skysight-inc/HackerNews huggingface dataset:
You can build your portfolio and download data on Finviz [1]

[1] http://finviz.com/quote.ashx?t=AAPL&ty=c&ta=1&p=d
It's strange that they're using a 2012 i7-3820 instead of a modern i7. They're also missing price when comparing a ~$300 i7, 2x $700 Xeons, a $650 GTX 1080, and a $4k K80.
The person responsible for making the table with the benchmarks needs to be taken out back and shot. Goddamnit, who makes a table with 286 figures and only uses lines of equal width throughout the whole goddamn thing. Also, I second haldora's qualms about the lack of consistent software used to make these hardware comparisons.
Human augmentation through artificial intelligence
I...just do it? I don't find it to be complex at all. Use one or another method of user authentication for SSH (I use SSSD, but no solution can be really universally recommended), launch gitolite (a six line Chef recipe), do the same for Boxcutter or whatever you need.

I tend to think that the problem isn't complexity, the problem is the current developer culture being so predicated on it's easy, you don't have to understand things that having to understand things borders on anathema. Yes, doing this does require understanding how your tools work, but that doesn't make it complex. And you should know anyway.

Or pay me. My rates are reasonable. =)
I am not seeing the "bonehead" part of it. Just banal evil.
I thought about this as well, I think its just a symptom of "privacy policy fatigue", how many of these notifications does the average person using a handful of services receive in a year? The velocity of updates to them seems to be increasing. Also quantifying the impact or intent of the changes is not always obvious and clear.
Wow. That means the same culprits are still out there with their botnet? And it's still growing?
Yes. Despite writing both straight assembler (68k processors) and C back in the 90s, I also fell into the Enterprise Java-trap for a long while. GWT was my go-to front end framework, and it worked I suppose.

It's a bit hard to compare these days, since browser quirks were much more pronounced back then. I remember tackling differences in IE4/5 vs Netscape 6/7 and all those hacks and workarounds seem absurd now. When GWT entered, it at least unified these platforms and worked around many differences for me.

And don't get me started on server side enterprise stuff. I still run screaming when someone proposes "IoC containers" or "workflow engines" in NodeJS. Never again!

Wonder whether "Virtual DOM" and "Transpilers" is what I run screaming from in 10 years?

(i already decided against transpilers, ES6 syntax isn't worth the overhead imho)
I appreciate your opinion, but when I see that companies like JNJ are 67% owned by Mutual Funds and Institutional Investors[1], most of whom are low-cost and inactive, it tells me we've gone too far.

An I am not advocating for more finance professionals. Paying active managers to invest for you can cause the same problems I'm talking about. I'm advocating for personal responsibility and attentiveness.

[1] http://finance.yahoo.com/quote/JNJ/holders?p=JNJ
... both US candidates being so openly prejudiced (eg. Trump on Mexicans, Clinton on her gender card) ...

From a European perspective it's hard for me to understand this. It seems like a textbook case of false equivalence.

I watched the last debate. Trump talked about "very bad hombres". If Clinton were equally prejudiced against men, I'd expect her to have said something like "men are selfish shitbags". Of course she said nothing of the sort.

How do you see Clinton playing the gender card? On the abortion question, she talked reasonably about the difficult situations that women face, while Trump was yelling about "ripping babies out of the womb one day before birth". The rhetoric of the two is so different, I just can't see why you equate them as hateful bullies.
True, but he (and Munger) generally invest quite conservatively. He doesn't buy for capital gain, but to hold indefinitely. He buys businesses he understands, with financials he understands, for prices he figures reflect a fair discount on the economic value, plus a generous margin of error.

When full ownership is taken (his preferred option), the original management is almost always left in place. No rules or guidance are given. The subsidiaries work however they worked before acquisition.

