skysight-inc/HackerNews huggingface dataset:
>> Schedule I substances are those that have the following >>findings:

>> 1. The drug or other substance has a high potential for >>abuse.

>> 2. The drug or other substance has no currently accepted >>medical use in treatment in the United States.

>> 3. There is a lack of accepted safety for use of the >>drug or other substance under medical supervision

>Kratom doesn't meet any of those requirements, let alone >all three. The scheduling process requires reform, and >this impacts a large part of the world since drug >scheduling (and patent protection on pharma) are part of >American trade agreements.

Mitragynine, the major alkaloid identified from Kratom, has been reported as a partial opioid agonist producing similar or more potent effects than morphine. An interesting minor alkaloid of Kratom, 7-hydroxymitragynine, has been reported to be significantly more potent than morphine. (Actually, in studies, mitragynine was shown to be 13x more potent than morphine, and 7-hydroxymitragynine to be 4x more potent than mitragynine, as per Vicknasingam et al 2010 in the International Journal of Drug Policy, and Matsumoto et al., 2005, Life Sciences). Both Kratom alkaloids are reported to activate supraspinal mu- and delta- opioid receptors, explaining their use by chronic narcotics users to ameliorate opioid withdrawal symptoms.

The problem here isn't getting rid of a "legal high." Kratom should not be: it carries all the risks of opiates, and may have an independent mechanism of seizure activity. Physiologic dependence has also been reported, as well as thyroid dysfunction, liver damage, and if mixed with another opioid agonist (tramadol is easy to score on the street, as a very common med for diabetic neuropathic pain) it'll put you right in the ground, as has been seen in a number of deaths in Sweden.

You're right it doesn't meet all three criteria, although it certainly meets 1 and 2. 3 is a valid basis for conducting for medical research, to determine proper pharmacokinetics and see what safe usage scenarios are.

However, it's a serious drug, and needs to be regulated as such. It should not be Schedule I, the DEA's favorite way of creating job security for itself, but it seems like the opposition position that has developed is yelling "keep it freely available," which is unconscionable.
Well, I tried to download the sample chapter by entering my email address and clicking "Send Me the Free Chapter". But instead I got subscribed on an email list.

So I'm afraid I have to say: that UI really sucks :)
Ask HN: How can I ensure that my C code adheres to the ANSI standard?
I am aware of some C projects, such as the original implementation of the Lua programming language [1], that try very hard to ensure their code strictly adheres to the ANSI C standard. Lua steps outside the ANSI standard only where the developers have intentionally chosen to do so, and where there is an alternative, standard-compliant code path. This allows, by enabling these alternative code paths, for Lua to be built using any standard-compliant compiler.

Other projects seem to take a more relaxed approach, violating the standard and making use of compiler-specific language extensions liberally and even unintentionally.

My C code to date has been firmly in the second camp. However, for an upcoming project I would like to be more disciplined and write only standard-compliant code (or only use extensions by choice, where they are both necessary and safe). This will improve the portability of my code and also its correctness - I hope to avoid repeating my recent experience of code silently failing to work due to a standard violation (in this case, of the definition of "constant expression" - see my Stack Overflow question [2]).

What tools/techniques would you recommend to avoid violating the ANSI C standard and to ensure I am writing strictly standard-compliant code?

[1] https://www.lua.org/

[2] http://stackoverflow.com/q/39917921/200783
I don't care about keeping my credit card safer that it already is. I am not liable for credit card fraud. In this insecure world we live in, I have not lost a single dime, nor any time, nor was I inconvenienced in any way by card theft. It's not my problem to worry about.

My debit card was skimmed once, a few weeks ago. The bank detected fraud, notified me that they sent me a new card, and I didn't lost any money. I only lost two minutes of my life while I was talking to the bank on the phone.
This book is great, but if your stats background isn't quite up to snuff, it can be an intimidating first-read.

Personally, I studied Duda & Hart's pattern recognition [1] and Casella & Berger's statistics text [2] simultaneously. This took about the equivalent of 2 semesters. Duda's text gets the main ideas across without being as heavy on the probability theory / stats.

