skysight-inc/HackerNews huggingface dataset:
1. If the data in question were public, Facebook would not need to be the ones selling it. There would be a whole market of third party data aggregators.

2. If this were true, why would we need the Bill of Rights? The entire point of the Fourth Amendment, for example, is to protect citizens against unreasonable searches -- by law enforcement.

3. This would be true if the data were only shared on a need to know basis, which has not been demonstrated. Facebook allows users to give it data under one set of pretenses, and then turns around and uses/sells this data under a different set. I agree the other questions are important, but none of them would be possible if Facebook were not abusing its role.

The NSA FISA orders are getting endless complaints, and yet Verizon and others are handing this data over under a "court" order. In this case, Facebook is doing effectively the same thing, but for profit.
Weaknesses in a system are vulnerabilities. Exploits are the methods used on vulnerabilities.

A flawed TLS implementation might only be exploitable by nation states, or only be practical against high value targets. Or perhaps it's known humans are corruptible, but a transparent, auditable root CA is still better than name-your-Chinese-state-CA.

Security is a spectrum. It is not all or nothing. Sure, crypto algorithms should strive for perfect security, but a system with humans will be fallible and must be usable.
There are actually four different items linked between the two accounts:

1. Credit card used to pay the annual developer fee.

2. Test devices.

3. Bank account used to receive payments from Apple.

4. Bundle identifiers used to uniquely identify each app. (http://i.imgur.com/NljOzF4.jpg)

Even if (1) and (2) could be explained by the Dash developer helping someone else get started, (3) and (4) are more difficult to justify. Especially (4) because the bundle identifier is an arbitrary string and there's no real reason for different people to use the same one. But also (3) because it means the Dash developer was receiving payments for the apps being sold by the fraudulent account (i.e he was financially benefiting from the fraudulent activity).

Based on these factors I think it's entirely reasonable for Apple to conclude that both accounts were being controlled by the same person.
As it happens, I'm very slightly younger than you indicate. So your theory that folks roughly our age dislike it holds. It may be that folks younger than we are don't mind it — but they also don't mind riding bicycles with helmets, which is almost as mad as walking with helmets.
Don't forget sales/customer-acquisition costs! Oftentimes, things that cost >$1000 are expensive because you need to pay an expensive salesperson to convince the customer that they should part with thousands of dollars.
This issue is one of those that make it very difficult to build a single "secure chat" app that does everything for everyone.

Personally, I want an automatic, encrypted network backup of all my messages so I don't lose them if my device is lost or destroyed. But I know lots of folks around here are excited about the automatic delete thing too. It's going to be very hard to make something that all of us can be happy with.
This doesn't solve the security issue though, it just moves it to the self update mechanism.
It would be great if they went into more detail on how the 'spot the difference' system works
Is the image data publicly available?
Based on that, it sounds like the original inspiration was indeed "raw", but it was almost immediately tagged as "brutal" in English, and its admirers knowingly embraced that term. So perhaps the article oversimplifies things, but the broad strokes seem to be correct.
Morning Mindfulness
SHA1? SHA1 SHA1‽ I'd always thought that OWS had incredibly good crypto — why are they using SHA1? If it's to support relatively short hashes … I just can't even.

There's simply no excuse to choose to use SHA1 in 2016. It's not completely broken, it's probably good enough, but why not just truncate SHA2?
Who says there is an importer and not a chinese retail site or ebay seller?
> While I'm around, anyone know the keyboard shortcut to UNminimize a window?

Are you referencing when you minimize a window and want to get back to it without using the mouse or trackpad to click it from the bar? If so I have a suggestion.

Let's assume I minimized a firefox window. Now I want that back.

1. ⌘-tab (hold ⌘ to leave selectable windows open)
2. Use left/right arrow to get to firefox
3. Press down.
4. Select window to UNminimize and press enter.