That said, after reading through his 50 Berkshire Hathaway letters, the main lesson I drew was: own insurance companies which underwrite for profit under all economic conditions.
"A human being should be able to change a diaper, plan an invasion, butcher a hog, conn a ship, design a building, write a sonnet, balance accounts, build a wall, set a bone, comfort the dying, take orders, give orders, cooperate, act alone, solve equations, analyze a new problem, pitch manure, program a computer, cook a tasty meal, fight efficiently, die gallantly. Specialization is for insects."
— Robert Heinlein
And squash merge is still an ee-only (paid-only) feature ¯\_(ツ)_/¯
nasty behavior is pointed out

This trivialises the discussion because there is no agreement on what is sexist, racist or otherwise nasty behaviour. For example a certain form of radical feminist thinks all heterosexual intercourse is rape. Plenty of people think affirmative action is racist.

Finally, and maybe most importantly, the communist tradition has murdered millions of people in the name of social justice. And older people who still remember the communists often can't help but see that eerie similarities ...
Very cool! I didn't realize screen had this. I've always used sz/rz when needed. It's kludgy but comes in handy every so often. I have it installed on all my linux boxes for that special occasion.
I'm not a US citizen but from what I understand, if Clinton was seen as mediocre politician, there would no Trump-danger. The only thing that makes this election somewhat interesting for outsiders like myself, is that she's the only candidate I could think of that has a real, although slim, change of losing.

Given recent events in Europe, I will wait for election day, polls doesn't mean anything. Also, the fact that nearly all mainstream US media I read is extremely pro-Clinton might have an unexpected backlash a-la Brexit.
Russian indicted in U.S. on charges of hacking LinkedIn, Dropbox, and Formspring
I did put "open source" in quotes for that reason. At the time, it what somewhat novel to be able to get the source code at all, and even more novel that the writers would accept code from end users to put back into the product.
Aberfan was 1960s.

Fukushima was 2000s

Flint was 2010s

It wasn't "ago", it is an ongoing battle. The greed and evil reappear whenever we get complacent.
>When you give a friend of a friend $10,000 to start a company, do you just hand it over no questions asked and with no follow-up? Or do you try to get engaged with your investment?

That would depend on the company and the agreement we make on how I'll get compensated (will I own a %, etc)? That agreement is clear when investing in a fund. Once we have an agreement, my only concern is he/she keeps their end of the deal.

>Make sure the CEO isn't sitting on his ass collecting a paycheck? Scrutinize it for potential frauds?

Unless you're buying your own stocks, this is a potential problem with every fund, not just index funds.
No, Facebook, ‘Diversity’ Doesn’t Explain Your Support of Thiel
> If a short term rental is violating noise ordinances, fine it or shut it down,

But who's shoulders this extra enforcement cost? Not AirBNB, right?
OP here. This is the language learning app that I've always wanted: no typing and tapping, lots of listening and speaking.

Would love to get feedback from HN community!
I am continuously blown away how quickly Gitlab is pushing out releases. It's been amazing to see the product grow over the years.
Offer loans between particular serious
Are you a business man or woman? Do you need funds to start up your own business? Do you need loan to settle your debt or pay off your bills or start a nice business? Do you need funds to finance your project? We Offers guaranteed loan services of any amount and to any part of the world for (Individuals, Companies, Realtor and Corporate Bodies) at our superb interest rate of 2%. For application and more information send replies to the following E-mail address:beatricepfam@gmail.com
React can be quite confusing

> https://www.google.com/search?q=React.createClass+versus+ext...
I've been wondering if the UDP nature of a DNS server makes it harder to protect. Particularly coupled with the amplification attacks that DNS makes possible.
What this event shows is that using DNS as a load routing/balancing mechanism is a bad idea (because that's why folks have low TTL and an inability to specify truly redundant secondaries).
Doesn't one typically write to tape drives with tar, rather than writing a raw file?
I am curious does Cyanogen address any privacy concerns on Android?
No, I haven't had the right project come up (I'm a statistical consultant, so my projects are largely determined by my clients).

I've heard really good things about it though. It's supposed to scale well.

It's on the list as something I plan to use in the near future. We've had projects in the past where we shipping Excel workbooks that had VBA written to integrate with R from the command line, which is a horrible thing to do to both Excel and R. Replacing that with a cleaner integration will be nice.
last night the consensus was 1.2 tbps.
The "crash" utility[1] has been doing this for a while on live QEMU/KVM guests, but there's certainly a need for easier to use tooling.