Afterwards, I studied "Elements ..." by Hastie et al., which was far more readable after going through Casella & Berger's text. Now Hastie et al. is my go-to reference. I also should note that this all assumes that you also have the requisite math background: up to calc 3, linear algebra, and maybe some exposure to numerical methods (in particular, optimization).

[1]: https://books.google.com/books?id=Br33IRC3PkQC&lpg=PP1&pg=PR...

[2]: https://books.google.com/books/about/Statistical_Inference.h...
GlobalSign's global HTTPS snafu explained
I think the idea isn't to listen to everyone on the Internet but to take seriously the conversations scientists have on their blogs and social media accounts.
Nielsen Norman Group has a blog archive[0] spanning over 20 years, with posts from Jakob Nielsen, Don Norman and Bruce "Tog" Tognazzini, among others. For example:

"10 Usability Heuristics for User Interface Design" by Jakob Nielsen, January 1, 1995 [1]

[0] https://www.nngroup.com/articles/

[1] https://www.nngroup.com/articles/ten-usability-heuristics/
Agree.
I was expecting the author to lament on something like java vs swift.
Even that would not be the best argument ever since you can write your android apps entirely in kotlin and it is vastly similar to swift.
A real downside of kotlin is that it complexifies your build (but only the first time you have to setup a complex project with kotlin, dagger, databinding, etc) and that the tooling is not on par with the base java one.

Multidex ? it is far from perfect but it is not a day to day issue. I work on a 200k methods app and multidex actually makes it almost entirely painless.

Gradle ? Nobody can seriously say that builds have gotten worse with gradle. Before it, we had no way to hook up libraries with resources (aar). Now we just have to 'import libname:version'
The complaint on the build times is very fair though. The solution is easy though .. just use an high end computer

I use a mid 2015 mbp, it can handle an huge android app without any issue (except that build times are only acceptable, not great).

It really looks like he has been submerged with having 2 platforms to learn at once and has not been able to tackle the basics.
This Man Survives on Exactly Zero Glasses of Water a Day
Your comment seems to me to go off into a completely different direction, one far away from saying anything concrete about actual research and going towards a very fuzzy general direction. This is completely different from the article, which has a lot of very concrete points about a concrete subject. I see a big mismatch between the article you criticize and how you do it. "Strawman" comes to mind too, most of your comment is about things that you yourself introduce into the debate.
Humorous explanation of the original reason but the persistence of it over such a long time period still baffles me.
Pushing data directly to RDBMS with Diggernaut
> Is this a minority view?

I don't know, maybe. I have zero liability on credit card purchases, and while it's certainly an inconvenience I never don't buy something because my details might be leaked. Who cares, why put yourself through the constant mental effort for an event that happens maybe once or twice a decade if you are exceedingly careless?

I absolutely despise being sent to a third party site - usually a broken one that takes forever to load, with some annoying "security" authentication, or OTP, etc. when really all I wanted was amazon one click and to move on with my life.

By far the #1 way a small merchant can get me to click the buy button is make it easy for me to checkout and pay. If I have to sign up for an account, be redirected around the world, etc. I generally tend to lose interest and just go back to newegg/amazon. Note that this sometimes is a third party payment link such as Paypal due to the nature of the service - but you have to think about user experience first, not last.

Also your requirement makes absolutely no sense to me. If a merchant is compromised to the point that javascript can be injected, it's not much more difficult at all to direct you to a fake paypal skimmer that you likely won't notice. I agree it raises the bar a bit, but not by an appreciable degree.
The 3 most disruptive forces changing entrepreneurship
What services are you referring to please?
All humans have the responsibility to not kill each other.
In Firefox, I only saw a blank page.
added them with 0.0.0.0 to my local /etc/hosts file
All the ops over 40 I know didn't even see a uni from the inside.

Most IT people here started doing something different and tgen switched to IT.

The younger the people, the more academical they are.
>Is this a minority view?

