skysight-inc/HackerNews huggingface dataset:
Going even further, another way to interpret the 1st Amendment is that it is the federal governments responsibility to protect those freedoms, and that it would be well within the power of Congress to enact laws prohibiting the censoring of free speech, even on so called private platforms. This sort of thing has been done in the past, for example by prohibiting discrimination based on race even in private establishments.
How do you handle cycles? I've seen discussions on places like /r/rust where people didn't seem to have any pleasant answers.
uWS as your next WebSocket library
Generally you should be fine as the banking industry is awesome in London. Culturally you should be fine (assuming you're American) - people are pretty friendly.

Only words of caution are to see how Brexit affects the industry there. It may become less attractive in the coming years, and we're about to experience inflation etc which will affect your pay and quality of life.

Flats are super expensive in London. If you head up to Scotland as you mentioned in a comment then you'll get far more bang for your buck. As a Scot I'll vouch for us being extremely friendly! Culturally different to England but you won't have any issues fitting in.

On the whole though, the UK is great fun and very friendly!
"Hooray, somebody has acquired the company that makes a product that I already considered perfect"
-- Nobody, ever.

I've only every bought one Cherry keyboard. 15 years ago, used daily still. I think that's their main failing as a business. They're too good.

I just hope their new owners don't try to fix this.
Is there a page somewhere that maps these passwords to corresponding devices? Essentially a list of what devices are affected by this botnet? I don't think anything I own is affected, and I monitor my network pretty closely, but would like to double check. And make sure not to buy any of them either.
The writer needs to know Kierkegaard better to be writing such articles. That was a puff of air. Whereas Kierkegaard is more like a rock against your head, smarting with pain.
I don't want to deal with more emails. It just encourages people to send more. Mostly, I prefer other channels. That seems to be the direction communications are heading...pull rather than push, links rather than content.

Anyway, my favorite way of dealing with emails is ignoring them.

Good luck.
Illegal in which country? Botnet's span is unlikely to be limited to USA
only.
The winding path of being a developer (too real)
> Individual stock prices would not reflect the true value of a company.

I would argue that this is already the case.

I invest solely in market-wide or top-75%-of-market-caps strategies (in stocks), because they're the only strategies that seem to accurately reflect my opinion of the markets:

1. The game is rigged.

2. People are dumb. (Especially me.)

Analysis of those strategies seems to indicate that they outperform even (traditional) index funds over long periods (likely because they're quicker to respond to risk/opportunity during transitional periods, eg, a new technology coming out). I like to think it's because my premises are true, but there's lots of other premises that lead to the same model of investing, so it's hard to say. (I think of them as a really diverse index fund, so at some level, it's really just the advice that Warren Buffet gave about long term investing.)

If everyone used this strategy the market would... basically do nothing once a company IPO'd, because everyone would hold a portion of every company forever (creating no selling once the initial bidding on IPO was over). That's not necessarily such a bad thing, because it would remove a lot of the noise that boards respond to while still incentivizing (healthy) long-term growth (because the only way the stock increases in value without trading and the current market gambling is from the underlying asset -- the corporation -- increasing in value, and distributing that as payouts or buybacks). There still is a valuation mechanism, however, because the passive funds do need to buy and sell when new stocks appear or someone is looking to change a position (which, is every IPO plus whatever is needed to generate cashflow from the portfolio), and how they negotiate that provides a value on the stock, even if they're just rolling shares they control between pools and clients of their own.

However, we'd still have the whole pipeline of pre-IPO private ownership, which definitely wouldn't settle in to the same kind of lock-in, but already uses the same kind of invest-across-the-board strategies.

