skysight-inc/HackerNews huggingface dataset:
Brazilian banks have been offering these for decades. It's astonishing that this could be a novelty in the US.
> "I like the "it's complicated" theory, but it also a bit of a cop-out. Can we not have a meta-theory?"

Isn't a "systems collapse" the meta-theory you're looking for?
You seem to be arguing install scripts vs package managers, and we are all discussing something else.
Awesome, thanks. I've seen a couple articles that referenced librarians and edtech together, but this gives me something else to look for.
Apparently nobody gives two shits of a fuck what is in those emails, no matter how unsettling their contents are. Why not keep publishing those while you destroy Wikileaks?
The IoT devices can be accessed over telnet. Out of curiosity: Is there a self destruct command? or a way to make one?

It seems to me that destroying the vulnerable devices would solve the DDoS problem and gives a big kick in the face of the affected manufacturers plus a good press coverage.
Xmsg a simple process communication module
That helps, thanks!
Being cautious and careful with my information is an extremely basic standard considering the position they are in.
It is only silly from the eyes of C community.

CppCon 2016 is full of talks regarding how to write type safe code, how to prevent memory corruption, how to tame UB.

What does the C community? They drop the C99 security guidelines into an optional annex in C11!

Another proof how the C community is deaf to how C's use is hindering how industry.

Meanwhile C++ community is aware of the safety issues it inherited from C and is trying its best to improve safety.

In C++ I have access to:

- Type safe strings via std::string

- Type safe dynamic arrays via std::vector

- Type safe static arrays via std::array

- Type safe enumerations via enum class

- Type safe out parameters via references

- RAII

- Controlled access to unsafe operations via encapsulation and overlooded operators

- Type safe IO via iostreams

- Type safe metaprogramming via templates and inlining

- The preprocessor should be used just for including header files

So no, they aren't the same thing in security mentality.
New kind of computer built for complex problems
I've been looking for a remote job lately. Despite having interned at Microsoft and Google, almost nobody seems to be interested, and even if they are, it's for a salary like $30k. I'm in Eastern Europe, but still, that's a really low wage.

So if you're so desperate for engineers, why not hire remotely outside North America, the most competitive market in the world for engineers? I realize it's much more comfortable having everyone in the same timezone, but sure it's preferable to hiring nobody? Also you can probably pay 30% less and still get great engineers.
If you read the article, you would have seen that those have existed in the US for 40 years.
As far html vs jsx goes, i would say its a matter of taste.

But when it comes to css, vue's css are way better than React's alternative by a longshot.
From this krebsonsecurity.com post: https://krebsonsecurity.com/2016/10/source-code-for-iot-botn...

According to research from security firm Level3 Communications, the Bashlight botnet currently currently is responsible for enslaving nearly a million IoT devices and is in direct competition with botnets based on Mirai. “Both [are] going after the same IoT device exposure and, in a lot of cases, the same devices,”

So, roughly 1 million IoT devices. And the source code for Mirai is freely available, so there's a DIY kit for anyone to use.
> I'm counting the days until cars will be weaponized remotely via rich text message received on your onboard entertainment/computer system which isn't physically disconnected from the vehicle controller because it at the minimum accesses status info.

I still don't get why car companies don't just put a diode between the vehicle controller and the infotainment system, and make it physically into a one-way-push system.

On the other hand, once self-driving cars are a thing, that point is almost moot... you need an internet-connected device with incredibly complicated code to run one.
Google DayDream View: The New VR Headset
The article mentions the Vanguard 500 Index fund and states that it launched 3 years after 1973. So it's hard to understand what you mean when you call it a novelty in the US.

(without being deeply familiar with the history, I think the Vanguard 500 fund must have been one of the earliest index funds anywhere, if not the very first)
The point is not that all human-picked funds/portfolios perform worst than index funds, but that most of them do.
I think there's some FPGA code somewhere to emulate external RAM...
Aren't there specialty publishers for home schooling?

