall demos of 3D TV making converts out of people. It was neat, but once you saw it, you figured out it wasn't going to fundamentally change how media works.

VR on the other hand: if someone hasn't already been waiting for it for decades, as soon as they yet Fruit Ninja in the Vive, they immediately demand to have it in their homes. I've been working in the VR space for almost two years now and it was just a month ago when my wife got to try Fruit Ninja that she finally understood what I've been working on. "We need this in the house" she said. "We don't have the room" I replied. Which is why my company is doing a pop-up arcade here in DC until the end of October (http://notiontheory.com/notionvr).
Learn how to fly for free (almost)
I think that one source of infection is dirty storage pots. That's what NHS Choices says, and they tend to be evidence based (although we can argue about the evidence they use).

http://www.nhs.uk/Livewell/Eyehealth/Pages/Contactlenssafety...
Turkish Engineers Build Full-Scale, Driveable BMW Transformer
relatime has also been the default on Linux for many years.
If you have a website this would be the perfect thread in which to add a link!
Didn't one of the main selling points of Go is one big static executable with no external dependencies?

What's next? Generics?
Not sure I understand. If you have to authenticate the password verifying service, you also have to authenticate the HMAC-providing service.

I like password hashing too. That's all my password validating service would do.
Two things are to be noted here:
1) Even "low rung" jobs pay a decent salary. That's the main reason why everything is so more expensive here even compared to Sweden.
2) Cleaning staff is probably the industry with the highest number of foreigners, either new refugees or EU-immigrants. So it depends on your definition of "Norwegian woman", i'd argue most of these workers were not born in Norway.
Yeah, but it's hard to get funding to do a rigorous replication of something that doesn't have an immediate commercial justification (for example legal liability or FDA requirements in drug trials). It's a big investment where the best case scenario is that you can be a little more confident in prior results. And if you can't replicate the results, it doesn't necessarily mean the original finding was wrong, it could just mean the original scientists were better than the replication scientists.

Also, among scientists who have invested the time to earn a Ph.D., there is a culture of wanting to break new ground and push humanity forward. There would have to be a strong incentive to motivate them to invest the time in replicating research for which they won't get the glory.

You would have to change the way science is funded to make research replication a required step in the modern scientific method.
I'm thinking a lot of the complexity of writing a compiler stems from the usage of inappropriate tools. I.e. I would rather kill myself than write a lexer in C (without yacc / bison), but using parser combinators it's a rather trivial task.

Similarly, annotating, transforming, folding, pattern matching on, CPS transforming etc. the produced AST is pretty trivial in a language that supports these constructs. And again, a nightmare in C.

That leaves codegen, but using the right abstractions it turns into a very manageable task as well.

Here's a compiler written in Haskell for LLVM [0].

[0] http://www.stephendiehl.com/llvm
Wouldn't it be better to focus on the reasons why there is no viable competition for this company even though the business seems to be extremely profitable?

The article links to another that lists some of the issues:
https://www.statnews.com/2016/09/09/epipen-lack-of-innovatio...

This points out (among other things) that the design is patent protected and FDA rules make it difficult to come up with other designs that don't violate the patent. It is also mentioned that the devices need to go through long and expensive regulatory process.
Basically, yeah. If we overlook everything, all that Allo offers is the Google Assistant and that's probably what they wanted - fresh set of data.
No, I actually agreed with the gist of the article. And I do think the group has brought a greedy company to task.

I was speaking to financial illiteracy, and perhaps I didn't communicate it too well.

I know costing well, and I even had a truly innovative, potential Medicaid device to aid blind people in walking unassisted by canes, or canines way back in 1995.

I am not sure how cheap an Epipen can be made at a sufficient profit for a company to either take it on as their only product, or as a horizontal or vertical market offshoot of their existing business without looking at the numbers. I strongly suspect it is far from $30 if it is to be made and sold at sufficient profit and not charity work, or a device of the Theranos/Elizabeth Holmes kind.

I was pointing at the over-simplified, short title as possibly another misleading example of what things truly cost to make to have a final price at $60 or $150 when there is more involved than cost of materials whether bought in quantity for a prototype or discounted in bulk.

Did any of the lines at the bottom of my post ring with you? I only ask, since I am an experienced senior manager with a very eclectic skill set, and I have heard them from the young to the old and experienced, and I am still amazed when I hear them.
Dutch Police Use Trained Eagles to Take Down Drones
if i understand correctly this one is relevant to certificate issuers that publish certificate revocation lists via the OCSP protocol; could be used for denial of service but not for hacking into the certificate issue, is that correct?

Also most bugs in OpenSSL seem to be during renegotiation of protocol zzzz defined by some obscure RFC that nobody really understands how to implement, is that correct? Why can't they simplify these protocols, do we really need these fancy renegotiation features?

Actually Daniel Bernstein says that over-complicating the protocols is a clever way to make sure that software infrastructure remains insecure.

https://cr.yp.to/talks/2014.10.18/slides-djb-20141018-a4.pdf
> sRGB is a colour space that is the de-facto standard for consumer electronic devices nowadays, including monitors, digital cameras, scanners, printers and handheld devices. It is also the standard colour space for images on the Internet.