So in short, I'm actually very unworried about the effects of main Wall St stock markets settling down due to most money being passively invested in long-term growth strategies, because it actually deincentivizes a lot of bad behavior on the part of trading firms. Much harder to execute your fraud if most people aren't going to react to it in any capacity, and won't be closing out their positions for 20-40 years, if ever. It's also perhaps easier to get a case to stick if you have basically every investor to choose a client from, because they'd all be impacted by those actions.
Not just actively managed funds. There will always be proprietary traders speculating with their own or their employer's capital. As long as some kind of active investors make up ~10% of the market that will be sufficient for price discovery.
Weight Loss Leads to Increase in Appetite
Not as silly a suggestion as it sounds
I don't know much about actuarial math but I think this number is for insurance policies more than anything else. It could be based on something like the rate of hardware failures they experience now amortized over a long period and many customers, and then adjusted to account for redundancy.

As a very simplified example, imagine they are expecting to lose 2 servers every day, this percentage might be the probability of those two servers storing the same exact object (and thus, losing it irretrievably).
PHP also offers a nice way to write templates without even having to use echo and without braces:

<?php foreach($x as $y): ?>
<h1><?= $y->title ?></h1>
<?php endforeach; ?>
> Why wouldn't they do the merge now instead of 48h before release

The idea is not to publicly disclose the vulnerabilities with too much time remaining for a release. I guess that two weeks are mostly required so as to minimize the time taken by different distros to release updates.
Many European cities simp.y treat it as such: You can rent out AirBnBs if you have a license.
> they are obviously not worse, in some places are much better

Not sure why it is obvious, especially after Alex Biryukov et al reverse engineered S-Boxes of Streebog and Kuznyechik [1].

If you suspect Dual_EC_DRBG kind of weakness, why not use some algorithm without magic constants like Speck [2]?

[1] https://eprint.iacr.org/2016/071.pdf

[2] http://eprint.iacr.org/2013/404.pdf
All of the arguments here seem to assume corruption (even extensibility is a form of it), and to treat it as a thing that can be fixed by the decompressor. It seems xz isn't ideal in that case, but none of the others are great either. As mentioned elsewhere in this thread, if integrity is your primary concern you should use PAR or some other error-correction mechanism. If you just need a binary integrity indicator you should have separate hashes published somewhere.

xz wasn't chosen for its archival integrity AFAIK, it was chosen for its size. Package distribution ought to spend as much resource as practical to reduce bytes over the wire. Size is why bzip2 "won" over gz despite being many times slower and requiring much more RAM. lrzip would be my first choice for maximum compression, but its downstream resource requirements are far too high vs any of the others, so from my experience xz would be the answer anyway.
That's because your browser sucks. Try Opera Mobile or something similar. Good browsers can reflow text to fit whatever screen size they display at. This website has zero CSS related to layout, so it is your browser's duty to render it nicely.

It boggles my mind why reflow is not one of the most important and most highly regarded features of any mobile browser.
Packets can arrive out of order, yeah. TCP includes ordering information, so lost packets can be retransmitted and in the end everything'll be in proper order.

As for UDP, I'd tell ya a UDP joke, but get it you might not.
Mumford had a similar view on the fate of cities.

"...the blind forces of urbanization, flowing along the lines of least resistance, show no aptitude for creating an urban and industrial pattern that will be stable, self-sustaining, and self-renewing. On the contrary, as congestion thickens and expansion widens, both the urban and the rural landscape undergo defacement and degradation, while the unprofitable investments in the remedies…serve only to promote more of the blight and disorder they seek to palliate."
It looks to you.

IMO secure software comes from knowledge and care as much as from a safer language, if not more. But then there is performance, in which what no "modern" "safe" language even comes close to C.

>Meanwhile the CVE database maintainers and black hats appreciate this mentality.

And how much of CVE-worthy software is not written in C ?
https://www.youtube.com/watch?v=I8LbkfSSR58&list=PLbgaMIhjbm...