This is convoluted and probably not what you are looking for but its the best I have. Would love to hear from others? Also, apologies if I misread your question.
Efficient recursive neural networks in TensorFlow (for CS224D)
Clearly you haven't been using the default settings in the latest version of NPM ;)

I can only hope the Yarn developers knew about the changes, and had a real justification for their work.

Again, I'm not saying the Yarn developers didn't have justification, I just haven't seen any yet. Love to be shown otherwise.
What's with the "no NDA required"? Who requires NDAs for their datasheets?
Those are some interesting situations, but I think they can still be handled using the 3 types I mentioned.

A Skype call is actually a good example of when not to use a data type which encapsulates 'time zone plus instance in time'. That's because there is not one but multiple time zones associated with a single instance in time - each Skype caller will have his or her own time zone. The time of the call should be treated as a pure 'instance in time' without reference to any particular time zone. When it comes to displaying the time to a particular user, you would have formatting code which takes (a) the user's time zone; (b) the user's language; (c) a format pattern; and (d) the instance in time; and returns (e) a string representation of the time for that user.

If the computer's clock is based UTC it is trivial to find the duration between two 'instants in time': it's just t2 - t1. An instant in time (what I called Type 1) is independent of any calendar system so months, leap years, time zones, etc. don't matter when calculating the duration between two Type 1 values.

However, in practice most system clocks are not based on UTC but rather Unix Time [1]. Due to leap seconds, such clocks do not always 'tick' in a monotonic way. So I accept that it is usually not trivial to accurately find the duration between two times. But the solution is not to burden the programmer with an extra type - instead, just add a method to the existing 'instant in time' class like this: t1.millisecsUntil(t2).

To find the days in any given month, a 'date in the Gregorian calendar' class (what I call Type 2) can handle that easily - just call the daysInMonth() method. Again, no need to create new type.

Easter, Islamic dates, Buddhist dates, banking days, etc. are all based on Type 2 - ie. an abstract concept of a 'day' without reference to any time zone or any particular instant in time.

[1] https://en.wikipedia.org/wiki/Unix_time
How do you decide who to sue? If your device is part of a botnet there may be thousands of owners partially responsible. Most of them are probably in different country.
> They need public and/or private organisations to pre-purchase a lot of tickets to Mars before they can outright build it themselves, or they'd need to partner with the likes of NASA.

Musk said during the presentation that they're not going to pre-sell tickets to finance development and production (the way Virgin Galactic did).
Anyone using Julia for medium and small data sets?

I have used Julia with a 50GB dataset for feature extraction while I was waiting for R to process the same dataset (10 minutes to an hour depending on the function). I actually learned some Julia while waiting for R. For what I was doing, Julia felt roughly 100 times faster (most delays under a minute).

However, I did not know about dplyr at the time and I will certainly try it in the next project. Although, I am skeptical that using fast libraries is a silver bullet since, at some point, the data will pass through some slow custom R code that I wrote myself.

I prefer to use Julia - the API feels cleaner and more manageable, I don't suffer from subtle type errors, and there is also the possibility of running things in parallel from the same repl. I also had no memory leaks -- I suffered a lot from the bloat caused by my use of R closures.

That said, the power and output quality of ggplot means that I will probably stay with R for plotting. There will also be times when CRAN has the only library that does something we need.
Comcast Fined $2.3M for Improperly Charging Customers
Just glad to see that there is no "yarn isntall" command.
You should end your first sentence with "to me." I find the truth (I'm an atheist nihilist) extremely comforting.
So I got the notice this morning that my info had been changed to this new developer story on SO. I go check, it's literally > 10 screens before a single useful piece of info appears. 70 or so open source projects I contributed to or run followed by my job experience

> "your Developer Story is the best way to share whatever it is that you take pride in. It’s your story; tell it your way."

Um, no, that's not my way. My way would be to list my professional accomplishments first and then list my open source projects just to show how much of a geek I am.
Why does everyone start taking like a professor of politics when political topics are posted?
Ask HN: Do I protect my IoT project by not doing over-the-air updates?
I'm working on a simple piece of hardware that just sends a single data point. I don't foresee many needs to change the firmware.

