skysight-inc/HackerNews huggingface dataset:
> leave it to Stripe, BrainTree, Paypal, someone trusted, with the resources to handle it.

Wouldn't stripe and braintree still effectively let you handle CC on your own site? i.e. If someone can inject JS code there, they can in high likelihood grab CC details even if you're using stripe or braintree. Am I missing something?
Bonsai – AI for Everyone
As a note, breaking into subtasks does improve estimate accuracy on just about anything, due to the "unpacking effect".

Humans routinely underestimate the time and difficulty involved in just about everything. Breaking a task down into subtasks leads to higher estimates which will typically be more accurate.

You are of course being asked to do something very difficult. In 3-point estimation schemes, you'd give back very wide bands for a few subtasks that you identified. Maybe point at the cone of uncertainty a few times.

I know it often doesn't work. To me, most of the problems with estimating aren't with the estimating.
You still screwed up handling things. Did you very they are actually vulnerable? Or are you hoping you got it right? Cause if the later you really shouldn't remove something you don't know anything about
List is at http://p.cweiske.de/366
تحميل برنامج فورمات فاكتوري 2017 للكمبيوتر مجاناً Format Factory
There is a difference, and its about how the data is going to leak out. If the access can only happen via a key stored on the client, the client somehow has to supply that to the attacker (whether an official attacker or not). If every user's key and data are stored on the server then a compromise of every (or any) user becomes much more feasible. There isn't really a problem of data at rest being stolen (except for laptops/cell phones/usb sticks), it is stolen while live.

Overall though I would agree that you can't trust it much, because some code is downloaded from the server and then you trust that code (which can communicate with the server) with the key... Perhaps if it was in a local sandbox whose policies were enforced in a browser pref, or there was taint analysis applied to sensitive local data.

In years to come people will snicker at how wide open and insecure things were back in 201x.
Yeah, I used clementine for ages because it would just work unlike say iTunes which did import/copy/rearrange by default
DON'T LEARN NEURAL NETWORKS FIRST.

Instead, learn decision trees and more importantly enough statistics so you aren't dangerous.

Do you know what the central limit theorem is and why it is important? Can you do 5-fold cross validation on a random forest model in your choice of tool?

Fine, now you are ready to do deep learning stuff.

The reason I say not to do neural networks first is because they aren't very effective with small amounts of data. When you are starting out you want to be able to iterate quickly and learn, not wait for hours for a NN to train and then be unsure why it isn't working.
You can already pass big arrays to unmanaged code without copying just fine: allocate a GCHandle of type Pinned, and pass AddrOfPinnedObject as the pointer.

The use case for Span is more within the managed realm: it allows pointer-like manipulation of memory, without having to special-case it for each type.

And although anything with pointers is of course asking for trouble to some extent, you don't lose any safety in most scenarios (those not involving obvious giveaways like 'unsafe'...)
I don't think there's a curriculum you can set up. For me, the best books were books that talked about problems i was having at the time.

For example, my biggest take away from Code Complete was the stupid slow but easy to test implementation of the excel calculation engine. I was working on a print system at the time, building a stupid system and a fancy system and comparing the results gave me a lot of insight about what was wrong with the fancy system.

Me personally, i got a ton out of the lisp books PAIP, SICP, On Lisp, and even the CL spec. Thinking about something in terms of stream processing or unification from the various prolog implementations would get me started on answers to problems i was facing (they never required unification).

Just blindly handing out reading, i'd probably give people _The Phoenix Project_. Most organizations are a mess, and new programmers don't understand that. The down side is, new programmers can't do much about it. It can help explain why you do some painful stuff though, like on call or code reviews.
How to get started with Blockchain?
Lately there are tons of articles mentioning how Blockchain is the game-changing technology and how it is going to disrupt all the industries.
I don't have any prior experience with it. How to get started with blockchain technology? Looking for resources targeted towards smart contracts and creating applications on blockchain.

Edit: Added description for what I want to do with blockchain.
That's great, can you list the subjects and brief contents?
This has been done. Mitragynine and 7-OH-mitragyine (the primary alkaloids in kratom) do not recruit β-arrestin[1], which os what causes typical opioid side effects - including respiratory depression. It is this that kills when you overdose on almost every other known opioid drug. This really is huge deal.

Less importantly, but still relevant, it also doesn't cause anywhere near the level of constipation that pharmaceutical opioid drugs cause.

It also activates both mu and delta opioid receptors, which is perhaps why I personally find it is so much more effective for neuropathic pain than the more common mu-opiod pharmaceutical drugs.

[1] http://pubs.acs.org/doi/abs/10.1021/jacs.6b00360?journalCode...
Little known fact: pure nicotine is hardly addictive.
The Mono-amine oxidase inhibitors in tobacco really ramp up its addictive potential.
Two of my banks do it a little differently. With Visa's process (Verified by Visa), I had to register a password for each card. A separate password from my internet banking password. When I try to use my card on a VbV site (maybe one in ten sites), I have to enter three random characters.