I love this series
Good point. USA, specifically, as that's where I live. I wonder if I'd be prosecuted if I tried to help combat this by creating a white-hat version of the software.
She and Obama were referring to cyberattacks that cripple critical infrastructure. Like shutting down power grids.
100 Blocks a Day
to brute force the top 100 passwords, only the usernames were really required. can easily bruteforce the top 100 passwords on a live site.

you are right that it's now very easy to use dictionary attacks now, on all the credentials offline. and those with super weak passwords will have their accounts compromised.
That's just cop-out. I'm not criticizing the views of 'mei0Iesh, just trying to understand them, in order to reflect on my own.
With enough money invested I find Betterments fees very reasonable. Especially when you consider features such as tax loss harvesting. Is that something that requires little to no time if you actively manage your index funds? Maybe there are tools which aid you with that?
Canada, EU Trade Deal Still Has Life After Extended Meetings
Show HN: Doc42 – Simple documentation tool
Privacy Makes Workers More Productive
Terrible title. I came here hoping for mystical stuff like,

http://www.personal.psu.edu/~tms9/Therapy_Waters.html

Also. Look everyone! Programmable electrons!
I suspect that if there is a big bond crash which is likely to happen a lot of those invested in index funds that robotically invested in bonds will be taking some big losses.
The Trust
I'm curious, what aspect of this do you think missed the points which Kierkegaard tried to make? I'm not sure that I understand your metaphor and analogy.
Even if you assume an overwhelming court victory (by settlement or judgment), there will still inevitably be tens of millions of vulnerable devices out there. I'm betting most of these products don't have anything in the way of automated remote patching.

And if these bot herders are smart, they're changing the vulnerable configurations or adding rudimentary ACLs so that they can keep the bots to themselves. White hat IoT-fixing scripts may not be too effective.

But yes, court action is probably necessary to prevent the problem from getting much worse than it already is.
The article's right that you probably should not use xz (or even any similar formats) for archival purposes.

However what's totally awesome about xz as a container format is seekable random access to compressed files. I use it to store infrequently used disk images, which I can boot up without even decompressing them. (https://rwmj.wordpress.com/2013/06/24/xz-plugin-for-nbdkit/)
Exporting production to less developed countries inarguably raises the standard of living in those countries. There is a cost in the form of increased risk from some sources; manufacturing accidents, pollution, etc. However, this is more than offset by the increase in food production, lifespan, medical care, and everything else that comes with being a production economy.

The fact that you can sit there on your computer and say "oh, those poor foreigners would be so much better off if they just let me decide for them so I could keep them in a third-world subsistence farming economy" just indicates that you are from a culture that's forgotten what it takes to modernize and improve. You can't build an industrial base off nostalgic dreams of agrarianism.
Is there a page somewhere that maps the passwords to corresponding devices? Essentially a list of what devices are affected by this botnet? I don't think anything I own is affected, and I monitor my network pretty closely, but would like to double check. And make sure not to buy any of them either.
It actually seems that Søren may have been tripping over his own ego while falling prey to a false consensus of his own shortcomings. Perhaps, he was just socially awkward. That's not such a bad thing, once you admit it to yourself.

He referred to his community as "petty". This is much like somebody who disagrees with what other are saying (e.g., in an online forum like this), and thus dismisses the community as a group of idiots, rather than using the disagreement as an opportunity for introspection.
No sure why you were down-voted, but it probably has something to do with connotation. I agree though -- library maturity, tooling maturity are also very important factors when it comes to productivity. A steep learning curve, however, probably has less to do with productivity and more to do with adoption, which I think is what the parent was trying to get across.

But, of course, adoption rate can indirectly impact library and tooling maturity. :)
There's an aspect of self-fulfilling prophecy to this. Higher demand leads to higher prices, and as more money flows into indexes the stocks in those indexes are going to rise relative to the rest of the market. Thus their earnings become harder to beat.
Believe me, Jim Simons didn't rely on luck. He's a mathematics genius and rather creative. You could say he was lucky in that he sort of pioneered the entire algorithmic trading thing and was well ahead of the curve because of that. It was simply low hanging fruit for a long time before others began to catch on.
So they should only leak documents if they also have leaks for their subjects' opponents? That's silly.

