skysight-inc/HackerNews huggingface dataset:
Ask HN: What's your office hygiene checklist?
Regarding ventilation, lighting, restrooms, etc...
I've been using it in production for a large app for the past week and it's been great. CI is faster, deploying is faster and dev is faster.
Thank you :) So pleased you appreciate it, there's a surprising amount of time and energy spent in all that. And yes that was exactly my thought, the hacks could be useful for any number of reasons, not just broken screens in the Himalayas.
Or ship every new device with a different randomly generated 10+ character password and writing it on the device's label just like the MAC address. I agree you would need physical access to the device to gain access to it but you can always change the password to avoid this. There are vendors that already do this with the WiFi key.
Ah, I thought you were trying to argue that they were unaware. Thanks for clarifying :)
Show HN: Temp News – A Simple Hacker News Clone in Eugine
Artificial Intelligence forges Chrome's Ninja Dinosaur
As my gran used to say - "we don't bake 'rather' cookies here". I mean, I'd 'rather' lay in my hammock sipping pina coladas, but here I am on a Sunday afternoon waiting for my project to compile. Every job has aspects to it that aren't much fun, that's why it's a job.
Yes, but distributing the copyrighted art with your clean-room reverse-engineered engine is not legal. Hence, no art is available for this engine, and you have to procure your own copy of the art, presumably from the CD you purchased, in order to use the engine.
Too late. The attack payload apparently turns off the Telnet service to prevent other botnets from taking over the device.
In America, you are 100% allowed to do these things to your own house because you have to live with the consequences.

The trades are here to protect other people from me asserting my skill in electrician-ining, when I have no such skill but represent to others that I do.

Who is the ISIS of plumbing? I'm confused by that assertion.
Working in a large organization straight out of college, I've learned the meaning of the phrase 'pay your dues.' When you get hired at a large organization, you're expected to fall in line for a while before you get entrusted with political clout. Many people chafe at this: why is someone of my caliber wasting his time doing low-level work in an obviously broken system when I could be making real change happen?

The naive and/or cynical answer is because the organization demands conformity: wouldn't want to hire a fresh thinker to derail our institutional gravy train! Let's burn them out by making them jump through an arbitrary and tedious series of hoops so they come out the other end too limp and tired to overthrow us! This interpretation is nonsense.

The informed answer is that this stage is an additional filtering process. Being a leader in a large organization requires politicking: coalition building, patience, tact, etc. Not every junior hire will develop these skills. Organizations that endow too much power in someone lacking such skills will inevitably suffer from unnecessary conflicts and (often) fruitless instability.

This post seems like the author is listing his accomplishments while stunned that they alone don't qualify him for tenure. However, I would wager anything that his potential to accomplish these sorts of things was obvious to the department from day one. If so, it likely influenced their decision to hire him in the first place. His achievement of this potential yielded little new information. Meanwhile, his ostentatious conflicts and overly vocal style likely did.

My personal assessment is he's clearly a brilliant and hard-working faculty member, but the rock-the-boat actions he boasts and the very fact that he wrote this post suggests that he lacks the soft touch of a leader. Tenure doesn't just mean being un-fireable, it means helping shape your institution, and a brilliant leader without a steady hand is more trouble than he's worth.
The point of unions is to give workers bargaining power where they previously had little or none. In programming, good talent is in short supply and there are plenty of job openings. As a result, the worker holds all of the chips, eliminating the need for a union at the present time.
Because it breaks things. Updates sometimes break things and require human intervention to get the device running properly again. This can happen since systems use different hardware. With IoT it's an issue to a lesser extent, but you can also brick those with an upgrade.
In actual fact, I have to use pen and paper more than usual because vanilla Android can't display 2 apps at once. So for example, one time I wanted to read something from Wikipedia into a Whatsapp audio message, so I had to write the salient points down on paper first.
There is something that is not right with that list. Mexico City is on that list but not San Francisco? I have been to Mexico City and rent is about a third for a similar sized apartment in San Francisco.
Are you sure it wasn't just connectivity problems related to it? Netflix uses Route53 for DNS, not Dyn.
I think I see what you're saying, and I agree that laws and morality are similar. That said, I do think they can be meaningfully distinguished. Edit: I understand you make this distinction as well.