So few sites require it that I don't remember the password and entering random characters from KeepassX is always a pain.

I hate it when I see that VbV prompt. That's frustrating security and results in passwords that you use so infrequently they never get changed. I'd much prefer OATH TOTP or even an SMS based code (with a "I don't have my phone" option).
Crypto in iOS: Choose your destiny
Related: https://news.ycombinator.com/item?id=12712454

and: https://news.ycombinator.com/item?id=12712648
You guys are so fixed on that standard library thing that I am getting scared. In a way, it's the best compliment PHP can get, means nitpicking on the function names is all they can blame PHP for. Nevertheless, for me it never was a problem - neither at a time when I used to stick with FAR commander's internal editor, nor - especially - with PHPStorm nowadays, that always put the proper syntax under my fingertips, parameter order included.

Consistent error handling is a matter of one set_error_handler() call.

Ok, undeed PHP can be called inconsistent, if one would have a fancy to. And this opinion could be even defended with numerous examples... which examples, for some reason, do not work neither for learners who prefer PHP over "more consistent languages", nor professional developers, who just get their job done.

To boil it down, I think this "inconsistency" argument works more for the internet discussion than for the real life consideration.
> facts come second to feelings and opinions

I think Fiske is arguing exactly for this point. Feelings are more important than data.

> this is not helping society but actually making it more polarised and less cohesive.

Do you think stuff like "ambivalent sexism theory" is making society more cohesive?
Reading Susan Fiske's Wikipedia article makes this even more depressing. But please resist the urge to write off all of psychology, or even all of social psychology. Psychophysics and psychometrics both replicate very, very well, and they're not the only areas of psychology to do so. This is true even if you file biological psychology and neuroscience somewhere other than psychology. And social psychology makes sociology look really rigorous.

https://en.m.wikipedia.org/wiki/Susan_Fiske
A recent quantitative analysis identifies her [Susan Fiske] as the 22nd most eminent researcher in the modern era of psychology (12th among living researchers, 2nd among women).

^ Diener, E., Oishi, S., & Park, J. (in press). An incomplete list of eminent psychologists in the modern era. Archives of Scientific Psychology
Because this is a matter of U.S. government policy, the responsibility is to the people of the United States.

Seems pretty simple to me.
> Instead focus on small intervals, work out what you should try to build in those intervals. Implement. Gather feedback. Repeat.

I absolutely agree with you. I think we're closing on the key difference, which is the scope of the estimation.

I am accustomed to estimating the smallest self-contained unit of user-facing value. I'm used to doing it weekly. I'm used to being in a room with my fellow engineers to do a simple points-based estimate of complexity, with projected dates derived from the velocity of the past 3 weeks. I am used to PMs who understand that sometimes we hit iceberg stories, but that most of the time, the projections are good into the next few months.

What I don't have to do is build a magical estimate of the next three years. If I was asked, I would try to based on historical data and research, but the bands would be extremely wide.

Thinking about the analogy that we often make back to construction, the problem is that classical project management is essentially an estimate of an integral. There is a discrete endpoint, and we can estimate (and re-estimate) leading up to that end point. Funds are committed in large chunks and the cheque-signers need high confidence to proceed.

But software is never finished, only abandoned. Estimation has to be differential and constantly updated. If the software is developed to be releasable at all times, commitment can be incremental and early abandonment due to negative feedback is advantageous.

I'm not saying anything new here. But I understand better where you were coming from.
Sucrose is used widely in medical treatment in the United States.

Use of sucrose under medical supervision is unfathomably safe. You can literally feel, in your hand, the quantity of sucrose which is unsuitable for your diet.

I'm not sure what would qualify as abuse, but I'm pretty sure they don't consider all recreational alcohol use to be abuse even though a pretty large chunk of the people who drink it are alcoholics.
If you don't understand how it works your won't understand how to optimize things, how to do error analysis, how to implement better features and weights out of the box, how to choose the right algorithm from the start, how to do good cross validation ...

Yes, you can take a library and implement it in 10 minutes, but then you're really not learning machine learning, are you?

I will argue you do not need four years of math by any stretch, though. The stumbling block will be notation more than anything else. Relatively basic calculus and linear algebra will suffice.

They were right about one thing: the code is the least important part.
I keep re-reading The UI Audit by Jane Portman:

http://uibreakfast.com/audit/

I use it every time I need to craft an interface but especially for SaaS apps. The OP requested something from a 'newbie perspective'; this book will explain the basics but the real value comes from the explanations and advice with respect to why UI decisions lead to happier users.

