skysight-inc/HackerNews huggingface dataset:
Target didn't get hacked for not having updated software. They were hacked because an HVAC contractor was hacked to get the HVAC system credentials and it wasn't properly segregated from the same network as the POS terminals. They even had FireEye installed and detected the exfiltration malware [0], but for some reason ignored the alarms.

[0] http://www.bloomberg.com/news/articles/2014-03-13/target-mis...
I have found node and tornado to have practically identical performance. I have not had a lot of experience with GO and Elixir for web servers.

nginx (openresty, really) has beat both of them them in all "normal" (ie. not limited by DB access, etc) usage conditions that I have tested.
> When a large employer raises its wage a big chunk of people who work a few hours at a second job stop working that second job.

With the U.S. underemployment rate at 12.9%, having additional jobs available for people to take shouldn't be a bad thing:

https://www.statista.com/statistics/205240/us-underemploymen...
I worked in a shop where we played a game called Chino. Everyone started with 3 coins in their left hand. Each transferred 0, 1, 2, or 3 coins to their right hand and extended their closed right hand. Each made a unique guess of the total coins. A correct guess wins the benefit or liberates the guesser from subsequent rounds to determine who had to do the dirty work. Modified for your situation, each would agree to have 0-3 coins when you meet. The total could pass for a pseudo-random number.
The answer is in the first three words: "have punched". It's stating something that has happened.
This may not be a requirement outside the U.S. But even if your country doesn't have similar requirements it'd be smart to look into PCI regulations. At least some of them do represent good baseline practices for security.
Here in the US, users avoid Verified by Visa (which I believe is the same thing) because it moves the burden of fraud onto the end user. Whenever that VBV page comes up, I immediately abort. I don't trust companies to keep my card data safe, so if the burden is suddenly on me, I'll just go without whatever I was going to buy if I can't get it elsewhere. It's that big of a deal. This is before we even get to technical issues or the UI/UX flow.
SCIGen has come a long way to producing a really realistic paper along with the hardware implementation ;)
https://pdos.csail.mit.edu/archive/scigen/
That's my guess. It's one of the few projects that I thought actually would damage my brain. I avoided it. Unlambda language is another one like that. Although I have considered trying to implement that one, esp in hardware.
May be it is time for Intel adding punched card extensions to the x86 ISA...
Not a whole lot, no. There are some cryptic documents on the language and some various experiments I've done with the seL4 microkernel. Currently I'm working on getting the language solidified and the completing the implementation (and removing all the usual dependencies, so that it should be relatively straightforward to port to a fairly bare microkernel environment).
This.

I wish I was able to have written what you just did.

< even as we approach this information equality, wealth inequality is soaring.

Ok So now you juxtaposed these. Is there a direct link?

Lemme ponder. Thanks!!
Program Your Brain, Hack Your Way to Productivity
The SystemD execution and update engine.
That is some excellent and honest language to describe why you put that in the contract the way that you did. Often people don't understand why it's there, and assume malicious intent to "steal" the private work of employees, but as shown in this case, it's simply an IP issue that cannot easily be resolved in a different way as far as you know. Reading your comments on the various places this discussion is happening, your clear and honest answers make me (and probably others) like GitLab even more!
>>>it's not clear to me that Github took it down because of DMCA.

Exactly, there seems to be a common misunderstanding that if anything is taken down then it because of DMCA, there are number of ways content may be removed from a platform, be it GitHub, Facebook, YouTube, etc. Not all of it is DMCA.

In fact for large platforms that offer take down processes outside of DMCA I would say the vast majority is not, for example anything taken down via ContentID on Youtube is NOT a dmca take down.
We are currently finalising design, but we have a minimum viable product. We just need funding to complete the project.

Indeed, started the project because I was tired of physically wrangling wires, specific value resistors and capacitors.
right, I was driving home the point that, even though github didn't build git, they didn't simply copy it.