Most likely. The fact that you understand what is happening when your store webage you're on goes white the words in the www bar change and then you're on a different site and it's asking for credit card info kind of illustrates this point.

Could you imagine trying to buy eggs at the supermarket then when it comes time to swipe your credit card, being asked to leave all your eggs at the register, go over to a different store with your credit card, swipe your card there, sign the paper, then go back to the original store and pick up your eggs? I imagine that's how a lot of people visualize going to a PSP site to enter credit card info.
Craft and Design the Project Responsibilities Towards Rate Your Manager
I missed the part where the author provides a reference/source to claim that developers don't really read some books.
Employees and Stakeholders Come First as One Rate Your Manager
Ubuntu 16.10 Unity 8 desktop mode
Shipping is a Muscle
That is genuinely disturbing!

Do some payment services not do at least a basic check of integrations before allowing them to go live? I haven't worked on a site starting out with online payments very recently, but the last time I did, there was a short series of entries in the server logs that did look like someone from the payment service had taken at least a very quick look at the relevant pages.
Why the dup?
Jewel Galaxy Hack Tool 2017 (Android/iOS)
Thanks. Can you recommend any statistics books to be safe?
T-rays will ‘speed up’ computer memory by a factor of 1000
Fiske's Wikipedia article reads like PR material. It should be edited to be more somber, and reflect the extant criticisms of her research performance. I suspect that that would lead to an edit war though.

Psychophysics and psychometrics
both replicate very, very well,

It might be good if researchers in those sub-fields lead the drive of improving psychology's research methodology.
Linux for Newbies: Disabling SSH Password Authentication
The difference is if you make the user click a link to Stripe's site then unless the evil JS replaces the URL with a different domain they can no longer interact with the user. And swapping out links is something that will get noticed far more easily than passively harvesting CC details.
It's entirely possible for it to be both.

https://en.wikipedia.org/wiki/Bootleggers_and_Baptists
https://en.m.wikipedia.org/wiki/Andrew_Gelman

He is not some random commentator.

Sadly, experts are being vilified because the perception of their accuracy has been damaged and expectations about the certainty of results have been poorly managed.

Blind respect got us where we are. Now we have to find a different way.
A while back I wrote a Forth interpreter and ended up posting a bit of a rant here about what I'd learnt from the experience, which I won't repeat; but after some more thought, I think Forth is best described as a kind of interactive super assembly language.

Writing Forth requires the same level of attention to detail and obsession with minutiae that assembly does. There's no runtime safety whatsoever. There's no syntactical safety whatsoever. It will do exactly what you tell it, even if what you tell it makes no sense. (I found myself thinking of the interpreter as the worst kind of passive-agressive cow orker. "I just assumed you had a reason for writing that floating point number to the program counter! I'm not a mind reader, you know!" "But if you wanted that loop closed at the end of the word definition, why didn't you close it yourself?" "It's not my job to remember whether that word left a float or an int on the stack. Don't you know?")

But this also gets coupled to the Forth programmer mindset, which is the ultimate YAGNI. Forth programmers don't just avoid abstraction, they consider it evil. I found a good example from Chuck Moore's website, where he compares the Linux IDE driver (thousands of lines of code) with an equivalent Forth one (two lines).

...except, of course, the Linux driver is a command scheduler to the VFS block layer. The Forth driver's just a couple of words which read and write bytes from an IDE channel. They are in no way equivalent, except that in Chuck Moore's eyes they are. The same philosphy permeates the entire language. Good Forth programmers appear to solve hard problems by ruthlessly stripping away everything irrelevant from the problem to end up with an easy one.

So, a traditional Forth system has no file system; it's easier to just remember which disk blocks you put your data in. Code portability's unimportant --- each program runs in its own customised Forth environment; avoiding platform-specific features is a waste of time. (Most Forthers I've talked to hold the ANS Forth spec in active contempt.) There's very little reusable code because each Forth solution is so tightly tied to the problem it's solving to be useless for any other problem.

