skysight-inc/HackerNews huggingface dataset:
The cache contains ephemeral _PUBLIC_ keys, that would otherwise be transmitted to anyone who requests them by the message recipient (perhaps through some encrypted channel, but without meaningful authentication). In essence it's the same thing as PGP's encryption subkeys, which are completely published, but the cache contains more of them as the keys are preferably only used once (there is one difference in that the cache gives only one key at a time and will not give the same public key again as long as it contains enough of them).

So: making the whole thing completely public only enables adversary to match session initializations with receivers, which the server can do by definition as it has to route the messages to correct recipient. (In the case without such central server, anybody observing the traffic could do that, as another role of the central server is to mask sender addresses on the lower protocol layers)
Best Alternatives to Bitcoin
The biggest issues I see with the language didn't made into this list: for instance, I can think about more serious issues like accessing the wrong variable name does not returning an error, assignment and initialization being the same (thus also suffering the same issues related to wrong names), various surprising type conversions, defaults, and so on. I guess it all boils down to the mindset of the language itself, as the article says.

However, I disagree that "other languages do not work like that thus are not as easy to test". You can implement this in any way you like in any other language. You can implement your webserver by forking a new process at every call. You can even use a worker that communicates to a different hot-swappable process. It can efficient as you want - copying the whole data around, sending file descriptors, etc. The alternatives are endless.

PHP may be "interpreted and hot-swappable" by default, but that's an accident from it's design and it only works like that - if you try to use it as a long-running process, you'll run into a lot of issues. It's also terribly inefficient - have you ever developed a web interface for an embedded platform? A really embedded one,
like 32MB of memory, shared with the application itself?

I guess in the end it boils down to the duct tape analogy: it's terribly fast to prototype something with duct tape and scraps and you can join a multitude of materials in a very simple way - just put everything in place and cover with enough tape to hold it together.

Surely, it works.. but that's about it.
It's not so much that the field is broken, as that the field is ridiculously hard. Remember that every time you see someone on HN talk about A/B testing; employee relations; the effect of open-plan offices; UI and UX; how to extract payment from a recalcitrant client; anything to do with politics; why real-estate costs are high and their effect on a neighbourhood; or even right down their IDE's colour schemes, they're talking psychology. The highest-rated post on the front page at the moment, with over 2200 upvotes, is "Be Kind".

As a topic, psychology just does not lend itself to being able to be boxed up with a little bow. It is easier to get by as a charlatan in psychology, sure, but that's due to it being innately fuzzy and hard to pin down. You hear physicists speak of electrons being a 'probability cloud' rather than a 'thing' that can be cleanly predicted, and how that is absolutely mindblowing... but that's the kind of stuff that psychologists have to deal with as a matter of course.

> Science is prediction, not explanation.

... yet considerable effort is spent trying to figure out the Big Bang - and it's not like you'll find anyone claiming those efforts are "not science". I disagree with this aphorism.
> I'm sure compliance personnel, at least, would like to know what is said in the discussions about them

It's not common practice to record office conversations. Neither is it common to forbid offsite meetings.
> Would appreciate it if a HN mod can confirm.

It's probably better to email them. They don't always see these threads.

Here are three threads from 2 years ago:

https://news.ycombinator.com/item?id=7894816#7895823

https://news.ycombinator.com/item?id=8203164#8206090

https://news.ycombinator.com/item?id=7825556

The new things dang talks about are the [vouch] link, which means users can rescue comments marked as dead, and bring mod attention to the account to turn off the dead. (I think that's how it works. I'm not a mod. Here's the comment that makes me think it works that way: https://news.ycombinator.com/item?id=10624178#10638699 )
Just to clarify, Koa can be considered an evolution of Express. It's not "based on Express" per se - there's no dependency there. It has been written by authors of Express - in that sense, conceptually, "it's based" on good ideas behind Express.
I think "founding programmer" or similar would counteract negative signals. It would certainly be more accurate.
The Artist of the Unbreakable Code
There is a nice example of machine learning with python and R in Analytics Vidhya and other tutorials, also ISLR introduction to statistical learning with R gives you an overview of some standard methods.
> the secrecy isn't

They won't reveal their identities to Bloomberg. This is like saying "Apple won't release attendance and transcripts of its executive meetings to the New York Times; therefore, they are up to no good".
Forget the aop store. How do we know Google, Apple, Microsoft, Ubuntu, etc doesn't give us a malicious kernel update?

