skysight-inc/HackerNews huggingface dataset:
> blind optimism on all things technology or new. Often older ways have merit too.

I've seen plenty of "if it ain't broke don't fix it" in the comments and complaints about engineers always trying to use the newest technology.
That doesn't make any sense. The derivative products were rated AAA. Banks bought these products and put them on their balance sheets. Why would they knowingly throw away money? Three investment banks totally collapsed, and several more barely survived.
Rita 3.1-beta2: From the next release on, Krita will officially support OS X
The best course I've seen is this: https://www.cse.unsw.edu.au/~cs9242/current/

From the team that led creation of seL4 and Genode.

Superb and cutting edge design & theory.
Medical error is third biggest cause of death in the US, experts say: https://www.theguardian.com/society/2016/may/03/cause-of-dea...
I'm guessing it's five characters so people don't just use their four digit PIN. I don't have any explanation for why they would limit it to five characters though, or why it has to be alphanumeric.

That said, Comdirect seems to offer regular passwords or six digit PINs and Bank of Scotland (in Germany) seems to also offer regular passwords.

But there are plenty of other offenders. For example my energy provider E-wie-einfach requires a mix of alphanumeric characters but forbids pasting and autofill (the latter of which luckily Chrome simply ignores).

I don't know what idiot ever came up with the idea that disabling paste makes logins more secure (only justification I've ever heard was about preventing brute force attacks, proving an utter lack of understanding of the technology involved) but sadly it's still a thing and it still leads to people using trivial and easy to type passwords.
Its a shame that he couldn't get Linux installed on it (I'd guess some HW issue, maybe memory failure). Because I would find it quite surprising that the first gen Intel Mac Mini would really be faster on a level playing field. Just the amount of RAM and beefier GPU should tip the scales for G5.
Default passwords need to be made illegal. We all try to think of technological solutions to these problems but this really is a problem of policy not technology.

The factory default setting should require a password to be set before the device functions.
Rich people pay less attention to other people – Quartz
No comment on the content, still making my way through it, but there's a ligature/glyph rendering issue with all lowercase "if" sequences which is distracting. If the author is reading the comments, maybe they can fix it.
Apple toolchain is not the same you download from llvm.org.
The "standardized guidelines" sometimes vary -- mostly dependent on the nature of the vulnerability -- but 90 days seems to be a pretty common timeframe. That's what Google gives others before they publicize the details, for example.
Great app. Are you working on Android version as well?
Just some basic rules like:

- no default passwords

- no access from Internet until explicitly enabled by user

would make a world of difference. We'll still have to deal with bugs, but this would go a long way.
But it must be said that GPU evolution, and that password cracking software developers are naturally going to go where the passwords are, that this type of simple password design does NOT work anymore.
Its called volunteer because there is mandatory service or conscription in other countries.
> we'd have to match it

But how is that?

Is it that the party with a lot of money can file many briefs and that the other party has to respond to them? (and what if they don't? Do they lose by default?)

And could it not be fixed by limiting the number of possible briefs, by law (depending on non-hackable criteria such as, amount of damages awarded in similar cases, etc.)?
On the other hand, if you are a startup and focused on growth, you're one step away from losing your current customers. What if your payment app gets compromised? Or the whole users database gets leaked and someone spams them with targeted messages about your company? (this happened to mtgox for example)

There has to be a balance. If you don't care about security, you'll fail. If you don't care about new features, you'll fail. If you don't care about retaining current users, you'll fail. etc.

One thing you don't want when you're focused on growth is your company in the news because someone dropped your whole database on pastebin.
Explaining Dirty COW local root exploit – CVE-2016-5195
Many-body physics and the capacity of quantum channels with memory [pdf]
Yes, using any tool or language that came out after the commenter started programming is "hipster".

And you see a lot of xkcd 927 and "I can't help thinking effort would have been better spent on an existing project" when someone writes any program of any type where other examples exist.
What about other countries?
Experience, Apple official compilers aren't 100% equal to what you can download from llvm.org.

For example the set of available optimisation passes, or for a long time not all Objective-C features were available on on the public clang one.
These studies do not prove that medical errors _caused_ these deaths. It proves that people who died had some sort of medical error in the weeks leading up to their death.

As it turns out, people who are going to die soon get a fair number of medical 'interventions', which means there are many opportunities for errors to occur. This inflates the error rate for these patients. But if we're talking about patients who are going to die very shortly anyway, did a nurse accidentally giving them a double dose of their evening antacid really hasten their death? Probably not...

This is not to say that there aren't preventable deaths due to medical errors. There absolutely are. But studies like this seriously inflate the numbers...

I'd recommend the Healthcare Triage video on subject: https://www.youtube.com/watch?v=1JkFN_2mzR4
IMO it's already a bad practice to have SSH listening on a publicly accessible interface on port 22.
Especially mine.