> git never brought social interaction (issues, pull requests) into coding. GitHub created a lot of innovation in their product.

Many people feel like they stopped innovating here, and thus they choose gitlabs. As a startup, it has to answer the question you asked, and it has to work extremely hard to win developers, add features, and draw distinctions between github and gitlab.

The steve jobs quote doesn't make sense. In your example, if numerous people switched to android right after they offered the features ignored by apple, it would be pretty obvious they were important.

I don't dislike github. I actively like gitlab. You can choose whatever one you want. I personally am a gitlab user for the reasons above. These are subjective, but many seem to embrace them.
Yes it is happening. My old tor account that I never used to post was banned
Looks powerful, especially the automatic social, tasks, and live schema features.

Though I'd love to see mobile+touchscreen programming for experts that somehow was as effective as pc+programming.
Can we just use the webserver of Sanic with Flask on linux?
What kinds of business models will decentralized applications have? Any good examples?

A decentralized web seems like a logical next-step. Although, it's hard for it to happen just by developer power alone. Once viable business models and success stories emerge around decentralized applications (like ads on P2P file sharing client?), IMO, this will really pick up steam.
Islamic Prayer Times Glasgow UK
"So now I dug out my pad of coding forms and wrote one line on it, this time including the missing comma. I took it back to Maria and asked her to make me a new card."

Baby programmer. As an undergrad we were thrown into the deep-end and given those green/white programming sheets, pointed to the computer centre with its rows of 029 keypunch machines and let loose. This is what a keypunch looks like up close: https://www.flickr.com/photos/bootload/247968267/

While we had a micro-computer lab, we still had to use the Cyber mainframe to program with FORTRAN for data crunching map data. You really worked hard on your code. One mistake, one mistyped character and your printout was all debug. A year into my first startup, ten years later I missed the break-up of this machine. [0]

If I look over on my bookshelf, I still have a couple of decks. That's what I remember most. Card decks and rubber bands. Fun times.

[0] https://en.wikipedia.org/wiki/CDC_Cyber
Those are some huge caveats but you're filling a real need. Keep it up!
It's not unclear at all.

> Speyerer’s team used a computer program to automatically analyse 14,092 of these paired images, looking for changes between the two. The 222 newfound craters are distributed randomly across the lunar surface, and range between 2 and 43 metres in diameter.
I'm sure Jason Scott from the Internet Archive would love to image them for you.
> It was encouraging (for me) to see that Hillary was gaining more followers than Trump during the debate.

This is one reason I'm selective in who I follow. One may assume I'm following someone because I like them or what they say. Sometimes I want to see what they're saying but not necessarily approve of it.

That doesn't undermine the central argument of the piece, however.
Verizon closing call centers in 5 U.S. states, 3,200 jobs affected
I vaguely remember using script kiddie tool in ~1998 that used timing attack to guess windows 95 share passwords one letter at a time.
It's been a few months (9+) now that I only visit HN using Tor, and I have not encountered any problem (apart from the annoying Cloudflare pages, which I avoid using another Tor circuit). I created and used my account using non-Tor ip addresses before that though.
Mixing CamalCase and snake_case - `WhiteHouse/fb_messenger_bot`
Agree that this is not written with the rigor of a journal paper. Our intention was to communicate the simple wins we've had employing deep learning in comparison to the tools of the prior generation. XCMS is the most widely used library: http://www.bioconductor.org/packages/release/bioc/html/xcms..... It requires very painful parameter tuning. Internally, we had also built our own custom targeted analysis. In the targeted pipeline, we had to pre-specify "acetaminophen, shikimate, chorismate...". After building this deep learning workflow, we have exclusively switched over to it: no chemicals pre-specified, no parameter tuning. With about 185 engineered yeast that need analysis, with replicates, feeding conditions, and controls, these simplifications have been helpful.

We are getting easy wins over microbial data. Human data is noisier and we're testing over that now. More later.