I was home-schooled for a year as a kid, and we used to get catalogs of specialty curriculum (classical education in greek, latin, religious books, etc). Perhaps not material for a "start-up", but there is definitely a very enthusiastic customer base.
The point of index funds isn't that at any moment in time no one can have a market beating strategy. The point of index funds is that by definition the bulk of the market can't have above average returns. So as a retail investor your best bet is to just find a cheap way to ride the average of the market.
You can't shoot someone halfway across the world with a gun you buy at WalMart.
> Rust should have a lower learning curve
Rust should have a pleasant edit-compile-debug cycle
Rust should provide a solid, but basic IDE experience

I know the list isn't necessarily prioritized, but these 3 feel backwards.

A good IDE will provide can help facilitate easier edit/compile/debug cycle which makes learning the language faster because it's cheaper (time wise) to figure things out.
RIHANA SHOWS SUPPORT FOR HILLARY CLINTON
You can't just build a "suite of tools" and give them to a customer to fight a DDOS. The way DDOS is mitigated is by making routing changes at the network edge. This is not something you want a customer to be able to do for obvious reasons. And these in themselves are sometimes not enough and DDOS mitigation will require coordinating with transit providers, again not something you would want put in a customer console.
Luck can be the actual explanation.

By the law of the large numbers, some funds will be a success for quite some time. Just as some people do win the lottery.

I don't think it's surprising that a couple of funds have a great track history even if the game is just pure luck.
Maybe late rolling it out in production. Experimenting with it not so much.
2007 https://www.microsoft.com/en-us/research/project/emips/
Even open sourcing it in 2011 http://blog.netbsd.org/tnf/entry/support_for_microsoft_emips...
Indeed, personalities don't matter. To make an analogy, there are scientists whose personalities, and even political views, turn me off. But what matters is whether they do credible science.

If it's just somebody's hobby to release information, than that's as far as it goes. But in order for the information to be actionable, it requires interpretation, and then the process of choosing what information to release becomes important.

Imagine how a hypothetical scientist's results would be interpreted if it were known that they were only publishing the information that favored their own agenda -- personal, political, commercial, etc. Yet none of the data points that they publish can be discredited.
Renaissance Tech is an interesting read.

Here's a couple of stand out items I cherry picked for no particular reason what-so-ever...

According to the Center for Responsive Politics, Renaissance is the top financial firm contributing to federal campaigns in the 2016 election cycle, donating $33,108,000 by July.[33] By comparison, over that same period sixth ranked Soros Fund Management has contributed $13,238,551.[33]

On 25 September 2008, Renaissance wrote a comment letter to the Securities and Exchange Commission, discouraging them from implementing a rule change that would have permitted the public to access information regarding institutional investors' short positions, as they can currently do with long positions. The company cited a number of reasons for this, including the fact that "institutional investors may alter their trading activity to avoid public disclosure".[32]
How to create an app for your business? What are the stages of building an app?
For centuries, the notorious Bermuda Triangle — located between Miami, Puerto Rico and the island of Bermuda — has been linked with a high number of unexplained disappearances of aircraft and ships in its waters.

The "Bermuda Triangle effect" has only been around since the 1950s, and since then most claimed disappearances within the triangle have been debunked as either never having occurred or having occurred outside the triangle.

https://en.m.wikipedia.org/wiki/Bermuda_Triangle
Vue vs. React + MobX
It's not clear who fabricated the claims, but they definitely took advantage of Clinton supporters' willingness to spread dubious attacks on her enemies and their tendency to go after anyone who questions them. I mean, a dating site claiming to be UN members and that the UN is conspiring against them is way out there in nutty conspiracy-theory land, but if you look at the comments on say the Daily Kos article about this people didn't just go along with their claims, they even accused people questioning them on places like Twitter of all kinds of nasty things.
Really? I'm pretty sure I searched through and saw some dating back to at least October 15th, and others I kept scrolling back and couldn't even find them via a CTRL-F search. I'm not super versed in Twitter though so maybe I made a mistake, I'll have to double-check.