I've copy/pasted the chapter headings from the site:

Introduction

Chapter 1. Your Product Strategy

Chapter 2. Navigation

Chapter 3. Dashboard & Homescreen

Chapter 4. Audit Your Screens

Chapter 5. The Problem of Style

Chapter 6. Get a Theme

Chapter 7. Plan for Improvements

Chapter 8. Deal With New Features
I also find this quote remarkable, and not in a good way; but I recall that Kahneman's studies do replicate pretty well. (This is not to say that all their claimed implications are true - this is the part where "no choice but to accept" rubs me the wrong way.)
50 million dollars is enough to build 100 feet of subway (in New York).
> If every negotiation happened in public, no nations would ever be able to sign agreements with one another.

I don't see that as a definite conclusion.

At present, the status quo for most nations is that they secretly negotiate an agreement and then either (1) put it to public plebiscite or (2) pass it into law through legislative assembly.

Both cases usually result in the details of the agreement being made public before they become law, including the "bad bits", so for what reason would moving that public visibility back in time scupper all negotiations?

There would be media interest in and hype around the negotiations, naturally, but if the existing systems already prevent public intervention in those stages then it's just making them "read-only" instead of "encrypted".
EJBCA PKI with CloudHSM
For the purposes of discussion, we will not get anywhere fruitful if we say "Oh, it can be anything you want it to" - again, I contend that a CTO at a 10-person startup is not an actual CTO but some kind of team lead / architect. It's a pointless name as it does not convey what it typically does and serves only to act as some status signal.

Instead of saying "The definition of CTO is evolving" which is rather contradictory, a definition to make something distinct and clear, it would be better to frame it as that person's role is evolving, and that their title of CTO is not indicative of their actual role.
Not forgetting 4chan's evil twin brother 8chan:

https://8ch.net/pol/index.html

And for more chans, look no further than:

https://encyclopediadramatica.se/List_of_chans

Whilst I appreciate 4chan was the original chan that started all the other chans off, people often forget the alternatives. A common complaint of the alternative chans is that 4chan has become too conservative and is too heavily moderated. Does anyone agree?
Redux-devtools-extension v2.8.0: changes in the Graph Monitor
It occurs to me that software has never had to adopt these practices.

It's an industry with a high gross profit margin. If you have a hit, you can get with just about any process or non-process. So you never need to invest heavily in better estimation.

If you don't have a hit, you will probably go out of business. So you never get the chance to invest heavily in better estimation.
Or you can start on easy mode with Introduction to Stastical Learning by the same authors.

http://www-bcf.usc.edu/~gareth/ISL/
> IMHO, developer time is more expensive than CPU time

I see that you've never worked on a project where the CPU time needed to handle the traffic with crappy code is much more expensive than developer time to write efficient software.
Nations, Fighting Powerful Refrigerant That Warms Planet, Reach Landmark Deal
John Gottman: Trust and Inequality
A Pentagon Video – Megacities: Urban Future, the Emerging Complexity
Really? I tried doing this search and can't find much. I'm pretty up on the state of the scientific literature on kratom, because I'm in the industry, curious, and have been actively working at improving the dreadful wikipedia article.

There's this case, http://www.sciencedirect.com/science/article/pii/S0924933811... , but it's a case of one. There are some cases of simultaneous kratom and alcohol dependence, but that's not the same thing.

Even the peer reviewed evidence for kratom working for opiate withdrawal is quite weak, despite boatloads of anecdotal evidence. There are studies in mice and some observational studies, but nothing that meets the standards of an FDA clinical trial. Kratom has just not really been seriously studied.

If I'm missing some papers or a body of research, please let me know.
That's... oddly neutral, yet slightly discouraging.

Still... if you were building a web application today, would you consider using PHP, a "flawed language"?
I really hate this trend of journalism leaking into services like Github. We have secure ways to share files with high redundancy, why put a service like Github/Gitlab in the line of fire when their primary goal is to enable open collaboration, vs open information.
I don't understand this at all. I really, really don't want to give my credit card details to some random webshop who are exceedingly unlikely to have solid security. If I can use PayPal or another well known payment provider, great, I don't even have to type in my details. But even a less well known PSP is more likely to get it right than a small business webshop.

A slightly jarring user interface seems a small price to pay for a much lower chance of my payment details being compromised. Is this a minority view?
I think this is a bad generalization, that doesn't even stand in more than 50% of the cases: If someone can inject Javascript into your site, your database is most likely also hacked.
A few examples of search UI?UX and an indication of their design shortcomings might provide context for answers and a starting point for discussion.
Request for Comments on “Playing Through the Pain”
Alerts and Warnings: Russian Television Tells Citizens NUCLEAR WAR IMMINENT
If you can recurse infinitely, then there is no need to define reality as a simulation. A simulation implies some loss of fidelity relative to the layer hosting it. If you continue this infinitely eventually you end up with a completely entropic layer. Maybe there is a discontinuity and this entropic layer crystallizes into a highly ordered "base reality". I don't know how this innermost, entropic layer can contain the outermost, ordered layer. I think "simulation" is a bad term since it implies a monotonic loss of fidelity.