If you have microbial data, or have used XCMS in the past and would like to compare, happy to chat. email me at saurabh@20n.
I'm thinking a risk v backbend for llvmpipe will be important at some time in the near future. Reason is that it will be easier to make a chip with 16 or more RV64G cores than to develop an open GPU in the same time. ;-)
China Has Kept a Tiananmen Square Protester Imprisoned 27 Years to Be Released
I'm thinking about converting the bash script to another scripting language as it should make it easier for the script to add some convenient features. Like auto escaping the path and providing more options to get info back from the web service. Also likely I'll restrict the app to only allow posts from localhost as a first pass in security land.
The key sentence in this post:

"a much more experienced SRE later came in to work with the team on making the same service operate better, and I got to see what he did and what his process for improving things looked like"

Operations is an expertise that you can develop, or you can decide that it isn't what you want to be doing. Just like machine-learning, games, databases, or operating systems internals: everybody can tackle a tiny project, but only a minority of people will like it and be good enough at it to
make it their life-work.
It would help if you limited it in scope to related areas. The scope of the current wording is beyond ridiculous.

As it stands the clause effectively prohibits anything done by someone employed by you, regardless of whether it has anything to do with the company or not.

Parts 15 and 16 are worded as IP and business protection. 14 is certainly over-reaching.

Taking the wording you have used it would appear that an employee has to request written permission from their boss to do practically anything:

* Participate in a code dojo or hackathon

* Assist a friend in moving

* Help someone change a flat tyre

* Change your own flat tyre

The absurdity of the examples follow directly from the absurdity of the restriction placed upon people accepting the contract.

Whilst an individual sensible enough to read the contract would likely raise issue with it, it is all too easy to pressure them into signing anyway with phrases such as "standard language", leaving all the rest not sensible enough trapped.

I also note it is ironic that you suggest an external lawyer gives free advice on rewording, presumably this lawyer would have to foresight to have pre-approved giving such advice with their boss as they operate under their standard contract?

Of course I understand this is very likely a complete oversight. And that GitLab is very unlikely to have any malicious intent in this. However I do find the existence of such a clause very alarming.
The name "symbolic learning" also applies things like the Google's Page Rank.
But isn't the traffic between me and the entry node completely encrypted? How can a passive observer even detect I'm sending/receiving a specific message.
> whether it solves the fundamental problems in the cryptographic situation it describes (viz. device which cannot straightaway engage in IP communication requires to receive unsolicitated securely-encrypted messages).

Please elaborate and clarify.
Actually it doesn't seem that weird to me. I don't recall anyone who bought a system from Xerox (as I recall they were in house development only and cost about $75,000 each to produce). But I do remember when they were being scrapped and the word went out that some ex-Xerox employees were rescuing them and looking for others to take some. I was sorely tempted to take a Dandelion machine (this was the mid-range D-machine that I was most familiar with). I could easily imagine that Alan said "I'll take one" and whomever was organizing the rescue made sure all of the "parts" were included when it was long past the time when you could easily boot one up and see if it worked or not.
At the very least, fortunately, archive.org seems to have it.
A better name might be hoop-jumper. If you want a POSIX shell and real interoperability with Windows, I can recommend MSYS2 instead.
Granted Heartbleed was only exploitable for a few years, but Shellshock was available since '89

And I'm pretty sure bug bounties would apply to shellshock and heartbleed as long as you can find a company with a bounty program that also used openssl or could be exploited via bash.
-- and make sure, if those notifications are emails, that they are not triggered every single time the error occurs, potentially flooding you with thousands of emails.
In the USA the federal government has established clear rules for anonymizing (de-identifying) healthcare data. So it's clearly possible to do so.

http://www.hhs.gov/hipaa/for-professionals/privacy/special-t...
With or without AI we already have issues with too much automation/assistance, and it get bad when automation they are failing/lack of maintaining.

Basically if you can drive a manual car, it is easy to drive an automatic one, but the opposite is not true.