Where it really excels is in an environment where you don't want any abstractions between you and the hardware --- it's brilliant on tiny, embedded devices. I don't know any other environment which can do so much in so little; being able to connect a serial terminal to a embedded processor with 2kB RAM and run commands on it is so, so useful.

I'd strongly recommend learning at least the basics of it, even if you're never going to use it. There's that wonderful Aha! moment as your mind reconfigures itself.
Won't solve the problem completely, but what about removing eval from the spec? Or making us obfuscation more difficult?
I love this essay. Also relevant, the Control Group is out of Control: http://slatestarcodex.com/2014/04/28/the-control-group-is-ou...
10k/month is inexpensive? That's a SV engineer salary. With open source software you can have extremely competent developers from anywhere in the world. Someone in Brazil for example would be thrilled to be paid US$50-100/day, or even less, to work on OSS.
It does work on FreeBSD now at least.

It wasn't a bug, though - just a questionable design (POSIX still doesn't mandate how filesystem permissions interact with connect() on AF_UNIX sockets AFAICS).
Exploring ARM inline assembly in Rust
reminds me of the Eastern
European

That's interesting, but maybe not so surprising, because the techniques that people like Fiske use stem (at least in parts) from the communist tradition of undermining and taking over institutions (e.g. Trotsky's entryism).
"FBI office" at an address where no (real) FBI office exists (with a slightly obfuscated address that doesn't mention FBI by name, but something that sounds like a department in FBI but isn't, so that the postal service doesn't get suspicious).
I have. I write some things in PHP, because I'm familiar with it.
Not sure about Civ VI. I mean you shouldn't judge it by its looks, but it does look like some weird mix of Settlers III and this Clash of Clans mobile game. That together with the (for me) total disaster that was Beyond Earth will make me need a lot of positive reviews before I consider buying it.
I disagree. A simulation has meaning even if there is not a base reality.

A simulation is alterable in a way that a physicalists reality is not. For example by it's parent can slow it down, or alter physical constants.
Fill out and submit this form: https://support.microsoft.com/en-us/getsupport?oaspworkflow=...

First I got this strange and confusing response:

Dear x
Please note that your ticket number is in the subject line of this mail.
x.x.x.x
Note: Errors are unlikely, however, if an error is indicated, please resubmit the specific IP or IP range.
Thank you,
Outlook.com Deliverability Support
Please do not reply to this message as it is from an unattended mailbox.
Any replies to this email will not be responded to or forwarded.
This service is used for outgoing emails only and cannot respond to inquiries.

About an hour later I got another e-mail from them informing me that my IP address had been "conditionally mitigated", and I was then able to send e-mails to Hotmail.
Oh, good point, I hadn't noticed that he has published the 4th ed.
BitBucket Issue: No space left on device
Who said that? Some times humans think other humans have a responsibility to kill eachother; I'm guessing you sometimes agree.
Discussion: https://news.ycombinator.com/item?id=12581844
List Building – Free course on building an email list for your business
Galton's Peg Board and the Central Limit Theorem
Looks like a nice step up from the raw aiohttp I've been writing. Would be interesting to see this wrapped with a forking module. That would provide an nginx-style deployment--select the number of actual threads to run and then run async within each thread.
I think Game Programming Patterns is an excellent read for learning patterns
Sounds like he contacted some of the sites in the article and they blew him off ("We are 100% secure, don't you see the Verisign badge?!"). But yeah, that still makes sense that it could be pulled for that reason.
Curious if this is used in production and if so at what volume.
Would you like another 3DSecure horror story?

All 3DSecure iframe content is bounced through a third-party site, securesuite.co.uk. I invite you to visit one of the following URLs:

http://securesuite.co.uk

https://securesuite.co.uk

Do you feel reassured about entering your credit card details into anything hosted there? At least the domain's whois information doesn't claim it's registered to "yaron shohat" (sic) any more...

Here's a full writeup:

https://web.archive.org/web/20160603034835/http://www.cl.cam...
Ask HN: Need career advice
I'm working in software industry for around 9 years (3 years development, 6 years in testing). Currently i could feel that my interests are changing related to technology. Though my primary job is test development, as side projects i have developed many tools and automation frameworks which were useful to the team as a whole. Through these side projects i realized that, sharing knowledge or making useful information available to everyone what interests me the most.