Ok, does that mean that the device performs the gamma-transformation for me, and I don't need to worry about gamma?

(and if not, why not?)
A Parsimonious Rule-Based Model for Sentiment Analysis of Social Media Text [pdf]
They can't prolong life, but they can save life if applied in right time-window after the heart attack. Also they increase quality of life of the patients.
Although this can be abused, the use case is not external dependencies IMO, but rather extending systems. Think of a web server etc. Each plugin is still a static binary that is self contained, but you can load capabilities into the server in runtime.

This is not like dynamic linking hell you can get yourself into when writing C.
I'm not sure, but that sounds like it might work. The real problem is: good luck getting all hospitals in the world to agree on a rotated schedule of which antibiotics to use / not use and when.
A random brain dump prompted by this statement: "No DRY. It does not scale with CSS, just focus on better components"

All programming involves resolving a conflict between two different principles and a lot of the fiercest disagreements are between people that weight the importance of these two things differently:

1. Reducing repetition

2. Reducing dependencies and side effects

The language and it's tooling/ecosystem can affect the importance of these.

The project's complexity, rate of change and lifespan is also a factor that might push you one way or the other.

But anything that helps one of these harms the other.

Thoughts?
A bit meta, but I need this off my chest: I love how this document starts off saying "this is for react apps". IMO every discussion about CSS coding standards needs to start with context.

A lot of old CSS lore came from people who build websites. I mean those fairly uninteractive things, focus on content. Blogs, restaurants, newspapers.

Building an application that happens to use the DOM as their UI toolkit is totally different. The whole "reuse the same classes but with different content" thing that CSS classes were designed for becomes less important, and "reuse pieces of behavior" makes a lot more sense.

There's probably more domains or subdomains that warrant their own CSS best practices. But I'm totally tired of a blog designer and a react app coder fighting on HN about how the other one is doing it wrong, when really they're just solving different problems.
Are you saying that, in cases where that's not possible, you'd rather not have a program at all instead of a program with external dependencies?

Because that doesn't sound very reasonable to me, even after ignoring that plugins aren't really dependencies anyway.
Luckily I moved everything to openbsd's libressl which is /mostly/ compatible.

I wonder if this bug affects them, typically the HIGH's haven't[0]

It really feels like every other week there is a bug in OpenSSL and after following along with the libressl blog I understand why- the code is an absolute mess[1]

[0] http://undeadly.org/cgi?action=article&sid=20150319145126

[1] http://opensslrampage.org/page/49
> If farmers can get rich growing crops, there will never be a famine.

You're not considering that food has a limited shelf life, seasonal, difficult to distribute efficiently and the customers have highly variable purchasing powers. Also local production is incredibly sensitive to local environmental variation. We already produce enough food to feed nearly twice the global population, and yet plenty of people are malnourished.

I would personally suggest that the best way to prevent famines is to improve food storage and distribution methods, and have robust systems for environmental or conflict induced local famines. Though the unbalanced nature of consumer wealth is also important - it makes sense to waste 50% of your crop selling it in Europe if you can sell it for 3x as much than locally. So maybe the best thing is simply to raise the wealth of poorest people in the world?
No, they're intended to maximise utility. Profits may or may not correspond to utility, depending on the nature of the market.

And indeed, many regulations are intended to work by improving that correspondence (by internalising externalities).
Gitlab is a dying product.
Battery sneakernet? EV trucks full of charged batteries going down the interstate across the country?
Which seems pretty stable already and is now in testing?

Even if someone started a project like this they likely wouldn't be done until it gets a stable release anyway.
> Flexbox is awesome. No need for grid framework;

Yes, great, if you can ignore all the IE users. Is that what "modern" means?

I'd love to use flexbox where I work, but it's just not feasible to give up all the customers we would lose.
While there is an exam and better employment prospects may be had for those with a license, getting a license usually requires "acceptable, progressive, and verifiable work experience in the industry."[1] This often requires an engineering mentor to assess your work which usually happens if you work under a licensed engineer. Licensed engineers are hard to come by in many high tech and computer industries and with many companies strict rules on secrecy (i.e. NDAs) it can be difficult to get a licensed engineer in your field that is outside your company to assess your work.

I tried to see if there was an opportunity for an engineering mentor at my job (One of the big four) and I was unable to get anywhere. It seems that it is better for our job prospects to get a job at a prestigious/interesting company and gain experience there than try to go through the licensing process.

[1]:http://ncees.org/licensure/
Why not apply the same solution already applied to branches? Have a drop down that lists the different branches and their licenses, with it sorted such that the branches with different licenses are displayed first.
SaveIE6: Help us save the best browser
Curious to see the impact it has for Shareholders given the Verizon deal...
You have watched a lot of TV? What about things like Sons of Anarchy, the Soppranos or Oz? Or even the unfinished Profit?
I was chatting to doctor friend recently who has a masters in this area and he said that in theory yes but it would likely require the bacteria to have a reason to loose the mutation that caused the resistance in the first place so there is no guarantee.
If you want to create fuel from sun and CO2 it's cheaper to farm some oil-heavy plants and produce biofuel from them. They grow solar cells from sun and air by itself :) It's magic-level nanotech :)

http://www.afdc.energy.gov/fuels/prices.html
Have you tried "Halt and Catch Fire"?
I agree with the Flexbox and DRY principles, but it's weird to still rely on arbitrary naming conventions like SUIT when CSS modules have been around for a while now.