The duty of the judiciary is to interpret and apply the law. The creation of the law is the job of the legislative branch. It seems to me that while people may agree or object to laws on moral grounds, the judicial branch is focussed on the application of the law itself, not the moral aspects of it. As the legislature creates the law, one could argue that they're more directly responsible for encoding morality into the law. Though some might think in some cases the judicial branch abuses it's interpretive duty by "legislating from the bench".

What do you think? Edit: I suspect we're actually quite close to agreeing.
We are in agreement. My comment was to the effect of "the author took literary license, most (native speakers) probably knew that, don't beat a dead horse."
Ask HN: How do people sell algorithms online?
I see many great people develop great algorithms in hacker news everyday. But what is the best way to find buyers if you want to sell ?
So how does he know they're so great then? In academic career progress contexts, citations are what matters. If your 'great' papers have 2 citations, they're objectively not great - in fact, they're pretty shit even. They might become 'great' next year, time will tell - but making a case of how great a researcher you are with a paper selection like that is, well, not very smart.
Your point is sound. So is his.

A change requires orientation, energy, and whatever RoI. This guy - as he describes himself subjectively - is all about engaging his own energy. Orientation is essential and is expected to come from managers (dynamics). Managers also choose a strategy that improves the RoI (kinetics). Engagement is nevertheless absolutely essential to make change happen IRL (work). That's a pity an agreement couldn't be found with his managers. It seems there's kinda misunderstanding going on here, that should have been managed appropriately.
Not accurate, Reddit was on CloudFlare previously and switched to Route53 a few weeks ago.
What could the backend logic possibly be this worked?
I heartily agree that the best approach is "do all the things".

My point above is that there are very sane regulatory changes that we can implement immediately, as part of attacking this problem.
Some people are extremely allergic to dogs, and not just when the dog is in the room; dog dander sticks around in a room for a very long time.

Policies to keep pets out of certain spaces isn't because of a lack of a fun environment, but looking out for some people's sensitivities.
Well half the time there's no Internet at all. Then the rest of the time it's mostly high latency and Internet at ~5kbps. Perhaps once a week we get a few hours of 3G, hitting speeds of 200kbps tops.
Thank very much :)
This also explains how Trump increased republican primary turnout while upsetting republicans. It's not that there are more trumpists than traditional republicans (the general election is proving that). It's that just that Trump did have plenty of support from outside the party that he could pull into the primary.
Some examples of categories whose arrows aren't functions:

(0) Any monoid can be viewed as a category with a single object. The arrows from the object to itself are the monoid's elements.

(1) Any preorder can be viewed as a category such that, between any two objects, there is at most one arrow, precisely when the source is less or equal than the target.

(2) Given a directed graph, or more generally a quiver[0], there is a small category[1] whose objects are the quiver's nodes, and whose arrows are the paths (finite sequences of edges) from a source node to a target node.

[0] https://en.wikipedia.org/wiki/Quiver_(mathematics)

[1] https://en.wikipedia.org/wiki/Free_category
I'm unfamiliar with whatever recent chatter on "primitive obsession" there's been, but it's not a new idea ( http://www.jamesshore.com/Blog/PrimitiveObsession.html ) and has been discussed elsewhere ( http://wiki.c2.com/?PrimitiveObsession ).

Frankly, while I do see the point about fixing it with value objects and whatnot, I rather think that is a sign of wannabe architect/PL wankery.

Javascript has a basically useless type system in practice (especially with legacy code) and has a lot of really handy/flexible features that would only interact badly with attempts to fix this "primitive obsession" stuff.