I don't think we have good solutions for the problem of malicious updates in general.

The only one I can think of is a trusted hypervisor that hashes memory in the guest and reports on it. And even then, how do we trust that?
I cannot believe this "study" was performed by 3 people who, in all, interviewed 23 people of whom only 12 are using TOR. This sounds like a really hollow research paper.

Actually the whole Wikipedia-editor-who-uses-TOR demographic is probably quite low so I don't get the point of this research. The conclusion just reads as a cascade of open doors to be kicked in:

The team reviewed a number of solutions that could allow users to veil their identity, but the authors point out that before anonymous participation is allowed by sites, the administrators of these open collaborations must recognize the value of contributions by anonymous users — rather than trying to ban or out them.

“If such voices are systematically dampened by the threat of harassment, intimidation, violence, or opportunity and reputation loss, projects like Wikipedia cannot hope to attract the diversity of contributors required to produce ‘the sum of all human knowledge,’” the authors write.
>You think dependence is a given and I am not even sure how to go forward with this conversation

Well, even you evidently are dependent. At least, if you telling me what you think is to some degree intended to solicit a response from me, your conversation depends on my answer. Humans are social, which is by definition pretty much not independent. Sure, this is splitting hairs over the meaning of dependence, but I didn't get what that's to do with AI, anyway. Surely, the AI depends on its design while the design constraints, the laws of nature if you will, are a given.
Today's Newspaper Headlines [15 October, 2016]
> Smallest Federated Wiki is a software platform developed by Ward Cunningham which adds forking features found in software development tools like GitHub to wikis.[1] The project was launched at IndieWebCamp 2011.[2] The software allows its users to fork wiki pages, maintaining their own copies.

>

> Federation supports what Cunningham has described as "a chorus of voices" where users share content but maintain their individual perspectives.[3] This approach contrasts with the tendency of centralized wikis such as Wikipedia to function as consensus engines.[4]

- https://en.wikipedia.org/wiki/Smallest_Federated_Wiki

In short I guess if I disagree with a page instead of editing it and starting an edit-war I can fork it.
Automated planning systems and languages have some interesting ideas you could look into. I worked on a similar idea with yours for resource allocation a while ago, even before deep learning and automated planning had a lot to offer.
I certainly understand that it belongs to GitLab and they can absolutely run it in any way they see fit. If there are certain types of content that they do not want to host, they can absolutely refuse to do that -- and remove such content when they discover it.

All I am saying is that they should identify what types of (otherwise legal or permitted) content they will not permit to be hosted on their platform. It is implicit that illegal content will be removed but that's not what I'm referring to.

For example, if a web host doesn't want to host the KKK's web site then they can absolutely refuse to serve them. If $webhost's religious CEO doesn't want to host content related to gambling, well, that is their right. If Amazon doesn't want to host Wikileaks, they don't have to. I just wish companies would state what content they don't permit instead of using a term like "objectionable" or "unacceptable" and interpreting it however they like from day-to-day.

I'll admit that I haven't read all of their various Terms and Policies in their entirety (there's a lot of them!) but I did skim through them and didn't see anything other than the usual mentions.
I'm in a similar position myself. I'm in the final year of my BSc, and am looking at doing an MSc to develop my knowledge and skills in software engineering and information security, and also in research. Academic research is something I'm interested in pursuing, and an MSc should help me to determine if it's right for me, and to prepare me for it.