EDIT: Ok yeah, I definitely made a mistake about those dates. I can't find the tweet containing "recipie" at all, was it deleted? Sorry, I had no intention to mislead anyone.
Thai junta says Google removing content with royal insults
Probably someone needs to ask IANA to do so. As far as I know (and I'm happy to learn otherwise) the first mention of .well-known/pki-validation was Ballot 169 https://cabforum.org/2016/08/05/ballot-169-revised-validatio... to the CA/B forum.

It is possible that the people drafting that ballot didn't feel they ought to approach IANA until after it was voted through, and then they simply forgot.

It is also possible that the subsequent IP fuss (a bunch of CA/B members turn out to have patented some methods listed in Ballot 169) distracted everybody

Finally it's possible IANA just didn't get around to updating the list yet.
Tips for using async functions (ES2017)
Nothing seems to be loading on YouTube and Hulu this morning, FWIW.

http://downdetector.com/status/hulu
http://downdetector.com/status/youtube
For when you want it for traffic you want to pay for, not for unwanted traffic no one wants to pay for.
I think it's about time they updated http://dyn.com/ddos/

It was an unprecedented attack, sure, but I'm not sure how their sales guys are going to spin this.
For differences, it might help to tell people where you are coming from
Me, I don't even believe in funds. If managers are not better than blindfolded monkeys, why should we even pay them? Just buy diversified stocks, and never sell unless you need cash.

https://en.wikipedia.org/wiki/Buy_and_hold
Web Data Visualization of the Hillary Clinton Top 100 Network Graph
And in this case, it's a false claim.
Thus: it's an abuse of the DMCA.
Yeah, those prices don't seem that great. I pay $75 for 100/100 fiber and routinely test at 125+ in Portland, OR.
Being a versatile hacker is becoming more important than knowing frameworks
Pretty much every router is sold with UPnP turned on.

Many IOT devices use UPnP to open their interface to the world.
Excluding FFI I might just be able to count the number on unsafe blocks I’ve needed on one hand. But honesty compels me to declare that for reasons of performance micro-optimisation, I’ve written a lot more.
Does Effect Size Matter for FMRI?
Billy's not a bully
Is it just me or do the survivor counts make no sense in this article?

> 240 pupils of the Victorian red brick Pantglas Junior School

> The 10th and last child to be brought out alive, he was treated for head and stomach injuries.

> A further 28 children were injured, many seriously.

> There are thought to be about 20 or so of the surviving children left in Aberfan.

> They had registered the deaths of 116 children

So… only 10 were pulled out alive, but 20+ survived? 28 were injured, but not dead, but not pulled out alive? 124 weren't registered as dead?
One you decide to invest in an index fund, what "advice" needs to be automated ?
Cloud Computing Weekly Digest with Joe Kinsella: October 22
rot13: V jngpurq gur rcvfbqr, bcrarq UA naq gurer vg jnf. Ba pbaprcghny yriry vg jnf bar gb bar znccvat orgjrra gur rcvfbqr naq vzcyrzragngvba.
I guess you mean "scraping", not "scrapping"
Why we love or hate science
I've run my own dns infrastructure for a medium sized company. It could get attacked. And you better be sure your providers are OK with the bandwidth usage or they will shut you down. You could be down for hours. If you are targeted it could be very bad.

Amazon and providers like Dyn have Anycast so routing will normally be faster than what most companies would want to spend on their own dns systems. And they can absorb most large attacks. Not to mention that uptime for route 53 is near 100% usually and is pretty cheap. I don't think you could build something cheaper for yourself that offered similar features to route 53.
Machine intelligence makes human morals more important
I think it's much cheaper to buy ETFs compared to buying single stocks. Also easier to rebalance in a diversified portfolio. The key is to pay as little in fees as possible.
They still produce tactile clicky, tactile but fairly silent and linear (not clicky, not tactile) varieties of even mechanical switches. All of these varieties are quite different and you can get them with different kinds of springs.