I don't think it matters in the JS ecosystem.
Here's something he didn't write about: Postdoc at MIT (2010–11), PhD from Harvard (2010), 5000+ citations with an h-index of 14 [1][2].

[1]: https://www.linkedin.com/in/geoffrey-challen-572b771a

[2]: https://blue.cse.buffalo.edu/people/challen@buffalo.edu/Geof...
Setting aside the odd use of the term "racist" (counting Englishmen a distinct race sounds very 19th century)...

> "All English are dunks so I'm forced to avoid them."

That's not what drieddust said at all. His (her) problem isn't with the English being drunk or not - it's with the English expecting him (her) to drink if he wanted to be part of their in-group. Which is a reasonable complaint.
Or, ISPs could simply block all service to offending IP addresses. The customer would see a notice: "The following IP address delivered N Gb of traffic over our network as part of a malicious DDOS attack. Please patch or isolate the offending device and contact customer service at 123-456-7890 to restore service."

I guess that wouldn't make your customers super happy, but it would probably be effective.
Regulation, yes, like making someone responsible for these devices (owners, network operators, manufacturers, anyone would do, really). The 'internet of corporate things that the user is locked out of' aspect of the GP's comment is a red herring.
Citation not needed. This is merely ignorance
I'm definitely a cynic, but that post was based entirely in fact.

A presidential appointment is very important. They nominate Supreme Court justices (although the new rule for the senate is apparently refusing to vote on/approve of nominees if the president doesn't belong to your party.) They have veto power over laws, and can force a supermajority. They do have some level of control over military actions (not enough to unilaterally start World War 3, but still.)

But they do not have absolute control. If Bernie wants universal healthcare, he'd have to get congress to pass it. The same congress that barely passed the insurance industry's dream legislation created by the Republican party in the first place. You think that congress is going to pass single payer? Or free college education? Keep dreaming. Sure, if we elected 60 senators like Bernie Sanders, we might be able to do something amazing. But Bernie alone? Not enough. Obama couldn't even shut down Guantanamo Bay.

Don't get me wrong, I'd have been elated for Bernie to have won the election. It was obvious in 2008 with Obama's reversal on marriage equality that he was just another career politician. Clinton is far worse than even Obama. Bernie was the first candidate I actually believed meant what he was saying. He had an entire lifetime of advocating for the change he spoke of. But you're hopelessly naive if you think he could have actually brought about the things he wanted.
My feeling is firm pessimism.

Upton Sinclair said, “It is difficult to get a man to understand something, when his salary depends upon his not understanding it!” As the WSJ says, we have “tenant organizations, unions and church groups” fighting to pass rent control. They all face imminent declines in power if their constituents have to leave. I guess they are hoping for breathing room, until either the economy collapses or “permanent BMR units” can be built to help with the inevitable churn. But rent control by itself makes the situation even worse for the working class.

No amount of science and repeated real-world demonstrations seem to matter to the self-appointed “soul” of the community.[0] The people are, on the whole, just looking for somebody to follow, and the activists are indoctrinating the kids early and often. Horrible legislation has a decent chance of becoming law.

[0]http://www.theatlantic.com/politics/archive/2015/12/san-fran...
I've seen equally as ridiculous web bugs, computing prices browser side in javascript, credit card numbers encoded in REST API endpoints, financial websites not supporting 2FA at all or mixing http requests into the sites. We're solidly in the dark ages of web security still.
I did think of that, also getting a crappy external monitor too. But I didn't want to reinstall everything again and my laptop is pretty powerful, so I didn't want to lose out on that. Also, I just like the challenge of a hack.
Well, that's his side of the story. Burning bridges publicly while signalling that you are difficult to work with is a twofer. Classy. Subtle. There are 8 people who have any second thoughts answered, and likely two others who might not abstain if given a second chance.