The wealth of technical knowledge available here is incredible, there's nothing else like it. Thanks guys!
> easier to discover,

How can that possibly be true? A web app can appear in a search engine. A native app's website can appear in a search engine and in a platform App Store.

> easier to update,

because "clear your cache and reload the page" has been said by no frustrated support/technical staff, ever?

> easier to manage (since you only have one version in the wild you have to handle),
Except when there are cache issues. Or when you have multiple servers and need to upgrade them without downtime. Not to mention all the stuff required to host your app needs to handle enough scale to load not just any potential server side data but also the entire ui, possibly every time someone loads it (opposite of the cache problem above). Must be easier though, I've never heard of any web apps being unavailable because the servers were overloaded.

> easier to launch (especially for first-time users),
How is typing a or clicking a link easier than tapping/clicking an icon?

> easier to use from different platforms,

If your browser on your platform is supported. And you have the right version.

> more secure (debatable, but since the browser has huge companies working to keep it secure, and your native app that's just opening sockets doesn't, it probably is true)

This is a joke, right? Did you suddenly forget all the huge leaks of massive amounts of information from hacked web apps? Pretty much no web apps use local storage exclusively. So your attack surface is not "the browser", it's the browser, the network stack, the network itself (see: ddos on Dyn, Comodo/WoSign bullshittery to name a couple from the last month alone), your server host(s), your server os/stack, your server side app logic, your server side db/storage stack.. Do I need to go on?
Generally what I do is put something tangentially related to the question.

For example, "What's the name of your high school?" would be answered with something like "Khan Academy" (the name of a site that helped me) or "Mr. Jefferson" (A teacher, or best friend)
I follow many people on twitter who dislike HN. Reason for this is opinions here are alsmost entirely from white males with money.
Interesting point. Certainly, the people who put the products together didn't do the math correctly. I think the major problem there is the assumption that homeowner defaults are independent random variables. In such a case, the high credit ratings for derivatives of subprime debt contracts would make total sense. However, if home prices decrease simultaneously and people go underwater on their loans, then suddenly there can be a massive correlation event where even the really highly rated derivative tranches are in danger.
It's been a looong time ago but I remember when some instant messenger application was found to be performing authentication client side -- i.e. "Hey server, I'm $user. I promise!" and you were in.

I want to say it was Yahoo Messenger but my memory could very well be lying to me.
HN comments need a vertical bar on the left side to indicate indent level. i find it hard to skim conversations in narrow screens.
Whenever labels do this, they offer egregious terms that render the business unsustainable.
> cannot take high-speech train

This is one of the best Freudian slips / unintended puns that I have ever read. Damn right he's not taking the high-speech train anywhere in China by standing on a soapbox and complaining about Big Brother and disrupting the harmony of society.
I think perception of danger = amount of times hearing people die from doing act / amount of times doing act.

So flying is much higher than diving:

People drive much more than they fly (a few times a year vs twice a day) and hear about air-crashes (9/11, Malaysia Airlines) more than car crashes.

It's the brain playing games with us
They have both.

I have a "Symantec VIP" co-branded Yubikey that I've used with PayPal for years along with an authenticator app on my phone as a fallback.
> Before praising something, makes sense to tell people what it is.

I don't know where you've been but anyone who is even remotely invested in the npm ecosystem probably knows what Yarn is at this point.
>I'm just trying to understand why an anti-DDoS firm would be DDoSing other firms

It's basic 'eliminate the competitors' behavior.
One way is to look at total revenue of IT/Software Industry at present and compare it with 1981. My guess is that even after adjusting for inflation it would be more than 100 times growth. Many of the present great companies were not even formed and some had just formed.

I started working in the mid 90s. Joined a company which had few 100 employees, when I left it had around 300 times more.
From the article:
He said that in the aviation community every pilot in the world learns from investigations and that the results are disseminated widely.

“When a plane crashes, we don’t say this is confidential proprietary information the airline company owns. We consider this part of public safety. Hospitals should be held to the same standards,” Makary said.

Seems like this number would be higher if they also included HAI's (healthcare associated infections, about 75K additional deaths): https://www.cdc.gov/hai/surveillance/

And it's right, the rates of what are essentially malpractice haven't changed. Arguably despite spending more, we get worse care: http://www.npr.org/sections/health-shots/2013/09/20/22450765...

If infections are included in the numbers then the US is only slightly above average: http://www.euro.who.int/en/health-topics/Health-systems/pati...

The WHO suggests by reducing HAI, the EU could reduce deaths by about 95K/year vs. US's 75K (actually normalizing by population makes the US's number look really bad..assuming stats apply to entire EU's pop of 508-ish million and the US's ~308 million).