I don't know if all these varieties are available in keyboards straight from Cherry but multiple version of all of them are found in keyboards by other manufacturers that utilize Cherry switches.
Technically yes. "utop" is the extended repl, but "coretop" is "utop" except it all ready has Jane Street Core loaded up.
Not so small or non-existent anymore and growing fast http://thefederalist.com/2015/09/01/why-homeschooling-is-gro...

I would say this is a great market to focus on as a startup. Get into a fast growing market while there is still little competition.
> I think it's much cheaper to buy ETFs compared to buying single stocks.

You will pay a lot more but it'll be a one time cost. Whereas ETF fees are a yearly one.

> Also easier to rebalance in a diversified portfolio.

The strategy I was talking about means you should never have to do that.
Craigslist, of course! Duh!
Rebalancing, tax loss harvesting, and asset allocation as you grow older (i.e. more weight in fixed income as you approach or are in retirement.)
I hear this misunderstanding a lot as well, generally in relation to AWS S3 SLAs. 11 9's of "uptime" would mean service could be be down for 3 milliseconds a year. 4 9s is very respectable.
The whole focus on IOT and random individual devices on the network seems misplaced. If all it takes is misconfiguration of random devices that join the network to take it down then you have a larger problem than these devices.

Since there is no way to police this and 'wack a mole' for billions of devices is not a practical strategy this security focus on IOT devices while nice does not address the core problem of vulnerable networks and ddos. It distracts and diverts from it.
It's complicated because the internet is a complicated(and I'm no expert)- but, it's not good, but it's not insurmountable. The big issues today are: lots of network attached compute, lots of types of traffic, highly highly distributed network. There are numerous ways of mitigating DDoS, today a lot of it is via BGP route announcement[1] - although we've seen folks using BGP in questionable ways to mitigate DDoS recently[2]. As more and more of the internet becomes software defined (like SD WAN sees large global rollout)[3] more and more granular but non-disruptive control will be enabled. To answer your question about google, their DNS is probably resilient enough to deal with a pretty huge attack but who knows really -- In my dream world we get some good neural networks built and deployed to the edge watching for unusual traffic patterns and disrupt them. It used to be biggest pipes win, I don't know that will continue to exclusively be the case.

[1] http://www.enterprisenetworkingplanet.com/netsp/article.php/...
[2] https://www.youtube.com/watch?v=LFJzu0AFDpU (Dyn Engineer gave the talk)
[3 ]http://www.rcrwireless.com/20160408/telecom-software/using-s...
Do you think this is caused by selling directly to institutions, rather than the consumers of the application?

I know there are a few products oriented around specific accessibility features that would be sold directly to the people who need them (e.g. tty devices), but it seems the only progress I've seen in this area in software projects was for §508 compliance.
> If one really believes this, I have a very hard time understanding how they can believe dragnet surveillance is an important issue. After all, nobody is really getting hurt, except in the places where they can already get hurt just for chewing gum in public.

Why is that so hard to reconcile? You don't draw a line between individual privacy rights and those of government officials?

> So why not let the government search everyone's email for signs of terrorism?

If you're going to go that route, take it one step further and ask: Why not have a camera in everybody's house to prevent battery?
>With software, it is especially hard. Especially as you go deeper and deeper into the components. At the UI level, it might seem easy to say what is the amount of flexibility you need. When designing a common utility or infrastructure piece to be used by everyone in a large company, it is much less obvious.

There's a relatively straightforward approach to this that works well - simply don't build in flexibility until it's explicitly required or it's very, very obvious it will be required.

When you're engineering mid-tier and back end the requirements can be most easily ascertained by doing the upper levels that depend on them first and working your way down.