Old GPS and even new one got 15% of the time the address wrong when I was a mover. Not only GPS failed, but what do you do when you have no usable maps?

Well, we have fired the people doing the maps, they are hardly updated at the pace mayors and real estates promoters are changing the territory, if you have an awesome GPS with no updated maps your GPS is useless, no?

We are forgetting to do the heavy underlying costly maintaining of maps, directions, forming drivers to read signs figuring GPS made them obsolete. Now we have to maintain: maps, satellite, computers and to live with people unable to use a map and a compass that are distracted when they drive by potentially wrong information and to dumb to read the sign saying there are entering a one way street in counter sense relying on their GPS.

Then too, the automation in Airbus/tesla and Boeing have proven to be less valuable then pilots' experience when computers fail due to false négative (frozen Pitot probes) or false positive (sun blinding cameras). I think civil and military records about accidents are a nice source of information about "right level of automation".

The problem is keeping up to date workers requires constant, heavy practice without too much automation. And human time nowadays is expensive.

That is one of the reason France (at the opposite of Japan) kept automation in nuclear plant rudimentary. Because when a system is critical, you really prefer human that can handle stuff at 99.999% than a computer that do great 100% of the time if and only if its sensors do works or nothing too catastrophic happens (flood, tsunamin, earthquake)

The problem is industry wants to spare on costly formations and educations (not the one from the university, I mean the one that is useful) but knowledge you have not yet crafted because of change of circumstances (I will be delighted to see how self driving car are behaving in massive congestion with dead locks) will be hard to program if we lose the common sense of doing the stuff by ourselves. How do you correct a machine misfunctioning to do something you have forgotten to do correctly yourself? You may even ignore when it will fail. Not because of it, but because of your lack of referential.
No. The Podesta emails are damning but have got very little acknowledgment.

This is the phenomenon of circling the wagons.

I've been going through them and there's all kinds of fascinating stuff. For example if you do a search for 'ocra100' you'll see John Podesta receiving three emails that sound like he's getting intelligence reports from Moldbug. Too many WTFs to explain here. Just go and see.

https://wikileaks.org/podesta-emails/emailid/1637

https://wikileaks.org/podesta-emails/emailid/295

https://wikileaks.org/podesta-emails/emailid/197

Well done to Glenn Greenwald though.
AIs do exist in the Dune world, they were simply forbidden after the Butlerian Jihad. The author didn't extrapolate, he made a deliberate decision to exclude such devices.
That is not the issue here. The issue is that the webshops aren't the problem code-wise but business-wise. They don't want to maintain their software that hosts the shop, completely ignore private disclosure or simply ignore it. If they don't want to fix it, the next best thing is to warn people about it.
There's an honest belief, off the hill, that Americans can't actually change a damn thing about our political system, whether through activism or calling our state and federal representatives or voting or basically anything. That we can't control a damn thing that happens on the state or federal scope.
In my experience they do check to see if you have items that are likely to be forgotten because they have to be brought from the wire cage such as stamps and gift cards.
Sometimes it is just a case of borrowing terms from one of several overlapping fields of knowledge as opposed to using a different term from one of the others. This is happening quite a lot in ML recently as ML borrows tools from classical AI, statistics (along with the arguments between Bayesians and frequentists), graph theory, information theory, game theory, neuroscience, software development, various branches of mathematics and geometry, and so on.

Borrowing the geometry-flavored term vector for the representation of a data point constituting a multidimensional magnitude+direction value[1] as opposed to the term explanatory variable from linear algebra/statistics is just happenstance, and is not an invention of a new term (or even a case of applying an existing term to something new).

Feature vectors and explanatory variables are, quite simply, two labels for the very same thing[2][3], and are often used interchangeably depending on context.

As for the familiarity argument, thinking of the data points as vectors is actually quite useful as a framing device for problem statements in terms of the tools and solutions it suggests[4].