It seems like many of the IoT security problems step from "hijacking" from over-the-air updates, and that I can avoid this by not allowing them. Is that true?
Get Free Traffic Easily to Your Sites
I would be surprised if the USA, as a nation-state, actually returns humans to low earth orbit on a vehicle it developed "the old fashioned way"; I told friends that when the shuttle retired... an easy claim, but I did... no really.

The private sector may well do something here and perhaps NASA will hitch rides from those private actors rather than the Russians (how much longer will that be a viable option anyway?) At the end of the day, you probably get probes sent out, but U.S. Government sponsored human spaceflight is on its last legs in my opinion... unless a direct military need comes to the fore, and even then robotic seems more likely.

Note that I say all of this without any regard about my personal feelings about should NASA be involved in human spaceflight or not: those thoughts are not relevant to my observations/judgements on the state of affairs of such endeavor.
This Week in GTK+ – 19
Unix Userland as C++ Coroutines
He may just think that "evil robots of science fiction" is not a reasonable summary of the hard takeoff scenarios he worries about.
Why obama may have picked the wrong planet
Show HN: Xkcd's “Is it worth the time?” reproduced using R and Shiny
It's not the laziness that is interesting, it's how the cat responds to it: by actively choosing to "retire" indoors among the humans as a house cat. Do you know of any other animal that does something like this?
DSLR ক্যামেরার কিছু মৌলিক বাবহারবিধি – IT-Mela.Com
Modern shells, such as bash or zsh, support specifying completion through external files or scripts that the shell can parse. Having never written one, I'm not familiar with the exacts, but suffice it to say the right file in the right location with the right contents can inform the shell as to how to auto complete.

i.e., the auto-completion facilities are general / extensible.

Especially if many programs follow a general format of

program subcommand arg arg arg --optional-flag --option

(my personal favorite, as I find it most clear; followed by e.g., argparse in Python, git, many GNU utilities)

then it should be easy to see how a small specification of what subcommands take what for args or options should be enough to enable a pretty powerful auto-complete. (This is an example; I think zsh's autocompleters are actually small scripts; see https://github.com/zsh-users/zsh-completions/blob/master/zsh...)

(This, in zsh, combined with zsh's fuzzy autocomplete, is amazing.)
It really depends on what you are trying to accomplish.

`cat -- *` might be the right choice. Maybe `find . -maxdepth 1 -type f -exec cat -- {} +`
Debunking Audiophile Myths
Truth is almost never comfortable because we come from a world of ideals. If you expect perfect, anything you get is shitty.

If you accept you're a conscious imperfect animal, being able to communicate with other conscious beings is in itself a pretty nice deal.

You can't change the truth, so it cannot be put as the problem, the problem is the expectations we are given while growing up just to discover most of it is bullshit.

You could also try to put the ideal in it's place, as an horizon, something you walk towards in order to progress, but it'd be foolish to expect to get there, let alone demand to be there already.
https://news.ycombinator.com/item?id=12670323
Why Big Cities Are Healthier
A developer friendly journal for research software packages
330 miles... that seems so small, and it's so far away. It would be a truly haunting experience to stand on that surface and look at the faint pinprick of Sol.
Apple's new R&D centre in Shenzhen, the second one in China
I would charge them a flat fee for time spent on discovery. Say a few hours so you can gauge the effort. Then write up a description of what you think constitutes the "deliverable" and effort/cost involved for fixed cost. That way they can't tack "one more thing" on the end without more money.
Computer Shipments Fall Again
I find the fact that you were troubled troubling. Sounds like your uncle read for fun. Sounds like he did it a lot. This is good. Lots of people suffer their entire lives.

But you're troubled you couldn't squeeze the concentrated knowledge out of him like an orange?