Life goes on. Pick up your pieces and build a new dream. Don't stand on the bridge you are burning.
Same goes for propaganda and media control.
Too bad I'm on android. It would be good if you had some video/gif on the landing page of a demo or it being used, that way I get an idea as to what value this adds as opposed to the more marketed ones.
multiple NSF grants and multiple papers in top conferences - his research IS good, innovative and interesting. Also, a majority of the external letter writers had positive things to say.
504 Gateway timeout

A bit ironic :) (being distributed it shouln't be a single point of failure ;) )
We're talking about a system for people trying to cheat card games. It's not novel or technically sophisticated.

This would never work in a casino/card room. The people who buy this would do so with the intention of scamming their small group/card game. Yes it is silly.
Some things to do right now:

- If you don't have a very well defined need for a short DNS time to live, set your time to live to a large value, perhaps a day. Then, as long as someone can get at least one DNS request through, they can reach your site all day. (Ycombinator.com, why do you have a TTL of 12 seconds?.)

- Get multiple DNS services now. Not just two. Get four or five, some of which are not widely used.

Those two things will probably get you through future DNS attacks.
ТОП 23 проекта как можно заработать в интер
Through play. Camera would need to recognize card type from capture of card face up. This plus the back of same card would link the unique signature and the card value.
I really like Google's Recent Log in Activity and Location. So anyone logging into your account from a Different location, you are automatically notified. But one of the problem with this is that once hacked, it exposed your location as well.

2nd thing is 2FA. I hope 2FA becomes the standard for all login. Even SMS. ( I know SMS is not save in US, but I am not sure if similar can be said in EU or Japan )
A small lithium ion with a sub-dollar charger/regulator is probably cheaper than a supercap.
The simplicity of this exploit demonstrates something profound. The most dangerous things in life are not hidden deep in the weeds. Rather, they stare us in the face in the most obvious spots. It isn't the unknown that presents the biggest threat. It is the known that we never gave a second look.
They weren't given loans because they were incapable of figuring out they were bad loans due to insufficient data they were given bad loans because there was money to be made by giving out bad loans and bundling into mortgage backed securities. They deliberately crashed our economy as part of an effort to inflate their bonuses because they just don't give a fuck about you. me, or America.
Yep. If the person was really empathic they would go out the back and tip the busboy and dishwasher.

Tipping needs to die.
Something like this: (PHP felt like the right approach here :p)

if ($selectedOption == SECURITY_QUESTION)
{
if (isset($_POST["SecurityQuestion0"]) && isset(["SecurityQuestion1"]))
{
if ($_POST["SecurityQuestion0"] != $answer0 || $_POST["SecurityQuestion1"] != $answer1)
{
// invalid answers
return;
}
}

authenticateUser();
}
The music industry is vicious. Monetizing any app in it seems to step on someone's toes. As a small developer, one faces going up against a legal defense out of one's budget, even without doing anything wrong. I really don't think it's a space that can be won.
If there's a SMS challenge, process.

If there's a question challenge, process.

If no exceptions were thrown, you're authenticated.
I'm using Verisign's VIP Access app (silly name) to generate PayPal's 2FA tokens.

Good thing is it works without access to my phone.

Bad thing, the app has a unique ID that PayPal only allows me to use for one of my three accounts.

Wish they implement TOTP.
One of my PayPal 2FA phone numbers is listed twice and both cannot be removed (errors when I try). Their support can't help with the situation because their side wasn't able to see the duplicate.

This is not surprising to me.
The problem with this happening in China is that, given the rampant corruption, authoritarianism, lack and transparency and lack of rule of law in China, the system is pretty much guaranteed to be expressed in the worst possible way: used for population control and political repression, and gamed by those in power for their own benefit.

Something really bad is happening in China. There's been talk for a few years about abolishing the hukou system of housing registration, which would appear to be a step towards liberalization, but at the same time the government seems to be running full tilt in the other direction, developing new systems for control. I just left China after fifteen years, and when I moved out of my apartment in central Beijing, an Indian guy was considering moving in after me. The local police station told my landlord, "no Indians". Later they told her, "no one without a Beijing hukou can live there", which is pretty staggering if true, as the majority of Beijing residents don't have Beijing hukou.