A long time ago I wrote some tools that let you get process listings, dmesg and so on from guests[2]. Unfortunately the kernel developers didn't want to provide an easy introspection method so it ended up being a constant battle to modify it for changes to the internal kernel structures (although not impossible, just a full time job which I didn't want to do).

Actually, just getting dmesg from a guest is super-useful when the guest "goes away" and you've no idea if it has crashed or why. Nowadays I use virt-ls to find out what a guest is doing[3].

[1] https://github.com/crash-utility/crash

[2] https://people.redhat.com/~rjones/virt-dmesg/

[3] https://rwmj.wordpress.com/2012/02/27/using-libguestfs-to-fi...
Also very useful to discriminate against undesirable strata of society. [1]

[1] https://en.wikipedia.org/wiki/Burakumin

Isn't Big Government great?
Sounds like IETF needs to update the DNS standards with 'intelligent' features, so that we can have some consistency.
Matt Iglesias is the quintessential illustration of why US voters are flocking to politic outsiders and saying the D and R are just two sides of the same bad coin.
Very cool indeed. It's the first news/article I have read in awhile that isn't anything negative. It tries to push the boundaries of humanity by doing something innovative.
Does anybody have solid recommendations for secure IoT devices? Initial searches lead me to believe that they are non-existent.
My takeaway from this was that Julia has @nobounds option to remove bound checking.
It's not inarguable at all. There is a third option besides agrarian subsistence and modern industrial subsistence: global partnership an fair trade, instead of Westerners profiting from Eastern misery.
Is there anything like this for / can this be used with AWS?
I think it was recent, yeah. I also recall there being problems with their assembler not being able to parse various SIMD instructions in the past. I also recall seeing code like in your link too.

Hmm, Go 1.7 introduced support[1] for various AVX instructions (plus at least one SSE 4.2 instruction), some of which are used in blake2b-simd.

I can't wait to get SIMD on Rust stable. It's going to be exciting.

[1] - https://golang.org/doc/go1.7#tools
I am done starting startups
Yeah, that's the point. You rise with the market, you fall with the market.
Automating Ad Hoc Data Representation Transformations
Right. It's sort of a loop hole where they technically use an iframe for PCI compliance, but they don't actually get any security benefit from it.
I've been doing this for 20 years now, and little has changed. It's not that developers don't think they have to understand things; it's that their incentives are to understand things that are relevant to the problem domains of the products they are working on. Reliable and efficient deployment strategies are not usually in their problem domains.
Templates need some level of logic, yes. Putting the entirety of the business logic in your templates is not only bad, but dangerous. Because unless you're replicating your business logic in your non-template code, I can change things in the DOM, and potentially corrupt the system.

Unless I completely miss the boat about how Angular/React/Vue/etc are supposed to be used. I only know from my previous years of seeing it done in the way I mentioned above, and every time, the work always ended up duplicated in the non-template code.
The point is that everyone knows (or should know) that Internet communications contain at least 10× more trolling than any other common medium, and thus people should have sufficient emotional self control to avoid getting mad at least until they have definitively determined whether a particular idea is intended to be serious.
What's the worst-case scenario again?
> everybody else will blindly use whatever formats we choose

I'm a developer and I was LITERALLY in the process of backing up my iPhoto library (200GB) using Xz just now.

welp
Precisely by being an investor in the old sense, the sense of being a businessman who allocates capital. He buys entire companies based on his analysis of their financials and management, and then operates them as businesses. He tries to take stakes in companies in deals where he holds an advantage, such as his Goldman Sachs investment. I don't consider him a stock picker, he's a very shrewd businessman.
These kinds of tools use hypervisor APIs that allow you to inspect memory from outside the guest. eg. QEMU's pmemsave command. I would think it's highly unlikely that AWS would want to give out such low-level access, not least because you can do very bad stuff if that access gets into the wrong hands (eg. read "secure" bits of guest kernel memory).
Intellectual masturbation much?
> about why Rust is slow

If the Go programs don't use explicit SIMD, then "explicit SIMD is still unstable in Rust" does not explain the difference.
> "make it easy for non-programmers to write templates"
> I feel like that has been an illusory strawman from the start.