You'll have to read all the books yourself i guess.
Tyson Foods Invests in Startup Beyond Meat
Ask HN: If you are learning a new language today, would you learn Python
and if yes Python 2 or 3
Every chip vendor I've dealt with, from Amlogic to Allwinner to Freescale, requires a signed NDA for full documentation. Public documentation is usually heavily redacted.

The GR8 seems to be a rebadged Allwinner chip, and the no-NDA datasheet seems to be next to useless, to be honest.
You made a lot of great points. In regards to:

"3.) Consumers having a poor understanding of the long-term consequences of putting data out there, and what it can be used for"

This is so true and unfortunately there are few resources for helping people understand the implication and consequences. I think at the very least we should be educating young people, perhaps in school.

There's a decent documentary that came out a few years ago called "Terms and Conditions May Apply", its an independent release and so lacks some polish in places but I think its worth a watch:

https://www.youtube.com/watch?v=7HPw_hx7OME
Many companies. Almost too many to list. This is probably a dig at Broadcom who makes the chip in the Raspberry Pi and usually requires NDAs for their chips. Hell, Broadcom won't even let you buy many of their chips without their permission!
I think the point the parent was making is that it is likely that one or more of the most prevalent certificate authorities' private keys have been compromised - whether voluntarily provided to government, or obtained by criminals via dubious methods.

Once the private keys are compromised, all bets are off. No database - whether maintained by Google or anyone else - puts a dent in such a problem. It's one thing to track inauthentic certificates; it's quite another to discover someone silently decrypting traffic with a copy of the private key.

Edit: My response brings up an interesting question I hadn't considered before. With the certificate chain, is it required to have the private keys for the entire chain in order to be able to decrypt the stream? If someone has the certificate authority top-level certificate, can they decrypt a domain's certificate without having its private key as well as any intermediates? If not then it'd be true that the primary concern with a top-level private key being compromised is illegitimate certificates being signed, in which case Google's attempt to combat that with Certificate Transparency isn't half bad.
They're not really mutually exclusive problems though. Especially homelessness where the issue isn't technical so much as will. Other issues like say global warming may dovetail rather well with settling Mars. Our rovers run on solar power and RTGs. Which is fine for something small. But to even think of safely living on Mars. We're going to need to figure out how to run power intensive equipment like bulldozers and excavators. That means we'll need to deal with some of the more thorny issues related to energy and global warming.
Can you be sure? I've read before how cats learn to adapt to this very easily. Just because the bell is tingling when you're around and the cat doesn't care, doesn't mean it hinders its hunting.
FB has no reason to ban it.
http://docopt.org/ demonstrates the common convention for CLI interfaces.
A JavaScript semantic mapper to transform any object structure to another
The simulation argument, going back to Bostrom, relies on two flaws.

1) It leverages our optimism to corrupt our understanding of statistics and logic. It essentially says that if you think humanity doesn't destroy itself, then our descendants will probably try to simulate us. But of course if you just take a statistical view of the potential future ordered states of the universe, there are FAR more potential future states in which we don't exist, than states in which we do. The chances we are living in a simulation now are equally as small.

2) Bostrom hypothesizes that our descendants will try to simulate us. But it is impossible to completely simulate a system from inside that system--that's basic thermodynamics. So simulation proponents argue that our simulated reality is running in a more complex universe than we experience. But if that is the case, then the beings running the simulation are not our descendants! They're the descendants of whatever more complex beings came before them. Once again the central logic of the argument fails.
Thanks! It seems that most of those advantages are not directly about text editing but more about being a better IDE. I guess that for someone like me, that uses Emacs mostly for writing prose and for file management, and only occasionally for programming, the things you mention don't sound as attractive (and when coding I never use a debugger, which is probably a mistake on my part).

About git: have you tried magit for Emacs?
A lot of vendors do for recent processors. You can easily get a z80 datasheet, but not necessarily complete info for a recent ARM SoC.
Not sure about the data for other fields. But if you compare to men, in SET, only ~17% of men leave mid-career.
Which is very good advice, but it's because of the fact that testimony given to a police officer can only ever be used against you (it's hearsay otherwise). Not to mention that if someone slips up and accidentally tells a lie in the middle of a testimony, that instills doubt in the entire testimony ("I didn't kill her, I've never killed anyone, I've never even used a gun, I wasn't in the area that night" sounds fine until the last part if it turns out you were in that suburb that night).