I don't know what's going on, but levels of paranoia in the higher reaches of power are spiking, big time.
Ouch!

Also, PayPal really needs to stop using SMS for 2fa.

I expect more from a payment processor that is linked to my bank account.
It's not like Oracle even cares about the "EE" name anymore, so why not? I mean, for crying out loud, Java EE 7 came out over 3 years ago but they still don't offer any certifications for it, but they do for Java SE 8 which is just under a year younger.

And you're right, most people doing greenfield at this point are probably using "EE" components in "SE" projects. I use Spring (Boot), but also use Narayana (JTA), Hibernate (JPA), ActiveMQ (JMS), and if Spring didn't handle DI itself I'd pull in Weld (CDI) as well. Hell, if you don't want to use Spring you can just use Wildfly Swarm.

Java EE is dead, even if Oracle finally finalizes Java EE 8 I see most work migrating from wars/ears deployed to containers to running embedded containers like Spring Boot (+pick your container) or Wildfly Swarm.
Where did Trump claim that he won't accept the results of the election? In the debates, he refrained from saying one way or another.[0] There's a big difference between what he said and what you're saying he said.

[0]: Trump: What I’m saying is that I will tell you at the time. I'll keep you in suspense, okay?

Read more: http://www.politico.com/story/2016/10/full-transcript-third-...
Then just modify the Mirai source to disable internet access and isolate the devices instead? It's already public.
I think it's not really an appeal. Instead you let your application for promotion continue to the next level up the chain. But letting it continue up after one level has rejected it is essentially an appeal.

"Appointments require full review and votes at all levels (including the department, school/college, PRB [President's Review Board], the Provost, and the President.)"

http://www.buffalo.edu/content/dam/www/provost/files/Faculty...

I'm sure a strong majority at the school/college level would work! There are probably even a few (very rare) cases where a President has overturned department and school/college rejections. Probably ultimately it's the President's call.

Here's a small qualitative report on university presidents overturning tenure decisions: http://www.eg.bucknell.edu/~mligare/governance/adhoc/crtp_fi...

(My rough back-of-napkin summary: it's a once-every-10-years type of occurrence, and can go either way).
Can you share the code? I am curious to see the what kind of attack vectors were applied.

Having enough product knowledge to be able to exploit the specific firmwares is what I meant by a deep understanding of the firmware.

My hypothesis is that either the person spent some time working out which cameras to attack, they had previous experience within the surveillance industry, or they did research on common network recorder exploits.
> But academia is petty and political, and from what I'm reading, his odds don't look good.

Yes, he should recalibrate his ideas of why he wanted to work in academia.

Today if you want to get ahead you need a patron and some people who know enough to bounce ideas off them.

I think it increasingly the case that universities are the worst place to send a real intellectual. Some of the most useless people in the world are respected here.

I've been to one, I'll say what I think. I think most university people are posers. Completely unfit. Institutionalized.

Then they are requested to perform. And they cannot. They like are those plants specialized to perform only in a certain Alpine microclimate.

Result: psychological sickness and poor pay. Employers don't know what to do with these people. And society insists on manufacturing more of them. It's a sick system, and it is best to get out while you're still honest.
Simulations, Universes and Possibilities
The US told Ecuador to give Wikileaks 'an eviction notice'
I heard overwatch is 20.8 tick rate
Inside 'BioShock' Video Game Series with Ken Levine
Whatever protocol you use, its traffic will be flowing the same pipes.
This does happen, I've had it happen on a product I developed based on a SBC and a non commercial SD card. They make special SD cards for this reason.
return all([is_valid_answer(q, a) for q, a in params])
Or reading a 500 MiB file via file APIs.