I can't find in the cited study (original article) if they included hospital acquired infections like the WHO does. If they didn't then we've a lot of work to do. Likely will never be an issue though, unless we treat the med profession like any other professional service provider with the power of life and death. We need to open the books on investigations, share data publicly, and likely provide more oversight. Also...seems like a wonderful area where big data and ML could contribute to meaningful improvements...
>which is the reason you'll find very few soundly designed cryptosystems that do this.

Nearly every secure system I've dealt with (in the military side) encrypted at the network layer (VPN) and they sent encrypted files over that channel.
So why are doctors paid so much, it obviously has not improved service any?
I'm guessing the author tried to convey a stereotype about the comments in the first paragraph. Then tried to debunk that stereotype in the rest of the post.

There definitely could of been a sentence or two to help transition between the two as it felt odd to me as well.
NPM is so Oct 10 2016.
It was probably a typo, meant to be a - and typed a diaresis instead. Lots of keyboard layouts have easily accessible diareses.
OK so how difficult will it be to convert all the shell tools to ARM? (including Open source tools used under Linux, BSD, etc..)

Am I going to be able to just "make install" for any package I download?

Since it's going to be the Mac, I need the entire XCode development environment there, along with things like Postgres, Python, web servers, etc..

(I don't know what percentage of open source projects have already been converted to ARM architectures...)
You're aware of "forming, storming, norming..." etc? It's a well-recognised problem. Smaller "abrasive" teams are very off-putting to some people; larger bureaucratic organisation are equally off-putting to others.

I suspect no one structure is optimal for all contexts.

Have a look at the design of the new Crick Institute in London, designed for serendipity. Or Facebook's attempt at an open plan office (probably not a great example, but you see the idea). Maybe even Taleb's ideas about anti-fragility (despite my finding him a terrible, turgid author).
This is a good thing.

If all causes of death were medically preventable (which would be awesome), by definition preventable medical errors would cause 100% of deaths. (Since they could have prevented it and assuming it's an error not to.)

It's simple logic. In other words, the better the standard of medical care, and the better the state of medical science, the higher this number will be, right up to 100% if medical science has an answer to everything. It will never be 100% of zero, as obviously in practice not everything will be done perfextly - but medical error is the delta between theoretical standard of care and actual outcome. The better the theoretical standard, the more deaths must be deemed errors.

It can still be far better than if that were not the standard.
I think you're referring to RSA's SecurID? That was roughly five years or so ago.
What is this "maybe" in response to?

Going to the doctor or taking a medication, even if the _chance_ of risk is low, has a downside that is a lot worse than the upside, except in cases that are life-threatening or have potential long-term health downsides.

So next time you're thinking of taking something to fix your acid-reflux, maybe try listening to your body and changing your diet, instead of risking that the drug you take to mask the symptoms is the next Nexium.
I prefer cynicism over unthoughtful, inconsequential comments that floods several discussion forums that I have come across. "Nice article", "Great write-up" and the next thing you know, you have created a place where people are only interested in submitting their articles and getting it upvoted rather than make meaningful contributions.

People want to make good contributions here and that's something that differentiates HN from other news aggregators.
When I worked with the HN post data, I noticed that some years ago HN users had correctly predicted the "Show HN" projects that later got funding. Those projects had more upvotes.

The more recent data has no such connection. It seems that the influx of users reduced the quality of judgement.

So one way to improve HN submissions and comments is to weight points by the user's tenure on HN.

I also suspect that early comments dominate late comments by the time factor alone. The sorting algo gives a brief advantage to new comments, but old comments are more visible. A post on the front page gets 30+ comments in the first hour, and latecomers can only post into the void. To address that, long branches could be collapsed by default, leaving only 2-4 visible messages per branch.
Ah, of course.

I have long wondered why (Common) Lisp didn't take over the world at the end of the 90s to the beginning of the millennium. :-( They have a GC, but so do Java. There were good compilers since at least the 80s.

But the lisp variants aren't really a system programming language that will replace C. (You can do bit fiddling, but... here the GC comes in, especially for embedded applications with KB of RAM. And so on.)

>> I don't see any value in using scripting languages for anything other than system administration

The point with scripting languages is that you can develop quickly. For applications where most time is in the DB anyway, they make a good solution. (I.e. for the last 20 years, system administration and web development.)
I'm at least partly serious about this... how about COBOL?
Agree. But I am just happy that they added collapsible comments.
A good suggestion, although we should not wish to wholly abandon responsibility for the effects of our words on others.
That kind of errors should better go in github/issues than in ycombinator, so we fix them asap: https://github.com/guerrerocarlos/cachep2p/issues
>It's also probably the only place left on the net where, from comments, I'll find out rapidly, and bluntly with citations, when I'm wrong (and, yes I'm often wrong on the Internet!), usually learn something new on the topic, and sometimes talk with the guy who invented it. My ADHD brain loves the depth that side topics can get explored and being surrounded by people far cleverer than me