I suppose whether or not to do postgraduate study depends on what sort of career you want to pursue and what skills you need. There may well be other ways to acquire those skills, though a benefit of an MSc is that it is very widely recognised.

(That's just my initial impressions going into this, mind.)
Flash crashes don't seem to kill markets. Too many people realize it's an opportunity, and quickly buy.

Also worth remembering, the stock market is not the economy
So if they implemented a small extra procedure to copy text and send on a side-channel when a flag was set externally, if such a thing was done then this would be obvious to many people despite it being closed source? Aren't these apps developed modularly?

Or indeed if it were a patch that could be initiated as forced update at will from the server-side, again that would be clear to "people" based on the client side binary?

These are the ways I imagine I'd snoop on supposed end-to-end encrypted communication channels; there's probably something much cleverer, but again, we're saying that can be detected easily?

Genuine questions, not a programmer, not familiar with the state-of-the-art of reading machine code/interpreting network traffic, nor indeed with which watchdogs are guarding against abuse by the TLAs.
A couple of concrete names from this "plenty" would be a good start...

That is, those who read WhatsApp disassembly and did thourough enough review to warrant with sufficient confidence not raising any flags. It would also help to know which specific build the were looking at.
Thanks for the info. The tl;dr is "It's fantastic to see that I've been able to use a machine that costs 1/10th of the one used in the 8 x Tesla K80s benchmark but still have queries running within 33% of the previous performances witnessed."

However, I'm suspicious of the numbers in those articles since the author lists only 4 data points in each trial and doesn't mention the stdev in his measurements. One of his measurements was .964 vs .891 so it looks like the Titan Xs were 90% as fast as K80s if the numbers can be trusted.
Writing Quality Code
'It will be a bloodbath': Inside Kansas militia plot to ignite a religious war
The trick is to first raise the topic of "alternative" therapies so that you can all have a go at being smug. It then becomes an amusing dinner-party contest in who can be the smuggest and no-one is offended, or at least, no-one present.
Show HN: Build a Slack-Bot with Node.js and Yargs and Heroku
Uber CEO and Pittsburgh Mayor Discussed Reducing State Fines, Emails Reveal
High quality anti-aliased lines aren't a bottleneck in video games, but they're very important in CAD applications, so enterprise customers paid a large premium for Quadro cards with CAD-specific functionality. The specific list of premium vs consumer features has varied over time, but previous generations of consumer cards could have their professional features unlocked via modded drivers.
> Note: I don't have anything against Muslims,

You make very many anti-Islam posts for someone who doesn't have anything against them.
Even if you had access to the source code, how would you verify that the app you are running was compiled from that source?
> Evidence that the DNC purchased craigslist ads in attempt to frame Trump

Is that actually evidence of an attempt to frame Trump? This is very clearly a fake ad. No one would see this and think it's real. This looks like a political ad in very poor taste.
These New Robot Sex Dolls Have Some Creepily Lifelike Features
Show HN: Rockhopper – Launch windows apps from bash on Windows 10
I made a thing this afternoon. If you are using windows 10 and would like to open windows apps from the ubuntu bash shell normally you can't do that. I wrote this app to (sorta) let you do that. It's a two part app, first is a dotnet core webapi C# app that runs on your windows box. Next is a shell script that you put in your path on the ubuntu shell.