A simulation only has meaning if there is a base reality. Otherwise there are only layers of reality.
It depends on how you integrate it, but yes, you're largely right. If they have your JavaScript they may have your cards.
SQL queries with temporary table vs. where in
Actually, you're wrong. The DMCA was used as a premise for takedown on the basis of purported copyright infringement. I was pointing out that such a claim, however spurious you may think it is, would likely hinge on the claimant's exclusive rights in the compilation. I can't see any other theory that would support a DMCA takedown. Again, it's irrelevant to the question whether or not you think the claim had merit. Also, the question conflated trademark with copyright.
IBM have done lots of work to port stuff to ppc64le (edit: wrong, see reply), which I think is the particular arch for P9. One of the reasons for introducing the -le variant was to make porting easier.

They ported Go; in my day job I've seen them porting various parts of Cloud Foundry and supporting infrastructure.

Basically I'm interested to see if Google open these up on GCP.
As points of differentiation go, it would be a doozy.
Q&A with STEPHAN TUAL: Founder, Slock.it and the DAO
I suppose it depends on what you want to get started doing. Trading bitcoin is different from writing smart contracts or mining bitcoin and those are different from creating your own coin or verifying auction bids on a distributed ledger.
If it's only an opinion about diversity at the dinner table, then it's not hubris. But if the search for an optimal mix comes from a govt. or quasi-govt. institution then it's no longer an opinion, is it?
I think Fiske met that constructive criticism with negative hyperbole and vague counter arguments that were not on point. People protect their vested interests and status quo by praying on people's decency and politeness, but ignore the fundamental facts in the criticism brought against them, and that leads to a proportional negative reaction from the other side. This situation reminds me of the Eastern European political systems where failure to recognise and deal with basic problems like fairness, corruption, nepotism, etc leads to a progressive degradation of trust that in turn leads to more violent/drastic changes, with total disregard for decency. So, if you want to be treated decently, than you'd better act decently as well, and not only superficially.
Show HN: Diggernaut – Turn website content into data sets
From Zero to a Million: Why I’m a Sucker for Free Publicity
Which presumably is why the attackers here are injecting their own client-side JavaScript that sends a copy of the payment information to the attacker. Even if the business never sees a copy of the sensitive information, their server can still be made to serve up malicious code that does.
gEDA the GNU EDA tools have bern around a lot longer and I use that. It is worth checking out.
I am not liable for credit card fraud. The last thing in the world I want is inconvenience for me, when it's other people's money at risk (bank, merchant, CC company, whoever), not mine.

On the other hand, Paypal itself is a liability. Blocking your account (and your money!) for months without recourse, randomly reducing expense limits to nothing (50 EUR) are not just some Internet stories, but things that have happened to me personally multiple times.

When my card was stolen (debit card even!), I didn't lose a dime, nor time. Bank just sent me a new card the same day. I didn't even have to report the fraud, they detected it themselves, as they are really good at that. They just called me to tell me about it, and that they sent me a new card.
> The closing ?> tag MUST be omitted from files containing only PHP.

It doesn't contain only PHP. There's the closing JSON } after ?> :D
I've seen QT binding libs for Go, but I am not familiar with them. Go shines in the back end, but I think Python would likely be a better choice for a desktop app with far more examples to learn from.

More than becoming an expert in a given language or stack, another thing to consider is learning a domain. I'm partial to distributed systems, but if image or audio processing, or desktop app, or whatever it is what you find interesting, diving into those will keep you from getting stale and make you more marketable if and when you decide to move to a new employer. The tech stack will reveal itself or you will find that it is fungeable. The key for the resume there will be personal projects, meet up talks, and blog posts as opposed to work experience. At my work, we would be very interested in talking to such a person interested in distributed systems.

Whichever you pick, I hope you find fun.
>>If your site sacrifices user experience, I will hate your site. Simple as that.

Even if said sacrifice keeps your credit card safe?

I mean, if you are staying on the same site, you have no guarantees that the site isn't storing your credit card info in an unsecure manner.
Does 'Heisenberg' or some other theory limit the top frequency, if so, what's the limit?
A good start in "classical" methods" (i.e.: before deep learning and convolutional neural networks) is the old standby, the Weka Data Mining library [1]. Along with the textbook, it will make you comfortable with methods like k-nearest neighbor, support vector machines, decision trees, and the like.

[1] http://www.cs.waikato.ac.nz/ml/weka/
There's a 2014 edition that I've been reading (slowly) over the past several months.
Make Your Language Unusable – Programming Puzzles and Code Golf Stack Exchange