Naming things has always been difficult, especially in CSS where it can lead to merging/overriding/precedence issues. Not having to think about what CSS class names are either available or possibly conflicting is a benefit from CSS modules that increases productivity by an order of magnitude I've rarely seen in CSS, especially in large codebases.

You've got a button and want to call it "button" and style it using ".button"? Go ahead. It will only inherit styles if you explicitly say so. The global namespace remains healthy for each component you write.
Ecommerce website success
(Or pumped through pipes?)
Well I specifically didn't say "sterile" but rather "fairly sterile" compared to other water sources.

Edit: As a note to the pedants, of course sterile" is a binary, I used that casually to mean "less microbrial than a lot of the places where our eyes go." ;) <- right eye unfortunately hit the unsterile waters of a chlorinated pool.
A Sunken Bridge the Size of a Continent
But isn't that exactly how dynamic linking works? By loading a DLL at runtime? The only issues I've ever had with dynamic linking are at _runtime_, where XXX.dll can't be found.
AIUI this affects the code that handles the TLS extension with which a client tells the server that it supports OCSP stapling, so any server with an affected openssl version would be vulnerable.
I'm a full stack dev that can't stand JS, now i started to do UWP (xaml) app, the learning curve is a bit steep, but the UI building is SOOO much better than html/css/js and everything behaves exactly as you would expect and vertical positioning just works!
Have feedback on this post? Let @github know on Twitter.
> 'python hack-it.py' would have sufficed. If you haven't seen it, it wasn't much better than this: https://www.youtube.com/watch?v=Bmz67ErIRa4 and at least that was entertaining.

Hacker (film) was painful to watch. So much cheesyness.
As per prior stories, let's all take a knee in thanks to our political system for trying literally to criminalize research into emerging superbugs:

https://news.ycombinator.com/item?id=12444664
No need for an SSN to run a credit check.
No one in their right mind would give an SSN.
I'd recommend against marginal revolution. It's sensationalist and often wrong or confused, IME.
I'm completely neutral in this entire thing, not affiliated with anyone involved, but Leah Rowe's response to the message you linked is quite dubious to my eyes and makes me think I should take the rest of her statements with a pinch of salt.

Selectively quoting (read the full response at [1]):

"The article complains that there was no consensus among developers in the libreboot project, but this isn't actually true. Or, rather, it is true in a different way. In reality, most people in the project are neutral about the issue, or were actually supportive of the decisions taken. Leah simply decided to take the morally correct action, in exposing corruption at the FSF."

Just seems to hide behind moral rhetoric and vague statements about alleged consensus without addressing the actual issue Zammit appears to raise, which is that no one except Leah appears to (be allowed to) speak for the libreboot project on a policy level. Zammit states that Leah appears to misuse her leadership of the libreboot project for her personal views and her response (Leah simply decided to take the morally correct action, in exposing corruption at the FSF) seems to confirm that.

[1]: https://libreboot.org/gnu/
Trying to shoehorn a UI description in a procedural language is always going to be awkward.

But we could have a compilable document language with DOM-like bindings and an event loop in Go. It's a lot harder to implement than HTML + JS, though, which already provide that for free.
That seems plausible. But I was once told that ideally you shouldn't even take a shower in contacts (Not that I always followed that advice). Maybe I just had an over-cautious optometrist.
Same question. I would assume this is partially based on replicability, or doing the study over and getting the same results. Recently, there was an attempt to replicate major studies in psychology and only about 36% were replicated. I think something similar was in medicine.
If meat is expensive you can go on to a largely vegetable and plant based diet. Meat is already more expensive than tofu and beans and lentils. And thanks to the Internet, it's now easy to pick up recipes and change ones diet with food from multiple cultures that don't use extensive amounts of meat.
Because it's long and the font is small.
Change what your main branch is?

The old license is still applicable to the old code. If you're changing the license for future development and not pushing it to the main branch for some reason, it looks like you've got a new main branch.
If you can get the entire human race to match in lockstep with rotating antibiotics in and out, AND the array of antibiotics is large enough, then yes, that's exactly what would happen.

The second part is in the works, constantly. The first part, however, is proving difficult.
"universities and funding agencies [should].. stop rewarding researchers who publish copiously"

You have to look at the media as well. When was the last time you read an article about a failed experiment, ie: an hypothesis was DISPROVED? There's rare/no coverage of this yet it is an important aspect of science[1], and ties into what the OP talks about.

If we're going to improve how science is done, this is an equally important area to focus on because it's the current bias for positive results that plays a part in driving labs to produce lots of papers.

1 - https://www.elsevier.com/connect/scientists-we-want-your-neg...
Programming quantum computers using 3-D puzzles