You're right, the nonprogramming web designer may be a rare bird. Even if they exist, they don't exist long. I have always believed that someone can pick up the rudiments of programming in a couple of weeks. Someone who starts out writing HTML and CSS will eventually rub up against JavaScript. In time they will incorporate a snippet of JavaScript here and there. First it will be mindlessly pasted from the Internet. But after reading enough blogs, they will be bundling React and adhering to the functional programming paradigm to load their own blogs. Come to think of it, I wish there were more people who knew just HTML and CSS.

More seriously, I myself know HTML, CSS, and a few programming languages, but unless the page is very simple I still like to separate things into template files. I prefer Handlebars, but often I just use PHP's alternative syntax.

> apparently suffer from a nervous breakdown if they have to look at
> an if-block or understand a for-loop

Well, if-blocks and for-loops are the two main pieces of logic I think every template syntax must have. Mustache said it wrong. Templates should not be "logicless." Templates should be "processingless": they should not have side effects or further manipulate the data. This is okay:

{{#if items}}
<ul>
{{#each items}}
<li><a href="{{url}}">{{name}}</a>: {{description}}</li>
{{/each}}
</ul>
{{else}}
<p>none</p>
{{/if}}

This is less nice:

<p>Any items you have will be listed below:</p>
<? $q = pg_query('select * from items') ?>
<? if (0 !== pg_num_rows($q): ?>
<ul>
<? while ($item = pg_fetch_assoc($q)): ?>
<? if (userCanSeeItem($_SESSION['username'], $item['id'])): ?>
<li>
<a href="<?= h($item['url']) ?>"><?= h($item['name']) ?></a>:
<?= h(ucfirst($item['description'])) ?>
</li>
<? endif ?>
<? endwhile ?>
</ul>
<? else: ?>
<p>none</p>
<? endif ?>

The problem is not ifs and loops nor the use of raw PHP, with its alternative syntax. The problem is the database calls (pg_query), controller-esque function calls (userCanSeeItem) and text clean-up (ucfirst). This kind of stuff should be hidden inside a model-esque function (getItemsOfUser($username)) which returns a ready-to-print associative array.

I use templates not because I'm scared of all that. Instead it's sort of like the recently re-loved functional programming paradigm. Template files should have no side effects. I know that once I stuff the data into a template, then nothing else will happen besides output to the user's screen.
This exploit is in the wild today because the fix was blocked by an obsolete hardware platform? Sigh.
Mirai-Fueled IoT Botnet Behind DDoS Attacks on DNS Providers
I wonder how much of this would be mitigated/avoided if folks would just change to something other than the default credentials on IoT devices?

Is it that simple? or am I missing something?
The code for it has been released on Github, so there are now likely to be many botnets.
> From a European perspective it's hard for me to understand this.

From a (my) European perspective it's hard for me to understand any of the Trump/Clinton ... thing.
Well, a good initial step is usually changing the default password.
Personally, what I love about React is how simple the model is. There are no Directives or Filter or whatever else. It's just a Component with a state, a render and some life cycle methods. That's it. The full power of Javascript in a render function. The second you try to move away from the "full power of javacript to render your view", the more you need to add special cases in your template engine.

Just randomly going through the Vue docs, we see stuff like:

>> Note that you should not use an arrow function with the data property (e.g. data: () => { return { a: this.myProp }}). The reason is arrow functions bind the parent context, so this will not be the Vue instance as you expect and this.myProp will be undefined.

I don't want to deal with this crap anymore. I'm still making nightmares about $scope.$apply. (Yes I know Vue doesn't have the $apply problem, that was just an example).

Where I think Vue.js really shine is for teams that want a standard, industry proven solution, to build web apps. Similar to Angular, you don't have to re-invent the wheel. You just look in the documentation and use whatever is built for you. I think this is great for many projects. Personally I've been burned by the limitations of those frameworks and I'd rather keep my freedom to build things the way I want.