It's called Rockhopper (named after a species of penguin, since you are hopping form Linux to windows with this app is just seemed like the right name :) ), and you invoke it like this:

rockhopper -c code -a C:\\\\Users\\\\shawn\\\\Documents\\\\file_to_edit.txt

That opens Visual Studio Code from windows with that file passed in. Couple of caveats, the windows app has to be launchable via the windows cmd prompt, currently only supports 1 argument to open and the pathing is touchy, and lastly this has absolutely 0 security built in. I plan of fixing all of that but would welcome anyone else's contributions. Speaking of that it's all open source and MIT licensed here:

https://github.com/jaegerpicker/Rockhopper

Have fun and use github to report issues if you have them. Currently I don't have a binary build up yet but I do have TFS doing CI so every push to master kicks off a build, I'll publish them if more than just I use it at some point. It's early but very much working.
I've had this blog post in my head for a couple years now that some day I'll get around to writing. It's titled "Toward a Common API", and it's basically about this - the convergence of best practices, naming conventions, patterns, etc across languages and frameworks that (IMHO) is a wonderful thing in that it reduces ramp up time when coming to something new.

It came to me after playing with Rails for several years and then taking a look at Laravel, which is clearly Rails inspired in many ways but made some different decisions in the naming of a few things that are present in both frameworks.
The people you're afraid of ("if anything, this list provides a potential target list for other hackers to try and compromise those stores even further") already have access to the data gwillem used as a source.
I'm surprised this article does not mention the use of virtual credit card numbers in their list of solutions. I use one-time / temporary card numbers with expirations and dollar limits from my issuer[1] for both online and over the phone transactions

[1] https://www.cardbenefits.citi.com/Products/Virtual-Account-N...
I can't say anything about whether it's "worth it", but ubuntu on Windows has become my default shell for everything that will run there. Which is most command line utilities, build scripts, Ansible. I still run jupyter from the windows shell since zmq has some issues, and GPU stuff doesn't work there.
That would be correct until you figure in momentum as long as you stay under that threshold your hypothesis holds, if you get the device moving or swaying it won't. Of course this can be compensated for in software. So Point taken.
but I didn't get what that's to do with AI, anyway.

Humans get a lot of feedback other than explicit algorithms as to how to act or behave or what to do. A lot of that is social feedback and a lot of the expectations are about what other people think, in essence.

If you want an individual item with AI to be functional and "intelligent," we need to be able to write algorithms that work without that extra stuff. In order to effectively write those algorithms, we need to be able to think differently about this problem space than most people do.

Yes, conversation is inherently dependent on another party being involved. It isn't conversation if you just talk to yourself. Conversation has the capacity to add value.
>You know, instead of assuming a vast conspiracy, you could use regular ol' common sense.

Except if you actually read the emails, you'd see the bigger picture. Clinton's people are setting him up, see https://news.ycombinator.com/item?id=12715664 and http://nypost.com/2016/10/14/trump-camp-puts-forward-witness...

There's no disputing that Trump isn't fit for the Presidency but this whole groping thing is being orchestrated. He said some dumb sh*t years ago and now they're literally paying people to come forward and say he groped them.

Add to the fact that in the emails there's evidence that Scalia was murdered and people should be sitting up and taking notice.

That's the disturbing thing, not Soros buying the presidency, not Scalia been murdered, not Trump been framed, not Hillary's corruption, not the invasion in Syria etc etc but the simple fact that most people either don't care or are just oblivious this is even happening.
Probably observed. Thats about how long we've had continuos satellite coverage.
Thanks for sticking with us Dudul. We want to make sure performance will also be a reason to pick us and are working on it in https://gitlab.com/gitlab-org/gitlab-ce/issues?scope=all&sta... and https://gitlab.com/gitlab-com/infrastructure/issues?scope=al...
Is there any information available (or has there been any analysis done) on the quality of any random number generators in use on mobile phones, especially Android and iOS?
I guess you are contradicting yourself, while you say