[1] https://en.wikipedia.org/wiki/Feature_vector

[2] https://en.wikipedia.org/wiki/Vector_space

[3] https://en.wikipedia.org/wiki/Dependent_and_independent_vari...

[4] https://www.technologyreview.com/s/602025/how-vector-space-m...
I fell in love with computers almost 30 years ago. I was 6 and my cousin connected his 286 or earlier PC to a friend's using a modem. I was soooo impressed. I then started programming with a friend in his commodore 64 and my zx spectrum using basic. We created our own choose your own adventure PC games that way.so it's pure creativity enabling you to create amazing things using your mind... I don't know... That's what I like about it... Plus you are always learning.
Receiving emails isn't damning, you'd want to establish a pattern of mutual communication and reliance on the information contained in them.

(think about it this way, if my comment replying to you is really stupid, does that somehow impugn you?)
k4 isn't so bad, either. :)

http://kparc.com/q4/ha.txt
Show HN: Sass nesting feature in 90 lines of PHP
Top-Down Learning Path: Machine Learning for Software Engineers
What Neanderthals' healthy teeth tell us about their minds
Quick read through at midnight because kitty won't let me sleep. So please forgive anything I've overlooked. Also this isn't criticism just some feed back.

The DS1307 is great to start with but I would replace it with something like the ds3231(which is what you will find on eBay, just as a note with the common modules on eBay. You can remove the resistor that's on the simple battery charger and the resistors on the i2c lines if you use plan to use the internal pull-ups on the atmel) or the DS3232/4.

The 3231/2/4 come with intergrated crystals and preform temp calibration and are generally much more accurate.

The 3232/4 allow you to configure then that temp calibration happens furthering battery life (guess that's what your trying to achieve when you bring up about lowering power usage and making the CPU sleep).

The 3234 is the SPI version as your using SPI for the led driver might as well shift the RTC to the SPI bus too and power down the i2c bus completely or shift the led driver over to the i2c bus.

Another trick you can do is power the RTC from one of the micro pins, connect the RTC to power the interrupt from the RTC battery. That way you can cut the power to the RTC, wait for the interrupt. Decide if your going to read the time from the RTC, power up the RTC, Read the time. Kill the power to the RTC again. Note: This will reset a few things that will need to reconfigured with the RTC. But it will still tick.

Maxim have a very nice sample policy and they have sent me parts to my home address using my personal email (though not a free email provider). They did deny me once but I was being cheeky and asked for a "fancy" one wire ibutton reader. They sent me the cheaper one instead. Can't complain at that. As wel all sample options. Play nice and don't take the piss.

Also iirc the falling edge of the RTC SQW at 1hz is half way though the second.

Also ready the atmel power guides. Iirc if you set all the I/O your not using as inputs you will lower power usage, also disable all the prefs your not using such as the ADC http://www.nongnu.org/avr-libc/user-manual/group__avr__power...

Good luck and enjoy your clock :-) (I have have one of my own but isn't counting to Friday).

Also there is a bit in the RTC (forget which bit in which register and don't have the data sheet to hand) that get set if the RTC lost battery power. You can use this and the default time of the RTC to determine if you need to set the RTC time (like your doing using the compile time in setup()) another trick with that. I've found the 2nd compile in a row is normally much faster then (not always the case) so instead of just uploading the code. Verify the code first, then it upload that way your not rebuilding the whole thing and the set time to compile time will be a little more accurate.
Right, okay. It stood out to me too, because there are compilers and larger applications targeting Brainfuck, so it seems strange to only choose “hello world”-style programs.
That was my observation. He should buy another server. Heck, he could even put it on a cheap, throwaway as the slow but available is better for static content than unavailable.
Has federated anything every really caught on?
Why should an attorney for a competing firm be party to any discussion as to your future compensation?
God, I love this.

In realtime we're seeing the conservative position on wikileaks melt into friendly affection at "that old rascal", while the liberals are undergoing the reverse metamorphosis.

I can't stop laughing. This is so surreal.