In that regard, what could be the right field/job profile which allows me to expand my interest. Some of the profiles or research fields i thought which would suit my interest were:
1. Tools development
2. Doing research on Semantic networks

Can you all please feed me with some inputs on possible next career move which would align with my interests?
He he, point. But a probe doing multiple gravity assists to get close to the sun is different from going from point A to point B -- and stopping at B. :-)
One does not need to use Hack/HHVM, where PHP7 has types, eval and the same performance, but with much better backcompat.

There's only one other popular language, guile, which could bootstrap itself successfully recently. I don't count python 3.5 as success. Compare the numbers.
Kudos to php7.
And if it had happened to the RNC, same response right? Somehow I doubt it. This is setting a very dangerous precedent.
Yep. I completely agree. I hadn't had my early am coffee yet ;)
Indian Americans are the highest-paid Asian Americans, report shows
If you live in Brazil (or is willing to come), and want to contribute to Kicad, São Paulo will host a Kicad hackaton as part of an Open Hardware Summit:

http://www.e-hal.org.br/ (english version: http://www.e-hal.org.br/en)

Javier Serrano, the author of this post, will be there, as will Thomas and Maciej, two Kicad developers from CERN. The Kicad Hackaton will not be the only activity, there are lots of open hardware activities through the three days of summit. And lots of fun!
Nissan Primera 1.6 from 2000. But I really, really, prefer driving my motorcycle.
> They ported Go;

No, they didn't. Minux Ma, a major Go contributor unaffiliated with IBM, ported Go to POWER.
To get intuition and the right foundation read Society of Mind. For me the book is more about thinking in terms of computation which is what (IMO) ML is about instead of statistics (of which is important to know too!).

Now practical: I think the best way to learn is pick an algorithm & representation and implement it in your favorite language. Bonus if you have your own language to work with.

I would start looking into Decision Trees first, implement them and then implement some use cases(, which follow after implementing them). Do this for other approaches, like ANN, which you can have it beat you at checkers which is strangely satisfying.

But keep in mind Minsky. I think he is like Archimedes doing "Calculus"-type approaches without fully realizing. Maybe you could be Newton?
Rwanda Begins Zipline Commercial Drone Deliveries
There is a great google repo with many architecture samples, including some MVP ones :
https://github.com/googlesamples/android-architecture

For kotlin, no book needed.
Go to the language website, read the introduction, maybe a couple of pages on the language features and then complete the kotlin koans. It will give you an overview of most of the language features.

After that, find an android project written in kotlin.
Here is one : https://github.com/LostInContext/LostContext-App (there are many others) .
Configuring an android project in kotlin the first time can be painful, especially if you have some code generation (dagger, databinding, ...) , so it is way easier to have a working sample to work with.
I'm sure there are some things that could be done better. In particular, DNF could do with better completion of interrupted transactions — the session dying is only one possible interruption.
They are both offering hosting of websites. They are absolutely a publishing platform.
http://mattdm.org/email — but, really, comments in public are more valuable to the project overall.
MAD Skills – Magnetic Agile Deep Skills [pdf]
This question applies perfectly to me as well, so I'm looking forward for some answers.
We shouldn't be asking this of clients any more. Build the site with SSL on all pages and either require the client buys a cert or implement Let's Encrypt. But at this stage, it makes no sense to make it optional, even for non-commerce sites.
I read that recently, and then found out about "function level" languages, which are sort of the modern extension of stack-based languages.

Function level != functional. Check out Factor, for a prominent example.. the combinator library is beautiful.
if you are on a dev session with a lot of iterations, you really want to go the InstantRun (or JRebel) route.
I wish PHP had methods on primitive types, but I can live without them. PHP is not my first choice of language to develop in, but I don't think it's a bad language, and it paid my bills for quite a long time.
Sublime text....

ctrl p, type fuzzy match, instant results.