They have a store? Large sites cost money to run. Shocker.

They play the PR game? They have to because their opponents use tactics to drown them out. They also know the mainstream media has a very short attention span and the leaks would never be talked about again once the news cycle changes. Dropping all the emails at once would be foolish.

If you have a problem with it you are free to start a competing outlet...
Russian aircraft carrier so unreliable it sails with its own breakdown tug
There are lots of refurb Model M's around if you want one. Or if you want a 'new' one, you can get Unicomps (pckeyboard.com) that uses the same buckling spring tech.
Deep Reinforcement Learning: Playing a Racing Game
That's not how business works. If you can show that you saved the corporation massive amounts of money, and that "the incident" was a one-in-a-million that would _never_ happen to the new corporation, then of course they will hire you for management. See: HP, Yahoo, etc.
But it's a very slow process: a majority of NYC residents live in below-market-rate housing. And Bill de Blasio's mayor campaign was anchored on preventing "affordable housing" units from leaving the pool, so the rate of decrease may have slowed down.
I think if no water leaks away it looks like it can be infinite, but the article mentions lots of leaks. Also, the amount of water doubles after AND, that could escalate into a problem unless excess can be removed somewhere...
True but some of my active funds correctly saw the problems with the UK banks and got out before the big losses an index fun would have had to buy those banks and taken the loss.
That interested me as well. Is there another system to record biological ancestry (potentially important for medical reasons), child custody (and who decides which gets custody in case of a conflict), and child support?
Wikileaks seem to be claiming the attack for their supporters here: https://mobile.twitter.com/wikileaks/status/7895744362194493...

Any evidence to support that?
It also could have something to do with the socioeconomic landscape where a vast majority of individuals simply don't have the means or ability to contribute or even participate.
> This article started with a series of posts to the debian-devel mailing list [Debian], where it became clear that nobody had analyzed xz in any depth before adopting it in the Debian package format.

Debian source packages are cryptographically signed. Debian archives are also cryptographically signed. There's no error-correction, but you don't want that. You just want to verify integrity every time you make a copy, and re-copy if it didn't copy right. And all the tools do that.

I remember this discussion on debian-devel, and there were a lot of people pointing out that the author's guesses at Debian's threat model had little to do with Debian's actual threat model, at which point the author became frustrated.
PHP can only be used serverside, no? Can't write single page apps.
> Seriously, if AirBNB were a free market (and it is), what these listings are doing is allowing more people to come into the city and spend their own money on services throughout the city.

thanks to airbnb i was able to visit nyc for ~10 where i spent a ton of money between restaurants, coffeeshops, random shopping and broadway shows.

the wife and i were thinking about returning next year but without airbnb (and all the freedom we have thanks to it, like cooking our own meals) i don't think we will. i'm sure i'm not the only one thinking like that.
It's unbelievable how many people in this thread are supporting AirBnB with ridiculous arguments like it's not a business or the government can't regulate what you do with your house.

Isn't there a point where the quantity of astroturfing becomes counter-productive?
Yeah, seems like a trivial fix to me. Use Par2.
WikiLeaks urges supporters to 'stop taking down the US internet'
Second Edition is online and follows Racket's versioning:

http://www.ccs.neu.edu/home/matthias/HtDP2e/

I have a hard copy of the first edition. The square format single column layout reduces readability. But the methodology seems to be based on sound engineering principals.

I'd probably recommend Kiczales's Systematic Program Design MOOC as a good extension of the HtDP program methodology. https://www.edx.org/course/how-code-systematic-program-desig...
ATI is taking an interesting approach with this by mounting M2 drives onto the video card [0].

http://www.anandtech.com/show/10518/amd-announces-radeon-pro...
Wouldn't that knowledge be accounted for in the individual stock prices?
This approach seems to work without DNS rebinding: https://thehackerblog.com/sonar-a-framework-for-scanning-and...