Basically, to a lawyer a client talking to the police is giving the prosecution ammunition. Not to mention that nobody (not even the supreme court) can claim to know every federal law that applies to a person at a particular time (there was a quote for that but I can't find it on my phone right now).
Does this ever happen before?
This thread blew my mind. Initially, I thought DHH was just been a duchbag as always, but then he used very good arguments. I hope to not be banned, but pg has very weak arguments in this matter, and it is a very important one.
This is completely not a technical decision, it's a branding and marketing decision.

Even though the percentage is vanishingly small, Samsung cannot be associated with exploding phones.

Even airlines warn against Samsung Note 7s specifically during preflight briefings. They're amputating part of their business to stop contagion to the rest of their brand.
This depends on a few things, but mostly what previous experience you have with programming. Otherwise, in general learn python 3. It wont hurt.
I like the extension idea. Actually, I'd really like to see reading tools which addressed a number of end-user needs:

1. Tracking content stats: how much have I read today, how does this compare to trend, what is my trend?

2. Some sort of "spendable ratings currency" that would indicate quality of an item. Ideally that would be some sort of compound metric. Time, commentary, re-shares, multiple re-visits over time, references in other items (from others, from you) as part of that. Also perhaps a specific metric of how good or bad something was (probably on a 5 or 7 point scale), though I'd tend to discount that. Flags for problematic content (bullshit, clickbait, etc.) These are only personal interest metrics. At best they'd be shared with a few trusted friends.

3. Attribution and reputation tracking by both author and publisher. Find someone whose stuff is really, really good, though they publish rarely? Note that. Find someone who couldn't tell a black eye if you gave them one? Note that. You'd end up with a set of ranked sources by quality and credibility.

4. Filters / indicators to note content's likely quality. Based on previous reputation.

5. A tagging / classification system. Having thought about this a lot, I'm inclined to go with an extant ontology, probably the USLOCCS, as that's been developed, is widely used, and isn't constained by IP restrictions as Dewey Decimal is. (USLOCCS: U.S. Library of Congress Catalog Classification System).

6. Uniform presentation + user editing. A Readability / Pocket like standard page presentation model. The ability to edit that (either in stock ways or specific elements) to further clean it up. Export to other formats (ePub, PDF, text).

7. Page annotations. I want to be able to keep notes on things.

I find it curious that the Web today is so metrics driven, but nobody has saw fit to provide metrics to end users themselves.
This related NASA idea may interests folks in this thread:

> The New Worlds Mission is a proposed project comprising a large occulter in space designed to block the light of nearby stars in order to observe their orbiting exoplanets. The observations could be taken with an existing space telescope, possibly the James Webb Space Telescope when it launches, or a dedicated visible light optical telescope optimally designed for the task of finding exoplanets. A preliminary research project was funded from 2005[1] through 2008 by NASA Institute for Advanced Concepts (NIAC) and headed by Webster Cash of the University of Colorado at Boulder in conjunction with Ball Aerospace & Technologies Corp., Northrop Grumman, Southwest Research Institute and others. Since 2010 the project has been looking for additional financing from NASA and other sources in the amount of roughly US$3 billion including its own four-meter telescope,[2] or $750 million for one starshade to be used with the James Webb Space Telescope.

https://en.wikipedia.org/wiki/New_Worlds_Mission
The U.S. Dollar Is Zimbabwe's Main Currency, and It's Disappearing Fast
This is Adam -- EIC of changelog.com.

We're open sourcing our CMS soon. Would be glad to answer any questions or hear comments from the community here.

Thanks Joe for sharing this.
Ayds (pronounced AIDS) appetite suppressant candy. After the renaming of GRIDS to AIDS.