I'd estimate that 9 out of 10 times when an engineer tries to predict and pre-empt future requirements they fail and that failure is often expensive not only in wasted time but in useless extra code to confuse maintainers (and new space for bugs to grow in).
The take home point I had from this article was that the requirements of will determine what you need to build. If this is a startup with minimal resources, the requirement is that you need to create something fast to see if you can solve a problem. At that point you might take those learnings, throw away the code and build a more extensible and robust version 2. The problem I often see is that people over engineer based on a set of requirements which assumes that the problem you are trying to solve is the right problem to solve.
I suspect that quite a bit of the over-engineering I have seen was driven by the personal agendas of some of the developers: turning a boring, run-of-the-mill project into something that feels like you are working on the leading edge of technology; "I have learned all this stuff, now I am going to show I can use it"; the misapplication of design principles for large projects to small ones; resume padding. It is not done by those programmers who struggle to get anything done or by those who always do the least they can get away with out of laziness; it requires a certain level of competence and is driven by ambition.

These motivations seem to be behind many of the almost constant calls for rewrites, but rewrites with no better justification than this rarely turn out to be a good use of resources. It is particularly galling to see a rewrite that is no better than the original.
Exactly. Even the famed homakov's company delivers keys via HTTP: http://sakurity.com/contact this BS about HTTPS providing the illusion of security is nonsense. It's much harder to even do a protocol downgrade attack (and we have HSTS lists for those!) than it is to replace a single endpoint or key of a HTTP connection.
Point is, could you have identified Renaissance Technologies in 1994 as one of the few companies to beat the market? If not, then your odds are better going with an index fund.

At this point, because of Renaissance Technologies' success, their fees will likely offset the gains they'll net you.
Google Replicates “Silicon Valley’s” Image Compression Algorithm
What "government officials" are you talking about? Wikileaks leaked, wholesale, the personal information of millions of Turkish citizens. For that matter, in its attempt to sway the US elections, Wikileaks dumped personal emails from random staffers --- not the John Podestas of the world, but the one-step-above-intern people making $40,000 to do public service work. Not just their work-related emails. Their personal emails.

What part of taking $40,000 a year in salary from the government entitles Wikileaks to the contents of your personal emails?

http://lessig.tumblr.com/post/151983995587/on-the-wikileak-e...
Am I the only one who hates the GPU form factor? Basically, I guess most people just want a co-processor box that they can attach to, and place on top of their PC. And link another one to it, et cetera. No clumsiness with power cables inside the confined space of the PC. No running out of space after adding 3 units. (GPUs occupy two PCI slots because of their bulky size).

So I have two questions:

- Do we really need the speed of PCI to connect to GPUs, or would a lower speed connection (USB 3/firewire) be sufficient for most computational applications such as deep learning?

- How would the performance of these deep learning frameworks scale as we add more and more units?
So your strategy isn't, "buy the whole market", it's "buy the market as it existed in $current-year", which misses all the new stocks that come out. (Also it assumes you have a fixed amount to invest and never want to invest more)
Great video. Thank you for posting.

Not a scholar of ancient history nor anthropology, so I'm inclined to gloss over the social mechanisms. What is fascinating to me is the application of "systems collapse" theory.

I'm thinking of two contexts. On the one hand there are complex systems; Systems too large for humans to comprehend in total. This inclines us towards abstraction, dimension reduction and model-theoretic approaches which only simulate effects.

While on the other hand we have sudden collapse of complex systems. Popular examples which come to mind include Malcolm Gladwell's "Tipping Point", cascade failure (ex. Collapse of the World Trade Center, multiple organ failure).

Now I can add 1177 BC to my list of examples.
As some of those stocks grow and some shrink, you'll end up overweighted in certain categories and no longer diversified.
The C++ "community" has always been great at talking and presentations.

The reality is this and it is getting worse with every new feature:

http://yosefk.com/c++fqa/

That said, I'd love to use Ada.
Makes sense indeed. GP means generic physician? Thanks.
Any hints at all would just give hackers a place to look for the bugs, before they are fixed. Just the existence of this email gives quite a bit of information (that there are a bunch of serious holes to be found).