In the Vue comparison, they say this is how you build components with React:

render () {
let { items } = this.props
let children
if (items.length > 0) {
children = (
<ul>
{items.map(item =>
<li key={item.id}>{item.name}</li>
)}
</ul>
)
} else {
children = <p>No items found.</p>
}
return (
<div className='list-container'>
{children}
</div>
)
}

If you're the kind of person who keep repeating that kind of code everywhere in your app, then yes, maybe Vue.js is better for you. But such if/else pattern is easily abstracted away with a simple function which makes it as concise as the Vue snippet without relying on directives in templates. Also, keep in mind that this is only one use case. What if it needs to be slightly more complex? WIth Vue/Angular, you're forced to add directives or whatnot. With React, same render function. I like that cognitive simplicity. Yeah, maybe the render function is slightly more complex, but at least there's only that to be aware of. Not hundreds of directive/filters/whatnot spread everywhere.

In a way, I feel like React is more lower level. I use it to build my own framework on top of it. Where I feel like Vuejs, similar to Angular, is the framework.
Tracking Human Rights Violations with Satellite Imagery and Crowdsourcing
Kind of the inverse of the Sokal affair, where a physicist got a gibberish paper accepted by a cultural studies journal. [1] Although this seems like a pay-to-present conference, so really just a scam. Still, I liked his quote: "I know that iOS is a pretty good software, but reaching tenure has never been this close."

[1] https://en.wikipedia.org/wiki/Sokal_affair
and giant flying cockroaches
It is worth pointing out that this blog post is old, from January. Julia 0.5 adds a phenomenal new feature, the dot syntax [1], that automatically fuses vectorized expressions. I believe that feature was added quite a while after this blog post was written.

Currently the dot syntax works for all functions, except for operators like .+, but in julia 0.6 it will work across the board. At that point, an expression like

A.*B.*C

will automatically be translated into the de-vectorized loop version that the author identifies as the fasted way to implement something like that, without the need for any macros or other special tricks.

[1] http://docs.julialang.org/en/latest/manual/functions/#dot-sy...
It's a "Competitor" to Angular.js, focusing on the web but with plans to go on android/ios like React Native eventually.
Airbnb Sues Over New Law Regulating New York Rentals
Simple. When everybody is in an index fund composed of the whole market, then everybody agrees their money ought to become more valuable and poof, so it is.

What could possibly go wrong?
Nothing is free.
>The unfortunate truth is that with the Internet of Things the amount of devices that can easily be taken over has grown so fast that we see DDoS attacks of unprecedented size.

Not quite, the "IoT" botnets are particularly small in the great scheme of things. Google "conficker" for example.

Edit: Interesting how this is getting downvoted so much. Conficker had up to 15 million nodes, far bigger than any "IoT" net (when did home routers become IoT anyway?). It's far easier to build such huge windows nets because you get millions of insecure computers with relatively standard hardware and software, not so much with "IoT".

In the past decently sized botnets simply weren't used to send DDoS attacks as much, that's all that's changed.
<h1> <? echo $y->title; ?> </h1>

You forgot htmlspecialchars and now you have XSS. Which is why facebook built XHP originally:

https://www.facebook.com/notes/facebook-engineering/xhp-a-ne...
I would say this is true of a lot of non-technical, popular non-fiction. I would consider "The Art of Electronics" [1] one of the greatest pieces of non-fiction in the English language, but that sucker's dense.

[1] https://www.amazon.com/Art-Electronics-Paul-Horowitz/dp/0521...
Who would be the regulator for webcams sold in Uzbekistan? Who would enforce those regulations in Ukraine?

I'm not saying regulation is bad. And we have it already. Look at that alphabet soup of little logos in the back of every electronic device you own.

I'm just saying regulation is an imperfect solution. Tort law and economic incentives are an imperfect solution. And I am wary of government solutions, even if they are the better choice.
I do not understand the appeal of squashed merges. The only pro i know of is the ease of reverting a merge. On the cons side: you obfuscate an entire branch into a single commit, effectively making git-bisect useless. Furthermore, if multiple people collaborate on a branch, all code blames to one person, quite literally rewriting the code history.
Simulating a Xerox Alto with the ContrAlto Simulator: Games and Smalltalk
or 2x krebs, the 2nd? previously largest in history; we could use that or this incident as the future benchmark of ddos capacity.
Attacker may have been involved with the 1.5Tb against OVH.