This is pretty much why I use HN at all: it doesn't make me feel smart, but I learn new, exciting things constantly.
If this were true, it would merit study. How can a forum that is open to all and used in mostly anonymous fashion, so effectively police the race of users? And how could other less open less anonymous activities hope to succeed in diversity?
You don't get it. At ~1000$/yr, it's almost free, independently of your background, and admission is based on good grades at high school. We do get factory worker's children in the main admission, proof that it's possible. And in addition to that, there are more seats offered to people with low income and average grades at school. Concerning extra-school teaching sessions, nobody takes any, so money won't be a discrimination factor. Concerning housing, if your income is low, the on-campus housing is free, the subscription fee is reduced and they get pocket money. What could we do more?

Society can only ensure:

- Poor people => treated with humanity,

- People who work, independently of their background => be rewarded.

> You betcha my rich fellow students, if they ever did drugs, would get the good stuff, not glue and gasoline.

For those who decided to smoke gasoline, who decided be a high-school shoplifter for fun, or decided to mug other students, then a hospital is the most that Republic can give them, not higher education. Life's what you make it, and society can't offset your own will.
Honestly, this story is just sad. I understand that there was fraud involved in order to incentivize soldiers to reenlist, but it's not their fault; It was the people who manipulated them into reenlisting.

I definitely think in this case the government should "forgive" this debt - and they probably will. VA benefits are already pretty flimsy, our vets have it hard enough.
Because that's the demographic that dominates tech. If you go to any other tech forum that's not a SIG for some other demographic, you'll find the same thing.
Apologies if it felt like that to you. There is no judgement on my part but I do face this challenge while socializing. I enjoy drinking but my body doesn't allow me to. Next day I feel horribly dehydrated and crappy. If I want to stop, I am being told I am too stiff.
Assuming he is indeed "brilliant in his field" and simply not very good at politics, there are tons of places who will happily hire that combination.
The post is dismissive of the value of the majority of the comments, it just thinks there are some that are worthwhile.

It also suggests moving that content off of HN (or at least replicating it elsewhere).
Precisely my point, although I didn't quite get to it :)
I think this is one of my favorite articles demonstrating the application of "everything is a file" principle in Linux. Most people think of files as something with a path, and something you read and write to, commonly in a relatively streaming fashion. But as the article demonstrates with KVM API there is more than that in how files are used in Linux.
Sometimes really good articles don't have lots of comments. In these circumstances, I post an "excellent article!" comment just to give the author some feedback that someone somewhere actually read the article, and they really liked it! Humans writing articles appreciate that.
A prisoner developed a software to manage the jail staff
That's how It's spelled in The New Yorker, for example.
It probably works like strong acid, destroying anything unfortunate enough to not be strong acid on contact.
I am surprised by the sentiment of many of the comments here. Perhaps it is from spending so many years in the academic world, but I have repeatedly witnessed how "conforming" or "following protocol" with hopes of tenure has fostered teaching and research deficits within academic communities.

I don't know the author of this article or his research, but his story is entirely plausible. Tenured faculty can be brutal to those bidding to join the club, often perceiving the most well-intended actions to be threatening. In the end the consequences most strongly harm the advancement of the field and the education of students.
>>That doesn't make any sense. The derivative products were rated AAA.

Those ratings were created as a result of significant conflict of interest. You should read John Bogle's treatise on the subject (he's the founder and retired CEO of The Vanguard Group):

http://johncbogle.com/wordpress/wp-content/uploads/2006/02/P...

"Market participants—now dominated by speculators, not investors—also joined the
parade of miscreants, and our professional security analysts failed to do their job of appraising company balance sheets, largely ignoring the huge credit risks assumed by the new breed of bankers and investment bankers. And let’s not forget our credit rating agencies, which happily bestowed AAA ratings on securitized loans in return for enormous fees that were paid in return by the issuers themselves. (It’s called “conflict of interest.”) Yes, there’s plenty of blame to passaround."
I've been running ARM machines for years (since before the Raspberry Pi was cool).

These days I have no trouble running most common Linux desktop software on ARM. Even Docker works (with ARM binaries inside the containers, of course).

I'd say the only sticking points would be graphics/assembly/hardware-related stuff, and all of them surmountable.
Which completely misses the point, Apple's toolchain is machine-local, it can be inspected, so can the compiled bitcode package, and in the year since bitcode was released (and mandated for watchOS and tvOS) nobody has reported anything which would distinguish it from LLVM's bitcode.

And again the whole discussion is nonsensical considering bitcode is an appstore thing, MAS doesn't use it, it's not a thing on macOS at all.
Google dropped ban on personally identifiable web tracking