>humans don't really do intelligence all that well themselves

>[(the definition of) intelligence] is not unclear to me

because knowing the definition of something and knowing something is largely the same, so you say you know intelligence, but humans in general don't do.
Feel free to propose a secure, decentralized way to pass the payload between the endpoints. Be sure your solution includes an effective mechanism to mitigate spam. Bonus if your solution denies attackers access to the same metadata centralized systems do. Double bonus if you can support push messaging systems to deliver timely notification that users have come to expect.
More specifically: U.S. law puts a $50 cap on consumer liability, but many credit cards voluntarily lower it to $0. The $50 is a ceiling, not a floor.
Psychology must get used to the idea of transparency and to the reform made possible by how the Internet (as a broad term to generally describe the current change in communication) has made it easier to scrutinize and challenge scientific results.
Quickly looked over this and the thing that caught my eye is that it says you can set up distributed systems that are available offline through device to device communication. At least, I think that is what it does. I could not quickly find more information on that. A diagram or something would be helpful to visualize this, with an explanation of the protocols that are used. Maybe I missed the examples or case study section.
It's also pretty terrible UX-wise. I don't understand how to navigate it.
Key thought: AI's social and cultural impact, in other words AI's implications on "social mobility" (your rags to riches stories, the American dream).

The authors are asking: in a hypothetical world where many decisions are AI assisted, what is the risk that AI systems slow social change because they are too dumb to understand exceptions, peculiarities, positive externalities? What can we do to establish parameters that will allow us to know when a certain AI system is trained well enough to be used in real world, with minimal risk of undesired social and cultural implications?
> Claims of scientific misconduct (in a general sense) ought to be taken seriously by scientists.

I disagree. Not all claims should be taken seriously; most should be ignored. Claims accompanied by abuse seriously and rightly damage their own credibility; if I see abuse anywhere, I just stop reading and move on.

There are not nearly enough resources to address every random person's claim about every issue in the world. People don't read every book and website, address every conspiracy theory, or give time to every crackpot or amateur who wants to have a say. Google doesn't listen to every users' ideas about their software; the military doesn't listen to everyone's strategic recommendations; physicists don't listen to every person's theory of thermodynamics; the pilots of your airplane don't want your input on how to do their jobs. I have no interest in random people's ideas about IT; they have no idea what they are talking about.

You need to demonstrate that you are worth their time by establishing credibility. It seems silly that because people have access to a platform that amplifies their voices, they think professionals will want to hear from them.
GPUs sound cool, but here's what I did with the same dataset, one using flat files and another using cassandra:

https://www.michaelfogleman.com/static/yellow/

https://www.michaelfogleman.com/static/density/
So, where's the content? How many backups are there? How many backups are offsite? Are any publicly-available?
BioBlocks: Programming protocols in biology made easier
this vs. firebase for sync ?
Ask HN: Why do you like programming?
I am interested to understand why programmers are often so intensly passionate about coding. One obvious aspect is certain economic prosperity that the profession brings, but money is only (small?) part of it.

Programmers often work hard on personal and/or open source projects in their spare time without any financial benefit. It would be difficult to find accountants spending weekends on their personal accounting projects or any other professionals seemingly always working outside of their paid jobs.

So, what is so special, enjoyable, engaging about coding?
Still, overqualified candidate supersets qualified/unqualified. He/she should pass the test.

Failure of recognising overqualified candidate from under qualified is a failure on the recruiter side, not the candidate side.

Recruiter is of course allowed to say "I'm sorry, but you are well overqualified for this position". In this case he was falsely recognised as somebody under qualified.
I really wish this myth of "if it's a beginner language, it must be a dialect of BASIC" would die out already.

Yes, BASIC was designed to be a language for beginners. And yes, it actually delivered - in the age when "serious" stuff was written in Algol, PL/I and FORTRAN. Things have changed a lot since then, though.

And there are so many better choices for a beginner PL these days, there is absolutely no reason to go for BASIC other than nostalgic value - which, to a newbie, means nothing.
> I wonder if this is a convergence on a local maximum...

It's more like a global minimum.

With many of these micro-frameworks, you're observing what is near the minimum API required for mapping a web request to a single function.
Crazy shower room dance in music video for Swedish electro artist Flyinglow
"Just because we shouldn't doesn't mean we won't"