Edit: Note that the example does try to do some DNS rebinding on the router, but that's the end goal. The attack itself doesn't rely on rebinding. It does require "already logged on to the router" users, but I suspect an attack using default login credentials is possible as well.
Not exactly, as money flows to those stocks, they become overpriced, and will under-deliver returns in the future. On the other hand, other stocks will be undervalued, giving better returns in the future.

So it is a self-correcting system, not a self-fulfilling prophecy.
> Then they are couple together. And then you will tend to design your API in a way this particular application is well deserved.

We have a server which exposes validation logic as a generated JS library (no server-side JS yet but we plan switching to Typescript) and that is used across many (more than 10) clients. I don't see any coupling. Changes in your models break the API regardless of you sharing anything.
East Europe there. My car dealer did all the registration and insurance stuff. Came in once, signed the papers. Came back few days later, picked up the car with insurance and papers in glovebox, numberplates attached. They did have to go to gov agency to pickup the numberplates for me though.

When selling my old car, I gave the papers with my names to the new owner. Uploaded our printed&signed agreement to gov-run website. the new owner did the same. He had to go in-person to pick up the new papers with his name. It'll get even easier next year, new papers will be mailed to the new owner.

What is registration renewal? Over there, as long as you have valid insurance and roadworthiness test, you're good forever.
You pine for the days of long form communication and yet you can't even correctly determine who the source of the tweet you quote is (hint: not Donald Trump).
Basically then, event sourced rather than OO CRUD. Not surprisingly, it makes things easier when distributed, just like in micro-service architectures.

I like this a lot. England's Common Law system was created as a means for the powerful to remain powerful, not because it made any sense.
Am I the only one who finds the notion that "the free market will solve this problem" by using the court system (an entity of the state operating on laws passed by the government) at odds?
Indian Banks fear a security breach that affected up to 3.25M cards
200€ a month?!

well, it's a start.
My first employer (Visio!) had aeron chairs for everyone. I fell in love with it then.

The most important part (indeed, all I care about): The wire mesh seat. No more sweatty butt!!!

I bought some imitations in Thailand for about USD $200, kid of meh but had the wire mesh seat so +++

If you are in the states and have the same feature needs as me, Costco sells a faux Aeron (vinyl "wire" mesh seat and back) for $100. Works for me, but my wife is super picky about the rest of the seat ergonomics, so she hates it.
I think you missed that nobody gives two shits because the contents are completely pedestrian except to conspiracy theorists who come up with conspiracies out of absolutely everything. Example: http://www.thegatewaypundit.com/2016/10/wiki-10-draft-in-pro...
53% of Friendships Aren't Reciprocal
I gather that it may vary by state, but in some places in the US it's apparently not even required to register births--which can cause problems for the children involved later on:

http://www.radiolab.org/story/invisible-girl/
Disclaimer (since it's buried in the middle): Burton Malkiel is CIO at Wealthfront, one of the most popular robo-advisors.
If I remember correctly, the DS game Bangai-O Spirits used sounds to share player-made levels between consoles.
Actually, I don't think this is a valid interpretation of the First Amendment, which is written specifically to circumscribe the powers given to Congress, beginning "Congress shall make no law..."
even after 'zooming in'?
it didn't create a new viewport for me after doing that that.

on opera mobile: are you truly comfortable to use a 'default on man-in-the-middle-ware' from china? (it proxies everything and compresses it, to save data bandwidth)

i stopped using it in August because of that. might've been too paranoid though.
ZPAQ is a defined standard format which embedds the decompression algorithm for each block as bytecode into the archive. One can define a transformation (eg. LZ77 or color transformations of a picture) and compress this data through context mixing and arithmetic coding.
It uses checksums but I can't judge rightnow whether there is some issue implied concerning bitflips.